last executing test programs: 8m50.838056621s ago: executing program 3 (id=4441): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200000038000480340001800b00010074617267657400002400028010000100434f4e4e5345434d41524b0005000300ef00000008000240000000000900010073797a30000000000900020073797a3200000000140005800800024000000000080001400080"], 0xa0}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff}}, [@TCA_RATE={0x6, 0x5, {0xfb, 0xc5}}]}, 0x2c}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x0, [0xe, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x5, 0x3, 0x7, 0xa, 0x4, 0x1, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff0d, 0x2, 0xb, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x42, 0x8, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff, 0xffff}, {0x2, 0xffe0}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xe, 0xa, 0x0, 0xf, 0x10, 0x92, 0x0, 0xff, 0x8, 0x2, 0x8, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x200, 0x5, 0x6, 0x800, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x2, 0x8, 0x7, 0x7fff, 0x81, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r9 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x2a0, 0xffffffff, 0xffffffff, 0x2a0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x41}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x401, 0x8, 0x0, 'netbios-ns\x00', 'syz0\x00', {0x840}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x128, 0x190, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x5, 0x0, 0x7, 0x3ff}}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x6, 0x4, 0xa, 0x8, 'syz0\x00', 'syz1\x00', {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3d0) r10 = socket(0x400000000010, 0x3, 0x0) recvmsg$can_j1939(r10, &(0x7f00000013c0)={&(0x7f0000000140)=@pppol2tp, 0x80, &(0x7f0000001200)=[{&(0x7f00000009c0)=""/72, 0x48}, {&(0x7f0000000a40)=""/161, 0xa1}, {&(0x7f0000000b00)=""/244, 0xf4}, {&(0x7f0000000c00)=""/161, 0xa1}, {&(0x7f0000001140)=""/136, 0x88}], 0x5, &(0x7f0000001300)=""/180, 0xb4}, 0x122) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xfff1}, {0x0, 0xf}}}, 0x24}}, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000004c4c3e2e00000000000000000000000a48000000060a0b040000000000000000020000001c00048018000180080001006c6f67000c0002800800054000007fff0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000069105a000000000004000000020000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 8m50.270794695s ago: executing program 3 (id=4450): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) close(r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706", 0x11}], 0x1}, 0x0) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000014ac1414aa00000000000000001400020002000000e000000200000000000004000d000100756470"], 0x54}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var={0x1, 0x0, 0x0, 0x11, 0x1}]}}, 0x0, 0x2a}, 0x28) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0x5, @private2}}, 0x24) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x2, 0x18, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_nat_t_port={0x1, 0x3}]}, 0x18}}, 0x0) sendmmsg(r1, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r7 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x1, &(0x7f0000000040)=0xfffffffe, 0x43) close(r7) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = socket$unix(0x1, 0x5, 0x0) connect$unix(r9, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$sock_int(r8, 0x1, 0x3, &(0x7f0000000000)=0xfffffffc, 0x3) bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r8, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r8, 0xc0385869, &(0x7f00000001c0)={r0, &(0x7f00000000c0)='GPL\x00', 0x88183, &(0x7f0000000100)={@align=0xff, {0x0, 0x1, 0xb5b, 0x4}}, 0x42, &(0x7f0000000140), &(0x7f0000000180)=0xb}) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), 0xffffffffffffffff) r10 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r10, &(0x7f0000000040)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) bind$rxrpc(r10, &(0x7f0000000100)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) 8m49.884032327s ago: executing program 3 (id=4456): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0xa0}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x1, 0x8, 0x40}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xb}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff58}, 0x48) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x110, 0x14, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0xd5, 0x8, "d10aabfce3f6b3c23993501c89386ded780e0f4da67aafe614fbf68d01ae6475793549758189216db35547fb2bf813e4235fffb194e9c78f77117ef4a69cb6807bb6c48dc8e10228ad6e50bcb8de68f56e6d95b3fc6fe51a5d6128db62e104510dfb195ab603550761c70999a35c0bb2105847f02fddd59575a454ed21218f61616e84947d0c0a077c610813595381635603d85acd4cc96252784ecc0fe5071e0377642da4a6eed355432f2746d369c0788ee6dbc58b279b3aed8d073c45ba59e0feccb7c37e2e41f699c6618a1a5add58"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x158}}, 0x0) 8m49.4117173s ago: executing program 3 (id=4465): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='devices.list\x00', 0x0, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='devices.list\x00', 0x0, 0x0) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES8=r1, @ANYRESHEX=r1, @ANYRES16=r1, @ANYRES32=r0], &(0x7f0000000180)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x0, 0xe, 0x0, &(0x7f0000000600)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x8ba4, 0x7, 0x100000a, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x8ba4, 0x7, 0x100000a, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000340)={@dev={0xfe, 0x80, '\x00', 0x44}, 0x14, r6}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000000cd9a91a2791f70000000c0000c4a300"/44], 0x0, 0x26}, 0x20) (async) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000000cd9a91a2791f70000000c0000c4a300"/44], 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={r7, 0x2, 0x0}, 0x10) r8 = socket$nl_rdma(0x10, 0x3, 0x14) socket$kcm(0x21, 0x2, 0x2) (async) r9 = socket$kcm(0x21, 0x2, 0x2) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="28000000111401002bbd7000fedbdf25080000000000080401000200000008003e0005000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x8004) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="28000000111401002bbd7000fedbdf25080000000000080401000200000008003e0005000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x8004) sendmsg$inet(r9, 0x0, 0x0) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) sendmsg$NFT_BATCH(r10, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a2c000000030a010200000000000000000300000808000540fffffffd08000540fffffffb080007006e61740020000000080a0300000000000003000000000000000003400000000000000003e8000000060a01010000000000000000000000050c000340000000000000000489000740d4d2ae08559489514e531b0a0998578177fd3f798e21603cb4ae8f0135ba17c64bca469be198b2976cd1aad78b094077dd530a331511c251b9dc01666771d5df249d041ca5bd4e346eae14bdf8f14b766fab5d45f48395c976e525aaefa9e686565fbafcfdac4486fbf2bcff5eaf18adfd8b6ae28df8cf79f663dd29b1138093a6f341c01c0000001c0005800800024000000400000001400000003b08000240000000020900020073797a300000000008000b40000000010c000340000000000000000528000000090a010200000000000000000a0000000900010073797a3000000000080005400000001a20000000120a01040000000000000000070000080900020073797a310000000078000000030a010800000000000000000700000908000b40000000020c00024000000000000000050900010073797a31000000000c00024000000000000000020900010073793a310000000008000b40000000020900030073797a32000000000900010073797a30000000000900010073797a3100000000140000001100010000000000000000000000000af8ecda97b4c768b4d5e303aea10bbb1b29bf2b222e8cd7927cce81192fad9538e196cf13ff6084e2cc0ef5ec0b85af778c83d2f12f6f4f8213262856e655fa458483accc743bc2d7a5b9b1e8da"], 0x21c}, 0x1, 0x0, 0x0, 0x400}, 0x0) (async) sendmsg$NFT_BATCH(r10, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x400}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000000b14432e28bd7000fedbdf250800010001000000"], 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x20000010) (async) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000000b14432e28bd7000fedbdf250800010001000000"], 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x20000010) r11 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000500)={0xffffffffffffffff, 0x8, 0x2, 0x81, @vifc_lcl_addr=@empty, @loopback}, 0x10) (async) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000500)={0xffffffffffffffff, 0x8, 0x2, 0x81, @vifc_lcl_addr=@empty, @loopback}, 0x10) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f00000007c0)={r9, r11, 0x1ff, 0xc8, &(0x7f0000000b00)="90a9e0cabda13b8d319bf1b0f4219d026e104cb8e9146148a97db34b317aff588d135e54b86c86ca0637535da3224ec61cabbcbff782974208b01a2d8075624023a7a58a945b127bfd495247000001267e06c6fe184d49ac83dda7fd477825d2edf0f550179a761eba724ab2acaae0e0ab9a5582ac1ad822a9729e0edc1b610ae84f29f78569bc7626f9498a13db668bcb43eadb51c63cdaebfde419026d505de205fa746219778fe881776ace115430b76280997a4552059cae98ee0a1d0f32f3fb1a736664a246", 0x30, 0x0, 0x5, 0x9, 0xc, 0x0, 0xfc, 'syz1\x00'}) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f00000007c0)={r9, r11, 0x1ff, 0xc8, &(0x7f0000000b00)="90a9e0cabda13b8d319bf1b0f4219d026e104cb8e9146148a97db34b317aff588d135e54b86c86ca0637535da3224ec61cabbcbff782974208b01a2d8075624023a7a58a945b127bfd495247000001267e06c6fe184d49ac83dda7fd477825d2edf0f550179a761eba724ab2acaae0e0ab9a5582ac1ad822a9729e0edc1b610ae84f29f78569bc7626f9498a13db668bcb43eadb51c63cdaebfde419026d505de205fa746219778fe881776ace115430b76280997a4552059cae98ee0a1d0f32f3fb1a736664a246", 0x30, 0x0, 0x5, 0x9, 0xc, 0x0, 0xfc, 'syz1\x00'}) r12 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_mtu(r13, 0x29, 0x17, 0x0, &(0x7f00000012c0)) accept4$llc(r12, 0x0, 0x0, 0x80800) 8m49.203536808s ago: executing program 3 (id=4467): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000800000000000000000000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, r1, 0x5}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000015c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xf6}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x5}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x10c}}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000780)={@map=r0, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x2, 0x200000ff, 0x4, 0x1}, 0x48) socket(0x10, 0x803, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f0000000380)=@req3={0x808000, 0x4, 0x20300, 0xfc, 0x0, 0x2}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000af000000180100002020702500000000002020207b1af8ff00000000dba100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb7}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2b}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) socket(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="5400000010000504fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0255040004000000240012800b0001006970766c616e0000140002800600020002000000060001000200000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x54}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf250000000000000000000000000000000120010000000000000000000000000001000000004e220002020000006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000001000004d6320000000000004de00e5c88da2d42000000000002000000000000000400000000000000000000000000000009000000000000000000000000000000000000000000000005000000000000004305000000000000070000000000000049000000000000000000000000000000000000000000000000000000000000000000000213bd7000fd3400000a000400500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060000000210466d38547aa140db90100000000c54222cb7a1c00040002"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 8m45.514640361s ago: executing program 3 (id=4502): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) (async, rerun: 64) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100090e000000000000000000000005000600000000000a00000000000000fc000000000000000000000000000000000000000000000005000500000000000a00000000000000060100000000000000000000000000aa0100000000000000020013"], 0x70}}, 0x0) (async) sendmmsg(r1, &(0x7f0000000180), 0x393, 0x0) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb0102180000000000000000000000000000000000fdffffff"], 0x0, 0x1a, 0x0, 0x1}, 0x28) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0x23, 0x0, 0x0) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r2, 0x0, 0x0}, 0x10) setsockopt(r3, 0xfa, 0xda7, &(0x7f00000004c0)="fcf5b3f227d6edf4e711d23f1a4b9fd59dcd65dee6317e3a1f4323c6c9ce3bf39ecdfb577b58b001745631df37500895e460e34b8e83c05bb0954c088bbdd318e2504e6342a15ff063adc61483e59afa579d937bd7ba85908acb1c6bfe4d14e5ddf1731a45a61b64b94b72246cad8f65dbaa533702bc9d161b4ea32f8150cc83ce4aeb97ae35ff8910058e7c0c742d079bb89195db08f3b5f0c9b7a5dffb2affcfdaba5d8e8b19495acc013ae3d6b3271c2b1ffd2699dd954ab1d7719905e70efae0842a532d1711bc9f2895ff92", 0xce) (async, rerun: 64) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) (async, rerun: 64) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000003060000000000000000000003d1324df76300000705000100070000000900020073797a31000000000900020073797a3200000000050001"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x2400c000) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r8, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) (async, rerun: 64) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000600)=ANY=[@ANYRES32=r1], 0x30}, 0x1, 0x0, 0x0, 0x900}, 0x8001) (async, rerun: 32) r9 = socket(0x2, 0x80805, 0x0) (async, rerun: 32) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00#\x00', @ANYRES16=r11, @ANYBLOB="010025bd7000fcdbdf254a0000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x22000092}, 0x10) sendmmsg$inet(r9, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)}], 0x1}}], 0x2, 0x48000) (async) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x28, 0x13, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 8m45.141907584s ago: executing program 32 (id=4502): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) (async, rerun: 64) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100090e000000000000000000000005000600000000000a00000000000000fc000000000000000000000000000000000000000000000005000500000000000a00000000000000060100000000000000000000000000aa0100000000000000020013"], 0x70}}, 0x0) (async) sendmmsg(r1, &(0x7f0000000180), 0x393, 0x0) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb0102180000000000000000000000000000000000fdffffff"], 0x0, 0x1a, 0x0, 0x1}, 0x28) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0x23, 0x0, 0x0) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r2, 0x0, 0x0}, 0x10) setsockopt(r3, 0xfa, 0xda7, &(0x7f00000004c0)="fcf5b3f227d6edf4e711d23f1a4b9fd59dcd65dee6317e3a1f4323c6c9ce3bf39ecdfb577b58b001745631df37500895e460e34b8e83c05bb0954c088bbdd318e2504e6342a15ff063adc61483e59afa579d937bd7ba85908acb1c6bfe4d14e5ddf1731a45a61b64b94b72246cad8f65dbaa533702bc9d161b4ea32f8150cc83ce4aeb97ae35ff8910058e7c0c742d079bb89195db08f3b5f0c9b7a5dffb2affcfdaba5d8e8b19495acc013ae3d6b3271c2b1ffd2699dd954ab1d7719905e70efae0842a532d1711bc9f2895ff92", 0xce) (async, rerun: 64) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) (async, rerun: 64) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000003060000000000000000000003d1324df76300000705000100070000000900020073797a31000000000900020073797a3200000000050001"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x2400c000) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r8, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) (async, rerun: 64) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000600)=ANY=[@ANYRES32=r1], 0x30}, 0x1, 0x0, 0x0, 0x900}, 0x8001) (async, rerun: 32) r9 = socket(0x2, 0x80805, 0x0) (async, rerun: 32) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00#\x00', @ANYRES16=r11, @ANYBLOB="010025bd7000fcdbdf254a0000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x22000092}, 0x10) sendmmsg$inet(r9, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)}], 0x1}}], 0x2, 0x48000) (async) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x28, 0x13, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 3m45.440208205s ago: executing program 4 (id=7664): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000081000400000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xcb, &(0x7f0000000140)=""/203, 0x41100, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 3m45.3185111s ago: executing program 4 (id=7666): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r2, 0x8929, &(0x7f0000000440)="8d557fd094c38f748ec33512ef3a") sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r1, &(0x7f0000008840)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000480)=""/92, 0x5c}, {&(0x7f0000002c80)=""/4131, 0x1023}, {&(0x7f00000001c0)=""/122, 0x7a}, {&(0x7f0000001bc0)=""/72, 0x48}, {&(0x7f0000000100)=""/61, 0x3d}], 0x5}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x8000005}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0xa9e5}, {{0x0, 0x0, 0x0}, 0xd58c}], 0x8, 0x2000, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ipvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x38018, 0x201a0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x800) 3m45.139184275s ago: executing program 4 (id=7670): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x6, 0x1f}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x400c084) (async, rerun: 64) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 64) r4 = gettid() r5 = syz_open_procfs$namespace(r4, &(0x7f0000000040)='ns/cgroup\x00') sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140000003b00010500bd7000fbdbdf2504001780", @ANYRES16=r3], 0x14}, {&(0x7f0000000240)={0x10, 0x19, 0x20, 0x70bd2c, 0x25dfdbfb}, 0x10}, {&(0x7f0000000280)={0x4d8, 0x17, 0x100, 0x70bd27, 0x25dfdbfd, "", [@typed={0x8, 0xfc, 0x0, 0x0, @ipv4=@remote}, @typed={0xa, 0x3c, 0x0, 0x0, @str='wlan0\x00'}, @typed={0x8, 0x152, 0x0, 0x0, @ipv4=@empty}, @nested={0x499, 0xe8, 0x0, 0x1, [@generic="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", @generic="b5506c293de18400c67981b2484273d9d2b04df68b773d158935144ad2ea7d23eb933966f140", @typed={0xc, 0xed, 0x0, 0x0, @u64=0x9}, @generic="73a96be7a3dec7f7b7006c0c7c9b65a927460ce458591890a3d7a71c829c5ff4bb7211203932ecd531bf1902ed4ae05bbcfd0d9b9fca609e52bb9613924777cc3ca321e99e86365157a382bc0e3ab751fa64d42b1a8de74b99840a82b8e92dc8786a56296ece54e7880f569c0637239777d3b95d4283711a83079a1984d3d22a2a201ab59673818cf8313612f2c041bb3490852532f7d46d856f0074f47e7c11ec59a3d69e7247fadce524f3f1565fe56c1be5894f9910ffe298fe81151c649e15cd4a2961f5380112665dbbb219", @generic="95449e03434913d1f3b0c8d26427255453da304247dd152282c5d954aba023ada754c397bde66223bc8f4042961cbf61a0b82748fa7a27123e0131ce7bed78e3d0153fe90774c1f4bbf7c5e63e6f5732368a9964a4e02815a4cb7fd8727fe26e78f1948030b6d992087c39fd3cf068a1e01fe46b3aa5618292bb6656f9d06258f492d3a52d0d40", @nested={0x4, 0x143}, @generic="8bec3a5effd10f406edef3ad7cab27b6e13cd0ad32b68d4a8315d40ba462309f66d0e73e6ec5afe8639188ced1903b72d0212e9396e87e3b5085febe78ef0d1344b6f5c9f1cfe32c60238608ba7fbcdc363bd3bd10d94aca3c639f78ca300ae497b6a2251da104ad4a7ba88ab2c1fa1cb4ff85561dc66c220265b2736ca8b6df80a38f6c1f6706d42f4c090240291cd459cf6edaa75a2076ba69818b3450c1923a4b13fdaddb2697f7f7fecb0863f0056eb0a1ce40bdbffc59851b7d669e58e0ea329c7cc6adb8f0097a78fd7237542e1fa01b099561a7942d41626fb86cc3f03f84489ff371d29f37d5cfba4d21d30247f3abccb112c700", @typed={0x4, 0x62}, @generic="08230d04b1cf719c639356e19c3004fbe1ef14e7ae98fde7a156d29a7c96e806812370aa6ec3cff22167fad0b63c7c2507b2716d57c78dc973a4eaa1d19fd035b45929d805d659acc8c17782dafdaba4cb7aaf7788d4a36546916fc448fde1410f1cf9e2fb3b4b8deb32d027f8f0cc2fcd65313efe334ef34eea1178165f82a1b3888ae46a41153b4f811783eb9b78f22ed223a7748824f8ba7dc3603006408c91a0f2d125444fa42b38cd281a12793c6541"]}, @nested={0x10, 0x8d, 0x0, 0x1, [@nested={0x4, 0x105}, @typed={0x8, 0x29, 0x0, 0x0, @fd=r5}]}]}, 0x4d8}, {&(0x7f0000001940)={0x98, 0x2c, 0x8, 0x70bd29, 0x25dfdbff, "", [@generic="04c43d262d198038733e7f0bc2ace992bc72a991f886402f132e531b137274d284", @generic="718fef1d8fd0d76cff89e7a007dbe514245184ddcd50c9869fd5199985169a6407ce1437a4f0715c60e75e61b1e0b9fe6245e627c149921a6b899879f65b9e3fb5e035f3c425519280f6161bc15b139ba11c742aa195d6e1545db79c36c17a70037021e181"]}, 0x98}], 0x4, 0x0, 0x0, 0x20000080}, 0x880) 3m45.090461152s ago: executing program 4 (id=7672): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) (async) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) (async) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) (async) r4 = socket$inet6(0xa, 0x2, 0x0) (async) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r5, &(0x7f0000000140), 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x3, 0x2ffffffff}, 0xc) r7 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x3}, 0x8) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r8}) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x521deb0b}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xd4}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x54, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x86, 0x26, 0x7ff, 0x80, 0x0, 0x8, 0x0, 0x1}}, {0x6, 0x2, [0x2]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 3m44.664611389s ago: executing program 4 (id=7678): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x2f}]}, &(0x7f0000000040)='syzkaller\x00', 0x2}, 0x90) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002480)=@newtfilter={0x44, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0xffff, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084) 3m44.447209669s ago: executing program 4 (id=7683): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00'}) splice(r2, 0x0, r2, 0x0, 0x10502, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x114, 0x34, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000003a80)={{0x2100}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x4c841}, 0x802) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 3m29.252511935s ago: executing program 33 (id=7683): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00'}) splice(r2, 0x0, r2, 0x0, 0x10502, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x114, 0x34, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000003a80)={{0x2100}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x4c841}, 0x802) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 2m33.322834684s ago: executing program 2 (id=8704): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x7, &(0x7f00000000c0)="faffffff", 0x4) ioctl$TUNSETLINK(r0, 0x400454cd, 0x324) 2m33.068964038s ago: executing program 2 (id=8708): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x201}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0)='4', 0x1) tee(r2, r1, 0xffffffffffffffff, 0x2) 2m33.028895487s ago: executing program 2 (id=8712): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x61ca45274b7cb1a9, &(0x7f0000000480)={@private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r1) (async) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x3c, r5, 0x800, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x2b, 0x21, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xc}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x9c}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040}, 0x4008010) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x2}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a534871a76d2608fff74588a80a38882f15e0", 0x0, 0x100009, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a534871a76d2608fff74588a80a38882f15e0", 0x0, 0x100009, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x58, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0x8c}, @IFLA_GRE_LOCAL={0x14, 0x6, @private1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x58, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0x8c}, @IFLA_GRE_LOCAL={0x14, 0x6, @private1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) socket(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r8, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r8, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r8, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8000}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000810}, 0x10) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8000}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000810}, 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000300)={0x0, 0x8c}, &(0x7f0000000400)=0x8) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) 2m32.655734956s ago: executing program 2 (id=8720): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) pipe(&(0x7f00000000c0)) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000140)=0x1, 0x4) socket$unix(0x1, 0x1, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) write$cgroup_subtree(r2, &(0x7f0000000280)={[{0x2b, 'freezer'}, {0x2b, 'pids'}]}, 0xf) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0xf0b, 0x2070bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x6}}]}, 0x38}}, 0x20000000) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0xf0b, 0x2070bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x6}}]}, 0x38}}, 0x20000000) r7 = socket$unix(0x1, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) recvmsg(0xffffffffffffffff, 0x0, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r12, {0x0, 0x8}, {0xffff, 0xffff}, {0x9, 0x5}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xfffffffffffffd85, 0x2, {0x0, 0xfffffff7}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) (async) sendmsg$nl_route_sched(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r12, {0x0, 0x8}, {0xffff, 0xffff}, {0x9, 0x5}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xfffffffffffffd85, 0x2, {0x0, 0xfffffff7}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r9, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r14, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) (async) vmsplice(r14, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r13, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r16 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r16, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=@newqdisc={0x34, 0x24, 0x300, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r15, {0xfff2, 0x8}, {0x2, 0xffff}, {0xb, 0x5}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x2400c054) 2m32.35865135s ago: executing program 2 (id=8726): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f", 0xb4}], 0x2}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001440)=""/67, 0x43}, {&(0x7f0000001280)=""/204, 0xcc}], 0x2}, 0x40000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=@deltaction={0xa8, 0x31, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffff3d3}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40841) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x9, 0x4}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e63}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x4}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r10) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r14 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f000000bd00)=@newtfilter={0x30, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xc, 0xfff3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$inet_sctp_SCTP_EVENTS(r14, 0x84, 0xb, &(0x7f00000000c0)={0x7, 0x7f, 0x5, 0x2, 0x8, 0x0, 0x6, 0x7, 0x1, 0xdb, 0x7, 0x9, 0xa, 0x8}, 0xe) socket$kcm(0x11, 0x3, 0x0) 2m32.261976907s ago: executing program 2 (id=8730): r0 = socket$can_raw(0x1d, 0x3, 0x1) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x26, 0x301, 0x270bda5, 0x25dfdbfa, {0x1}}, 0x14}}, 0x80) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001b80)={'bridge0\x00', &(0x7f0000001b40)=@ethtool_sfeatures={0x3b, 0x2, [{0x178f705e, 0x64ef}, {0xb, 0x1203}]}}) 2m16.867838727s ago: executing program 34 (id=8730): r0 = socket$can_raw(0x1d, 0x3, 0x1) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x26, 0x301, 0x270bda5, 0x25dfdbfa, {0x1}}, 0x14}}, 0x80) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001b80)={'bridge0\x00', &(0x7f0000001b40)=@ethtool_sfeatures={0x3b, 0x2, [{0x178f705e, 0x64ef}, {0xb, 0x1203}]}}) 2m5.673875206s ago: executing program 6 (id=9128): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x55}}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m5.531984811s ago: executing program 6 (id=9131): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000000206010000000006006269746d61703a69702c6de463004e0c67ee707a29f8b0e362e6000005000400000000000900020073797a30016789e5f882c3496b52b38d733a7a000000001c0007800c00028008000100000000000c00018008000140000000000500"/116], 0x68}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000000206010000000006006269746d61703a69702c6de463004e0c67ee707a29f8b0e362e6000005000400000000000900020073797a30016789e5f882c3496b52b38d733a7a000000001c0007800c00028008000100000000000c00018008000140000000000500"/116], 0x68}}, 0x0) 2m5.398019555s ago: executing program 6 (id=9134): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) (async) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f0000000000), &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0x21, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000e8be0000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000851000000700000085000000ac00000018290000", @ANYRES32=r2, @ANYBLOB="000000ff48a1aaed718fd2683f73e51f1f330100007f9b090006000000b7080000000000007b8af8ff000000003f000000000000007b8af0ff00000000bfa100000000000007010000f801000000a400000000000007040000f0ffff9c138c0f365ab4513bdc8396c548f573249547931ebb858f796342e01169a8409ce8c908f7f64c00a8", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000030000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 2m5.199653201s ago: executing program 6 (id=9137): r0 = socket(0x10, 0x80002, 0x0) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x42, 0x0, 0x3, 0x3}, 0x10) (async) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080), &(0x7f0000000200)=0x4) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x80, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_ctinfo={0x38, 0x1, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x3991}]}, {0x4}, {0xc}, {0xc}}}, @m_mirred={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="180100003500010000000000fcdbdf2507"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'batadv_slave_0\x00', {0x3}, 0x6}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=0x0, @ANYRESHEX=r3], 0x44}}, 0x84) (async) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 2m5.056527941s ago: executing program 6 (id=9140): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10031200e4ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0xffff, @loopback}, 0x4}}, 0x2e) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x30, r7, 0x1, 0x70bd25, 0x3, {0x7}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_IFNAME={0x14}]}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x2400c046) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) r8 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r8, 0x29, 0x1e, &(0x7f0000000040)=0x5, 0x4) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) sendmsg$netlink(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x114, 0x20, 0x301, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x7}, @generic="f400a489160a11", @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d", @typed={0x8, 0x0, 0x0, 0x0, @pid}]}]}, 0x114}], 0x1}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x14, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x10}}}}}}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@ipv6_getaddrlabel={0x24, 0x4a, 0x1, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r12 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) getsockname$l2tp(r8, &(0x7f0000000240)={0x2, 0x0, @dev}, &(0x7f0000000280)=0x10) sendmsg$nl_route(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_dellink={0x34, 0x13, 0x1, 0x0, 0x25dfdbfc, {0x7, 0x0, 0x0, r14, 0x8400, 0x40000}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x5, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x0, 0x6}]}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x801, 0x41, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r11}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) 2m4.859002772s ago: executing program 6 (id=9146): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x701, 0x0, 0x0, {0x41}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r3, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c081}, 0x20008000) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000040)=@ethtool_wolinfo={0x4b, 0x7, 0x1ff, "fac16a590b17"}}) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 1m49.80821912s ago: executing program 35 (id=9146): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x701, 0x0, 0x0, {0x41}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r3, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c081}, 0x20008000) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000040)=@ethtool_wolinfo={0x4b, 0x7, 0x1ff, "fac16a590b17"}}) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 13.054852285s ago: executing program 7 (id=10238): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030700000000000000000800000068000480"], 0x7c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r4 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r4, &(0x7f0000000080)={&(0x7f0000000000)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000200)={0x0, 0x1, 0x6, @link_local}, 0x10) 12.9945218s ago: executing program 7 (id=10240): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000005000)=ANY=[], 0x1198}, 0x1, 0x0, 0x0, 0x40}, 0x880) recvfrom$inet(r1, &(0x7f0000000000)=""/4084, 0x1198, 0x2102, 0x0, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf252001000000000000000000000000000120010000000000000000000000000001000000004e2100020a0000006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r4, 0x101, 0x70bd27, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) 12.874742584s ago: executing program 7 (id=10242): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x8, 0xb, 0x20}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x6}]}], {0x14, 0x10}}, 0x98}}, 0x0) 12.825669889s ago: executing program 7 (id=10244): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000780)=ANY=[@ANYBLOB='<\x00\x00\x00@\x00', @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800800140001000000"], 0x3c}}, 0x0) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05050000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a3000000000340000001c0a010100000000000000000100000008000940000000000900020073797a323a0000000900010073797a30"], 0xa8}}, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r2, 0x81b21000) 12.689480965s ago: executing program 7 (id=10247): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cred={{0x1c}}], 0x20}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYRES32=r1], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_device}, 0x94) 12.54717291s ago: executing program 7 (id=10250): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x1d, 0x2, 0x6) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x6a, 0x2, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x6a, 0x2, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) (async) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r7 = socket(0x400000000010, 0x3, 0x0) syz_emit_ethernet(0x11f, &(0x7f0000000c40)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0xe9, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', [{0x5, 0x1a, "b378b4ab7e6dec5a1bae2cabd9103dd505a4386e8716ff04a2f49e69485a91d1ff1a1fb0e3f2e0a68f507561d6a3f31d51ad78b4b8b0e81ef6ea021f561712d79e77c6b552fbaa4835d8b7ab763f33a96e5f8af87c5b64d51ea7bb6a01fb8d0f33f70755673c52b570661399f764fc770c5d88ecb6e516acacda6e3c75ec17351059b22af4887d6659c0e2daec240c6656dcd17718814a0808766225500115c2f274e13c40b5005b76dfa6583c9d0b682bf1e028287faea12c2b4c6be79c950510ccda59d6da46ff2b084d7ee085ee"}]}}}}}}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x38, 0x2c, 0xd3f, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r6}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40000, 0x0) r11 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) close(r10) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r13 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r13, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) setsockopt$sock_attach_bpf(r13, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r13, &(0x7f0000000200)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r12, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e000f000713c1020000ff8407c2fb7fe0406e52534b4f6b3d327db412f40000000003000000", 0xfdd0}], 0x1}, 0x4005) (async) sendmsg$kcm(r13, &(0x7f0000000200)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r12, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e000f000713c1020000ff8407c2fb7fe0406e52534b4f6b3d327db412f40000000003000000", 0xfdd0}], 0x1}, 0x4005) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x0, 0x25dfdbfe, {0xa, 0x14, 0x0, 0x0, 0xfd, 0x4, 0x0, 0x7, 0x3600}, [@RTA_PRIORITY={0x8, 0x1e, 0x1}, @RTA_EXPIRES={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4050) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x0, 0x25dfdbfe, {0xa, 0x14, 0x0, 0x0, 0xfd, 0x4, 0x0, 0x7, 0x3600}, [@RTA_PRIORITY={0x8, 0x1e, 0x1}, @RTA_EXPIRES={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4050) socket$nl_generic(0x10, 0x3, 0x10) (async) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) (async) sendmsg$nl_generic(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 4.786306734s ago: executing program 5 (id=10356): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_PRIMARY={0x8}]}}}]}, 0x44}}, 0x0) syz_emit_ethernet(0xc6, &(0x7f0000000280)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb8, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x27, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @dev, {[@cipso={0x86, 0x49, 0x0, [{0x0, 0x5, "66d281"}, {0x0, 0x11, "6f03057a91f875ccf5bd5d0a5b319a"}, {0x0, 0x10, "6253659c41d7cea461f45f9d37fa"}, {0x0, 0x3, "91"}, {0x0, 0x12, "ccb3e82d2ea24a7b56eb3299d0d03ab6"}, {0x0, 0x8, "a33b7a6b9500"}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private}, {@private}, {}, {@remote}, {@private}, {@remote}, {@private}]}]}}}}}}}, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000400)={r1, &(0x7f00000001c0)='netem\x00', 0x599080, &(0x7f0000000200)={@align=0x7aa16f32, {0x4, 0x2, 0x10000, 0x2}}, 0x7, &(0x7f0000000380), &(0x7f00000003c0)=0x3e}) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000400)={r1, &(0x7f00000001c0)='netem\x00', 0x599080, &(0x7f0000000200)={@align=0x7aa16f32, {0x4, 0x2, 0x10000, 0x2}}, 0x7, &(0x7f0000000380), &(0x7f00000003c0)=0x3e}) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000640)={0xe, 0x2, 0x7, 0x0, 0x0, [{{r1}, 0x5}, {{r1}}, {{r4}, 0x5}, {{r1}, 0x3}, {{r0}, 0xfffffffffffffff7}, {{r2}, 0x4}, {{r5}, 0x2}]}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x2, 0xc3, 0x5, 0x178000, 0x5, 0xffffff81}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0xfffffffffffffff7}]}}}]}, 0x58}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) (async) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r6, 0x4, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20001000) (async) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r6, 0x4, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20001000) 4.470707804s ago: executing program 5 (id=10362): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r1, 0x28, 0x46, 0x0, &(0x7f0000000000)) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000100), 0x4) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x7fff}, &(0x7f0000000140)=0x8) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd25, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'xfrm0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x841}, 0x4000) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = getuid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000300)=0xe8) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x114}, {&(0x7f00000009c0)={0x614, 0x36, 0x200, 0x70bd26, 0x25dfdc01, "", [@typed={0x8, 0x79, 0x0, 0x0, @fd}, @nested={0x18, 0x4a, 0x0, 0x1, [@typed={0x8, 0x108, 0x0, 0x0, @uid=r5}, @nested={0x4, 0xd}, @nested={0x4, 0x8e}, @nested={0x4, 0x81}]}, @typed={0x8, 0xaa, 0x0, 0x0, @uid=r6}, @nested={0x18, 0xc0, 0x0, 0x1, [@typed={0x8, 0x11f, 0x0, 0x0, @uid}, @typed={0x9, 0x156, 0x0, 0x0, @str='syz1\x00'}]}, @nested={0x2aa, 0xf8, 0x0, 0x1, [@generic="ab20498a8ff85846460bc05dd41d2ed380a43d547a79e89fc700f7d5b89a8eb4cb1b81b43c318076c1a497ff8648c1622cfeb3267171f613c51e35eafa7c1ce2960e42912209906bf5bd875f2c0dbee789f2e7cbd7b23f5b25b5712378994d7c3438f0121ee7506b6ae261673b3df7387c4bcddba8147f7af44d00916d1c13ecf5dfbb77ca7824135af42652aad726b69312ec9e1acacb697dcae598f817f9388ca87e032181c88de87913509fc87084392cae6b9c06bb4c0d1be9a884d7ddfae326435dd38c14365fe72afaa8e2f155e90f5052ab79519aed6f19e76cc917cba5d82c07f2", @typed={0x8, 0x30, 0x0, 0x0, @ipv4=@local}, @generic="f77bbe7597e42a4e41db7b4ff4491b24d4f628dc3bd6e44790227e686b56fee10b71df834d8b119db608f718b8149bfec8e4d15dd27aa7b4a3e7b5aada325c2e53c735962dbf0ebf622dea0100010000000000bb13fb7435fabc8378d639dd9c543ae27b409bc67bfdb7b9f6dd22e356c75af951f494b6a18f60ae553795703a97ec5dccccc034533f0f87bf10d88e9a25bab1e572e74d76c66566844c56a38c1e874dbbd2b77e3ba619038cad0bff82e1a1360a12e083b1d6d6e1e804718068b618f605c182be1ff72687", @generic="4e92e3ea9466f5a6d36ca1bb4f2932aabc707874187833ebf1c1e84dfe4240b2a15188867d0d21e901844297a4b4896f003651b141e90ba0eca7f39c7b928122892e2be1782250e90f0ba15a9124e5505b59dc55f1838b2bd996277a0696b6d2b7be8a163140540b2eeba4fc16c9d2a71c4519744c90c5544bd8fd4b39376b5ee3f31fa06f80001dbe740c6a3ab72b544d6df9a2dffff2f8a7957e854b7cd01c80e95cb20fffa9141b6ab0513133df7deae34d9c1293c2a862ad22439ce0d5ae5715d29673a68d2eed33076681f9b6249eacd00fb42e02557d5bb957887015b84c60137db35b7ab940702272f0b5"]}, @nested={0x28e, 0x109, 0x0, 0x1, [@generic="f5c9386fdc63ca1e5434fcf9ff0aedd3cf9c5587e29b927458b079e19bb3271986c74e4505b097ca1ff09eea7e04ad8667c90daa2f6b36217e95075976a90346b9257d16577949a250095a8fda19565e38824ecd2fa418d36550004acd364ffe2e1e381cb04383d7fdd474e115e8e7792680e751c026d77282fa571fb10618acefa90d7bfc82f0591094950b31400269ed138a812ada6fde1607642b6c005088b92e0146792263217e1ad5d63f37b7fdedb6d2cefd8c5b3c355d8bbbb1d273a86ae9477b7bb3c71efae50e695d0594d8ed771232dd752079f0a1669cee5061f2af204619214a2a1e", @nested={0x4, 0x9b}, @generic="a19bf6f9f4f6402c3e28dc69ced8af5ff80fed380d66e92fa41c503e2c5ea9aa744f28ea20f4314d3e1a7593e074e32107564459cb98c75861198e9ed31df1d22337e486f1a71c25251eb11315d50d2c110d6c2c", @generic="0a4c80e52fbd97fe7f0e9240a7128c19afd240dd3546709c5f138fac3a5af6d4b76ef19e2860c8f48c28b89c4f31bf66a3fe36e5bb663288a348ac557fa3e458a4f39ebc6178190eb14e3332431b3482b225dc7efb6e3614b055bce80166f074370e5be2ac9e7f5d9f557755a40a46ae6d66b2be94a489898c88a28d7c8a69baa655ce89713d9164c09528", @generic="3959425b51cd1058d5f625fc168ff9f1be2410faba9ba9da7594871bec091dbdc0d00c0afd63b8a07b2adcb053abf6a30812abdd905a0f484bc292ac952281fbb6c89752e7b83014dbb6be7d0ac2cf784ee26554a49b6e49041390f2160a725c20162311b9a2feb38b6a52e6a1eb4000abe88d47980f66df1e06c21f16263c841f8b47ac3575ae682d7361492ce674a40b8b239ca50f7a8acd5238f287e75db33c9188df88786576a6cda524f3d78dee1b3e6b51859eaec91162f4d96a2bea"]}, @typed={0x88, 0x100, 0x0, 0x0, @binary="3c9dab0f9b098315004a3b66b8c829223801b1bdaa860d8900e4bb2fa0232d752919ec5b9754dfd83e7bf549b064fa2488d3aa1ac0bf01bd337fb98ee6b1ef38a845ca6b9a44c43ee19adaffd195db2c965e1c2a24618273caaa21eeb6eb3c6b23f393ff08c407ea1a8b6e79b638ec8808815eb9e41e85fa4357c3c7755acb90078f6514"}]}, 0x614}], 0x2, 0x0, 0x0, 0x1}, 0x0) 4.358418685s ago: executing program 5 (id=10363): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 64) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000001200)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000011c0)={&(0x7f0000000900)={0x89c, 0xd, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x578, 0x3, 0x0, 0x1, [{0x1e4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x39, 0x6, 0x1, 0x0, "586412b266965a6b9e4338218e786ca7ce5dbb95b33cbc7af9592e0bbf85ef3f26eda27e7e21a636b7f59a701f4ffb4a714f1f1351"}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_USERDATA={0xda, 0x6, 0x1, 0x0, "19db6862dab6bcbe8046fdb5366577b8c18fc3b6ba6fc0d04d52017d392753d9b0a48f83f7f2ed7e9aca118b479fd43c30229f9491e5873ba087ad81efed39b60d3486a7088261d40afbeb01a1b6152fd63f8af9edb437466d446696ce56115ea66e4607e4f7d8ed257f2b56c058c2700a5f221f02ff683b6266d8c9fb01291102d592030f26e350fad8d946f9f01e9504a154e7dfec0abb35ff696a39405af035b132ba8619c05da20e0d3415824abc3ea17cfd06eeac484e1338ac74b3c2504cea03de895a7177192788334f4f6b0648e7659fb96e"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_USERDATA={0xa3, 0x6, 0x1, 0x0, "adb15b873f973a75a667e8be1e0997160520d58285801831fb274e44d263f15d029453049b7679612faca5961bdc95611190f3a7222757a5e3643ed2e86025bd3dcecb817a49c765dc2f7e8408d9a6080899aee5cc26bc9c0525b7b82add264188c6f807890238c74b5036405aa78a98920358e628ac57fd1fd44b76a40832d07b0aff057720734825f0492700b28de52a2603c40cd3b1ac4bb4266ddfa617"}]}, {0x390, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x238, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xdf, 0x1, "eed107decc440c5bf2b895cbea54f19fb541fdd8612535673916a8bae0e5e5a9d28ecd1044de820aa6402231bbfdad5f8b74c6bea2a6aa67cf1ca18ef9a599be0e4c5dc98139e61eebcb84be5b1483b7c7ab9dbd9777f4dfaeb0220774777a7b1ca246dbe95e6e372a327c99b5bbd6fd6009eecef119b21e01201b0593e200090df6bcbf67b07f0cdff9f715164b69e0555a6461d4aad7d078dbfa9bfa204e15d41190bfc047855612e9bc91971521caaeb046fcc1ea6359e8ac15e72979217c5653d61ba417a4f1d874861b68325fe4b473f513c662cb41f9cb31"}, @NFTA_DATA_VALUE={0x74, 0x1, "b4cf48f71fddf3653d3cc6bb07bcb4e2466718f38d1fb52cb896d1b48be8773f1bbf6f2db7a3812f9d6fb753aeccf4db573b401e2734410d24721ce4abb294aec376135aace27309b514afa88c2d34bd0a3b42c3062ecef4a91fac8b2c75c78613a7160e0dadf34f34bb5bfdf92fa18d"}, @NFTA_DATA_VALUE={0x7a, 0x1, "ce5da310a74d822448f2c8955a2ecd29b21e58c633db2228d6035b3a81518fc556f5483b13afbbdbac7fe58a0700ed410063d3840d629576530da86d3621965c25a3fbd68c7628db5c887881bc06b80e16a2603b205937ee19974f5a58259c7703db1ac3629aa0aecfaf7bd70298c6101a1113893b29"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_KEY={0x40, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x3a, 0x1, "16b89dd363a278fbb426e8d542911c10271b66f0c9abe62ebf78ef1918c53f4146230b5fae1e25e7514cba0ac1e3494f8e0e5e516ad0"}]}, @NFTA_SET_ELEM_EXPR={0x30, 0x7, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x33f785f7333073ef}]}}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x678}, @NFTA_SET_ELEM_DATA={0x20, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_USERDATA={0x9f, 0x6, 0x1, 0x0, "7af6115d1b672146a42caeaa54101d05617db2fc5485a06b72ef6f07b548f027ba31a0fadfa20825351834fb97bdc6c468b097d4b20abbdd2b44b693d4a23558b3791e719d0ed99e49c91c4be4113b2d181d1e29bb4d1140a0bdbe63fc47d42948335c1dda8a122f3ef5f6e8b6aef2b239cd83f08ecfc5b7a7958a16732311d7f888deccb0dc70bfecdb0328982af239f3882740a23ea522d5aed8"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2f8, 0x3, 0x0, 0x1, [{0x2f4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_USERDATA={0xac, 0x6, 0x1, 0x0, "baedafebe139f3f12d702d890df889ea542d7fd2d2fe6c7ff7c80ccc95eadeee0c39b0b075aed556ee4212268df90f53a6afd3d09e0002fca361d73f17dd76bb3346f58905a01330848da38e15b7c405238724a27ac85cb23a5b9ea445d8605f77e29de2de9b3436aee5d613ec01ce07b3c542d26b9e8064e65daeb6158cf843d3c0aab566f65e7cd37beac9ea716c6334fa1e1df463a649b65e4c48e5bf3a7bb3957dc8f57e76c1"}, @NFTA_SET_ELEM_DATA={0x15c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc3, 0x1, "5b377a620293eb45ad05fe580e2ed39305720a251e200fcc32021a4e3ed43a93288d9c605848c285a11343a93d7c741c3a675b261efa30b99e3f626c5c1fa62eb5d1e87aaf6e954372248fb24858016fa0784b28f5c61e11750385527e2b963f13e8ad28dafb52b8306fb651946da6a8103b7ecb8cdcbf4fc847561a2ae754afb92a1403d03c3b830f9ffc7d21b884f13442ebe007ffd38240555f670c8990a8b63ce2c764024065a7e2e205464c7f090db63f649ecc09803dd65319cbe037"}, @NFTA_DATA_VALUE={0x7b, 0x1, "16624106c74e5c065bfccb46d5a0ccc10c94ffc81bc0777d283411059fbb0f87d274be506de781e265677ec14f613f63988f54f40b6e694d463ded77081b1e33676de5c8096478c6fddb55b93bda828838ac1f4045c2c41d77de6a67b77cc6024a64c66006a44fa6f24d5804c69c75ffa211ded086247e"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_KEY_END={0xd0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xca, 0x1, "d655e1c899a98a88f5cee8b37923ed628b98d7036f59afa4a1f1df68fd624c03c929fb0a4a801beee001883650dcbd8758c7e0776d9a349fb64b956527c30157f36dd5d56beffecf37d4368c8911620a4b004849a3e804aacf4407cafd76bf4d6d508418eedb5615aea27a1aa53ecdc4083761a05ad755f4e46858fb29c1af9b02f94bf4fcfd39a66a8b05e5f1dc08c04bc9b093afb341aea5b4cf15eaf9ba689e1bcb9e1c507995048f1afc0d4620089d927deffbd85116bbb12b116de2bc61c638414ad08f"}]}]}]}]}, 0x89c}, 0x1, 0x0, 0x0, 0x80}, 0x24000000) (async, rerun: 64) close(r2) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x3c}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x40, 0x10, 0x8000, 0x1, {{0x15, 0x4, 0x0, 0x9, 0x54, 0x68, 0x0, 0x94, 0x2f, 0x0, @multicast1, @private=0xa010102, {[@noop, @timestamp={0x44, 0x20, 0x7f, 0x0, 0x5, [0x6, 0x9, 0x0, 0x8, 0x10001, 0x8, 0xea]}, @end, @cipso={0x86, 0x1d, 0x3, [{0x5, 0x6, "0914143d"}, {0x7, 0x2}, {0x1, 0xf, "13398b6451294406e6335a3094"}]}]}}}}}) (rerun: 32) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xdc, r1, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0x60, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x54, 0x5, "2a2a4c3eb112a82479ad424eff8045c79918a3a3c441e1bfc6c0ff97b37bf14771780241bbbc379c1942d8e310e7ab3bb8d7d77e10a8efea0665e62405a000ab3b1623937de930051b2c3f9568b753ab"}]}, @ETHTOOL_A_FEATURES_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x8010}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061042c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) (async) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f00000003c0)) 4.169417781s ago: executing program 5 (id=10367): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) getsockopt$inet_tcp_buf(r2, 0x6, 0x15, 0x0, &(0x7f0000000100)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x4, 0x70bd27, 0x7}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x30) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, r1, 0x1, 0x0, 0x25dfdbfd, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r1, 0x1, 0x0, 0x25cfdbfc, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 3.994297401s ago: executing program 5 (id=10371): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'macvlan1\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002100020002000000ffdbdf250200000008000800", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) (async) r2 = getpid() (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async, rerun: 32) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) (async, rerun: 32) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async, rerun: 64) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) (rerun: 64) close(r4) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 64) r5 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000980)=@newqdisc={0x3b8, 0x28, 0x400, 0x7ff, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xffff, 0xe}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x388, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1, 0x8, 0x2, 0x7, 0x10, 0x9, 0x7, 0x3, 0x7ff, 0x3, 0x1f, 0xc, 0x1b, 0x6, 0xffffffff, 0x5}}, @TCA_GRED_PARMS={0x38, 0x1, {0x1, 0x1507, 0x9, 0xd, 0x0, 0x1, 0x2, 0xc2e3, 0x8, 0x8d5, 0x17, 0x1b, 0x6, 0x4e, 0x9, 0x1}}, @TCA_GRED_MAX_P={0x8}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_STAB={0x104, 0x2, "5217fbfb484ef53970c0130a2961f9bfc3a1c18e79a30c62ec0e6376d1b56881a344062c95b3e86ea68b0f8d3bf57665d1879dcfbeb9f7771f83bdf7ae6bd2f324139b3a8ace1db938664c6c912587872b8c16cb69a5b9d6d4f760fe9dae7490988580e4b3d2a0b9b7206e420b26c82f60fa754def5e7ccd72d8af3283e0197d6b33759dba6da6f594e07cc3dc680c8810794e439f721413f4b05f6b4f97a8bfe70f41044a51459d834f8677440075d618788c7606a70a908df2e4fa237439d2933db79f00b1d1ca9285e07ca1f7c104a9f703d5705354b1fd0e62109934a2cdaf58f7851ce01b859fee655b45ae6b919a1da452b1ca163e16c9e522f370af5c"}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x3b8}, 0x1, 0x0, 0x0, 0x404009c}, 0x0) (async, rerun: 32) r9 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x400, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0x3078, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) (async) r12 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r12, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r11, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) (async) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) (async) ioctl$sock_TIOCINQ(r3, 0x541b, 0x0) (async, rerun: 64) sendmsg$nl_generic(r1, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000003900)=ANY=[@ANYBLOB="40160000210001002cbd7000ffdbdf250e0000003c1454800400a2800400f7800400688008003b00", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x1640}, 0x1, 0x0, 0x0, 0x10}, 0x40000d0) (rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='h%\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100a0500231a0500480012800e00010069703665727370616e00000034000280060003003000000014000700fc02000000000000000000000000000014000600fc020000000000000000000000000001"], 0x68}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9080) 3.807650976s ago: executing program 5 (id=10375): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r5 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000380)={@multicast2, @local, 0x1, 0x2, [@local, @loopback]}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r7, &(0x7f0000007380)=[{{0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000000300)=""/124, 0x7c}, {&(0x7f00000006c0)=""/170, 0xaa}, {&(0x7f0000001840)=""/4095, 0xfff}, {&(0x7f00000001c0)=""/206, 0xce}, {&(0x7f0000002940)=""/246, 0xf6}], 0x5}, 0x5fb5}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x5880}], 0x3, 0x100, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) (async) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) (async) socket$inet(0x2, 0x3, 0x2) (async) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) (async) socket(0x10, 0x803, 0x4) (async) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000380)={@multicast2, @local, 0x1, 0x2, [@local, @loopback]}, 0x18) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) (async) recvmmsg(r7, &(0x7f0000007380)=[{{0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000000300)=""/124, 0x7c}, {&(0x7f00000006c0)=""/170, 0xaa}, {&(0x7f0000001840)=""/4095, 0xfff}, {&(0x7f00000001c0)=""/206, 0xce}, {&(0x7f0000002940)=""/246, 0xf6}], 0x5}, 0x5fb5}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x5880}], 0x3, 0x100, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}}}, 0x24}}, 0x0) (async) 1.951974323s ago: executing program 1 (id=10399): socket$inet6_sctp(0xa, 0x5, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e21, @rand_addr=0x64010101}]}, &(0x7f00000000c0)=0x10) syz_emit_ethernet(0x7e, &(0x7f00000003c0)={@link_local, @random="117863ac6e52", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x1, {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @private1, @mcast1, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x8}}]}]}}}}}}}, 0x0) (async) syz_emit_ethernet(0x7e, &(0x7f00000003c0)={@link_local, @random="117863ac6e52", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x1, {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @private1, @mcast1, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x8}}]}]}}}}}}}, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0xfc) sendto$inet6(r0, &(0x7f0000000180)="519a26285027736f4590faff78fa5be55e910999aa6a522dd2816d6478e1e7b7be3124365d547a30ca7dc584686c6e4f54baa35bc1209db9a2dd3533bb02e1afec527e2632ff78136a5b21efeea5cf854ae842f7c4f67141445770cdf7c5e8fdb2cf67859ceb43dd96c65fcf79da81a23ea65daa2cc252bb98a4a9c2d5ef052384d4f23b6ac83b729c26b95bdd0ac644dda01e97b1040f916d154b95af2085589a6d836841146159401d53cd1f8bab85319e556a44521c49", 0xb8, 0x2000000, &(0x7f0000000240)={0xa, 0x0, 0x9, @mcast2, 0x2}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0x1b, 0xffffffff, 0x1, 0x0, 0x10001}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014"], 0x30}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x1d, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_fd={0x18, 0x9b83e0f577d0a68, 0x1, 0x0, r1}, @generic={0x3, 0x1, 0x1, 0x4}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x8000}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000340)='GPL\x00', 0x556, 0x8f, &(0x7f0000000380)=""/143, 0x41100, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x4, 0x3, 0x9, 0x80000000}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000480)=[0xffffffffffffffff, 0x1], 0x0, 0x10, 0x7ff}, 0x94) (async) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x1d, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_fd={0x18, 0x9b83e0f577d0a68, 0x1, 0x0, r1}, @generic={0x3, 0x1, 0x1, 0x4}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x8000}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000340)='GPL\x00', 0x556, 0x8f, &(0x7f0000000380)=""/143, 0x41100, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x4, 0x3, 0x9, 0x80000000}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000480)=[0xffffffffffffffff, 0x1], 0x0, 0x10, 0x7ff}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='cgroup.freeze\x00', 0x0, 0x0) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000005c0)={0xffffffffffffffff}, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000600)={r1, 0x400, 0x0, 0x31}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@bridge_getlink={0xac, 0x12, 0x8, 0x70bd2b, 0x25dfdbfb, {0x7, 0x0, 0x0, r3, 0x400, 0x8002}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r5}]}, @IFLA_XDP={0x34, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r6}, @IFLA_XDP_FD={0x8, 0x1, r7}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}, @IFLA_XDP_FD={0x8, 0x1, r8}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x11}]}, @IFLA_MAP={0x24, 0xe, {0xe4, 0x8000000000000001, 0x1, 0x7, 0x0, 0x80}}, @IFLA_PHYS_SWITCH_ID={0x11, 0x24, "28eed80cb0b9b9b6414e293b8c"}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x1}, @IFLA_BROADCAST={0xa, 0x2, @multicast}]}, 0xac}}, 0x801) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@bridge_getlink={0xac, 0x12, 0x8, 0x70bd2b, 0x25dfdbfb, {0x7, 0x0, 0x0, r3, 0x400, 0x8002}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r5}]}, @IFLA_XDP={0x34, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r6}, @IFLA_XDP_FD={0x8, 0x1, r7}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}, @IFLA_XDP_FD={0x8, 0x1, r8}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x11}]}, @IFLA_MAP={0x24, 0xe, {0xe4, 0x8000000000000001, 0x1, 0x7, 0x0, 0x80}}, @IFLA_PHYS_SWITCH_ID={0x11, 0x24, "28eed80cb0b9b9b6414e293b8c"}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x1}, @IFLA_BROADCAST={0xa, 0x2, @multicast}]}, 0xac}}, 0x801) 1.69979414s ago: executing program 1 (id=10402): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet6(0xa, 0x803, 0x6) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000240)={r2, r0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000080)={{0x80000000, 0x7}, 0x100, './file0\x00'}) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r4, 0x8901, &(0x7f0000000080)) sendmsg$OSF_MSG_REMOVE(r3, 0x0, 0x4804) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r6, &(0x7f0000000640), 0x3fffffffffffce3, 0x0, 0x0) sendmsg(r6, &(0x7f0000003000)={&(0x7f0000000280)=@l2tp6={0xa, 0x0, 0x100, @remote, 0x1, 0x4}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000000400)}, {&(0x7f0000000600)="9c73efacb5a0259873a3ccea0b9de419833ceee2e7ac984fe2067a55e979b69ffeb5f521ed6dde3f7f801fc509b301b61cff08fb6976aaa89a0c08249d61c8a485e16f921ff9f311d90438a9fda362b5d45e17ddb757afc0b667318eeb9c8e5d44529ead6be0d230f4629b3699432ff90cb1c2db3e3cabfc7c99f453d427843febf19ae27f0df9c33abb5eb3", 0x8c}], 0x2, &(0x7f0000001ec0)=[{0x10, 0x0, 0x4}], 0x10}, 0x20004000) recvmsg(r6, &(0x7f0000003180)={0x0, 0x0, 0x0}, 0x12041) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r5) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r8, 0x701, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000400), r5) 1.202634443s ago: executing program 8 (id=10408): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f0000000080)='syz0\x00', 0x1ff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f00000005c0)={'tunl0\x00', 0x0, 0x10, 0x8000, 0x9, 0x1, {{0x4f, 0x4, 0x1, 0x9, 0x13c, 0x65, 0x0, 0x0, 0x2f, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x1c, 0x8a, 0x3, 0xb, [{@empty, 0x7}, {@rand_addr=0x64010100, 0x8}, {@empty, 0x8000}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x1c, 0x71, 0x0, 0x8, [0x5, 0x14, 0x5, 0xc, 0x17f, 0x2]}, @cipso={0x86, 0x5c, 0x2, [{0x1, 0x12, "54330cdab9cf715f7c19fcb8e9b04b10"}, {0x7, 0x7, "69992f45c8"}, {0x0, 0x5, "ae94fe"}, {0x1, 0xc, "73429facded43f9d3f8a"}, {0x7, 0xe, "7eb464dc44e3eda59b30883e"}, {0x1, 0x11, "bfa5dc0bf30919eae582be995a621f"}, {0x2, 0xa, "49bdfec2c6951e63"}, {0x1, 0x3, "bb"}]}, @cipso={0x86, 0x6c, 0x0, [{0x6, 0x7, "987c2eeb30"}, {0x6, 0x9, "15e37f8ba4d96c"}, {0x0, 0x11, "20faffa262bde8601bef984aac21e0"}, {0x6, 0x12, "1fc17ab66cbb77e1e4be70b13838f0eb"}, {0x0, 0x12, "85365a5d2f7b1eaf3da33813cc2d4ed5"}, {0x6, 0x2}, {0x0, 0x3, 'd'}, {0x2, 0x6, "83d2d82c"}, {0x7, 0x4, ']7'}, {0x5, 0x12, "d58c6a20b25390ad4c19db455bcf58d6"}]}, @timestamp={0x44, 0x10, 0x39, 0x0, 0x9, [0x4, 0xd, 0x1c]}, @cipso={0x86, 0x14, 0x0, [{0x2, 0x6, 'M\'F/'}, {0x0, 0x8, "0fe2874836d7"}]}]}}}}}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xff}}, [@tmpl={0x184, 0x5, [{{@in6=@mcast1, 0x4d2, 0x33}, 0xa, @in6=@empty, 0x3501, 0x1, 0x0, 0x3b, 0x83, 0x5, 0x7}, {{@in6=@local, 0x4d6, 0x3c}, 0xa, @in6=@private1, 0x3502, 0x2, 0x0, 0x7, 0x7f, 0x0, 0x4}, {{@in=@multicast1, 0x4d5, 0x6c}, 0x2, @in6=@empty, 0x3507, 0x4, 0x3, 0x3, 0x4, 0x2, 0x3}, {{@in6=@private0, 0x4d3, 0x3c}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x2, 0xfffffffa, 0x401, 0x81}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d3, 0x6c}, 0x2, @in=@private=0xa010100, 0x3502, 0x5, 0x0, 0xd1, 0xe, 0x47b, 0x3}, {{@in=@broadcast, 0x4d5, 0x33}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x34ff, 0x3, 0x0, 0x6, 0x5, 0x4, 0x7f}]}]}, 0x23c}}, 0x4000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xb}, {0xffff, 0xffff}, {0xffef, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x82, 0x3, 0x4, 0xffff, 0x7f, 0x7fffffff, 0x1, 0x40, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0xdc}, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=@mpls_delroute={0xc8, 0x19, 0x1, 0x70bd25, 0x25dfdbfe, {0x1c, 0x80, 0x94, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1000}, [@RTA_MULTIPATH={0xc, 0x9, {0x1ff, 0x10, 0x9, r2}}, @RTA_MULTIPATH={0xc, 0x9, {0x0, 0x4, 0xf7, r6}}, @RTA_NEWDST={0x84, 0x13, [{0x80}, {0x3, 0x0, 0x1}, {0xdd4}, {0x7, 0x0, 0x1}, {0x2}, {0x2, 0x0, 0x1}, {0xa03f, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x7b2, 0x0, 0x1}, {0x9}, {0x4}, {0xf}, {0x2, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0xb, 0x0, 0x1}, {0x86724, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x3}, {0xd38}, {0x5, 0x0, 0x1}, {0x6}, {0x8}, {0x7}, {0xb9, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xffff7, 0x0, 0x1}, {0x9}, {0x40}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x7f}, @RTA_OIF]}, 0xc8}, 0x1, 0x0, 0x0, 0x1}, 0x20000050) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x10, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff07}, 0x94) socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f0000000140)={r8}, &(0x7f0000000040)=0x8) 986.31295ms ago: executing program 8 (id=10411): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x5, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7}, {0x5, 0x20, 0x93, 0x3}, {0x5, 0x9, 0x7c, 0x4}, {0x35, 0x5, 0x7, 0x8001}, {0x4, 0x80, 0x3, 0x9}]}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r0, &(0x7f0000000180)="a79389b01404ba253d511ed53a4b799cc1c3a5f873020f6818"}, 0x20) ioctl$OCFS2_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x1, 0x0, 0x666, 0x6, 0x100}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x200400, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f00000002c0)={0x2, &(0x7f0000000280)=[{0x5, 0x0, 0x9, 0xffff}, {0x3, 0x0, 0x49, 0x636}]}) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000300)=0xb0d9, &(0x7f0000000340)=0x2) r3 = accept$inet(r0, &(0x7f0000000380)={0x2, 0x0, @private}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000400)={0x0, 0xf4, "d0fa911c07326515d4b3c833013d06ce51470a6b1913909b374695350a09ff15c6ccda40230b60ddba16e3f2c019d4ace15361e64db6e0d006a7adcc70c6e71c07c6a0840e845d51bfbd646d7500d2ab648b4dbc97a5abd9f81753934bf9ba227bfe2013f80563a9dbd512ca2aa5e620ead3429b8b7d5b257c8a50eefcfb2be6a0a198906faecd2eeba871fcef912cd95ce2023159ec5cb2debf2afb94b1549e4a88233b2d3a1019772f2dcaa4165cd34035cf4e4a82b178daccbadc8573ebc6d0c9ff4b9dad448d751a83b370be8524958778232406109af228ba1e4f192a6d91a1e6173cb746926b932ac842a640436b90e1f1"}, &(0x7f0000000500)=0xfc) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000540)={r4, 0x2, 0x3ff, 0x2}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000580)={'gre0\x00', 0x0, 0x7800, 0x700, 0x6, 0x40000, {{0x2e, 0x4, 0x1, 0x7, 0xb8, 0x66, 0x0, 0x9, 0x2f, 0x0, @private=0xa010102, @remote, {[@timestamp_prespec={0x44, 0x14, 0x35, 0x3, 0x3, [{@multicast1, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7f}]}, @lsrr={0x83, 0xf, 0xac, [@multicast1, @multicast2, @loopback]}, @timestamp={0x44, 0x20, 0xed, 0x0, 0xd, [0x2400, 0x7, 0x5, 0x5, 0x2, 0xd711161a, 0x13]}, @lsrr={0x83, 0xf, 0xfd, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @multicast1]}, @timestamp_prespec={0x44, 0xc, 0x56, 0x3, 0x5, [{@empty, 0x9}]}, @cipso={0x86, 0x44, 0x1, [{0x2, 0x8, "e00379ac498c"}, {0x1, 0x3, "c4"}, {0x6, 0x10, "1ba30e0c44fb7d3641426e4ddea2"}, {0x7, 0xc, "eed86f2b0a58206855c0"}, {0x2, 0xe, "369266722567f1c8a21b8cd5"}, {0x1, 0x9, "0a57d69a9cfe1c"}]}]}}}}}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@restrict={0x0, 0x0, 0x0, 0xb, 0x5}]}, {0x0, [0x30, 0x5f, 0x2e, 0x30, 0x30]}}, &(0x7f0000000700)=""/102, 0x2b, 0x66, 0x1, 0x9, 0x10000, @value=r0}, 0x28) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x16, 0xb, 0x461c62b5, 0xbe, 0x2a20, r0, 0x10000, '\x00', r5, r6, 0x2, 0x1, 0x2}, 0x50) getsockopt$inet_mptcp_buf(r3, 0x11c, 0x3, &(0x7f0000000840)=""/4096, &(0x7f0000001840)=0x1000) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r1, 0x40106e8c, &(0x7f0000001880)=[0x8, 0x5]) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r6, 0x40049366, &(0x7f00000018c0)=0x2) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000001940)={'sit0\x00', &(0x7f0000001900)={'gretap0\x00', r5, 0x20, 0x1, 0x2, 0x6, {{0x7, 0x4, 0x1, 0x4, 0x1c, 0x67, 0x0, 0xf8, 0x2f, 0x0, @empty, @empty, {[@timestamp={0x44, 0x8, 0xde, 0x0, 0x8, [0x5288]}]}}}}}) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000001980)={0x2, {{0x2, 0x4e21, @rand_addr=0x64010101}}, 0x0, 0x3, [{{0x2, 0x4e22, @local}}, {{0x2, 0x4e22, @private=0xa010101}}, {{0x2, 0x4e20, @broadcast}}]}, 0x210) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000001bc0)) socket(0xa, 0x80000, 0x6) pipe(&(0x7f0000001c00)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), r0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r9, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x24, r11, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0xc810) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r7, 0x8040942d, &(0x7f0000001d80)) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001f80)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x7, '\x00', r5, r6, 0x0, 0x4, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002080)={0x11, 0x4, &(0x7f0000001dc0)=@raw=[@call, @func, @call={0x85, 0x0, 0x0, 0x83}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], &(0x7f0000001e00)='GPL\x00', 0x6, 0xa3, &(0x7f0000001e40)=""/163, 0x41000, 0x2a, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001f00)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000001f40)={0x3, 0x10, 0x8, 0x40}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000002000)=[r7, r12, r10, r0], &(0x7f0000002040)=[{0x4, 0x5, 0x3, 0xc}, {0x5, 0x3, 0x6, 0x7}, {0x5, 0x1, 0x2, 0x5}, {0x3, 0x3, 0x4, 0xc}], 0x10, 0xffff}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000002140)={0x0, r6}, 0x8) 973.031892ms ago: executing program 0 (id=10412): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000004001b0000000c00228059fe0080040000800600210030"], 0x28}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) (rerun: 32) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r4, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @media='eth\x00'}}}}, 0x68}}, 0x0) (async) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x533162bcd7063af6}, 0x8000) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000514000a2c000000180a05000100000000000000020000000900010073797a30000000000900020073797a30000000001400000002020108000000000000000000000005140000001100010000000000000000000100000a"], 0x68}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) r7 = socket(0x2a, 0x2, 0x0) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xfffa, 0x2}, {}, {0xa, 0xfff9}}, [@TCA_CHAIN={0x8, 0xb, 0xec}, @filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x4c}}, 0x24004000) (async, rerun: 64) r13 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmmsg(r13, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0xfc, r2, 0x0, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SCAN_SSIDS={0xb4, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0x1a, 0x0, @random="f958091bfa1fdf0175c5f1e07b724cf9450097f875c2"}, {0xa, 0x0, @default_ibss_ssid}, {0x19, 0x0, @random="1325c174ebfdd7f50f2119dfa0c6bce3fb09fc9cfa"}, {0xa, 0x0, @default_ibss_ssid}, {0x23, 0x0, @random="e9e775871292f4db7ce8aeaeddabbcb5e58542e46bf877fc9ccd288852965a"}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x1}]}, 0xfc}, 0x1, 0x0, 0x0, 0x10}, 0x40011) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x3c, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 858.443444ms ago: executing program 0 (id=10413): ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket(0x2d, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e005a2e70c0707dccc2000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000000000ba05000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000800807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000001e000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff7f850000000600000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x11d, 0x1, 0x0, 0x4) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x4, 0x0}, 0x8) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r6 = accept$alg(r5, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000f00)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000005c0)="75e613512be654a19770bc090cc469914959de011f5a7bf4f91a4c398b4906b7db4037e4412e4822daec56626ea24a441f01c1e2de8a15af04a961b13fd9c2b85dc73224958588ade21603e50a6e446f10147b495a59bb8b9fe92e367c33c9a1f64f33eb750dfa75675fd23a3ac3ce6948aa843872bf16d2f4de10b9114a2177b52cf4ca0665e01359f0335dc1988bfe8f38740fb84ccbcc57c5958d29af3dc3884b7a275d3fce2702e651fb5c8636e21024e9ddcc8049b6dd504ba4409d36c30810a41baa70b8f807558c305aa937357b0daa79d9830c7745ce663172f92b2697e2", 0xe2}, {&(0x7f00000006c0)="006c471e00a5c7cf9cb0b86c113afa9eb388dfcf39b7cfea77bce5cf37e875509d4a49f7295e37d6cb4b12b2da57671322967a1d80305544e9471146fa52840d5df2299ef92c721d9a55084e9fde026638810eb5553d169c9862faed0d183e93df40c3ab485e77940ad7e104b02bf3711abc6f2e6fda689028c62c1079854c932d1a3b4b0a1f2a1c3123ed7c8aa796bb3e3a49ebed699ce941ae41149b", 0x9d}], 0x2}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710427000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r9, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a80), r10) sendmsg$DEVLINK_CMD_PORT_SET(r10, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002abd7000fedbdf25060000000e0001006e657464657696696d0000000f0002006e657464657673696d30000008000300010000000600040003000000"], 0x44}, 0x1, 0x0, 0x0, 0xc850}, 0x440c0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000040)=0x4) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000180001efff00000000000000050000000800b8"], 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x0) 782.521699ms ago: executing program 8 (id=10414): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5800000010000104040000000300000000000000", @ANYRES32=0x0, @ANYBLOB="bcb0817dbcb1f31a24001280110001006272696467655f736c617665000000000c00058005000a0001003e40198511f23b98f82fe91ec2b31201a500001400030600000005eb962002e56b58a996aaf18fd74ecb40412eeff72be803d0244e8fe3f4405c31ea2b5bdad84c5b7c7d39205160d3aa3659b1e4c13986c275d84281edc8ff27aa9d609b967d28249a72ba1895368dbb093744597f"], 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newtaction={0x48, 0x1e, 0x109, 0x103, 0x40000, {}, [{0x34, 0x1, [@m_mirred={0x30, 0x8, 0x0, 0x0, {{0xb, 0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x2b1e}, 0x4000) 745.145499ms ago: executing program 1 (id=10415): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000580)=0x108e75, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0xfffd, 0x8000000, @loopback, 0x3}, 0x1c) recvmmsg(r0, &(0x7f0000002000)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x10000, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r2 = socket(0x1d, 0x2, 0x6) r3 = epoll_create(0x9660) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) close(r2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], 0x0, 0x31, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000001c0), &(0x7f0000000240), 0x8, 0x36, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket(0x10, 0x803, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2467d6eb26b8ed5d1a000000000000080001000000000000000000000600000000000000"], 0x24}}, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000008000b40000000000900010073797a30000000004800048020000180070001007274000014000280080001400000000d080002400000000124000180090001006d6574610000000014000280080001400000001008000240000000051400"], 0xf8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x9b2764a0eedb5ee8, 0x16, &(0x7f0000001100)=ANY=[@ANYRES16=r4], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, r5}, 0x94) 603.904238ms ago: executing program 0 (id=10416): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a00000154000480500001800b0001007461726765740000400002800800afb9fd699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a310000000014000000110001000000000000000000faff000a"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket(0x10, 0x80002, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) r4 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000002700), 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000001600)={'nicvf0\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x33}}}) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000120003474cbb65e1c3e4ffff07000d0001", 0x15}], 0x1) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000007a"], 0x18}], 0x1}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002640), 0xffffffffffffffff) (async) ioctl$sock_SIOCSIFBR(r3, 0x8941, 0x0) (async) listen(r5, 0xfffffffc) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$can_raw(0x1d, 0x3, 0x1) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYBLOB], 0x2298}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004800)=@newtaction={0x1584, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x1570, 0x1, [@m_police={0x156c, 0x16, 0x0, 0x0, {{0xb}, {0x1538, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xb61, 0x10000000, 0x200, 0x3, 0x1, {0xe3, 0x2, 0x0, 0xf801, 0x68f0}, {0x40, 0x2, 0x3, 0x6, 0x47f6, 0xe9d}, 0x9, 0x1, 0x1}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7fffffff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x40}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x3, 0x9, 0x0, 0x5, {0xc, 0x2, 0x5, 0x4a09, 0x6, 0x9c}, {0x0, 0x1, 0x1000, 0x8, 0x8, 0x9}, 0x4, 0x7, 0x7}}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x7, 0x9, 0xf, 0x0, {0xc0, 0x0, 0x7fff, 0xec9, 0xc, 0x2}, {0x10, 0x3, 0x7ca, 0x4408, 0x3, 0x900000}, 0xde, 0x7, 0x5a3}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6b4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x1, 0x3, 0x7, 0xc0000000, 0x23def5bd, 0x8, 0x10, 0xff, 0x1, 0x2, 0x800, 0x7ff, 0x8001, 0xf9f0, 0x7fff, 0x5, 0x1, 0x0, 0x5, 0x8, 0x918c, 0x0, 0x5, 0x8, 0x8000, 0x4, 0x6, 0x7, 0x5, 0x70, 0x40, 0x5, 0x9, 0x9, 0x4, 0xfffffff9, 0x3215, 0x1, 0x0, 0x7f, 0x81, 0x5, 0x8, 0x943c, 0x5, 0x0, 0x1ff, 0x1b, 0x3, 0x1, 0x9, 0x6, 0x369, 0x2, 0x9, 0x2, 0x0, 0x5a, 0x92b, 0x5, 0x0, 0x8, 0x8, 0x5, 0x6, 0x61, 0xd6cb, 0x7, 0x712, 0xe, 0x0, 0x7fffffff, 0xe3e, 0xffffffff, 0x7, 0x1ff, 0x101, 0x0, 0x6c, 0xfffff93e, 0x5, 0x2, 0x200, 0x596e41af, 0x10001, 0x80000, 0x10001, 0x0, 0x9, 0x3, 0x9, 0x10000, 0x6, 0x4, 0x1, 0x6, 0x6, 0x5, 0x9, 0x2, 0x5, 0x4, 0x8, 0x1000, 0xc8b9, 0x40, 0x8, 0x4, 0x5, 0x5, 0xfff, 0x7454, 0x8, 0x3, 0x0, 0xffff, 0x6, 0xf5df, 0xa, 0x9, 0x1, 0x0, 0x7, 0xdf5, 0x143, 0x1ff, 0xd, 0x7, 0x9, 0x8, 0x5, 0x3, 0xb, 0x7, 0x5, 0xd, 0x1, 0x7, 0x5, 0x4, 0xd5, 0x7fffffff, 0x80, 0x4, 0x5, 0xa, 0x4, 0x3, 0x280000, 0x401, 0x9, 0x9, 0xb, 0x9, 0x4, 0x4, 0xa, 0x2, 0x6, 0x1, 0x1ff, 0x3, 0x80000000, 0x81, 0xffffff68, 0xffffffff, 0x7, 0xc444, 0x8, 0x9, 0x7fff, 0x4, 0x800, 0x1, 0x884, 0xfffeffff, 0xfffffffa, 0xc5, 0x7fffffff, 0x4, 0x1, 0x9, 0x1b6, 0x6, 0x5, 0x4, 0x6, 0x6, 0x5, 0x1, 0xfffffff8, 0x1, 0x2280a097, 0x5, 0x1, 0x8, 0x9, 0xffff, 0x100, 0x10000, 0x7, 0x6, 0x7, 0x5, 0xb, 0xe9, 0x10, 0x3, 0x35e, 0x0, 0x800, 0xb21, 0x17, 0xc17, 0x3, 0x5, 0x80000001, 0xf6, 0x10001, 0xfffffffc, 0x2, 0x9, 0x4, 0x3, 0xfffffff8, 0x9, 0x7, 0x1, 0x2, 0x9, 0x4, 0xfffffff8, 0x7fff, 0x3, 0x5, 0x2, 0x5, 0x9, 0x5, 0x7f00000, 0x5c, 0xc, 0xd4fe, 0xfffffffb, 0x5, 0x9, 0x2, 0x6, 0x7, 0x0, 0xfffffff9, 0x6, 0xd0, 0xa128, 0x10001]}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x9, 0x1, 0x6, 0xa, 0x7ff, 0x0, 0x100, 0x1, 0x1, 0xf1, 0x7, 0x1ff, 0xc9b, 0x54bc, 0x10001, 0x5, 0x5, 0x4, 0x8, 0x6e, 0x8, 0x4, 0x2, 0x401, 0x200, 0x6d, 0xfffffff7, 0x8a3f, 0x7ae, 0x2, 0x0, 0x6, 0x8, 0xffff0000, 0x7, 0x400, 0x8, 0x307, 0x8001, 0x80000000, 0x7, 0x0, 0xa9f5, 0x3, 0x3, 0x9, 0x3ff, 0x80, 0x0, 0x2, 0x77, 0x1000, 0x80000001, 0xd654, 0xfffffffc, 0x5, 0x2b, 0x3, 0x0, 0x5, 0x7031, 0x4, 0x3ff, 0x5, 0x8, 0x8, 0x9, 0x3, 0x10, 0x0, 0x1, 0x8, 0x3, 0x2d0e, 0x1, 0x8e5, 0xf0, 0x7d, 0xf, 0x9, 0xfffffffb, 0x8012, 0x1, 0x7, 0x6aa, 0x6, 0x8, 0xdd75, 0x10001, 0xa0000, 0x6, 0x800, 0x5, 0xffffffff, 0x2, 0x3, 0x8, 0x7, 0xfffffff8, 0x9, 0x7, 0x3ff, 0xd, 0x6, 0x81, 0x7, 0x9, 0x5, 0x2, 0x7, 0x10000, 0x3, 0x4, 0x1, 0xffffff01, 0x10000, 0x10000, 0x5, 0xf0ad, 0xfff, 0x6, 0xffff, 0x4, 0x9, 0x6, 0x6, 0xc0, 0x10, 0x8, 0x0, 0xb, 0x200, 0x1, 0x4, 0x1ff, 0x0, 0x7, 0x5c1, 0x17, 0x8000, 0x10, 0xb, 0x7b0, 0x8, 0x7cc, 0x9, 0x1, 0x0, 0x2, 0x8, 0x1, 0xfffffffa, 0x9, 0x8001, 0x800, 0x94, 0xb4a, 0x10, 0x5, 0x5, 0x8, 0xdd, 0x0, 0xffff, 0x9, 0x6, 0x4, 0x7, 0xcc, 0xffff, 0x7, 0xcd0, 0x0, 0xffffffff, 0x344d, 0x0, 0x3, 0x1, 0x8, 0x9, 0x2, 0x4cc47974, 0xfe59, 0xffffffff, 0x4, 0x6, 0x9, 0x35, 0x4, 0x2, 0x8080, 0x0, 0x0, 0x5, 0x57, 0x7ff, 0x7fff, 0x101000, 0x1, 0x1ff, 0xfffffc31, 0x7fffffff, 0x7a1112a, 0x6, 0x6, 0x5, 0x2, 0x6, 0x1, 0x7ff, 0x7, 0x6, 0xfec, 0xc, 0x928, 0x0, 0x4cb1, 0x80000000, 0x0, 0x68, 0x8, 0x0, 0xff, 0x49fd, 0x3, 0x1, 0x9, 0x8, 0xce7, 0x8, 0xf456, 0x7aa, 0x5, 0x5454, 0x7, 0x3ff, 0x800, 0x7, 0x0, 0x1, 0x9, 0x7fffffff, 0x1, 0xfffffff8, 0x80000001, 0x2, 0x7, 0x822, 0x3, 0x6, 0x80000001, 0x2, 0x81, 0xffffff06, 0xfec]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xde, 0x5, 0x4, 0x2, 0xfd2, 0x80000001, 0x401, 0x8, 0x3, 0x3e37, 0xfffffff9, 0x2aa9, 0x2, 0x6, 0x7, 0xeff, 0x8, 0x800, 0x0, 0x1, 0x5, 0x7, 0x40, 0xfffffff9, 0xcdc, 0xffffffff, 0x8, 0x5, 0x81, 0xfffffff8, 0x2, 0x1, 0x9529, 0xdbd, 0x1ff, 0x2, 0x4fc, 0xfffff000, 0x80000001, 0x9, 0x1, 0x7, 0x0, 0xfffffffb, 0x2, 0x1, 0xff, 0xa, 0x8, 0x3, 0x9, 0x6, 0x6, 0x8, 0x800, 0x9, 0x3, 0x3, 0xe5d, 0x8, 0x0, 0x8, 0x0, 0x692a, 0xfffffffe, 0x1, 0x5, 0x2, 0x8, 0x1, 0xfffffff7, 0x177, 0x6, 0x0, 0x2, 0xfffffffe, 0x0, 0x40, 0xe814, 0x7, 0xffffffff, 0x74ea, 0x6841, 0xbe80, 0x6, 0xdf, 0x8, 0x3ff, 0x5, 0x2, 0x7, 0x764, 0x0, 0x5, 0x2, 0x8, 0x1, 0x100, 0x5, 0xfffffffd, 0x6, 0xfffffffe, 0x6, 0x4, 0xf4dd, 0x6, 0x5, 0x3, 0x20000000, 0x5, 0xa3, 0xe32d, 0xffffffff, 0x2bf, 0x3d, 0x7f, 0x7, 0x4, 0x20000000, 0x1, 0x80000001, 0x7, 0x7, 0xdd7, 0x3, 0x1, 0x3, 0x0, 0x4, 0x2, 0x6, 0x7, 0x1ff, 0x0, 0x6, 0x5, 0xffffffff, 0xff, 0x7f, 0x1a3a384a, 0x1, 0xffffffff, 0xb, 0x4, 0x81, 0x800, 0x8, 0x3, 0x3, 0xf, 0xc, 0x4, 0x7ff, 0x1200000, 0x0, 0xd9ea, 0xfffffffc, 0x7, 0x5, 0xc85, 0x10ec, 0x3ff, 0xfffeffff, 0x13, 0x7ff, 0x8, 0x80000000, 0x2, 0x3, 0x1, 0x5, 0x5, 0xf41, 0x28, 0x9, 0x7, 0x10000, 0x0, 0x3, 0x8865, 0x6, 0x1, 0x9, 0x0, 0x9, 0x2, 0x95f1, 0x9, 0x1, 0x7, 0x6, 0x7, 0x1, 0x280000, 0x200, 0x7, 0x7, 0x8, 0x9, 0x2, 0x7, 0x2, 0x9, 0x0, 0x5, 0x0, 0x5, 0x9, 0x22, 0x7f, 0x10000, 0x4118afe2, 0x3372, 0x4, 0x6, 0x65b, 0x6, 0x10000, 0x7, 0x4, 0x7f, 0xf8, 0x8, 0x9, 0x7fff, 0x1, 0x1, 0xfffeffff, 0x40, 0x5, 0x61, 0xcb8, 0x3, 0x8001, 0x9, 0x5, 0x2, 0x0, 0x9, 0x8d5, 0xb, 0xfff, 0x1, 0x6, 0x0, 0x3, 0x3, 0xa805, 0xb, 0xd24c, 0xf2, 0x7, 0x9, 0x7fffffff, 0x7, 0x2]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xd}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x5222, 0x5, 0x63a9, 0x7d9, 0x0, 0x7, 0x0, 0x0, 0x2, 0x2, 0x0, 0x5, 0x0, 0x6, 0x8d, 0x1000, 0x3ff, 0xfe7, 0x8, 0x468, 0x1ff, 0x0, 0x401, 0x8, 0x96, 0xe4a, 0xfffffff9, 0x2, 0x8f, 0x6, 0x5, 0x10, 0x8000, 0xfffffffb, 0x3122, 0x4, 0x5, 0x0, 0x401, 0xfffffffd, 0x9, 0xffffffff, 0x2, 0xe, 0xff, 0x6, 0x3, 0x8, 0x4, 0x7ff, 0x5, 0x4, 0x9, 0x6b6, 0x400, 0x7285, 0xb83, 0x7, 0x9, 0xfffffffa, 0x2, 0xfffffffa, 0x3ff, 0x8000, 0x0, 0x5, 0x5, 0x8, 0x1e, 0x1a1, 0x5, 0x9, 0x9, 0xe, 0x4, 0x80000000, 0x4, 0xb4f9, 0x3, 0x1, 0x8eaa, 0xe9, 0x5, 0x8, 0x0, 0x54774d47, 0x66a, 0x6, 0x0, 0x8, 0xf27, 0x10000, 0x1000, 0x8, 0x2, 0x4, 0x3, 0x453, 0xc13, 0xfff, 0xb9, 0x1, 0x81, 0x6bf, 0x8, 0x1, 0x0, 0x100, 0xfffffffe, 0x7, 0xe, 0xe4c1, 0x1, 0x4, 0x9, 0x8000, 0x8, 0x4, 0x4, 0xfffffffc, 0x2, 0x0, 0xc, 0x78, 0x6, 0x56c3, 0x0, 0xa, 0x549, 0x9, 0xfffffff9, 0x1, 0x9, 0x7, 0x3, 0x0, 0xeff0, 0x3, 0x8, 0x10001, 0x80000000, 0x80, 0x1, 0x8001, 0x8, 0xc, 0x1000, 0x57, 0x1, 0x0, 0x5, 0x7, 0x4838, 0x5055bc5d, 0x5, 0x81, 0x4ab7, 0x6, 0x1, 0x8, 0x7220, 0x1, 0x4, 0x8, 0x2, 0x20a, 0x7f, 0x50e, 0x30b6, 0x92a0, 0xee55, 0x10000, 0x0, 0xffffffff, 0x9, 0x100, 0xffff6e27, 0x200, 0xb379, 0x8001, 0x4, 0xd, 0x800, 0x31, 0xfffffffb, 0xb649, 0x2, 0x7, 0x87d, 0x9, 0x2fad9fae, 0x6, 0x81, 0x7, 0xfffffffc, 0x5, 0x4, 0x4e5, 0x41, 0x3, 0x5, 0x3, 0x43, 0x1, 0x101, 0x56, 0x2, 0xee, 0x1bf, 0x3, 0x9, 0x739, 0x2, 0x7, 0x80000000, 0x7, 0x5a9974ab, 0x2, 0x3, 0xb4c, 0x3085, 0x6, 0xd, 0x7f, 0x3d, 0x400, 0xe5, 0x8, 0x400, 0x8, 0x39c, 0x0, 0x1, 0xffffffff, 0xf845f61, 0x3, 0x3, 0x7, 0xfffffffa, 0x7, 0x4, 0x3, 0x1, 0x80, 0x2, 0x7, 0xf5, 0x933, 0xe25, 0x101, 0x8, 0x8, 0x4, 0xa, 0xb, 0x7]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x4, 0x7, 0x42, 0x6, 0x95f, 0x8, 0x9, 0x7, 0x66e3eac5, 0x7fff, 0x7, 0x5, 0x7ff, 0x2, 0x7, 0xe5c9, 0x3, 0x5, 0x70, 0x1ff, 0x5, 0xffffffa4, 0x4, 0x30000, 0x3, 0x7fff, 0xff, 0x2, 0x9, 0xc, 0xfa4, 0x10001, 0x20, 0x0, 0x80000000, 0x0, 0x54b, 0x8, 0xcd81, 0x2, 0xffffe89c, 0x4, 0x9, 0x0, 0x7fff, 0x10001, 0x1, 0x3, 0x8, 0x5, 0x6, 0x2, 0x100, 0x7, 0x6, 0x5, 0x9, 0x1, 0x8, 0x2, 0x9, 0x5, 0x5910, 0x3, 0x6, 0x4, 0x10000, 0x7, 0x7f, 0x100, 0xfffffff9, 0x5, 0xfff, 0x48c8, 0x7f, 0x2, 0xffffff7f, 0x2c2, 0x8001, 0x4, 0xa, 0xb6, 0x8, 0x10001, 0x0, 0x7ff, 0x9, 0x6, 0x0, 0x2, 0x10, 0x6, 0x9, 0x8, 0xab7d, 0x9, 0x4, 0xb, 0x1, 0x5, 0x0, 0x7, 0x1, 0x8, 0x65, 0x5, 0x7, 0x5cc6, 0xac, 0x7, 0x81, 0xc, 0x1, 0x7, 0x81, 0xb6ba, 0x0, 0x1, 0x84d7, 0xda, 0x2, 0xe0, 0xffffffba, 0x7, 0x1ff, 0x2, 0xffffffff, 0xf, 0x7f, 0x2, 0x3ff, 0x1, 0x4, 0x4, 0x5, 0x7, 0x1, 0x3, 0x7, 0xb39, 0xc, 0x3, 0x104b60ca, 0x80000000, 0x0, 0xc8a, 0x2cb, 0x6, 0xc0000000, 0xda, 0x2, 0x1, 0xfffffffe, 0x3, 0x4, 0x3c5e, 0x1, 0x10000, 0x9, 0x6, 0x5, 0xe, 0xffff, 0x3, 0x6, 0xc93, 0x0, 0x9, 0x1, 0xd, 0xf09, 0x3, 0x4, 0x0, 0x5, 0x9, 0x800, 0x200, 0xfffffff8, 0x5, 0x0, 0xf, 0x7f, 0x6, 0x3, 0x4, 0x1b41, 0x2, 0x7, 0x7481, 0xf, 0x6, 0x6, 0x7, 0x2, 0x8, 0x3, 0x9, 0x2, 0x8, 0xfffffff9, 0x7, 0x5, 0x1ff, 0x0, 0x2, 0x101, 0x40, 0x7, 0x10001, 0xff, 0x1, 0xe6f, 0x3, 0x6, 0x4507, 0xa, 0xffffffff, 0x4, 0xc, 0x2, 0xb4, 0x1, 0x6, 0x0, 0x3, 0x8, 0xb, 0x1, 0x6, 0x2070, 0x81, 0x9, 0x2, 0x87, 0x5, 0x6, 0x4, 0xcd1, 0x2, 0x8001, 0x2, 0x974, 0x4, 0x1, 0x9, 0x10, 0x6, 0x1, 0x9, 0x4, 0x0, 0x400, 0xa8, 0x1]}]]}, {0xc, 0x6, "3267a5442bf92039"}, {0xc}, {0xc, 0x8, {0x0, 0xcde534057a1a4963}}}}]}]}, 0x1584}}, 0x0) (async) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtaction={0x48, 0x31, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0) (async) socket$kcm(0xa, 0x5, 0x0) 466.544732ms ago: executing program 8 (id=10417): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x14}]}, &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x21}, 0x90) (async) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='freezer.self_freezing\x00', 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001980), 0xffffffffffffffff) (rerun: 64) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000100)={0x18, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r2, 0xc11, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000850) 427.250472ms ago: executing program 1 (id=10418): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x4000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20000000}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd, 0xfeefffff}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) 397.829954ms ago: executing program 0 (id=10419): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x4ac, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) (async, rerun: 32) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x15, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4c09}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @alu={0x7, 0x89c10911d87b25b, 0xd, 0x6, 0x5, 0xfffffffffffffff8, 0x10}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 234.544785ms ago: executing program 8 (id=10420): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000085100000030000001800"], 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000085100000030000001800"], 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$netlink(0x10, 0x3, 0x10) (async) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="7000028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004"], 0x8c}, 0x1, 0x0, 0x0, 0x24004000}, 0x20044880) 208.310762ms ago: executing program 0 (id=10421): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async, rerun: 64) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) (async, rerun: 64) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x404, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async, rerun: 64) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) (rerun: 64) close(r1) (async, rerun: 64) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 64) sendto$inet6(r3, &(0x7f00000001c0)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000000)=0x8000, 0x4) (async) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) close(0x4) 148.648647ms ago: executing program 1 (id=10422): socket(0x15, 0x5, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) select(0xe, &(0x7f0000000000)={0x7}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) getsockopt(r0, 0x200000000114, 0x271f, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x19026) 62.621224ms ago: executing program 8 (id=10423): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x28, r1, 0x8, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0x0, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0x9, 0x1, 'wpan0\x00'}]}, 0x28}, 0x4, 0x700000000000000}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r2) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, 0x0, 0x800) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000780)={'wpan1\x00'}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xf, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x10}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000240)="800000800000210ee7decd7a0003", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r8, 0x1, 0xd8, 0x6, @broadcast}, 0x14) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000007c0)={'wpan0\x00'}) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r10, 0x0, 0x1, &(0x7f00000001c0), 0x4) sendmsg$NL802154_CMD_SET_LBT_MODE(r3, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000880)={0x0}, 0x1, 0x0, 0x0, 0x41}, 0x40840) sendmsg$NFC_CMD_DEV_UP(r2, 0x0, 0x800) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000c80)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000cc0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="577527bd7000fedbdf251d0000000c002f80080001004000000008000300", @ANYRES32=0x0, @ANYBLOB="f0ff0300", @ANYRES32=r11, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x90) 28.165441ms ago: executing program 1 (id=10424): ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f00000000c0)) (async) r0 = socket(0x2, 0x80805, 0x0) (async) r1 = socket$inet6(0x10, 0x80002, 0x6) sendto$inet6(r1, &(0x7f00000002c0)="100000001200050f0c1000000049b23e", 0x10, 0x2004c040, 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r3, 0x1}, 0x1c}}, 0x0) sendmmsg(r0, &(0x7f0000000c80)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0xffffffffffffff48, &(0x7f0000000100)=[{&(0x7f0000000080)=']', 0x1}], 0x1, 0x0, 0xffffffaa}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[{0x30, 0x84, 0x1, "59766fe282f0381b5cc7a195cb5ade0d64bc2d9ad30419f432"}], 0x30}}], 0x2, 0x0) 0s ago: executing program 0 (id=10425): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf80e2fb5d2b3f56d18ba2c8b06e00435e4b4dc", 0x30) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000400)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000fddbdf250200000008000300", @ANYRES32=r3, @ANYBLOB="0c00990009000000740000000800a0009e0900000800a1007c1a0000080026008009000008009f0004000001"], 0x48}}, 0x20000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x1, 0x0, 0x80}}, [@tmpl={0x184, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800}, {{@in=@loopback, 0x0, 0x32}, 0x0, @in=@multicast1, 0x800000, 0x3}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x0, 0x0, 0x1, 0x0, 0xabf}, {{@in6=@local, 0x4d4, 0x6c}, 0x0, @in=@multicast1, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0xa, @in6=@private1, 0x0, 0x1, 0x0, 0x0, 0x1}]}]}, 0x23c}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'macsec0\x00', 0x400}) r5 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r5, 0x110, 0x4, &(0x7f0000000180)=0x4, 0x4) accept(r5, &(0x7f0000000100)=@in={0x2, 0x0, @initdev}, &(0x7f00000001c0)=0x80) kernel console output (not intermixed with test programs): as an invalid length. [ 792.469599][ T6426] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 792.550915][ T6433] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 792.604892][ T6431] tipc: Started in network mode [ 792.616734][ T6431] tipc: Node identity 6af8b55f46d4, cluster identity 4711 [ 792.637678][ T6431] tipc: Enabled bearer , priority 0 [ 792.643708][ T6441] tipc: Failed to remove unknown binding: 66,1,1/0:923161187/923161189 [ 792.669168][ T6439] xt_hashlimit: size too large, truncated to 1048576 [ 792.701672][ T6431] tipc: Disabling bearer [ 794.159306][ T6539] Bluetooth: MGMT ver 1.23 [ 794.169443][ T6539] Bluetooth: hci1: too big key_count value 32778 [ 794.520133][ T6553] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 794.650239][ T6559] syzkaller0: entered promiscuous mode [ 794.662017][ T6559] syzkaller0: entered allmulticast mode [ 794.701635][ T6564] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 794.818435][ T6573] nbd: nbd0 already in use [ 794.823988][ T6573] nbd: must specify a device to reconfigure [ 794.997438][ T6585] netlink: 'syz.1.8814': attribute type 21 has an invalid length. [ 795.045730][ T6589] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 795.062760][ T6591] netlink: 'syz.1.8814': attribute type 21 has an invalid length. [ 795.088062][ T6589] veth0: entered promiscuous mode [ 795.099888][ T6598] netlink: 'syz.5.8817': attribute type 12 has an invalid length. [ 795.120658][ T6598] netlink: 'syz.5.8817': attribute type 12 has an invalid length. [ 795.130987][ T6598] netlink: 'syz.5.8817': attribute type 12 has an invalid length. [ 795.139455][ T6598] netlink: 'syz.5.8817': attribute type 12 has an invalid length. [ 795.150972][ T6598] netlink: 'syz.5.8817': attribute type 12 has an invalid length. [ 795.167422][ T6598] netlink: 'syz.5.8817': attribute type 12 has an invalid length. [ 795.183736][ T6590] veth0: left promiscuous mode [ 795.188940][ T6598] netlink: 'syz.5.8817': attribute type 12 has an invalid length. [ 795.198573][ T6598] netlink: 'syz.5.8817': attribute type 12 has an invalid length. [ 795.302100][ T6608] Cannot find add_set index 4 as target [ 795.407159][ T6617] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 795.441049][ T6617] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 795.464513][ T6620] bridge: RTM_NEWNEIGH with invalid ether address [ 795.497103][ T6621] syzkaller0: entered promiscuous mode [ 795.514448][ T6621] syzkaller0: entered allmulticast mode [ 795.539661][ T6623] xt_TPROXY: Can be used only with -p tcp or -p udp [ 795.573670][ T6625] __nla_validate_parse: 13 callbacks suppressed [ 795.573690][ T6625] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8827'. [ 795.678948][ T6629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8830'. [ 795.721602][ T6629] hsr_slave_1 (unregistering): left promiscuous mode [ 795.738187][ T6636] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8830'. [ 795.794579][ T6640] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8833'. [ 795.839887][ T6639] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8832'. [ 795.874601][ T6644] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8835'. [ 795.947410][ T6651] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8837'. [ 796.044757][ T6657] gretap0: entered promiscuous mode [ 796.050961][ T6657] batman_adv: batadv0: Adding interface: gretap0 [ 796.059025][ T6657] batman_adv: batadv0: The MTU of interface gretap0 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 796.081036][ T6657] batman_adv: batadv0: Not using interface gretap0 (retrying later): interface not active [ 796.151296][ T6665] vlan1: left allmulticast mode [ 796.176049][ T6667] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8841'. [ 796.177940][ T6665] veth0_vlan: left allmulticast mode [ 796.259373][ T6675] vlan2: entered promiscuous mode [ 796.264768][ T6675] bridge0: entered promiscuous mode [ 796.319586][ T6679] bond7: entered promiscuous mode [ 796.325290][ T6679] 8021q: adding VLAN 0 to HW filter on device bond7 [ 796.341415][ T6680] bond7: (slave bridge5): making interface the new active one [ 796.349554][ T6680] bridge5: entered promiscuous mode [ 796.356593][ T6680] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 796.421644][ T6685] syzkaller1: entered promiscuous mode [ 796.428156][ T6685] syzkaller1: entered allmulticast mode [ 796.569283][ T6688] syzkaller0: entered promiscuous mode [ 796.575034][ T6688] syzkaller0: entered allmulticast mode [ 796.772167][ T6695] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 796.870345][ T6697] netlink: 140 bytes leftover after parsing attributes in process `syz.1.8851'. [ 797.002037][ T6703] bond8: (slave geneve2): making interface the new active one [ 797.011813][ T6703] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 797.021419][ T6030] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 797.030588][ T6030] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 797.039904][ T6030] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 797.083462][ T6704] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8853'. [ 797.086534][ T6708] openvswitch: netlink: Message has 8 unknown bytes. [ 797.100675][ T6708] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 797.116593][ T6030] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 797.129364][ T6704] 8021q: adding VLAN 0 to HW filter on device bond8 [ 797.558690][ T6748] veth9: entered allmulticast mode [ 797.695524][ T6762] gretap0: entered promiscuous mode [ 797.702493][ T6762] gretap0: left promiscuous mode [ 797.768828][ T6762] gretap0: entered promiscuous mode [ 797.778177][ T6762] gretap0: left promiscuous mode [ 797.842814][ T6762] gretap0: entered promiscuous mode [ 797.850257][ T6762] gretap0: left promiscuous mode [ 797.899090][ T6762] gretap0: entered promiscuous mode [ 797.908630][ T6762] gretap0: left promiscuous mode [ 797.949425][ T6778] bond7: entered promiscuous mode [ 797.955078][ T6778] 8021q: adding VLAN 0 to HW filter on device bond7 [ 797.967241][ T6778] bond7: entered allmulticast mode [ 797.981649][ T6781] bond7: (slave bridge15): making interface the new active one [ 797.990434][ T6781] bridge15: entered promiscuous mode [ 797.997177][ T6781] bridge15: entered allmulticast mode [ 798.004811][ T6781] bond7: (slave bridge15): Enslaving as an active interface with an up link [ 798.015284][ T6779] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 798.027542][ T6762] gretap0: entered promiscuous mode [ 798.034632][ T6762] gretap0: left promiscuous mode [ 798.089369][ T6762] gretap0: entered promiscuous mode [ 798.096018][ T6762] gretap0: left promiscuous mode [ 798.146474][ T6785] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 798.153586][ T6762] gretap0: entered promiscuous mode [ 798.161038][ T6762] gretap0: left promiscuous mode [ 798.212300][ T6762] gretap0: entered promiscuous mode [ 798.221180][ T6762] gretap0: left promiscuous mode [ 798.248080][ T6787] syzkaller1: entered promiscuous mode [ 798.253968][ T6787] syzkaller1: entered allmulticast mode [ 798.282264][ T6762] gretap0: entered promiscuous mode [ 798.288782][ T6762] gretap0: left promiscuous mode [ 798.329340][ T6762] gretap0: entered promiscuous mode [ 798.336705][ T6762] gretap0: left promiscuous mode [ 798.389535][ T6762] gretap0: entered promiscuous mode [ 798.396467][ T6762] gretap0: left promiscuous mode [ 798.416050][ T6795] set match dimension is over the limit! [ 798.438820][ T6762] gretap0: entered promiscuous mode [ 798.447123][ T6762] gretap0: left promiscuous mode [ 798.510531][ T6797] xt_ecn: cannot match TCP bits for non-tcp packets [ 798.521264][ T6762] gretap0: entered promiscuous mode [ 798.531417][ T6762] gretap0: left promiscuous mode [ 799.484621][ T6854] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 800.127405][ T6909] xt_ecn: cannot match TCP bits for non-tcp packets [ 800.376392][ T6920] 8021q: adding VLAN 0 to HW filter on device bond5 [ 800.424526][ T6925] IPv6: NLM_F_REPLACE set, but no existing node found! [ 800.514319][ T6931] syzkaller0: entered promiscuous mode [ 800.519897][ T6931] syzkaller0: entered allmulticast mode [ 800.530983][ T6931] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 800.757731][ T6940] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 800.866911][ T6946] __nla_validate_parse: 52 callbacks suppressed [ 800.866927][ T6946] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8933'. [ 800.884397][ T6946] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8933'. [ 800.901317][ T6946] validate_nla: 69 callbacks suppressed [ 800.901333][ T6946] netlink: 'syz.1.8933': attribute type 4 has an invalid length. [ 800.981669][T26288] IPVS: starting estimator thread 0... [ 801.073496][ T6953] IPVS: using max 43 ests per chain, 103200 per kthread [ 801.205478][ T6966] bond3: Removing last ns target with arp_interval on [ 801.219696][ T6968] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 801.309885][ T6974] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 801.408308][ T6982] bridge0: entered promiscuous mode [ 801.430516][ T6984] netlink: 'syz.5.8946': attribute type 2 has an invalid length. [ 801.440198][ T6984] netlink: 'syz.5.8946': attribute type 1 has an invalid length. [ 801.485659][ T6984] bond6: (slave bridge3): making interface the new active one [ 801.495074][ T6984] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 801.546674][ T6991] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 801.623072][ T5629] block nbd5: Receive control failed (result -107) [ 801.640368][ T6996] xt_hashlimit: invalid rate [ 801.645666][ T6987] nbd5: detected capacity change from 0 to 63 [ 801.656394][ T50] block nbd5: Receive control failed (result -104) [ 801.663484][ T1189] block nbd5: Send control failed (result -32) [ 801.669834][ T1189] block nbd5: Request send failed, requeueing [ 801.676464][ T4952] block nbd5: Dead connection, failed to find a fallback [ 801.684591][ T4952] block nbd5: shutting down sockets [ 801.689929][ T4952] blk_print_req_error: 138 callbacks suppressed [ 801.689951][ T4952] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 801.706374][ T4952] buffer_io_error: 138 callbacks suppressed [ 801.706394][ T4952] Buffer I/O error on dev nbd5, logical block 1, async page read [ 801.721016][ T1189] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 801.730875][ T1189] Buffer I/O error on dev nbd5, logical block 2, async page read [ 801.738951][ T1189] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 801.748299][ T1189] Buffer I/O error on dev nbd5, logical block 3, async page read [ 801.864853][ T7007] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8953'. [ 801.959806][ T7014] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 802.114593][ T7023] bond0: left promiscuous mode [ 802.183443][ T7028] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8962'. [ 802.914161][ T7069] vlan3: entered allmulticast mode [ 802.919444][ T7069] bond0: entered allmulticast mode [ 803.098983][ T7072] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8972'. [ 803.108379][ T7072] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8972'. [ 803.203358][ T50] Bluetooth: hci1: command 0x0405 tx timeout [ 805.399514][ T7032] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 805.563539][ T7080] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8976'. [ 805.584454][ T7080] netlink: 'syz.6.8976': attribute type 1 has an invalid length. [ 805.657631][ T7080] 8021q: adding VLAN 0 to HW filter on device bond4 [ 805.689373][ T50] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 805.699929][ T50] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 805.709138][ T50] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 805.721222][ T50] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 805.731825][ T50] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 805.791618][ T7094] netlink: 96 bytes leftover after parsing attributes in process `syz.5.8979'. [ 805.803706][ T7094] 8021q: VLANs not supported on gre0 [ 805.820342][ T7094] : renamed from bond0 (while UP) [ 805.877941][ T7101] netlink: 'syz.6.8981': attribute type 10 has an invalid length. [ 805.913781][ T7101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 805.922003][ T7105] sctp: [Deprecated]: syz.1.8983 (pid 7105) Use of int in max_burst socket option deprecated. [ 805.922003][ T7105] Use struct sctp_assoc_value instead [ 805.940397][ T7101] bond0 (unregistering): Released all slaves [ 806.126765][ T7118] IPVS: set_ctl: invalid protocol: 33 172.20.20.187:20004 [ 806.139783][ T7115] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8986'. [ 806.367803][ T7090] hsr0 speed is unknown, defaulting to 1000 [ 806.388046][ T7090] syzkaller0 speed is unknown, defaulting to 1000 [ 806.610281][ T7157] Cannot find add_set index 46338 as target [ 806.900561][ T7090] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.908546][ T7090] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.916420][ T7090] bridge_slave_0: entered allmulticast mode [ 806.924204][ T7090] bridge_slave_0: entered promiscuous mode [ 806.932492][ T7090] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.940526][ T7090] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.947968][ T7090] bridge_slave_1: entered allmulticast mode [ 806.955449][ T7090] bridge_slave_1: entered promiscuous mode [ 806.999533][ T7090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 807.011462][ T7090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 807.040586][ T7090] team0: Port device team_slave_0 added [ 807.050398][ T7090] team0: Port device team_slave_1 added [ 807.089527][ T7090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 807.098015][ T7090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 807.142025][ T7090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 807.165553][ T7090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 807.181905][ T7090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 807.211593][ T7090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 807.258568][ T7090] hsr_slave_0: entered promiscuous mode [ 807.266792][ T7090] hsr_slave_1: entered promiscuous mode [ 807.273596][ T7090] debugfs: 'hsr0' already exists in 'hsr' [ 807.279459][ T7090] Cannot create hsr debugfs directory [ 807.395314][ T7197] netlink: 'syz.1.9003': attribute type 1 has an invalid length. [ 807.422804][ T7197] 8021q: adding VLAN 0 to HW filter on device bond9 [ 807.454100][ T7197] bond9: (slave ip6gretap1): making interface the new active one [ 807.464349][ T7197] bond9: (slave ip6gretap1): Enslaving as an active interface with an up link [ 807.518875][ T7090] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 807.544318][ T7090] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 807.557457][ T7202] macvlan4: entered promiscuous mode [ 807.562876][ T7202] macvlan4: entered allmulticast mode [ 807.572438][ T7090] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 807.582461][ T7090] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 807.591600][ T7090] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 807.601910][ T7090] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 807.615113][ T7090] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 807.625973][ T7090] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 807.711331][ T7090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 807.725759][ T7210] netlink: 256 bytes leftover after parsing attributes in process `syz.1.9006'. [ 807.754614][ T7090] 8021q: adding VLAN 0 to HW filter on device team0 [ 807.764036][T29370] Bluetooth: hci6: command tx timeout [ 807.781183][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.788410][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 807.829754][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.836978][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 807.980884][ T7228] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9010'. [ 808.026771][ T7232] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9011'. [ 808.186173][ T7242] syzkaller0: entered promiscuous mode [ 808.195219][ T7242] syzkaller0: entered allmulticast mode [ 808.336570][ T7252] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9016'. [ 808.349619][ T7253] netlink: 'syz.1.9016': attribute type 16 has an invalid length. [ 808.359365][ T7253] netlink: 'syz.1.9016': attribute type 17 has an invalid length. [ 808.391728][ T7253] 8021q: adding VLAN 0 to HW filter on device team0 [ 808.402509][ T7253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 808.434973][ T7253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 808.446226][ T7253] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 808.461754][ T7253] veth1_vlan: left promiscuous mode [ 808.468873][ T7253] veth0_vlan: left promiscuous mode [ 808.475389][ T7253] veth0_vlan: entered promiscuous mode [ 808.485115][ T7253] veth1_vlan: entered promiscuous mode [ 808.494880][ T7253] veth1_macvtap: left promiscuous mode [ 808.501610][ T7253] veth0_macvtap: left promiscuous mode [ 808.508939][ T7253] veth0_macvtap: entered promiscuous mode [ 808.516207][ T7253] veth1_macvtap: entered promiscuous mode [ 808.549472][ T7253] 8021q: adding VLAN 0 to HW filter on device bond1 [ 808.589327][ T7253] 8021q: adding VLAN 0 to HW filter on device eth0 [ 808.599090][ T7253] 8021q: adding VLAN 0 to HW filter on device eth1 [ 808.610710][ T7253] 8021q: adding VLAN 0 to HW filter on device eth2 [ 808.620284][ T7253] 8021q: adding VLAN 0 to HW filter on device eth3 [ 808.633938][ T7253] 8021q: adding VLAN 0 to HW filter on device bond2 [ 808.646892][ T1324] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 808.664174][ T7253] 8021q: adding VLAN 0 to HW filter on device bond3 [ 808.691780][ T7264] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 808.705790][ T7265] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 808.716004][ T7253] bond4: left promiscuous mode [ 808.720855][ T7253] bond4: left allmulticast mode [ 808.726632][ T7253] 8021q: adding VLAN 0 to HW filter on device bond4 [ 808.736676][ T7253] vlan2: left promiscuous mode [ 808.741510][ T7253] hsr0: left promiscuous mode [ 808.746640][ T7253] vlan2: left allmulticast mode [ 808.751567][ T7253] hsr0: left allmulticast mode [ 808.756756][ T7253] hsr_slave_0: left allmulticast mode [ 808.765229][ T7253] 8021q: adding VLAN 0 to HW filter on device bond5 [ 808.779772][ T7253] bridge4: left allmulticast mode [ 808.788099][ T7253] A link change request failed with some changes committed already. Interface t may have been left with an inconsistent configuration, please check. [ 808.824118][ T13] bridge0: port 1(1¾x9ÿ) entered blocking state [ 808.830611][ T13] bridge0: port 1(1¾x9ÿ) entered forwarding state [ 808.874263][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.881442][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 808.929480][ T6025] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 808.961642][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 808.978274][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 808.989055][ T8529] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 809.001796][ T7090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 809.028177][ T6025] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 809.051071][ T6025] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 809.089748][ T6025] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 809.098639][ T7279] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9021'. [ 809.178685][ T7287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9023'. [ 809.207131][ T7288] netlink: 'syz.0.9022': attribute type 10 has an invalid length. [ 809.229280][ T6030] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 809.251785][ T7288] netlink: 228 bytes leftover after parsing attributes in process `syz.0.9022'. [ 809.269454][ T6030] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 809.279212][ T5712] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 809.311753][ T7289] tipc: Enabling of bearer rejected, failed to enable media [ 809.328365][ T5712] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 809.349420][ T6030] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 809.375565][ T6030] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 809.384875][T26288] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 809.519975][ T7305] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 809.587630][ T7313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 809.700555][ T7321] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9031'. [ 809.717173][ T7090] veth0_vlan: entered promiscuous mode [ 809.719920][ T7323] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9032'. [ 809.740438][ T7090] veth1_vlan: entered promiscuous mode [ 809.789703][ T7090] veth0_macvtap: entered promiscuous mode [ 809.811898][ T7090] veth1_macvtap: entered promiscuous mode [ 809.840511][ T7090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 809.849165][T29370] Bluetooth: hci6: command tx timeout [ 809.856745][ T7090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 809.877233][ T6030] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.892722][ T6030] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.917309][ T6030] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.946287][ T6030] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.033817][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 810.062494][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 810.115831][ T6025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 810.137277][ T6025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 810.150900][ T7338] tipc: Trying to set illegal importance in message [ 810.241005][ T7345] xt_hashlimit: size too large, truncated to 1048576 [ 810.827730][ T7379] openvswitch: netlink: Flow actions attr not present in new flow. [ 810.858917][ T50] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 810.882168][ T50] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 810.892479][ T50] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 810.905483][ T50] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 810.916674][ T50] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 811.380556][ T7400] sctp: [Deprecated]: syz.7.9056 (pid 7400) Use of struct sctp_assoc_value in delayed_ack socket option. [ 811.380556][ T7400] Use struct sctp_sack_info instead [ 811.554889][ T7407] __nla_validate_parse: 4 callbacks suppressed [ 811.554912][ T7407] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9057'. [ 811.867854][ T7421] netlink: 'syz.0.9061': attribute type 11 has an invalid length. [ 811.926436][ T50] Bluetooth: hci6: command tx timeout [ 811.989469][ T7429] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9063'. [ 812.111304][ T7383] hsr0 speed is unknown, defaulting to 1000 [ 812.141087][ T7383] syzkaller0 speed is unknown, defaulting to 1000 [ 812.163444][ T7435] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9065'. [ 812.211807][ T7435] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9065'. [ 812.250848][ T7439] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9067'. [ 812.339549][ T7442] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9068'. [ 812.348708][ T7442] netlink: 'syz.7.9068': attribute type 1 has an invalid length. [ 812.358526][ T7442] netlink: 224 bytes leftover after parsing attributes in process `syz.7.9068'. [ 812.411302][ T7446] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 812.478179][ T7451] netlink: 48 bytes leftover after parsing attributes in process `syz.7.9070'. [ 812.614474][ T7383] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.625739][ T7383] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.633734][ T7383] bridge_slave_0: entered allmulticast mode [ 812.641202][ T7383] bridge_slave_0: entered promiscuous mode [ 812.654000][ T7383] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.661502][ T7383] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.669259][ T7383] bridge_slave_1: entered allmulticast mode [ 812.677041][ T7383] bridge_slave_1: entered promiscuous mode [ 812.707832][ T7383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 812.721192][ T7383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 812.770555][ T7383] team0: Port device team_slave_0 added [ 812.780464][ T7383] team0: Port device team_slave_1 added [ 812.825677][ T7383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 812.842449][ T7383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 812.894229][ T7383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 812.911950][ T7383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 812.920846][ T7383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 812.948362][ T7383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 812.965858][ T50] Bluetooth: hci7: command tx timeout [ 812.999300][ T7383] hsr_slave_0: entered promiscuous mode [ 813.006827][ T7383] hsr_slave_1: entered promiscuous mode [ 813.015230][ T7383] debugfs: 'hsr0' already exists in 'hsr' [ 813.021087][ T7383] Cannot create hsr debugfs directory [ 813.119304][ T7466] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9074'. [ 813.215668][ T7383] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 813.250597][ T7383] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 813.261547][ T7383] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 813.325358][ T7383] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 813.358792][ T7383] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 813.384713][ T7383] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 813.427913][ T7481] IPv6: sit1: Disabled Multicast RS [ 813.482812][ T7383] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 813.513522][ T7383] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 813.533483][ T7383] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 813.638181][ T7383] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 813.667117][ T7383] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 813.689396][ T7383] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 813.713963][ T7493] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9083'. [ 813.886378][ T7383] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 813.914021][ T7383] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 813.925368][ T7383] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 813.936556][ T7383] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 813.959202][ T7383] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 813.977531][ T7383] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 813.995640][ T7502] tipc: Enabled bearer , priority 0 [ 814.003889][ T50] Bluetooth: hci6: command tx timeout [ 814.034688][ T7502] syzkaller0: entered promiscuous mode [ 814.050255][ T7502] syzkaller0: entered allmulticast mode [ 814.059171][ T7502] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 814.070531][ T7383] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 814.080686][ T7383] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 814.091633][ T7516] tipc: Enabling of bearer rejected, media not registered [ 814.125909][ T7502] tipc: Resetting bearer [ 814.151549][ T7520] SET target dimension over the limit! [ 814.166918][ T7499] tipc: Resetting bearer [ 814.187897][ T7499] tipc: Disabling bearer [ 814.312625][ T7520] bridge5: left promiscuous mode [ 814.319727][ T7520] bridge5: left allmulticast mode [ 814.377795][ T7534] syzkaller1: entered promiscuous mode [ 814.411451][ T7534] syzkaller1: entered allmulticast mode [ 814.514893][ T7543] netlink: 'syz.0.9098': attribute type 1 has an invalid length. [ 814.532199][ T7543] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 814.641546][ T7383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 814.666342][ T7383] 8021q: adding VLAN 0 to HW filter on device team0 [ 814.680833][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 814.688085][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 814.715641][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.722860][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 815.044070][ T50] Bluetooth: hci7: command tx timeout [ 815.085346][ T7383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 815.120762][ T7383] veth0_vlan: entered promiscuous mode [ 815.134739][ T7383] veth1_vlan: entered promiscuous mode [ 815.158528][ T7383] veth0_macvtap: entered promiscuous mode [ 815.168823][ T7383] veth1_macvtap: entered promiscuous mode [ 815.186004][ T7383] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 815.199517][ T7383] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 815.215620][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.225028][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.235468][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.244931][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.294041][ T6030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 815.302327][ T6030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 815.343831][ T6030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 815.351800][ T6030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 815.516825][ T7582] netlink: 'syz.0.9105': attribute type 3 has an invalid length. [ 815.576672][ T7584] No such timeout policy "syz0" [ 815.869250][ T7604] syzkaller0: entered promiscuous mode [ 815.875078][ T7604] syzkaller0: entered allmulticast mode [ 815.992912][ T7610] vlan0: entered promiscuous mode [ 816.448434][ T7650] netlink: 'syz.6.9125': attribute type 24 has an invalid length. [ 816.576510][ T7656] netlink: 'syz.1.9126': attribute type 1 has an invalid length. [ 816.649871][ T7656] team0: Port device syz_tun added [ 816.831920][ T7664] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 816.877463][ T7671] __nla_validate_parse: 6 callbacks suppressed [ 816.877485][ T7671] netlink: 84 bytes leftover after parsing attributes in process `syz.6.9131'. [ 816.896042][ T7672] netlink: 84 bytes leftover after parsing attributes in process `syz.6.9131'. [ 817.062600][ T7681] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9133'. [ 817.096616][ T7681] netlink: 'syz.5.9133': attribute type 1 has an invalid length. [ 817.106093][ T7682] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9136'. [ 817.116238][ T7681] netlink: 'syz.5.9133': attribute type 2 has an invalid length. [ 817.125315][ T50] Bluetooth: hci7: command tx timeout [ 817.209189][ T7688] netlink: 'syz.6.9137': attribute type 1 has an invalid length. [ 817.224276][ T7688] netlink: 216 bytes leftover after parsing attributes in process `syz.6.9137'. [ 817.326204][ T7698] netlink: 'syz.6.9140': attribute type 1 has an invalid length. [ 817.406694][ T7702] x_tables: unsorted entry at hook 3 [ 817.418305][ T7702] netlink: 204 bytes leftover after parsing attributes in process `syz.5.9142'. [ 817.508797][ T7714] netlink: 96 bytes leftover after parsing attributes in process `syz.5.9142'. [ 817.556409][ T7717] netlink: 'syz.1.9145': attribute type 1 has an invalid length. [ 817.582394][ T7717] netlink: 'syz.1.9145': attribute type 3 has an invalid length. [ 817.606021][ T7717] netlink: 172 bytes leftover after parsing attributes in process `syz.1.9145'. [ 817.621393][ T7717] NCSI netlink: No device for ifindex 813332851 [ 817.808597][ T7737] netlink: 45 bytes leftover after parsing attributes in process `syz.5.9151'. [ 818.202396][ T7769] vlan2: entered allmulticast mode [ 818.208458][ T7769] bond0: entered allmulticast mode [ 818.213998][ T7769] bond_slave_0: entered allmulticast mode [ 818.219800][ T7769] bond_slave_1: entered allmulticast mode [ 818.332232][ T7777] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9165'. [ 818.389595][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805969c400: rx timeout, send abort [ 818.398523][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805969c400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 818.436172][ T7784] syzkaller0: entered promiscuous mode [ 818.448799][ T7784] syzkaller0: entered allmulticast mode [ 818.579382][ T12] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 818.595312][ T12] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 818.608239][ T12] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 818.629152][ T12] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 819.203922][ T50] Bluetooth: hci7: command tx timeout [ 819.387854][ T7851] dvmrp0: renamed from ip6erspan0 (while UP) [ 819.565822][ T7863] syzkaller0: entered promiscuous mode [ 819.571527][ T7863] syzkaller0: entered allmulticast mode [ 819.772285][ T7878] validate_nla: 4 callbacks suppressed [ 819.772306][ T7878] netlink: 'syz.0.9193': attribute type 9 has an invalid length. [ 819.852478][ T7877] syzkaller0: entered promiscuous mode [ 819.858961][ T7877] syzkaller0: entered allmulticast mode [ 820.418800][ T7925] netlink: zone id is out of range [ 820.436133][ T7925] netlink: zone id is out of range [ 820.442377][ T7925] netlink: zone id is out of range [ 820.448309][ T7925] netlink: zone id is out of range [ 820.455842][ T7925] netlink: zone id is out of range [ 820.488334][ T7925] netlink: zone id is out of range [ 820.502482][ T7925] netlink: zone id is out of range [ 820.508901][ T7925] netlink: set zone limit has 4 unknown bytes [ 820.779394][ T7950] bond9: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 820.791907][ T7950] bond9 (unregistering): Released all slaves [ 820.804179][ C1] ip6_tnl_xmit_ctl: 8 callbacks suppressed [ 820.804200][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 821.197024][ T7989] xt_policy: neither incoming nor outgoing policy selected [ 822.083870][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 822.092391][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 824.005724][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 824.015970][ T7970] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 824.132197][ T7999] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 824.154912][ T7999] bond0 (unregistering): Released all slaves [ 824.170063][ T8006] __nla_validate_parse: 16 callbacks suppressed [ 824.170086][ T8006] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9225'. [ 824.186655][ T8006] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9225'. [ 824.259497][ T8009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9227'. [ 824.319771][ T8009] bond9: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 824.336113][ T8009] bond9 (unregistering): Released all slaves [ 824.365849][ T8022] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9230'. [ 824.380750][ T2173] IPVS: starting estimator thread 0... [ 824.387993][ T8020] netlink: 'syz.1.9228': attribute type 17 has an invalid length. [ 824.398575][ T8020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9228'. [ 824.411558][ T8020] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9228'. [ 824.440934][ T8020] gretap0: entered promiscuous mode [ 824.465913][ T8020] gretap0: left promiscuous mode [ 824.493165][ T8024] IPVS: using max 37 ests per chain, 88800 per kthread [ 824.510564][ T8029] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9233'. [ 824.606269][ T8034] netlink: 80 bytes leftover after parsing attributes in process `syz.5.9236'. [ 824.648920][ T8038] netlink: 1 bytes leftover after parsing attributes in process `syz.1.9237'. [ 824.671315][ T8038] xt_policy: neither incoming nor outgoing policy selected [ 825.120817][ T8080] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9251'. [ 825.155853][ T8080] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 825.170174][ T8080] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.177771][ T8080] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.197782][ T8085] geneve2: entered promiscuous mode [ 825.204261][ T8085] geneve2: entered allmulticast mode [ 825.217524][ T8079] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 825.226756][ T6022] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 825.267701][ T6022] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 825.301443][ T6022] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 825.338614][ T6022] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 825.416850][ T8096] netlink: 'syz.7.9257': attribute type 1 has an invalid length. [ 825.435763][ T8096] netlink: 'syz.7.9257': attribute type 2 has an invalid length. [ 825.450016][ T8096] netlink: 'syz.7.9257': attribute type 1 has an invalid length. [ 825.475597][ T8104] netlink: 'syz.0.9258': attribute type 1 has an invalid length. [ 825.497580][ T8096] dvmrp1: entered allmulticast mode [ 825.748286][ T8118] SET target dimension over the limit! [ 826.215239][ T8150] x_tables: duplicate underflow at hook 1 [ 826.249849][T29370] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 826.260734][T29370] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 826.268182][T29370] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 826.279772][T29370] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 826.287663][T29370] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 826.452076][ T8160] syzkaller0: entered allmulticast mode [ 826.461900][ T8160] netlink: 'syz.7.9277': attribute type 39 has an invalid length. [ 826.470043][ T8160] hsr_slave_0: left promiscuous mode [ 826.496711][ T8160] hsr_slave_1: left promiscuous mode [ 826.766683][ T8151] hsr0 speed is unknown, defaulting to 1000 [ 826.773717][ T8178] tipc: Enabling of bearer rejected, failed to enable media [ 826.784606][ T8151] syzkaller0 speed is unknown, defaulting to 1000 [ 827.091361][ T8151] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.102682][ T8151] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.111827][ T8151] bridge_slave_0: entered allmulticast mode [ 827.122089][ T8151] bridge_slave_0: entered promiscuous mode [ 827.131531][ T8151] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.146759][ T8151] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.154814][ T8151] bridge_slave_1: entered allmulticast mode [ 827.165023][ T8151] bridge_slave_1: entered promiscuous mode [ 827.208294][ T8151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 827.220641][ T8151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 827.240348][ T8205] netlink: 'syz.1.9288': attribute type 2 has an invalid length. [ 827.264049][ T8151] team0: Port device team_slave_0 added [ 827.272340][ T8151] team0: Port device team_slave_1 added [ 827.307150][ T8207] IPVS: set_ctl: invalid protocol: 108 100.1.1.0:20003 [ 827.316028][ T8151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 827.323790][ T8151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 827.350055][ T8151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 827.363862][ T8151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 827.370883][ T8151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 827.397879][ T8151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 827.439528][ T8209] nbd: must specify an index to disconnect [ 827.450000][ T8211] nbd: must specify an index to disconnect [ 827.471179][ T8151] hsr_slave_0: entered promiscuous mode [ 827.478340][ T8151] hsr_slave_1: entered promiscuous mode [ 827.485651][ T8151] debugfs: 'hsr0' already exists in 'hsr' [ 827.491517][ T8151] Cannot create hsr debugfs directory [ 827.652316][ T8151] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 827.675574][ T8151] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.695986][ T8222] veth1_macvtap: left promiscuous mode [ 827.737138][ T8151] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 827.762438][ T8151] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.826400][ T8151] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 827.853233][ T8151] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.888265][ T8228] syzkaller0: entered promiscuous mode [ 827.896045][ T8228] syzkaller0: entered allmulticast mode [ 827.927695][ T8151] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 827.948749][ T8151] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.985013][ T8234] xt_nat: multiple ranges no longer supported [ 828.020308][ T8233] xt_CT: No such helper "snmp_trap" [ 828.127154][ T8151] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 828.167326][ T8151] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 828.191762][ T8151] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 828.231133][ T8151] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 828.265278][ T8151] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 828.316679][ T8151] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 828.324107][ T50] Bluetooth: hci3: command tx timeout [ 828.368369][ T8151] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 828.392895][ T8151] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 828.436376][ T8275] netlink: ct family unspecified [ 828.458693][ T4310] syzkaller0 speed is unknown, defaulting to 1000 [ 828.469590][ T4310] syz2: Port: 1 Link DOWN [ 828.578021][ T8281] hsr0 speed is unknown, defaulting to 1000 [ 828.609672][ T8281] syzkaller0 speed is unknown, defaulting to 1000 [ 828.652092][ T8282] tipc: Invalid UDP bearer configuration [ 828.652124][ T8282] tipc: Enabling of bearer rejected, failed to enable media [ 828.712142][ T8151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 828.731414][ T8151] 8021q: adding VLAN 0 to HW filter on device team0 [ 828.746185][ T8256] bridge0: port 1(bridge_slave_0) entered blocking state [ 828.753384][ T8256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 828.768031][ T8257] bridge0: port 2(bridge_slave_1) entered blocking state [ 828.775260][ T8257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 829.246424][ T8305] Cannot find del_set index 4 as target [ 829.349488][ T8314] __nla_validate_parse: 18 callbacks suppressed [ 829.349509][ T8314] netlink: 128 bytes leftover after parsing attributes in process `syz.1.9315'. [ 829.385980][ T8151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 829.407791][ T8316] netlink: 16166 bytes leftover after parsing attributes in process `syz.7.9316'. [ 829.477941][ T8151] veth0_vlan: entered promiscuous mode [ 829.524720][ T8151] veth1_vlan: entered promiscuous mode [ 829.602626][ T8151] veth0_macvtap: entered promiscuous mode [ 829.636775][ T8151] veth1_macvtap: entered promiscuous mode [ 829.681163][ T8151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 829.722876][ T8151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 829.758088][ T8257] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.775714][ T8257] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.805795][ T8257] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.829551][ T8257] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.965069][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 829.989346][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 830.045972][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 830.059549][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 830.090331][ T8343] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 830.406398][ T50] Bluetooth: hci3: command tx timeout [ 830.484757][ T8522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.834139][ T8415] Bluetooth: MGMT ver 1.23 [ 830.901001][ T8420] netlink: 'syz.7.9345': attribute type 1 has an invalid length. [ 830.962924][ T8420] 8021q: adding VLAN 0 to HW filter on device bond1 [ 830.978122][ T8426] vlan2: entered promiscuous mode [ 830.983811][ T8426] bond1: entered promiscuous mode [ 830.990326][ T8426] vlan2: entered allmulticast mode [ 830.996536][ T8426] bond1: entered allmulticast mode [ 831.047475][ T8257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.055967][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.070981][ T8420] bond1: (slave bridge1): making interface the new active one [ 831.079066][ T8420] bridge1: entered promiscuous mode [ 831.085266][ T8420] bridge1: entered allmulticast mode [ 831.092336][ T8420] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 831.155323][ T8442] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9350'. [ 831.171900][ T8442] netlink: 'syz.1.9350': attribute type 3 has an invalid length. [ 831.197209][ T8442] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9350'. [ 831.208039][ T8442] netlink: 'syz.1.9350': attribute type 3 has an invalid length. [ 831.217800][ T8441] netlink: 'syz.1.9350': attribute type 21 has an invalid length. [ 831.225978][ T8441] netlink: 128 bytes leftover after parsing attributes in process `syz.1.9350'. [ 831.260639][ T8428] bridge0: port 2(bridge_slave_1) entered disabled state [ 831.268103][ T8428] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.352360][ T8428] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 831.355180][ T8454] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9352'. [ 831.372234][ T8428] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 831.447646][ T8441] netlink: 'syz.1.9350': attribute type 5 has an invalid length. [ 831.458221][ T8441] netlink: 3 bytes leftover after parsing attributes in process `syz.1.9350'. [ 831.478650][ T8444] geneve2: entered promiscuous mode [ 831.485050][ T8444] geneve2: entered allmulticast mode [ 831.526698][ T4310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.541049][ T8453] bridge_slave_0: left allmulticast mode [ 831.549030][ T8453] bridge_slave_0: left promiscuous mode [ 831.555444][ T8453] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.567128][ T8453] bridge_slave_1: left allmulticast mode [ 831.572836][ T8453] bridge_slave_1: left promiscuous mode [ 831.579473][ T8453] bridge0: port 2(bridge_slave_1) entered disabled state [ 831.591605][ T8453] bond0: (slave bond_slave_0): Releasing backup interface [ 831.604821][ T8463] openvswitch: netlink: Actions may not be safe on all matching packets [ 831.617961][ T8453] bond0: (slave bond_slave_1): Releasing backup interface [ 831.636336][ T8453] team0: Port device team_slave_0 removed [ 831.647452][ T8453] team0: Port device team_slave_1 removed [ 831.656567][ T8453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 831.670047][ T8453] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 831.680682][ T8453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 831.691717][ T8468] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9351'. [ 831.700236][ T8453] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 831.708900][ T4952] block nbd5: Connection timed out, retrying (0/2 alive) [ 831.716464][ T4952] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 831.726418][ T4952] Buffer I/O error on dev nbd5, logical block 0, async page read [ 831.727966][ T8464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.738216][ T1189] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 831.752467][ T1189] Buffer I/O error on dev nbd5, logical block 0, async page read [ 831.760709][ T1189] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 831.770565][ T1189] Buffer I/O error on dev nbd5, logical block 1, async page read [ 831.778492][ T1189] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 831.788011][ T1189] Buffer I/O error on dev nbd5, logical block 2, async page read [ 831.798821][ T1189] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 831.808309][ T1189] Buffer I/O error on dev nbd5, logical block 3, async page read [ 831.816418][ T1189] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 831.826140][ T1189] Buffer I/O error on dev nbd5, logical block 0, async page read [ 831.834349][ T1189] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 831.844463][ T1189] Buffer I/O error on dev nbd5, logical block 1, async page read [ 831.852351][ T1189] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 831.862157][ T1189] Buffer I/O error on dev nbd5, logical block 2, async page read [ 831.870297][ T1189] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 831.870984][ T8470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.880115][ T1189] Buffer I/O error on dev nbd5, logical block 3, async page read [ 831.900123][ T1189] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 831.909472][ T1189] Buffer I/O error on dev nbd5, logical block 0, async page read [ 831.919626][ T8464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.922624][ T1189] ldm_validate_partition_table(): Disk read failed. [ 831.935981][ T8453] bond1: (slave bridge1): Releasing active interface [ 831.936584][ T1189] Dev nbd5: unable to read RDB block 0 [ 831.945535][ T8453] bridge1: left promiscuous mode [ 831.953697][ T1189] nbd5: unable to read partition table [ 831.959353][ T8453] bridge1: left allmulticast mode [ 831.969889][ T1189] ldm_validate_partition_table(): Disk read failed. [ 831.979029][ T1189] Dev nbd5: unable to read RDB block 0 [ 832.005206][ T8256] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.016615][ T8256] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 832.027829][ T1189] nbd5: unable to read partition table [ 832.034295][ T6030] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.047175][ T6030] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 832.059821][ T8470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.089947][ T8454] hsr0 speed is unknown, defaulting to 1000 [ 832.104626][ T8454] syzkaller0 speed is unknown, defaulting to 1000 [ 832.111184][ T6030] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.133551][ T6030] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 832.153507][ T6030] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.170136][ T6030] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 832.342416][ T8481] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9357'. [ 832.484921][T29370] Bluetooth: hci3: command tx timeout [ 832.671648][ T8497] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9360'. [ 832.688389][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 832.697405][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 832.705021][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 832.712731][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 832.726759][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 833.059787][ T8539] x_tables: duplicate underflow at hook 1 [ 833.214661][ T8498] hsr0 speed is unknown, defaulting to 1000 [ 833.221871][ T8498] syzkaller0 speed is unknown, defaulting to 1000 [ 833.450426][ T8498] bridge0: port 1(bridge_slave_0) entered blocking state [ 833.461145][ T8498] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.470065][ T8498] bridge_slave_0: entered allmulticast mode [ 833.477741][ T8498] bridge_slave_0: entered promiscuous mode [ 833.488106][ T8498] bridge0: port 2(bridge_slave_1) entered blocking state [ 833.495559][ T8498] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.503102][ T8498] bridge_slave_1: entered allmulticast mode [ 833.511996][ T8498] bridge_slave_1: entered promiscuous mode [ 833.546287][ T8498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 833.558773][ T8498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 833.602079][ T8498] team0: Port device team_slave_0 added [ 833.607868][ T8522] net_ratelimit: 9 callbacks suppressed [ 833.607891][ T8522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.639955][ T8498] team0: Port device team_slave_1 added [ 833.675031][ T8498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 833.682077][ T8498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 833.709844][ T8498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 833.727936][ T8498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 833.735235][ T8498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 833.762624][ T8498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 833.822195][ T8498] hsr_slave_0: entered promiscuous mode [ 833.837538][ T8498] hsr_slave_1: entered promiscuous mode [ 833.848133][ T8498] debugfs: 'hsr0' already exists in 'hsr' [ 833.854908][ T8498] Cannot create hsr debugfs directory [ 833.884312][ T8580] syzkaller0: entered promiscuous mode [ 833.889976][ T8580] syzkaller0: entered allmulticast mode [ 833.989822][ T8574] syzkaller0: left promiscuous mode [ 833.996031][ T8574] syzkaller0: left allmulticast mode [ 834.228429][ T8600] netlink: 'syz.7.9384': attribute type 1 has an invalid length. [ 834.245817][ T6029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.254953][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.265937][ T2173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.330340][ T8602] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 834.356311][ T8606] Bluetooth: MGMT ver 1.23 [ 834.381015][ T8610] __nla_validate_parse: 13 callbacks suppressed [ 834.381035][ T8610] netlink: 666 bytes leftover after parsing attributes in process `syz.7.9387'. [ 834.400416][ T8498] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 834.412664][ T8498] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 834.421068][ T8498] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 834.437221][ T8498] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 834.451324][ T8498] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 834.467575][ T8498] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 834.488736][ T8498] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 834.501883][ T8498] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 834.529937][ T8614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9388'. [ 834.563713][T29370] Bluetooth: hci3: command tx timeout [ 834.597473][ T8614] team0: Port device team_slave_0 removed [ 834.643707][ T4049] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.689817][ T8498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 834.730510][ T8498] 8021q: adding VLAN 0 to HW filter on device team0 [ 834.742724][ T8258] bridge0: port 1(bridge_slave_0) entered blocking state [ 834.750069][ T8258] bridge0: port 1(bridge_slave_0) entered forwarding state [ 834.776685][ T8256] bridge0: port 2(bridge_slave_1) entered blocking state [ 834.783915][ T8256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 834.804911][T29370] Bluetooth: hci0: command tx timeout [ 835.310487][ T8666] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 835.339378][ T8498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 835.525036][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 835.695414][ T8522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.838487][ T8498] veth0_vlan: entered promiscuous mode [ 835.880528][ T8498] veth1_vlan: entered promiscuous mode [ 835.954633][ T8498] veth0_macvtap: entered promiscuous mode [ 835.969623][ T8498] veth1_macvtap: entered promiscuous mode [ 835.988907][ T8498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 836.005479][ T8687] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9406'. [ 836.014334][ T8498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 836.023726][ T8688] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9406'. [ 836.036568][ T6030] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.055170][ T6030] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.064928][ T6030] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.084089][ T6030] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.218278][ T8701] RDS: rds_bind could not find a transport for fe80::20, load rds_tcp or rds_rdma? [ 836.229409][ T8702] RDS: rds_bind could not find a transport for fe80::20, load rds_tcp or rds_rdma? [ 836.244730][ T8257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 836.261900][ T8257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 836.330174][ T6030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 836.345903][ T8704] syzkaller0: entered promiscuous mode [ 836.351692][ T8704] syzkaller0: entered allmulticast mode [ 836.361076][ T6030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 836.441955][ T8708] netlink: 'syz.0.9413': attribute type 1 has an invalid length. [ 836.556605][ T8720] netlink: 'syz.0.9417': attribute type 1 has an invalid length. [ 836.568139][ T8720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9417'. [ 836.594591][ T8717] sch_tbf: burst 1040 is lower than device syzkaller0 mtu (1514) ! [ 836.614399][ T8717] syzkaller0: entered promiscuous mode [ 836.628986][ T8717] syzkaller0: entered allmulticast mode [ 836.697938][ T8725] netlink: 'syz.8.9418': attribute type 1 has an invalid length. [ 836.727053][ T8725] netlink: 212 bytes leftover after parsing attributes in process `syz.8.9418'. [ 836.734929][ T4049] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.805520][ T6030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.883408][T29370] Bluetooth: hci0: command tx timeout [ 836.985402][ T8751] netlink: 16 bytes leftover after parsing attributes in process `syz.8.9425'. [ 837.069228][ T8762] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9430'. [ 837.098960][ T8762] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9430'. [ 837.115986][ T8764] tipc: Started in network mode [ 837.120925][ T8764] tipc: Node identity c6b5c13b7ed1, cluster identity 4711 [ 837.146275][ T8764] tipc: Enabled bearer , priority 0 [ 837.175272][ T8770] syzkaller0: entered promiscuous mode [ 837.188533][ T8770] syzkaller0: entered allmulticast mode [ 837.247016][ T8764] tipc: Resetting bearer [ 837.295526][ T8763] tipc: Resetting bearer [ 837.316237][ T8763] tipc: Disabling bearer [ 837.730989][ T8817] netlink: 'syz.7.9442': attribute type 13 has an invalid length. [ 837.820665][ T8820] netlink: 88 bytes leftover after parsing attributes in process `syz.1.9443'. [ 837.955574][ T8838] netlink: 'syz.1.9447': attribute type 3 has an invalid length. [ 837.987830][ T8840] netlink: 'syz.5.9445': attribute type 10 has an invalid length. [ 838.026632][ T8836] syzkaller0: entered promiscuous mode [ 838.723460][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 838.804604][ T4310] net_ratelimit: 8 callbacks suppressed [ 838.804622][ T4310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.963655][T29370] Bluetooth: hci0: command tx timeout [ 839.377502][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 839.843869][ T4308] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.006716][ T8256] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.015733][ T4308] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.024664][ T2173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.885127][ T4308] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.043383][T29370] Bluetooth: hci0: command tx timeout [ 841.288981][ T2173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.843517][ T6030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.851848][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.925595][ T4310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.846199][ T8256] net_ratelimit: 2 callbacks suppressed [ 843.846222][ T8256] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.860308][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.869212][ T4310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.878058][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.003932][ T4308] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 845.045282][ T4308] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 845.123515][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.083898][ T4310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.964074][ T6029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.972478][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.205017][ T4310] net_ratelimit: 2 callbacks suppressed [ 849.205033][ T4310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.607593][ T6032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.616105][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.245117][ T4308] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 851.283968][ T4308] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 851.523268][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.324113][ T8522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.804758][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.813173][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.363460][ T8522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.404046][ T4308] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.363812][ T6029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.372087][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.444176][ T4308] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.485225][ T4310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.525168][ T4310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.923717][ T6029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.932089][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.941053][ T4308] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.950000][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.985265][ T8869] __nla_validate_parse: 4 callbacks suppressed [ 858.985286][ T8869] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9454'. [ 859.148555][ T8874] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9459'. [ 859.217727][ T8889] netlink: 5288 bytes leftover after parsing attributes in process `syz.0.9464'. [ 859.230651][ T8880] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9462'. [ 859.268602][ T8887] 8021q: adding VLAN 0 to HW filter on device bond2 [ 859.311545][ T8887] netlink: 'syz.7.9463': attribute type 11 has an invalid length. [ 859.423860][ T8896] net_ratelimit: 3 callbacks suppressed [ 859.423897][ T8896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.438181][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.605670][ T4308] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.668793][ T8925] IPv6: sit1: Disabled Multicast RS [ 859.717023][ T8927] SET target dimension over the limit! [ 859.725973][ T8925] sit1: entered allmulticast mode [ 859.960180][ T8943] syzkaller1: entered allmulticast mode [ 860.266816][ T8962] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 860.278738][ T8962] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 860.287798][ T8950] hsr0 speed is unknown, defaulting to 1000 [ 860.308149][ T8957] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 860.344996][ T8957] syzkaller1: Refused to change device type [ 860.358406][ T8965] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9483'. [ 860.367906][ T8965] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9483'. [ 860.378599][ T8962] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 860.407776][ T8950] syzkaller0 speed is unknown, defaulting to 1000 [ 860.410170][ T8962] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 860.424942][ T8965] bond0: entered promiscuous mode [ 860.430282][ T8965] bond_slave_0: entered promiscuous mode [ 860.448450][ T8965] bond_slave_1: entered promiscuous mode [ 860.454760][ T8965] bond0: entered allmulticast mode [ 860.460027][ T8965] bond_slave_0: entered allmulticast mode [ 860.467769][ T8965] bond_slave_1: entered allmulticast mode [ 860.477699][ T8965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 860.507504][ T8962] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 860.576841][ T8962] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 860.598014][ T8962] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 860.645375][ T4310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.699321][ T8962] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 860.714263][ T8962] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 860.780771][ T8962] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 860.787212][ T8962] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 860.810951][ T8962] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 860.849520][ T8962] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 860.857750][ T8962] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 860.865848][ T8962] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 860.872809][ T8962] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 860.893511][ T8962] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 860.900793][ T8962] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 860.910993][ T8962] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 860.919740][ T8962] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 860.953165][ T8962] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 860.974270][ T8962] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 860.980523][ T8962] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 860.995022][ T8962] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 861.000991][ T8962] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 861.008058][ T8962] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 861.015006][ T8962] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 861.020962][ T8962] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 861.126019][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.134480][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.144807][ T2173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.165268][ T8998] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9492'. [ 861.189043][ T8998] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 861.304802][ T9006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9494'. [ 861.415054][ T9020] netlink: 'syz.1.9500': attribute type 3 has an invalid length. [ 861.469894][ T9020] veth3: entered allmulticast mode [ 861.685915][ T4310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.019881][ T9060] 8021q: VLANs not supported on ip_vti0 [ 862.135768][ T9073] xt_hl: Unknown Hop Limit match mode: 206 [ 862.144628][ T9071] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9515'. [ 862.337756][ T9085] netlink: 'syz.7.9520': attribute type 21 has an invalid length. [ 862.349226][ T9085] netlink: 'syz.7.9520': attribute type 1 has an invalid length. [ 862.457536][ T9093] netlink: 'syz.0.9525': attribute type 11 has an invalid length. [ 862.485813][ T9093] netlink: 'syz.0.9525': attribute type 11 has an invalid length. [ 862.494765][ T9093] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9525'. [ 862.687415][ T9100] hsr_slave_1 (unregistering): left promiscuous mode [ 862.723439][ T4308] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.278896][ T9119] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 863.307927][ T9138] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_rx_wq": -EINTR [ 863.519587][ T9154] syzkaller1: entered promiscuous mode [ 863.551584][ T9154] syzkaller1: entered allmulticast mode [ 863.717557][ T9168] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 863.859746][ T9181] netlink: 'syz.7.9548': attribute type 1 has an invalid length. [ 863.892056][ T9183] netlink: 'syz.7.9548': attribute type 1 has an invalid length. [ 864.040448][ T9196] tipc: Enabling of bearer rejected, failed to enable media [ 864.274751][ T9217] netlink: 'syz.0.9554': attribute type 1 has an invalid length. [ 864.319357][ T9218] netlink: 'syz.1.9551': attribute type 1 has an invalid length. [ 864.333606][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 864.546357][ T9217] 8021q: adding VLAN 0 to HW filter on device bond1 [ 864.585890][ T9206] team0: Port device syz_tun removed [ 864.614519][ T9225] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 864.628422][ T9235] __nla_validate_parse: 4 callbacks suppressed [ 864.628444][ T9235] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9556'. [ 864.689124][ T9209] bond1: (slave veth3): Enslaving as an active interface with a down link [ 864.699239][ T9209] netlink: 'syz.0.9554': attribute type 1 has an invalid length. [ 864.707454][ T9209] netlink: 'syz.0.9554': attribute type 2 has an invalid length. [ 864.767765][ T2173] IPVS: starting estimator thread 0... [ 864.805423][ T4049] net_ratelimit: 3 callbacks suppressed [ 864.805442][ T4049] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.869387][ T9251] openvswitch: netlink: Missing key (keys=40, expected=100) [ 864.884189][ T9247] IPVS: using max 43 ests per chain, 103200 per kthread [ 864.895036][ T9252] xt_hashlimit: size too large, truncated to 1048576 [ 864.929135][ T9260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9564'. [ 865.684061][T29370] Bluetooth: hci0: command 0x0405 tx timeout [ 865.843682][ T4049] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.071311][ T9298] IPVS: length: 171 != 8 [ 866.192889][ T9310] tunl0: entered promiscuous mode [ 866.199093][ T9310] netlink: 'syz.0.9576': attribute type 3 has an invalid length. [ 866.204388][ T9311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9576'. [ 866.208811][ T9310] netlink: 9 bytes leftover after parsing attributes in process `syz.0.9576'. [ 866.226894][ T9310] netlink: 'syz.0.9576': attribute type 3 has an invalid length. [ 866.236692][ T9310] netlink: 9 bytes leftover after parsing attributes in process `syz.0.9576'. [ 866.248101][ T8256] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.256551][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.483330][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.491738][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.500179][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.508530][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.516903][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.677380][ T9237] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 867.821388][ T9321] x_tables: duplicate underflow at hook 2 [ 867.832327][ T9328] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.9582'. [ 867.931042][ T9336] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9583'. [ 868.157505][ T9345] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9587'. [ 868.267118][ T9359] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9590'. [ 868.305148][ T9361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9591'. [ 868.320049][ T8257] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 868.359145][ T8257] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 868.393193][ T8257] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 868.422051][ T8257] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 868.790262][ T9395] Cannot find set identified by id 3 to match [ 868.984163][ T9412] xt_hashlimit: size too large, truncated to 1048576 [ 869.662834][ T9464] syzkaller0: entered promiscuous mode [ 869.679858][ T9464] syzkaller0: entered allmulticast mode [ 869.690004][ T9467] sctp: [Deprecated]: syz.7.9623 (pid 9467) Use of struct sctp_assoc_value in delayed_ack socket option. [ 869.690004][ T9467] Use struct sctp_sack_info instead [ 869.749390][ T9470] __nla_validate_parse: 5 callbacks suppressed [ 869.749411][ T9470] netlink: 208240 bytes leftover after parsing attributes in process `syz.1.9624'. [ 869.793782][ T9464] IPVS: Scheduler module ip_vs_sip not found [ 870.086290][ T1324] net_ratelimit: 223 callbacks suppressed [ 870.086314][ T1324] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 870.265596][ T9505] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9632'. [ 870.382512][ T9512] lo: Caught tx_queue_len zero misconfig [ 870.423810][ T9512] netlink: 'syz.7.9634': attribute type 10 has an invalid length. [ 870.584835][ T9521] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9636'. [ 870.629318][ T9524] netlink: 'syz.7.9637': attribute type 4 has an invalid length. [ 870.664861][ T9524] netlink: 240 bytes leftover after parsing attributes in process `syz.7.9637'. [ 870.705893][ T9524] netlink: 'syz.7.9637': attribute type 1 has an invalid length. [ 870.744260][ T9524] netlink: 84 bytes leftover after parsing attributes in process `syz.7.9637'. [ 870.756864][ T9524] netlink: 658 bytes leftover after parsing attributes in process `syz.7.9637'. [ 870.784761][ T9524] netlink: 'syz.7.9637': attribute type 2 has an invalid length. [ 870.958245][ T9544] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9644'. [ 871.031959][ T9544] netlink: 'syz.8.9644': attribute type 5 has an invalid length. [ 871.059775][ T9545] netlink: 'syz.7.9645': attribute type 9 has an invalid length. [ 871.077595][ T9544] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9644'. [ 871.092495][ T9550] netlink: 4552 bytes leftover after parsing attributes in process `syz.8.9644'. [ 871.109181][ T9550] netlink: 4552 bytes leftover after parsing attributes in process `syz.8.9644'. [ 871.315706][ T9567] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 871.438184][ T9568] syzkaller1: entered promiscuous mode [ 871.451863][ T9568] syzkaller1: entered allmulticast mode [ 871.482653][ T9568] set_target_v3_checkentry: 55 callbacks suppressed [ 871.482761][ T9568] Cannot find del_set index 0 as target [ 871.734313][ T9581] openvswitch: netlink: Key type 225 is out of range max 32 [ 871.899625][ T9592] ip6erspan0: entered allmulticast mode [ 872.027299][ T9600] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 872.055075][ T9563] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 872.096708][ T9562] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 872.136609][ T9600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 872.329280][ T9617] syzkaller0: entered promiscuous mode [ 872.341104][ T9617] syzkaller0: entered allmulticast mode [ 872.375356][ T9617] macsec2: entered promiscuous mode [ 872.429280][ T9628] netlink: 'syz.7.9669': attribute type 1 has an invalid length. [ 872.439161][ T9628] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 872.644536][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 872.652490][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 872.729182][ T9640] syzkaller0: entered promiscuous mode [ 872.748431][ T9640] syzkaller0: entered allmulticast mode [ 872.786478][ T9641] syzkaller0: entered promiscuous mode [ 872.804467][ T9641] syzkaller0: entered allmulticast mode [ 872.921577][ T9639] syzkaller0: left promiscuous mode [ 872.928007][ T9639] syzkaller0: left allmulticast mode [ 872.937225][ T9656] netlink: 'syz.5.9679': attribute type 1 has an invalid length. [ 873.348222][ T9684] hsr0 speed is unknown, defaulting to 1000 [ 873.362676][ T9684] syzkaller0 speed is unknown, defaulting to 1000 [ 873.535656][ T9700] netlink: 'syz.5.9692': attribute type 11 has an invalid length. [ 874.040783][ T9736] netlink: 'syz.1.9702': attribute type 1 has an invalid length. [ 874.356011][ T9753] xt_CT: No such helper "snmp" [ 874.539323][ T9765] vcan0: entered allmulticast mode [ 874.640654][ T9771] syzkaller0: entered promiscuous mode [ 874.653936][ T9771] syzkaller0: entered allmulticast mode [ 875.180868][ T9826] __nla_validate_parse: 10 callbacks suppressed [ 875.180891][ T9826] netlink: 576 bytes leftover after parsing attributes in process `syz.5.9731'. [ 875.534942][ T9771] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 875.634665][ T9857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9741'. [ 875.769214][ T9868] ipvlan2: entered allmulticast mode [ 875.780822][ T9868] batadv_slave_1: entered allmulticast mode [ 875.806717][ T9868] batman_adv: batadv0: Adding interface: ipvlan2 [ 875.819480][ T9868] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 875.849142][ T9868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 875.860692][ T9868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.871052][ T9868] batman_adv: batadv0: Interface activated: ipvlan2 [ 875.921362][ T9873] bond1: option lp_interval: invalid value (0) [ 875.929737][ T9868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9745'. [ 875.956983][ T9873] bond1: option lp_interval: allowed values 1 - 2147483647 [ 875.971006][ T9873] bond1 (unregistering): Released all slaves [ 875.982755][ T9880] ip6t_srh: unknown srh match flags 4000 [ 876.108257][ T9889] xt_hashlimit: size too large, truncated to 1048576 [ 876.175712][ T9893] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9753'. [ 876.205993][ T9893] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9753'. [ 876.222886][ T9893] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9753'. [ 876.237209][ T9893] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9753'. [ 876.259006][ T9893] netlink: 104 bytes leftover after parsing attributes in process `syz.1.9753'. [ 876.309159][ T9906] IPVS: set_ctl: invalid protocol: 46 116.1.1.2:20001 [ 876.352821][ T9909] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9759'. [ 876.405692][ T9909] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 876.515372][ T9920] netlink: 'syz.5.9761': attribute type 2 has an invalid length. [ 876.527397][ T9920] netlink: 188 bytes leftover after parsing attributes in process `syz.5.9761'. [ 877.068202][ T9964] ipvlan2: entered promiscuous mode [ 877.349263][ T9984] hsr0 speed is unknown, defaulting to 1000 [ 877.368147][ T9984] syzkaller0 speed is unknown, defaulting to 1000 [ 877.483394][ T9997] xt_hashlimit: size too large, truncated to 1048576 [ 877.598219][T10005] netlink: 'syz.0.9774': attribute type 15 has an invalid length. [ 878.440790][T10057] xt_CT: You must specify a L4 protocol and not use inversions on it [ 878.442711][T10057] xt_CT: You must specify a L4 protocol and not use inversions on it [ 878.481535][T10061] netlink: 'syz.5.9796': attribute type 32 has an invalid length. [ 878.547177][T10061] bond7: option coupled_control: invalid value (22) [ 878.558622][T10061] bond7 (unregistering): Released all slaves [ 878.693805][T10073] syzkaller0: entered promiscuous mode [ 878.699791][T10073] syzkaller0: entered allmulticast mode [ 878.845587][T10079] 8021q: adding VLAN 0 to HW filter on device team0 [ 878.857550][T10079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 878.909224][T10079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 878.921285][T10079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 878.934293][T10079] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 878.954381][T10079] veth1_vlan: left promiscuous mode [ 878.961105][T10079] veth0_vlan: left promiscuous mode [ 878.968217][T10079] veth0_vlan: entered promiscuous mode [ 878.988349][T10079] veth1_vlan: entered promiscuous mode [ 879.014620][T10079] veth1_macvtap: left promiscuous mode [ 879.032845][T10079] veth0_macvtap: left promiscuous mode [ 879.042670][T10079] veth0_macvtap: entered promiscuous mode [ 879.056101][T10079] veth1_macvtap: entered promiscuous mode [ 879.068559][T10079] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 879.077554][T10079] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 879.088198][T10079] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 879.098373][T10079] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 879.129209][ T3272] bridge0: port 1(bridge_slave_0) entered blocking state [ 879.136477][ T3272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 879.149749][ T3272] bridge0: port 2(bridge_slave_1) entered blocking state [ 879.156950][ T3272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 879.192651][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.214853][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.224164][T10103] SET target dimension over the limit! [ 879.234223][ T6032] bond1: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 879.244582][ T6032] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 879.264712][ T6032] bond1: (slave veth0_to_bond): making interface the new active one [ 879.279158][ T6032] bond1: active interface up! [ 879.305024][ T6030] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.320610][ T6030] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.599589][T10128] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 879.606982][T10128] IPv6: NLM_F_CREATE should be set when creating new route [ 879.614293][T10128] IPv6: NLM_F_CREATE should be set when creating new route [ 879.638965][T10131] syzkaller0: entered promiscuous mode [ 879.649055][T10128] openvswitch: netlink: IPv4 tun info is not correct [ 879.656361][T10131] syzkaller0: entered allmulticast mode [ 879.684179][T29370] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 879.744367][T10133] bond2 (unregistering): Released all slaves [ 879.809498][T10139] syzkaller0: entered promiscuous mode [ 879.827574][T10139] syzkaller0: entered allmulticast mode [ 879.938091][T10153] sock: sock_timestamping_bind_phc: sock not bind to device [ 879.948721][T10153] netlink: 'syz.5.9821': attribute type 62 has an invalid length. [ 880.314210][T10174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 880.536571][T10153] erspan0: entered allmulticast mode [ 880.611199][ T12] bond3: left allmulticast mode [ 880.627240][ T12] vti0: left allmulticast mode [ 880.838500][ T12] bond2 (unregistering): (slave ip6gre1): Releasing backup interface [ 880.908801][ T12] bond3 (unregistering): (slave vti0): Releasing backup interface [ 880.934105][ T12] vti0 (unregistering): left promiscuous mode [ 880.970571][ T12] gretap0 (unregistering): left promiscuous mode [ 880.992864][ T12] bond7 (unregistering): (slave gretap2): Releasing backup interface [ 881.087345][ T12] team0: Port device bridge4 removed [ 881.164417][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 881.185154][ T12] bond_slave_0: left allmulticast mode [ 881.197083][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 881.215576][ T12] bond_slave_1: left allmulticast mode [ 881.243925][ T12] bond0 (unregistering): (slave team0): Releasing backup interface [ 881.255263][ T12] team0: left allmulticast mode [ 881.260222][ T12] team_slave_0: left allmulticast mode [ 881.269440][ T12] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 881.297109][ T12] veth0_to_bond: left allmulticast mode [ 881.304729][ T12] bond0 (unregistering): Released all slaves [ 881.315298][ T12] bond1 (unregistering): Released all slaves [ 881.328607][ T12] bond2 (unregistering): Released all slaves [ 881.341339][ T12] bond3 (unregistering): Released all slaves [ 881.370080][ T12] bond4 (unregistering): Released all slaves [ 881.385572][ T12] bond5 (unregistering): Released all slaves [ 881.427675][ T12] bond6 (unregistering): Released all slaves [ 881.455186][ T12] bond7 (unregistering): (slave bond8): Releasing backup interface [ 881.464814][ T12] bond7 (unregistering): Released all slaves [ 881.478107][ T12] bond8 (unregistering): Released all slaves [ 881.647776][ T12] tipc: Left network mode [ 881.708967][ T12] IPVS: stopping master sync thread 18555 ... [ 881.718589][T10213] netlink: 'syz.7.9836': attribute type 11 has an invalid length. [ 881.746190][T10213] __nla_validate_parse: 14 callbacks suppressed [ 881.746214][T10213] netlink: 199828 bytes leftover after parsing attributes in process `syz.7.9836'. [ 881.857515][T10219] netlink: 'syz.8.9840': attribute type 13 has an invalid length. [ 881.894516][T10219] veth1_macvtap: left promiscuous mode [ 881.907322][T10219] macsec0: entered allmulticast mode [ 881.926767][T10221] netlink: 104 bytes leftover after parsing attributes in process `syz.5.9841'. [ 882.008581][ T12] veth1_to_team: left promiscuous mode [ 882.048690][T10219] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 882.069611][ T12] hsr_slave_0: left promiscuous mode [ 882.078888][ T12] hsr_slave_1: left promiscuous mode [ 882.093441][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 882.107861][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 882.135847][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 882.161605][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 882.192700][ T12] veth0_macvtap: left promiscuous mode [ 882.206497][ T12] veth0_vlan: left promiscuous mode [ 882.548409][T10254] netlink: 256 bytes leftover after parsing attributes in process `syz.1.9846'. [ 882.837247][ T12] team0 (unregistering): Port device team_slave_0 removed [ 883.149009][T10272] syzkaller0: entered promiscuous mode [ 883.155463][T10272] syzkaller0: entered allmulticast mode [ 883.218541][T10290] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9852'. [ 883.238955][T10285] bond2 (unregistering): Released all slaves [ 883.331670][T10298] netlink: 68 bytes leftover after parsing attributes in process `syz.7.9854'. [ 883.390795][T10287] bond7: (slave gre0): Device is not bonding slave [ 883.399664][T10287] bond7: option active_slave: invalid value (gre0) [ 883.409154][T10287] bond7 (unregistering): Released all slaves [ 883.496863][T10306] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 883.632547][T10301] netlink: 104 bytes leftover after parsing attributes in process `syz.0.9855'. [ 883.738035][ T12] IPVS: stop unused estimator thread 0... [ 883.962479][T10329] netlink: 'syz.5.9862': attribute type 3 has an invalid length. [ 884.266183][T10357] netlink: 'syz.1.9870': attribute type 1 has an invalid length. [ 884.278108][T10357] netlink: 84 bytes leftover after parsing attributes in process `syz.1.9870'. [ 884.280812][T10351] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.9868'. [ 884.297632][T10357] netlink: 658 bytes leftover after parsing attributes in process `syz.1.9870'. [ 884.307641][T10357] netlink: 'syz.1.9870': attribute type 2 has an invalid length. [ 884.324124][T10351] veth0_to_bond: default FDB implementation only supports local addresses [ 884.396278][T10361] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9871'. [ 884.440566][T10361] openvswitch: netlink: Unknown nsh attribute 0 [ 884.603929][T10379] gtp0: entered promiscuous mode [ 884.608977][T10379] gtp0: entered allmulticast mode [ 884.653200][T10384] tipc: Started in network mode [ 884.666870][T10384] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 884.682449][T10384] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 884.692654][T10384] tipc: Enabled bearer , priority 10 [ 884.797435][T10385] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 884.872673][T10403] netlink: 'syz.0.9883': attribute type 1 has an invalid length. [ 884.897203][T10403] netlink: 'syz.0.9883': attribute type 9 has an invalid length. [ 885.431561][T10444] bond7: entered promiscuous mode [ 885.437642][T10444] 8021q: adding VLAN 0 to HW filter on device bond7 [ 885.597561][T10462] openvswitch: netlink: IP tunnel dst address not specified [ 885.746664][T10466] netlink: 'syz.0.9901': attribute type 1 has an invalid length. [ 885.811649][T10466] bond2: entered promiscuous mode [ 885.817734][T10479] openvswitch: netlink: Multiple metadata blocks provided [ 885.825402][T10466] 8021q: adding VLAN 0 to HW filter on device bond2 [ 885.837960][ T24] tipc: Node number set to 1 [ 885.962375][T10490] Cannot find add_set index 3 as target [ 886.217137][T10507] bond1: (slave ip6gretap1): making interface the new active one [ 886.252117][T10507] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 886.316256][T10517] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 886.334863][T10517] bond2: (slave lo): Enslaving as an active interface with an up link [ 886.346467][T10517] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 886.446351][T10524] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 886.527661][T10526] syzkaller0: entered promiscuous mode [ 886.554105][T10526] syzkaller0: entered allmulticast mode [ 886.581819][T10537] tipc: Enabling of bearer rejected, failed to enable media [ 886.949882][T10551] __nla_validate_parse: 13 callbacks suppressed [ 886.951000][T10551] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9926'. [ 886.951699][T10558] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9926'. [ 887.007800][T10550] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 887.076982][T10564] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9928'. [ 887.460905][T10586] netlink: 168 bytes leftover after parsing attributes in process `syz.0.9935'. [ 887.697684][T10603] vcan0: left allmulticast mode [ 887.777194][T10603] tipc: Started in network mode [ 887.800223][T10603] tipc: Node identity ae757e2340df, cluster identity 4711 [ 887.821188][T10614] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 887.835166][T10603] tipc: Enabled bearer , priority 0 [ 887.852631][T10608] syzkaller0: entered promiscuous mode [ 887.858699][T10608] syzkaller0: entered allmulticast mode [ 887.867887][T10603] syzkaller0: mtu less than device minimum [ 887.882650][T10602] tipc: Resetting bearer [ 887.935755][T10602] tipc: Disabling bearer [ 888.124271][T10628] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9947'. [ 888.172335][T10637] xt_CT: You must specify a L4 protocol and not use inversions on it [ 888.345162][T10649] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9952'. [ 888.385594][T10652] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 888.400762][T10654] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9954'. [ 888.430065][T10652] netlink: 84 bytes leftover after parsing attributes in process `syz.8.9953'. [ 888.469138][T10652] netlink: 84 bytes leftover after parsing attributes in process `syz.8.9953'. [ 888.571719][T10664] netlink: 'syz.0.9958': attribute type 1 has an invalid length. [ 888.594609][T10664] netlink: 244 bytes leftover after parsing attributes in process `syz.0.9958'. [ 888.706824][T10672] bond3: Unable to set down delay as MII monitoring is disabled [ 888.718442][T10672] bond3 (unregistering): Released all slaves [ 888.742741][T10681] netlink: 'syz.7.9959': attribute type 4 has an invalid length. [ 888.793946][T10679] syzkaller0: entered promiscuous mode [ 888.815022][T10679] syzkaller0: entered allmulticast mode [ 888.833578][T10673] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 888.845884][T10679] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 889.123387][T10699] gretap1: entered promiscuous mode [ 889.128840][T10699] gretap1: entered allmulticast mode [ 889.442173][T10729] syzkaller0: entered promiscuous mode [ 889.461579][T10729] syzkaller0: entered allmulticast mode [ 889.659753][T10736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 889.677097][T10736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.694924][T10736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 889.706423][T10736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.761876][T10736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 889.782435][T10736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 890.042600][T10759] : renamed from bond0 (while UP) [ 890.261402][T10781] netlink: 'syz.7.9990': attribute type 1 has an invalid length. [ 890.280717][T10781] netlink: 'syz.7.9990': attribute type 7 has an invalid length. [ 890.299668][T10781] netlink: 'syz.7.9990': attribute type 8 has an invalid length. [ 890.329898][T10781] netlink: 'syz.7.9990': attribute type 1 has an invalid length. [ 890.361846][T10781] syzkaller0: entered allmulticast mode [ 890.371595][T10786] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 890.403432][T10781] ip6tnl0: Caught tx_queue_len zero misconfig [ 890.442636][T10791] netlink: 'syz.1.9993': attribute type 1 has an invalid length. [ 890.468554][T10791] 8021q: adding VLAN 0 to HW filter on device bond3 [ 890.478482][T10791] ip_vti0: entered promiscuous mode [ 890.493491][T10791] netlink: 'syz.1.9993': attribute type 1 has an invalid length. [ 890.506346][T10794] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 890.537669][T10783] macvtap1: entered promiscuous mode [ 890.553514][T10783] vlan0: entered promiscuous mode [ 890.569416][T10783] vlan0: left promiscuous mode [ 890.608491][T10801] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 890.983836][T10823] hsr0 speed is unknown, defaulting to 1000 [ 891.006752][T10823] syzkaller0 speed is unknown, defaulting to 1000 [ 891.097896][T10835] pimreg3: entered allmulticast mode [ 891.237916][T10846] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 891.417770][T10858] netlink: 'syz.0.10014': attribute type 39 has an invalid length. [ 891.471992][T10866] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 891.522759][ T6028] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 891.559949][ T6028] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 891.584304][ T6028] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 891.600172][ T6030] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 891.811363][T10892] x_tables: duplicate underflow at hook 2 [ 891.885402][T10900] netlink: 'syz.7.10020': attribute type 21 has an invalid length. [ 891.900754][T10891] tcf_pedit_act: 7 callbacks suppressed [ 891.900776][T10891] tc action pedit unable to extract header offset for header type (0x4) [ 891.938478][T10900] IPv6: NLM_F_CREATE should be specified when creating new route [ 892.060210][T10900] __nla_validate_parse: 23 callbacks suppressed [ 892.060235][T10900] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10020'. [ 892.360809][T10930] netlink: 'syz.1.10034': attribute type 11 has an invalid length. [ 892.379561][T10930] netlink: 199556 bytes leftover after parsing attributes in process `syz.1.10034'. [ 892.390900][T10931] netlink: 'syz.1.10034': attribute type 11 has an invalid length. [ 892.404691][T10931] netlink: 199556 bytes leftover after parsing attributes in process `syz.1.10034'. [ 892.414717][T10933] netlink: 152 bytes leftover after parsing attributes in process `syz.5.10035'. [ 892.425816][T10933] sctp: [Deprecated]: syz.5.10035 (pid 10933) Use of struct sctp_assoc_value in delayed_ack socket option. [ 892.425816][T10933] Use struct sctp_sack_info instead [ 892.600380][T10940] Bluetooth: MGMT ver 1.23 [ 892.616794][T10940] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10038'. [ 892.635206][T10947] syzkaller0: entered promiscuous mode [ 892.642813][T10947] syzkaller0: entered allmulticast mode [ 892.752755][T10956] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10043'. [ 892.778879][T10961] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10044'. [ 892.850695][T10965] syzkaller0: entered promiscuous mode [ 892.856930][T10965] syzkaller0: entered allmulticast mode [ 892.867526][T10965] netlink: 116 bytes leftover after parsing attributes in process `syz.1.10045'. [ 892.887837][ T8257] bond1: (slave veth0_to_bond): link status definitely down, disabling slave [ 892.927635][ T8257] bond1: (slave veth3): making interface the new active one [ 892.949893][ T8257] veth3: entered promiscuous mode [ 892.967758][T10969] xt_l2tp: invalid flags combination: 8 [ 893.053981][T10969] bond4: option min_links: invalid value (18446744073709551614) [ 893.062086][T10969] bond4: option min_links: allowed values 0 - 2147483647 [ 893.081359][T10969] bond4 (unregistering): Released all slaves [ 893.634557][T11026] netlink: 36 bytes leftover after parsing attributes in process `syz.5.10061'. [ 893.681423][T11029] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10061'. [ 893.956778][T11041] hsr0 speed is unknown, defaulting to 1000 [ 893.985289][T11041] syzkaller0 speed is unknown, defaulting to 1000 [ 894.000832][T11049] bond2: Invalid ad_actor_system MAC address. [ 894.016000][T11049] bond2: option ad_actor_system: invalid value (1) [ 894.025861][T11049] bond2 (unregistering): Released all slaves [ 894.165598][T11065] validate_nla: 9 callbacks suppressed [ 894.165617][T11065] netlink: 'syz.1.10073': attribute type 5 has an invalid length. [ 894.217040][T11065] geneve3: entered promiscuous mode [ 894.232607][T11065] geneve3: entered allmulticast mode [ 894.265520][ T8257] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 894.279052][ T8257] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 894.296321][T11072] tipc: Started in network mode [ 894.305956][T11072] tipc: Node identity ac14140f, cluster identity 4711 [ 894.313613][T11072] tipc: New replicast peer: 255.255.255.255 [ 894.320108][T11072] tipc: Enabled bearer , priority 10 [ 894.329268][ T8257] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 894.482523][ T8257] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 894.551312][T11082] vxcan2: entered promiscuous mode [ 894.612089][T11082] vxcan3: entered allmulticast mode [ 895.273506][T11131] netlink: 'syz.7.10094': attribute type 2 has an invalid length. [ 895.292709][T11131] netlink: 'syz.7.10094': attribute type 2 has an invalid length. [ 895.531914][T11134] pim6reg: entered allmulticast mode [ 895.538101][T11140] pim6reg: left allmulticast mode [ 895.548917][ T4049] tipc: Node number set to 2886997007 [ 896.153785][T11190] tipc: Enabled bearer , priority 0 [ 896.336095][T11189] syzkaller0: entered promiscuous mode [ 896.341727][T11189] syzkaller0: entered allmulticast mode [ 896.348253][T11189] tipc: Resetting bearer [ 896.354996][T11206] netlink: 'syz.5.10108': attribute type 7 has an invalid length. [ 896.393749][T11188] tipc: Resetting bearer [ 896.450548][T11188] tipc: Disabling bearer [ 902.883905][T29370] Bluetooth: hci1: command 0x0405 tx timeout [ 903.893680][ T6022] veth3: left promiscuous mode [ 920.827937][T11219] tipc: Enabled bearer , priority 0 [ 920.835515][T11219] syzkaller0: entered promiscuous mode [ 920.841061][T11219] syzkaller0: entered allmulticast mode [ 920.866940][T11220] __nla_validate_parse: 17 callbacks suppressed [ 920.866962][T11220] netlink: 104 bytes leftover after parsing attributes in process `syz.0.10111'. [ 920.898692][T11219] tipc: Resetting bearer [ 920.946011][T11217] tipc: Resetting bearer [ 920.970875][T11217] tipc: Disabling bearer [ 920.992371][T11227] netlink: 'syz.1.10116': attribute type 10 has an invalid length. [ 921.009192][T11227] veth0_to_bond: entered allmulticast mode [ 921.018268][T11227] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 921.320040][T11253] tipc: Enabled bearer , priority 0 [ 921.356315][T11253] syzkaller0: MTU too low for tipc bearer [ 921.362186][T11253] tipc: Disabling bearer [ 921.370479][T11260] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 921.422736][T11265] IPv6: NLM_F_CREATE should be specified when creating new route [ 921.586068][T11272] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10131'. [ 921.602276][T11275] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10129'. [ 921.684949][ T50] block nbd9: Receive control failed (result -1) [ 922.178909][T11313] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10141'. [ 922.192286][T11311] xt_hashlimit: size too large, truncated to 1048576 [ 922.209585][T11312] xt_hashlimit: size too large, truncated to 1048576 [ 922.216783][T11313] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10141'. [ 922.259813][T11319] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10141'. [ 922.470152][T11329] netlink: 'syz.7.10146': attribute type 19 has an invalid length. [ 922.493889][T11331] pim6reg: entered allmulticast mode [ 922.502631][T11331] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 922.520428][T11331] pim6reg: left allmulticast mode [ 922.571110][T11332] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10145'. [ 922.666546][T11340] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10149'. [ 922.692375][T11341] netlink: 'syz.0.10149': attribute type 49 has an invalid length. [ 922.922419][T11357] IPVS: sh: FWM 3 0x00000003 - no destination available [ 922.935839][T11361] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10152'. [ 922.981430][T11361] : entered promiscuous mode [ 922.990474][T11363] tipc: MTU too low for tipc bearer [ 923.488412][T11394] netlink: 36 bytes leftover after parsing attributes in process `syz.8.10159'. [ 923.732603][T11414] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20002 [ 923.778868][T11421] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 924.134902][T11460] team_slave_0: Caught tx_queue_len zero misconfig [ 925.105197][T11542] netlink: 'syz.8.10202': attribute type 33 has an invalid length. [ 925.578477][T11572] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 926.403987][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 928.055744][T11537] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 928.205463][T11595] __nla_validate_parse: 6 callbacks suppressed [ 928.205483][T11595] netlink: 176 bytes leftover after parsing attributes in process `syz.5.10219'. [ 928.253981][T11595] IPv6: NLM_F_CREATE should be specified when creating new route [ 928.284990][T11595] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 928.292298][T11595] IPv6: NLM_F_CREATE should be set when creating new route [ 928.299627][T11595] IPv6: NLM_F_CREATE should be set when creating new route [ 928.306952][T11595] IPv6: NLM_F_CREATE should be set when creating new route [ 928.332484][T11598] netlink: 20 bytes leftover after parsing attributes in process `syz.7.10220'. [ 928.399727][T11600] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10221'. [ 928.448137][T11609] netlink: 176 bytes leftover after parsing attributes in process `syz.5.10219'. [ 928.456336][T11600] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10221'. [ 928.471914][T11609] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 928.488703][T29370] Bluetooth: hci6: command 0x0406 tx timeout [ 928.496613][T11600] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10221'. [ 928.675049][T11620] veth1_to_bond: entered allmulticast mode [ 928.685829][T11620] veth1_to_bond: entered promiscuous mode [ 928.695514][T11620] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10226'. [ 928.809803][T11633] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10229'. [ 928.825330][T11635] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10230'. [ 928.847002][T11620] veth1_to_bond (unregistering): left allmulticast mode [ 928.865343][T11620] veth1_to_bond (unregistering): left promiscuous mode [ 928.889304][T11620] : (slave bond_slave_1): Releasing backup interface [ 928.917940][T11635] bond0: left promiscuous mode [ 928.931538][T11635] bond_slave_0: left promiscuous mode [ 928.970068][T11635] bond_slave_1: left promiscuous mode [ 928.993458][T11635] bond0: left allmulticast mode [ 929.008391][T11635] bond_slave_0: left allmulticast mode [ 929.019584][T11635] bond_slave_1: left allmulticast mode [ 929.314804][T11664] netlink: 100 bytes leftover after parsing attributes in process `syz.7.10238'. [ 929.660735][T11688] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 929.668731][T11638] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 929.699140][T11638] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 929.711852][T11688] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 929.748709][T11638] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 929.769060][T11638] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 929.804017][T11638] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 929.851420][T11638] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 929.882085][T11701] 8021q: VLANs not supported on ip6_vti0 [ 929.897761][T11698] syzkaller0: entered promiscuous mode [ 929.913474][T11698] syzkaller0: entered allmulticast mode [ 929.932287][T11638] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 929.951673][T11638] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 930.019694][T11706] team_slave_1: entered promiscuous mode [ 930.039297][T11708] netlink: 'syz.5.10254': attribute type 8 has an invalid length. [ 930.061702][T11706] team0: Port device team_slave_1 removed [ 930.208040][T11711] bond4: Unable to set peer notification delay as MII monitoring is disabled [ 930.220691][T11711] bond4 (unregistering): Released all slaves [ 930.264373][T11719] 0ªX¹¦Dö»: left allmulticast mode [ 930.285894][T11719] erspan0: left allmulticast mode [ 930.417441][T11719] gre1: left allmulticast mode [ 930.440763][T11719] geneve2: left allmulticast mode [ 930.456011][T11719] vxcan3: left allmulticast mode [ 930.626918][T11747] openvswitch: netlink: Key type 68 is out of range max 32 [ 930.881341][T11762] netlink: 'syz.1.10269': attribute type 1 has an invalid length. [ 930.894930][T11762] netlink: 'syz.1.10269': attribute type 2 has an invalid length. [ 930.907722][T11762] netlink: 'syz.1.10269': attribute type 1 has an invalid length. [ 930.916113][T11762] netlink: 'syz.1.10269': attribute type 3 has an invalid length. [ 931.016747][T11771] syzkaller0: entered promiscuous mode [ 931.022366][T11771] syzkaller0: entered allmulticast mode [ 931.126755][T11771] bridge0: port 2(bridge_slave_1) entered disabled state [ 931.163397][T11782] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 931.357763][T11798] netlink: get zone limit has 4 unknown bytes [ 931.373699][T11797] netlink: 'syz.0.10279': attribute type 2 has an invalid length. [ 931.410791][T11801] bond4: entered promiscuous mode [ 931.425187][T11801] 8021q: adding VLAN 0 to HW filter on device bond4 [ 931.528698][ T1324] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 931.597875][T11814] syzkaller0: entered promiscuous mode [ 931.618489][T11814] syzkaller0: entered allmulticast mode [ 931.695094][T11822] netlink: 'syz.0.10286': attribute type 1 has an invalid length. [ 931.730956][T11822] bond3: entered promiscuous mode [ 931.736906][T11822] 8021q: adding VLAN 0 to HW filter on device bond3 [ 931.877689][T11837] netlink: 'syz.8.10290': attribute type 2 has an invalid length. [ 934.980616][T11856] tipc: Enabled bearer , priority 0 [ 934.996840][T11856] syzkaller0: MTU too low for tipc bearer [ 935.002678][T11856] tipc: Disabling bearer [ 935.020861][T11860] __nla_validate_parse: 16 callbacks suppressed [ 935.020882][T11860] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10300'. [ 935.122608][T11866] netlink: 44 bytes leftover after parsing attributes in process `syz.1.10302'. [ 935.148085][T11866] netlink: 21 bytes leftover after parsing attributes in process `syz.1.10302'. [ 935.176242][T11866] netlink: 21 bytes leftover after parsing attributes in process `syz.1.10302'. [ 935.216208][T11871] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10304'. [ 935.304889][T11875] syzkaller0: entered promiscuous mode [ 935.339878][T11875] syzkaller0: entered allmulticast mode [ 935.355687][T11882] netlink: 80 bytes leftover after parsing attributes in process `syz.5.10309'. [ 935.370449][T11875] netlink: 104 bytes leftover after parsing attributes in process `syz.1.10307'. [ 935.383183][T11882] IPVS: set_ctl: invalid protocol: 41 224.0.0.2:20001 [ 935.596659][T11892] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10313'. [ 935.617199][T11894] IPVS: persistence engine module ip_vs_pe_À not found [ 935.890570][T11921] netlink: 64 bytes leftover after parsing attributes in process `syz.5.10320'. [ 935.926929][T11921] syzkaller1: entered promiscuous mode [ 935.948574][T11921] syzkaller1: entered allmulticast mode [ 936.179073][T11940] IPVS: set_ctl: invalid protocol: 47 172.30.1.2:20000 [ 936.188467][T11940] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10325'. [ 936.347196][T11949] netlink: 'syz.1.10327': attribute type 1 has an invalid length. [ 936.381775][T11948] netlink: 'syz.1.10327': attribute type 1 has an invalid length. [ 936.439545][T11971] netlink: 'syz.0.10332': attribute type 4 has an invalid length. [ 936.451842][T11971] netlink: 'syz.0.10332': attribute type 12 has an invalid length. [ 936.479594][T11975] netlink: 'syz.0.10332': attribute type 4 has an invalid length. [ 936.653771][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 936.794419][T11995] syzkaller0: entered promiscuous mode [ 936.807062][T11995] syzkaller0: entered allmulticast mode [ 936.984358][T12006] syzkaller1: entered promiscuous mode [ 937.002840][T12006] syzkaller1: entered allmulticast mode [ 937.016072][ T24] IPVS: starting estimator thread 0... [ 937.113989][T12012] IPVS: using max 42 ests per chain, 100800 per kthread [ 937.437924][T12050] syzkaller0: entered promiscuous mode [ 937.444498][T12050] syzkaller0: entered allmulticast mode [ 937.631628][T12058] netlink: zone id is out of range [ 937.638434][T12058] netlink: zone id is out of range [ 937.648564][T12058] netlink: zone id is out of range [ 937.656715][T12058] netlink: zone id is out of range [ 937.663837][T12058] netlink: zone id is out of range [ 937.669152][T12058] netlink: zone id is out of range [ 937.674849][T12058] netlink: zone id is out of range [ 937.681502][T12058] netlink: zone id is out of range [ 937.689732][T12063] sctp: [Deprecated]: syz.8.10358 (pid 12063) Use of int in maxseg socket option. [ 937.689732][T12063] Use struct sctp_assoc_value instead [ 937.710663][T12058] netlink: zone id is out of range [ 937.718711][T12058] netlink: zone id is out of range [ 937.819365][T12056] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 937.897141][T12073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 938.066677][T12070] team_slave_1: left promiscuous mode [ 938.079638][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 938.086842][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 938.465684][T12106] syzkaller0: entered promiscuous mode [ 938.494267][T12106] syzkaller0: entered allmulticast mode [ 938.709876][T12118] netlink: 'syz.0.10373': attribute type 2 has an invalid length. [ 939.008248][T12138] netlink: 'syz.8.10380': attribute type 23 has an invalid length. [ 939.028985][T29370] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 939.036555][T29370] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 939.044706][T29370] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 939.052465][T29370] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 939.060952][T29370] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 939.093581][ T50] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 939.103539][ T50] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 939.112025][ T50] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 939.122099][ T50] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 939.135120][ T50] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 939.678305][T12139] hsr0 speed is unknown, defaulting to 1000 [ 939.688752][T12139] syzkaller0 speed is unknown, defaulting to 1000 [ 939.809007][T12173] gretap0: entered promiscuous mode [ 939.816864][T12173] gretap0: left promiscuous mode [ 939.826534][T12170] syzkaller0: entered promiscuous mode [ 939.832070][T12170] syzkaller0: entered allmulticast mode [ 940.155596][T12199] __nla_validate_parse: 17 callbacks suppressed [ 940.155618][T12199] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10393'. [ 940.164262][T12139] bridge0: port 1(bridge_slave_0) entered blocking state [ 940.195113][T12139] bridge0: port 1(bridge_slave_0) entered disabled state [ 940.202543][T12139] bridge_slave_0: entered allmulticast mode [ 940.216789][T12139] bridge_slave_0: entered promiscuous mode [ 940.228818][T12199] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10393'. [ 940.262112][T12139] bridge0: port 2(bridge_slave_1) entered blocking state [ 940.286710][T12139] bridge0: port 2(bridge_slave_1) entered disabled state [ 940.312138][T12139] bridge_slave_1: entered allmulticast mode [ 940.339224][T12139] bridge_slave_1: entered promiscuous mode [ 940.347031][T12211] netlink: 76 bytes leftover after parsing attributes in process `syz.1.10397'. [ 940.408654][T12139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 940.430681][T12139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 940.496416][T12139] team0: Port device team_slave_0 added [ 940.520221][T12139] team0: Port device team_slave_1 added [ 940.628818][T12139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 940.650159][T12139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 940.679506][T12139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 940.725032][T12139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 940.735706][T12139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 940.763828][T12139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 940.781581][T12225] hsr0 speed is unknown, defaulting to 1000 [ 940.790730][T12225] syzkaller0 speed is unknown, defaulting to 1000 [ 940.848556][T12139] hsr_slave_0: entered promiscuous mode [ 940.855370][T12139] hsr_slave_1: entered promiscuous mode [ 940.861858][T12139] debugfs: 'hsr0' already exists in 'hsr' [ 940.868439][T12139] Cannot create hsr debugfs directory [ 940.971217][T12246] netlink: 'syz.0.10405': attribute type 16 has an invalid length. [ 940.982850][T12246] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10405'. [ 941.154859][T12139] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.167679][T12139] netdevsim netdevsim5 eth3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 941.185998][T12254] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10408'. [ 941.203800][T29370] Bluetooth: hci8: command tx timeout [ 941.222177][T12257] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10409'. [ 941.237544][T12139] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.253087][T12139] netdevsim netdevsim5 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 941.297425][T12139] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.313166][T12139] netdevsim netdevsim5 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 941.370317][T12139] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.381476][T12139] netdevsim netdevsim5 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 941.562349][T12139] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 941.581879][T12278] netlink: 20 bytes leftover after parsing attributes in process `syz.8.10414'. [ 941.608089][T12139] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 941.635432][T12139] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 941.658906][T12283] netlink: 'syz.8.10414': attribute type 9 has an invalid length. [ 941.678009][T12139] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 941.686885][T12282] netlink: 830 bytes leftover after parsing attributes in process `syz.1.10415'. [ 941.696184][T12283] netlink: 'syz.8.10414': attribute type 6 has an invalid length. [ 941.708621][T12139] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 941.720880][T12139] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 941.764844][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 941.783237][T12290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10416'. [ 941.807865][T12139] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 941.842869][T12139] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 942.039005][T12139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 942.114545][T12139] 8021q: adding VLAN 0 to HW filter on device team0 [ 942.138518][T12310] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10420'. [ 942.142299][ T6022] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.154915][ T6022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 942.214013][ T6022] bridge0: port 2(bridge_slave_1) entered blocking state [ 942.221209][ T6022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 942.346536][T12321] syzkaller0: entered promiscuous mode [ 942.352612][T12321] syzkaller0: entered allmulticast mode [ 942.404341][ T31] INFO: task syz.2.8730:6309 blocked for more than 143 seconds. [ 942.422391][ T31] Not tainted syzkaller #0 [ 942.440265][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 942.463241][ T31] task:syz.2.8730 state:D stack:26552 pid:6309 tgid:6306 ppid:29368 task_flags:0x400040 flags:0x00080002 [ 942.491257][ T31] Call Trace: [ 942.496509][ T31] [ 942.501204][ T31] __schedule+0x17d9/0x56c0 [ 942.507944][ T31] ? unwind_next_frame+0x8f/0x2550 [ 942.513925][ T31] ? rcu_is_watching+0x15/0xb0 [ 942.518767][ T31] ? __pfx___schedule+0x10/0x10 [ 942.523899][ T31] ? rcu_is_watching+0x15/0xb0 [ 942.528734][ T31] ? rcu_is_watching+0x15/0xb0 [ 942.534187][ T31] ? lock_release+0x4b/0x3c0 [ 942.538842][ T31] ? rcu_is_watching+0x15/0xb0 [ 942.543918][ T31] schedule+0x164/0x360 [ 942.548150][ T31] schedule_preempt_disabled+0x13/0x30 [ 942.554569][ T31] __mutex_lock+0x7bf/0x1550 [ 942.559344][ T31] ? __mutex_lock+0x5d4/0x1550 [ 942.565678][ T31] ? nfsd_nl_rpc_status_get_dumpit+0xdc/0x13b0 [ 942.572131][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 942.578124][ T31] ? stack_trace_save+0xa9/0x100 [ 942.583783][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 942.589764][ T31] ? stack_depot_save_flags+0x33/0x800 [ 942.596921][ T31] nfsd_nl_rpc_status_get_dumpit+0xdc/0x13b0 [ 942.603552][ T31] ? kasan_save_track+0x4f/0x80 [ 942.608524][ T31] ? kasan_save_track+0x3e/0x80 [ 942.613795][ T31] ? __kasan_kmalloc+0x93/0xb0 [ 942.619258][ T31] ? __kmalloc_node_track_caller_noprof+0x4d7/0x7b0 [ 942.630426][ T31] ? __alloc_skb+0x2bd/0x7a0 [ 942.635872][ T31] ? __netlink_dump_start+0x589/0x7b0 [ 942.641634][ T31] ? genl_family_rcv_msg_dumpit+0x213/0x310 [ 942.650853][ T31] ? genl_rcv_msg+0x5e1/0x7a0 [ 942.656126][ T31] ? netlink_rcv_skb+0x226/0x4a0 [ 942.661251][ T31] ? genl_rcv+0x28/0x40 [ 942.666872][ T31] ? netlink_unicast+0x7bb/0x940 [ 942.671969][ T31] ? netlink_sendmsg+0x813/0xb40 [ 942.678312][ T31] ? ____sys_sendmsg+0x9b9/0xa20 [ 942.684375][ T31] ? ___sys_sendmsg+0x2a5/0x360 [ 942.689407][ T31] ? __x64_sys_sendmsg+0x1b1/0x290 [ 942.694767][ T31] ? do_syscall_64+0x174/0x580 [ 942.699742][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.706305][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 942.713746][ T31] ? rcu_is_watching+0x15/0xb0 [ 942.718985][ T31] ? trace_kmalloc+0x2a/0xf0 [ 942.724264][ T31] ? __kmalloc_node_track_caller_noprof+0x4f5/0x7b0 [ 942.731103][ T31] genl_dumpit+0x10b/0x1b0 [ 942.737173][ T31] netlink_dump+0x711/0xee0 [ 942.741994][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 942.747405][ T31] ? __kasan_kmalloc+0x93/0xb0 [ 942.752332][ T31] ? genl_start+0x497/0x6d0 [ 942.757637][ T31] __netlink_dump_start+0x589/0x7b0 [ 942.763552][ T31] genl_family_rcv_msg_dumpit+0x213/0x310 [ 942.769407][ T31] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 942.776120][ T31] ? genl_get_cmd+0x523/0x960 [ 942.780910][ T31] ? __pfx_genl_start+0x10/0x10 [ 942.786281][ T31] ? __pfx_genl_dumpit+0x10/0x10 [ 942.792033][ T31] ? __pfx_genl_done+0x10/0x10 [ 942.797720][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 942.805816][ T31] genl_rcv_msg+0x5e1/0x7a0 [ 942.810481][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 942.816303][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 942.823366][ T31] ? __netlink_lookup+0xc6/0x8b0 [ 942.828351][ T31] ? rcu_is_watching+0x15/0xb0 [ 942.834777][ T31] netlink_rcv_skb+0x226/0x4a0 [ 942.839760][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 942.845335][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 942.850886][ T31] ? down_read+0x2be/0x330 [ 942.856171][ T31] genl_rcv+0x28/0x40 [ 942.860225][ T31] netlink_unicast+0x7bb/0x940 [ 942.865359][ T31] netlink_sendmsg+0x813/0xb40 [ 942.870209][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 942.875763][ T31] ? futex_unqueue+0x22/0x240 [ 942.880553][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 942.888494][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 942.896175][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 942.901563][ T31] ____sys_sendmsg+0x9b9/0xa20 [ 942.906674][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 942.912030][ T31] ? lock_release+0x4b/0x3c0 [ 942.916908][ T31] ? import_iovec+0x73/0xa0 [ 942.921714][ T31] ___sys_sendmsg+0x2a5/0x360 [ 942.926876][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 942.932184][ T31] ? futex_wait+0x2a2/0x390 [ 942.936975][ T31] ? __fget_files+0x2a/0x420 [ 942.941664][ T31] ? __fget_files+0x3a2/0x420 [ 942.946631][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 942.951780][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 942.957748][ T31] ? rcu_is_watching+0x15/0xb0 [ 942.962618][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.969365][ T31] do_syscall_64+0x174/0x580 [ 942.974223][ T31] ? trace_irq_disable+0x3b/0x140 [ 942.979381][ T31] ? clear_bhb_loop+0x40/0x90 [ 942.984755][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.990736][ T31] RIP: 0033:0x7f0a6f99ce59 [ 942.995976][ T31] RSP: 002b:00007f0a6dbf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 943.004687][ T31] RAX: ffffffffffffffda RBX: 00007f0a6fc15fa0 RCX: 00007f0a6f99ce59 [ 943.012745][ T31] RDX: 0000000000000080 RSI: 00002000000000c0 RDI: 0000000000000004 [ 943.022226][ T31] RBP: 00007f0a6fa32e6f R08: 0000000000000000 R09: 0000000000000000 [ 943.030374][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 943.038724][ T31] R13: 00007f0a6fc16038 R14: 00007f0a6fc15fa0 R15: 00007ffe3bba4d48 [ 943.047988][ T31] [ 943.051394][ T31] INFO: lockdep is turned off. [ 943.057129][ T31] NMI backtrace for cpu 1 [ 943.057149][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 943.057173][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 943.057185][ T31] Call Trace: [ 943.057194][ T31] [ 943.057202][ T31] dump_stack_lvl+0xe8/0x150 [ 943.057232][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 943.057327][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 943.057367][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 943.057389][ T31] sys_info+0x135/0x170 [ 943.057407][ T31] watchdog+0xfd7/0x1030 [ 943.057445][ T31] ? watchdog+0x1c7/0x1030 [ 943.057482][ T31] kthread+0x388/0x470 [ 943.057507][ T31] ? __pfx_watchdog+0x10/0x10 [ 943.057532][ T31] ? __pfx_kthread+0x10/0x10 [ 943.057552][ T31] ret_from_fork+0x514/0xb70 [ 943.057583][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 943.057601][ T31] ? __switch_to+0xc89/0x1420 [ 943.057631][ T31] ? __pfx_kthread+0x10/0x10 [ 943.057650][ T31] ret_from_fork_asm+0x1a/0x30 [ 943.057682][ T31] [ 943.057691][ T31] Sending NMI from CPU 1 to CPUs 0: [ 943.171420][ C0] NMI backtrace for cpu 0 [ 943.171439][ C0] CPU: 0 UID: 0 PID: 6022 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 943.171461][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 943.171475][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 943.171603][ C0] RIP: 0010:check_preemption_disabled+0x1/0xe0 [ 943.171634][ C0] Code: c0 10 29 8c 48 c7 c6 00 11 29 8c eb 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 <41> 57 41 56 53 65 8b 05 07 4e 92 07 65 8b 0d fc 4d 92 07 f7 c1 ff [ 943.171655][ C0] RSP: 0018:ffffc900000078c8 EFLAGS: 00000207 [ 943.171670][ C0] RAX: 0000000000000000 RBX: ffffc90000007a18 RCX: ffffc900055d7b08 [ 943.171684][ C0] RDX: ffffc90000007a01 RSI: ffffffff8c291100 RDI: ffffffff8c2910c0 [ 943.171698][ C0] RBP: 1ffffffff2248d01 R08: ffffc900055d7af0 R09: 0000000000000000 [ 943.171710][ C0] R10: ffffc90000007a58 R11: fffff52000000f4d R12: ffffc900055d0000 [ 943.171724][ C0] R13: ffffffff8176a21f R14: ffffffff8e959a20 R15: ffffc900055d7b00 [ 943.171738][ C0] FS: 0000000000000000(0000) GS:ffff88812527b000(0000) knlGS:0000000000000000 [ 943.171754][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 943.171766][ C0] CR2: 0000557e986654b0 CR3: 00000000754e2000 CR4: 00000000003526f0 [ 943.171782][ C0] Call Trace: [ 943.171789][ C0] [ 943.171798][ C0] rcu_is_watching+0x15/0xb0 [ 943.171819][ C0] lock_release+0x4b/0x3c0 [ 943.171845][ C0] ? get_stack_info_noinstr+0x19/0x130 [ 943.171863][ C0] ? deref_stack_reg+0x18e/0x220 [ 943.171884][ C0] ? unwind_next_frame+0x8f/0x2550 [ 943.171904][ C0] unwind_next_frame+0x1baa/0x2550 [ 943.171927][ C0] ? nsim_dev_trap_report_work+0x7a4/0xb40 [ 943.171944][ C0] ? unwind_next_frame+0x8f/0x2550 [ 943.171972][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 943.171997][ C0] arch_stack_walk+0x11b/0x150 [ 943.172020][ C0] ? process_scheduled_works+0xa8e/0x14e0 [ 943.172045][ C0] stack_trace_save+0xa9/0x100 [ 943.172068][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 943.172093][ C0] ? kasan_save_track+0x4f/0x80 [ 943.172116][ C0] ? kasan_save_track+0x3e/0x80 [ 943.172137][ C0] ? kasan_save_free_info+0x40/0x50 [ 943.172155][ C0] ? __kasan_slab_free+0x5c/0x80 [ 943.172177][ C0] ? kfree+0x1c5/0x640 [ 943.172197][ C0] ? slab_free_after_rcu_debug+0x62/0x220 [ 943.172214][ C0] ? handle_softirqs+0x225/0x840 [ 943.172243][ C0] ? do_softirq+0x76/0xd0 [ 943.172265][ C0] kasan_save_track+0x3e/0x80 [ 943.172286][ C0] ? kasan_save_track+0x3e/0x80 [ 943.172307][ C0] ? kasan_save_free_info+0x40/0x50 [ 943.172325][ C0] ? __kasan_slab_free+0x5c/0x80 [ 943.172348][ C0] ? slab_free_after_rcu_debug+0x12a/0x220 [ 943.172364][ C0] ? rcu_core+0x78b/0x10a0 [ 943.172379][ C0] ? handle_softirqs+0x225/0x840 [ 943.172401][ C0] ? do_softirq+0x76/0xd0 [ 943.172421][ C0] ? __local_bh_enable_ip+0xf8/0x130 [ 943.172442][ C0] ? nsim_dev_trap_report_work+0x7a4/0xb40 [ 943.172481][ C0] kasan_save_free_info+0x40/0x50 [ 943.172500][ C0] __kasan_slab_free+0x5c/0x80 [ 943.172524][ C0] slab_free_after_rcu_debug+0x12a/0x220 [ 943.172541][ C0] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 943.172559][ C0] ? rcu_core+0x70d/0x10a0 [ 943.172574][ C0] rcu_core+0x78b/0x10a0 [ 943.172596][ C0] ? __pfx_rcu_core+0x10/0x10 [ 943.172611][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 943.172638][ C0] handle_softirqs+0x225/0x840 [ 943.172661][ C0] ? do_softirq+0x76/0xd0 [ 943.172685][ C0] ? nsim_dev_trap_report_work+0x7a4/0xb40 [ 943.172703][ C0] do_softirq+0x76/0xd0 [ 943.172723][ C0] [ 943.172729][ C0] [ 943.172736][ C0] __local_bh_enable_ip+0xf8/0x130 [ 943.172758][ C0] nsim_dev_trap_report_work+0x7a4/0xb40 [ 943.172783][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 943.172804][ C0] process_scheduled_works+0xa8e/0x14e0 [ 943.172838][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 943.172860][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 943.172884][ C0] ? assign_work+0x3cf/0x5d0 [ 943.172912][ C0] worker_thread+0xa47/0xfb0 [ 943.172941][ C0] ? __kthread_parkme+0x71/0x1f0 [ 943.172978][ C0] kthread+0x388/0x470 [ 943.172997][ C0] ? __pfx_worker_thread+0x10/0x10 [ 943.173022][ C0] ? __pfx_kthread+0x10/0x10 [ 943.173041][ C0] ret_from_fork+0x514/0xb70 [ 943.173063][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 943.173082][ C0] ? __switch_to+0xc89/0x1420 [ 943.173112][ C0] ? __pfx_kthread+0x10/0x10 [ 943.173131][ C0] ret_from_fork_asm+0x1a/0x30 [ 943.173164][ C0] [ 943.657696][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 943.664632][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 943.673823][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 943.683969][ T31] Call Trace: [ 943.687286][ T31] [ 943.690251][ T31] vpanic+0x56c/0xa60 [ 943.694316][ T31] ? __pfx___schedule+0x10/0x10 [ 943.699205][ T31] ? __pfx_vpanic+0x10/0x10 [ 943.703758][ T31] panic+0xc5/0xd0 [ 943.707521][ T31] ? __pfx_panic+0x10/0x10 [ 943.711983][ T31] ? preempt_schedule_common+0x82/0xd0 [ 943.717485][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 943.722981][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 943.729168][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 943.735357][ T31] watchdog+0x1030/0x1030 [ 943.739748][ T31] ? watchdog+0x1c7/0x1030 [ 943.744303][ T31] kthread+0x388/0x470 [ 943.748403][ T31] ? __pfx_watchdog+0x10/0x10 [ 943.753154][ T31] ? __pfx_kthread+0x10/0x10 [ 943.757779][ T31] ret_from_fork+0x514/0xb70 [ 943.762494][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 943.767648][ T31] ? __switch_to+0xc89/0x1420 [ 943.772375][ T31] ? __pfx_kthread+0x10/0x10 [ 943.776992][ T31] ret_from_fork_asm+0x1a/0x30 [ 943.781790][ T31] [ 943.785014][ T31] Kernel Offset: disabled [ 943.789347][ T31] Rebooting in 86400 seconds..