last executing test programs: 3m25.116121453s ago: executing program 2 (id=10676): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000007c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)={0x40, r1, 0x11, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x24, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_SET(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="08010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x108}, 0x1, 0x0, 0x0, 0x800}, 0x8000) (async) sendmsg$DEVLINK_CMD_SB_POOL_SET(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="08010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x108}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000000800)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) (async) r5 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1e8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="d0000000190001000000000000000000ac14140d000000000000000000000000000000020000000000000000000000004e2300004e2600000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffffffffffff000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000080d42bdb43b8111500fcffffffffffffff000040000000000000000000000001000000000000000000010100000000000000000000000000000c00150059073500e40c00000c0008"], 0xd0}, 0x1, 0x0, 0x0, 0x40000}, 0x20004800) setsockopt$inet_tcp_buf(r5, 0x6, 0xd, &(0x7f0000000280)="f5", 0x1) (async) setsockopt$inet_tcp_buf(r5, 0x6, 0xd, &(0x7f0000000280)="f5", 0x1) socket$kcm(0x29, 0x0, 0x0) (async) socket$kcm(0x29, 0x0, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x8, &(0x7f0000000140)=0xe9cf, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) 3m24.900325212s ago: executing program 2 (id=10680): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000002800030073797a320000000014000079d20000"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000000000000000000000000000000a19c431c3f27409f7420c0a9dff0a99d00d4787c7131c471221772a93eb3c966725396d93b7c15b60d728f4b168ad0cc00bda459bbb7a4beab9754a894b7879870e3e3232c2efac12d13798c16297905d1901e37463fa1c1a2124c099d7f48776876361c2c3a921fbe753b11475bb87339e1ebe158c10ea03a10ca75366e642fa40b78929c91502cd8b135b7dad52c2e91b63785d2b68a587c1a64e6d37fd4f1c07925d2cd642616110e71001f"], 0x14}}, 0x24004414) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000740)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x2, &(0x7f00000000c0)={0x0, 0x0, 0xffffffff}, 0x10}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r3, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40840, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000d, 0x10, r4, 0x0) recvmmsg(r1, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2120, 0x0) 3m23.977744296s ago: executing program 2 (id=10687): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x1, &(0x7f0000000100)={@_ha_fsid={[0x6, 0x8]}, {0x3365, 0x8, 0x8dbf, 0x9}}, 0x5, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x5}) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27}, 0x94) (rerun: 64) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000300)=@ethtool_dump={0x3e, 0x0, 0x2}}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'dummy0\x00', 0x4000}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) ioctl(r1, 0x8b1b, &(0x7f0000000040)) (async, rerun: 32) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f00000005c0)={0x30, r2, 0x10, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x70}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xb12, 0x65}}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4044801}, 0x8800) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$key(0xf, 0x3, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f0000000240)="80000080e7ff200ee7decd7a000000", 0x9, 0x200000d4, &(0x7f0000000580)={0x11, 0xf7, r7, 0x1, 0xd8, 0x6, @broadcast}, 0x14) r9 = bpf$ITER_CREATE(0x21, &(0x7f00000004c0)={r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x3b, 0x5, 0x9, 0x1, 0x40080, r0, 0x8, '\x00', r7, r9, 0x2, 0x1, 0x1}, 0x50) (async, rerun: 32) sendmsg$key(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) (rerun: 32) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r4) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000000740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x698de0cbc7e9e2af}, 0xc, &(0x7f0000000700)={&(0x7f0000000a40)={0x544, r10, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x2}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0xa}, @ETHTOOL_A_LINKMODES_OURS={0x210, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x85, 0x4, "5f6fbd2700ccf73da2e706969d33b7fead18fe1dee6dcda3c64daa85a9be207be847169ffa060a128b8266b60bb402bbdee5973cd1f6eb24c4fd0335e8884c99e4192ee8d7c5c2a5c3baa4c7cf08e368141d307a5a07c0bf446d5ddc2df4ded0339493c82424307837282e1f39a52ccb3b385c302cb37448c51e08beecc59d70b5"}, @ETHTOOL_A_BITSET_VALUE={0xdc, 0x4, "63e14c4ffbd75f6c2ad43dd9f06b4c89b4e828e42742f58070e5f922ffa962bf904302bc510a5b32fff546c94f61b9c1be06f59027a0a7016a216d03b80b89c0f355c034444c845fe2e850d27fa26797e7e1c16b9fa17e36391198e22e13bd6d0e1924f989b16269c3d6d665b60d98ffd8524e3fe5b427833e98de4ab15ab725acfa648b5244ba6646b0001bfbee4fd78c0f16496626061dd954c9533e64eafd58ae95122d12c7cef8b0ccf70aade8f155d60d02cd4c735c834d6fd860b5441793b1a9f0925d728f97169a73cd37ac1a9cd8557e83d1bc67"}, @ETHTOOL_A_BITSET_MASK={0x9e, 0x5, "befec6373c35c1db797a2e78acd80824697ecfcb8ee76d034f32339eee032527b48db35ae6bff00795defe4fe0c21c5c3603264dbb9b88578553dc05b7b2f9800e0674ccdd3b2ed90ec920e250e79e15568997e80304bba4bf41501af9331c4e27dbdc5119ec07474c93087ab66a47c672c25c469fcf55172d2bc7d2bc9dcb241b629580805604037d0d73c76e51fe239294a4d5c5b871aef71c"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}, @ETHTOOL_A_LINKMODES_OURS={0x27c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x54, 0x5, "7d3b0d9862c4e201d5a518a746b420e6dbb9901c92800cad7da7d1b6b493c55cf337bbad9ef11a971230ef2b4bbcc3a5b4a8cb9de018fff3ee07d4c173992ee9bd83deeb1cb788bb14bfe6d529976761"}, @ETHTOOL_A_BITSET_MASK={0x83, 0x5, "fbf462758e4cd30f2f7b09523145f321050a1119362ad41c13d852b15e1ca878542ec3177dc99ae11fdbc7e0f2826a913aed67f936310c0141cd4ae22ab96923b7defcb476180bc245cfc0bf16233d61d08a7d89762960cfc370a0fa59d7d8cce4bc49e4207533f19ed6a4a9969aa7b584580004abac0917add04bbd65a899"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x85}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_BITS={0x54, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xff\xff'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf73}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}]}]}, @ETHTOOL_A_BITSET_BITS={0xac, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xff\xff'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '(#+&*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x85, 0x5, "be85694d98c704c6b823c8c510d8f8eaa428df0e61858bc45c23db7b18b2ae2d55b738d76444bedfb42efec183769a97199617d913eef7066b2f0af424aa0628855ada5afb7079a076b890e254cb9b77e6212dbf17f4bb0dc5f2f0adfe90b947ab3d53a2bde84e55988209790ff5f3191fffe32f2fb93f92077c2ddce20da1bcf5"}]}, @ETHTOOL_A_LINKMODES_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x544}, 0x1, 0x0, 0x0, 0x1}, 0xc000) (async, rerun: 64) r11 = socket$inet6(0xa, 0x3, 0x84) (rerun: 64) setsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x44}, @in=@local, 0x0, 0x56, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2, 0xfffffffffffffff6, 0x2000000, 0x1, 0xfffffffffffffffd}, {0x1ff, 0x800000000000, 0x4, 0xffffffffffffff7f}, 0x1, 0x0, 0x1, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x0, 0x2b}, 0xa, @in=@loopback, 0x3504, 0x4, 0x0, 0x0, 0xffffffff, 0x6, 0x4}}, 0xe8) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{r12}, &(0x7f0000000600), &(0x7f0000000640)='%ps \x00'}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r12}, &(0x7f0000000180), &(0x7f0000000200), 0x8}, 0x20) (async) connect$inet6(r11, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) 3m23.684021774s ago: executing program 2 (id=10689): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x5006}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x70bd29, 0x0, {0x1c, 0x14, 0x0, 0x0, 0x0, 0x0, 0xfd, 0xb}}, 0x1c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000070a01040000000000000000020000000c000340000000000000004c0900020073797a320000000009000100"], 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x4000) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002400000001724000180090001006d6173710000000014000280080002"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)={0x54, r4, 0x1, 0x0, 0x0, {0x2d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xff12}, {0x2}, {0xc}}]}, 0xa0}}, 0x0) 3m23.478211844s ago: executing program 2 (id=10691): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000180)=0x4) ioctl$XFS_IOC_FSGEOMETRY_V4(r2, 0x8070587c, &(0x7f00000000c0)) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) (async) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 3m23.317980528s ago: executing program 2 (id=10692): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000260001002abd7000fcdbdf2506000000be25df8b924e44b2bdba8c6b0a8b986f13be11a09fedc52dcaa19a532a45cee08a7604969dbb4d0eee14ed021c2e3e7b08a731b8e7d836e0cf1e2b0b667c4e76da5be47e303051d0095d3c35807037fa2da868d0c648b4f7dd28d7e885c089a258e52ac2ddc90037b6b02ca656ac3e8c96fd408c9651ae569c88f9af5ca5e3fff46ff1001d73f8010489f0c4c649e92baca4fc5fa397ca88bab0fcd604d8"], 0x14}, 0x1, 0x0, 0x0, 0x4040054}, 0x4000000) 3m7.874696213s ago: executing program 32 (id=10692): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000260001002abd7000fcdbdf2506000000be25df8b924e44b2bdba8c6b0a8b986f13be11a09fedc52dcaa19a532a45cee08a7604969dbb4d0eee14ed021c2e3e7b08a731b8e7d836e0cf1e2b0b667c4e76da5be47e303051d0095d3c35807037fa2da868d0c648b4f7dd28d7e885c089a258e52ac2ddc90037b6b02ca656ac3e8c96fd408c9651ae569c88f9af5ca5e3fff46ff1001d73f8010489f0c4c649e92baca4fc5fa397ca88bab0fcd604d8"], 0x14}, 0x1, 0x0, 0x0, 0x4040054}, 0x4000000) 2m42.054836845s ago: executing program 5 (id=11034): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) (async, rerun: 32) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ba20702500000000002003007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\b\x00\x00', &(0x7f0000000300)=""/8, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async, rerun: 32) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000800)={0x350, 0x1e, 0x10, 0x70bd25, 0x25dfdbfe, {0x5}, [@generic, @generic="60b1980faf539238e2528859603e4b095795014edcd285eebe3c40999161e78e11069ab51cf2ef28a736dc96b90b7d188daae8d38231ed86b1c99005d855458d972a977b2bc3d69b150ad4b426de262ebef51c1c1d12e8303bbe3efd", @nested={0x138, 0xcd, 0x0, 0x1, [@generic="4f457764d5f4053d2be41c9526affe36339c7166f0dec11c64bfbcbc8713e67216e121e51297192444e87c34ef537f0ad821f02343fe33476ab0342c3324e6e13089f650893c7c22a354dacd27e73612c2982283d7db3ff9e5da07bcb55610078eea9b71b4beb6df6e1da40b40ac2d8431d7891922ca365407f6128bf87106a72a42db28898633db7dad31c8f8d404be46b4b4c0911ebf0105eed23a402f3c3c7d45680d50ec900d699e08e71e29f1669fe65654ba03afcc", @generic="633e7b5ef2f742b137c2f9fd3d42ba6cd15ecf24eb6258d3617492c7b9eb8cdeab80d909242d388f29ac99335cf82b2cfd6655fa7e6b1d791f1073892ccaf8f6ef4afbe25235fb7d56", @generic="c43c5296e2cf88463a30ac16f01839127e5b42f769172c0773c4bff0d8bd56e3e379f5363aff15cb13cdbd", @typed={0x8, 0xef, 0x0, 0x0, @pid}]}, @generic="7c87e828f0e6cc7938d6ee5d51af52d80ab04ea55d674282d4c74cddc597738bf6d5d783bf9bb8e66e898711ab5f0cd54d3515b95670c6ca901fa2d1fb6db2a046ac678014381d6ebd669e94d797fb94a8f333b5bdb15f0b8468e387dfca8e041cd45d812d41dc0e3e417bd1984e48fcdc8ccd38026f91ed73a40ba7333fe601e88bbc159c954c9d8ecfe27a01290ff4bc75f77623c4c09de7f3e678b76ff15e35fd358750bc63970c08f9e5f407da808f9f374c07c47db76a19ca1e2e18d4c87539b91f92cf8cde3e27fb315ff26f89d1f82f7c16c766216e30c7", @typed={0x8, 0xe2, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x2d}}, @nested={0xc4, 0x9e, 0x0, 0x1, [@typed={0xb7, 0x55, 0x0, 0x0, @binary="69f934dfd66822612f9bce743948d091a9a140386e684aa16e3e1319416d44788709e68242cfce326196e4b09c8154fb9fdc47ed65e181cb7e87adcbf92794fc29cc3feeda469409c8c4670c822f99e6c42d8e97090b89a7aa3a8842e8b164237cdf06f64edf3536e6c461c861e687445a2cdbec6bc9b290cdf521e9ef3d5988a90a11ff0f8b89b4b7a9f9139e45cbdf73ee33e75877bed524c1ab5f2732f107c8c1343e2ad78552bca6f5eb668aaa328d713a"}, @nested={0x4, 0xb2}, @nested={0x4, 0x128}]}]}, 0x350}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r2, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000b, 0x0, 0x0, 0x0, 0x0}}, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m41.863045016s ago: executing program 5 (id=11037): r0 = socket(0x27, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000)=0x9, 0x4) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0xb, 0x7, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x20, 0x20, 0x6, 0x6}}) (rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="18000000560000042bbd7000fbdbdf2507000000", @ANYRES32=r1, @ANYBLOB="b9dd0ddafdb1a97a742b302dbe0c9eb73043"], 0x18}}, 0x4000801) writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000280)="3986c2d48cf8c83702fb70f5a5a23d944bacc4a2db953e112d8eb30c9201b8152738018f166c52b74cf381b67e42b52177e60cbb6161cd623a34e4af8c089e872072820fffc518e02191ca97f0430f39d4136e3131afea10b8ea1c08160b29a97555e91176ae7370f726717842cf76a06a4092a0b6987feb0aeb79dd84035c6eb2e2", 0x82}], 0x1) (async) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)='0', 0x1}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) (async) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d05cd4b92ea54c7beef", 0x11) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000480)="b11430c100"/16, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000002000000000000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000ffffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000007d0000009500000000000000ced83fa04c97bc2603d68edb5c98ea80e41f21206dcd06a35d20cf996815355014bdf68cec7361dc6160dc2baf2d21e5f1d8483caa0f6b8a4d0c84dfbc93db27df07f480a6d358c48ad3783ae6b2fd25e6302f23c0b2dc252f2aa27f6afdbeb6bb1a5f3d48d4eb2e2c96f266bfb754fecf653ba827f05ce65e9c151444310522622c8870657ab1311a64f3f4439f61f7e6db0b15e007c961b630958ea5c3ec0030df482d5b504b520c10e583742374ffe138bd49d07f342dc9d7826d54b9f4b4472e58cfbc4126682994c66e59"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 64) r5 = socket$pppl2tp(0x18, 0x1, 0x1) (rerun: 64) r6 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) close(r6) (rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) connect$pppl2tp(r5, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x21, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) (async, rerun: 32) recvfrom$unix(r0, &(0x7f0000000240)=""/198, 0xc6, 0x4, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e23}, 0x6e) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats}) 2m41.447580768s ago: executing program 5 (id=11040): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00000000000500010004000000050015"], 0x4c}}, 0x0) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000280)={r0, &(0x7f0000000180)='$\x00', 0x24102, &(0x7f00000001c0)={@_ha_fsid={[0x5, 0xfffffff0]}, {0x5, 0x1ff, 0x8, 0x8}}, 0xf02, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0x3b44}) recvmsg$unix(r1, &(0x7f0000001540)={&(0x7f00000002c0)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/250, 0xfa}], 0x2, &(0x7f0000001480)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x2000) 2m41.203370287s ago: executing program 5 (id=11041): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x4, 0x3, 0x2, 0x2, 0x6a, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8000, 0x1, 0x2, 0x4}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000a40)=0x14) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r5, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000001400210100000000000000000200b000", @ANYRES32=r8, @ANYBLOB="08000200ac1414"], 0x20}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}}, 0x18}}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f00000004c0)={r10, 0x3, 0x6, @remote}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'gretap0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x20, 0x8000, 0x40, 0x5, {{0x1a, 0x4, 0x0, 0x9, 0x68, 0x67, 0x0, 0x2, 0x29, 0x0, @private=0xa010100, @multicast2, {[@lsrr={0x83, 0x13, 0x45, [@empty, @local, @multicast2, @dev={0xac, 0x14, 0x14, 0x32}]}, @cipso={0x86, 0x2c, 0x0, [{0x0, 0x8, "ce31ab3eaadc"}, {0x5, 0xa, "b1e815d2bc530141"}, {0x7, 0x2}, {0x0, 0xb, "925feec2899decf1c1"}, {0x7, 0x7, "42db3e21de"}]}, @ssrr={0x89, 0xb, 0xa4, [@dev={0xac, 0x14, 0x14, 0x23}, @private=0xa010101]}, @rr={0x7, 0x7, 0x40, [@loopback]}, @end]}}}}}) r12 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'dvmrp0\x00', 0x0}) setsockopt$sock_attach_bpf(r12, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r12, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r13, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r15 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r15, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000010000104fcfffffffbdbf37d974e0000", @ANYRES32=0x0, @ANYBLOB="4319030000000000"], 0x20}, 0x1, 0x0, 0x0, 0x2004d808}, 0x40001) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x100000fa, &(0x7f0000000580)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x1f, 0x1000, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000a00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)={0x114, r1, 0x9c09a814ca1953fa, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x40000}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000240)="b9ff033168440372b89e14f00800a25e4113fdbea725e905d6b73f9b14a90b3b32f7", 0x0, 0x5, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m38.651772786s ago: executing program 5 (id=11047): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x3, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff15, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0xdf8, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2e, 0x25dfdc03, {0x0, 0x0, 0x0, r5, {0xffe0, 0xb}, {0x8, 0x8}, {0x6, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x8000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r7, &(0x7f0000001180)=[{&(0x7f0000000580)="bddbceb17fc33032119c04b8c2a00ee04b3e55ff53f1efebd4ffb33c64680ea558fbbd83c4da32f465403c14b0b7683b6a661cc2707748ad6716aa04cb74f44c69bd26d6894d5a527512c9e34f6db3171433d62b3968464dba22fc7286395daf0a2373eaad528a43405603ad7df041d86fdcca79899cc12d4175a94ee99db54739dc1873dbce569d395b05877141d3cb00008f6a4e73b6923feb5666d5131c548f2fb7f9c722ceae9c9f7264735a5292de2a5b47329cb67719e4254dcfa64722b86498b82e2d49dffb91949cff63a7f45d079520bf601c040600"/229, 0xe5}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r8 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r8, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r8, 0x0) recvmmsg(r8, &(0x7f00000066c0), 0x1a2, 0x40010000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r9, 0x6, 0x0, &(0x7f0000000080)=0x6, 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01031400e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100000007000000000c0000000a58000000060a01040019000000000000020000f1efb08928b2002400048020000180080001006f736600140002800500020008c1e9320d3864763078f55285430000000800014000000d0b0900010073797a31000000000900020073797a320000000005000740d3000000140000001100010000000000000000000000000a"], 0x80}}, 0xc0) 2m37.249360714s ago: executing program 5 (id=11059): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="60000000020601010000000000000000ac461fed05000400000000000900020073797a30000000000500010007000000050005000a000000140007800800114000000000080012400000ffff11000300686173683a6e65742c6e6574"], 0x60}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020003600e41b0000900ac0000001101a80016000b00014002000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)=ANY=[@ANYBLOB="050000000208"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) sendmsg$can_bcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x5, 0x8, 0x8, {0x0, 0xea60}, {}, {0x4, 0x0, 0x1}, 0x1, @can={{0x0, 0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, "24d990519a608811"}}, 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x2000c055) sendmsg$can_bcm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002440)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x404089d}, 0x0) r5 = socket(0x2, 0x80805, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, 0x0) setsockopt$inet6_opts(r5, 0x29, 0x36, &(0x7f0000000180)=@fragment={0x6, 0x0, 0x7, 0x1, 0x0, 0x1a, 0x68}, 0x8) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRESOCT=r3, @ANYRES32, @ANYBLOB="08000200ac14144005000900890000000600080017000000"], 0x50}}, 0x0) 2m22.133928833s ago: executing program 33 (id=11059): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="60000000020601010000000000000000ac461fed05000400000000000900020073797a30000000000500010007000000050005000a000000140007800800114000000000080012400000ffff11000300686173683a6e65742c6e6574"], 0x60}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020003600e41b0000900ac0000001101a80016000b00014002000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)=ANY=[@ANYBLOB="050000000208"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) sendmsg$can_bcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x5, 0x8, 0x8, {0x0, 0xea60}, {}, {0x4, 0x0, 0x1}, 0x1, @can={{0x0, 0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, "24d990519a608811"}}, 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x2000c055) sendmsg$can_bcm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002440)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x404089d}, 0x0) r5 = socket(0x2, 0x80805, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, 0x0) setsockopt$inet6_opts(r5, 0x29, 0x36, &(0x7f0000000180)=@fragment={0x6, 0x0, 0x7, 0x1, 0x0, 0x1a, 0x68}, 0x8) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRESOCT=r3, @ANYRES32, @ANYBLOB="08000200ac14144005000900890000000600080017000000"], 0x50}}, 0x0) 4.269931349s ago: executing program 0 (id=12236): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f00000002c0)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast2}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000100)="00446916d2", 0x5}], 0x1, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @multicast2}}}], 0x20}, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast2}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000100)="00446916d2", 0x5}], 0x1, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @multicast2}}}], 0x20}, 0x0) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) bpf$MAP_CREATE(0x24, &(0x7f0000000f80)=ANY=[@ANYRES32], 0x50) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r2, 0xc0205866, &(0x7f0000000180)={&(0x7f0000000040)=0x4, 0x81b, &(0x7f00000003c0)=[{}, {}], &(0x7f00000000c0)}) (async) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r2, 0xc0205866, &(0x7f0000000180)={&(0x7f0000000040)=0x4, 0x81b, &(0x7f00000003c0)=[{}, {}], &(0x7f00000000c0)}) 4.020131517s ago: executing program 0 (id=12237): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYRES64], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc8a0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a840100001500010200000000000000000a0000098800048014000300776c616e3100000000000000000000000800024052f5e19b140003007767300000000000000000000000000008000140000000010800014000000001140003", @ANYBLOB="64d556da0b1d170a6d925bbf438da9c77f576bb64abfce912026f75349848ac59398dfdd7165f8eb6cf150849abe78b2baaa31d361839296103e3290033eeba554172fa8ff728d1f2d0819f513c033fb38352aebaee5e051ae170fc2581ae72f14760ae666eb0298a352251cd97856dacb973e70c1eb411e6f1fd1f5c6b80c860619116e23cbafac26861ff400a52d969c265d9eda36bb12cfa019f92c66fed9817fc86f6f3b3abf4a9155b3774e73b06d0163f6b35706d9190468ab3ec624f659805fc13da978b71da6b89f3d531aedd02e8fbc67", @ANYRES64=r1], 0x21f4}, 0x1, 0x0, 0x0, 0x2004d004}, 0x8800) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r4 = socket$pptp(0x18, 0x1, 0x2) getsockopt$sock_buf(r4, 0x1, 0x1c, &(0x7f00000001c0)=""/253, &(0x7f00000002c0)=0xfd) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x11, 0x6, 0xb, 0x57, 0x50, 0x1, 0x3, '\x00', r3, 0xffffffffffffffff, 0x0, 0x1, 0x4}, 0x50) r5 = accept$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x0, 0x0, @dev}, &(0x7f00000004c0)=0x1c) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x32, &(0x7f0000000500)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r3}, 0x14) unshare(0x22020600) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000fd3f1400e27f00000100000008"], 0x48) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000000c0)={r6, 0x0, 0x0}, 0x20) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={@mcast2, @private=0xa010100, 0x7, 0x1e}}) r7 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000001040)=[{}], &(0x7f0000000100)=0x41) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="180000002e000100009adf00000000000000660000000000", @ANYRES64=r7], 0x18}], 0x1}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYRES32=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f00000008c0)=r11, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r12 = socket$kcm(0x2, 0x2, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$tun(r9, &(0x7f0000000380)=ANY=[@ANYBLOB="001c86dd07001000000014"], 0xffe) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 3.520684566s ago: executing program 1 (id=12243): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000280)={{r0, &(0x7f0000000000)='\x00', 0x0, &(0x7f0000000040)={@_ha_fsid={[0xffff0000, 0xcaa]}, {0x4, 0xf, 0xfffff02b, 0x3}}, 0x3000000, &(0x7f00000000c0), &(0x7f0000000180)=0x9}, {[0x9, 0xffffff2e, 0xfffff000, 0x4]}, 0x7b7, 0x84, &(0x7f00000001c0)=""/132}) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000300), 0x4) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000012020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r2, 0x20, &(0x7f0000000080)={&(0x7f0000002700)=""/4116, 0x1014, 0x0, 0x0}}, 0x10) (async) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x0, 0x10, 0x0, 0x4, 0x43, @mcast2, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x40, 0x0, 0x0, 0x6}}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) 3.404994619s ago: executing program 0 (id=12245): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r2 = socket(0x8, 0x3, 0x0) ioctl$IMGETCOUNT(r2, 0x400261f2, &(0x7f0000000000)) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000340)={{r0, &(0x7f0000000040)='ns/ipc\x00', 0x4000, &(0x7f0000000100)={@align=0x2, {0xfff, 0x5c, 0x2, 0x6}}, 0xffff, &(0x7f0000000140), &(0x7f0000000180)=0x7}, 0x0, 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0xf, &(0x7f0000000080)=0x1, 0x4) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) 3.268603714s ago: executing program 1 (id=12247): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000001c0)=[{0x6, 0x4a, 0x6, 0x6}]}, 0x10) close(0x3) unshare(0x68040200) 2.355204714s ago: executing program 3 (id=12256): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) close(r1) (async) close(r1) write(r0, 0x0, 0x0) (async) write(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f00000000c0)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xb1}}, &(0x7f0000000480)='GPL\x00'}, 0x94) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x100008, 0xc, 0x102f0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc, 0xfffffffe, 0x0, 0x0, @void, @value, @value=r3}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x1, r4}, 0x38) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x20, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x20}}, 0xc000) sendmsg(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000640)="3013f93f6a23826aeaa571d88a1fc628ec108a5ce411744d4e3ae79c5374eb3bdc7564d840b7d870c0da80f54b31a033a88be722054380d9761c", 0x3a}, {&(0x7f00000006c0)="ac5bf07dfbe37df362733fa6e33fcfe007a76905029bf5f167a7418ebe47895ee8a38f7c4ae25d6ae91633bc0b5bcd5572d067fa7af73dfb4605ec2b21cbe0ca844c8033fe927cd5f154695e5c65c966e80d4a08ff27a975d2ae54226a99d873d2ad6297b9e8c1365a36ae", 0x6b}, {&(0x7f0000001400)="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", 0xfb3}], 0x3, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0xe10}, 0x40000) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) accept4(r6, 0x0, 0x0, 0x800) (async) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r2, 0x0) r10 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f0000000340)={r10}) 2.066262157s ago: executing program 6 (id=12258): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000002c0)=0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffdc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r3, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000006c0), &(0x7f00000003c0)=""/14, 0x2}, 0x20) sendmsg$netlink(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)={0x10, 0x26, 0x100, 0x70bd28, 0x25dfdbfe}, 0x10}], 0x1, &(0x7f0000000480)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xee00, 0xee01}}}], 0x20, 0x40801}, 0x40) 1.808870252s ago: executing program 6 (id=12259): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000280)='memory.swap.high\x00', 0x2, 0x0) (async) epoll_create1(0x0) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000250009012cbd7000f9ffffff0200000004005980080003004700000008003f00", @ANYRES32, @ANYBLOB="d34f54c3f0c2262d5bc97d6c9c11124b7195aca8a82a20876f7faac46a08944339b0006feee54a28e54df8ff5614b5a04b660108f9379b8ed8b327861af6eb09e02f2e405a7009380fbef43453d67e1753a4de9b9d417e784af17da4d4be9887e81c919938ae770fa0a42c4dbcb274b3d28b0acc74530ef73e627908a064551deaa43be9d1636ca0fbb4927b759c3bfba7491446bd431144aecdded8ebc8607751d7e5d019adfa53856940bb61ea0553ecb487c563fd5738a12ae1a3620561ed11b265863594ef87d40000d87cd1b33ede01234d78ab84b3d78d3cfd68"], 0x28}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0xcc15, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) (async) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1, 0x0) (async) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) (async) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r7, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) (async) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x1}], 0x1) (async) shutdown(r7, 0x1) (async) write$cgroup_int(r6, &(0x7f0000000200)=0x10001, 0x12) (async) sendfile(r6, r5, 0x0, 0xf03a0005) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$nl_netfilter(0x10, 0x3, 0xc) 1.626026818s ago: executing program 3 (id=12260): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="010b0080", @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c009900f40000002e000000080026007f1700000800270002000000"], 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket(0x10, 0x803, 0x0) r7 = accept4$ax25(r6, &(0x7f0000000380)={{0x3, @bcast}, [@remote, @bcast, @remote, @bcast, @rose, @default, @rose, @rose]}, &(0x7f0000000400)=0x48, 0x80800) accept$ax25(r7, &(0x7f00000004c0)={{0x3, @rose}, [@default, @remote, @bcast, @rose, @netrom, @remote, @default, @default]}, &(0x7f0000000440)=0x48) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4, 0x20}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000bc0)={0x7, 'vlan1\x00', {0x4}, 0x40}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e00007fac65e21f761005000700000003000000fdffffff00000000000000002e"], &(0x7f0000000740)=""/261, 0x46, 0x105, 0x6}, 0x28) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r9) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYRES16=r10, @ANYBLOB="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"], 0x3c}}, 0x4008000) getsockopt$IP_SET_OP_GET_BYNAME(r4, 0x1, 0x53, &(0x7f00000000c0)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000340)=0x28) 1.507594189s ago: executing program 1 (id=12262): r0 = socket$netlink(0x10, 0x3, 0x2) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x2404c8d0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x21, &(0x7f0000000200)=[{}], 0x8, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x31, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000440)={'gretap0\x00', r2, 0x8000, 0x7800, 0x4de, 0x7, {{0x1d, 0x4, 0x1, 0x7, 0x74, 0x66, 0x0, 0x8, 0x29, 0x0, @rand_addr=0x64010101, @remote, {[@cipso={0x86, 0x2d, 0xffffffffffffffff, [{0x5, 0x5, "14fe1f"}, {0x6, 0xd, "1f3175ea0f78b6f39311b1"}, {0x7, 0x5, "91980b"}, {0x7, 0xa, "b3030656887cc462"}, {0x1, 0x4, "ff01"}, {0x8, 0x2}]}, @timestamp_addr={0x44, 0xc, 0x39, 0x1, 0x7, [{@loopback, 0xc}]}, @timestamp={0x44, 0x10, 0xda, 0x0, 0x5, [0x6, 0x0, 0x5]}, @lsrr={0x83, 0x17, 0x1d, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote, @broadcast]}]}}}}}) r3 = socket$kcm(0x29, 0x7, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r4) r6 = syz_genetlink_get_family_id$team(&(0x7f00000005c0), r0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000880)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f0000000600)={0x20c, r6, 0x200, 0x70bd29, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}]}}, {{0x8, 0x1, r2}, {0x1ac, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x6, 0x2, 0x5, 0x2}, {0x4, 0x7, 0xfa, 0x5}, {0x10, 0x0, 0xa4, 0xfff}, {0x3ff, 0x3, 0x16, 0x1}, {0x6, 0x81, 0x1, 0x6e000000}, {0x8, 0x9, 0x1, 0xffff}, {0x3, 0x81, 0x9, 0x7}, {0x100, 0x0, 0x5, 0x2}, {0x10, 0x0, 0x8, 0x5513}]}}}]}}]}, 0x20c}, 0x1, 0x0, 0x0, 0x1}, 0x40c1) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000900)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r4, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x38, r5, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x520, 0x4f}}}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0xe4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008050) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000a00)={'batadv0\x00', 0x0}) r10 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCDFWD(r10, 0xb101, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r11, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000080}, 0x20004000) ioctl$F2FS_IOC_DEFRAGMENT(r3, 0xc010f508, &(0x7f0000000bc0)={0x1, 0x8}) ioctl$sock_SIOCGIFCONF(r10, 0x8912, &(0x7f0000000c40)=@req={0x28, &(0x7f0000000c00)={'netpci0\x00', @ifru_mtu=0x6}}) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, r5, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x18}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000dc0)=@o_path={&(0x7f0000000d80)='./file0\x00', 0x1, 0x4000, r4}, 0x18) sendto$packet(0xffffffffffffffff, &(0x7f0000000e00)="1a29bcde778684e430fa07a95b8237fc70de248aef6569483dd3a5a21ee559d8351da7f29cbd397ed52d7bb3a4a7bd44d7feafdc90a76e854436b597de2519b84e2803f22e6a910a40805a3c0c685cd48557972b212bfccf20b9ffd9bb6ddceff0ca4fdbe1b8c8ac91ce30d9", 0x6c, 0x8001, &(0x7f0000000e80)={0x11, 0x0, r9, 0x1, 0x5, 0x6, @broadcast}, 0x14) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000f00), r7) sendmsg$BATADV_CMD_GET_HARDIF(r7, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x1c, r13, 0x10, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) socket$inet_sctp(0x2, 0x5, 0x84) syz_genetlink_get_family_id$tipc(&(0x7f0000001000), r7) listen(0xffffffffffffffff, 0xf91) 1.463496316s ago: executing program 6 (id=12263): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb", 0x8}], 0x1, 0x1) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x40900}, 0x0) splice(r0, 0x0, r2, 0x0, 0x10d00, 0xf) 1.457721137s ago: executing program 4 (id=12264): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaa4caaaa0800450000280320000000069078640100feac1414aa00034e2200000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02fffe90780000"], 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000004600070128b570000000008f017c0000080004804e2d"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'rose0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000180)={@remote, @multicast1}, &(0x7f00000001c0)=0xc) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r5, r1, 0x25, 0x10, @val=@netkit={@void, @value=r5}}, 0x1c) syz_emit_ethernet(0xd81, &(0x7f0000002740)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}], 0x1, &(0x7f0000000380)}], 0x1, 0x40800) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x5, 0xa, 0x1, 0x2, @private0, @empty, 0x80, 0x7, 0x9, 0x8}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r9, @ANYBLOB="010027bd700003dcdf250100000008000100", @ANYRES32=r10, @ANYBLOB="800002803c000100240001"], 0x9c}, 0x1, 0x400000000000000}, 0x48090) 1.249486414s ago: executing program 6 (id=12265): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x5, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)={0x298, r2, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x800}, @WGDEVICE_A_PEERS={0x238, 0x8, 0x0, 0x1, [{0x1ac, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x114, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x27}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8df0}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @rand_addr=0x64010101}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7ff}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d816f98e60f4cd9c446e0021f53e40d27a17f206a72c1a4e68c31a9d612b97b2"}]}, {0x88, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x3, @mcast1, 0x1000}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ba8f6128bc132c211c9a46c7c0103cec67628bfef5f322d9f3bbf830327c759e"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @rand_addr=0x64010100}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}]}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1}]}, 0x298}, 0x1, 0x0, 0x0, 0x60800}, 0x20008000) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000001f00190300000000200000002001000000000000a98c57ca9e70a5e50ef3e2"], 0x4c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001500010026bd0001000200000000000000db59576d0f2700f822b58eaf0477d2c727dd39b68fb86d7f16cf96e4c0106a5f87ff47ee5c44c80af63fad5d507f9d7b450000e17dd4dff850475ab55b3b48be3a7377cbf52ad6c927542edabdf24976370af0f8a87883170db3b2c730fd6c4cc7fed350a1adb8c697d8b8635d1ce624543614efbec648a993ad70e7ad1d5c3dd26598a952925ff6fccb4a6468e66a515ba07bc8e064c0acbd415b87a670790de3c371207af44cd1df682b2c38adadd58000"/209], 0x20}, 0x1, 0x0, 0x0, 0x48080}, 0x8c0) 1.248756313s ago: executing program 3 (id=12266): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000104000000000000000000000006", @ANYRES32=0x0, @ANYBLOB="31000000061746000a00030008e7eebc872f0000140012800b000100627269646765000004000280"], 0x40}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000104000000000000000000000006", @ANYRES32=0x0, @ANYBLOB="31000000061746000a00030008e7eebc872f0000140012800b000100627269646765000004000280"], 0x40}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000050000000200252a04000000000000008f4b", @ANYRES32, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r2, &(0x7f0000000540)="0b09207965b0b9f1", 0x8, 0x40, &(0x7f0000000080), 0x10) socket(0x10, 0x803, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x42, 0x4, 0x330, 0xffffffff, 0x0, 0xf0, 0xf0, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xc8, 0xf0, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0xc}}, @common=@unspec=@cgroup0={{0x28}, {0x7, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ip={@private=0xa010101, @rand_addr=0x64010101, 0xff, 0x0, 'dvmrp1\x00', 'veth1_vlan\x00', {}, {0xff}, 0x2f, 0x1, 0x49}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x80, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @rand_addr=0x64010100, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0xff}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x687, 0x500, 0x1}}, @common=@socket0={{0x20}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r7 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r7, &(0x7f0000000400)={0x28, 0x0, 0x0, @host}, 0x10) (async) connect$vsock_stream(r7, &(0x7f0000000400)={0x28, 0x0, 0x0, @host}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newtfilter={0xb8, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x5}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x84, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_POLICE={0x48, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0xf, 0x10000000, 0x6ed, 0xfffffff8, 0x1000, {0x4, 0x2, 0x1, 0x6ca, 0x8}, {0xc, 0x2, 0x5, 0xfffc, 0x4, 0x8}, 0x78, 0xfffffffe, 0x6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}]}, @TCA_U32_INDEV={0x14, 0x8, 'veth0_to_hsr\x00'}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xb8}}, 0x24040084) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newtfilter={0xb8, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x5}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x84, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_POLICE={0x48, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0xf, 0x10000000, 0x6ed, 0xfffffff8, 0x1000, {0x4, 0x2, 0x1, 0x6ca, 0x8}, {0xc, 0x2, 0x5, 0xfffc, 0x4, 0x8}, 0x78, 0xfffffffe, 0x6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}]}, @TCA_U32_INDEV={0x14, 0x8, 'veth0_to_hsr\x00'}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xb8}}, 0x24040084) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000005800000000004cf0581a437b0ad126f204b1d389146df7bae93a460c7976218990ad62e90ce8c5d6f92109961244a9107b365f210b81336dd840f48b5e50eaab73df237c7bc9bc666a09e1504ba35d0fec846311f506b8a524e676fa8398ef961723c474a0a413d394d5e0ef1f7ebc237234b8c9ddd6c954cec8b8a79b4cb5f010a2b6210e869bd8be1c1172b2"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="21000000000000004000040081db7cc71b41acd0f5a69c70b26057a96a33b3dc912fb2843b4193cb6b32bf2a1fa69dc86631b07900a80b269df67e8b610f442c8ebf7c394ccd8bc00042ce5e618a10318d2730449efc417d354980118298eee8c3762d3cd2917358a6c90726344fc2bad9d89b4f97ad1a210018e2fda3766bb40d8fcf649382c042c84240e1ad78474002f53a157d46c39d77f074eb928f4c8e92852ba4d8e7be513673d0fe5cd6250d0201193d544480bcc58b5a072bfb729272745709805f5729de277c8c6ef59209", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000001800"/28], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0xef78, @remote, 0xfffffff3}, @in={0x2, 0x4e20, @broadcast}], 0x2c) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f00000000c0)=r11, 0x4) sendmsg$unix(r10, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$unix(r10, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 1.248026916s ago: executing program 6 (id=12267): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendto$inet6(r0, &(0x7f0000000100)='Y', 0x1, 0x20004001, &(0x7f0000000180)={0xa, 0x4e23, 0xf, @remote, 0x8}, 0x1c) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0}], 0x1, 0x4001) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={r2, 0x2, 0x1, "fa"}, 0x9) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a3000000000d0000000160a01000000000000000000010000010900010000000000a4000380080001400000000090000380d7fd0100776c616e300000000000000000000000140001006d6163766c616e3100000000000000001400010076657468310000000000000000000000140001006772653000000000000000000000000014000100776c616e3100000000000000000000001400010076657468315f766972745f77696669001400010076657468305f746f5f626f6e6400000008000240"], 0x178}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={r2, 0x2}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000040000000100000000000000", @ANYRES32, @ANYBLOB="0000a6772df2e1c5d28000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newsa={0x170, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in=@broadcast, 0xffff, 0x4000, 0x0, 0x8001, 0x0, 0x20, 0x0, 0x5c}, {@in=@dev, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {0x323, 0x0, 0x0, 0xe0, 0xfffffffffffffffd}, {}, {}, 0x70bd2d, 0xffffffff, 0xa, 0x2, 0x0, 0x18}, [@algo_crypt={0x48, 0x2, {{'lrw(twofish)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e1e, 0x0, @in=@private=0xa010102}}, @encap={0x1c, 0x4, {0x2, 0x4e21, 0x4e24}}]}, 0x170}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xf, &(0x7f00000015c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x2, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0xce}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x3}, 0x94) 1.120155819s ago: executing program 1 (id=12268): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x12, {0x0, 0x0, 0x0, r4, {0xc, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x2}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}, @TCA_TBF_PBURST={0x8, 0x7, 0x58a}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4048080}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) poll(&(0x7f00000003c0), 0x0, 0x3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.080218738s ago: executing program 3 (id=12269): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x1f8, 0xffffffff, 0xffffffff, 0x1f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private2, @mcast2, [0xff], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0xf8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x328) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYRESHEX=r0, @ANYRESOCT=r1], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008004) 963.824166ms ago: executing program 0 (id=12270): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x5}}]}, @action_gd=@TCA_ACT_TAB={0x43, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3e}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c8d8) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x101}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004055) (async, rerun: 64) r0 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000042000002294ed1cd04d6122abd7000ffdbdf2500000000db5380954e71ddfb380ed14113816e2c600a411f"], 0x14}, 0x1, 0x0, 0x0, 0x40840}, 0x4000080) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22e8a65c15}, 0x4008840) (async) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv4_newrule={0x2c, 0x1e, 0x1, 0xfffffffd, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7}, @FRA_DST={0x8, 0x1, @rand_addr=0x64010102}]}, 0x2c}, 0x1, 0x0, 0x0, 0x42812}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYRESHEX], 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x40000) (async, rerun: 32) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x275a, 0x0) (rerun: 32) write$cgroup_subtree(r3, &(0x7f00000004c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x4, @remote, 'pimreg1\x00'}}, 0x1e) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 883.75763ms ago: executing program 4 (id=12271): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000013020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52}, 0x20) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000000340)={&(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x3}}, 0x10, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000640)="69710c3e7b90", 0x5dc}], 0x2, 0x0, 0x0, 0xc0090}, 0x4000000) (async) syz_80211_inject_frame(&(0x7f0000000300), 0x0, 0x0) 776.925648ms ago: executing program 3 (id=12272): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1105000040000000000009000000380003800600040069d7000008000300000000001400020076657468305f746f5f626f6e64000000080001"], 0x4c}, 0x1, 0x0, 0x0, 0x40850}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x80000000}, @TCA_CAKE_FWMARK={0x8, 0x12, 0xffff7fff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000040)={'veth1_vlan\x00', @remote}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000002c0)={r0, &(0x7f00000000c0)='cake\x00', 0x410400, &(0x7f00000001c0)={@_ha_fsid={[0xda7, 0x200]}, {0x4, 0x5, 0x0, 0x80000001}}, 0x9, &(0x7f0000000200), &(0x7f0000000240)=0x9}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001640)=ANY=[@ANYBLOB="18000000000000000000000000000000180500002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff8500000004000000954759ed1fe2d1d95eb67b64bd614bf89df82316ea5cd4db3193a45b61961c7685e022d70760041e62896c735e971e35eaf1e5a331ae04ce6a1407c4acf7d493d0a39b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r6}, 0x18) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568daf133e50b", @ANYRESHEX, @ANYRESOCT=r4], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r8, 0x35, 0x0, 0x16, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, &(0x7f0000000300), 0x0}, 0x40) r10 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)=ANY=[@ANYRES32=r5, @ANYRES32=r7, @ANYBLOB='7\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00', @ANYRES32=r10, @ANYBLOB="aef01fe68e506d69bd95944205ae5d85b9e0dfa3fad194d10100d6c24e579bce4d3273fc4c85da06890963804e82d62367c48de8979f78d45fb4f5f7075b5ff4dac6f6fe46fd976aeb8d31b98543c904ff6b7ce8bf5996e52b2ac82992f73e303d48059214590a496c7a5acd7bc9ae0fb6d59cc679048149bb17b8878704ff011300c17c2512b13dedbdf685115b926e0442cbc8757249abdb25b8515dfa1d950579c0090ea663a610c5b47b9f841c3b9c9eac74ac536fac397cf47e7eecb218b0295d39dfa0ec71ac7a94c3bf70ff15abd0ef93fd5151c2b24047b2987e42eb7988b7973f81ff43e1bb041217f9bb89943a3ef7ddc030d583658860371dbfeec1e0a5678ea294a6aa1a50ce585e2c8ee40b49467eb52e581af46f7adfb5fbddc3447a6a3d5dffcc506d18c08af5bbca59a62832e14badd6a28cd83eb46229359490f955340623a9e8053397e1d9fcd6faa2", @ANYRES64=r9], 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1e000000ffff0000040000000500000000100000", @ANYRES32=0x1, @ANYBLOB="792dffff0000000000b7be64e7000000000000003da29316a4f87f49c39f5e6ca6d6187a8d1602173db2252683f57612399b380e1cbdab4c4b43b50b8719606e2966df328c81e1fcdfb4d0fb374f2ff739566755969867f1f612ba52ad7870cc40c39caf558438932a0307a8b5573c661383bcbc851aa18ccc2d7e84350080000000000000ab181761d99546", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000024000000020000000300"/28], 0x50) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r12) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r13) sendmsg$TIPC_CMD_ENABLE_BEARER(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 626.339351ms ago: executing program 4 (id=12273): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a01040000000000000000010000020900010073797a30000000002c000000030a010200000004000000000100fffe0900010071797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c000480380001800e000100696d6d656469617465000000240002800800014000000000180002801400028008000180fffffffc08000340000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xd8}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2a, 0x2, {0x60, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x3e}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000200)={@private1, 0x80000001, 0x0, 0x0, 0x3, 0xf1, 0x3}, 0x20) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket(0x2b, 0x80801, 0x1) r7 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r7, 0x11b, 0x7, &(0x7f0000001f40), &(0x7f00000022c0)=0x30) setsockopt$WPAN_SECURITY(r6, 0x11e, 0x1, &(0x7f0000000000)=0x1, 0x4) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000480)={&(0x7f0000000000), 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1ec, r5, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7fffffff}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffff80}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8001}]}, @TIPC_NLA_MEDIA={0xd4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2ee6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x612}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x94c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x400, @empty, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xffffffff, @private1, 0x7}}}}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa49}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000}, 0x24000800) 520.838884ms ago: executing program 0 (id=12274): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="a00000001800092d00000000000000001c140000fe000001"], 0xa0}}, 0x0) close(0x3) socket$l2tp6(0xa, 0x2, 0x73) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, 0x0, 0x0) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd4}, 0x4000000) socket$tipc(0x1e, 0x5, 0x0) 411.707886ms ago: executing program 4 (id=12275): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66", 0x9}], 0x1, 0x1) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x40900}, 0x0) splice(r0, 0x0, r2, 0x0, 0x10d00, 0xf) 306.941277ms ago: executing program 6 (id=12276): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xe, 0xfff1}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x6, 0x9, 0xa, 0x1, 0x6, 0x1}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0xd0) (async) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0800080007000000000014000000456f0fc000660000401190780a010102ac1414124e204e200fac9078e1070001e24f82d681079ea7a4e87616ec93ff3299ed88d29741d161f504c73dcab29b8c8bb6bd8ee37e9d73ea"], 0xfce) 241.684144ms ago: executing program 1 (id=12277): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa1200000000000070c0000f8ffffffb702000008000000b70300000000000085000000b9000000950000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) 240.117481ms ago: executing program 4 (id=12278): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYBLOB="06"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x6}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x6}, 0x8) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1, 0x0, 0x39}, 0x20040004) 115.651949ms ago: executing program 0 (id=12279): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000010004b04bd7000fcdbdf257a000d0000", @ANYRES32=0x0, @ANYBLOB="0010000020900000400012800b0001006272696467650000300002800c0023000100000000000080050016000000000008001b004b0f00000500250001000000050024"], 0x60}}, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000080)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x6558, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x4000, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0x0, @void}}}}}}}}, 0x32) 102.373261ms ago: executing program 3 (id=12280): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x20008000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000240)=0x4000, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x2, 0x80000000000004, 0x6}, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe}, 0x0, 0x0) setsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f0000000200)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xd, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="18040000feffffff00000000000000001801000020696c250000000000202020db1af8ff41000000bda100000000000007010000f80000ffb702000008000000b703000000000000850000004600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket(0x2b, 0x80801, 0x1) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000240)={&(0x7f0000000380)=""/211, 0xd3, 0x1ff, 0x1000}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r7, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r7, {0xffff, 0x8}, {0xfff1, 0xa}, {0x1, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2400c840}, 0x4000850) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="ab43df1824000000", @ANYRES16=r8, @ANYBLOB="08002dbd7000fcdbdf25070000080800813594eb0c68a3970d510b00000000000059a6479c68ed97000000"], 0x24}}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r9, &(0x7f00000005c0)=[{&(0x7f0000000080)='/', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r9, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=@deltclass={0x70, 0x29, 0x1, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x2, 0xfff2}, {0xd, 0xd}, {0x0, 0x3}}, [@tclass_kind_options=@c_skbprio={0xc}, @TCA_RATE={0x6, 0x5, {0xd, 0x7}}, @tclass_kind_options=@c_red={0x8}, @TCA_RATE={0x6, 0x5, {0x6, 0x6}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x1}}}, @tclass_kind_options=@c_qfq={{0x8}, {0xc, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0xe}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) 53.569796ms ago: executing program 4 (id=12281): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x20}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd0}}, 0x0) 0s ago: executing program 1 (id=12282): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000002c0007012bbd7000ffdbdf2507"], 0x24}}, 0xc010) sendmsg$nl_generic(r0, &(0x7f0000001400)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000013c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="98000000190000012bbd7000fcdbdf250200000077b3ce17550c00bc002ddaf47e3a2d2803a80d614220c450069ebad1fe37ccbfa49b9214adb357cd09849e766782307043e9955fb759ffaed1a8a118ddac81a08f5ab26475cca6cb8f57a69c37bd33be43f6cfb952fff252ff967602c46e417c52c7fe772ab1f847353c9e44bf4f4608b942f7c955509411e108004d00", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00'], 0x98}}, 0x8000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0a00000004000000dd0000000a00000000000000", @ANYRES32, @ANYBLOB="ffffffff00000000000000050004000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000008c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x620, 0x428, 0x428, 0x1c0, 0x1c0, 0x0, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], [0xff, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x2b, 0x8, 0x1, 0x18}, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x5}, {0xffffffffffffffff, 0x4, 0x1}, {0xffffffffffffffff, 0x4}, 0x6, 0x7ff}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0x0, 0x0, 0xffffff00], [0xffffff00, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x1}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff}, {}, {0x87, 0x0, 0x7}}}}, {{@uncond, 0x0, 0x100, 0x128, 0x48000000, {}, [@inet=@rpfilter={{0x28}, {0xd}}, @common=@srh={{0x30}, {0x33, 0x66, 0xf8, 0xa6, 0x9, 0x440, 0x502}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0xe}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010100, @ipv4=@loopback, 0x2}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}, {0x62, 0x8, 0x7, 0xb, 0x30ba, 0x222}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="070000000400000010000000351038a84190dbf6aa7638ddb10500070000000000e43157290c11da", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x1f, 0x13, &(0x7f00000015c0)=ANY=[@ANYRES8=r1, @ANYBLOB="e47c74a622027e4a32212fa6054749603c783508a52de2e786aa088870a432369855f182da5f8585ad0be4fbcc8047c738d4024e9b23f4091e3af13078d9e8b7ac1b4fdb3d5aa7de96232df1144e3dfc32"], &(0x7f0000000000)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r6 = socket$xdp(0x2c, 0x3, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7ff, 0x8, 0x6eb, 0x5, 0x7, 0x2c0b}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0x2, 0xb}, {0xe, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x2b}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4000800) r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r10, 0x106, 0x1, &(0x7f0000001580), 0x4) sendmsg$xdp(r6, &(0x7f00000004c0)={&(0x7f00000001c0)={0x2c, 0x8, r9, 0x13}, 0x10, &(0x7f0000001240)=[{&(0x7f0000000340)="b1d0fc76c3ca7dd8c000fd730770abe9d2244f1d4e38d257365863b3ab17c6d599bfcc6df252614ab7acb90801cd98439edccaa232d958dfe7c1b5191080b348b6ab1c5086653ec8f387f5af41b50c462540b6a45d920280a77087c3781cb6fd3c2f23235e9e8db2ce201f537d62bb8f1f", 0x71}, {&(0x7f0000001440)="6a612d10950e4207d5d6c4a9dfade504d3cc5a3923015a8f75fbc011c3590ab84b0340152346aa5e6faeee915bdece1ec9d32ceb8c8e92cac59ed9bf5885f9680b272342bb86dd30a1afb5595e94c50216161cb4c8896c3a38bb7fcc6bebffea55d1916a8d1934d35018137a9c3ea28faf329c18e47204f3285008c0a4fb4863b11ec54c7aeec19c3bf5a24be44abc191015687c6ede18992ee648d9a8dcd2d185d5dc096c492e2ccb8f5ce125ca45aa61f13342c3a7cadf21e9f9f58256017516240e77c9bac1e1e36c88e23e4ca81bac548891018a3bdbe85988469089ec0b3f48fed686fe2098d1f5a4db0ae10a16d46f6d41875986850bd214cb877bac82fb6ed71f82ff120114da53a5b97a887bacd828dc", 0xd6}, {&(0x7f00000006c0)="877f9b97949e545ca3f2180563117f9e7430080a566f9b04783d1f24090876dca352c646545614fb4239fae300e5f4e675332c6a56680be5cdae040261cce8e8ca20f768e312f95a66f164149cb0c3b5d88644735432fd537e1f4bb9dc3242bcc95c03231563cc4cc881d2da3e80ee2e5704bf47dd69f29855619ec6336b1aaf2488496e67ecedbb800979f95a98a690fd9686341643adf77b4c6621411fd19b13c473f911d9425198dfc68dc4d45943edc6305634dc5ed47b", 0xb9}, {&(0x7f00000007c0)="3f6a9ed9a29284f3ef29e79b6e5109bc1f7cb28fca6f9eceec471333221ee219b9c2491e95a3df1fd601badcbf280db68fe7c1800b250ac0897fc5eaba2c2383cfbb5020020294e67aaf2496408c406fb4bcff76c2f9316c930b621fd97cb21803d618ef4a5e032d5974bdd4d7cf747887bcb48da279eb8612c148675c8df0a69d08e6c27eb8d20835f89be53ead96c6b77adc689c12d7a28434995f982fe5ec0a4cf179c21eab8429f98f8f56fec7bb40a0aa5f72c699334639c26ada7a4ff2f991fe50eae724ae0bb4d353c565f7ac093b41f074ce67f6536bc0ba16b92d7a53e90ea1510f59e03ece8eb1379070ad", 0xfffffffffffffee1}, {&(0x7f0000000fc0)="7f87a52051c730a3167e836b551f8f99f71cad1eb6509de886f7bd3ab2ce6f0c4e8efcf118b9f240fdb8231a92285a6707605bd92ce8211a644c36997f575c51f95032bbc491dbf4e22cc7ecb2b2d84b729ed07185af4a1b00df5c7707ce8cd460356b7e02c49349527d8966e84c878d854c9e029db5c2372eaf365ed8e348817ae17da0c7d42453debed0c5f6cf89", 0x8f}, {&(0x7f0000001080)="b0f1b440d3a32cd3e56f2ff245249316074ad49271d4833fc6f426bf273363e837aa6b41d9903d52b03548fd89eb65aacb2902f3c5fd07cc7622d0c4b67c4eb1380ced8a5b3405a4d45e4fd8ee78748316517a16179aa102ca675978f1230c116c364b094dc527ab7bceca2a179fe6289582ad133c220cd083494de00e5b58dc8bc836b5947d6b97505da9d60dbef1fcdbf4fb1f42363de796846e1de81f30d6d76a5804a6aec006311c742aceea649de7", 0xb1}, {&(0x7f0000001140)="951895b0b358da9f29f765bec42bcd9dd42c8dc2f355b1860c1c3839cf27a6620d1e96800b4db7716c6677f3b95f6e2cab2eb8a486458564fe1657f5ea6deee4c9f55a4c914f179b2c66161dc09c76c88e001307cb8755dd90093defbc717a3405be5d59f7693fea43662695abeec4", 0x6f}, {&(0x7f0000000200)="150f7f36a9e2be", 0x7}, {&(0x7f00000011c0)="19a43d76a3f86aba04c9381f157935c3aef88277b099d5d740eeaa8c78441ec89dbf1eafd2c29192957bfc58bfb0f72d561e8773b1fcd84f98901fd4555abf1fe90ebb80a3ac5e569167d8161b906205d319aba7a3cb790a973f89ed8a", 0x5d}, {&(0x7f00000003c0)="75bf0e6f78fe57e6e743573bd45ea8d8208a00aff396fca3df438da95fd9", 0x1e}], 0xa, 0x0, 0x0, 0x4004000}, 0x14) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x6, 0x4, 0xffd, 0x2}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r11, &(0x7f0000000ac0)="c876f1c31ef0831156adb791103284ee9082639d20fe5145d5fcefcc79fd468e59053a5fd62c846579af10d9cdc9e540f622eb8ac161d95dca82368b8c06caae9015a30655971c7f0df6b1c67125fb668bb8b47a915183e21633cbe147f276fe29d5c033958ea62e64230816", &(0x7f00000009c0)=""/191}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80)={r4}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020205d0af8ff00000000bea100000000000007010000f8ffffffb702000008000000b7030000ffee0000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = getpid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000150001000100"/24, @ANYRES32=r13, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): sing attributes in process `syz.4.10683'. [ 1392.195524][T16590] lo speed is unknown, defaulting to 1000 [ 1392.203196][T16590] wlan1 speed is unknown, defaulting to 1000 [ 1392.210386][T16600] wg1 speed is unknown, defaulting to 1000 [ 1392.315226][T16606] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10685'. [ 1392.324328][T16606] netlink: 10 bytes leftover after parsing attributes in process `syz.0.10685'. [ 1392.397895][T16606] vlan2: entered promiscuous mode [ 1392.402998][T16606] geneve1: entered promiscuous mode [ 1392.412711][T16606] vlan2: entered allmulticast mode [ 1392.424956][T16606] geneve1: entered allmulticast mode [ 1392.592677][T16611] lo: MTU too low for tipc bearer [ 1392.602325][T16611] tipc: Enabling of bearer rejected, failed to enable media [ 1392.918888][T16600] lo speed is unknown, defaulting to 1000 [ 1392.938702][T16600] wlan1 speed is unknown, defaulting to 1000 [ 1392.971663][T16624] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10689'. [ 1392.997678][T16626] vlan3: entered promiscuous mode [ 1393.002794][T16626] mac80211_hwsim hwsim123 wlan0: entered promiscuous mode [ 1393.381221][T16638] team0: entered promiscuous mode [ 1393.416564][T16638] bond3: entered promiscuous mode [ 1393.444563][T16638] bridge5: entered promiscuous mode [ 1393.452247][T16638] geneve0: entered promiscuous mode [ 1393.485787][T16638] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1393.769165][T16643] netlink: 'syz.3.10694': attribute type 10 has an invalid length. [ 1393.821154][T16644] netlink: 'syz.3.10694': attribute type 10 has an invalid length. [ 1393.875962][T16643] team0: Port device dummy0 added [ 1393.921503][T16644] team0: Port device dummy0 removed [ 1394.013386][T16644] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1394.272712][T16649] __nla_validate_parse: 1 callbacks suppressed [ 1394.272737][T16649] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10695'. [ 1394.311191][T16649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10695'. [ 1394.734167][T16663] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10698'. [ 1395.120288][T16686] sctp: [Deprecated]: syz.0.10705 (pid 16686) Use of int in max_burst socket option deprecated. [ 1395.120288][T16686] Use struct sctp_assoc_value instead [ 1395.170122][T16693] netlink: 'syz.4.10708': attribute type 9 has an invalid length. [ 1395.340415][T16705] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1395.440945][T16712] wg1 speed is unknown, defaulting to 1000 [ 1395.464144][T16718] netlink: 56 bytes leftover after parsing attributes in process `syz.1.10713'. [ 1395.473695][T16718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10713'. [ 1395.763402][T16712] lo speed is unknown, defaulting to 1000 [ 1395.771765][T16712] wlan1 speed is unknown, defaulting to 1000 [ 1395.973746][T16742] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10714'. [ 1396.171430][T16742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10714'. [ 1397.405772][T16783] netlink: 112 bytes leftover after parsing attributes in process `syz.1.10722'. [ 1397.993669][T16808] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 1398.274472][T16832] wg1 speed is unknown, defaulting to 1000 [ 1398.321972][T16830] netlink: 'syz.4.10731': attribute type 18 has an invalid length. [ 1398.342174][T16830] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10731'. [ 1398.368015][T16836] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1398.433314][T13762] IPVS: starting estimator thread 0... [ 1398.636741][T16832] lo speed is unknown, defaulting to 1000 [ 1398.646621][T16832] wlan1 speed is unknown, defaulting to 1000 [ 1398.851452][T16819] wg1 speed is unknown, defaulting to 1000 [ 1398.891305][T16838] IPVS: using max 27 ests per chain, 64800 per kthread [ 1399.671760][T16819] lo speed is unknown, defaulting to 1000 [ 1399.679953][T16819] wlan1 speed is unknown, defaulting to 1000 [ 1399.701489][T16862] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10740'. [ 1400.506952][T16895] netlink: 196 bytes leftover after parsing attributes in process `syz.3.10745'. [ 1400.661324][T16897] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10746'. [ 1400.763263][T16898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10746'. [ 1401.114092][T16906] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10750'. [ 1401.440409][T16915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10753'. [ 1401.677707][T16915] ip6gretap0: entered promiscuous mode [ 1401.693493][T16915] ip6gretap0: left promiscuous mode [ 1402.294979][T16930] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10758'. [ 1402.306380][T16930] netlink: 'syz.0.10758': attribute type 13 has an invalid length. [ 1402.314767][T16930] netlink: 14585 bytes leftover after parsing attributes in process `syz.0.10758'. [ 1402.336967][T16930] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10758'. [ 1402.355650][T16930] netlink: 43 bytes leftover after parsing attributes in process `syz.0.10758'. [ 1402.375714][T16930] netlink: 'syz.0.10758': attribute type 5 has an invalid length. [ 1403.046454][T16954] wg1 speed is unknown, defaulting to 1000 [ 1403.699624][T16954] lo speed is unknown, defaulting to 1000 [ 1403.715278][T16954] wlan1 speed is unknown, defaulting to 1000 [ 1404.712444][T16979] tipc: Started in network mode [ 1404.720953][T16979] tipc: Node identity e0000002, cluster identity 4711 [ 1404.776838][T16979] tipc: Enabling of bearer rejected, failed to enable media [ 1405.171383][T17005] syzkaller0: entered promiscuous mode [ 1405.194021][T17005] syzkaller0: entered allmulticast mode [ 1405.236706][T17007] __nla_validate_parse: 4 callbacks suppressed [ 1405.236734][T17007] netlink: 80 bytes leftover after parsing attributes in process `syz.3.10779'. [ 1405.268322][T17008] netlink: 'syz.1.10778': attribute type 7 has an invalid length. [ 1405.285203][T17008] netlink: 'syz.1.10778': attribute type 8 has an invalid length. [ 1405.414604][T17010] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1405.564551][T17026] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1405.576982][T17022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1405.928699][T17062] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10793'. [ 1405.952001][T17062] netlink: 'syz.3.10793': attribute type 5 has an invalid length. [ 1405.960300][T17062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10793'. [ 1406.448611][T17092] netlink: 44 bytes leftover after parsing attributes in process `syz.1.10801'. [ 1406.530361][T17096] netlink: 'syz.3.10802': attribute type 29 has an invalid length. [ 1406.542519][T17096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10802'. [ 1406.555306][T17096] netlink: 'syz.3.10802': attribute type 29 has an invalid length. [ 1406.581846][T17096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10802'. [ 1407.838113][T17170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10821'. [ 1408.848280][T17173] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1408.891966][T17173] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1408.907656][T17173] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1408.922539][T17173] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1408.930417][T17173] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1409.035568][ T7988] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1409.043317][ T7988] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1409.050850][ T7988] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1409.059019][ T7988] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1409.067267][ T7988] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1410.037390][T17172] wg1 speed is unknown, defaulting to 1000 [ 1410.151538][T17185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10825'. [ 1410.153894][T17188] netlink: 'syz.0.10826': attribute type 3 has an invalid length. [ 1410.204629][T17189] netlink: 44 bytes leftover after parsing attributes in process `syz.4.10824'. [ 1410.211243][T17188] nbd: nbd0 already in use [ 1410.220275][T17185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10825'. [ 1410.248749][T17188] block nbd0: NBD_DISCONNECT [ 1410.253503][T17188] block nbd0: Send disconnect failed -32 [ 1410.266167][T17188] block nbd0: shutting down sockets [ 1410.332391][ T6204] bridge_slave_1: left allmulticast mode [ 1410.347426][ T6204] bridge_slave_1: left promiscuous mode [ 1410.350977][T17191] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1410.362568][ T6204] bridge0: port 2(bridge_slave_1) entered disabled state [ 1410.409736][ T6204] bridge_slave_0: left allmulticast mode [ 1410.415969][ T6204] bridge_slave_0: left promiscuous mode [ 1410.424144][ T6204] bridge0: port 1(bridge_slave_0) entered disabled state [ 1410.490618][ T6204] dvmrp0: left allmulticast mode [ 1410.584904][T17201] netlink: 'syz.1.10828': attribute type 1 has an invalid length. [ 1410.604248][T17201] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10828'. [ 1410.863159][ T6204] bond2 (unregistering): (slave ip6gre2): Releasing backup interface [ 1411.107909][T17173] Bluetooth: hci3: command tx timeout [ 1411.258676][T17226] netlink: 104 bytes leftover after parsing attributes in process `syz.4.10836'. [ 1411.273529][T17226] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 1411.298943][ T6204] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1411.713451][ T6204] bond8 (unregistering): (slave bridge8): Releasing backup interface [ 1411.723188][ T6204] bridge8 (unregistering): left promiscuous mode [ 1411.812559][ T6204] bond1 (unregistering): Released all slaves [ 1411.821593][T17244] netlink: 260 bytes leftover after parsing attributes in process `syz.4.10839'. [ 1411.876638][ T6204] bond7 (unregistering): (slave bond0): Releasing active interface [ 1411.901413][ T6204] bond0 (unregistering): (slave veth3): Releasing active interface [ 1411.915799][ T6204] batadv1: entered promiscuous mode [ 1411.937544][ T6204] bond0 (unregistering): (slave batadv1): Releasing active interface [ 1411.947585][ T6204] bond0 (unregistering): Released all slaves [ 1411.972463][ T6204] bond2 (unregistering): Released all slaves [ 1412.008669][ T6204] bond3 (unregistering): (slave batadv2): Releasing active interface [ 1412.017404][ T6204] batadv2: left promiscuous mode [ 1412.022819][ T6204] batadv2: left allmulticast mode [ 1412.031141][ T6204] bond3 (unregistering): Released all slaves [ 1412.057666][ T6204] bond4 (unregistering): Released all slaves [ 1412.079042][ T6204] bond5 (unregistering): left promiscuous mode [ 1412.091118][ T6204] bond5 (unregistering): Released all slaves [ 1412.112177][ T6204] bond6 (unregistering): Released all slaves [ 1412.130544][ T6204] bond7 (unregistering): Released all slaves [ 1412.150029][ T6204] bond8 (unregistering): Released all slaves [ 1412.186357][T17192] team0: left promiscuous mode [ 1412.191274][T17192] bond3: left promiscuous mode [ 1412.196845][T17192] bridge5: left promiscuous mode [ 1412.202031][T17192] geneve0: left promiscuous mode [ 1412.222800][T17192] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1412.246506][T17172] lo speed is unknown, defaulting to 1000 [ 1412.260148][T17172] wlan1 speed is unknown, defaulting to 1000 [ 1412.453315][T17253] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1412.460991][T17252] netlink: 'syz.3.10841': attribute type 10 has an invalid length. [ 1412.480540][T17254] netlink: 'syz.3.10841': attribute type 11 has an invalid length. [ 1412.488976][T17252] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10841'. [ 1412.501123][T17252] dummy0: entered promiscuous mode [ 1412.550827][T17252] bond0: (slave dummy0): Releasing backup interface [ 1412.570650][T17252] bridge0: port 3(dummy0) entered blocking state [ 1412.590204][T17252] bridge0: port 3(dummy0) entered disabled state [ 1412.598768][T17252] dummy0: entered allmulticast mode [ 1412.744290][T17188] siw: device registration error -23 [ 1412.840833][T17261] wg1 speed is unknown, defaulting to 1000 [ 1413.085908][ T6204] tipc: Left network mode [ 1413.119300][T17172] chnl_net:caif_netlink_parms(): no params data found [ 1413.196456][T17173] Bluetooth: hci3: command tx timeout [ 1413.520582][ T6204] IPVS: stopping backup sync thread 28951 ... [ 1413.536927][T17172] bridge0: port 1(bridge_slave_0) entered blocking state [ 1413.559451][T17172] bridge0: port 1(bridge_slave_0) entered disabled state [ 1413.567121][T17172] bridge_slave_0: entered allmulticast mode [ 1413.575248][T17172] bridge_slave_0: entered promiscuous mode [ 1413.584514][T17172] bridge0: port 2(bridge_slave_1) entered blocking state [ 1413.593094][T17172] bridge0: port 2(bridge_slave_1) entered disabled state [ 1413.605364][T17172] bridge_slave_1: entered allmulticast mode [ 1413.626050][T17172] bridge_slave_1: entered promiscuous mode [ 1413.639832][T17284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1413.701847][T17261] lo speed is unknown, defaulting to 1000 [ 1413.817587][T17261] wlan1 speed is unknown, defaulting to 1000 [ 1413.837250][T17172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1413.859848][T17172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1413.870259][T17290] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10848'. [ 1414.109663][T17172] team0: Port device team_slave_0 added [ 1414.128737][T17172] team0: Port device team_slave_1 added [ 1414.356599][T17172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1414.363618][T17172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1414.401721][T17172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1414.438916][T17172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1414.446555][T17172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1414.481781][T17172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1414.581614][T17303] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10852'. [ 1414.599042][T17303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10852'. [ 1414.757382][T17172] hsr_slave_0: entered promiscuous mode [ 1414.774918][T17172] hsr_slave_1: entered promiscuous mode [ 1414.786079][T17172] debugfs: 'hsr0' already exists in 'hsr' [ 1414.792240][T17172] Cannot create hsr debugfs directory [ 1415.285634][T17173] Bluetooth: hci3: command tx timeout [ 1416.495660][ T6204] hsr_slave_0: left promiscuous mode [ 1416.507291][ T6204] hsr_slave_1: left promiscuous mode [ 1416.523765][ T6204] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1416.533031][ T6204] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1416.554270][ T6204] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1416.563391][ T6204] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1416.633910][ T6204] macsec0: left promiscuous mode [ 1416.648071][ T6204] veth1_to_hsr: left allmulticast mode [ 1416.674227][ T6204] veth1_to_hsr: left promiscuous mode [ 1416.684381][ T6204] veth1_macvtap: left promiscuous mode [ 1416.704497][ T6204] veth1_vlan: left promiscuous mode [ 1416.714539][ T6204] veth0_vlan: left promiscuous mode [ 1417.351169][T17173] Bluetooth: hci3: command tx timeout [ 1417.389529][ T6204] team0 (unregistering): Port device team_slave_1 removed [ 1417.429907][ T6204] team0 (unregistering): Port device team_slave_0 removed [ 1417.848799][T17344] syzkaller0: entered promiscuous mode [ 1417.854458][T17344] syzkaller0: entered allmulticast mode [ 1417.958511][T17361] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10864'. [ 1418.003190][T17361] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.10864'. [ 1418.099498][T17362] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.10864'. [ 1418.301143][T17172] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1418.345437][T17370] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10868'. [ 1418.373604][T17172] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1418.406818][T17373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10867'. [ 1418.445369][T17172] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1418.484625][T17172] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1418.542460][ T6204] IPVS: stop unused estimator thread 0... [ 1418.653961][T17389] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10871'. [ 1418.859425][T17172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1418.887931][T17395] geneve2: entered promiscuous mode [ 1418.914266][T17395] netlink: 'syz.3.10874': attribute type 1 has an invalid length. [ 1418.923726][T17395] netlink: 228 bytes leftover after parsing attributes in process `syz.3.10874'. [ 1418.946222][T17395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10874'. [ 1419.121652][T17172] 8021q: adding VLAN 0 to HW filter on device team0 [ 1419.179308][ T6203] bridge0: port 1(bridge_slave_0) entered blocking state [ 1419.186781][ T6203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1419.250016][ T6203] bridge0: port 2(bridge_slave_1) entered blocking state [ 1419.257528][ T6203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1419.711005][T17426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10881'. [ 1419.736690][T17431] sctp: [Deprecated]: syz.4.10882 (pid 17431) Use of int in maxseg socket option. [ 1419.736690][T17431] Use struct sctp_assoc_value instead [ 1419.858267][T17172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1419.916356][T17434] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10883'. [ 1420.265541][T13762] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1420.296737][ T6204] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1420.375589][T13769] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1420.699074][T17172] veth0_vlan: entered promiscuous mode [ 1420.729232][T17172] veth1_vlan: entered promiscuous mode [ 1420.822322][T17172] veth0_macvtap: entered promiscuous mode [ 1420.842391][T17471] wg1 speed is unknown, defaulting to 1000 [ 1420.854363][T17172] veth1_macvtap: entered promiscuous mode [ 1420.912141][T17172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1420.946560][T17172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1420.988445][T16828] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.018129][T16828] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.099781][T16828] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.183757][T16828] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.333606][T10952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1421.345548][T10952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1421.361024][T16828] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1421.395489][T16828] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1421.515339][T10952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1421.559675][T10952] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1421.568190][T27201] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1421.602501][T17471] lo speed is unknown, defaulting to 1000 [ 1421.643479][T17471] wlan1 speed is unknown, defaulting to 1000 [ 1422.057001][T17524] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1422.064332][T17524] IPv6: NLM_F_CREATE should be set when creating new route [ 1422.071670][T17524] IPv6: NLM_F_CREATE should be set when creating new route [ 1422.078955][T17524] IPv6: NLM_F_CREATE should be set when creating new route [ 1422.204919][T17532] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1423.031408][ T1299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.043863][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 1423.170010][T17543] __nla_validate_parse: 7 callbacks suppressed [ 1423.170032][T17543] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10913'. [ 1423.210910][T17546] netlink: 192 bytes leftover after parsing attributes in process `syz.4.10911'. [ 1423.230657][T17539] wg1 speed is unknown, defaulting to 1000 [ 1423.260193][T17546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10911'. [ 1423.271125][T17547] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10913'. [ 1423.442544][T17543] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10913'. [ 1423.481376][T17547] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10913'. [ 1423.535860][T16828] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1423.576477][T16828] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1423.614264][T16828] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1423.637944][T16828] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1423.802989][T17569] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10917'. [ 1424.022891][T17539] lo speed is unknown, defaulting to 1000 [ 1424.047260][T17539] wlan1 speed is unknown, defaulting to 1000 [ 1424.285114][T17590] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 786440, id = 0 [ 1424.287078][T17587] IPVS: stopping backup sync thread 17590 ... [ 1424.334720][T17592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10924'. [ 1424.456994][T17596] netlink: 'syz.0.10925': attribute type 1 has an invalid length. [ 1424.543445][T17601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10926'. [ 1424.590150][T17602] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1424.608019][T17596] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10925'. [ 1424.618990][T17602] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 1424.773642][T17596] bond8: (slave bridge0): Enslaving as an active interface with a down link [ 1424.805759][T17604] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1424.920977][T17602] macvlan2: entered promiscuous mode [ 1424.927325][T17602] macvlan2: entered allmulticast mode [ 1424.934076][T17602] bond8: entered promiscuous mode [ 1424.940212][T17602] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1424.951166][T17602] bond8: left promiscuous mode [ 1424.982222][T17610] netlink: 'syz.1.10930': attribute type 27 has an invalid length. [ 1425.025474][T17610] ..0ªî{X¹¦: left allmulticast mode [ 1425.031843][T17610] gre1: left allmulticast mode [ 1425.074281][T17610] geneve4: left promiscuous mode [ 1425.084337][T17610] bond6: left allmulticast mode [ 1425.586042][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1425.676581][T17636] netlink: 'syz.1.10934': attribute type 1 has an invalid length. [ 1425.735639][T17636] netlink: 'syz.1.10934': attribute type 1 has an invalid length. [ 1425.744298][T17636] netlink: 'syz.1.10934': attribute type 8 has an invalid length. [ 1425.942440][T17639] netlink: 'syz.3.10935': attribute type 178 has an invalid length. [ 1426.143027][T17645] netlink: 'syz.1.10939': attribute type 5 has an invalid length. [ 1426.269646][T17651] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 1426.476240][T17659] Bluetooth: MGMT ver 1.23 [ 1426.541516][T17659] syzkaller0: entered promiscuous mode [ 1426.554269][T17659] syzkaller0: entered allmulticast mode [ 1426.685837][T17674] syzkaller0: entered promiscuous mode [ 1426.697458][T17674] syzkaller0: entered allmulticast mode [ 1426.908868][T17684] netlink: 'syz.0.10948': attribute type 1 has an invalid length. [ 1426.950666][T17684] bond9: entered promiscuous mode [ 1426.970265][T17686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1427.010689][T17684] bond9: entered allmulticast mode [ 1427.036550][T17684] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1427.237825][ T29] audit: type=1800 audit(1773022893.512:27): pid=17679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.10946" name="memory.events" dev="tmpfs" ino=1749 res=0 errno=0 [ 1427.422071][T17703] wg1 speed is unknown, defaulting to 1000 [ 1427.535813][T17711] bridge_slave_1: default FDB implementation only supports local addresses [ 1428.353127][T17703] lo speed is unknown, defaulting to 1000 [ 1428.413121][T17738] netlink: 'syz.1.10962': attribute type 9 has an invalid length. [ 1428.429732][T17703] wlan1 speed is unknown, defaulting to 1000 [ 1428.789234][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 1428.797342][ C1] lec:lec_tx_timeout: lec0 [ 1428.846894][T17753] xt_policy: neither incoming nor outgoing policy selected [ 1428.930333][T17759] netlink: 'syz.5.10968': attribute type 9 has an invalid length. [ 1428.965999][T17759] __nla_validate_parse: 10 callbacks suppressed [ 1428.966020][T17759] netlink: 210020 bytes leftover after parsing attributes in process `syz.5.10968'. [ 1428.992768][T17759] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10968'. [ 1429.196789][T17765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10971'. [ 1429.334832][T17768] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 1429.358596][T17771] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10973'. [ 1429.372075][T17768] team0 (unregistering): Port device team_slave_0 removed [ 1429.436418][T17768] team0 (unregistering): Failed to send options change via netlink (err -105) [ 1429.472424][T17768] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 1429.487170][T17778] validate_nla: 2 callbacks suppressed [ 1429.487189][T17778] netlink: 'syz.1.10974': attribute type 39 has an invalid length. [ 1429.502485][T17768] team0 (unregistering): Port device team_slave_1 removed [ 1429.538426][T17775] netlink: 44 bytes leftover after parsing attributes in process `syz.1.10974'. [ 1429.554076][T17780] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10973'. [ 1429.554108][T17775] netlink: 43 bytes leftover after parsing attributes in process `syz.1.10974'. [ 1429.596805][T17775] netlink: 'syz.1.10974': attribute type 5 has an invalid length. [ 1429.609477][T17775] netlink: 43 bytes leftover after parsing attributes in process `syz.1.10974'. [ 1430.004253][T17804] netlink: 'syz.4.10979': attribute type 2 has an invalid length. [ 1430.097999][T17804] hmac(sha224: entered promiscuous mode [ 1430.311400][T17811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10982'. [ 1430.855866][T17837] syzkaller0: entered promiscuous mode [ 1430.893002][T17837] syzkaller0: entered allmulticast mode [ 1430.899858][T17839] 0: reclassify loop, rule prio 0, protocol 800 [ 1430.937283][T17842] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10991'. [ 1431.383991][T17869] xt_socket: unknown flags 0xfc [ 1431.399422][T17872] xt_socket: unknown flags 0xfc [ 1431.436601][T17874] wg1 speed is unknown, defaulting to 1000 [ 1431.757327][T17874] lo speed is unknown, defaulting to 1000 [ 1431.774256][T17874] wlan1 speed is unknown, defaulting to 1000 [ 1432.218593][T17901] syzkaller0: entered promiscuous mode [ 1432.245476][T17901] syzkaller0: entered allmulticast mode [ 1432.410111][T17901] netlink: 'syz.3.11008': attribute type 6 has an invalid length. [ 1432.442278][T17901] netlink: 'syz.3.11008': attribute type 6 has an invalid length. [ 1433.590066][T17948] netlink: 'syz.1.11021': attribute type 1 has an invalid length. [ 1433.591409][T17949] x_tables: duplicate underflow at hook 3 [ 1433.638872][T17949] xt_hashlimit: overflow, try lower: 18446744073709551607/511 [ 1433.655165][T17950] xt_hashlimit: overflow, try lower: 18446744073709551607/511 [ 1433.986445][T17968] __nla_validate_parse: 18 callbacks suppressed [ 1433.986467][T17968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11026'. [ 1434.060516][T17968] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11026'. [ 1434.126314][T17977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11029'. [ 1434.400375][T17987] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11032'. [ 1434.465777][T17987] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11032'. [ 1434.545913][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1434.816072][T18010] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11038'. [ 1435.038196][T18018] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11039'. [ 1435.130352][T18021] bond1: option lacp_rate: invalid value (128) [ 1435.139068][T18021] bond1 (unregistering): Released all slaves [ 1435.398060][T18031] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11041'. [ 1437.770887][T18010] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1438.048133][T18065] netlink: 'syz.0.11051': attribute type 1 has an invalid length. [ 1438.219608][T18068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11050'. [ 1438.276770][T18064] wg1 speed is unknown, defaulting to 1000 [ 1438.360333][T18081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11053'. [ 1438.716175][T18095] netlink: 'syz.4.11053': attribute type 10 has an invalid length. [ 1439.142060][T18064] lo speed is unknown, defaulting to 1000 [ 1439.151399][T18064] wlan1 speed is unknown, defaulting to 1000 [ 1439.177959][T18095] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1439.198612][T18101] netlink: 'syz.3.11057': attribute type 1 has an invalid length. [ 1439.215359][T18101] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1439.234723][T13762] wlan1 speed is unknown, defaulting to 1000 [ 1439.242928][T18104] wg1: entered promiscuous mode [ 1439.255465][T18104] wg1: entered allmulticast mode [ 1439.347266][T18109] netlink: 'syz.5.11059': attribute type 11 has an invalid length. [ 1439.409239][T18111] netlink: 'syz.3.11060': attribute type 1 has an invalid length. [ 1439.445256][T18111] netlink: 'syz.3.11060': attribute type 4 has an invalid length. [ 1439.447713][T18115] netlink: 'syz.0.11062': attribute type 5 has an invalid length. [ 1439.453794][T18111] __nla_validate_parse: 4 callbacks suppressed [ 1439.453842][T18111] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.11060'. [ 1439.573335][T18120] netlink: 56 bytes leftover after parsing attributes in process `syz.4.11061'. [ 1439.585796][T18121] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1439.643340][T18121] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1439.741391][T18121] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1439.812139][T18121] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1439.923635][ T6203] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1439.999166][ T6202] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1440.040207][T10952] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1440.086200][ T6202] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1440.484603][T18137] wg1 speed is unknown, defaulting to 1000 [ 1440.495209][T18144] netlink: 'syz.4.11070': attribute type 1 has an invalid length. [ 1440.606604][T18149] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11070'. [ 1440.644403][T18147] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1440.657624][T18147] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 1440.673475][T18144] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11070'. [ 1440.791880][T18149] bond5: (slave bridge10): Enslaving as an active interface with a down link [ 1440.802982][T18144] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1440.821963][T18147] macvlan0: entered promiscuous mode [ 1440.827710][T18147] macvlan0: entered allmulticast mode [ 1440.834119][T18147] bond5: entered promiscuous mode [ 1440.840813][T18147] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1440.858895][T18147] bond5: left promiscuous mode [ 1440.907709][T18137] lo speed is unknown, defaulting to 1000 [ 1440.915783][T10944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1440.924221][T10944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1440.933312][T18137] wlan1 speed is unknown, defaulting to 1000 [ 1440.956506][T14155] lec:lec_start_xmit: lec0:No lecd attached [ 1440.993960][T18155] bond7: Unable to set peer notification delay as MII monitoring is disabled [ 1441.008440][T18155] bond7 (unregistering): Released all slaves [ 1441.266554][T18162] wg1 speed is unknown, defaulting to 1000 [ 1441.787855][T18162] lo speed is unknown, defaulting to 1000 [ 1441.798314][T18162] wlan1 speed is unknown, defaulting to 1000 [ 1441.826899][T18185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11080'. [ 1441.937792][T18187] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11081'. [ 1442.104850][T18192] netlink: 268 bytes leftover after parsing attributes in process `syz.1.11082'. [ 1442.197239][T18196] netlink: 'syz.3.11083': attribute type 13 has an invalid length. [ 1442.411401][T18195] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11083'. [ 1442.457200][T18197] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1442.920419][T18206] syzkaller0: entered promiscuous mode [ 1442.940552][T18206] syzkaller0: entered allmulticast mode [ 1443.414021][T18230] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11091'. [ 1443.479375][T18232] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11092'. [ 1443.759911][T18246] netlink: 'syz.1.11096': attribute type 62 has an invalid length. [ 1443.774195][T18246] 8021q: VLANs not supported on ip6gre0 [ 1443.898563][T18254] netlink: 'syz.1.11099': attribute type 10 has an invalid length. [ 1443.952091][T18257] ±ÿ: renamed from lo (while UP) [ 1444.081612][T18263] sctp: [Deprecated]: syz.0.11100 (pid 18263) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1444.081612][T18263] Use struct sctp_sack_info instead [ 1444.152901][T18268] sctp: [Deprecated]: syz.0.11100 (pid 18268) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1444.152901][T18268] Use struct sctp_sack_info instead [ 1444.749563][T18288] bond10: option arp_interval: invalid value (18446744073709551615) [ 1444.805217][T18288] bond10: option arp_interval: allowed values 0 - 2147483647 [ 1444.822849][T18288] bond10 (unregistering): Released all slaves [ 1445.209772][T18306] netlink: 'syz.1.11110': attribute type 2 has an invalid length. [ 1445.248025][T18306] netlink: 'syz.1.11110': attribute type 2 has an invalid length. [ 1445.369367][T18312] netlink: 'syz.3.11111': attribute type 3 has an invalid length. [ 1445.965101][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1445.973284][ C1] lec:lec_tx_timeout: lec0 [ 1446.146985][T18359] __nla_validate_parse: 6 callbacks suppressed [ 1446.147018][T18359] netlink: 44 bytes leftover after parsing attributes in process `syz.3.11120'. [ 1446.184702][T18359] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 1446.327815][T18367] bond7: option all_slaves_active: invalid value (13) [ 1446.372413][T18367] bond7 (unregistering): Released all slaves [ 1446.474007][T18329] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1446.480737][T18329] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1446.582137][T18372] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048) [ 1446.837100][T18385] wg1 speed is unknown, defaulting to 1000 [ 1447.104899][T18385] lo speed is unknown, defaulting to 1000 [ 1447.123588][T18385] wlan1 speed is unknown, defaulting to 1000 [ 1447.296930][T18396] netlink: 76 bytes leftover after parsing attributes in process `syz.3.11131'. [ 1447.317448][T18396] netlink: 96 bytes leftover after parsing attributes in process `syz.3.11131'. [ 1447.334708][T18396] netlink: 96 bytes leftover after parsing attributes in process `syz.3.11131'. [ 1447.451021][T18403] tipc: Enabling of bearer rejected, failed to enable media [ 1447.461693][T18403] netlink: 'syz.1.11133': attribute type 1 has an invalid length. [ 1447.469807][T18403] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.11133'. [ 1447.479710][T18403] netlink: 'syz.1.11133': attribute type 1 has an invalid length. [ 1447.487734][T18403] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.11133'. [ 1447.497890][T18403] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11133'. [ 1447.859110][T18418] bridge8: entered promiscuous mode [ 1447.873542][T18418] bridge8: entered allmulticast mode [ 1447.912369][T18418] team0: Port device bridge8 added [ 1448.169917][T18422] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11139'. [ 1448.333485][T18422] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1448.531230][T18438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11143'. [ 1448.571330][T18438] gretap0: entered promiscuous mode [ 1448.738652][T18448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11148'. [ 1448.806392][T18453] netlink: 'syz.1.11149': attribute type 21 has an invalid length. [ 1448.815651][T18453] netlink: 'syz.1.11149': attribute type 5 has an invalid length. [ 1448.927302][T18457] syzkaller0: entered promiscuous mode [ 1448.932929][T18457] syzkaller0: entered allmulticast mode [ 1449.104327][T18471] x_tables: duplicate entry at hook 1 [ 1449.326151][T18484] netlink: 'syz.1.11160': attribute type 7 has an invalid length. [ 1449.365357][T18484] netlink: 'syz.1.11160': attribute type 8 has an invalid length. [ 1449.571412][T18489] syzkaller1: entered promiscuous mode [ 1449.579467][T18489] syzkaller1: entered allmulticast mode [ 1451.195499][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1452.343626][T18526] netlink: 'syz.0.11166': attribute type 27 has an invalid length. [ 1452.679097][T18544] netlink: 'syz.4.11171': attribute type 49 has an invalid length. [ 1452.711596][T18526] wg1: left promiscuous mode [ 1452.717301][T18526] wg1: left allmulticast mode [ 1452.728600][T18526] wg2: left allmulticast mode [ 1452.761383][T18526] batman_adv: batadv0: Interface deactivated: gretap1 [ 1452.775754][T18526] bond5: left promiscuous mode [ 1452.783714][T18526] vlan2: left promiscuous mode [ 1452.789760][T18526] geneve1: left promiscuous mode [ 1452.797373][T18526] vlan2: left allmulticast mode [ 1452.802445][T18526] geneve1: left allmulticast mode [ 1452.818916][T18526] bond9: left promiscuous mode [ 1452.823772][T18526] bond9: left allmulticast mode [ 1452.836103][T18526] bridge8: left promiscuous mode [ 1452.841307][T18526] bridge8: left allmulticast mode [ 1453.153078][T18537] gretap0: left promiscuous mode [ 1453.260703][T18537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1453.270543][T18537] 8021q: adding VLAN 0 to HW filter on device team0 [ 1453.286068][T18537] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1453.318625][T10952] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1453.332174][T10952] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1453.388257][T10952] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1453.397321][T10952] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1453.706054][T18573] __nla_validate_parse: 4 callbacks suppressed [ 1453.706078][T18573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11174'. [ 1453.779426][T18576] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11177'. [ 1454.326154][T18610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11185'. [ 1454.452259][T18612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11186'. [ 1454.466576][T18617] netlink: 100 bytes leftover after parsing attributes in process `syz.4.11190'. [ 1454.484393][T18621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11189'. [ 1454.496223][T18612] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11186'. [ 1454.545774][T18623] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1454.645312][T18626] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11191'. [ 1454.672652][T18621] team0: Port device team_slave_0 removed [ 1454.680895][T18628] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11192'. [ 1454.712592][ T7988] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1454.736783][ T7988] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1454.748185][ T7988] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1454.758963][ T7988] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1454.771529][ T7988] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1454.780585][T18626] bond11: entered promiscuous mode [ 1454.791302][T18626] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1454.887826][T18630] bridge9: entered promiscuous mode [ 1454.894076][T18630] bond11: (slave bridge9): Enslaving as an active interface with an up link [ 1455.014634][T18629] wg1 speed is unknown, defaulting to 1000 [ 1455.015936][T18643] netlink: 'syz.1.11196': attribute type 1 has an invalid length. [ 1455.029120][T18643] netlink: 228 bytes leftover after parsing attributes in process `syz.1.11196'. [ 1455.486444][T18629] lo speed is unknown, defaulting to 1000 [ 1455.503618][T18629] wlan1 speed is unknown, defaulting to 1000 [ 1455.740001][T18664] netlink: 'syz.4.11203': attribute type 2 has an invalid length. [ 1455.811859][T18666] sctp: [Deprecated]: syz.0.11204 (pid 18666) Use of int in max_burst socket option. [ 1455.811859][T18666] Use struct sctp_assoc_value instead [ 1456.373805][T18689] netlink: 'syz.4.11210': attribute type 1 has an invalid length. [ 1456.422757][T18629] chnl_net:caif_netlink_parms(): no params data found [ 1456.571948][T18695] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1456.587092][T18695] bond4 (unregistering): Released all slaves [ 1456.706773][T18629] bridge0: port 1(bridge_slave_0) entered blocking state [ 1456.722083][T18629] bridge0: port 1(bridge_slave_0) entered disabled state [ 1456.732208][T18629] bridge_slave_0: entered allmulticast mode [ 1456.742204][T18629] bridge_slave_0: entered promiscuous mode [ 1456.752553][T18629] bridge0: port 2(bridge_slave_1) entered blocking state [ 1456.761931][T18629] bridge0: port 2(bridge_slave_1) entered disabled state [ 1456.770996][T18629] bridge_slave_1: entered allmulticast mode [ 1456.777206][T18701] block nbd0: server does not support multiple connections per device. [ 1456.779672][T18701] block nbd0: shutting down sockets [ 1456.798988][T18629] bridge_slave_1: entered promiscuous mode [ 1456.841913][T18704] netlink: 'syz.0.11213': attribute type 1 has an invalid length. [ 1456.856845][T18704] netlink: 'syz.0.11213': attribute type 2 has an invalid length. [ 1456.865142][ T7988] Bluetooth: hci6: command tx timeout [ 1456.882201][T18629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1456.926522][T18629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1456.976893][T18629] team0: Port device team_slave_0 added [ 1456.986419][T18629] team0: Port device team_slave_1 added [ 1457.048203][T18629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1457.064520][T18629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1457.117013][T18714] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1457.137440][T18629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1457.189140][T18629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1457.245584][T18629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1457.300022][T18629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1457.404452][T18733] netlink: 'syz.0.11221': attribute type 1 has an invalid length. [ 1457.411365][T18730] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 1457.433162][T18728] veth9: entered promiscuous mode [ 1457.438550][T18733] netlink: 'syz.0.11221': attribute type 1 has an invalid length. [ 1457.438573][T18733] netlink: 'syz.0.11221': attribute type 2 has an invalid length. [ 1457.496504][T18735] openvswitch: netlink: Message has 4 unknown bytes. [ 1457.503328][T18735] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1457.533957][T18629] hsr_slave_0: entered promiscuous mode [ 1457.542063][T18629] hsr_slave_1: entered promiscuous mode [ 1457.603215][T18629] debugfs: 'hsr0' already exists in 'hsr' [ 1457.635238][T18629] Cannot create hsr debugfs directory [ 1458.478353][T18775] netlink: 'syz.0.11229': attribute type 1 has an invalid length. [ 1458.556548][T18775] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1458.793727][T18786] netlink: 'syz.1.11231': attribute type 2 has an invalid length. [ 1458.948384][ T7988] Bluetooth: hci6: command tx timeout [ 1460.654818][T18747] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1460.680920][T18629] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1460.709065][T18629] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1460.784516][T18629] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1460.823557][T18629] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1460.999304][T18799] wg1 speed is unknown, defaulting to 1000 [ 1461.032451][ T7988] Bluetooth: hci6: command tx timeout [ 1461.083880][T18629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1461.112305][T18629] 8021q: adding VLAN 0 to HW filter on device team0 [ 1461.136962][ T6196] bridge0: port 1(bridge_slave_0) entered blocking state [ 1461.144517][ T6196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1461.184494][ T6196] bridge0: port 2(bridge_slave_1) entered blocking state [ 1461.191871][ T6196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1461.233380][T18807] __nla_validate_parse: 8 callbacks suppressed [ 1461.233403][T18807] netlink: 64691 bytes leftover after parsing attributes in process `syz.1.11238'. [ 1461.284336][T18810] netlink: 'syz.4.11237': attribute type 2 has an invalid length. [ 1461.598122][T18818] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11241'. [ 1461.622068][T18818] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11241'. [ 1461.777893][T18799] lo speed is unknown, defaulting to 1000 [ 1461.802374][T18799] wlan1 speed is unknown, defaulting to 1000 [ 1461.867529][T18629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1462.297208][T18840] bond4: option tlb_dynamic_lb: invalid value (109) [ 1462.311401][T18840] bond4 (unregistering): Released all slaves [ 1462.575373][T18629] veth0_vlan: entered promiscuous mode [ 1462.631143][T18629] veth1_vlan: entered promiscuous mode [ 1462.699098][T18864] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11248'. [ 1462.791264][T18629] veth0_macvtap: entered promiscuous mode [ 1462.804750][T18629] veth1_macvtap: entered promiscuous mode [ 1463.024362][T18629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1463.080890][T18629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1463.110488][ T7988] Bluetooth: hci6: command tx timeout [ 1463.121589][ T6203] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1463.131378][T18878] netlink: 'syz.3.11253': attribute type 16 has an invalid length. [ 1463.141739][ T6203] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1463.150998][T18878] netlink: 'syz.3.11253': attribute type 17 has an invalid length. [ 1463.160725][ T6203] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1463.170963][ T6203] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1463.193984][T18872] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11251'. [ 1463.211839][T18880] bridge0: port 1(bridge_slave_0) entered disabled state [ 1463.221349][T18880] bridge0: port 2(bridge_slave_1) entered disabled state [ 1463.340889][T18878] bridge0: port 3(dummy0) entered blocking state [ 1463.347819][T18878] bridge0: port 3(dummy0) entered listening state [ 1463.476548][T18878] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1463.594555][T18881] wg1 speed is unknown, defaulting to 1000 [ 1463.675695][T18885] bridge0: port 1(bridge_slave_0) entered disabled state [ 1463.683096][T18885] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1463.808546][T18885] syzkaller1: entered promiscuous mode [ 1463.830831][T18885] syzkaller1: entered allmulticast mode [ 1464.026473][ T6196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1464.034449][ T6196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1464.217424][ T6204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1464.233600][ T6204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1464.252425][T18890] netlink: 'syz.0.11255': attribute type 32 has an invalid length. [ 1464.435205][T18881] lo speed is unknown, defaulting to 1000 [ 1464.447015][T18881] wlan1 speed is unknown, defaulting to 1000 [ 1464.783176][T18902] netlink: 36 bytes leftover after parsing attributes in process `syz.6.11187'. [ 1464.863343][T18902] netlink: 36 bytes leftover after parsing attributes in process `syz.6.11187'. [ 1464.879857][T18913] netlink: 'syz.0.11257': attribute type 39 has an invalid length. [ 1464.895850][T18902] netlink: 36 bytes leftover after parsing attributes in process `syz.6.11187'. [ 1464.936927][T18902] netlink: 36 bytes leftover after parsing attributes in process `syz.6.11187'. [ 1464.965440][T18902] netlink: 36 bytes leftover after parsing attributes in process `syz.6.11187'. [ 1465.081192][T18902] bridge0: port 2(bridge_slave_1) entered disabled state [ 1465.088995][T18902] bridge0: port 1(bridge_slave_0) entered disabled state [ 1465.268113][T18902] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1465.318287][T18902] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1465.697575][ T6202] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1465.725475][ T6202] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1465.779871][ T6202] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1465.800345][ T6202] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1466.241407][T18947] geneve4: entered promiscuous mode [ 1466.320222][T18947] syzkaller1: tun_chr_ioctl cmd 35111 [ 1466.631920][T18971] Cannot find add_set index 0 as target [ 1466.652177][T18968] netlink: 'syz.3.11275': attribute type 27 has an invalid length. [ 1467.215336][T18968] bridge0: port 3(dummy0) entered disabled state [ 1467.245334][T18998] IPVS: set_ctl: invalid protocol: 115 172.20.20.170:20003 [ 1467.525941][T19005] netlink: 'syz.0.11280': attribute type 13 has an invalid length. [ 1467.662177][T18968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1467.758775][T18968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1468.099905][T18968] vlan2: left allmulticast mode [ 1468.104838][T18968] veth0_to_bond: left allmulticast mode [ 1468.119623][T18968] bond1: left allmulticast mode [ 1468.161922][T18968] geneve2: left promiscuous mode [ 1468.173438][T18968] geneve4: left promiscuous mode [ 1468.333497][ T6196] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1468.355568][ T6196] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1468.416043][ T6196] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1468.443066][ T6196] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1468.456207][ T6204] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1468.486392][ T6204] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1468.500671][T19014] __nla_validate_parse: 142 callbacks suppressed [ 1468.500696][T19014] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11282'. [ 1468.603379][ T6204] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1468.622747][ T6204] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1468.652148][T19014] netlink: 'syz.3.11282': attribute type 10 has an invalid length. [ 1468.663025][T19014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1468.701895][T19024] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11287'. [ 1468.718789][T19025] block nbd0: not configured, cannot reconfigure [ 1469.000398][T19033] syzkaller0: entered promiscuous mode [ 1469.021592][T19033] syzkaller0: entered allmulticast mode [ 1469.038559][T19035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11290'. [ 1469.048509][T19035] netlink: 56 bytes leftover after parsing attributes in process `syz.3.11290'. [ 1469.058721][T19035] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11290'. [ 1469.072414][T19035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11290'. [ 1469.082625][T19035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11290'. [ 1469.096809][T19039] netlink: 'syz.0.11291': attribute type 2 has an invalid length. [ 1469.104846][T19039] tipc: Started in network mode [ 1469.111925][T19039] tipc: Node identity 1340008, cluster identity 4711 [ 1469.119957][T19039] tipc: Node number set to 20185096 [ 1469.127673][T19035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11290'. [ 1469.140442][T19035] netlink: 56 bytes leftover after parsing attributes in process `syz.3.11290'. [ 1469.150407][T19035] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11290'. [ 1469.234284][T19045] netlink: 'syz.0.11292': attribute type 6 has an invalid length. [ 1469.251561][T19045] netlink: 'syz.0.11292': attribute type 5 has an invalid length. [ 1469.336482][T19048] ip6erspan0: entered promiscuous mode [ 1470.093008][T19081] : entered promiscuous mode [ 1470.130771][T19083] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1470.335977][T19091] bond13: Removing last arp target with arp_interval on [ 1470.346898][T19103] netlink: 'syz.1.11310': attribute type 13 has an invalid length. [ 1470.356203][T19088] syzkaller1: entered promiscuous mode [ 1470.361731][T19088] syzkaller1: entered allmulticast mode [ 1470.593528][T19114] netlink: 'syz.6.11316': attribute type 34 has an invalid length. [ 1470.602234][T19113] netlink: 'syz.0.11314': attribute type 1 has an invalid length. [ 1470.658884][T19113] erspan1: entered allmulticast mode [ 1470.757003][T19115] lo: Caught tx_queue_len zero misconfig [ 1471.001514][T19132] x_tables: unsorted underflow at hook 4 [ 1471.688110][T19170] netlink: 'syz.3.11329': attribute type 2 has an invalid length. [ 1471.951410][T19186] netlink: 'syz.1.11337': attribute type 2 has an invalid length. [ 1472.437820][T19212] bond14: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 1472.476914][T19212] bond14 (unregistering): Released all slaves [ 1472.612104][T19228] syzkaller1: entered promiscuous mode [ 1472.631246][T19228] syzkaller1: entered allmulticast mode [ 1472.921482][T19250] lo: Caught tx_queue_len zero misconfig [ 1472.982131][T19250] delete_channel: no stack [ 1473.640881][ T7988] block nbd0: Receive control failed (result -32) [ 1473.859993][T19284] __nla_validate_parse: 329 callbacks suppressed [ 1473.860017][T19284] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11361'. [ 1473.927738][T19287] netlink: 68 bytes leftover after parsing attributes in process `syz.3.11364'. [ 1474.164140][T19302] netlink: 'syz.4.11369': attribute type 5 has an invalid length. [ 1474.244738][T19305] bond0: entered promiscuous mode [ 1474.245945][T19308] netlink: 'syz.0.11370': attribute type 1 has an invalid length. [ 1474.254232][T19305] bond_slave_0: entered promiscuous mode [ 1474.262725][T19308] netlink: 224 bytes leftover after parsing attributes in process `syz.0.11370'. [ 1474.272293][T19305] bond_slave_1: entered promiscuous mode [ 1474.281856][T19305] batadv0: entered promiscuous mode [ 1474.303879][T19305] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 1474.316636][T19305] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 1474.328775][T19305] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1474.346456][T19305] bond0: left promiscuous mode [ 1474.352168][T19305] bond_slave_0: left promiscuous mode [ 1474.358722][T19305] bond_slave_1: left promiscuous mode [ 1474.382476][T19305] batadv0: left promiscuous mode [ 1474.773921][T19332] team0 (unregistering): Port device team_slave_1 removed [ 1474.822028][T19342] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11377'. [ 1474.872735][T19342] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11377'. [ 1474.959927][T19348] vlan1: entered promiscuous mode [ 1474.999081][T19350] netlink: 'syz.1.11380': attribute type 1 has an invalid length. [ 1475.008728][T19350] netlink: 152 bytes leftover after parsing attributes in process `syz.1.11380'. [ 1475.235220][T19369] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11384'. [ 1475.268057][T19369] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11384'. [ 1475.283932][T19370] mac80211_hwsim hwsim123 wlan0: Caught tx_queue_len zero misconfig [ 1475.443479][T19372] netlink: 'syz.4.11387': attribute type 10 has an invalid length. [ 1475.511895][T19380] netlink: 496 bytes leftover after parsing attributes in process `syz.6.11388'. [ 1475.666922][T19390] pimreg: entered allmulticast mode [ 1475.675942][T19389] rdma_rxe: rxe_newlink: failed to add lo [ 1475.689412][T19390] pimreg: left allmulticast mode [ 1475.767045][T19392] netlink: 76 bytes leftover after parsing attributes in process `syz.0.11390'. [ 1475.907688][T19396] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1475.986759][T19403] netlink: 'syz.4.11396': attribute type 2 has an invalid length. [ 1476.313003][T19412] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1476.337109][T19412] bond0: (slave bond4): Enslaving as an active interface with an up link [ 1476.836209][T19446] netlink: 'syz.3.11410': attribute type 1 has an invalid length. [ 1476.943478][T19446] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1477.492774][T19481] netlink: 'syz.3.11418': attribute type 5 has an invalid length. [ 1477.537671][T19489] vlan0: entered allmulticast mode [ 1477.574301][T19488] syzkaller0: entered promiscuous mode [ 1477.582054][T19488] syzkaller0: entered allmulticast mode [ 1477.841795][T19496] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1477.912416][T19511] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1478.181284][T19521] wg1 speed is unknown, defaulting to 1000 [ 1478.358266][T19540] bond8: option min_links: invalid value (18446744073709551612) [ 1478.369849][T19540] bond8: option min_links: allowed values 0 - 2147483647 [ 1478.386457][T19540] bond8 (unregistering): Released all slaves [ 1478.482492][T19547] mac80211_hwsim hwsim123 syzkaller0: entered promiscuous mode [ 1478.490921][T19547] mac80211_hwsim hwsim123 syzkaller0: entered allmulticast mode [ 1478.678475][T19552] vlan3: entered promiscuous mode [ 1478.833166][T19521] lo speed is unknown, defaulting to 1000 [ 1478.843717][T19521] wlan1 speed is unknown, defaulting to 1000 [ 1479.035701][T19572] __nla_validate_parse: 12 callbacks suppressed [ 1479.035726][T19572] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11446'. [ 1479.086179][T19574] sock: sock_set_timeout: `syz.0.11447' (pid 19574) tries to set negative timeout [ 1479.338470][T19584] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1479.995768][T19610] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.11462'. [ 1480.207033][T19616] netlink: 64 bytes leftover after parsing attributes in process `syz.1.11465'. [ 1480.359978][T19624] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11469'. [ 1480.437607][T19624] bond3: Invalid ad_actor_system MAC address. [ 1480.443911][T19624] bond3: option ad_actor_system: invalid value (281419142266867) [ 1480.467168][T19624] bond3 (unregistering): Released all slaves [ 1480.539444][T19636] netlink: 'syz.3.11474': attribute type 1 has an invalid length. [ 1480.550030][T19636] netlink: 224 bytes leftover after parsing attributes in process `syz.3.11474'. [ 1481.052500][T19666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11486'. [ 1481.065952][T19666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11486'. [ 1481.328266][T19677] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11490'. [ 1481.530911][T19690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11496'. [ 1481.541994][T19691] netlink: 68 bytes leftover after parsing attributes in process `syz.0.11497'. [ 1481.561267][T19690] netlink: 'syz.4.11496': attribute type 2 has an invalid length. [ 1481.582975][T19690] netlink: 'syz.4.11496': attribute type 1 has an invalid length. [ 1483.185319][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1483.581969][T19809] syzkaller0: entered promiscuous mode [ 1483.592623][T19809] syzkaller0: entered allmulticast mode [ 1483.988386][T19799] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1484.481651][ T1299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1484.493090][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 1489.825248][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5330 ms [ 1489.833413][ C1] lec:lec_tx_timeout: lec0 [ 1505.266130][T14155] lec:lec_start_xmit: lec0:No lecd attached [ 1510.785095][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5520 ms [ 1510.793273][ C1] lec:lec_tx_timeout: lec0 [ 1525.462903][T19890] __nla_validate_parse: 5 callbacks suppressed [ 1525.462927][T19890] netlink: 44 bytes leftover after parsing attributes in process `syz.3.11564'. [ 1525.613822][T19896] syzkaller1: entered promiscuous mode [ 1525.645920][T19896] syzkaller1: entered allmulticast mode [ 1525.781394][T19910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11570'. [ 1526.010634][T19927] tipc: New replicast peer: 255.255.255.255 [ 1526.018724][T19927] tipc: Enabled bearer , priority 26 [ 1526.303997][T19940] wg1 speed is unknown, defaulting to 1000 [ 1526.321063][T19944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11579'. [ 1526.364399][T19944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11579'. [ 1526.374244][T19944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11579'. [ 1526.394130][T19938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11580'. [ 1526.578437][T19954] netlink: 'syz.0.11583': attribute type 1 has an invalid length. [ 1526.586855][T19954] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1526.646435][T19954] geneve4: entered promiscuous mode [ 1526.654883][T19954] geneve4: entered allmulticast mode [ 1526.693656][T19940] lo speed is unknown, defaulting to 1000 [ 1526.702372][T19940] wlan1 speed is unknown, defaulting to 1000 [ 1527.018162][T19971] syzkaller1: entered promiscuous mode [ 1527.051663][T19971] syzkaller1: entered allmulticast mode [ 1527.164146][T19977] bond8: option updelay: invalid value (18446744072924056005) [ 1527.182730][T19977] bond8: option updelay: allowed values 0 - 2147483647 [ 1527.202074][T19977] bond8 (unregistering): Released all slaves [ 1527.286293][T14777] tipc: Node number set to 3758096386 [ 1527.339609][T19987] sch_fq: defrate 0 ignored. [ 1528.229257][T20024] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11605'. [ 1528.251354][T20024] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11605'. [ 1528.441806][T20039] netlink: 'syz.3.11609': attribute type 1 has an invalid length. [ 1528.458276][T20039] netlink: 228 bytes leftover after parsing attributes in process `syz.3.11609'. [ 1528.536288][T20044] netlink: 104 bytes leftover after parsing attributes in process `syz.0.11610'. [ 1528.576027][T20044] netlink: 'syz.0.11610': attribute type 1 has an invalid length. [ 1528.602334][T20050] xt_TCPMSS: Only works on TCP SYN packets [ 1528.776593][T20051] bond14: (slave vxcan5): The slave device specified does not support setting the MAC address [ 1528.792645][T20051] bond14: (slave vxcan5): Error -95 calling set_mac_address [ 1528.966731][T20057] bond14: (slave bridge10): Enslaving as an active interface with a down link [ 1529.030474][T20058] syzkaller1: entered promiscuous mode [ 1529.046890][T20058] syzkaller1: entered allmulticast mode [ 1529.078199][T20044] bond14: (slave bridge11): Enslaving as an active interface with a down link [ 1529.143143][T20051] macvlan2: entered promiscuous mode [ 1529.148820][T20051] macvlan2: entered allmulticast mode [ 1529.156686][T20051] bond14: entered promiscuous mode [ 1529.162973][T20051] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1529.177625][T20051] bond14: left promiscuous mode [ 1529.220595][T20075] syzkaller0: entered promiscuous mode [ 1529.237547][T20075] syzkaller0: entered allmulticast mode [ 1529.291045][T20075] 8021q: VLANs not supported on ip6tnl0 [ 1529.538329][T20090] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1529.546687][T20097] wg1 speed is unknown, defaulting to 1000 [ 1529.587004][T20090] sctp: [Deprecated]: syz.6.11621 (pid 20090) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1529.587004][T20090] Use struct sctp_sack_info instead [ 1529.755787][T20105] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1529.773240][T20106] macsec2: entered promiscuous mode [ 1529.790130][T20106] bond8: entered promiscuous mode [ 1529.805211][T20106] bond8: left promiscuous mode [ 1529.840131][T20118] tipc: Enabling of bearer rejected, failed to enable media [ 1530.066293][T20128] netlink: 'syz.0.11632': attribute type 1 has an invalid length. [ 1530.100870][T20097] lo speed is unknown, defaulting to 1000 [ 1530.106878][T20128] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 1530.111970][T20097] wlan1 speed is unknown, defaulting to 1000 [ 1530.263697][T20134] wg1 speed is unknown, defaulting to 1000 [ 1530.591128][T20149] batadv0: entered promiscuous mode [ 1530.597806][T20149] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1530.688297][T20154] __nla_validate_parse: 71 callbacks suppressed [ 1530.688321][T20154] netlink: 256 bytes leftover after parsing attributes in process `syz.4.11637'. [ 1530.753864][T20156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11640'. [ 1530.768183][T20134] lo speed is unknown, defaulting to 1000 [ 1530.788552][T20162] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11641'. [ 1530.810500][T20134] wlan1 speed is unknown, defaulting to 1000 [ 1530.828452][T20157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11640'. [ 1530.905194][T20167] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11639'. [ 1531.432332][T16828] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1531.453287][T16828] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1531.560511][T20190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1531.573361][T20193] netlink: 'syz.4.11646': attribute type 1 has an invalid length. [ 1531.619466][T20193] netlink: 256 bytes leftover after parsing attributes in process `syz.4.11646'. [ 1531.711748][ T29] audit: type=1800 audit(1773022997.972:28): pid=20180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.11644" name="memory.events" dev="tmpfs" ino=2127 res=0 errno=0 [ 1531.803146][T20193] bond6: option miimon: invalid value (18446744073709551607) [ 1531.827886][T20193] bond6: option miimon: allowed values 0 - 2147483647 [ 1531.888720][T20193] bond6 (unregistering): Released all slaves [ 1532.160821][T20204] netlink: 'syz.4.11649': attribute type 1 has an invalid length. [ 1532.276885][T20204] bond6: entered promiscuous mode [ 1532.282482][T20204] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1532.354796][T20207] macvtap1: entered allmulticast mode [ 1532.416586][T20209] bond6: (slave bridge11): making interface the new active one [ 1532.434664][T20209] bridge11: entered promiscuous mode [ 1532.454156][T20209] bond6: (slave bridge11): Enslaving as an active interface with an up link [ 1532.653002][T20218] netlink: 76 bytes leftover after parsing attributes in process `syz.1.11652'. [ 1532.724311][T20222] SET target dimension over the limit! [ 1532.843133][T20226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11654'. [ 1532.878282][T20226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11654'. [ 1532.904678][T20228] wg1 speed is unknown, defaulting to 1000 [ 1532.916113][T20226] netlink: 'syz.3.11654': attribute type 4 has an invalid length. [ 1532.933345][T20226] netlink: 'syz.3.11654': attribute type 4 has an invalid length. [ 1533.024543][T20236] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11657'. [ 1533.169636][T20242] netlink: 'syz.0.11660': attribute type 30 has an invalid length. [ 1533.305907][T20250] netlink: 'syz.3.11661': attribute type 29 has an invalid length. [ 1533.315679][T20250] netlink: 'syz.3.11661': attribute type 29 has an invalid length. [ 1533.323897][T20250] netlink: 'syz.3.11661': attribute type 29 has an invalid length. [ 1533.361787][T20250] netlink: 'syz.3.11661': attribute type 29 has an invalid length. [ 1533.425041][T20250] netlink: 'syz.3.11661': attribute type 29 has an invalid length. [ 1533.453932][T20250] netlink: 'syz.3.11661': attribute type 29 has an invalid length. [ 1533.574434][T20228] lo speed is unknown, defaulting to 1000 [ 1533.590134][T20228] wlan1 speed is unknown, defaulting to 1000 [ 1533.717200][T20269] wg1 speed is unknown, defaulting to 1000 [ 1533.765616][T20272] xt_l2tp: invalid flags combination: 0 [ 1534.492989][T20269] lo speed is unknown, defaulting to 1000 [ 1534.509160][T20269] wlan1 speed is unknown, defaulting to 1000 [ 1534.644053][T20299] batadv0: entered promiscuous mode [ 1534.656698][T20299] batadv0: left promiscuous mode [ 1534.740402][T20310] xt_hashlimit: size too large, truncated to 1048576 [ 1535.387475][T20332] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 1535.397967][T20338] --map-set only usable from mangle table [ 1535.916575][T20353] wg1 speed is unknown, defaulting to 1000 [ 1535.992079][T20356] macsec1: entered promiscuous mode [ 1535.997841][T20356] macsec1: entered allmulticast mode [ 1536.364657][T20365] __nla_validate_parse: 33 callbacks suppressed [ 1536.364679][T20365] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11689'. [ 1536.417265][T20361] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1536.432738][T20365] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11689'. [ 1536.444070][T20361] bond3 (unregistering): Released all slaves [ 1536.472859][T20353] lo speed is unknown, defaulting to 1000 [ 1536.481951][T20353] wlan1 speed is unknown, defaulting to 1000 [ 1536.739919][T20377] netlink: 91 bytes leftover after parsing attributes in process `syz.0.11695'. [ 1536.753264][T20375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11693'. [ 1536.755859][T20378] netlink: 91 bytes leftover after parsing attributes in process `syz.0.11695'. [ 1536.874007][T20380] netlink: 'syz.6.11696': attribute type 11 has an invalid length. [ 1536.928335][T20383] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11697'. [ 1537.148516][T20395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1537.657595][T20432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11711'. [ 1537.851445][T20438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11713'. [ 1537.995969][T20443] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11716'. [ 1538.051258][T20446] validate_nla: 25 callbacks suppressed [ 1538.051279][T20446] netlink: 'syz.6.11717': attribute type 15 has an invalid length. [ 1538.145251][T20444] netlink: 'syz.3.11715': attribute type 5 has an invalid length. [ 1538.295566][T20453] IPVS: length: 4096 != 8 [ 1538.435379][T20459] syzkaller0: entered promiscuous mode [ 1538.445118][T20459] syzkaller0: entered allmulticast mode [ 1538.758884][T20481] tipc: Enabling of bearer rejected, failed to enable media [ 1538.851755][T17173] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1538.863049][T17173] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1538.872323][T17173] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1538.888211][T17173] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1538.902325][T17173] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1539.001102][T20487] wg1 speed is unknown, defaulting to 1000 [ 1539.043793][T20493] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20003 [ 1539.574926][T20487] lo speed is unknown, defaulting to 1000 [ 1539.587335][T20487] wlan1 speed is unknown, defaulting to 1000 [ 1539.624280][T20512] netlink: 'syz.4.11732': attribute type 5 has an invalid length. [ 1539.639931][T20518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11734'. [ 1539.860244][T20524] lo: Caught tx_queue_len zero misconfig [ 1540.208438][T20535] tipc: Enabled bearer , priority 26 [ 1540.376993][T20538] vlan3: entered promiscuous mode [ 1540.475724][T20543] tipc: Enabled bearer , priority 0 [ 1540.957879][ T7988] Bluetooth: hci7: command tx timeout [ 1541.071820][T10944] batman_adv: batadv0: Removing interface: gretap1 [ 1541.133541][T10944] team0: Port device geneve0 removed [ 1541.264674][T10944] bond4 (unregistering): (slave bridge4): Releasing backup interface [ 1541.320769][T10944] team0: Port device bridge5 removed [ 1541.439551][T10944] bond8 (unregistering): (slave bridge0): Releasing active interface [ 1541.506000][T10944] team0: Port device bridge8 removed [ 1541.559300][T10944] bond11 (unregistering): (slave bridge9): Releasing backup interface [ 1541.569107][T10944] bridge9 (unregistering): left promiscuous mode [ 1541.610780][T10944] bond14 (unregistering): (slave bridge10): Releasing active interface [ 1541.673668][T10944] bond14 (unregistering): (slave bridge11): Releasing active interface [ 1541.727901][T10944] bond0 (unregistering): Released all slaves [ 1541.741133][T10944] bond1 (unregistering): Released all slaves [ 1541.769762][T10944] bond2 (unregistering): Released all slaves [ 1541.792071][T10944] team0: Port device bond3 removed [ 1541.798562][T10944] bond3 (unregistering): Released all slaves [ 1541.824691][T10944] bond4 (unregistering): Released all slaves [ 1541.843876][T10944] bond5 (unregistering): Released all slaves [ 1541.865944][T10944] bond6 (unregistering): Released all slaves [ 1541.885346][T10944] bond7 (unregistering): Released all slaves [ 1541.901899][T10944] bond8 (unregistering): Released all slaves [ 1541.922162][T10944] bond9 (unregistering): Released all slaves [ 1541.937544][T10944] bond10 (unregistering): Released all slaves [ 1541.952723][T10944] bond11 (unregistering): Released all slaves [ 1541.968207][T10944] bond12 (unregistering): Released all slaves [ 1541.988182][T10944] bond13 (unregistering): Released all slaves [ 1542.003045][T10944] bond14 (unregistering): Released all slaves [ 1542.059567][T20543] syzkaller0: entered promiscuous mode [ 1542.071146][T20543] syzkaller0: entered allmulticast mode [ 1542.079421][T20543] tipc: Resetting bearer [ 1542.308066][T10952] tipc: Resetting bearer [ 1542.314786][T20540] tipc: Resetting bearer [ 1543.029469][ T7988] Bluetooth: hci7: command tx timeout [ 1544.487809][T20540] tipc: Disabling bearer [ 1544.498720][T29719] tipc: Node number set to 11777 [ 1544.524387][T10944] : left promiscuous mode [ 1544.707599][T10944] tipc: Left network mode [ 1544.891193][T20487] chnl_net:caif_netlink_parms(): no params data found [ 1545.105533][ T7988] Bluetooth: hci7: command tx timeout [ 1545.200831][T20617] __nla_validate_parse: 3 callbacks suppressed [ 1545.200855][T20617] netlink: 176 bytes leftover after parsing attributes in process `syz.6.11753'. [ 1545.221870][T20618] netlink: 'syz.4.11754': attribute type 4 has an invalid length. [ 1545.238751][T20618] netlink: 152 bytes leftover after parsing attributes in process `syz.4.11754'. [ 1545.298350][T20618] wlan1: mtu less than device minimum [ 1545.504439][T20487] bridge0: port 1(bridge_slave_0) entered blocking state [ 1545.511958][T20487] bridge0: port 1(bridge_slave_0) entered disabled state [ 1545.521747][T20487] bridge_slave_0: entered allmulticast mode [ 1545.529930][T20487] bridge_slave_0: entered promiscuous mode [ 1545.614176][T20487] bridge0: port 2(bridge_slave_1) entered blocking state [ 1545.632554][T20638] netlink: 220 bytes leftover after parsing attributes in process `syz.1.11758'. [ 1545.642350][T20487] bridge0: port 2(bridge_slave_1) entered disabled state [ 1545.655414][T20487] bridge_slave_1: entered allmulticast mode [ 1545.684732][T20487] bridge_slave_1: entered promiscuous mode [ 1545.867244][T20640] syzkaller1: entered promiscuous mode [ 1545.885175][T20640] syzkaller1: entered allmulticast mode [ 1545.911663][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1545.923677][ T1299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1545.935394][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 1546.060599][T20487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1546.176454][T20487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1546.199617][T20657] gretap0: left allmulticast mode [ 1546.206826][T20657] gretap0: left promiscuous mode [ 1546.212733][T20657] bridge0: port 3(gretap0) entered disabled state [ 1546.243913][T20657] team0: Port device dummy0 removed [ 1546.261582][T20657] bond0: (slave batadv0): Releasing backup interface [ 1546.272821][T20657] bridge_slave_0: left promiscuous mode [ 1546.279769][T20657] bridge0: port 1(bridge_slave_0) entered disabled state [ 1546.291634][T20657] bridge_slave_1: left allmulticast mode [ 1546.298667][T20657] bridge_slave_1: left promiscuous mode [ 1546.304527][T20657] bridge0: port 2(bridge_slave_1) entered disabled state [ 1546.318369][T20657] bond0: (slave bond_slave_0): Releasing backup interface [ 1546.344434][T20657] bond0: (slave bond_slave_1): Releasing backup interface [ 1546.383008][T20657] team0: Port device team_slave_0 removed [ 1546.397533][T20657] team0: Port device team_slave_1 removed [ 1546.417133][T20657] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1546.549706][T20487] team0: Port device team_slave_0 added [ 1546.564261][T20487] team0: Port device team_slave_1 added [ 1546.570615][T20666] dummy0: mtu less than device minimum [ 1546.886269][T20676] xt_ecn: cannot match TCP bits for non-tcp packets [ 1546.893419][T20487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1546.917751][T20487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1546.974913][T20487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1547.086515][T20487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1547.107285][T20487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1547.161004][T20487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1547.182190][T20688] netlink: 'syz.6.11770': attribute type 1 has an invalid length. [ 1547.195506][ T7988] Bluetooth: hci7: command tx timeout [ 1547.393721][T20691] bond3: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1547.426104][T20691] bond3: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 1547.437803][T20691] bond3: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 1547.471566][T20690] ip6tnl0: Caught tx_queue_len zero misconfig [ 1547.559501][T10944] hsr_slave_0: left promiscuous mode [ 1547.574749][T10944] hsr_slave_1: left promiscuous mode [ 1548.059815][T20728] netlink: 'syz.3.11774': attribute type 8 has an invalid length. [ 1548.093491][T10952] smc: removing ib device !yz! [ 1548.125203][T20734] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11776'. [ 1548.467572][T20487] hsr_slave_0: entered promiscuous mode [ 1548.481206][T20487] hsr_slave_1: entered promiscuous mode [ 1548.507006][T20487] debugfs: 'hsr0' already exists in 'hsr' [ 1548.512819][T20487] Cannot create hsr debugfs directory [ 1548.750687][T20739] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1548.957454][T20745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11780'. [ 1550.404947][T20816] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11796'. [ 1550.491932][T20817] macsec2: entered promiscuous mode [ 1550.545311][T20817] geneve1: entered promiscuous mode [ 1550.551021][T20817] macsec2: entered allmulticast mode [ 1550.571140][T20817] geneve1: entered allmulticast mode [ 1550.600297][ T6202] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1550.623340][ T6202] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1550.623784][T20816] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11796'. [ 1550.663026][ T6202] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1550.847166][ T6202] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1550.946550][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1550.954652][ C1] lec:lec_tx_timeout: lec0 [ 1550.981641][T20831] dummy0: left allmulticast mode [ 1551.015230][T20831] dummy0: left promiscuous mode [ 1551.023720][T20831] bridge0: port 3(dummy0) entered disabled state [ 1551.085250][T20831] bridge_slave_1: left allmulticast mode [ 1551.091386][T20831] bridge_slave_1: left promiscuous mode [ 1551.098046][T20831] bridge0: port 2(bridge_slave_1) entered disabled state [ 1551.153741][T20831] bridge_slave_0: left allmulticast mode [ 1551.160165][T20831] bridge_slave_0: left promiscuous mode [ 1551.166669][T20831] bridge0: port 1(bridge_slave_0) entered disabled state [ 1551.213856][T20838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11802'. [ 1551.484149][T20851] netlink: 'syz.3.11805': attribute type 1 has an invalid length. [ 1551.594178][T20848] macsec0: entered promiscuous mode [ 1551.774132][T20851] bond6: entered promiscuous mode [ 1551.779870][T20851] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1551.820395][T20866] openvswitch: netlink: Actions may not be safe on all matching packets [ 1551.841707][T20853] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1551.874067][T20853] bond6: (slave vti0): The slave device specified does not support setting the MAC address [ 1551.885615][T20853] bond6: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 1551.906237][T20853] bond6: (slave vti0): making interface the new active one [ 1551.934184][T20853] vti0: entered promiscuous mode [ 1551.971543][T20853] bond6: (slave vti0): Enslaving as an active interface with an up link [ 1552.245989][T20874] netlink: 'syz.3.11809': attribute type 1 has an invalid length. [ 1552.312537][T20878] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11810'. [ 1552.644048][T20881] bond7: (slave bridge0): making interface the new active one [ 1552.666121][T20881] bond7: (slave bridge0): Enslaving as an active interface with an up link [ 1552.732188][T20897] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.11815'. [ 1552.956682][T20904] ipvlan3: entered allmulticast mode [ 1552.982506][T20904] macvlan0: entered allmulticast mode [ 1553.153153][T10944] IPVS: stop unused estimator thread 0... [ 1553.256236][T20918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11819'. [ 1553.268489][T20918] netlink: 'syz.1.11819': attribute type 2 has an invalid length. [ 1553.283930][T20918] hmac(sha224: entered promiscuous mode [ 1553.381243][T20926] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11822'. [ 1553.435957][T20926] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11822'. [ 1553.449073][T20487] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1553.477630][T20926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11822'. [ 1553.521967][T20487] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1553.606091][T20487] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1553.669504][T20487] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1553.696396][T20931] wg1 speed is unknown, defaulting to 1000 [ 1554.270795][T20487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1554.333635][T20968] syzkaller0: entered promiscuous mode [ 1554.355422][T20968] syzkaller0: entered allmulticast mode [ 1554.377997][T20931] lo speed is unknown, defaulting to 1000 [ 1554.386030][T20931] wlan1 speed is unknown, defaulting to 1000 [ 1554.450314][T20978] netlink: 'syz.1.11829': attribute type 13 has an invalid length. [ 1554.463498][T20487] 8021q: adding VLAN 0 to HW filter on device team0 [ 1554.475504][T20978] netlink: 'syz.1.11829': attribute type 17 has an invalid length. [ 1554.588882][ T29] audit: type=1800 audit(1773023020.862:29): pid=20982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.11829" name="memory.events" dev="tmpfs" ino=3220 res=0 errno=0 [ 1554.618509][ T29] audit: type=1804 audit(1773023020.892:30): pid=20982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.11829" name="/newroot/625/memory.events" dev="tmpfs" ino=3220 res=1 errno=0 [ 1554.686052][T20978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1554.699035][T20978] 8021q: adding VLAN 0 to HW filter on device team0 [ 1554.711984][T20978] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1554.732606][T20968] bridge_slave_1: Caught tx_queue_len zero misconfig [ 1554.739722][T20968] sch_fq: defrate 0 ignored. [ 1554.947069][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 1554.954289][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1554.989138][T20990] netlink: 76 bytes leftover after parsing attributes in process `syz.3.11830'. [ 1555.138079][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 1555.145342][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1555.497248][T21020] __nla_validate_parse: 1 callbacks suppressed [ 1555.497270][T21020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11835'. [ 1555.559067][T21019] netlink: 'syz.3.11834': attribute type 1 has an invalid length. [ 1555.581266][T21019] netlink: 'syz.3.11834': attribute type 2 has an invalid length. [ 1556.060123][T20487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1556.101512][T21033] syzkaller0: entered promiscuous mode [ 1556.107191][T21033] syzkaller0: entered allmulticast mode [ 1556.183026][T21044] siw: device registration error -23 [ 1556.278422][T21051] netlink: 'syz.6.11840': attribute type 10 has an invalid length. [ 1556.289506][T21050] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1556.357575][T21052] netlink: 'syz.6.11840': attribute type 10 has an invalid length. [ 1556.390569][T20487] veth0_vlan: entered promiscuous mode [ 1556.450516][T21051] team0: Port device dummy0 added [ 1556.541915][T21052] team0: Port device dummy0 removed [ 1556.613314][T21052] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1556.674887][T20487] veth1_vlan: entered promiscuous mode [ 1556.844073][T20487] veth0_macvtap: entered promiscuous mode [ 1556.933362][T20487] veth1_macvtap: entered promiscuous mode [ 1557.017732][T20487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1557.079751][T20487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1557.096188][T21070] netlink: 'syz.4.11846': attribute type 2 has an invalid length. [ 1557.144591][T21089] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11851'. [ 1557.223169][T16828] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1557.242778][T16828] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1557.288928][T16828] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1557.307386][ T48] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1557.447383][T21106] openvswitch: netlink: Flow actions attr not present in new flow. [ 1557.526840][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1557.551218][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1557.672240][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1557.705448][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1558.249396][T21153] netlink: 'syz.6.11864': attribute type 96 has an invalid length. [ 1558.414397][T21160] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11866'. [ 1558.443167][T21158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11865'. [ 1558.452317][T21158] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11865'. [ 1558.467609][T21158] netlink: 'syz.4.11865': attribute type 13 has an invalid length. [ 1558.487618][T16828] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1558.495123][T21158] netlink: 'syz.4.11865': attribute type 11 has an invalid length. [ 1558.505483][T16828] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1558.532252][T16828] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1558.551537][T16828] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1558.596651][T17173] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1558.608119][T17173] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1558.619796][T17173] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1558.630680][T17173] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1558.641095][T17173] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1558.777187][T21166] wg1 speed is unknown, defaulting to 1000 [ 1559.500872][ T48] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1559.522701][ T48] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1559.537493][T21166] lo speed is unknown, defaulting to 1000 [ 1559.586692][ T48] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1559.609576][T21166] wlan1 speed is unknown, defaulting to 1000 [ 1559.618197][ T48] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1559.732450][T21193] netlink: 'syz.3.11872': attribute type 5 has an invalid length. [ 1559.791524][T21205] netlink: 'syz.0.11874': attribute type 58 has an invalid length. [ 1559.847412][T21209] netlink: 'syz.0.11874': attribute type 58 has an invalid length. [ 1559.909637][T21209] netlink: 'syz.0.11874': attribute type 58 has an invalid length. [ 1560.158924][T21224] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11880'. [ 1560.209554][T21166] chnl_net:caif_netlink_parms(): no params data found [ 1560.562348][T21250] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11883'. [ 1560.706930][ T7988] Bluetooth: hci1: command tx timeout [ 1560.862442][T21266] netlink: 'syz.3.11887': attribute type 1 has an invalid length. [ 1560.875629][T21266] netlink: 'syz.3.11887': attribute type 7 has an invalid length. [ 1560.883601][T21266] netlink: 208 bytes leftover after parsing attributes in process `syz.3.11887'. [ 1560.949840][T21166] bridge0: port 1(bridge_slave_0) entered blocking state [ 1560.957624][T21166] bridge0: port 1(bridge_slave_0) entered disabled state [ 1560.965603][T21166] bridge_slave_0: entered allmulticast mode [ 1560.973875][T21166] bridge_slave_0: entered promiscuous mode [ 1560.983670][T21166] bridge0: port 2(bridge_slave_1) entered blocking state [ 1560.992615][T21166] bridge0: port 2(bridge_slave_1) entered disabled state [ 1561.006173][T21166] bridge_slave_1: entered allmulticast mode [ 1561.015596][T21166] bridge_slave_1: entered promiscuous mode [ 1561.113644][T21166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1561.136707][T21166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1561.220393][T21166] team0: Port device team_slave_0 added [ 1561.229974][T21166] team0: Port device team_slave_1 added [ 1561.298191][T21166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1561.306060][T21166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1561.338909][T21166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1561.385987][T21166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1561.401862][T21166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1561.431724][T21166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1561.445450][T21284] wg1 speed is unknown, defaulting to 1000 [ 1561.453577][T21286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11887'. [ 1561.483799][T21286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11887'. [ 1561.535210][T21289] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11892'. [ 1561.590440][T21289] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11892'. [ 1561.615777][T21166] hsr_slave_0: entered promiscuous mode [ 1561.623103][T21166] hsr_slave_1: entered promiscuous mode [ 1561.636528][T21166] debugfs: 'hsr0' already exists in 'hsr' [ 1561.651513][T21166] Cannot create hsr debugfs directory [ 1562.060663][T21284] lo speed is unknown, defaulting to 1000 [ 1562.067107][T21296] wg1 speed is unknown, defaulting to 1000 [ 1562.095504][T21284] wlan1 speed is unknown, defaulting to 1000 [ 1562.472703][T21314] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 1562.498506][T21296] lo speed is unknown, defaulting to 1000 [ 1562.507781][T21296] wlan1 speed is unknown, defaulting to 1000 [ 1562.546126][T21310] validate_nla: 6 callbacks suppressed [ 1562.546164][T21310] netlink: 'syz.6.11899': attribute type 5 has an invalid length. [ 1562.724854][T21321] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11903'. [ 1562.786239][ T7988] Bluetooth: hci1: command tx timeout [ 1562.793735][T21323] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11903'. [ 1562.873372][T21321] ip6gretap1: entered promiscuous mode [ 1562.879753][T21321] ip6gretap1: entered allmulticast mode [ 1564.207682][T21166] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1564.298573][T21355] geneve3: entered promiscuous mode [ 1564.319424][T21166] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1564.360577][T21166] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1564.442861][T21166] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1564.488581][T21363] netlink: 'syz.3.11913': attribute type 5 has an invalid length. [ 1564.759970][T21166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1564.837149][T21388] wg1 speed is unknown, defaulting to 1000 [ 1564.848881][T21166] 8021q: adding VLAN 0 to HW filter on device team0 [ 1564.857094][T21392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11921'. [ 1564.867377][ T7988] Bluetooth: hci1: command tx timeout [ 1564.886795][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 1564.894197][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1564.957978][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 1564.965259][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1565.074804][T21399] syzkaller1: entered promiscuous mode [ 1565.089344][T21399] syzkaller1: entered allmulticast mode [ 1565.375846][T21388] lo speed is unknown, defaulting to 1000 [ 1565.383654][T21388] wlan1 speed is unknown, defaulting to 1000 [ 1565.688157][T21166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1565.711238][T21427] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1565.732175][T21427] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1565.769201][T21428] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1565.776620][T21428] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1565.783602][T21428] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1565.790695][T21428] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1565.797608][T21428] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1565.804511][T21428] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1565.811524][T21428] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1565.906465][T21427] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11931'. [ 1565.984786][T21431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11931'. [ 1565.995560][T21431] netlink: 348 bytes leftover after parsing attributes in process `syz.0.11931'. [ 1566.007403][T21431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11931'. [ 1566.017019][T21431] netlink: 348 bytes leftover after parsing attributes in process `syz.0.11931'. [ 1566.035307][T21431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11931'. [ 1566.166867][T21427] bridge_slave_1: left allmulticast mode [ 1566.172639][T21427] bridge_slave_1: left promiscuous mode [ 1566.179130][T21427] bridge0: port 2(bridge_slave_1) entered disabled state [ 1566.193929][T21427] bridge_slave_0: left allmulticast mode [ 1566.202142][T21427] bridge_slave_0: left promiscuous mode [ 1566.235592][T21427] bridge0: port 1(bridge_slave_0) entered disabled state [ 1566.359520][T21166] veth0_vlan: entered promiscuous mode [ 1566.418768][T21166] veth1_vlan: entered promiscuous mode [ 1566.442223][T21452] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11935'. [ 1566.661290][T21166] veth0_macvtap: entered promiscuous mode [ 1566.687439][T21462] netlink: 48 bytes leftover after parsing attributes in process `syz.6.11938'. [ 1566.704785][T21166] veth1_macvtap: entered promiscuous mode [ 1566.734131][T21462] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11938'. [ 1566.821010][T21166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1566.853793][T21166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1566.889342][ T6196] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1566.932475][ T6196] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1566.947510][ T7988] Bluetooth: hci1: command tx timeout [ 1566.954527][ T6196] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1567.012949][ T6196] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1567.194345][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1567.203199][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1567.314503][T10944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1567.338947][T10944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1567.617210][T21493] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11947'. [ 1567.840317][ T48] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1567.851005][ T48] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1567.887889][ T48] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1567.921524][ T48] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1567.944334][T21502] vlan0: entered promiscuous mode [ 1568.543519][T21541] netlink: 'syz.4.11963': attribute type 1 has an invalid length. [ 1568.569442][T21544] IPVS: length: 24 != 393240 [ 1568.883374][T21551] geneve4: entered promiscuous mode [ 1568.888951][T21551] geneve4: entered allmulticast mode [ 1569.467209][T14155] lec:lec_start_xmit: lec0:No lecd attached [ 1569.543615][T21577] wg1 speed is unknown, defaulting to 1000 [ 1570.455828][T21577] lo speed is unknown, defaulting to 1000 [ 1570.463422][T21577] wlan1 speed is unknown, defaulting to 1000 [ 1570.621112][T21632] blkio.reset_stats is deprecated [ 1570.830372][T21645] netlink: 'syz.3.11991': attribute type 1 has an invalid length. [ 1570.907689][T21645] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1570.941141][T21652] IPVS: Error connecting to the multicast addr [ 1570.990112][T21645] macvlan2: entered promiscuous mode [ 1570.996240][T21645] macvlan2: entered allmulticast mode [ 1571.005700][T21652] __nla_validate_parse: 15 callbacks suppressed [ 1571.005725][T21652] netlink: 52 bytes leftover after parsing attributes in process `syz.6.11994'. [ 1571.091929][T21645] bond8: (slave ip6gretap1): making interface the new active one [ 1571.129035][T21645] bond8: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1571.431382][T21671] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11998'. [ 1571.455734][T21671] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1571.499200][T21679] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1571.541543][T21677] vti0: entered promiscuous mode [ 1571.811833][T21693] netlink: 'syz.3.12006': attribute type 1 has an invalid length. [ 1571.999842][T21706] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12008'. [ 1572.020934][T21693] netlink: 'syz.3.12006': attribute type 4 has an invalid length. [ 1572.051374][T21693] netlink: 'syz.3.12006': attribute type 4 has an invalid length. [ 1572.342843][T21726] wg1 speed is unknown, defaulting to 1000 [ 1572.397969][T21731] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12016'. [ 1572.433276][T21735] netlink: 'syz.4.12017': attribute type 7 has an invalid length. [ 1572.450671][T21735] netlink: 'syz.4.12017': attribute type 8 has an invalid length. [ 1572.589478][T21738] netlink: 'syz.0.12018': attribute type 5 has an invalid length. [ 1572.657296][ T48] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 1572.858157][T21744] wg1 speed is unknown, defaulting to 1000 [ 1572.865349][T21726] lo speed is unknown, defaulting to 1000 [ 1572.873196][T21726] wlan1 speed is unknown, defaulting to 1000 [ 1573.241329][T21754] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12023'. [ 1573.362033][T21754] vlan2: entered allmulticast mode [ 1573.375631][T21754] team0: entered allmulticast mode [ 1573.381009][T21754] team_slave_0: entered allmulticast mode [ 1573.398136][T21762] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12025'. [ 1573.399707][T21754] team_slave_1: entered allmulticast mode [ 1573.420148][T21744] lo speed is unknown, defaulting to 1000 [ 1573.440588][T21744] wlan1 speed is unknown, defaulting to 1000 [ 1573.577111][T21762] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12025'. [ 1573.612869][T21772] x_tables: duplicate underflow at hook 1 [ 1573.631409][T21774] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12027'. [ 1573.648703][T21774] netlink: 165 bytes leftover after parsing attributes in process `syz.6.12027'. [ 1573.819954][T21776] xt_ecn: cannot match TCP bits for non-tcp packets [ 1574.017663][T21787] netlink: 'syz.1.12032': attribute type 5 has an invalid length. [ 1574.327358][T21797] netlink: 'syz.0.12036': attribute type 1 has an invalid length. [ 1574.346465][T21797] netlink: 'syz.0.12036': attribute type 2 has an invalid length. [ 1574.354743][T21797] netlink: 'syz.0.12036': attribute type 1 has an invalid length. [ 1574.362843][T21797] netlink: 'syz.0.12036': attribute type 3 has an invalid length. [ 1574.560064][T21808] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12038'. [ 1574.603682][T21813] wg1 speed is unknown, defaulting to 1000 [ 1574.785237][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5320 ms [ 1574.793410][ C1] lec:lec_tx_timeout: lec0 [ 1574.852725][T21813] lo speed is unknown, defaulting to 1000 [ 1574.860882][T21813] wlan1 speed is unknown, defaulting to 1000 [ 1575.063966][T21835] netlink: 'syz.3.12048': attribute type 7 has an invalid length. [ 1575.485301][T21861] netlink: 'syz.4.12053': attribute type 2 has an invalid length. [ 1575.637667][T21867] team_slave_1: Caught tx_queue_len zero misconfig [ 1575.667074][T21871] netlink: 'syz.4.12057': attribute type 10 has an invalid length. [ 1575.800206][T21870] net_ratelimit: 440 callbacks suppressed [ 1575.800228][T21870] IPv6: addrconf: prefix option has invalid lifetime [ 1575.812890][T21870] IPv6: addrconf: prefix option has invalid lifetime [ 1575.842154][T21871] team0: Failed to send options change via netlink (err -105) [ 1575.855474][T21871] team0: Port device dummy0 added [ 1576.048834][T21889] netlink: 'syz.3.12060': attribute type 1 has an invalid length. [ 1576.708326][T21932] wg1 speed is unknown, defaulting to 1000 [ 1576.736225][T21924] __nla_validate_parse: 4 callbacks suppressed [ 1576.736245][T21924] netlink: 48 bytes leftover after parsing attributes in process `syz.6.12071'. [ 1576.891682][T21931] netlink: 52 bytes leftover after parsing attributes in process `syz.1.12073'. [ 1576.901916][T21931] netlink: 52 bytes leftover after parsing attributes in process `syz.1.12073'. [ 1576.911485][T21931] netlink: 52 bytes leftover after parsing attributes in process `syz.1.12073'. [ 1576.939654][T21945] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12071'. [ 1577.458043][T21932] lo speed is unknown, defaulting to 1000 [ 1577.462084][T21959] wg1 speed is unknown, defaulting to 1000 [ 1577.491800][T21932] wlan1 speed is unknown, defaulting to 1000 [ 1577.886748][T21959] lo speed is unknown, defaulting to 1000 [ 1577.897814][T21959] wlan1 speed is unknown, defaulting to 1000 [ 1578.039556][T21985] netlink: 52 bytes leftover after parsing attributes in process `syz.3.12090'. [ 1578.054926][T21986] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12089'. [ 1578.152038][T21986] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1578.206868][T21996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12089'. [ 1578.254093][T21983] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1578.293905][T21983] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 1578.412122][T21996] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 1578.432177][T21996] bond1 (unregistering): Released all slaves [ 1578.442713][T22006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12095'. [ 1578.590377][T22008] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12096'. [ 1578.937117][T22024] hsr0: entered promiscuous mode [ 1578.996390][T22024] hsr_slave_0: left promiscuous mode [ 1579.002994][T22024] hsr_slave_1: left promiscuous mode [ 1579.043991][T22024] hsr0 (unregistering): left promiscuous mode [ 1580.472180][T22066] wg1 speed is unknown, defaulting to 1000 [ 1580.761048][T22103] tipc: Started in network mode [ 1580.781874][T22103] tipc: Node identity 6a06c2e048ae, cluster identity 4711 [ 1580.831011][T22103] tipc: Enabled bearer , priority 0 [ 1580.930188][T22103] tipc: Disabling bearer [ 1580.966345][T22118] netlink: get zone limit has 4 unknown bytes [ 1581.071786][T22108] wg1 speed is unknown, defaulting to 1000 [ 1581.072732][T22066] lo speed is unknown, defaulting to 1000 [ 1581.088756][T22066] wlan1 speed is unknown, defaulting to 1000 [ 1581.104437][T22125] netlink: 'syz.1.12127': attribute type 7 has an invalid length. [ 1581.141610][T22125] netlink: 'syz.1.12127': attribute type 7 has an invalid length. [ 1581.172677][T22126] netlink: 'syz.1.12127': attribute type 11 has an invalid length. [ 1581.434549][T22108] lo speed is unknown, defaulting to 1000 [ 1581.495384][T22108] wlan1 speed is unknown, defaulting to 1000 [ 1581.950972][T22156] __nla_validate_parse: 8 callbacks suppressed [ 1581.950997][T22156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12137'. [ 1582.003555][T22156] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12137'. [ 1582.206386][T22159] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1582.219359][T22162] block nbd9: server does not support multiple connections per device. [ 1582.252968][T22162] block nbd9: shutting down sockets [ 1582.264593][T22163] bond8: (slave vcan0): refused to change device type [ 1582.364322][T22171] netlink: 'syz.1.12141': attribute type 1 has an invalid length. [ 1582.372597][T22171] netlink: 88 bytes leftover after parsing attributes in process `syz.1.12141'. [ 1582.391025][T22171] netlink: 1 bytes leftover after parsing attributes in process `syz.1.12141'. [ 1582.401173][T22171] netlink: 'syz.1.12141': attribute type 1 has an invalid length. [ 1582.409654][T22171] netlink: 634 bytes leftover after parsing attributes in process `syz.1.12141'. [ 1582.763900][T22190] syzkaller0: entered promiscuous mode [ 1582.772488][T22190] syzkaller0: entered allmulticast mode [ 1582.861590][T22195] netlink: 464 bytes leftover after parsing attributes in process `syz.0.12146'. [ 1583.354854][T22212] netlink: 'syz.6.12153': attribute type 11 has an invalid length. [ 1583.363251][T22212] netlink: 199828 bytes leftover after parsing attributes in process `syz.6.12153'. [ 1584.320235][T22239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12162'. [ 1584.376954][T22240] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12164'. [ 1584.418269][T22239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12162'. [ 1584.683208][T22256] xt_hashlimit: overflow, rate too high: 0 [ 1586.184421][T22291] FAULT_INJECTION: forcing a failure. [ 1586.184421][T22291] name failslab, interval 1, probability 0, space 0, times 0 [ 1586.198136][T22291] CPU: 0 UID: 0 PID: 22291 Comm: syz.3.12180 Not tainted syzkaller #0 PREEMPT(full) [ 1586.198164][T22291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1586.198179][T22291] Call Trace: [ 1586.198188][T22291] [ 1586.198197][T22291] dump_stack_lvl+0xe8/0x150 [ 1586.198233][T22291] should_fail_ex+0x412/0x560 [ 1586.198267][T22291] should_failslab+0xa8/0x100 [ 1586.198297][T22291] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1586.198320][T22291] ? __alloc_skb+0x186/0x7d0 [ 1586.198350][T22291] ? __alloc_skb+0x1d0/0x7d0 [ 1586.198379][T22291] ? __local_bh_enable_ip+0xd0/0x130 [ 1586.198414][T22291] __alloc_skb+0x1d0/0x7d0 [ 1586.198444][T22291] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 1586.198474][T22291] netlink_sendmsg+0x5d4/0xb40 [ 1586.198513][T22291] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1586.198548][T22291] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1586.198578][T22291] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1586.198606][T22291] ____sys_sendmsg+0x972/0x9f0 [ 1586.198639][T22291] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1586.198672][T22291] ? import_iovec+0x73/0xa0 [ 1586.198709][T22291] ___sys_sendmsg+0x2a5/0x360 [ 1586.198737][T22291] ? __pfx____sys_sendmsg+0x10/0x10 [ 1586.198808][T22291] ? __fget_files+0x2a/0x420 [ 1586.198839][T22291] ? __fget_files+0x3a0/0x420 [ 1586.198883][T22291] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1586.198909][T22291] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1586.198943][T22291] ? __pfx_ksys_write+0x10/0x10 [ 1586.198980][T22291] do_syscall_64+0x14d/0xf80 [ 1586.199002][T22291] ? trace_irq_disable+0x3b/0x150 [ 1586.199038][T22291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1586.199062][T22291] ? clear_bhb_loop+0x40/0x90 [ 1586.199090][T22291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1586.199113][T22291] RIP: 0033:0x7f9bddd9c799 [ 1586.199139][T22291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1586.199159][T22291] RSP: 002b:00007f9bdebdd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1586.199184][T22291] RAX: ffffffffffffffda RBX: 00007f9bde015fa0 RCX: 00007f9bddd9c799 [ 1586.199201][T22291] RDX: 0000000004008000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1586.199216][T22291] RBP: 00007f9bdebdd090 R08: 0000000000000000 R09: 0000000000000000 [ 1586.199230][T22291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1586.199244][T22291] R13: 00007f9bde016038 R14: 00007f9bde015fa0 R15: 00007ffc248ab858 [ 1586.199279][T22291] [ 1587.061209][T22308] __nla_validate_parse: 9 callbacks suppressed [ 1587.061229][T22308] netlink: 164 bytes leftover after parsing attributes in process `syz.1.12188'. [ 1587.223384][T22319] netlink: 7 bytes leftover after parsing attributes in process `syz.3.12189'. [ 1587.233769][T22319] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12189'. [ 1587.239567][T17173] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1587.288375][T17173] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1587.315354][T17173] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1587.344187][T17173] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1587.366666][T17173] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1587.426236][T22323] netlink: 830 bytes leftover after parsing attributes in process `syz.0.12191'. [ 1587.551312][T22316] wg1 speed is unknown, defaulting to 1000 [ 1587.593680][T22327] bridge0: port 3(gretap0) entered blocking state [ 1587.603179][T22327] bridge0: port 3(gretap0) entered disabled state [ 1587.625443][T22327] gretap0: entered allmulticast mode [ 1587.632715][T22327] gretap0: entered promiscuous mode [ 1587.678645][T22327] bridge0: port 3(gretap0) entered blocking state [ 1587.685293][T22327] bridge0: port 3(gretap0) entered forwarding state [ 1588.037106][T22345] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.12199'. [ 1588.247579][T22316] lo speed is unknown, defaulting to 1000 [ 1588.271629][T22316] wlan1 speed is unknown, defaulting to 1000 [ 1588.370322][T22360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12202'. [ 1588.776943][T22316] chnl_net:caif_netlink_parms(): no params data found [ 1588.948651][T22381] netlink: 'syz.0.12207': attribute type 1 has an invalid length. [ 1589.071172][T22385] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12208'. [ 1589.201897][T22381] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1589.213802][T22316] bridge0: port 1(bridge_slave_0) entered blocking state [ 1589.222336][T22316] bridge0: port 1(bridge_slave_0) entered disabled state [ 1589.230753][T22316] bridge_slave_0: entered allmulticast mode [ 1589.239462][T22316] bridge_slave_0: entered promiscuous mode [ 1589.278714][T22316] bridge0: port 2(bridge_slave_1) entered blocking state [ 1589.288086][T22316] bridge0: port 2(bridge_slave_1) entered disabled state [ 1589.296014][T22316] bridge_slave_1: entered allmulticast mode [ 1589.304089][T22316] bridge_slave_1: entered promiscuous mode [ 1589.392250][T22316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1589.427464][T17173] Bluetooth: hci5: command tx timeout [ 1589.481968][T22316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1589.600924][T22401] netlink: 64 bytes leftover after parsing attributes in process `syz.1.12210'. [ 1589.639862][T22401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12210'. [ 1589.725823][T22316] team0: Port device team_slave_0 added [ 1589.736193][T22316] team0: Port device team_slave_1 added [ 1589.831241][T22405] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12212'. [ 1589.851790][T22316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1589.885317][T22316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1589.955101][T22316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1589.969912][T22316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1589.977306][T22316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1590.048656][T22316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1590.124122][T22316] hsr_slave_0: entered promiscuous mode [ 1590.131322][T22316] hsr_slave_1: entered promiscuous mode [ 1590.156477][T22316] debugfs: 'hsr0' already exists in 'hsr' [ 1590.166808][T22316] Cannot create hsr debugfs directory [ 1590.620568][T22316] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1590.705276][T22423] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1590.711401][T22423] syzkaller1: linktype set to 823 [ 1590.744532][T22316] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1590.822349][T22316] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1590.881071][T22438] netlink: 'syz.3.12223': attribute type 5 has an invalid length. [ 1590.930587][T22437] netlink: 'syz.1.12224': attribute type 1 has an invalid length. [ 1590.948326][T22316] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1591.280333][T22454] netlink: 'syz.1.12228': attribute type 2 has an invalid length. [ 1591.295495][T22316] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1591.308589][T22316] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1591.322277][T22316] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1591.344588][T22316] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1591.487454][T22316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1591.506758][T17173] Bluetooth: hci5: command tx timeout [ 1591.529552][T22316] 8021q: adding VLAN 0 to HW filter on device team0 [ 1591.564027][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 1591.571260][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1591.596798][ T6196] bridge0: port 2(bridge_slave_1) entered blocking state [ 1591.604148][ T6196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1591.673265][T22316] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1591.684165][T22316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1591.822666][T22265] Set syz1 is full, maxelem 65536 reached [ 1592.144892][T22476] bridge0: entered allmulticast mode [ 1592.292310][T22478] bridge_slave_1: left allmulticast mode [ 1592.324377][T22478] bridge_slave_1: left promiscuous mode [ 1592.351733][T22478] bridge0: port 2(bridge_slave_1) entered disabled state [ 1592.436124][T22478] bridge_slave_0: left allmulticast mode [ 1592.443935][T22478] bridge_slave_0: left promiscuous mode [ 1592.490845][T22478] bridge0: port 1(bridge_slave_0) entered disabled state [ 1592.617871][T22492] __nla_validate_parse: 6 callbacks suppressed [ 1592.617891][T22492] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12238'. [ 1592.638363][T22316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1592.738373][T22492] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1592.754365][T22493] macsec1: entered promiscuous mode [ 1592.768685][T22493] bond1: entered promiscuous mode [ 1592.802839][T22493] bond1: left promiscuous mode [ 1593.170616][T22518] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12244'. [ 1593.402396][T22522] wg1 speed is unknown, defaulting to 1000 [ 1593.586795][T17173] Bluetooth: hci5: command tx timeout [ 1593.622475][T22316] veth0_vlan: entered promiscuous mode [ 1593.730837][T22316] veth1_vlan: entered promiscuous mode [ 1593.814305][T22316] veth0_macvtap: entered promiscuous mode [ 1593.856066][T22316] veth1_macvtap: entered promiscuous mode [ 1593.913379][T22316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1593.951570][T22316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1593.982215][T10952] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1594.006475][T10952] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1594.067157][T22532] wg1 speed is unknown, defaulting to 1000 [ 1594.067179][T22522] lo speed is unknown, defaulting to 1000 [ 1594.080782][T10952] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1594.106703][T10952] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1594.141771][T22522] wlan1 speed is unknown, defaulting to 1000 [ 1594.462733][ T6203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1594.484463][ T6203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1594.574321][T10944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1594.584531][T10944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1594.641118][T22532] lo speed is unknown, defaulting to 1000 [ 1594.672040][T22532] wlan1 speed is unknown, defaulting to 1000 [ 1594.871115][T22573] netlink: 'syz.6.12259': attribute type 89 has an invalid length. [ 1595.136162][T22586] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12265'. [ 1595.240309][T22590] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12264'. [ 1595.263124][T22590] netlink: 64 bytes leftover after parsing attributes in process `syz.4.12264'. [ 1595.294243][T22590] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12264'. [ 1595.371313][T22597] netlink: 'syz.6.12267': attribute type 1 has an invalid length. [ 1595.423727][T22600] netlink: 16 bytes leftover after parsing attributes in process `syz.6.12267'. [ 1595.610609][T22605] netlink: 'syz.6.12267': attribute type 32 has an invalid length. [ 1595.631145][T22597] bond4: entered promiscuous mode [ 1595.654483][T22608] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1595.665728][T17173] Bluetooth: hci5: command tx timeout [ 1595.718784][T22613] netlink: 'syz.0.12270': attribute type 6 has an invalid length. [ 1595.737674][T22597] bond4: entered allmulticast mode [ 1595.782407][T22597] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1595.831580][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1595.848595][T22601] syzkaller0: entered promiscuous mode [ 1595.866823][T22601] syzkaller0: entered allmulticast mode [ 1595.897704][T22600] macvlan3: entered promiscuous mode [ 1595.903134][T22600] macvlan3: entered allmulticast mode [ 1595.924613][T22600] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1595.933779][T22628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12272'. [ 1595.950353][T22628] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12272'. [ 1595.960497][T22628] netlink: 'syz.3.12272': attribute type 18 has an invalid length. [ 1595.990610][T22606] tipc: Enabled bearer , priority 0 [ 1596.001340][T22619] tipc: Resetting bearer [ 1596.020916][T22598] tipc: Resetting bearer [ 1596.059372][T22598] tipc: Disabling bearer [ 1596.110639][T22623] syzkaller0: entered promiscuous mode [ 1596.116535][T22623] syzkaller0: entered allmulticast mode [ 1596.117175][T22631] netlink: 'syz.0.12274': attribute type 4 has an invalid length. [ 1596.170592][T22635] netlink: 120 bytes leftover after parsing attributes in process `syz.0.12274'. [ 1596.473520][ T30] INFO: task syz.5.11059:18109 blocked for more than 143 seconds. [ 1596.495733][ T30] Not tainted syzkaller #0 [ 1596.500747][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1596.529330][ T30] task:syz.5.11059 state:D stack:24768 pid:18109 tgid:18108 ppid:17172 task_flags:0x400140 flags:0x00080002 [ 1596.547383][ T30] Call Trace: [ 1596.552460][ T30] [ 1596.558620][ T30] __schedule+0x15dd/0x52d0 [ 1596.565381][ T30] ? __pfx___schedule+0x10/0x10 [ 1596.573475][ T30] ? schedule+0x90/0x360 [ 1596.582581][ T30] schedule+0x164/0x360 [ 1596.586906][T22655] Cannot find del_set index 0 as target [ 1596.601387][ T30] schedule_preempt_disabled+0x13/0x30 [ 1596.607729][ T30] __mutex_lock+0x7fe/0x1300 [ 1596.612470][ T30] ? __mutex_lock+0x5ac/0x1300 [ 1596.620471][ T30] ? nfsd_nl_threads_get_doit+0x1c0/0x790 [ 1596.632272][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1596.637819][ T30] ? __nlmsg_put+0xef/0x1b0 [ 1596.642612][ T30] ? genlmsg_put+0x137/0x2e0 [ 1596.647855][ T30] nfsd_nl_threads_get_doit+0x1c0/0x790 [ 1596.658105][ T30] ? kmem_cache_free+0x187/0x630 [ 1596.663218][ T30] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 1596.670130][ T30] ? dev_hard_start_xmit+0x802/0x870 [ 1596.675949][ T30] genl_family_rcv_msg_doit+0x22a/0x330 [ 1596.681760][ T30] ? __asan_memcpy+0x40/0x70 [ 1596.687006][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1596.693364][ T30] genl_rcv_msg+0x61c/0x7a0 [ 1596.698540][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1596.703848][ T30] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 1596.711921][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1596.719223][ T30] netlink_rcv_skb+0x232/0x4b0 [ 1596.724187][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1596.730131][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1596.736920][ T30] ? down_read+0x272/0x2e0 [ 1596.741654][ T30] ? genl_rcv+0xd/0x40 [ 1596.747522][ T30] genl_rcv+0x28/0x40 [ 1596.751878][ T30] netlink_unicast+0x80f/0x9b0 [ 1596.765375][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 1596.770923][ T30] ? netlink_sendmsg+0x650/0xb40 [ 1596.776821][ T30] ? skb_put+0x11b/0x210 [ 1596.781386][ T30] netlink_sendmsg+0x813/0xb40 [ 1596.787380][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1596.792916][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1596.800804][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1596.807656][ T30] ____sys_sendmsg+0x972/0x9f0 [ 1596.812799][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1596.818764][ T30] ? import_iovec+0x73/0xa0 [ 1596.823657][ T30] ___sys_sendmsg+0x2a5/0x360 [ 1596.829602][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 1596.835734][ T30] ? futex_wake+0x4ac/0x580 [ 1596.840736][ T30] ? __fget_files+0x2a/0x420 [ 1596.846560][ T30] ? __fget_files+0x3a0/0x420 [ 1596.851519][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1596.857128][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1596.863300][ T30] ? rcu_is_watching+0x15/0xb0 [ 1596.870289][ T30] do_syscall_64+0x14d/0xf80 [ 1596.875193][ T30] ? trace_irq_disable+0x3b/0x150 [ 1596.880640][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1596.886957][ T30] ? clear_bhb_loop+0x40/0x90 [ 1596.892126][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1596.898361][ T30] RIP: 0033:0x7f5452b9c799 [ 1596.903000][ T30] RSP: 002b:00007f5453a4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1596.911589][ T30] RAX: ffffffffffffffda RBX: 00007f5452e15fa0 RCX: 00007f5452b9c799 [ 1596.919891][ T30] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1596.928037][ T30] RBP: 00007f5452c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1596.936686][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1596.944721][ T30] R13: 00007f5452e16038 R14: 00007f5452e15fa0 R15: 00007fff5df12bd8 [ 1596.954146][ T30] [ 1596.957633][ T30] [ 1596.957633][ T30] Showing all locks held in the system: [ 1596.966256][ T30] 1 lock held by khungtaskd/30: [ 1596.971160][ T30] #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1596.981729][ T30] 2 locks held by getty/5580: [ 1596.986647][ T30] #0: ffff888036c390a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1596.996776][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 1597.007205][ T30] 5 locks held by kworker/u8:18/6203: [ 1597.012757][ T30] 2 locks held by syz.2.10692/16634: [ 1597.018312][ T30] #0: ffffffff8fc35930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1597.027681][ T30] #1: ffffffff8ea875e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 1597.038451][ T30] 2 locks held by syz.5.11059/18109: [ 1597.043830][ T30] #0: ffffffff8fc35930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1597.052389][ T30] #1: ffffffff8ea875e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1c0/0x790 [ 1597.062640][ T30] 2 locks held by syz.6.12276/22636: [ 1597.068383][ T30] #0: ffff8880893b7508 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 1597.079004][ T30] #1: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1597.090448][ T30] 1 lock held by syz.6.12276/22637: [ 1597.095957][ T30] #0: ffff88806c4a7cd8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_valid_genid+0x3b/0x100 [ 1597.116411][ T30] 2 locks held by syz.0.12279/22646: [ 1597.122111][ T30] #0: ffff8880a59ffac8 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 1597.132789][ T30] #1: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1597.143992][ T30] 1 lock held by syz.3.12280/22656: [ 1597.150196][ T30] #0: ffffffff8fbc7508 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x42a/0x820 [ 1597.159554][ T30] 1 lock held by syz.4.12281/22654: [ 1597.164913][ T30] #0: ffff8880a85320d8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_valid_genid+0x3b/0x100 [ 1597.188048][ T30] 1 lock held by syz.1.12282/22658: [ 1597.193356][ T30] #0: ffffffff8fbc7508 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 1597.202951][ T30] 1 lock held by syz.1.12282/22660: [ 1597.208421][ T30] #0: ffffffff8fbc7508 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 1597.218025][ T30] [ 1597.227798][ T30] ============================================= [ 1597.227798][ T30] [ 1597.255144][ T30] NMI backtrace for cpu 0 [ 1597.255166][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1597.255189][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1597.255203][ T30] Call Trace: [ 1597.255213][ T30] [ 1597.255223][ T30] dump_stack_lvl+0xe8/0x150 [ 1597.255260][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 1597.255290][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1597.255321][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1597.255353][ T30] sys_info+0x135/0x170 [ 1597.255378][ T30] watchdog+0xfd9/0x1030 [ 1597.255417][ T30] ? watchdog+0x21a/0x1030 [ 1597.255458][ T30] kthread+0x388/0x470 [ 1597.255480][ T30] ? __pfx_watchdog+0x10/0x10 [ 1597.255511][ T30] ? __pfx_kthread+0x10/0x10 [ 1597.255534][ T30] ret_from_fork+0x51e/0xb90 [ 1597.255567][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1597.255594][ T30] ? __switch_to+0xc7d/0x1450 [ 1597.255622][ T30] ? __pfx_kthread+0x10/0x10 [ 1597.255646][ T30] ret_from_fork_asm+0x1a/0x30 [ 1597.255696][ T30] [ 1597.255704][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1597.370897][ C1] NMI backtrace for cpu 1 [ 1597.370916][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1597.370936][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1597.370948][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1597.370983][ C1] Code: 6e 6c 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 b0 1a 00 fb f4 fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1597.371000][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246 [ 1597.371020][ C1] RAX: 0000000000396b65 RBX: ffffffff819a88ed RCX: 0000000080000001 [ 1597.371034][ C1] RDX: 0000000000000001 RSI: ffffffff8def7f4f RDI: ffffffff8c27b200 [ 1597.371047][ C1] RBP: ffffc90000197f10 R08: ffff8880b873395b R09: 1ffff110170e672b [ 1597.371061][ C1] R10: dffffc0000000000 R11: ffffed10170e672c R12: ffffffff901141b0 [ 1597.371074][ C1] R13: 1ffff11003b5c000 R14: 0000000000000001 R15: 0000000000000001 [ 1597.371087][ C1] FS: 0000000000000000(0000) GS:ffff888125565000(0000) knlGS:0000000000000000 [ 1597.371102][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1597.371115][ C1] CR2: 000000110c3ae50d CR3: 0000000071e2c000 CR4: 00000000003526f0 [ 1597.371132][ C1] Call Trace: [ 1597.371139][ C1] [ 1597.371146][ C1] default_idle+0x9/0x20 [ 1597.371166][ C1] default_idle_call+0x72/0xb0 [ 1597.371187][ C1] do_idle+0x1bd/0x500 [ 1597.371217][ C1] ? __pfx_do_idle+0x10/0x10 [ 1597.371244][ C1] ? do_idle+0x4d6/0x500 [ 1597.371270][ C1] cpu_startup_entry+0x43/0x60 [ 1597.371295][ C1] start_secondary+0x101/0x110 [ 1597.371316][ C1] common_startup_64+0x13e/0x147 [ 1597.371345][ C1] [ 1597.545903][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1597.552818][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1597.562235][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1597.572347][ T30] Call Trace: [ 1597.575662][ T30] [ 1597.578747][ T30] vpanic+0x56c/0xa60 [ 1597.582777][ T30] ? __pfx___schedule+0x10/0x10 [ 1597.587668][ T30] ? __pfx_vpanic+0x10/0x10 [ 1597.592217][ T30] ? __pfx_console_unlock+0x10/0x10 [ 1597.597468][ T30] panic+0xc5/0xd0 [ 1597.601270][ T30] ? __pfx_panic+0x10/0x10 [ 1597.605723][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 1597.611162][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1597.617436][ T30] watchdog+0x1023/0x1030 [ 1597.621857][ T30] ? watchdog+0x21a/0x1030 [ 1597.626315][ T30] kthread+0x388/0x470 [ 1597.630410][ T30] ? __pfx_watchdog+0x10/0x10 [ 1597.635120][ T30] ? __pfx_kthread+0x10/0x10 [ 1597.639752][ T30] ret_from_fork+0x51e/0xb90 [ 1597.644467][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1597.649705][ T30] ? __switch_to+0xc7d/0x1450 [ 1597.654422][ T30] ? __pfx_kthread+0x10/0x10 [ 1597.659053][ T30] ret_from_fork_asm+0x1a/0x30 [ 1597.663868][ T30] [ 1597.667682][ T30] Kernel Offset: disabled [ 1597.672026][ T30] Rebooting in 86400 seconds..