last executing test programs: 4m29.163702054s ago: executing program 32 (id=690): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r5, &(0x7f0000003bc0)=[{{&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001780)=[{&(0x7f00000003c0)=""/85, 0x55}, {&(0x7f0000000440)=""/252, 0xfc}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/221, 0xdd}], 0x4}, 0xff}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000003b80)=[{0x0}], 0x1}, 0xfffffffd}], 0x7, 0x0, 0x0) 4m28.147825829s ago: executing program 33 (id=701): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=@newtfilter={0x478, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r5, {0xffff, 0xfff3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x448, 0x2, [@TCA_BASIC_POLICE={0x444, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x3, 0x3ff, 0x2, 0x7, 0xfffffff7, 0x7, 0x2a3c14c8, 0x2, 0x140, 0x9cd0, 0x78e, 0x8, 0x9, 0x2, 0x80000000, 0x5, 0x80000000, 0x9, 0x6, 0xfff, 0x27, 0x52a67a94, 0xf, 0x1, 0x4, 0xfffffffe, 0x6, 0x0, 0xfffffffe, 0x800, 0x7, 0xffffffff, 0xffffffad, 0x8, 0x68, 0x0, 0x10000, 0x7ff, 0x7, 0xffffff64, 0x4, 0x9, 0x7, 0x5, 0x14000003, 0xffff, 0x2, 0x1ff, 0x4, 0xffff5edc, 0x8, 0x4, 0x81, 0x5, 0x94c, 0x1cf, 0x10000000, 0x3, 0x6, 0xfffffffb, 0x1, 0x2, 0x7, 0x1, 0x6, 0x0, 0xa, 0xf43, 0xa, 0x4, 0x5, 0x1, 0x8000, 0x3ff, 0x100, 0x2, 0x2, 0x8, 0x0, 0x24000000, 0x4, 0x80000000, 0x6, 0xac5, 0x9, 0xffb, 0x2, 0x67, 0xa, 0x9, 0x5, 0x7fffffff, 0xfffffff8, 0x86, 0x0, 0x0, 0x8ac7, 0x5, 0x78, 0x8000, 0xc, 0x6, 0x400, 0x20, 0x5, 0xffffffdf, 0x389, 0x3, 0x1e800000, 0x80000001, 0x4a, 0xff, 0x2, 0x3, 0x1ff, 0x9, 0x4, 0x6, 0x2, 0x7, 0x8001, 0x2, 0x263, 0xb, 0x8, 0x6, 0x6, 0x9, 0x6, 0xa, 0x13d, 0x209, 0x3fed, 0x2, 0x1, 0x2, 0x101, 0xffffffff, 0x7, 0x240, 0x4, 0x5, 0x2, 0xfffffffb, 0x1, 0x800, 0x7ffffffb, 0x8fc, 0x2, 0x68a4, 0x600000, 0x6, 0x4, 0x8, 0x4, 0x37, 0xa, 0x9, 0x3, 0x5, 0x8, 0x100, 0x7, 0xfe, 0x6, 0x7, 0x7, 0x22c, 0x6, 0x3, 0x8, 0x9, 0xfffffffc, 0xd6, 0x4ad, 0x7, 0x9, 0x2, 0x0, 0x7e6, 0x54d6, 0x2, 0x5, 0x8, 0x1, 0xf32, 0xffff, 0xb2, 0x0, 0x6, 0x7, 0x8, 0x400001, 0x4, 0x7, 0x9, 0x9, 0x0, 0x7, 0x2, 0x4000004, 0x20000, 0x2, 0x80000000, 0x10000, 0xe, 0x6, 0x2, 0x4, 0x1000, 0x8, 0x9, 0x0, 0xe6, 0x2, 0x9, 0x4, 0x1, 0x4, 0x9, 0xff, 0x9, 0x9, 0xb, 0x3, 0x7fff, 0x200, 0x5, 0xca1, 0x7f, 0xe, 0x1, 0x1000, 0xfff, 0x5, 0x7, 0x0, 0x7, 0x40, 0x80000001, 0x1, 0x7, 0x6, 0x8, 0xe9375e5, 0x8cf5, 0x7, 0xdf0d, 0x2, 0xfffffffb]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x2, 0x6, 0x4d2, 0x0, {0x8, 0x2, 0xa, 0x8, 0x8, 0x9}, {0x4, 0x0, 0xa380, 0x7ff, 0x5, 0x7d487c2b}, 0x9, 0x15f}}]}]}}]}, 0x478}, 0x1, 0x0, 0x0, 0x10}, 0x8080) 4m28.132048959s ago: executing program 34 (id=702): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x129642, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x10001, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x6, 0xb762, 0x4, 0x40007, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x6, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x6d, 0x2, 0x9, 0xd05, 0x1000044, 0x8, 0x8, 0x1, 0xfffffffb, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xb, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0x7, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0xffffffff, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0x6, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x400002, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0xfffd, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x6, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0xf06, 0x8, 0x7ff, 0x0, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0x7, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x5, 0x42ba, 0x400004, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0xa89, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x5, 0x40fff, 0x180000, 0x8000, 0x3, 0x200, 0x80, 0x6, 0x9aa, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0xd, 0xfffffffd, 0x4, 0x8, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x10000068, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x80000000, 0x7, 0x0, 0x7, 0x8001, 0x2, 0x6, 0x4, 0xc, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0x8, 0x8001, 0x4, 0x6, 0x7, 0x5, 0xd, 0x2, 0x7, 0x1, 0x8, 0x3, 0x81, 0x3, 0x1ff, 0x8001, 0x20000c9, 0x5, 0x65e1, 0x10001, 0xc, 0x48001, 0xffffb5cd, 0xe, 0x3, 0x97, 0x7, 0xb, 0xffff6f3c, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x6, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x1, 0x9d6, 0x9, 0x6, 0xea6, 0x3, 0x5, 0x10, 0x8, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0x6, 0x9, 0x5, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x4, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x2, 0x5, 0x1ff, 0x4, 0x6, 0x1, 0x7, 0x7ff, 0xfffffffe, 0x0, 0xb, 0xfffffff7, 0x8000008, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0x0, 0xf, 0x1982, 0x1, 0x80000000, 0x1, 0x9, 0x6, 0x7ffc, 0x2, 0x1, 0x2, 0x2, 0x9, 0x5, 0xffffff1c, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x9, 0x1b8f, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x88, 0x10004, 0x295, 0x6, 0xcb1, 0x1, 0xb7e, 0x10001, 0x8000002, 0xa, 0x6, 0x1, 0x2, 0x3ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d4, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x5, 0x7fffffff, 0x80, 0x2, 0x90, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0x7, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xfff, 0x421, 0x3ff, 0x2, 0xd, 0xfb6, 0xc, 0xfffffffd, 0xac, 0x0, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = syz_genetlink_get_family_id$tipc(0x0, r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 4m24.113251198s ago: executing program 35 (id=710): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56561, 0x70bd2b, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0x3, 0x8}, {0x7, 0x10}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5, 0x7}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20002000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3m48.072349556s ago: executing program 36 (id=822): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0xffe0, 0xb}, {0x7, 0xfff1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x54815}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3m47.962753348s ago: executing program 37 (id=831): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newqdisc={0x68, 0x24, 0xe0b, 0x78bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x1ff, 0x4, 0x0, 0x6, 0xfffffffd}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xfffffffb, 0x5, 0x73328a9a, 0x4}}]}]}}}]}, 0x68}}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) 2m3.655284096s ago: executing program 7 (id=1932): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) close(0x3) 2m3.331962024s ago: executing program 7 (id=1943): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x4098884, &(0x7f0000000380)={0xa, 0x4e1d, 0x4, @mcast2}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) 2m3.260291145s ago: executing program 7 (id=1947): r0 = socket(0x2b, 0x803, 0xffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x200, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0xa}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4044094) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x40003}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x400c840) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x4}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r2, &(0x7f0000002e80), 0x0, 0x2000, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x2000a, 0x9}) write$bt_hci(r3, &(0x7f0000000080)=ANY=[], 0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000380)=@mangle={'mangle\x00', 0x2, 0x6, 0x640, 0x4a0, 0x4a0, 0x3b0, 0x3b0, 0x2e0, 0x570, 0x570, 0x570, 0x570, 0x570, 0x6, 0x0, {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, [0xff, 0xffffffff, 0x0, 0x1fe000000], [0xffffff00, 0xff000000, 0xffffffff, 0xffffff00], 'ip6erspan0\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x11, 0x2, 0x4}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x2f, 0x4, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@multiport={{0x50}, {0x0, 0xc, [0x0, 0x0, 0x0, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [0x0, 0x0, 0x0, 0xff], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x2}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @dev={0xfe, 0x80, '\x00', 0x32}, [], [], 'nicvf0\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x2}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x1, 0x7ff}}}, {{@ipv6={@loopback, @local, [0xffffff00, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {0xff}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x8, @ipv6=@private1, 0x1d, 0x35}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r8, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) socket$unix(0x1, 0x1, 0x0) 2m2.629884801s ago: executing program 7 (id=1955): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}], 0x10) sendto$inet6(r0, &(0x7f00000009c0)="fd", 0x1, 0x20000081, &(0x7f0000000000)={0xa, 0x4e23, 0x57bc3377, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) recvmmsg(r0, &(0x7f0000001f80)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x400000f3, 0x0) 2m2.580945802s ago: executing program 2 (id=1958): mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x28011, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000500)={0x11, 0xf6, r2, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x14) bind$packet(r0, &(0x7f0000000300)={0x11, 0x63dcbf62d8600606, r2, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000680)=ANY=[@ANYBLOB="aa0000000000000080a2aa0d0606"], 0x0) 2m2.519973784s ago: executing program 7 (id=1961): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r3, &(0x7f00000000c0)="1c", 0xfffffffffffffd2c, 0xc0000, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0xff1f0000, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 2m2.492452005s ago: executing program 2 (id=1963): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d00000002"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x54}}, 0x0) 2m2.491826115s ago: executing program 8 (id=1964): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) close(0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}}, 0x8004) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2m2.076614965s ago: executing program 9 (id=1966): r0 = socket(0x2b, 0x803, 0xffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x200, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0xa}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4044094) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x40003}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x400c840) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x4}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r2, &(0x7f0000002e80), 0x0, 0x2000, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x2000a, 0x9}) write$bt_hci(r3, &(0x7f0000000080)=ANY=[], 0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000380)=@mangle={'mangle\x00', 0x2, 0x6, 0x640, 0x4a0, 0x4a0, 0x3b0, 0x3b0, 0x2e0, 0x570, 0x570, 0x570, 0x570, 0x570, 0x6, 0x0, {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, [0xff, 0xffffffff, 0x0, 0x1fe000000], [0xffffff00, 0xff000000, 0xffffffff, 0xffffff00], 'ip6erspan0\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x11, 0x2, 0x4}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x2f, 0x4, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@multiport={{0x50}, {0x0, 0xc, [0x0, 0x0, 0x0, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [0x0, 0x0, 0x0, 0xff], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x2}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @dev={0xfe, 0x80, '\x00', 0x32}, [], [], 'nicvf0\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x2}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x1, 0x7ff}}}, {{@ipv6={@loopback, @local, [0xffffff00, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {0xff}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x8, @ipv6=@private1, 0x1d, 0x35}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r8, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) socket$unix(0x1, 0x1, 0x0) 2m1.971162797s ago: executing program 8 (id=1967): r0 = socket$packet(0x11, 0x2, 0x300) vmsplice(0xffffffffffffffff, &(0x7f0000002c80)=[{0x0}], 0x1, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$sock_ifreq(r0, 0x8923, &(0x7f0000000140)={'veth0_virt_wifi\x00', @ifru_flags=0x8000}) 2m1.970497607s ago: executing program 2 (id=1968): r0 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0xfb, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000001300c000b40000000000000000614000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a011e00000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_clone(0x200400, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x40) r3 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r0, r3, 0x0) 2m1.895988069s ago: executing program 9 (id=1970): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0100000002000000180012000c000100626f6e64000000000c000200"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r3], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01"], 0x3c}}, 0x0) 2m1.85892965s ago: executing program 9 (id=1971): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xffff}, {0x0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) 2m1.85467438s ago: executing program 8 (id=1972): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newlink={0x40, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r2, 0x308c3, 0xc4a48b7f26be2e0b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}, @IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) sendmmsg$inet(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 2m1.85227894s ago: executing program 2 (id=1973): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x4098884, &(0x7f0000000380)={0xa, 0x4e1d, 0x4, @mcast2}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) 2m1.783976482s ago: executing program 9 (id=1976): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@getqdisc={0x24, 0x26, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0x8, 0xf}, {0xf, 0xffe0}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c070054001280080001006873720048000280"], 0x90}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a80100004800c"], 0x34}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m1.775491442s ago: executing program 2 (id=1977): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) close(0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}}, 0x8004) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2m1.737583693s ago: executing program 9 (id=1979): r0 = socket(0x1d, 0x2, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x3}, 0x18) sendmmsg$inet(r0, &(0x7f0000002e00)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000080)="d171e4c4c55f7973", 0x8}], 0x1}}], 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 2m1.690761234s ago: executing program 8 (id=1980): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d00000002"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400000011000100000000000000000007000000", @ANYRES32=r1], 0x54}}, 0x0) 2m1.669575275s ago: executing program 7 (id=1981): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r2) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x84, 0x3, 0x2, 0x7}, {0x1, 0x4, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x3, 0x694, 0x51, 0x8001}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x7f, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x685, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0x7ff, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x7, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffa, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x6, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x7, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x6}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x2, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x7c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x6, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x7}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158142, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x7, 0x9000, 0x2, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x1, 0xfff, 0xffffff13, 0x9, 0x6, 0x6}, {0x1, 0x8, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x0, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x800004}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x80, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0x4, 0x4, 0x8, 0x4, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xefa, 0x6, 0x7f, 0x2, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x8000007, 0x4, 0x3e6b7592, 0x5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x70f, 0x5202, 0x2, 0x53d2, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x83}, {0xfffffffd, 0x8, 0x6, 0x5, 0x7fffffff, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x0, 0x200}, {0x3fe, 0x2, 0x8, 0x4, 0x0, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f1b, 0xffffff7f}, {0x2, 0x8401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xf44}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x8, 0x5, 0x8}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x104, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0x2000000e, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x7, 0x6, 0x6}, {0xa, 0x8f, 0x9, 0xffffff46, 0x84, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x0, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1, 0x9}, {0x7, 0xd, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0xfe, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01}, {0x7, 0x5, 0x2, 0xff, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0x7f, 0x100}, {0x81, 0x4, 0x988, 0x3, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7ffb, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0xfffffffe, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x5}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe98, 0x9, 0x9, 0x4034b0}, {0x4, 0x8, 0x8, 0x5, 0x6cf4, 0x2}, {0x3, 0x3, 0x5, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x1ff, 0xfa2f}, {0x10, 0x5e20, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x4, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0xffffffff, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x777, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000002, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0xffffffff, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xfe, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x2, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x4, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x2001, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80004, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0x3}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3}, {0x3}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x3}, {}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0xa}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x2}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 2m1.566563597s ago: executing program 9 (id=1982): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0100000002000000180012000c000100626f6e64000000000c000200"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r3], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01"], 0x3c}}, 0x0) 2m1.505117389s ago: executing program 2 (id=1983): r0 = socket(0x2b, 0x803, 0xffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x200, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0xa}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4044094) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x40003}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x400c840) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x4}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r2, &(0x7f0000002e80), 0x0, 0x2000, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x2000a, 0x9}) write$bt_hci(r3, &(0x7f0000000080)=ANY=[], 0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000380)=@mangle={'mangle\x00', 0x2, 0x6, 0x640, 0x4a0, 0x4a0, 0x3b0, 0x3b0, 0x2e0, 0x570, 0x570, 0x570, 0x570, 0x570, 0x6, 0x0, {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, [0xff, 0xffffffff, 0x0, 0x1fe000000], [0xffffff00, 0xff000000, 0xffffffff, 0xffffff00], 'ip6erspan0\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x11, 0x2, 0x4}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x2f, 0x4, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@multiport={{0x50}, {0x0, 0xc, [0x0, 0x0, 0x0, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [0x0, 0x0, 0x0, 0xff], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x2}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @dev={0xfe, 0x80, '\x00', 0x32}, [], [], 'nicvf0\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x2}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x1, 0x7ff}}}, {{@ipv6={@loopback, @local, [0xffffff00, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {0xff}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x8, @ipv6=@private1, 0x1d, 0x35}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r8, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) socket$unix(0x1, 0x1, 0x0) 2m1.109080738s ago: executing program 8 (id=1984): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10004000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000200)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 2m1.076864629s ago: executing program 8 (id=1985): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x0, 0x0}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x28, 0x25, 0x44, 0xfffff00c}]}) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) write$cgroup_type(r2, &(0x7f0000000280), 0x9) 1m45.838018154s ago: executing program 38 (id=1983): r0 = socket(0x2b, 0x803, 0xffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x200, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0xa}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4044094) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x40003}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x400c840) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x4}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r2, &(0x7f0000002e80), 0x0, 0x2000, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x2000a, 0x9}) write$bt_hci(r3, &(0x7f0000000080)=ANY=[], 0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000380)=@mangle={'mangle\x00', 0x2, 0x6, 0x640, 0x4a0, 0x4a0, 0x3b0, 0x3b0, 0x2e0, 0x570, 0x570, 0x570, 0x570, 0x570, 0x6, 0x0, {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, [0xff, 0xffffffff, 0x0, 0x1fe000000], [0xffffff00, 0xff000000, 0xffffffff, 0xffffff00], 'ip6erspan0\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x11, 0x2, 0x4}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x2f, 0x4, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@multiport={{0x50}, {0x0, 0xc, [0x0, 0x0, 0x0, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [0x0, 0x0, 0x0, 0xff], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x2}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @dev={0xfe, 0x80, '\x00', 0x32}, [], [], 'nicvf0\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x2}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x1, 0x7ff}}}, {{@ipv6={@loopback, @local, [0xffffff00, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {0xff}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x8, @ipv6=@private1, 0x1d, 0x35}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r8, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) socket$unix(0x1, 0x1, 0x0) 1m45.828562555s ago: executing program 39 (id=1982): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0100000002000000180012000c000100626f6e64000000000c000200"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r3], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01"], 0x3c}}, 0x0) 1m45.814583545s ago: executing program 40 (id=1985): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x0, 0x0}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x28, 0x25, 0x44, 0xfffff00c}]}) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) write$cgroup_type(r2, &(0x7f0000000280), 0x9) 1m45.790694316s ago: executing program 41 (id=1981): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r2) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x84, 0x3, 0x2, 0x7}, {0x1, 0x4, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x3, 0x694, 0x51, 0x8001}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x7f, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x685, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0x7ff, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x7, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffa, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x6, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x7, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x6}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x2, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x7c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x6, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x7}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158142, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x7, 0x9000, 0x2, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x1, 0xfff, 0xffffff13, 0x9, 0x6, 0x6}, {0x1, 0x8, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x0, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x800004}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x80, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0x4, 0x4, 0x8, 0x4, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xefa, 0x6, 0x7f, 0x2, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x8000007, 0x4, 0x3e6b7592, 0x5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x70f, 0x5202, 0x2, 0x53d2, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x83}, {0xfffffffd, 0x8, 0x6, 0x5, 0x7fffffff, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x0, 0x200}, {0x3fe, 0x2, 0x8, 0x4, 0x0, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f1b, 0xffffff7f}, {0x2, 0x8401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xf44}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x8, 0x5, 0x8}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x104, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0x2000000e, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x7, 0x6, 0x6}, {0xa, 0x8f, 0x9, 0xffffff46, 0x84, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x0, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1, 0x9}, {0x7, 0xd, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0xfe, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01}, {0x7, 0x5, 0x2, 0xff, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0x7f, 0x100}, {0x81, 0x4, 0x988, 0x3, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7ffb, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0xfffffffe, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x5}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe98, 0x9, 0x9, 0x4034b0}, {0x4, 0x8, 0x8, 0x5, 0x6cf4, 0x2}, {0x3, 0x3, 0x5, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x1ff, 0xfa2f}, {0x10, 0x5e20, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x4, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0xffffffff, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x777, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000002, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0xffffffff, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xfe, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x2, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x4, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x2001, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80004, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0x3}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3}, {0x3}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x3}, {}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0xa}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x2}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1m23.419714466s ago: executing program 5 (id=2073): openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c0, 0x0, 0x98, 0x130, 0x260, 0x328, 0x0, 0x98, 0x130, 0x1c8, 0x328, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mark={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x420) r1 = socket$inet(0x2, 0x3, 0xff) sendto(r1, &(0x7f0000000100)="4500001c00010000401174c00c0002010c00020100", 0x15, 0x0, &(0x7f0000000200)=@in={0x2, 0x0, @loopback}, 0x80) 1m23.251766511s ago: executing program 5 (id=2074): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0xf0f003, 0x4}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) fsopen(&(0x7f0000000200)='9p\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) ptrace$peeksig(0x4209, 0x0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r5 = syz_open_dev$dvb_demux(0x0, 0x0, 0x20000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040040}, 0x4001) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1m22.351493083s ago: executing program 5 (id=2075): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a3c000000030a010800000000000000000a000007100008800800014000000001000000010900010073797a31000000000900030073797a30"], 0x64}, 0x1, 0x0, 0x0, 0xb0}, 0x20008894) 1m22.257785535s ago: executing program 5 (id=2076): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c801}, 0x24000840) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x6, 0x3, @mcast2}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000300)="6797f04cdb6f2c8ff1c922acb0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d2b24", 0x2a}], 0x1}, 0x30008b08) 1m22.205474486s ago: executing program 5 (id=2077): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1f, 0xd, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000040000850000008200000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1m22.145489238s ago: executing program 5 (id=2078): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x6}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="0503e5fdd3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m6.944568782s ago: executing program 42 (id=2078): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x6}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="0503e5fdd3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 44.514917714s ago: executing program 6 (id=2261): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x4, [{}, {0x0, 0x100000000000000}]}, 0x68) 44.478605085s ago: executing program 0 (id=2265): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002a40)=@delchain={0x644, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x618, 0x2, [@TCA_BPF_ACT={0x614, 0x1, [@m_bpf={0x128, 0x11, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xffffffff, 0x3, 0xffffffffffffffff, 0x10001, 0x6}}]}, {0xd1, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e1028d91028270a2722b141a9140c47e37d068e7193d463a6444e424bc792ab1295f79842a501700a5cc2f71eefaf131a98821e712b03d552c87"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_bpf={0x80, 0x8, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x0, 0xb6, 0x6, 0xfffffffa}, {0x7ff, 0x7, 0x2, 0x3}, {0x2, 0x6, 0x0, 0xedc}, {0x10, 0xb, 0x6, 0x9}, {0x0, 0x1, 0x40, 0x4}]}]}, {0x2b, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3fe72c442a"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x43c, 0x9, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe73, 0x9, 0x7, 0x3, 0x1ff, 0x7, 0x8, 0x80, 0x3, 0x1, 0x10000000, 0x401, 0x3, 0x2, 0x7, 0x6, 0x1000, 0x613, 0x5, 0x5, 0xfffffff9, 0xff, 0xc, 0x7fff, 0x5, 0x5c7000, 0x9, 0x7fffffff, 0x5, 0x6, 0x0, 0x80, 0x1f, 0x7ff, 0xfffffc84, 0x10, 0xfffffff7, 0x3, 0x8, 0x6, 0x5, 0xb, 0x8, 0xfffffffd, 0x4c, 0xe, 0xf, 0x9, 0x9, 0x3, 0xfffffff9, 0xfffffffa, 0x1, 0x2, 0x9, 0x8, 0xc6e7, 0xa000, 0x2, 0x8000, 0x17, 0x6, 0x2e52, 0x9, 0x7, 0x6, 0x414, 0x10001, 0x0, 0x5, 0xffffffff, 0xc, 0x1000, 0x4, 0x800, 0x10, 0x39, 0x5, 0x2, 0x5c3, 0x800, 0x2, 0x5, 0x6e6, 0x3, 0x7, 0x6, 0xc, 0x3, 0x14e, 0x8, 0x5, 0xad8, 0x289f, 0x3, 0x97e, 0x3, 0x80, 0x6, 0xb, 0x8, 0xe6, 0x720, 0x2, 0xa98f, 0x1, 0xffffffff, 0x0, 0x3, 0x74, 0xdd7c, 0x2, 0x0, 0xffffff7c, 0x6, 0x7f, 0x1, 0x6, 0x4, 0x7, 0x3, 0x7, 0xb, 0xfff, 0xfffffffd, 0x3, 0xc60, 0x7, 0x4, 0xf8ca, 0xb, 0x6, 0x3ff, 0x7fffffff, 0x8001, 0xd, 0x0, 0x4, 0x4, 0x0, 0x421, 0x8, 0x9, 0x2, 0x1, 0x0, 0x9, 0xffff, 0x7ff, 0x8, 0x9, 0x2, 0xb, 0xa00, 0x2, 0xfec, 0x5, 0x5, 0x5, 0x9, 0x2, 0x400, 0x3, 0x3, 0x3, 0x8, 0xe59, 0x1000, 0x101, 0x5, 0x8001, 0x9, 0x4, 0x0, 0x6155, 0xe040, 0x80000001, 0x40, 0x7f, 0x9, 0x5e59, 0x81, 0x0, 0x9, 0x0, 0x3, 0x1, 0xb571, 0xe, 0x7, 0xa, 0x80000000, 0x2797, 0x4, 0x2, 0x2, 0x2, 0x3, 0x81, 0xffffffff, 0x6f, 0xfffffffd, 0x5, 0xb, 0x1, 0x3, 0x3, 0x1, 0x2, 0x0, 0x8001, 0x7, 0x7, 0x1, 0x32d, 0x9, 0x6, 0x2, 0x6, 0x2, 0x4, 0x1, 0x4, 0x0, 0x1000, 0x80000001, 0xffffffff, 0x4, 0x7, 0x8, 0x8, 0x697, 0xe339, 0x9, 0x1, 0x6, 0xffffffff, 0x9, 0x9, 0x35, 0x7, 0x5, 0xfffffffb, 0xfffffff9, 0x965, 0x7145, 0x90b6, 0x6, 0x6, 0x2, 0x8, 0x1, 0x1, 0xd5, 0x7ff, 0x200]}]]}, {0x9, 0x6, "94cedea66d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_xt={0x2c, 0x13, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x644}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 44.377266858s ago: executing program 6 (id=2268): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000050000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, 0x0, &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x4098884, &(0x7f0000000380)={0xa, 0x4e1d, 0x4, @mcast2}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) 44.376854887s ago: executing program 0 (id=2270): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, 0x0, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x3ff, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0xd, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x400, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x0, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x2, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x5, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xfff, 0x421, 0x3ff, 0x2, 0xd, 0x7, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f00000001c0)=@xdp={0x2c, 0xdd89, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 44.335839179s ago: executing program 6 (id=2272): r0 = socket$packet(0x11, 0x2, 0x300) vmsplice(0xffffffffffffffff, &(0x7f0000002c80)=[{&(0x7f00000009c0)="d2d929689d4d1c7fa7b8156fa83ba86b4f1d73ca74a5da2bf54ca9d4cbf6c1ca338f5956355aad55c4f4d5627c5ae4344db1bbf5a545bc46ec7576c419e5629b6265f737700e910a7a6fe8510c78a481169f5bd3cdca4902d50438dd513ed1733d0b22f2654235c135b95b1784c65b9181a04a6820ed5035a8e8cddd1fd2bbc22b", 0x81}], 0x1, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$sock_ifreq(r0, 0x8923, &(0x7f0000000140)={'veth0_virt_wifi\x00', @ifru_flags=0x8000}) 43.46139983s ago: executing program 4 (id=2277): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1f, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000040000850000008200000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 43.393442382s ago: executing program 4 (id=2278): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 33.666857831s ago: executing program 0 (id=2281): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x7, 0x80000000}, {0x6, 0x0, 0x4}]}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x2, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x200000}}}}}, 0x0) 33.663746471s ago: executing program 6 (id=2282): sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0x24040081) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) preadv(r0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/14, 0xe}], 0x27, 0x0, 0x1) 33.630526842s ago: executing program 4 (id=2283): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000050000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, 0x0, &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x4098884, &(0x7f0000000380)={0xa, 0x4e1d, 0x4, @mcast2}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) 33.592048623s ago: executing program 0 (id=2285): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xd) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff000000", @ANYRES32=r1, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32=r1, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) 33.575402823s ago: executing program 4 (id=2287): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0xf0f003, 0x4}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) fsopen(&(0x7f0000000200)='9p\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000340)={0x3, 0x1}, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = syz_open_dev$dvb_demux(0x0, 0x0, 0x20000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040040}, 0x4001) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 33.499209605s ago: executing program 0 (id=2289): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000200001000000000000fe211e"], 0x38}}, 0x0) 33.436000397s ago: executing program 6 (id=2290): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @random="d976f308c05c"}) write$tun(r0, &(0x7f0000000180)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14, 0x7}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x6, 0x2c, 0x0, 0x0, 0x8, 0x2f, 0x0, @empty, @broadcast}, {{0x8100, 0x6558, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x20, 0x5, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x4}]}}}}}, 0x3a) 33.434875637s ago: executing program 0 (id=2292): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, 0x0, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x3ff, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0xd, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x400, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x0, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x2, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x5, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xfff, 0x421, 0x3ff, 0x2, 0xd, 0x7, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f00000001c0)=@xdp={0x2c, 0xdd89, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 33.260886191s ago: executing program 6 (id=2295): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 32.845949151s ago: executing program 4 (id=2296): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x7, 0x80000000}, {0x6, 0x0, 0x4}]}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) 32.785347013s ago: executing program 4 (id=2297): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000005e00019eb17738540600000000000000", @ANYRES32=0x0, @ANYRES8=r0], 0x1c}], 0x1, 0x0, 0x0, 0x810}, 0x0) recvfrom(r0, 0x0, 0x0, 0x200, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000bc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000001440)=ANY=[@ANYBLOB="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"], 0x610}, 0x1, 0x0, 0x0, 0x4004010}, 0x4000) socket$inet6(0xa, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x40) socket$netlink(0x10, 0x3, 0x8000000004) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x5a0, 0x0, 0xffffff80, 0x178, 0xd0040000, 0x178, 0x4d0, 0x22b, 0x258, 0x4d0, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x300, 0x368, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{0x94}, {0x25, 0x0, 0x1}, {0x0, 0x40}, {}, {0x0, 0x7, 0x8}, {}, {0x0, 0x0, 0xfd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x4}, {}, {0x6}, {}, {0x9}, {}, {}, {}, {0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x80000000}, {0x870}, {}, {}, {}, {0x2, 0xfe}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x3, 0x10}, {}, {}, {0xfffe, 0x7, 0x4}, {0x0, 0x0, 0x1}, {0x0, 0x1}, {0x8, 0x8, 0x0, 0xfffffffc}, {}, {0x0, 0xfc, 0xe4}, {0x0, 0x0, 0xff}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x4, 0x8a}, {}, {}, {}, {0x0, 0x4}]}}, @common=@inet=@socket1={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1c, 0x7, 0x279, 0x2, 'netbios-ns\x00', 'syz1\x00', {0x170}}}}, {{@ipv6={@private2, @empty, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xffffff00], 'vlan1\x00', 'pim6reg1\x00', {}, {0xff}, 0x0, 0x9, 0x1, 0x12}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x11, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x1f, 0x9, &(0x7f0000000000)=ANY=[@ANYRES16=r2], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x11}, 0xfffffffffffffe3c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="9110d267454a88f5bda2094f00"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@empty, 0x0, 0x4, 0x1, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x4}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}}, 0x50) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r5, 0x0, 0x0, 0x20000000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000040)=ANY=[@ANYRESDEC=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x4040095}, 0x40010) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) 17.556131018s ago: executing program 43 (id=2292): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, 0x0, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x3ff, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0xd, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x400, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x0, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x2, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x5, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xfff, 0x421, 0x3ff, 0x2, 0xd, 0x7, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f00000001c0)=@xdp={0x2c, 0xdd89, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 17.538177948s ago: executing program 44 (id=2297): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000005e00019eb17738540600000000000000", @ANYRES32=0x0, @ANYRES8=r0], 0x1c}], 0x1, 0x0, 0x0, 0x810}, 0x0) recvfrom(r0, 0x0, 0x0, 0x200, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000bc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000001440)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a380400000e0a010800000000000000000500000608000440000000020900010073797a30000000000900010073797a3100000000c80203806801008064010180da00010021a9a0a63ef4cf7c0b8086e3b53d562ca5610cea612c986c7e2e1c792bb23c7fb30b0c07aba419ece1658e503dccde38bda53217e9cfa5a354bcf34641029c2ca1605fb46f5eab5bb1bfdc40510c21bca7e3c165e247d3e9580747e24364738db58e8ae0cb729018f34f62ff91e328f648b316d841bbbebc19f61a39b311bc98abcffb46eea0e77529b831347992a31bd035040a67558395b212ef07d05957fd77e359b26db0cf8cf094556bd6ca65401f88e363ed27ce208a790aa9b475ff9aff854be76f847ef7d0d90a3dd11663f686eaae5199a1edf16bb723f1000084000100f6f7a457c080f087512734de79d9f861f8595f54754b65b6c47e9e0ce388776c38b6877b2ff6955a7331aa4203287ba115626f5d472da9b16d0af72e0d476be179e0d5f186c5b02f55319f8b3782bd2c9e8ac46990179a4bcfd110b0f12837a72e37781f1dfa4550546709a349ecc542dca53ec47f492d064f98115013a27a66440000801c0007800a00010071756575650000000c00028006000240007d00000900090073797a31000000000900090073797a30000000000c000440000000000000003c2c0000800900090073797a3100000000080003400000000312000640b10c0e6822cea52ae3504a1432900000ec000080e8000a80280002800900020073797a31000000000900020073797a30000000000900020073797a31000000001c0002800900020073797a30000000000900020073797a310000000093000100b9b268375a61c6533d1d4d9abbaab5a773dd7e24a96f89221aad1db25e2a2bfd01177932002cc6c07481e547f4696a1df09f0f6f6975d75ccbd81c46686f49f7991f2f1d21bec2e2fe83e235ed73b74abb2f23d924a57810080dcc999de7a3316f7a3d850bce308194563f5097637faea65ae019b87c606d20ef6cfa1e151dd19a8530a3b0fc660a79da062254b1d3000c000280080003400000000308000440000000020800044000000002240103802001008000010180300002800900020073797a310000000008000340000000010800034000000003080001808cc36d3174a0a2b300000003160001004a6f18ec3175b00c6a2e6db8994dc56d2d19000064000280080003400000000108000180fffffffc0900020073797a32000000000900020073797a32000000000900020073797a300000000008000180fffffffc0900020073797a31000000000900020073797a31000000000900020073797a30000000001900010027c2787e42d285d50a6acbec90421c277c39791bc300000028000280080003400000000108000180fffffffd08000340000000040900020073797a31000000000c00028008000180fffffffe1c0002801400028008000180fffffffd08000180fffffffd04000280080004400000000094010000090a010300000000000000000200000908000740000000310c00104000000000000000057c000d401c3c133d863400967bb71158d8299743a869deb5de606e1f17784a1aae6ad2e86fc9def4ffc61f900f75670846371188bb471b9106ea2800ff4c4463b96d687f46fd3d05e9ee68be32e1d4db54bd4b2bea73550dbeea2e9bb5c5207c8395750451708889ccbb601f2091b41f72606ec141d0ecc29b35719408000a400000000108000f4000000001a80009809400028044000180080001400000000008000140000000010800014000000003080001400000009708000140000000020800014000000009080001400000000708000140000000044c000180080001408000000008000140000000400800014000000009080001100000000e080001400000000a0800014000000002080001400000000108000140000004010800014000000001080001400000000908000140000000081c0012800c00018008000100666962000c000180080001006677640008000c408000000108000640ffffff000900010073797a30000000001c000000120a01040000000000000000020000090800034000000004140000001100010000000000000000000000000a000000000000000000"], 0x610}, 0x1, 0x0, 0x0, 0x4004010}, 0x4000) socket$inet6(0xa, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x40) socket$netlink(0x10, 0x3, 0x8000000004) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x5a0, 0x0, 0xffffff80, 0x178, 0xd0040000, 0x178, 0x4d0, 0x22b, 0x258, 0x4d0, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x300, 0x368, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{0x94}, {0x25, 0x0, 0x1}, {0x0, 0x40}, {}, {0x0, 0x7, 0x8}, {}, {0x0, 0x0, 0xfd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x4}, {}, {0x6}, {}, {0x9}, {}, {}, {}, {0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x80000000}, {0x870}, {}, {}, {}, {0x2, 0xfe}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x3, 0x10}, {}, {}, {0xfffe, 0x7, 0x4}, {0x0, 0x0, 0x1}, {0x0, 0x1}, {0x8, 0x8, 0x0, 0xfffffffc}, {}, {0x0, 0xfc, 0xe4}, {0x0, 0x0, 0xff}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x4, 0x8a}, {}, {}, {}, {0x0, 0x4}]}}, @common=@inet=@socket1={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1c, 0x7, 0x279, 0x2, 'netbios-ns\x00', 'syz1\x00', {0x170}}}}, {{@ipv6={@private2, @empty, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xffffff00], 'vlan1\x00', 'pim6reg1\x00', {}, {0xff}, 0x0, 0x9, 0x1, 0x12}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x11, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x1f, 0x9, &(0x7f0000000000)=ANY=[@ANYRES16=r2], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x11}, 0xfffffffffffffe3c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="9110d267454a88f5bda2094f00"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@empty, 0x0, 0x4, 0x1, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x4}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}}, 0x50) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r5, 0x0, 0x0, 0x20000000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000040)=ANY=[@ANYRESDEC=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x4040095}, 0x40010) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) 17.515548688s ago: executing program 45 (id=2295): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 12.03835293s ago: executing program 1 (id=2305): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newpolicy={0x13c, 0x13, 0x101, 0x0, 0x0, {{@in=@rand_addr=0x64010102, @in=@rand_addr=0x64010102, 0x100, 0xd, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x8}, {0x0, 0x1, 0x0, 0x6}, 0xfffffffe}, [@tmpl={0x84, 0x5, [{{@in6=@remote, 0x4d2, 0x2b}, 0xa, @in=@loopback, 0x0, 0x0, 0x1, 0x1, 0x5, 0x2, 0x80000001}, {{@in=@dev={0xac, 0x14, 0x14, 0x18}, 0x4d4, 0x2b}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x1e}, 0x0, 0x4, 0x1, 0x3, 0x0, 0x2, 0x6}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 11.589450871s ago: executing program 1 (id=2307): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x7, 0x80000000}, {0x6, 0x0, 0x4}]}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) 11.581111901s ago: executing program 1 (id=2308): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff000000000900000085000000360000001801000020646c2500000000003020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000001700000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x405}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x23, &(0x7f0000000240)="0100400871a7832e6b7303c3cd59", 0x0, 0x1000000, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) 10.677658393s ago: executing program 3 (id=2310): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000050000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x4098884, &(0x7f0000000380)={0xa, 0x4e1d, 0x4, @mcast2}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) 10.653866613s ago: executing program 1 (id=2311): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_int(r0, &(0x7f00000000c0)=0x7, 0x12) 10.597108994s ago: executing program 3 (id=2312): bpf$MAP_CREATE(0x0, 0x0, 0x50) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [0x0, 0xff, 0x0, 0xffffffff], [0xffffffff, 0x0, 0x0, 0xff], 'erspan0\x00', 'geneve1\x00', {}, {0xff}}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0x2000000000000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x4}, 0x20) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x7ff, @local, 0x5, 0x2}, 0x20) getpeername$l2tp6(r0, 0x0, &(0x7f0000000240)) 10.526053127s ago: executing program 3 (id=2313): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e22, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x7d, &(0x7f0000000300)={r2, @in={{0x2, 0x4e22, @private=0xa010100}}, 0x1005, 0x402}, 0x90) 9.666980287s ago: executing program 3 (id=2314): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0xfffffffc, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x15}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44004) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) 71.841868ms ago: executing program 3 (id=2315): r0 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000003900250825bd7000fadbdf250f0000001c0007800800028004"], 0x30}, 0x1, 0x0, 0x0, 0x4050}, 0x0) r4 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) close(r4) 63.508028ms ago: executing program 1 (id=2316): r0 = socket$inet6_tcp(0xa, 0x1, 0x6) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x6) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @local, 0xb}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00f100", 0x14, 0x6, 0xff, @local, @local, {[], {{0x4e23, 0x4e22, 0x2, 0x1, 0x0, 0x0, 0x5, 0x18, 0x1000}}}}}}}, 0x0) 40.993369ms ago: executing program 3 (id=2317): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg$sock(r0, &(0x7f00000048c0)=[{{&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x3, 0x0, {0xa, 0x4e23, 0x0, @private2, 0x1}}}, 0x80, 0x0}}], 0x1, 0x24050070) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000010000108bd7000f7dbdf250000000000", @ANYRES32=0x0, @ANYBLOB="2e2002000000000004002b8008001b"], 0x2c}, 0x1, 0x0, 0x0, 0x20048050}, 0x20000090) socket$igmp6(0xa, 0x3, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x40000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f00000000c0)={0x18, 0x0, {0x4, @local, 'veth0_to_team\x00'}}, 0x1e) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}, 0x1e) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0x4, @remote, 'veth0_virt_wifi\x00'}}, 0x1e) ioctl$XFS_IOC_SCRUB_METADATA(0xffffffffffffffff, 0xc040583c, &(0x7f00000004c0)={0x0, 0x121, 0x7, 0x2f, 0x6}) r5 = socket$igmp(0x2, 0x3, 0x2) getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) accept$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0xfffffffd, @empty, 0x3}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) 0s ago: executing program 1 (id=2318): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff07000000000000000000008500000011"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4db}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$nci(r0, 0x0, 0x6) write$nci(r0, &(0x7f0000000300)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x11}, 0x14) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000200)={&(0x7f00000001c0)=""/45, 0x20000, 0x800, 0x8}, 0x20) read$nci(r0, &(0x7f0000000200), 0x100) write$nci(r0, &(0x7f0000000300)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1}, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000200), 0x100) write$nci(r0, &(0x7f0000000300)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2}, 0x5) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x703, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x5c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x28, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) write$nci(r0, &(0x7f0000000380)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x2, {0x1, 0x7, 0x0, 0x3}}, 0x7) getpid() socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, 0x0, 0x4000000) syz_emit_ethernet(0x2e, &(0x7f00000007c0)={@random="e90c610faca2", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0xf, 0x11, 0x0, @empty, @empty}, {0x0, 0xfffe, 0xc, 0x0, @gue={{0x1, 0x0, 0x2, 0x1, 0x0, @void}}}}}}}, 0x0) syz_emit_ethernet(0x8f, &(0x7f0000000300)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x81, 0x0, 0x2, 0x8, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e1f, 0x6d, 0x0, @opaque="4c8cf50bfa61a54413f9205fee44b4676b72e953de01f9237aeb80540ce89f7a065bd911cfd077c1e2e8f20e01573da43b061118122b31a0ed44f21935d0de261cad5b5bec810baa766f586202be0af4d26d0d19222ce3615e02f9bc88bd3229fe647bd95e"}}}}}, 0x0) kernel console output (not intermixed with test programs): promiscuous mode [ 178.065792][ T4482] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.094818][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 178.096673][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 178.098331][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 178.100054][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 178.115526][ T1516] hid-generic 0005:057C:0306.000D: unknown main item tag 0x0 [ 178.117172][ T1516] hid-generic 0005:057C:0306.000D: unknown main item tag 0x0 [ 178.118588][ T1516] hid-generic 0005:057C:0306.000D: unknown main item tag 0x0 [ 178.120109][ T1516] hid-generic 0005:057C:0306.000D: unbalanced collection at end of report description [ 178.122541][ T1516] hid-generic: probe of 0005:057C:0306.000D failed with error -22 [ 178.162686][ T4482] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.166512][ T7272] device veth0_macvtap entered promiscuous mode [ 178.170057][ T7272] device veth1_macvtap entered promiscuous mode [ 178.234496][ T4482] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.237640][ T7272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.239680][ T7272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.245125][ T7272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.246870][ T7272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.248534][ T7272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.250269][ T7272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.252798][ T7272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.254738][ T7272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.256808][ T7272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.258920][ T7272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.264265][ T7272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.266240][ T7272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.268849][ T7272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.270393][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 178.272638][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 178.274205][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 178.276043][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 178.280225][ T7272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.282568][ T7272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.284744][ T7272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.286854][ T7272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.288677][ T7272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.291029][ T7272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.294578][ T7272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.296790][ T7272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.298526][ T7272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.307586][ T7272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.309669][ T7272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.312232][ T7272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.315158][ T7272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.318459][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 178.320513][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 178.323931][ T7272] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.325693][ T7272] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.327398][ T7272] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.329192][ T7272] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.393705][ T4482] bond0: (slave netdevsim0): Releasing backup interface [ 178.434587][ T4482] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.449071][ T3901] binder: release 7451:7452 transaction 63 out, still active [ 178.484408][ T3901] binder: undelivered TRANSACTION_COMPLETE [ 178.485581][ T3901] binder: send failed reply for transaction 70 to 7451:7459 [ 178.514814][ T7159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.516404][ T7159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.517961][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 178.521857][ T3901] binder: undelivered TRANSACTION_COMPLETE [ 178.522886][ T3901] binder: undelivered TRANSACTION_ERROR: 29189 [ 178.524027][ T3901] binder: send failed reply for transaction 63, target dead [ 178.541659][ T7159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.543193][ T7159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.545001][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 178.601052][ T4381] hid-generic 0005:057C:0306.000E: unknown main item tag 0x0 [ 178.602485][ T4381] hid-generic 0005:057C:0306.000E: unknown main item tag 0x0 [ 178.603712][ T4381] hid-generic 0005:057C:0306.000E: unknown main item tag 0x0 [ 178.604967][ T4381] hid-generic 0005:057C:0306.000E: unbalanced collection at end of report description [ 178.607035][ T4381] hid-generic: probe of 0005:057C:0306.000E failed with error -22 [ 178.713910][ T7520] netlink: 4 bytes leftover after parsing attributes in process `syz.8.953'. [ 178.774558][ T7531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.782538][ T7531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.036061][ T7542] Bluetooth: MGMT ver 1.22 [ 179.149032][ T7554] binder: 7553:7554 tried to acquire reference to desc 0, got 1 instead [ 179.173399][ T4482] tipc: Left network mode [ 179.254216][ T7563] binder_alloc: 7553: binder_alloc_buf, no vma [ 179.256186][ T7563] binder: cannot allocate buffer: vma cleared, target dead or dying [ 179.256228][ T7563] binder: 7553:7563 transaction call to 7553:0 failed 82/29189/-3, size 0-0 line 3247 [ 179.339182][ T4376] hid-generic 0005:057C:0306.000F: unknown main item tag 0x0 [ 179.340680][ T4376] hid-generic 0005:057C:0306.000F: unknown main item tag 0x0 [ 179.348192][ T4376] hid-generic 0005:057C:0306.000F: unknown main item tag 0x0 [ 179.349612][ T4376] hid-generic 0005:057C:0306.000F: unbalanced collection at end of report description [ 179.356835][ T4376] hid-generic: probe of 0005:057C:0306.000F failed with error -22 [ 179.728287][ T7596] device syzkaller0 entered promiscuous mode [ 179.979741][ T4376] binder: release 7553:7554 transaction 75 out, still active [ 179.981143][ T4376] binder: undelivered TRANSACTION_COMPLETE [ 180.006227][ T7631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.007943][ T7631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.541981][ T7] hid-generic 0005:057C:0306.0010: unknown main item tag 0x0 [ 180.544207][ T7] hid-generic 0005:057C:0306.0010: unbalanced collection at end of report description [ 180.546093][ T7] hid-generic: probe of 0005:057C:0306.0010 failed with error -22 [ 181.477154][ T7667] binder: 7666:7667 tried to acquire reference to desc 0, got 1 instead [ 181.585941][ T7669] binder_alloc: 7666: binder_alloc_buf, no vma [ 182.879446][ T7673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.881169][ T7673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.430195][ T4377] hid-generic 0005:057C:0306.0011: unknown main item tag 0x0 [ 183.432024][ T4377] hid-generic 0005:057C:0306.0011: unbalanced collection at end of report description [ 183.433911][ T4377] hid-generic: probe of 0005:057C:0306.0011 failed with error -22 [ 187.371970][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.373210][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 190.530328][ T7689] device syzkaller1 entered promiscuous mode [ 190.573177][ T7695] binder: 7692:7695 tried to acquire reference to desc 0, got 1 instead [ 190.683123][ T7704] binder_alloc: 7692: binder_alloc_buf, no vma [ 190.684308][ T7704] binder_debug: 8 callbacks suppressed [ 190.684321][ T7704] binder: cannot allocate buffer: vma cleared, target dead or dying [ 190.685320][ T7704] binder: 7692:7704 transaction call to 7692:0 failed 106/29189/-3, size 0-0 line 3247 [ 190.719765][ T7697] batman_adv: batadv0: Adding interface: ipvlan2 [ 190.721016][ T7697] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.730740][ T7697] batman_adv: batadv0: Interface activated: ipvlan2 [ 190.868071][ T7713] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1004'. [ 190.996289][ T7719] device syzkaller0 entered promiscuous mode [ 191.095130][ T7719] tipc: Started in network mode [ 191.096240][ T7719] tipc: Node identity 324ddf4ea695, cluster identity 4711 [ 191.097964][ T7719] tipc: Enabled bearer , priority 0 [ 191.104922][ T7718] tipc: Resetting bearer [ 191.197705][ T7730] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1009'. [ 191.202792][ T7718] tipc: Disabling bearer [ 191.206272][ T7728] netlink: 'syz.8.1011': attribute type 10 has an invalid length. [ 191.341318][ T7728] team0 (unregistering): Port device team_slave_0 removed [ 191.357222][ T7728] team0 (unregistering): Port device team_slave_1 removed [ 191.359050][ T7728] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.360532][ T7728] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.374565][ T7737] Cannot find add_set index 0 as target [ 191.386358][ T7728] team0 (unregistering): Port device bridge0 removed [ 191.403857][ T4377] binder: release 7692:7695 transaction 99 out, still active [ 191.405357][ T4377] binder: undelivered TRANSACTION_COMPLETE [ 191.481565][ T4377] binder: undelivered TRANSACTION_ERROR: 29189 [ 191.482673][ T4377] binder: send failed reply for transaction 99, target dead [ 191.524065][ T7729] netlink: 72 bytes leftover after parsing attributes in process `syz.8.1011'. [ 191.526380][ T7733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1012'. [ 191.530243][ T7733] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.532285][ T7733] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.533958][ T7733] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.535615][ T7733] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.546619][ T7734] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1011'. [ 193.259154][ T4417] input: syz0 as /devices/virtual/misc/uhid/0005:057C:0306.0012/input/input7 [ 193.266264][ T4417] hid-generic 0005:057C:0306.0012: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 193.313474][ T7792] fido_id[7792]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 193.470570][ T6688] input: syz0 as /devices/virtual/misc/uhid/0005:057C:0306.0013/input/input8 [ 193.473466][ T6688] hid-generic 0005:057C:0306.0013: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 193.506158][ T7797] fido_id[7797]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 193.604833][ T7803] Cannot find add_set index 0 as target [ 202.607923][ T7796] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1031'. [ 202.611198][ T7796] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.613084][ T7796] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.614637][ T7796] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.616220][ T7796] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.626170][ T7806] device ip6gre1 entered promiscuous mode [ 202.636987][ T7816] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1036'. [ 202.638709][ T7816] (unnamed net_device) (uninitialized): option lacp_active: invalid value (5) [ 202.696633][ T7824] device syzkaller0 entered promiscuous mode [ 202.726138][ T4417] input: syz0 as /devices/virtual/misc/uhid/0005:057C:0306.0014/input/input9 [ 202.742246][ T4417] hid-generic 0005:057C:0306.0014: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 202.900648][ T7837] fido_id[7837]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 213.760535][ T7864] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1052'. [ 213.792518][ T7863] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1054'. [ 213.794136][ T7863] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1054'. [ 213.802838][ T7869] netlink: 'syz.9.1056': attribute type 1 has an invalid length. [ 213.818302][ T7863] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 213.820063][ T7863] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 213.825937][ T7863] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 213.827686][ T7863] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 213.831233][ T7863] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 213.836878][ T7863] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1054'. [ 213.845159][ T7871] tipc: Started in network mode [ 213.846455][ T7871] tipc: Node identity 4eecb53aafdf, cluster identity 4711 [ 213.860989][ T7871] tipc: Enabled bearer , priority 0 [ 214.172317][ T4429] af_packet: tpacket_rcv: packet too big, clamped from 24 to 4294967272. macoff=96 [ 214.179462][ T7880] device syzkaller0 entered promiscuous mode [ 214.268163][ T7891] tipc: Resetting bearer [ 214.286299][ T7870] tipc: Resetting bearer [ 214.372072][ T7870] tipc: Disabling bearer [ 214.715997][ T7913] device syzkaller0 entered promiscuous mode [ 214.762933][ T4482] device hsr_slave_0 left promiscuous mode [ 214.802360][ T4482] device hsr_slave_1 left promiscuous mode [ 214.861594][ T4482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.863243][ T4482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.865320][ T4482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.866614][ T4482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.871796][ T4482] device bridge_slave_1 left promiscuous mode [ 214.872974][ T4482] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.925369][ T4482] device bridge_slave_0 left promiscuous mode [ 214.926641][ T4482] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.969962][ T4482] device hsr_slave_0 left promiscuous mode [ 215.001704][ T4482] device hsr_slave_1 left promiscuous mode [ 215.081514][ T4482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.083044][ T4482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.084844][ T4482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.086290][ T4482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.087979][ T4482] device bridge_slave_1 left promiscuous mode [ 215.089259][ T4482] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.122562][ T4482] device bridge_slave_0 left promiscuous mode [ 215.124006][ T4482] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.271576][ T4482] device veth1_macvtap left promiscuous mode [ 215.272748][ T4482] device veth0_macvtap left promiscuous mode [ 215.273730][ T4482] device veth1_vlan left promiscuous mode [ 215.274743][ T4482] device veth0_vlan left promiscuous mode [ 215.361584][ T4482] device veth1_macvtap left promiscuous mode [ 215.362820][ T4482] device veth0_macvtap left promiscuous mode [ 215.363987][ T4482] device veth1_vlan left promiscuous mode [ 215.365118][ T4482] device veth0_vlan left promiscuous mode [ 217.503843][ T4482] team0 (unregistering): Port device team_slave_1 removed [ 217.662252][ T4482] team0 (unregistering): Port device team_slave_0 removed [ 217.822027][ T4482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.023032][ T4482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.466066][ T4482] bond0 (unregistering): Released all slaves [ 221.753483][ T4482] team0 (unregistering): Port device team_slave_1 removed [ 221.913794][ T4482] team0 (unregistering): Port device team_slave_0 removed [ 222.073035][ T4482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.282454][ T4482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.776468][ T4482] bond0 (unregistering): Released all slaves [ 224.075775][ T7911] device syzkaller0 entered promiscuous mode [ 224.134027][ T7912] tipc: Enabled bearer , priority 0 [ 224.150583][ T7932] tipc: Resetting bearer [ 224.154463][ T7910] tipc: Resetting bearer [ 224.213124][ T7910] tipc: Disabling bearer [ 224.266130][ T7948] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1074'. [ 224.276291][ T7950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1075'. [ 224.301612][ T7950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1075'. [ 224.317426][ T7950] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 224.319045][ T7950] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 224.320672][ T7950] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 224.323481][ T7950] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 224.326043][ T7950] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 224.330237][ T7950] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1075'. [ 224.709144][ T8003] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1088'. [ 224.762349][ T8006] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1089'. [ 224.763990][ T8006] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1089'. [ 224.778225][ T8006] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 224.780170][ T8006] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 224.795424][ T8006] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 224.797351][ T8006] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 224.828966][ T8006] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 224.863939][ T8006] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1089'. [ 225.189730][ T8048] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1100'. [ 225.305267][ T8060] device syzkaller0 entered promiscuous mode [ 225.328287][ T8062] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1102'. [ 225.733512][ T8062] device veth1_to_team entered promiscuous mode [ 225.765018][ T8062] device veth1_to_team left promiscuous mode [ 226.133631][ T8122] tipc: Started in network mode [ 226.139984][ T8122] tipc: Node identity d6ea1c2c0a79, cluster identity 4711 [ 226.148326][ T8122] tipc: Enabled bearer , priority 0 [ 226.157692][ T8122] device syzkaller0 entered promiscuous mode [ 226.176063][ T8122] tipc: Resetting bearer [ 226.188400][ T8119] tipc: Resetting bearer [ 226.273953][ T8119] tipc: Disabling bearer [ 226.646883][ T8180] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 226.768240][ T8198] device batadv_slave_1 entered promiscuous mode [ 226.775986][ T8198] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 226.777711][ T8197] device batadv_slave_1 left promiscuous mode [ 226.844615][ T8203] tipc: Started in network mode [ 226.845989][ T8203] tipc: Node identity 1e82f5ee48fc, cluster identity 4711 [ 226.847564][ T8203] tipc: Enabled bearer , priority 0 [ 226.850822][ T8203] device syzkaller0 entered promiscuous mode [ 226.861090][ T8203] tipc: Resetting bearer [ 226.865579][ T8202] tipc: Resetting bearer [ 226.942041][ T8202] tipc: Disabling bearer [ 227.023380][ T8213] netlink: 'syz.5.1138': attribute type 1 has an invalid length. [ 227.056810][ T8213] bond2: (slave veth3): Enslaving as an active interface with a down link [ 227.071062][ T8213] bond2: (slave veth0_to_bond): making interface the new active one [ 227.078807][ T8213] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 227.090220][ T8213] device macvlan2 entered promiscuous mode [ 227.095172][ T8213] device bond2 entered promiscuous mode [ 227.096351][ T8213] device veth0_to_bond entered promiscuous mode [ 227.098023][ T8213] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 227.100050][ T8213] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 227.103959][ T8213] device bond2 left promiscuous mode [ 227.105090][ T8213] device veth0_to_bond left promiscuous mode [ 227.578631][ T8251] tipc: Started in network mode [ 227.579599][ T8251] tipc: Node identity f6d6c3513a61, cluster identity 4711 [ 227.584078][ T8251] tipc: Enabled bearer , priority 0 [ 227.597266][ T8251] device syzkaller0 entered promiscuous mode [ 227.607718][ T8251] tipc: Resetting bearer [ 227.935639][ T8250] tipc: Resetting bearer [ 228.022246][ T8250] tipc: Disabling bearer [ 228.262928][ T8298] ieee802154 phy0 wpan0: encryption failed: -22 [ 228.369478][ T8310] netdevsim netdevsim9 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 228.371223][ T8310] netdevsim netdevsim9 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 228.373875][ T8310] netdevsim netdevsim9 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 228.375988][ T8310] netdevsim netdevsim9 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 228.379533][ T8310] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 228.407573][ T8316] tipc: Enabled bearer , priority 0 [ 228.443883][ T8316] tipc: Resetting bearer [ 228.514630][ T8315] tipc: Disabling bearer [ 228.710073][ T8351] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 228.716837][ T8351] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 228.810607][ T8365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.819694][ T8365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.868593][ T8372] tipc: Enabled bearer , priority 0 [ 228.903345][ T8372] tipc: Resetting bearer [ 228.973558][ T8371] tipc: Disabling bearer [ 229.438857][ T8438] __nla_validate_parse: 28 callbacks suppressed [ 229.438875][ T8438] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1191'. [ 229.448274][ T8438] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.450091][ T8438] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.451818][ T8438] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.453398][ T8438] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.483911][ T8438] SET target dimension over the limit! [ 229.539340][ T8450] tipc: Enabled bearer , priority 0 [ 229.567408][ T8454] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1195'. [ 229.583346][ T8450] tipc: Resetting bearer [ 229.669729][ T8449] tipc: Disabling bearer [ 229.674992][ T8469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.679300][ T8469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.848942][ T8494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1208'. [ 229.865812][ T8494] SET target dimension over the limit! [ 229.996377][ T8513] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1213'. [ 230.049335][ T8517] tipc: Enabled bearer , priority 0 [ 230.123142][ T8516] tipc: Disabling bearer [ 230.289017][ T8551] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1224'. [ 230.295055][ T8551] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.296827][ T8551] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.298251][ T8551] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.299657][ T8551] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.323272][ T8551] Cannot find add_set index 0 as target [ 230.358956][ T8562] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1227'. [ 230.443955][ T8572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.445609][ T8572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.455235][ T8576] tipc: Enabled bearer , priority 0 [ 230.534142][ T8574] tipc: Disabling bearer [ 230.710848][ T8620] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1245'. [ 230.746544][ T8620] SET target dimension over the limit! [ 230.877376][ T8642] tipc: Enabled bearer , priority 0 [ 230.944034][ T8641] tipc: Disabling bearer [ 231.047201][ T8671] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1256'. [ 231.264743][ T8698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1266'. [ 231.271396][ T8698] SET target dimension over the limit! [ 231.545600][ T8726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.549642][ T8726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.032556][ T8773] tipc: Enabled bearer , priority 0 [ 232.142848][ T8771] tipc: Disabling bearer [ 232.149074][ T8787] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1278'. [ 232.154676][ T8787] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.156178][ T8787] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.157817][ T8787] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.159258][ T8787] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.169162][ T8787] Cannot find add_set index 0 as target [ 232.409734][ T8820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.420510][ T8820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.490078][ T8833] tipc: Enabled bearer , priority 0 [ 232.592679][ T8832] tipc: Disabling bearer [ 232.601138][ T8842] Cannot find add_set index 0 as target [ 233.108094][ T8913] tipc: Enabled bearer , priority 0 [ 233.208359][ T8923] SET target dimension over the limit! [ 233.233083][ T8911] tipc: Disabling bearer [ 233.330116][ T8938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.333128][ T8938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.619047][ T8973] tipc: Enabled bearer , priority 0 [ 233.714080][ T8971] tipc: Disabling bearer [ 233.721365][ T8980] SET target dimension over the limit! [ 234.446836][ T9067] device syzkaller0 entered promiscuous mode [ 235.403879][ T9149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.405521][ T9149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.520814][ T9164] __nla_validate_parse: 4 callbacks suppressed [ 235.520826][ T9164] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1365'. [ 235.529229][ T9164] Cannot find add_set index 0 as target [ 235.623690][ T9178] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1369'. [ 235.626304][ T9178] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1369'. [ 235.661331][ T9183] device syzkaller0 entered promiscuous mode [ 235.982662][ T9221] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1379'. [ 235.998760][ T9221] SET target dimension over the limit! [ 236.198646][ T9244] tipc: Enabled bearer , priority 0 [ 236.222491][ T9244] device syzkaller0 entered promiscuous mode [ 236.229973][ T9244] tipc: Resetting bearer [ 236.240638][ T9247] device syzkaller0 entered promiscuous mode [ 236.248105][ T9241] tipc: Resetting bearer [ 236.302347][ T9241] tipc: Disabling bearer [ 236.914726][ T9313] tipc: Enabled bearer , priority 0 [ 236.917596][ T9313] device syzkaller0 entered promiscuous mode [ 236.928436][ T9313] tipc: Resetting bearer [ 236.938361][ T9312] tipc: Resetting bearer [ 236.982872][ T9312] tipc: Disabling bearer [ 237.056308][ T9328] device syzkaller0 entered promiscuous mode [ 237.659513][ T9387] device syzkaller0 entered promiscuous mode [ 237.906792][ T9414] device syzkaller0 entered promiscuous mode [ 238.004180][ T9428] tipc: Enabling of bearer rejected, failed to enable media [ 238.546231][ T9481] tipc: Enabling of bearer rejected, failed to enable media [ 238.577535][ T9484] device syzkaller0 entered promiscuous mode [ 239.091668][ T9531] device syzkaller0 entered promiscuous mode [ 239.269410][ T9545] device syzkaller0 entered promiscuous mode [ 239.564047][ T9577] device syzkaller0 entered promiscuous mode [ 239.688775][ T9588] device syzkaller0 entered promiscuous mode [ 239.693832][ T9588] tipc: Enabled bearer , priority 0 [ 239.699889][ T9588] tipc: Resetting bearer [ 239.714943][ T9587] tipc: Resetting bearer [ 239.762582][ T9587] tipc: Disabling bearer [ 239.981871][ T9605] device syzkaller0 entered promiscuous mode [ 240.040321][ T9610] device syzkaller0 entered promiscuous mode [ 240.285819][ T9615] device syzkaller0 entered promiscuous mode [ 240.387473][ T9622] HTB: quantum of class FFF10001 is small. Consider r2q change. [ 240.625125][ T9644] device syzkaller0 entered promiscuous mode [ 240.631384][ T9641] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1497'. [ 241.012001][ T9655] device syzkaller0 entered promiscuous mode [ 241.256019][ T9664] HTB: quantum of class FFF10001 is small. Consider r2q change. [ 241.445217][ T9681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.446885][ T9681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.468106][ T9682] device syzkaller0 entered promiscuous mode [ 241.696761][ T9699] tipc: Enabled bearer , priority 0 [ 241.708491][ T9699] device syzkaller0 entered promiscuous mode [ 241.718594][ T9699] tipc: Resetting bearer [ 241.724995][ T9698] tipc: Resetting bearer [ 241.774614][ T9698] tipc: Disabling bearer [ 241.958531][ T9708] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1518'. [ 242.273345][ T9750] binder: BINDER_SET_CONTEXT_MGR already set [ 242.279729][ T9750] binder: 9749:9750 ioctl 4018620d 20004a80 returned -16 [ 242.298159][ T9752] tipc: Enabled bearer , priority 0 [ 242.298928][ T9750] binder: 9749:9750 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 242.303971][ T9752] device syzkaller0 entered promiscuous mode [ 242.309818][ T9750] binder: 9750 RLIMIT_NICE not set [ 242.317872][ T9752] tipc: Resetting bearer [ 242.321399][ T9751] tipc: Resetting bearer [ 242.352133][ T9758] binder: 9749:9758 got transaction to invalid handle, 3 [ 242.353355][ T9758] binder: 9758:9749 cannot find target node [ 242.355784][ T9758] binder: 9749:9758 transaction call to 0:0 failed 108/29201/-22, size 0-0 line 3062 [ 242.382019][ T9751] tipc: Disabling bearer [ 242.467467][ T9768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.478438][ T9768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.896391][ T9790] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1531'. [ 242.913656][ T9792] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1532'. [ 243.104041][ T7500] binder: undelivered TRANSACTION_ERROR: 29201 [ 243.171400][ T9813] device syzkaller0 entered promiscuous mode [ 243.444036][ T9842] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1544'. [ 243.447774][ T9841] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input10 [ 243.514106][ T9850] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1548'. [ 243.687970][ T9874] tipc: Enabled bearer , priority 0 [ 243.698173][ T9874] device syzkaller0 entered promiscuous mode [ 243.728662][ T9874] tipc: Resetting bearer [ 243.749844][ T9873] tipc: Resetting bearer [ 243.812255][ T9873] tipc: Disabling bearer [ 243.939486][ T9907] device syzkaller0 entered promiscuous mode [ 243.955515][ T9912] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1557'. [ 243.963473][ T9907] tipc: Enabled bearer , priority 0 [ 243.968358][ T9906] tipc: Resetting bearer [ 244.012775][ T9906] tipc: Disabling bearer [ 244.028094][ T9917] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1561'. [ 244.170828][ T9929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.174791][ T9929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.429883][ T9954] tipc: Enabled bearer , priority 0 [ 244.438514][ T9954] device syzkaller0 entered promiscuous mode [ 244.478464][ T9954] tipc: Resetting bearer [ 244.484941][ T9953] tipc: Resetting bearer [ 244.575149][ T9953] tipc: Disabling bearer [ 244.577374][ T9958] device syzkaller0 entered promiscuous mode [ 244.759743][ T9980] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1573'. [ 244.826814][ T9989] device syzkaller0 entered promiscuous mode [ 244.854248][ T9989] tipc: Enabled bearer , priority 0 [ 244.856286][ T9984] tipc: Resetting bearer [ 244.924837][ T9984] tipc: Disabling bearer [ 245.055577][T10018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.059610][T10018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.274329][T10049] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1592'. [ 245.298487][T10049] SET target dimension over the limit! [ 245.337139][T10055] device syzkaller0 entered promiscuous mode [ 245.341170][T10055] tipc: Enabled bearer , priority 0 [ 245.348664][T10052] tipc: Resetting bearer [ 245.383334][T10052] tipc: Disabling bearer [ 245.591335][T10081] device syzkaller0 entered promiscuous mode [ 245.707613][T10098] tipc: Enabled bearer , priority 0 [ 245.710690][T10089] device syzkaller0 entered promiscuous mode [ 245.720889][T10089] tipc: Resetting bearer [ 245.724880][T10104] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1607'. [ 245.775215][ T4333] Bluetooth: hci5: command 0x0406 tx timeout [ 245.883886][T10088] tipc: Resetting bearer [ 245.954240][T10088] tipc: Disabling bearer [ 246.002588][T10109] tipc: Enabled bearer , priority 0 [ 246.014102][T10127] device syzkaller0 entered promiscuous mode [ 246.061803][T10108] tipc: Resetting bearer [ 246.093998][T10139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.095611][T10139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.144207][T10108] tipc: Disabling bearer [ 246.268207][T10164] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1621'. [ 246.317624][T10173] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1623'. [ 246.488559][T10198] device ip6gre1 entered promiscuous mode [ 246.784378][T10226] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1637'. [ 246.841254][T10239] SET target dimension over the limit! [ 246.927151][T10253] device syzkaller0 entered promiscuous mode [ 247.553496][T10310] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1651'. [ 247.827005][T10326] device syzkaller0 entered promiscuous mode [ 248.007096][T10331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.008738][T10331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.594472][T10336] device syzkaller0 entered promiscuous mode [ 248.799400][T10340] device ip6gre2 entered promiscuous mode [ 248.813082][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.814224][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 248.829855][T10342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1666'. [ 248.834556][T10342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1666'. [ 249.507285][T10200] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 249.603828][T10358] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1673'. [ 249.604541][T10360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.607003][T10360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.619454][T10361] device syzkaller0 entered promiscuous mode [ 249.647093][T10358] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1673'. [ 249.744412][T10369] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1678'. [ 249.803864][T10377] device syzkaller0 entered promiscuous mode [ 249.806925][T10377] tipc: Enabled bearer , priority 0 [ 249.845160][T10376] tipc: Resetting bearer [ 249.873909][T10376] tipc: Disabling bearer [ 249.880818][T10379] Cannot find add_set index 0 as target [ 249.940499][T10381] device syzkaller0 entered promiscuous mode [ 250.086246][T10392] device ip6gre1 entered promiscuous mode [ 250.169664][T10402] device syzkaller0 entered promiscuous mode [ 250.209413][T10406] device syzkaller0 entered promiscuous mode [ 250.283954][T10406] tipc: Enabled bearer , priority 0 [ 250.286263][T10405] tipc: Resetting bearer [ 250.332640][T10405] tipc: Disabling bearer [ 250.350334][T10410] Cannot find add_set index 0 as target [ 250.410898][T10414] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 250.446037][T10418] device ip6gre1 entered promiscuous mode [ 250.448201][T10422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.457746][T10422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.464308][T10421] device syzkaller0 entered promiscuous mode [ 250.609789][T10433] device syzkaller0 entered promiscuous mode [ 250.776795][T10447] __nla_validate_parse: 8 callbacks suppressed [ 250.776807][T10447] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1712'. [ 250.778205][T10443] tipc: Enabled bearer , priority 0 [ 250.784971][T10442] tipc: Disabling bearer [ 250.899009][ T4333] Bluetooth: hci6: command 0x0406 tx timeout [ 250.899041][ T48] Bluetooth: hci8: command 0x0406 tx timeout [ 250.984368][T10466] device syzkaller0 entered promiscuous mode [ 250.999882][T10470] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1723'. [ 251.050017][T10470] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1723'. [ 251.116397][T10474] device syzkaller0 entered promiscuous mode [ 251.141049][T10482] tipc: Enabled bearer , priority 0 [ 251.144884][T10481] tipc: Disabling bearer [ 251.156783][T10484] device ip6gre1 entered promiscuous mode [ 251.308543][T10505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.313426][T10505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.324110][T10507] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1735'. [ 251.325878][T10507] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1735'. [ 251.346369][T10507] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1735'. [ 251.353516][T10507] 8021q: adding VLAN 0 to HW filter on device bond4 [ 251.440387][T10521] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1738'. [ 251.510605][T10521] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1738'. [ 251.543159][T10533] device syzkaller0 entered promiscuous mode [ 251.546877][T10533] tipc: Enabled bearer , priority 0 [ 251.555651][T10533] tipc: Resetting bearer [ 251.558106][T10531] tipc: Resetting bearer [ 251.612538][T10531] tipc: Disabling bearer [ 251.728285][T10555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1745'. [ 251.977577][T10579] device syzkaller1 entered promiscuous mode [ 252.008014][T10592] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1753'. [ 252.086735][T10600] device ip6gre2 entered promiscuous mode [ 252.121916][T10605] device syzkaller0 entered promiscuous mode [ 252.131963][T10605] tipc: Enabled bearer , priority 0 [ 252.154624][T10605] tipc: Resetting bearer [ 252.174565][T10610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.176335][T10610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.407010][T10603] tipc: Resetting bearer [ 252.457078][T10603] tipc: Disabling bearer [ 252.520730][T10637] device syzkaller1 entered promiscuous mode [ 252.583457][T10643] device syzkaller0 entered promiscuous mode [ 263.225435][T10652] __nla_validate_parse: 3 callbacks suppressed [ 263.225449][T10652] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1770'. [ 263.249351][T10652] device ip6gre2 entered promiscuous mode [ 263.276048][T10678] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1778'. [ 263.358410][T10694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.361043][T10694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.506760][T10706] device syzkaller0 entered promiscuous mode [ 263.514360][T10706] tipc: Enabled bearer , priority 0 [ 263.526224][T10706] tipc: Resetting bearer [ 263.528203][T10719] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1790'. [ 263.541157][T10705] tipc: Resetting bearer [ 263.582186][T10705] tipc: Disabling bearer [ 263.604250][T10727] ip_tables: iptables: counters copy to user failed while replacing table [ 263.680358][T10736] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1793'. [ 263.890529][T10762] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1802'. [ 264.034832][T10779] device syzkaller0 entered promiscuous mode [ 264.044692][T10779] tipc: Enabled bearer , priority 0 [ 264.060813][T10779] tipc: Resetting bearer [ 264.075787][T10773] tipc: Resetting bearer [ 264.123587][T10773] tipc: Disabling bearer [ 264.158123][T10794] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1809'. [ 264.218275][T10801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.227670][T10801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.269288][T10813] netlink: 68 bytes leftover after parsing attributes in process `syz.9.1816'. [ 264.322907][T10818] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1819'. [ 264.546108][T10841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1826'. [ 264.547929][T10847] device syzkaller0 entered promiscuous mode [ 264.564938][T10847] tipc: Enabled bearer , priority 0 [ 264.571276][T10847] tipc: Resetting bearer [ 264.580675][T10845] tipc: Resetting bearer [ 264.664786][T10845] tipc: Disabling bearer [ 264.668105][T10857] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1830'. [ 265.048341][T10917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.054664][T10917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.159029][T10926] device syzkaller0 entered promiscuous mode [ 265.170196][T10926] tipc: Enabled bearer , priority 0 [ 265.195361][T10925] tipc: Resetting bearer [ 265.243731][T10925] tipc: Disabling bearer [ 265.388403][T10955] device syzkaller0 entered promiscuous mode [ 265.778816][T10987] device syzkaller0 entered promiscuous mode [ 265.786674][T10987] tipc: Enabled bearer , priority 0 [ 265.800773][T10986] tipc: Resetting bearer [ 265.905795][T10986] tipc: Disabling bearer [ 265.930673][T11011] SET target dimension over the limit! [ 266.000993][T11024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.003583][T11024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.152485][T11044] device syzkaller0 entered promiscuous mode [ 266.448793][T11056] device syzkaller0 entered promiscuous mode [ 266.453255][T11056] tipc: Enabled bearer , priority 0 [ 266.457499][T11055] tipc: Resetting bearer [ 266.505333][T11055] tipc: Disabling bearer [ 266.574548][T11092] SET target dimension over the limit! [ 266.779047][T11131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.780669][T11131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.835266][T11135] device syzkaller0 entered promiscuous mode [ 267.259439][T11164] device syzkaller0 entered promiscuous mode [ 267.262506][T11166] syzkaller0: refused to change device tx_queue_len [ 267.263926][T11170] tipc: Enabled bearer , priority 0 [ 267.276381][T11145] tipc: Resetting bearer [ 267.305239][T11145] tipc: Disabling bearer [ 267.429732][T11195] Cannot find add_set index 0 as target [ 267.662378][T11222] device syzkaller0 entered promiscuous mode [ 267.674467][T11226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.679925][T11226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.015941][T11255] device syzkaller0 entered promiscuous mode [ 268.021579][T11258] tipc: Enabled bearer , priority 0 [ 268.058605][T11239] tipc: Resetting bearer [ 268.143014][T11239] tipc: Disabling bearer [ 268.201231][T11269] Cannot find add_set index 0 as target [ 268.405524][T11304] Illegal XDP return value 4294967274 on prog (id 78) dev syz_tun, expect packet loss! [ 268.485467][T11315] __nla_validate_parse: 24 callbacks suppressed [ 268.485480][T11315] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1940'. [ 268.494060][T11315] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1940'. [ 268.516232][T11314] device syzkaller0 entered promiscuous mode [ 268.554081][T11325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.555624][T11324] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1947'. [ 268.555846][T11325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.564619][T11321] device syzkaller0 entered promiscuous mode [ 268.568439][T11321] tipc: Enabled bearer , priority 0 [ 268.631396][T11334] SET target dimension over the limit! [ 268.946383][T11320] tipc: Resetting bearer [ 269.042545][T11320] tipc: Disabling bearer [ 269.130302][T11377] netlink: 116 bytes leftover after parsing attributes in process `syz.9.1953'. [ 269.149525][T11379] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1954'. [ 269.189483][T11379] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1954'. [ 269.196352][T11383] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1956'. [ 269.245130][T11389] device syzkaller0 entered promiscuous mode [ 269.307446][T11399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.309381][T11399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.675262][T11407] device syzkaller0 entered promiscuous mode [ 269.677466][T11410] tipc: Enabled bearer , priority 0 [ 269.685324][T11400] tipc: Resetting bearer [ 269.732873][T11400] tipc: Disabling bearer [ 269.741345][T11419] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1966'. [ 269.750504][T11422] atomic_op 0000000004c9fbd3 conn xmit_atomic 0000000000000000 [ 269.755184][T11422] netlink: 'syz.5.1965': attribute type 1 has an invalid length. [ 269.761334][T11422] device bond4 entered promiscuous mode [ 269.762940][T11422] 8021q: adding VLAN 0 to HW filter on device bond4 [ 269.768812][T11419] Cannot find add_set index 0 as target [ 269.773387][T11422] bond4: (slave bridge1): making interface the new active one [ 269.774899][T11422] device bridge1 entered promiscuous mode [ 269.776615][T11422] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 269.779377][ T7158] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 269.922749][T11438] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1970'. [ 269.927127][T11438] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1970'. [ 270.051140][T11452] device syzkaller0 entered promiscuous mode [ 270.059788][T11452] tipc: Enabled bearer , priority 0 [ 270.081217][T11451] tipc: Resetting bearer [ 270.099999][T11459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.107341][T11459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.172605][T11451] tipc: Disabling bearer [ 270.184945][T11455] device syzkaller0 entered promiscuous mode [ 270.361539][T11472] SET target dimension over the limit! [ 286.077038][ T4345] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 286.079140][ T4345] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 286.080236][ T4330] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 286.080916][ T4345] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 286.084123][ T4345] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 286.085609][ T4345] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 286.086310][ T4330] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 286.087071][ T4345] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 286.088980][ T4330] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 286.092582][ T4345] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 286.100205][ T4330] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 286.104276][ T4330] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 286.106574][ T4330] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 286.108525][ T4330] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 286.110073][ T4330] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 286.112116][ T4330] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 286.114358][ T4330] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 286.115984][ T4330] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 286.118129][ T4341] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 286.118852][ T4342] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 286.119952][ T4341] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 286.122322][ T4330] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 286.129134][ T4330] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 286.136204][ T4330] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 286.731645][ T48] Bluetooth: hci0: command 0x0406 tx timeout [ 288.091708][ T4345] Bluetooth: hci4: command 0x0409 tx timeout [ 288.172085][ T4345] Bluetooth: hci7: command 0x0409 tx timeout [ 288.173321][ T4345] Bluetooth: hci3: command 0x0409 tx timeout [ 288.174402][ T4345] Bluetooth: hci1: command 0x0409 tx timeout [ 290.171588][ T48] Bluetooth: hci4: command 0x041b tx timeout [ 290.251540][ T4345] Bluetooth: hci1: command 0x041b tx timeout [ 290.251583][ T48] Bluetooth: hci3: command 0x041b tx timeout [ 290.252573][ T4345] Bluetooth: hci7: command 0x041b tx timeout [ 291.435044][T11469] __nla_validate_parse: 2 callbacks suppressed [ 291.435062][T11469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1983'. [ 291.437955][T11470] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1982'. [ 291.448113][T11485] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1986'. [ 291.670191][T11511] chnl_net:caif_netlink_parms(): no params data found [ 291.747258][T11541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.748871][T11541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.789780][T11503] chnl_net:caif_netlink_parms(): no params data found [ 291.793744][T11509] chnl_net:caif_netlink_parms(): no params data found [ 291.862326][T11511] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.863723][T11511] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.865447][T11511] device bridge_slave_0 entered promiscuous mode [ 291.867574][T11511] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.868726][T11511] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.870375][T11511] device bridge_slave_1 entered promiscuous mode [ 291.920348][T11504] chnl_net:caif_netlink_parms(): no params data found [ 291.967908][T11511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.973325][T11511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.251614][ T4345] Bluetooth: hci4: command 0x040f tx timeout [ 292.303849][ T4429] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.305610][ T4429] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.307427][ T4429] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 292.326902][T11511] team0: Port device team_slave_0 added [ 292.331350][T11509] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.331829][ T4342] Bluetooth: hci3: command 0x040f tx timeout [ 292.333072][ T4345] Bluetooth: hci1: command 0x040f tx timeout [ 292.333831][ T4342] Bluetooth: hci7: command 0x040f tx timeout [ 292.335040][T11509] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.337712][T11509] device bridge_slave_0 entered promiscuous mode [ 292.339954][T11509] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.341109][T11509] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.344979][T11509] device bridge_slave_1 entered promiscuous mode [ 292.352417][T11511] team0: Port device team_slave_1 added [ 292.392651][ T4429] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.394408][ T4429] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.396099][ T4429] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 292.413670][T11503] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.414891][T11503] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.416436][T11503] device bridge_slave_0 entered promiscuous mode [ 292.418574][T11503] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.419832][T11503] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.422311][T11503] device bridge_slave_1 entered promiscuous mode [ 292.434959][T11509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.449498][T11504] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.450883][T11504] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.455330][T11504] device bridge_slave_0 entered promiscuous mode [ 292.462327][T11511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.463565][T11511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.468321][T11511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.476141][T11509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.477846][T11558] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1997'. [ 292.483870][T11504] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.485238][T11504] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.486993][T11504] device bridge_slave_1 entered promiscuous mode [ 292.490882][T11503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.497556][T11503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.499591][T11511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.500951][T11511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.505842][T11511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.563026][ T4429] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.565016][ T4429] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.566921][ T4429] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 292.623409][T11511] device hsr_slave_0 entered promiscuous mode [ 292.671826][T11511] device hsr_slave_1 entered promiscuous mode [ 292.711561][T11511] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 292.712939][T11511] Cannot create hsr debugfs directory [ 292.715295][T11509] team0: Port device team_slave_0 added [ 292.720217][T11509] team0: Port device team_slave_1 added [ 292.727082][T11503] team0: Port device team_slave_0 added [ 292.730012][T11503] team0: Port device team_slave_1 added [ 292.738127][T11504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.741011][T11504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.772590][ T4429] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.774731][ T4429] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.776451][ T4429] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 292.790003][T11503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.791337][T11503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.797069][T11503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.809901][T11503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.811111][T11503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.817359][T11503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.826398][T11509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.827592][T11509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.831991][T11509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.840590][T11504] team0: Port device team_slave_0 added [ 292.842952][T11504] team0: Port device team_slave_1 added [ 292.846302][T11509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.847513][T11509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.852330][T11509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.885231][T11504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.886605][T11504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.891258][T11504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.942846][T11509] device hsr_slave_0 entered promiscuous mode [ 292.986832][T11509] device hsr_slave_1 entered promiscuous mode [ 293.041569][T11509] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 293.043185][T11509] Cannot create hsr debugfs directory [ 293.055365][T11504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.056649][T11504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.061026][T11504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.088895][T11568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.090652][T11568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.112835][T11504] device hsr_slave_0 entered promiscuous mode [ 293.152230][T11504] device hsr_slave_1 entered promiscuous mode [ 293.191560][T11504] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 293.192987][T11504] Cannot create hsr debugfs directory [ 293.263931][T11503] device hsr_slave_0 entered promiscuous mode [ 293.281656][T11503] device hsr_slave_1 entered promiscuous mode [ 293.321974][T11503] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 293.323332][T11503] Cannot create hsr debugfs directory [ 293.446312][ T4429] tipc: Left network mode [ 293.981288][T11615] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2007'. [ 294.149099][T11632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.151562][T11632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.331985][ T4345] Bluetooth: hci4: command 0x0419 tx timeout [ 294.411644][ T48] Bluetooth: hci1: command 0x0419 tx timeout [ 294.411786][ T4345] Bluetooth: hci3: command 0x0419 tx timeout [ 294.412801][ T48] Bluetooth: hci7: command 0x0419 tx timeout [ 295.355782][T11725] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2014'. [ 295.433261][ T4429] device hsr_slave_0 left promiscuous mode [ 295.472065][ T4429] device hsr_slave_1 left promiscuous mode [ 295.511959][T11758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.514391][T11758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.542259][ T4429] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.543664][ T4429] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.545478][ T4429] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.546865][ T4429] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.548388][ T4429] device bridge_slave_1 left promiscuous mode [ 295.549608][ T4429] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.592872][ T4429] device bridge_slave_0 left promiscuous mode [ 295.594091][ T4429] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.801592][ T4429] device veth1_macvtap left promiscuous mode [ 295.802859][ T4429] device veth0_macvtap left promiscuous mode [ 295.804037][ T4429] device veth1_vlan left promiscuous mode [ 295.805084][ T4429] device veth0_vlan left promiscuous mode [ 295.922235][ T4429] bond1 (unregistering): (slave geneve2): Releasing backup interface [ 295.973882][ T4429] bond1 (unregistering): Released all slaves [ 297.994599][ T4429] team0 (unregistering): Port device team_slave_1 removed [ 298.153582][ T4429] team0 (unregistering): Port device team_slave_0 removed [ 298.322487][ T4429] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.523451][ T4429] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.832894][ T4429] bond0 (unregistering): Released all slaves [ 300.567312][T11806] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2022'. [ 300.624824][T11810] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2023'. [ 300.642372][T11810] device bond5 entered promiscuous mode [ 300.895523][T11824] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2026'. [ 300.898517][T11824] device ip6gre2 entered promiscuous mode [ 300.933020][T11833] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2027'. [ 302.054559][ T4429] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.056566][ T4429] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.058474][ T4429] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 302.143856][ T4429] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.145838][ T4429] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.147749][ T4429] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 302.262958][ T4429] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.264761][ T4429] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.267694][ T4429] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 302.333890][ T4429] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.335674][ T4429] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.337408][ T4429] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 302.432327][T11886] tipc: Enabling of bearer rejected, failed to enable media [ 302.684088][ T4429] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.686021][ T4429] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.688153][ T4429] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 302.753181][ T4429] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.754998][ T4429] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.756757][ T4429] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 302.842444][ T4429] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.844260][ T4429] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.846101][ T4429] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 302.923287][ T4429] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.925176][ T4429] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.927021][ T4429] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 303.014606][T11951] ip_tables: iptables: counters copy to user failed while replacing table [ 303.163980][ T4429] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.165909][ T4429] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.167683][ T4429] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 303.206005][T11968] tipc: Enabling of bearer rejected, failed to enable media [ 303.253187][ T4429] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.255056][ T4429] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.256968][ T4429] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 303.344024][ T4429] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.346017][ T4429] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.348057][ T4429] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 303.473905][ T4429] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.475798][ T4429] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.477584][ T4429] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 303.662482][ T4429] tipc: Left network mode [ 303.728147][T12033] ip_tables: iptables: counters copy to user failed while replacing table [ 303.791745][ T4429] tipc: Left network mode [ 303.921582][ T4429] tipc: Left network mode [ 304.298989][T12099] ip_tables: iptables: counters copy to user failed while replacing table [ 306.163784][T12202] ip_tables: iptables: counters copy to user failed while replacing table [ 307.876696][T11511] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 307.903036][T11511] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 307.973355][T11511] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 308.264466][T11511] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 308.313679][T11509] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 308.343708][T11509] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 308.387676][T12341] ip_tables: iptables: counters copy to user failed while replacing table [ 308.422538][T11504] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 308.482802][T11509] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 308.533066][T11509] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 308.785532][T11504] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 308.823650][T11504] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 308.910790][T11504] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 309.278683][T11503] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 309.300518][T11511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.320319][T11504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.324979][T11503] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 309.344900][T11503] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 309.441616][ T4429] device hsr_slave_0 left promiscuous mode [ 309.491806][ T4429] device hsr_slave_1 left promiscuous mode [ 309.571774][ T4429] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.573235][ T4429] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.575048][ T4429] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.576306][ T4429] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.577803][ T4429] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 309.578968][ T4429] batman_adv: batadv0: Removing interface: ipvlan2 [ 309.580396][ T4429] device bridge_slave_1 left promiscuous mode [ 309.588081][ T4429] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.622530][ T4429] device bridge_slave_0 left promiscuous mode [ 309.623821][ T4429] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.653981][ T4429] device hsr_slave_0 left promiscuous mode [ 309.691684][ T4429] device hsr_slave_1 left promiscuous mode [ 309.761577][ T4429] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.762980][ T4429] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.764599][ T4429] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.765898][ T4429] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.767995][ T4429] device bridge_slave_1 left promiscuous mode [ 309.769221][ T4429] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.802145][ T4429] device bridge_slave_0 left promiscuous mode [ 309.803394][ T4429] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.844687][ T4429] device hsr_slave_0 left promiscuous mode [ 309.881658][ T4429] device hsr_slave_1 left promiscuous mode [ 309.971548][ T4429] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.973003][ T4429] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.974646][ T4429] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.976121][ T4429] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.977944][ T4429] device bridge_slave_1 left promiscuous mode [ 309.979110][ T4429] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.015461][ T4429] device bridge_slave_0 left promiscuous mode [ 310.016636][ T4429] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.231592][ T4429] device veth1_macvtap left promiscuous mode [ 310.232713][ T4429] device veth0_macvtap left promiscuous mode [ 310.233774][ T4429] device veth1_vlan left promiscuous mode [ 310.234837][ T4429] device veth0_vlan left promiscuous mode [ 310.252070][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.253289][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 310.391590][ T4429] device veth1_macvtap left promiscuous mode [ 310.392723][ T4429] device veth0_macvtap left promiscuous mode [ 310.393989][ T4429] device veth1_vlan left promiscuous mode [ 310.395081][ T4429] device veth0_vlan left promiscuous mode [ 310.551561][ T4429] device veth1_macvtap left promiscuous mode [ 310.552740][ T4429] device veth0_macvtap left promiscuous mode [ 310.553917][ T4429] device veth1_vlan left promiscuous mode [ 310.555034][ T4429] device veth0_vlan left promiscuous mode [ 310.709620][ T4429] bond5 (unregistering): Released all slaves [ 310.713450][ T4429] bond4 (unregistering): Released all slaves [ 310.842749][ T4429] bond3 (unregistering): Released all slaves [ 310.846351][ T4429] bond2 (unregistering): Released all slaves [ 310.882628][ T4429] bond1 (unregistering): (slave geneve2): Releasing backup interface [ 310.924731][ T4429] bond1 (unregistering): Released all slaves [ 312.993919][ T4429] team0 (unregistering): Port device team_slave_1 removed [ 313.193593][ T4429] team0 (unregistering): Port device team_slave_0 removed [ 313.352648][ T4429] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.552765][ T4429] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.853098][ T4429] bond0 (unregistering): Released all slaves [ 315.183731][ T4429] bond2 (unregistering): Released all slaves [ 315.222477][ T4429] bond1 (unregistering): (slave geneve2): Releasing backup interface [ 315.264350][ T4429] bond1 (unregistering): Released all slaves [ 317.243074][ T4429] team0 (unregistering): Port device team_slave_1 removed [ 317.402924][ T4429] team0 (unregistering): Port device team_slave_0 removed [ 317.565172][ T4429] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 317.776099][ T4429] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.082413][ T4429] bond0 (unregistering): Released all slaves [ 320.045074][ T4429] bond4 (unregistering): Released all slaves [ 320.084358][ T4429] bond3 (unregistering): Released all slaves [ 320.088474][ T4429] bond2 (unregistering): Released all slaves [ 320.122446][ T4429] bond1 (unregistering): (slave geneve2): Releasing backup interface [ 320.835294][ T4429] bond1 (unregistering): Released all slaves [ 323.101886][ T4429] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.311948][ T4429] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.493067][ T4429] bond0 (unregistering): Released all slaves [ 324.779140][T11511] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.783122][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 324.784770][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 324.787136][T11503] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 324.831650][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 324.833655][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 324.839316][ T7159] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.840614][ T7159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.867390][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 324.869054][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 324.870586][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 324.881077][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 324.883141][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 324.884721][ T4482] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.886024][ T4482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.889828][T11504] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.898669][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 324.925228][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 324.927231][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 324.928999][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 324.930692][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 324.943099][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 324.944874][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 324.956319][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 324.958049][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 324.959828][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 324.972063][ T4972] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.973362][ T4972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.975032][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 324.976667][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 324.986868][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 324.988605][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 324.990295][ T7159] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.991612][ T7159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.998913][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 325.000658][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 325.009922][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 325.012498][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 325.014824][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 325.014827][T11511] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 325.017827][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 325.019427][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 325.020957][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 325.021220][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 325.050871][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 325.072255][T11509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.081096][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 325.083282][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 325.085469][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 325.147271][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 325.149244][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 325.150940][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 325.156518][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 325.159390][T11509] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.166697][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 325.168391][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 325.169990][ T4972] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.171235][ T4972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.175453][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 325.177003][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 325.184281][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 325.185980][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 325.197592][T11503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.207953][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 325.209561][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 325.211029][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 325.215521][T11504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 325.217261][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 325.218850][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 325.220435][ T1575] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.221764][ T1575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.230118][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 325.250847][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 325.256542][T11503] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.270706][ T7158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 325.273519][ T7158] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 325.275214][ T7158] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 325.276596][ T7158] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 325.278690][ T7158] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 325.292900][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 325.294689][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 325.302488][T11511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.306330][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 325.307958][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 325.309592][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 325.311251][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 325.315192][ T7159] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.316492][ T7159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.318126][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 325.331096][T11509] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 325.333730][T11509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 325.335626][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 325.337401][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 325.339053][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 325.340747][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 325.345757][ T7159] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.346985][ T7159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.367765][ T7158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 325.379967][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 325.382305][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 325.383981][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 325.410185][ T7158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 325.412185][ T7158] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 325.413934][ T7158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 325.415612][ T7158] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 325.421371][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 325.441204][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 325.443512][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 325.445103][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 325.446730][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 325.448388][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 325.450038][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 325.453260][T11503] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 325.457295][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 325.458881][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 325.460757][T11511] device veth0_vlan entered promiscuous mode [ 325.477409][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 325.478864][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 325.499665][T11511] device veth1_vlan entered promiscuous mode [ 325.523535][T11504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.556209][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 325.557936][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 325.559541][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 325.562167][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 325.572990][T11511] device veth0_macvtap entered promiscuous mode [ 325.575574][T11511] device veth1_macvtap entered promiscuous mode [ 325.584521][T11511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.586451][T11511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.588621][T11511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.590711][T11511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.594346][T11511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.598297][T11511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.599695][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 325.601362][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 325.603486][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 325.606017][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 325.616126][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 325.617865][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 325.623709][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 325.625125][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 325.628260][T11509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.636552][T12452] chnl_net:caif_netlink_parms(): no params data found [ 325.655699][T11511] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.657263][T11511] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.658748][T11511] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.660369][T11511] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.689769][T11503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.697187][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 325.698664][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 325.700039][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 325.705250][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 325.721127][T12452] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.729220][T12452] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.734412][T12452] device bridge_slave_0 entered promiscuous mode [ 325.761008][T12452] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.763947][T12452] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.768036][T12452] device bridge_slave_1 entered promiscuous mode [ 325.770506][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 325.773111][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 325.806067][ T7158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 325.807829][ T7158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 325.810466][ T7158] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 325.813405][ T7158] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 325.836054][T11509] device veth0_vlan entered promiscuous mode [ 325.850772][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 325.856501][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 325.863187][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 325.864694][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 325.871149][T11503] device veth0_vlan entered promiscuous mode [ 325.890108][T12452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.898551][T12452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.910801][ T4431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.912755][ T4431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.915033][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 325.927424][T12452] team0: Port device team_slave_0 added [ 325.931198][T12452] team0: Port device team_slave_1 added [ 325.965832][ T7158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.967246][ T7158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.974189][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 325.975947][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 325.978055][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 325.980754][T11509] device veth1_vlan entered promiscuous mode [ 325.986808][T11503] device veth1_vlan entered promiscuous mode [ 326.007070][T12452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.008314][T12452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.013810][T12452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.031406][ T7158] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 326.033195][ T7158] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 326.034749][ T7158] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 326.036389][ T7158] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 326.037915][ T7158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 326.039532][ T7158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 326.048707][T11504] device veth0_vlan entered promiscuous mode [ 326.056653][T12452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.057971][T12452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.066984][T12452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.069826][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 326.071761][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 326.073448][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 326.075169][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 326.076874][ T7158] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 326.078443][ T7158] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 326.091036][T11509] device veth0_macvtap entered promiscuous mode [ 326.096450][T11504] device veth1_vlan entered promiscuous mode [ 326.103408][T11503] device veth0_macvtap entered promiscuous mode [ 326.112685][T11503] device veth1_macvtap entered promiscuous mode [ 326.133709][T11509] device veth1_macvtap entered promiscuous mode [ 326.171744][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 326.173549][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 326.175136][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 326.176706][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 326.178259][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 326.179910][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 326.193954][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 326.195740][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 326.233034][T12452] device hsr_slave_0 entered promiscuous mode [ 326.245572][T12452] device hsr_slave_1 entered promiscuous mode [ 326.292583][T11504] device veth0_macvtap entered promiscuous mode [ 326.294930][T11503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.296806][T11503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.298593][T11503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.300413][T11503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.310524][T11503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.316605][T11504] device veth1_macvtap entered promiscuous mode [ 326.326445][T11509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.328363][T11509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.330092][T11509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.339820][T11509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.346017][T11509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.347873][T11509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.352243][T11509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.353881][ T7158] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 326.355616][ T7158] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 326.358634][ T7158] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 326.360660][ T7158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 326.370209][ T7158] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 326.373089][ T7158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 326.378253][T11504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.380078][T11504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.382221][T11504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.384005][T11504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.385618][T11504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.387304][T11504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.388916][T11504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.390641][T11504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.393479][T11504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.403505][T11503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.405301][T11503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.407041][T11503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.408762][T11503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.411093][T11503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.438051][T11503] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.439574][T11503] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.441171][T11503] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.456918][T11503] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.460258][ T7158] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 326.463361][ T7158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 326.465149][ T7158] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 326.466778][ T7158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 326.479832][T11509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.482667][T11509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.484234][T11509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.486038][T11509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.487778][T11509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.489612][T11509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.500463][T11509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.517882][ T7158] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 326.519668][ T7158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 326.522477][T11504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.524340][T11504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.525952][T11504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.527717][T11504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.529382][T11504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.531131][T11504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.536796][T11504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.538587][T11504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.556414][T11504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.564627][ T7158] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 326.566619][ T7158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 326.569556][T11509] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.571107][T11509] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.575313][T11509] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.581901][T11509] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.636334][T11504] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.637963][T11504] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.639478][T11504] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.640997][T11504] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.960801][ T7158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.966427][ T7158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.968049][ T7158] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 326.970561][ T7158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.978821][ T7158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.984196][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 327.034790][ T4431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.036268][ T4431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.037745][ T7158] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 327.138161][ T4342] Bluetooth: hci0: command 0x0409 tx timeout [ 327.162879][ T4390] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.164523][ T4390] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.166112][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 327.182230][ T1575] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.183804][ T1575] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.186899][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 327.211293][ T7158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.213105][ T7158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.214568][ T7158] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 327.560383][T12615] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1990'. [ 327.624081][ T4429] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.626008][ T4429] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.627911][ T4429] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 327.654832][T12661] binder: 12660:12661 tried to acquire reference to desc 0, got 1 instead [ 327.863461][ T4429] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.866106][ T4429] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.867856][ T4429] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 327.971733][ T4429] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.973621][ T4429] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.976028][ T4429] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 328.082812][ T4429] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.084764][ T4429] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.086877][ T4429] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 328.098030][T12695] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2098'. [ 328.146661][T12452] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 328.225207][T12452] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 328.257990][T12452] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 328.304451][T12452] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 328.409322][T12452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.428745][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 328.430418][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 328.436180][T12452] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.448154][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 328.450075][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 328.452345][ T4390] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.453780][ T4390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.461169][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 328.466883][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 328.473514][ T4390] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.474947][ T4390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.498033][ T14] binder: release 12660:12671 transaction 120 out, still active [ 328.499420][ T14] binder: undelivered TRANSACTION_COMPLETE [ 328.500510][ T14] binder: send failed reply for transaction 113 to 12660:12661 [ 328.503326][ T14] binder: undelivered TRANSACTION_COMPLETE [ 328.504466][ T14] binder: undelivered TRANSACTION_ERROR: 29189 [ 328.507459][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 328.509263][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 328.512009][ T14] binder: send failed reply for transaction 120, target dead [ 328.513930][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 328.515744][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 328.518216][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 328.519858][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 328.552211][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 328.555617][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 328.557317][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 328.568560][T12452] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 328.573867][T12452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 328.586945][ T4429] tipc: Left network mode [ 328.588956][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 328.590854][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 328.593126][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 328.617036][T12730] device syzkaller0 entered promiscuous mode [ 328.759115][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 328.760539][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 328.859982][T12772] binder: 12771:12772 tried to acquire reference to desc 0, got 1 instead [ 329.211744][ T4342] Bluetooth: hci0: command 0x041b tx timeout [ 329.696968][ T14] binder: release 12771:12772 transaction 125 out, still active [ 329.698487][ T14] binder: undelivered TRANSACTION_COMPLETE [ 329.699677][ T14] binder: send failed reply for transaction 132 to 12771:12781 [ 329.701023][ T14] binder: undelivered TRANSACTION_COMPLETE [ 330.628083][T12822] binder: 12821:12822 tried to acquire reference to desc 0, got 1 instead [ 331.291682][ T4342] Bluetooth: hci0: command 0x040f tx timeout [ 332.719429][T12847] binder: 12846:12847 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 332.723545][T12847] binder: 12846:12847 got transaction to invalid handle, 3 [ 333.371525][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 333.770023][T12871] binder: 12870:12871 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 333.774950][T12871] binder: 12870:12871 got transaction to invalid handle, 3 [ 333.776263][T12871] binder_debug: 11 callbacks suppressed [ 333.776276][T12871] binder: 12871:12870 cannot find target node [ 333.778412][T12871] binder: 12870:12871 transaction call to 0:0 failed 148/29201/-22, size 0-0 line 3062 [ 333.788998][ T4375] binder: undelivered TRANSACTION_ERROR: 29201 [ 334.649456][T12895] binder: 12894:12895 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 334.659666][T12895] binder: 12894:12895 got transaction to invalid handle, 3 [ 334.660972][T12895] binder: 12895:12894 cannot find target node [ 334.662309][T12895] binder: 12894:12895 transaction call to 0:0 failed 150/29201/-22, size 0-0 line 3062 [ 334.670622][ T4376] binder: undelivered TRANSACTION_ERROR: 29201 [ 335.610740][T12905] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2172'. [ 335.878634][T12919] binder: 12918:12919 ioctl 4018620d 0 returned -22 [ 335.880244][T12919] binder: 12918:12919 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 335.883257][T12919] binder: 12918:12919 got transaction to invalid handle, 1 [ 335.884918][T12919] binder: 12919:12918 cannot find target node [ 335.886031][T12919] binder: 12918:12919 transaction call to 0:0 failed 153/29201/-22, size 72-24 line 3062 [ 335.940614][T12920] binder: 12918:12920 got transaction to invalid handle, 3 [ 335.942046][T12920] binder: 12920:12918 cannot find target node [ 335.943059][T12920] binder: 12918:12920 transaction call to 0:0 failed 154/29201/-22, size 0-0 line 3062 [ 337.499507][T12928] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2182'. [ 337.816865][T12943] binder: 12942:12943 ioctl 4018620d 0 returned -22 [ 337.818459][T12943] binder: 12942:12943 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 337.821200][T12943] binder: 12942:12943 got transaction to invalid handle, 1 [ 337.880553][T12944] binder: 12942:12944 got transaction to invalid handle, 3 [ 339.057558][T12452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.322619][T12954] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2193'. [ 339.531025][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 339.533633][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 339.579739][T12452] device veth0_vlan entered promiscuous mode [ 339.623539][T12990] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2203'. [ 339.625539][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 339.627532][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 339.640152][T12452] device veth1_vlan entered promiscuous mode [ 339.642548][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 339.644182][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 339.646357][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 339.828807][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 339.830880][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 339.836698][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 339.853520][T12452] device veth0_macvtap entered promiscuous mode [ 339.856315][T12452] device veth1_macvtap entered promiscuous mode [ 339.908472][T12452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.910421][T12452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.914643][T12452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.916507][T12452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.918246][T12452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.920016][T12452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.936715][T12452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.938460][T12452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.940127][T12452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.950052][T12452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.956574][T12452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.969324][ T7158] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 339.971179][ T7158] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 339.976694][ T7158] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 339.978677][ T7158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 339.997097][T12452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.998888][T12452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.000539][T12452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.004111][T12452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.006110][T12452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.008025][T12452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.015317][T12452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.018890][T12452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.020712][T12452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.028485][T12452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.038717][T12452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.103770][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 340.105693][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 340.109146][T12452] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.110642][T12452] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.114238][T12452] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.115660][T12452] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.185562][T13033] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2214'. [ 340.282101][ T7159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.283587][ T7159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.292005][ T7158] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 340.447118][ T7158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.448611][ T7158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.450187][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 340.749166][T13076] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2227'. [ 341.229644][T13139] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2245'. [ 341.234207][T13128] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2239'. [ 341.238297][T13135] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2239'. [ 341.332489][ T4429] device hsr_slave_0 left promiscuous mode [ 341.372877][ T4429] device hsr_slave_1 left promiscuous mode [ 341.441572][ T4429] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.443116][ T4429] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.445340][ T4429] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.447186][ T4429] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.449033][ T4429] device bridge_slave_1 left promiscuous mode [ 341.450545][ T4429] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.502384][ T4429] device bridge_slave_0 left promiscuous mode [ 341.503888][ T4429] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.691768][ T4429] device veth1_macvtap left promiscuous mode [ 341.692929][ T4429] device veth0_macvtap left promiscuous mode [ 341.693994][ T4429] device veth1_vlan left promiscuous mode [ 341.699669][ T4429] device veth0_vlan left promiscuous mode [ 341.789661][ T4429] bond5 (unregistering): Released all slaves [ 341.972333][ T4429] bond4 (unregistering): (slave bridge1): Releasing backup interface [ 341.973987][ T4429] device bridge1 left promiscuous mode [ 342.743833][ T4429] bond4 (unregistering): Released all slaves [ 342.747866][ T4429] bond3 (unregistering): Released all slaves [ 342.882025][ T4429] bond2 (unregistering): (slave veth3): Releasing active interface [ 342.883478][ T4429] bond2 (unregistering): (slave veth3): the permanent HWaddr of slave - e2:42:14:52:20:33 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 342.926241][ T4429] bond2 (unregistering): (slave veth0_to_bond): Releasing active interface [ 342.962312][ T4429] bond2 (unregistering): Released all slaves [ 343.002010][ T4429] bond1 (unregistering): (slave geneve2): Releasing backup interface [ 343.046626][ T4429] bond1 (unregistering): Released all slaves [ 345.083687][ T4429] team0 (unregistering): Port device team_slave_1 removed [ 345.262930][ T4429] team0 (unregistering): Port device team_slave_0 removed [ 345.422464][ T4429] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 345.622524][ T4429] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.923139][ T4429] bond0 (unregistering): Released all slaves [ 347.229183][T13193] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2258'. [ 347.465841][T13225] device syzkaller0 entered promiscuous mode [ 347.470983][T13227] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2271'. [ 358.269947][T13276] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2285'. [ 358.467227][T13295] device syzkaller0 entered promiscuous mode [ 358.508907][T13307] device syzkaller0 entered promiscuous mode [ 359.145655][T13329] xt_bpf: check failed: parse error [ 371.691927][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 371.693118][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 374.340725][ T4345] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 374.347346][ T4345] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 374.349378][ T4345] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 374.351009][ T4330] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 374.352809][ T4330] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 374.355175][ T4345] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 374.356877][ T4330] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 374.358606][ T4330] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 374.360773][ T4330] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 374.362749][ T4330] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 374.364164][ T4330] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 374.365680][ T4330] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 374.381236][ T48] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 374.391012][ T48] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 374.393523][ T48] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 374.396343][ T48] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 374.397932][ T48] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 374.399322][ T48] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 376.411522][ T4342] Bluetooth: hci5: command 0x0409 tx timeout [ 376.411539][ T48] Bluetooth: hci6: command 0x0409 tx timeout [ 376.411757][ T48] Bluetooth: hci2: command 0x0409 tx timeout [ 378.491558][ T48] Bluetooth: hci2: command 0x041b tx timeout [ 378.501496][ T48] Bluetooth: hci5: command 0x041b tx timeout [ 378.502596][ T48] Bluetooth: hci6: command 0x041b tx timeout [ 379.748408][T13336] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2300'. [ 379.750274][T13339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2301'. [ 379.753520][T13339] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.754989][T13339] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.756539][T13339] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.758251][T13339] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.771336][T13341] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2301'. [ 380.110179][T13351] chnl_net:caif_netlink_parms(): no params data found [ 380.571482][ T4330] Bluetooth: hci6: command 0x040f tx timeout [ 380.572644][ T4330] Bluetooth: hci5: command 0x040f tx timeout [ 380.581620][ T48] Bluetooth: hci2: command 0x040f tx timeout [ 381.083651][ T4390] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.108151][T13351] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.109607][T13351] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.115164][T13351] device bridge_slave_0 entered promiscuous mode [ 381.119266][T13351] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.133849][T13351] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.142203][T13351] device bridge_slave_1 entered promiscuous mode [ 381.207009][ T4390] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.218013][T13351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.226966][T13460] device syzkaller0 entered promiscuous mode [ 381.234019][T13351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.253627][T13351] team0: Port device team_slave_0 added [ 381.257280][T13351] team0: Port device team_slave_1 added [ 382.651508][ T4330] Bluetooth: hci2: command 0x0419 tx timeout [ 382.652848][ T4330] Bluetooth: hci5: command 0x0419 tx timeout [ 382.653990][ T4330] Bluetooth: hci6: command 0x0419 tx timeout [ 391.674982][T13356] chnl_net:caif_netlink_parms(): no params data found [ 391.690059][T13351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.691367][T13351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.698253][T13351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.752557][ T4390] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.777383][T13351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.778812][T13351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.792668][T13351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.890503][T13482] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.892060][T13482] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.931251][T13491] [ 391.931753][T13491] ====================================================== [ 391.933116][T13491] WARNING: possible circular locking dependency detected [ 391.934498][T13491] syzkaller #0 Not tainted [ 391.935357][T13491] ------------------------------------------------------ [ 391.936736][T13491] syz.1.2318/13491 is trying to acquire lock: [ 391.937878][T13491] ffff0000f2621350 (&ndev->req_lock){+.+.}-{3:3}, at: nci_start_poll+0x424/0xaa0 [ 391.939679][T13491] [ 391.939679][T13491] but task is already holding lock: [ 391.941076][T13491] ffff0000f2625528 (&genl_data->genl_data_mutex){+.+.}-{3:3}, at: nfc_genl_start_poll+0x1a0/0x2f4 [ 391.943185][T13491] [ 391.943185][T13491] which lock already depends on the new lock. [ 391.943185][T13491] [ 391.945234][T13491] [ 391.945234][T13491] the existing dependency chain (in reverse order) is: [ 391.946893][T13491] [ 391.946893][T13491] -> #3 (&genl_data->genl_data_mutex){+.+.}-{3:3}: [ 391.948539][T13491] __mutex_lock_common+0x1a0/0x1f3c [ 391.949639][T13491] mutex_lock_nested+0x38/0x44 [ 391.950633][T13491] nfc_urelease_event_work+0x108/0x2b8 [ 391.951738][T13491] process_one_work+0x7e4/0x13bc [ 391.952759][T13491] worker_thread+0x8cc/0xfe8 [ 391.953703][T13491] kthread+0x254/0x2e0 [ 391.954563][T13491] ret_from_fork+0x10/0x20 [ 391.955485][T13491] [ 391.955485][T13491] -> #2 (nfc_devlist_mutex){+.+.}-{3:3}: [ 391.956945][T13491] __mutex_lock_common+0x1a0/0x1f3c [ 391.958037][T13491] mutex_lock_nested+0x38/0x44 [ 391.959035][T13491] nfc_register_device+0x48/0x300 [ 391.960082][T13491] nci_register_device+0x6b8/0x7e4 [ 391.961298][T13491] virtual_ncidev_open+0x6c/0xd8 [ 391.962372][T13491] misc_open+0x310/0x388 [ 391.963293][T13491] chrdev_open+0x3d0/0x51c [ 391.964274][T13491] do_dentry_open+0x738/0xf8c [ 391.965242][T13491] vfs_open+0x7c/0x90 [ 391.966091][T13491] path_openat+0x1fc0/0x27a0 [ 391.967061][T13491] do_filp_open+0x198/0x38c [ 391.968011][T13491] do_sys_openat2+0x134/0x3fc [ 391.968966][T13491] __arm64_sys_openat+0x11c/0x150 [ 391.969990][T13491] invoke_syscall+0x98/0x290 [ 391.970920][T13491] el0_svc_common+0x13c/0x258 [ 391.971889][T13491] do_el0_svc+0x5c/0x134 [ 391.972783][T13491] el0_svc+0x58/0x128 [ 391.973620][T13491] el0t_64_sync_handler+0x84/0xf0 [ 391.974671][T13491] el0t_64_sync+0x18c/0x190 [ 391.975587][T13491] [ 391.975587][T13491] -> #1 (nci_mutex){+.+.}-{3:3}: [ 391.976930][T13491] __mutex_lock_common+0x1a0/0x1f3c [ 391.978022][T13491] mutex_lock_nested+0x38/0x44 [ 391.979030][T13491] virtual_nci_close+0x28/0x58 [ 391.980040][T13491] nci_dev_up+0x704/0xaa0 [ 391.980990][T13491] nfc_dev_up+0x138/0x2e0 [ 391.981929][T13491] nfc_genl_dev_up+0x98/0xdc [ 391.982944][T13491] genl_family_rcv_msg_doit+0x210/0x308 [ 391.984139][T13491] genl_rcv_msg+0x424/0x600 [ 391.985129][T13491] netlink_rcv_skb+0x220/0x3ec [ 391.986141][T13491] genl_rcv+0x38/0x50 [ 391.987008][T13491] netlink_unicast+0x5fc/0x80c [ 391.988028][T13491] netlink_sendmsg+0x6f0/0x9d8 [ 391.989040][T13491] ____sys_sendmsg+0x588/0x90c [ 391.989988][T13491] __sys_sendmsg+0x288/0x374 [ 391.990895][T13491] __arm64_sys_sendmsg+0x80/0x94 [ 391.991883][T13491] invoke_syscall+0x98/0x290 [ 391.992761][T13491] el0_svc_common+0x13c/0x258 [ 391.993719][T13491] do_el0_svc+0x5c/0x134 [ 391.994594][T13491] el0_svc+0x58/0x128 [ 391.995452][T13491] el0t_64_sync_handler+0x84/0xf0 [ 391.996471][T13491] el0t_64_sync+0x18c/0x190 [ 391.997399][T13491] [ 391.997399][T13491] -> #0 (&ndev->req_lock){+.+.}-{3:3}: [ 391.998732][T13491] __lock_acquire+0x2808/0x6634 [ 391.999685][T13491] lock_acquire+0x20c/0x638 [ 392.000596][T13491] __mutex_lock_common+0x1a0/0x1f3c [ 392.001616][T13491] mutex_lock_nested+0x38/0x44 [ 392.002597][T13491] nci_start_poll+0x424/0xaa0 [ 392.003551][T13491] nfc_start_poll+0x124/0x284 [ 392.004465][T13491] nfc_genl_start_poll+0x1b0/0x2f4 [ 392.005503][T13491] genl_family_rcv_msg_doit+0x210/0x308 [ 392.006598][T13491] genl_rcv_msg+0x424/0x600 [ 392.007511][T13491] netlink_rcv_skb+0x220/0x3ec [ 392.008481][T13491] genl_rcv+0x38/0x50 [ 392.009318][T13491] netlink_unicast+0x5fc/0x80c [ 392.010263][T13491] netlink_sendmsg+0x6f0/0x9d8 [ 392.011266][T13491] ____sys_sendmsg+0x588/0x90c [ 392.012255][T13491] __sys_sendmsg+0x288/0x374 [ 392.013219][T13491] __arm64_sys_sendmsg+0x80/0x94 [ 392.014246][T13491] invoke_syscall+0x98/0x290 [ 392.015138][T13491] el0_svc_common+0x13c/0x258 [ 392.016079][T13491] do_el0_svc+0x5c/0x134 [ 392.016927][T13491] el0_svc+0x58/0x128 [ 392.017761][T13491] el0t_64_sync_handler+0x84/0xf0 [ 392.018786][T13491] el0t_64_sync+0x18c/0x190 [ 392.019719][T13491] [ 392.019719][T13491] other info that might help us debug this: [ 392.019719][T13491] [ 392.021589][T13491] Chain exists of: [ 392.021589][T13491] &ndev->req_lock --> nfc_devlist_mutex --> &genl_data->genl_data_mutex [ 392.021589][T13491] [ 392.024167][T13491] Possible unsafe locking scenario: [ 392.024167][T13491] [ 392.025520][T13491] CPU0 CPU1 [ 392.026505][T13491] ---- ---- [ 392.027485][T13491] lock(&genl_data->genl_data_mutex); [ 392.028506][T13491] lock(nfc_devlist_mutex); [ 392.029814][T13491] lock(&genl_data->genl_data_mutex); [ 392.031317][T13491] lock(&ndev->req_lock); [ 392.032146][T13491] [ 392.032146][T13491] *** DEADLOCK *** [ 392.032146][T13491] [ 392.033627][T13491] 4 locks held by syz.1.2318/13491: [ 392.034602][T13491] #0: ffff800017a82770 (cb_lock){++++}-{3:3}, at: genl_rcv+0x28/0x50 [ 392.036109][T13491] #1: ffff800017a82588 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0xec/0x600 [ 392.037820][T13491] #2: ffff0000f2625528 (&genl_data->genl_data_mutex){+.+.}-{3:3}, at: nfc_genl_start_poll+0x1a0/0x2f4 [ 392.039901][T13491] #3: ffff0000f2625100 (&dev->mutex){....}-{3:3}, at: nfc_start_poll+0x5c/0x284 [ 392.041664][T13491] [ 392.041664][T13491] stack backtrace: [ 392.042769][T13491] CPU: 1 PID: 13491 Comm: syz.1.2318 Not tainted syzkaller #0 [ 392.044149][T13491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 392.046019][T13491] Call trace: [ 392.046647][T13491] dump_backtrace+0x1c4/0x1f0 [ 392.047502][T13491] show_stack+0x2c/0x3c [ 392.048269][T13491] __dump_stack+0x30/0x40 [ 392.049048][T13491] dump_stack_lvl+0xf4/0x15c [ 392.049849][T13491] dump_stack+0x1c/0x5c [ 392.050593][T13491] print_circular_bug+0x148/0x1b0 [ 392.051484][T13491] check_noncircular+0x264/0x2f8 [ 392.052386][T13491] __lock_acquire+0x2808/0x6634 [ 392.053281][T13491] lock_acquire+0x20c/0x638 [ 392.054119][T13491] __mutex_lock_common+0x1a0/0x1f3c [ 392.055052][T13491] mutex_lock_nested+0x38/0x44 [ 392.055927][T13491] nci_start_poll+0x424/0xaa0 [ 392.056794][T13491] nfc_start_poll+0x124/0x284 [ 392.057686][T13491] nfc_genl_start_poll+0x1b0/0x2f4 [ 392.058671][T13491] genl_family_rcv_msg_doit+0x210/0x308 [ 392.059744][T13491] genl_rcv_msg+0x424/0x600 [ 392.060630][T13491] netlink_rcv_skb+0x220/0x3ec [ 392.061505][T13491] genl_rcv+0x38/0x50 [ 392.062240][T13491] netlink_unicast+0x5fc/0x80c [ 392.063068][T13491] netlink_sendmsg+0x6f0/0x9d8 [ 392.063896][T13491] ____sys_sendmsg+0x588/0x90c [ 392.064787][T13491] __sys_sendmsg+0x288/0x374 [ 392.065615][T13491] __arm64_sys_sendmsg+0x80/0x94 [ 392.066550][T13491] invoke_syscall+0x98/0x290 [ 392.067430][T13491] el0_svc_common+0x13c/0x258 [ 392.068292][T13491] do_el0_svc+0x5c/0x134 [ 392.069085][T13491] el0_svc+0x58/0x128 [ 392.069816][T13491] el0t_64_sync_handler+0x84/0xf0 [ 392.070746][T13491] el0t_64_sync+0x18c/0x190 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 392.105337][T13491] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 392.106876][T13491] nci: nci_start_poll: failed to set local general bytes [ 392.388373][T13482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.399728][T13482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.657048][T13482] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.658736][T13482] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.660400][T13482] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.662364][T13482] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.915158][T13482] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.916769][T13482] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.918436][T13482] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.919956][T13482] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.113580][ T4390] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.352818][T13492] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 395.158018][ T4390] device hsr_slave_0 left promiscuous mode [ 395.193859][ T4390] device hsr_slave_1 left promiscuous mode [ 395.261595][ T4390] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.262969][ T4390] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.264721][ T4390] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.266069][ T4390] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.267637][ T4390] device bridge_slave_1 left promiscuous mode [ 395.268796][ T4390] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.304598][ T4390] device bridge_slave_0 left promiscuous mode [ 395.305781][ T4390] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.431532][ T4390] device veth1_macvtap left promiscuous mode [ 395.432752][ T4390] device veth0_macvtap left promiscuous mode [ 395.433905][ T4390] device veth1_vlan left promiscuous mode [ 395.434977][ T4390] device veth0_vlan left promiscuous mode [ 397.481970][ T4390] team0 (unregistering): Port device team_slave_1 removed [ 397.642277][ T4390] team0 (unregistering): Port device team_slave_0 removed [ 397.811857][ T4390] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 398.031824][ T4390] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 399.552614][ T4390] bond0 (unregistering): Released all slaves