last executing test programs: 2m4.152613775s ago: executing program 3 (id=21178): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@gettaction={0x124, 0x32, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xd5}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x800}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xa2}, @action_gd=@TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff7}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3c87ce5d}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3c2b4f21}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}]}, @action_gd=@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x48010}, 0x20042100) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000002600)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x64, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14, 0x10}}, 0xec}}, 0x0) 2m4.149347049s ago: executing program 3 (id=21179): r0 = socket$unix(0x1, 0x5, 0x0) (async) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async) listen(r1, 0x8) (async) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x9) ppoll(&(0x7f0000000280)=[{r1, 0x3206}, {r0}], 0x2, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000040000000800000008"], 0x48) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r2, r3, 0x26}, 0x10) r4 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r2, &(0x7f0000000240), &(0x7f00000000c0)=@tcp=r4}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000140), &(0x7f0000000480)=@tcp=r4, 0x2}, 0x20) 2m4.125799922s ago: executing program 3 (id=21180): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000180011010affffe5ff000000000a600000ff00ff0600000000"], 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x16}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "0900e600000000208f29d158039b90627d7b60f0d5ca47f33eed46409b7c8722ce020de2b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c76000067af25166c2f0f85f36aa8867406119c010400002e31dea98204000000d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b5142ddf36e2a876a4fc871207bf12a899dc4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459ac3ec9a278df4011773d2f2e6529ed0ad0300000067522477f979360b76d1008000"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0x17, 0x1, 0x14, 0x5}}]}}]}, 0x148}}, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000003c80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000ec0)=""/136, 0x88}, {&(0x7f0000001340)=""/4094, 0xffe}, {&(0x7f0000000040)=""/114, 0x72}], 0x3}, 0x1}, {{0x0, 0x0, 0x0}, 0x7c64}], 0x2, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r4, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r5, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x88}, 0x1, 0x0, 0x0, 0x20005801}, 0x880) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="740000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000952805004c0012800c0001006d6163766c616e003c0002800800010010000000280005800a000400aaaaaaaaaa3b00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb0000080003000300000008000500", @ANYRES32=r10], 0x74}}, 0x0) sendmsg$kcm(r7, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75dd6900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 1m56.476406258s ago: executing program 3 (id=21183): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) socket$nl_route(0x10, 0x3, 0x0) socket(0x27, 0x803, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0x2458a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008804}, 0x4000040) r3 = socket$packet(0x11, 0x0, 0x300) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r5, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004891}, 0x40000) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x4a) socket(0x10, 0x803, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x27, 0x803, 0x2) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0x2458a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008804}, 0x4000040) (async) socket$packet(0x11, 0x0, 0x300) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r5, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004891}, 0x40000) (async) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x4a) (async) 1m52.604064267s ago: executing program 3 (id=21185): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61106200000000006113380000000000bfa00000000000000700000008ffffffd50301001874004095000600000000006916000000000000bf67000000000000360607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d786046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c747664e9f7478f8200000000000000ff44b0a4577fa8e6084e9c47687f2330203a0a3edca9d4ffc012df1006a70ed9b841cfdedac17240dfe4171bcf94e05bc14f0063ce9e3f18e133ff27db7fc3fa53cc587cc58ece5f86f7a6520eeea8b3e885090acabaebf8bc1dea67de28f23b1756977a30534fc2f6abbe72b68bcd88bbf0749c72fcf19229ac72c24260838d89babf1ecf13e5908d286f71ae0c66b8c2413ae3a7a225132acfa8c3e0a9ab5f094a50786bf4fef8f096446fdeea118294957b97d958ecb028be46dd1434eb1a439218b39f8e"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000080)={0x5c, r1, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x40}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004884) 1m52.460817566s ago: executing program 3 (id=21187): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x4, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xffe1}, {0x10, 0x9}, {0x4, 0x6}}}, 0x24}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) write$tun(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x10a) connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000001c00110c0000006a00000f0007000000", @ANYRES32=r5, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) r6 = socket(0x3, 0x2, 0x0) recvfrom$unix(r6, &(0x7f0000000340)=""/58, 0x3a, 0x100, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x4}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000100)={r7, @in={{0x2, 0x4e24, @empty}}, [0x7fffffff, 0x1fb0, 0x6, 0xfffffffffffffffb, 0x9, 0xffffffffffffffff, 0x7, 0x4, 0x7, 0x3, 0xffffffffffffffff, 0x7, 0x8, 0x8, 0x5]}, &(0x7f0000000200)=0x100) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r11) sendmsg$TIPC_CMD_ENABLE_BEARER(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$unix(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1m37.458285362s ago: executing program 32 (id=21187): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x4, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xffe1}, {0x10, 0x9}, {0x4, 0x6}}}, 0x24}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) write$tun(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="08000800068006000d001400000045a100fc0065000002069078ac1414aae0000001070b25000000007f0000011cee0d608328f18af74b54f46b778317f100000000ffffffffac1414bbe0000001ac1e01018606000000024414f5536401010168ee7c887f00000100000988891ff4ac141413ac1414210a010101ac1414aaac1414bbac141411000000004428a1f00000000700000001000000030020000000006c9100000000000000070000000900000008442c71d3ac1414aa00000006060000000000000000000700000000000007ff0000000000000000000000000000000000000100004e2000004e2100000002000000020000000200000000"], 0x10a) connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000001c00110c0000006a00000f0007000000", @ANYRES32=r5, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) r6 = socket(0x3, 0x2, 0x0) recvfrom$unix(r6, &(0x7f0000000340)=""/58, 0x3a, 0x100, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x4}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000100)={r7, @in={{0x2, 0x4e24, @empty}}, [0x7fffffff, 0x1fb0, 0x6, 0xfffffffffffffffb, 0x9, 0xffffffffffffffff, 0x7, 0x4, 0x7, 0x3, 0xffffffffffffffff, 0x7, 0x8, 0x8, 0x5]}, &(0x7f0000000200)=0x100) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r11) sendmsg$TIPC_CMD_ENABLE_BEARER(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$unix(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.812350239s ago: executing program 0 (id=22354): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r4, 0x25, 0x0, @void}, 0x10) write$tun(r0, &(0x7f0000000300)={@val={0x70}, @void, @eth={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "25d97cfcead62589f81261ccca7cee6fb3c7368f2ae6a216", "7b092b55f085e2e421754354b9caf487eba78edc4ab1d6f3f9498b54b3a3b7bc"}}}}}}}, 0x6e) 1.635884714s ago: executing program 1 (id=22357): syz_emit_ethernet(0xaa, &(0x7f00000003c0)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x9c, 0x2, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @local, {[@rr={0x7, 0x3}, @ssrr={0x89, 0x2b, 0xae, [@loopback, @dev={0xac, 0x14, 0x14, 0x2d}, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @multicast2, @loopback, @broadcast]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local}, {}, {@dev}, {@private=0x4}]}]}}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000040)={0x0, 0xfffeffff}, 0xc) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000700)={0x0, 0x5c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x38, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @default=0x9b4}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x38}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) close(r8) socket$kcm(0x10, 0x2, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8b0b, &(0x7f0000000100)={'wlan1\x00', @random='\x00\x00 \x00'}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000006a0083130000000000000000000000000000000008000500d768d9f8"], 0x20}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2020000c}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r2, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x28800) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)={0x20, r9, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0xa, 0xe, [@ext_channel_switch={0x1c, 0x4, {0x1, 0x0, 0x9d, 0x7}}]}]}, 0x20}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000340)=""/234, &(0x7f0000000440)=0xea) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaf60c9f7a7281d32142f2fdbc3d37e5a072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a37f7fb9a16059ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a9883815654486fe42cf2f676cdbf91f7582ab314be"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000000200)=r12, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r11) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newtaction={0xb8, 0x30, 0xffff, 0x3, 0x0, {}, [{0xa4, 0x1, [@m_skbedit={0xa0, 0x2, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0x9, 0xffffffffffffffff, 0x1, 0x1820}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}]}, {0x4b, 0x6, "e80f4af7694ec65a201c2f1c0bdcb2de9086d27f593dd5b85931fb6d92d3fb6b0ca277b7f653d9a9f3bf495a3a7e03f7c41f48654ef5a55e270391fe172122113110bc28836cc4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xb8}}, 0x0) 1.534616175s ago: executing program 0 (id=22359): socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r0 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 32) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0x1, 0x58, &(0x7f00000001c0)}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async, rerun: 32) socket$inet(0x2, 0x3, 0x2) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="90410000000000001400030062726964676530000000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x8014}, 0x20000040) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r6, @ANYBLOB="080006"], 0x24}}, 0x4) (async, rerun: 32) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (rerun: 32) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r8) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) (async, rerun: 32) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000180)) (async, rerun: 32) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) (async, rerun: 32) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$802154_dgram(r11, &(0x7f0000000cc0)={0x0, 0x48, &(0x7f0000000040)={&(0x7f00000002c0)="05000000b92ba9e375f3d5a1fc0751577daff448fb417eb76377c3075661e57f6a1ad88443faf85a902e03e4c4e68c258b10a733e428ae2cd65cf9e52e6a23541f4bc6970df209050bf052c6624effea5f1e99ad3d96ed78ff3f524af2c90d5643d563b4f469a937cccad6efa449da086721a42a6616eb56afdf6e1e977964a59a007754d9a22bf26ddb67fb3cd24af531bb3a42a0532ff51473993bd4fb62b7fae1a02f982796fe3df1f080196ff1db13e62950561bf6330ce41dde70f59450a43a0e5678b45689b989d46e9e242cc89f34cd04c4e22e5cc1f1035c5010fd47be95ca79f9a85bf56011d8397d00"/253, 0x1}}, 0x20000855) ioctl$sock_inet_tcp_SIOCATMARK(r10, 0x8905, &(0x7f0000000280)) (async) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r13 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async, rerun: 64) write$tun(r7, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xfce) (async, rerun: 64) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000305f8ffffff0000000000000000d0b2df866a2945c8ac8009c787b95829d074", @ANYRES32=0x0, @ANYBLOB="1111020031880000200012800b0001006d61637365630000100002800c0004000100000100c2800008000500", @ANYRES32=r3, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x4000) 1.437546006s ago: executing program 2 (id=22360): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801004800000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="09000000040000000800000040"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r5, &(0x7f0000000580), 0x0}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000000000007111b70000000000851000000200000085000000ae00000095000000000000009500a505000000005160b53d4aaf0ecda3e967683918fabfc90ec1e06c5f48cb9ce64e815b7b74d0c3e9365f188f6a00591b"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000080)=':\b', 0x2}], 0x1}, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x12, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x31}, @generic={0xa7}, @initr0, @exit]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x32}, 0x90) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'tunl0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x7800, 0x7800, 0xe51, 0xd9, {{0x18, 0x4, 0x2, 0x31, 0x60, 0x67, 0x0, 0x3, 0x4, 0x0, @rand_addr=0x64010100, @broadcast, {[@cipso={0x86, 0x4a, 0x1, [{0x6, 0xe, "d23d22643499040d93848426"}, {0x1, 0x12, "2e0c8157679627d3862f4a52bf50f703"}, {0x0, 0x10, "620415070d9bfc022f340fc1f39e"}, {0x2, 0x5, "b6caf8"}, {0x5, 0x8, "261f6d0eecfa"}, {0x5, 0x7, "14915bcc55"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000500)={'erspan0\x00', &(0x7f0000000480)={'tunl0\x00', r7, 0x20, 0x8000, 0x7fff, 0x6, {{0x12, 0x4, 0x0, 0x3f, 0x48, 0x68, 0x0, 0xe, 0x4, 0x0, @loopback, @remote, {[@noop, @ra={0x94, 0x4}, @ssrr={0x89, 0x13, 0xa8, [@empty, @local, @remote, @private=0xa010100]}, @cipso={0x86, 0x1a, 0x0, [{0x1, 0x4, 'RC'}, {0x7, 0x10, "25a0d2dd4e7d4be0d8ab2eb2fb09"}]}]}}}}}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="2e9b5b00ace03dd65193dfb6c5619a3d86dd60670600001406000000", 0x1c}, {&(0x7f0000000280)="37bcb39800000000f66b8157b45046eb15", 0x11}, {&(0x7f0000000040)="a6a5c499ea42cef417c1730947da8eba6b2cab7a44fa9495177ee9e4d1f3baeabfbe101311258611f2", 0x29}], 0x3) 1.278024094s ago: executing program 0 (id=22363): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r1) sendto$l2tp6(r1, &(0x7f0000000080)="be26265f56926a6748fc1e71246cf89ed804e809d880ca9e97929f6b703f2ceb1dec309161c347e55874e3e1c0f53d9cd5fba36b5b653cdb777f6c659c861df7ac9f4c50c896225a4d8c1e60caa91cfbb3bbd5f4067de08cd8066f167c1fa7f8306c915460dff2799f06f67712fdff3641b07f3393f05a5877eed8161b0cf032", 0x80, 0x88c0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="28000000270007012bbd7000fedbdf25037c00000400c2800c00018008001f00", @ANYRES32=r2, @ANYBLOB="bc"], 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) 1.277800942s ago: executing program 5 (id=22364): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000ca5055c90000000000008512fd16250000fdffffff0900000000"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00}, 0x94) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="ceaa000000000000711037000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) (rerun: 32) 1.276466298s ago: executing program 2 (id=22365): unshare(0x20000400) (async) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x7}, 0x4) (async, rerun: 32) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x4) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r3, &(0x7f00000005c0)=[{&(0x7f0000000080)='/', 0x1}], 0x1) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x4010, r3, 0x2000) (async, rerun: 64) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x577801, 0x100408) (rerun: 64) sendmsg(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)}, {&(0x7f0000000ac0)="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", 0xfffffd6b}, {&(0x7f0000000640)="74a892e6122d0e9da29a40f6060049f3ab51554d", 0x14}], 0x3, &(0x7f00000005c0)=ANY=[], 0x158}, 0x0) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x14, &(0x7f00000001c0), 0x4) (async) r4 = socket(0x3, 0x2, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000040)) (async) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r5, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r5], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x8, 0x2}}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002900)=@newtfilter={0x1468, 0x28, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x1438, 0x2, [@TCA_BASIC_POLICE={0x1434, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x7, 0x80000000, 0xfffffeff, 0xfffffffd, 0x8, 0x4, 0x5, 0x2, 0x56a0, 0x6, 0x5, 0x9, 0x2, 0x2, 0x1ff, 0x9, 0x80000000, 0x80000000, 0xb062, 0x2, 0x80000000, 0xa83, 0xa, 0xfffffff8, 0x9, 0x2, 0xfffffffc, 0x10000, 0x9035, 0x2, 0x23, 0x4, 0x1, 0x2, 0x0, 0xd, 0x3, 0x0, 0x5, 0xfff, 0x800, 0x8, 0xf, 0xffffffff, 0x8000, 0x1ff, 0x2000000, 0x1000, 0x6, 0x2, 0xc, 0x6, 0x2, 0xc97, 0xe3, 0x4, 0xb, 0x0, 0x7, 0x3, 0x755, 0x7, 0x9, 0xffff, 0xa73b, 0x0, 0x3ff, 0xc, 0x9, 0x7, 0x81, 0xa01, 0x7, 0xd, 0x6, 0x7fff, 0x401, 0xb, 0xb00000, 0xfffffffe, 0x9a15, 0x0, 0x7fffffff, 0x8, 0x81, 0x5, 0x6, 0x2, 0xa, 0x569, 0x7, 0x3, 0x3, 0xfffffffa, 0x7, 0x0, 0x5, 0xffffffff, 0xbad62998, 0x8, 0xe206, 0x7, 0x7f, 0x3, 0x0, 0x65, 0x2, 0x6, 0x2, 0x5, 0x9, 0x7, 0xe697, 0x4d0, 0x8, 0x8, 0x5, 0xa057, 0x10, 0x401, 0x37, 0x4, 0x9, 0x1, 0x5, 0x1, 0x6b6, 0xe7247d19, 0x6, 0x9, 0x100, 0x8, 0x0, 0x2, 0xc2, 0x5, 0x9, 0x0, 0x10000, 0x4, 0x0, 0x6875, 0x7, 0xf, 0x9, 0xc, 0x5, 0x8, 0x7, 0x7, 0x9, 0x81, 0x10, 0x0, 0x7ff, 0x2, 0x9, 0x6, 0x3375, 0xe1, 0xc40, 0x5, 0x9, 0x100, 0x4, 0x9, 0x2, 0x6, 0x1, 0x2, 0x6, 0xcd8, 0x9, 0x3, 0x80000001, 0x4, 0x3ff, 0x4, 0x1, 0x5, 0x0, 0x3ff, 0x3, 0x9, 0x2, 0xd, 0x5, 0x4, 0x6, 0x9, 0x8001, 0x5, 0x2, 0x3, 0xe, 0x2, 0x10000, 0xffffffff, 0x2, 0x8, 0xa135, 0x200, 0x0, 0x8eb1, 0x1, 0x2, 0x2, 0x4, 0x1, 0x5, 0x9, 0x800, 0x0, 0xa, 0x6, 0x8000, 0x800, 0x10, 0x6, 0xf41a, 0xb438, 0x496d, 0x1, 0x0, 0x9, 0x5, 0x9, 0x5, 0x6, 0x800, 0x5, 0x4, 0xc5ea, 0x5, 0x2, 0x9, 0x2, 0x9, 0x2, 0x80000001, 0x8, 0x40, 0x5, 0xc, 0x7, 0x3, 0x0, 0x3, 0x7ff, 0x4, 0x24, 0x6, 0xf, 0x0, 0x800]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2180, 0x40, 0xd, 0x1, 0x9, 0x1, 0xc6, 0x8a60, 0x9, 0x0, 0x1, 0x76c, 0xfffffb5b, 0xc8a, 0x2, 0xe722, 0x1, 0x4, 0x7, 0x5, 0x3484, 0x9, 0x3ff, 0x20, 0x3, 0x4, 0x3, 0x8, 0x0, 0x6, 0x10, 0x9, 0x401, 0x200, 0x7ff, 0x8, 0xec0, 0x7, 0x0, 0x1, 0x3, 0x1, 0x2, 0x8, 0x4, 0x7, 0x1, 0x6, 0x8455, 0x1, 0x80000001, 0x4, 0x6, 0x2, 0xd699, 0x0, 0x8000, 0x8, 0x0, 0x100, 0xfffffff9, 0x4, 0x1, 0x5, 0x9, 0x80000000, 0x2, 0x80000001, 0x10f8, 0xfffffffb, 0x8, 0x6, 0x719, 0x7fff, 0x80, 0x20000000, 0x1, 0x9, 0x7, 0x5, 0x4, 0x26, 0xb0, 0xf02, 0x13, 0x7, 0x3, 0x79b, 0x4, 0x7, 0x40, 0x10001, 0x3, 0x0, 0xb, 0x5, 0x4, 0x3, 0x3, 0x1, 0x50000, 0x8, 0xf35b, 0x6, 0x8, 0x4, 0x9, 0xfffffffa, 0x1, 0xe689, 0x6f, 0x0, 0x5, 0x1d, 0xfffffff9, 0x7, 0x1, 0x5, 0x2, 0xcbbb, 0x7, 0x8000, 0xc84, 0x2, 0x31fc, 0x3, 0x7, 0x10001, 0xb, 0x1, 0x1, 0x8, 0x7d0, 0x2a, 0x588, 0x5, 0x5, 0x3, 0x81, 0x4bc73259, 0xc, 0x50, 0x8001, 0x80000001, 0x4ea, 0x1, 0x8, 0x7, 0x4, 0x4, 0x2, 0x81, 0x6, 0x4, 0x6, 0xf, 0x3, 0x5, 0x1, 0x7, 0xc04, 0x5, 0x7, 0x45, 0x8, 0xc6e, 0x6, 0x0, 0x6, 0xa, 0x6, 0x7, 0x4, 0x8000, 0x80000001, 0x6, 0x0, 0x2, 0x5, 0x4, 0x500000, 0xb8, 0x8000, 0x7, 0x5, 0x7ff, 0x5, 0xb, 0x1, 0x1ff, 0x8, 0x2, 0x1, 0xd, 0x5a, 0x5, 0x2, 0x79c, 0x5, 0x6ad, 0x8, 0x0, 0x9, 0xed, 0x3a30, 0x8, 0x64, 0x9, 0x81, 0x100, 0x8, 0x4, 0x90000, 0x2, 0x55f7, 0x7, 0x6, 0x993, 0x6, 0x6, 0xedb, 0x4, 0xf, 0x400, 0x3, 0xc5, 0x9c, 0x4, 0x8, 0x8, 0xfffffff8, 0x6, 0x7f, 0x4, 0x3, 0x4, 0x8, 0x0, 0x8, 0x1, 0x614, 0x0, 0x5, 0x9, 0x33, 0xc7d, 0x8, 0x9, 0x7a, 0x8, 0x0, 0x9, 0x8, 0x40, 0x4]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x281}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfe000000, 0xbae, 0xbf, 0x0, 0x40009, 0x6, 0x7, 0x3, 0x0, 0xbac4, 0x57, 0x6, 0x8000, 0xdf4, 0x6, 0x4, 0x8, 0x3, 0x2, 0x7, 0xf, 0x400, 0x6, 0x5, 0x3, 0xc753, 0x401, 0x614a, 0x0, 0xda7, 0x1, 0x6, 0x1, 0x2, 0x0, 0xf0fc, 0xa, 0x2, 0x1000, 0x7fffffff, 0x9, 0x0, 0xea, 0x6, 0xd2, 0x0, 0x401, 0x4, 0x6, 0x0, 0x1, 0x7, 0x9, 0x7fff, 0x6, 0x200, 0x7fffffff, 0x7, 0x1, 0x2, 0x6, 0x3b53, 0x2, 0xa, 0xd, 0xc, 0xfffffff9, 0x9, 0x8, 0x10000, 0x3b, 0x6, 0x7, 0x6, 0xb, 0x50, 0x1, 0x7ff00000, 0xffffffff, 0xba9b, 0x6, 0x3, 0x3, 0x8, 0x5b4000, 0x3, 0x1, 0x5e79, 0x8, 0x401, 0xe, 0x1, 0xb, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, 0x9, 0x3, 0xfffffff7, 0x7, 0x2, 0x7, 0x1, 0x9fe, 0x5e, 0xb53, 0x2, 0x8, 0xfb, 0x5, 0x6, 0x800, 0x3, 0x5977, 0xffffffff, 0xffffffff, 0x2, 0x400, 0x1, 0x5, 0xfa8c, 0x6, 0xffffffff, 0x7, 0x4, 0x35da, 0xd, 0x3ff, 0xfffffffd, 0x2, 0x1, 0x2, 0x1, 0x3f6b, 0x9, 0x81, 0x81, 0x6, 0x5311, 0x0, 0x2, 0x8001, 0x80, 0x1ff, 0x80000001, 0xc728, 0xfd, 0x5, 0x2, 0x9, 0x0, 0x8000, 0x3, 0x5, 0x0, 0xb7, 0x5, 0x4, 0x9, 0x4, 0x0, 0x2, 0x4, 0x2, 0x9, 0x1, 0x80000000, 0x800, 0x3, 0x40, 0x8001, 0x3, 0x17, 0x4, 0x8, 0x80000001, 0xec, 0x3, 0x0, 0x6, 0x8, 0xa, 0x80000000, 0x9, 0x8, 0xa, 0x2, 0x9, 0x6, 0x3, 0x6, 0x5, 0x9, 0x7fffffff, 0xa, 0x6, 0x401, 0x6a, 0x0, 0x0, 0x6, 0xfffffffd, 0x81, 0x346a, 0x2, 0xfff, 0x7d, 0xb4, 0x4, 0x200, 0x5, 0x5, 0xfffffffe, 0x2e, 0x2, 0xc000000, 0x7, 0x8, 0x6, 0xc4fc, 0x7f, 0x6, 0x6, 0x2f, 0x1, 0x5, 0x2, 0x5, 0x2, 0x3, 0x3, 0x81a, 0x2, 0x0, 0xfb50, 0x8, 0x6, 0x8, 0x2, 0x1, 0x6, 0x2, 0x4, 0xbe0, 0x4, 0xe, 0x8, 0x7, 0xc8, 0x83d, 0xe, 0x1, 0x902f]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x64}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x7, 0x5, 0x3, 0x4, 0x2, 0x6, 0xfffffffd, 0x600, 0xae, 0x3, 0x200, 0x7, 0x1, 0x9, 0x0, 0x6, 0x5, 0xffffff7f, 0x2, 0x1, 0xeda5, 0x3, 0x8, 0x9, 0x9, 0x4, 0x9, 0x40, 0xa, 0x6, 0x2511, 0xfffffffd, 0x5, 0x5, 0x1000, 0x1, 0xea, 0x6e, 0x5, 0xb21, 0x7fff, 0x0, 0x0, 0x1efbd3d7, 0x2, 0x61f7, 0x2, 0x400, 0x4, 0x0, 0xdb7, 0x6, 0x3635, 0x9, 0x0, 0x9, 0x10000, 0x1800, 0x4b, 0x3ff, 0x3, 0x1, 0x9, 0x0, 0x0, 0x8, 0x4, 0xffff2b83, 0x0, 0x7, 0x3, 0x8001, 0xfffffffa, 0x7, 0x5, 0x80000000, 0x3, 0xfffffc00, 0x0, 0x1, 0x61, 0x5, 0x4, 0x5, 0x8000, 0xdcfe, 0x9, 0xfffffff7, 0x6, 0x8000, 0x3, 0xfffffffb, 0x0, 0x3, 0x4, 0x7, 0xfff, 0x4, 0x1f950140, 0x80000001, 0x6, 0x5, 0x9, 0x3, 0x9, 0x7, 0x1, 0x6, 0x6, 0x4, 0xda, 0x4, 0x8, 0x1ff, 0x5, 0xabfab42, 0x1, 0x3, 0x3, 0x5, 0x6, 0x0, 0x1, 0x10000, 0xfffff4d4, 0x8, 0x0, 0x0, 0xc000000, 0x2, 0x7ca, 0xcb6, 0xc, 0x1, 0x0, 0x7fff, 0x6, 0xa2b, 0x8, 0x2, 0x6, 0x4b23, 0x7, 0x27, 0x81, 0x4, 0x8001, 0x3, 0xffffffff, 0xfffffff7, 0xa, 0x81, 0x2, 0xb, 0x1, 0x7, 0x2, 0x2, 0x40, 0x9, 0x6, 0x5, 0xc80d, 0xc5, 0x8, 0x400, 0x2, 0xfffffff9, 0xf82c, 0x1, 0xd68, 0xe78c, 0x5, 0x5d, 0xd7, 0x0, 0x5, 0x0, 0xfa, 0x0, 0xffff, 0xa84, 0xfea, 0x1ff, 0xcf3, 0xc8d, 0x1ff, 0x0, 0x9, 0x1, 0x8, 0x98a, 0x6, 0x1, 0x1, 0x0, 0x1, 0xeca1, 0x3, 0x5, 0x95b, 0x18, 0x3, 0x7, 0x5, 0xfff, 0x890, 0x0, 0x3, 0x200, 0x1, 0x2d, 0xffffffa9, 0x9, 0x401, 0xffffffff, 0x6, 0x4, 0x3, 0x4, 0x80000000, 0x4, 0x8, 0x0, 0x3, 0x0, 0x3, 0x6, 0x2, 0x7f, 0x10001, 0x200, 0x29e87725, 0xb, 0x3, 0xfff, 0x40, 0x1, 0x1, 0x7fffffff, 0x2600, 0xedc, 0x3, 0x8, 0x9, 0xfffffff7, 0x7fff, 0x953, 0xf10, 0x1, 0x1, 0x160e, 0x4, 0x9, 0x5]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x7, 0x0, 0x1, 0x2, 0x2, 0xc5c, 0x9, 0x10000, 0x7, 0x7, 0x2, 0x3, 0x7, 0x5, 0x7, 0x8, 0x800, 0x7f, 0x101, 0x4, 0xc15e, 0x4, 0x0, 0x4bf, 0x7, 0xfffffffb, 0xdd68, 0x4c6b, 0x400, 0x9, 0x0, 0x27a7, 0x9, 0xb, 0x6, 0x8, 0x38, 0x200, 0x3, 0x7, 0x3, 0x6, 0x8, 0xafb8, 0x5, 0x3, 0x9, 0x2, 0x9, 0x4, 0x101, 0x9, 0x6, 0x7, 0xed, 0x5, 0x3, 0x5, 0xfffffffc, 0x401, 0x200, 0x200, 0x9, 0x3, 0x400, 0xfffffff7, 0x0, 0x9, 0x80000000, 0x8, 0x9, 0x2, 0xd1, 0x6, 0x0, 0x6, 0x4, 0x331, 0x3, 0x4, 0xf9, 0x3, 0x1, 0x8, 0x80000000, 0x4, 0xd, 0x5, 0xda9, 0x300, 0x51, 0x80, 0x3, 0x9, 0x9cf, 0x7, 0x9, 0x7, 0xffffffaf, 0x7, 0x7fff, 0x6, 0x56, 0x3, 0x0, 0x2, 0x8c, 0xfffffffb, 0x22, 0x2, 0xe8d1, 0x2, 0x8, 0xc32, 0x1, 0x3, 0x401, 0x6, 0xbfe8, 0x3ff, 0x8, 0x1bd9, 0x1ff, 0x396c, 0x2c2, 0x0, 0x1, 0x800, 0x6, 0x7, 0x6, 0x8, 0x841, 0x3, 0x5, 0x2, 0x1, 0xf9, 0x6, 0xfffffff7, 0x8000, 0x9, 0xa, 0x101, 0x7, 0x6, 0x800, 0x3, 0x0, 0x6a000000, 0x7d9, 0xff, 0x7, 0x5, 0x6, 0x3, 0x0, 0x9, 0x10000, 0x7, 0x3, 0x8, 0xffff907d, 0x1, 0x5, 0x2, 0x69b4770a, 0x2, 0x4, 0x2, 0x0, 0x80000000, 0x8, 0x39, 0x3, 0x4, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0xd, 0x2, 0xa3b, 0x1, 0xbc, 0x7fff, 0x9, 0x0, 0x1d5, 0x8, 0x9, 0x6, 0xffffa4ad, 0x2, 0x400, 0x1, 0xfff, 0x2, 0x7fffffff, 0x7f, 0x2, 0x1ff, 0x9, 0x10000, 0x8, 0x6, 0x10001, 0x8, 0x7, 0x3ff, 0x26, 0x6, 0xda34, 0x6, 0x7, 0xa, 0x9, 0x4, 0x0, 0x6, 0x6, 0x7, 0x1, 0x99a, 0x5, 0xe4a, 0x10001, 0x43, 0x3, 0xf0b, 0x0, 0x401, 0x4, 0x4, 0x4, 0xd, 0x3, 0x6d727520, 0x2, 0x1ff, 0x6, 0x76, 0x7, 0x1, 0x4, 0x100, 0x5da1c210, 0x0, 0x6, 0x80, 0x3ff, 0x7fff, 0x7]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}]}]}}]}, 0x1468}, 0x1, 0x0, 0x0, 0x810}, 0x200008c0) (async) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6, 0x3, {0x0, 0x60}}]}, 0x1c}}, 0x0) unshare(0x22020400) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="18000000250001"], 0x18}, 0x1, 0x0, 0x0, 0x4888}, 0x4040) (async) recvmmsg(r10, 0x0, 0x0, 0x102, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00'}) 1.172272901s ago: executing program 2 (id=22366): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2b, 0x5, 0x3fe) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000003c0), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000001340), &(0x7f00000001c0)=0x8) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000004e00ff13"], 0x14}, 0x1, 0x0, 0x0, 0x200088d0}, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f00000001c0)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="00000000235a68793b9a501664f5eba50a549fec111a0172eff2f933ab7ece4573d5f09c74798bbc4b25fe0bf807d712dfbce6bf13036610e3be062aaf65436721b57ae6ba69fe29fa497bcff256634c1ca8a87bcbe1061cf9bfc512cff8c04be665640da035685c7026b5fe612868e9e612f6a24527bc0f5d91c389d35228f95556daba1be63d89d3c46dee098443fc4028797113dd5dc6f45e4fc51795822e4f307022a394f06b6406fe64b4c2a5c11b5be4d5894145c0a287af053a68760f983e54f613d4eda75ece7da23623d92deae793e50400a5fcb7950000", @ANYRES16=r4, @ANYBLOB="01052cbd7000fedbdf251d000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000) r5 = socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000200)="8f", 0x1}], 0x1}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$nfc_llcp(r1, &(0x7f0000000740)={0x27, 0x0, 0x1, 0x7, 0x8, 0x4, "33e958bbbf9c5e66bfa9ac4eccc2e592fd2ce88cabdd6d810d3f74583f051bb55914ffb7437e82ad8f1004d1a956f5a6bb21df0fdefe1787aa4fd4662bb484", 0x11}, 0x60) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a0136b0d4490080958cdb910000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff1d0900034000000130140000001100010000000000090000000100000acf73538341f593a946c717c7839d7c07609fc71430125aa08d3424eefc73b66a58e45f562a8bc81208d2383a5b540fceb53c384ad831ce069f3fbb0874d9fe36c8e6a9a1b599e334067063c1ca9927cf6ef0f0ae57d52512e7ea67a8111944278be1d9d1af39116312b5485b8478d7e3faaffb6333e1202e04cb21c72d65"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0100000000000c0004400000000000000007140000001100010000000000000000000100000a000000000000000000"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000000600)=[{&(0x7f00000004c0)=""/2, 0x2}, {&(0x7f0000000500)=""/201, 0xc9}], 0x2, &(0x7f0000000640)=""/174, 0xae}, 0x1) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) accept4$alg(r1, 0x0, 0x0, 0x800) sendmmsg(r5, &(0x7f000000e240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x800) 1.150744606s ago: executing program 5 (id=22367): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x33}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x34, 0x32, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r4, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002540)="955232d6c9", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f00000000c0)="fb43d3958653c4", 0x7}], 0x1}}], 0x2, 0x4044805) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x0) splice(r1, 0x0, r4, 0x0, 0x8000000000025a5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r5) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r7) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) socket$inet_mptcp(0x2, 0x1, 0x106) socket$can_j1939(0x1d, 0x2, 0x7) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r11}, @CGW_SRC_IF={0x8, 0x9, r11}]}, 0x24}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000084e8745404000097000000000000000000", @ANYRES32=r8, @ANYBLOB="c3040500000000001800128008000100677470000c00028008000100", @ANYRES32, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x20000000) sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="03002cbd70000e0000000100000008000100", @ANYRES32=r8, @ANYBLOB="080002000000000008000500"], 0x34}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r12, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0xc0, 0x4, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7fffffffffffffff}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x3e, 0xc, "ba45385c1f54084fcfaa01322a34b4b437f19812575e883aa06e5bcd177a0b535e8d98a51b68d076aa14fc0edbd3b299e4b34e6b55378903fac4"}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, 0xc0}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 1.069688595s ago: executing program 2 (id=22368): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce", 0x1}], 0x1}}], 0x1, 0x40000d4) sendmsg$inet(r1, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000000140)="7f", 0x1}], 0x1}, 0x40400c1) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a001200eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480340001800c0001007061796c6f616400240002800800014000000009080003400000004f08000440000000370800024000000002240001800a0001007265646972000000140002800800014000000004080002400600000c0900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) 1.055193096s ago: executing program 2 (id=22369): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x24000004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(0xffffffffffffffff, 0x40086e81, &(0x7f0000000080)=0x80000000) 1.050987073s ago: executing program 5 (id=22370): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x8, 0x0, 0x0, {{@in=@multicast2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x8, 0x4e23, 0x0, 0xa, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x70000, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x3}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@multicast1, 0x2, 0x4, 0x3, 0x0, 0x0, 0x2045}]}]}, 0xfc}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f00000025c0)="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", 0x4e5}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x4}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in=@loopback=0xac1414aa, @in6=@dev={0xfe, 0x80, '\x00', 0x26}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@rand_addr=' \x01\x00', 0x3c, 0x4, 0x0, 0x0, 0x8, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000017c0)=@base={0x1a, 0x63098bae, 0xa, 0xf41b, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r7, 0x5452, &(0x7f0000000180)=0x401) listen(r7, 0x0) ioctl$sock_SIOCSPGRP(r7, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) shutdown(r7, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'ip6gretap0\x00', 0x5882}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0x0, 0x2, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in=@loopback=0xac1414aa, @in=@broadcast, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@mcast2, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 761.217045ms ago: executing program 1 (id=22371): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000180)={'wg2\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) (rerun: 64) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0xfd96}]}]}, 0x28}}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) (async, rerun: 32) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r6, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) (async) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), 0xffffffffffffffff) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x6b}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async, rerun: 64) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$AUTOFS_IOC_READY(r8, 0x400442c9, 0x200000f3) (async) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r7, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}]}, 0x1c}}, 0x80) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) (async) write(r3, &(0x7f0000000900)="84ca0a65bd8c002b0304000e0580a70101000000000000fe5e", 0x19) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) (async) r9 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r9, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x64}}, 0x4800) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0x0, 0x2}, 0x95) (async) r10 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$XFS_IOC_OPEN_BY_HANDLE(r9, 0xc038586b, &(0x7f0000000140)={r10, &(0x7f0000000000)='}@+\\\x00', 0x400000, &(0x7f0000000040)={@align=0x56af761e, {0xf, 0xda, 0x1, 0x5}}, 0x5, &(0x7f00000000c0), &(0x7f0000000100)=0x5}) 644.957555ms ago: executing program 1 (id=22373): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000002c0)={0x4800, 0x5, 0x0, 0xfffffffe}, 0x10) getsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)={0x18, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@generic='^(']}, 0x18}}, 0x40000) 639.812477ms ago: executing program 4 (id=22374): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="010000009b050004050008002c300000a1b114de87b17910b48596c6017172fab45e276b6b09cbe4aa40abb43e5c072dcf999b398661220fbbe5d0127b7e83203882bc23432b5a531f3eb040ec16c9b323aa0d7e6ad8a9d9f0b8ff1957e2340efe1f97456c37bed797da4614e862be0d403090287db27e73e0ded06421dbf682cfc7dec041be90b8ea968e94e403d7446b80fee2d79df12d145914861bd6137fd74bd2efff1bf081f5e2a6ce038d98d289f44beb395f6121f3b94d502b9df229e55f569be47b4a7af33c9a19c0884727ff186306922e7c7042dfac41", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000008001000000010000e0010300"/24], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x4, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_deladdr={0x34, 0x15, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x1, 0x20, 0xfd, r1}, [@IFA_TARGET_NETNSID={0x8}, @IFA_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x34}}, 0x20000000) 541.489869ms ago: executing program 1 (id=22375): syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRES64=r0, @ANYRES32=r0], 0x38}}, 0x0) 515.992809ms ago: executing program 4 (id=22376): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000007c0)='t', 0x1}], 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x40, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x40}}, 0x0) r3 = accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @local}, &(0x7f0000000100)=0x10, 0x180000) getsockopt$inet_int(r3, 0x0, 0x16, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4048000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061042c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) (async) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000007c0)='t', 0x1}], 0x1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x40, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x40}}, 0x0) (async) accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @local}, &(0x7f0000000100)=0x10, 0x180000) (async) getsockopt$inet_int(r3, 0x0, 0x16, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4048000) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061042c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) (async) 509.35692ms ago: executing program 1 (id=22377): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000008c0)=0x14) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000200)={0x8, {{0xa, 0x4e21, 0x6de, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffc, 0x2, @ipv4={'\x00', '\xff\xff', @empty}, 0x80000}}}, 0x108) close(r3) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) socket(0x1, 0x803, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r5, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfffa}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x5f) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000012000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0003000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r10, @ANYBLOB="a69d5544", @ANYRES32=r10, @ANYBLOB], 0x44}}, 0x0) 425.695683ms ago: executing program 4 (id=22378): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r2, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000003000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa408000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="00000000000000005704000008000000850001001c0000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0xe, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 421.738107ms ago: executing program 4 (id=22379): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000100001040300"/20, @ANYRES32=0x0, @ANYRESDEC=r0], 0x3c}}, 0x54) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=ANY=[@ANYBLOB="1700000083c3b8e408e5b10c1300290a000000008e0d97f4468824d3adea25db89c06496e5153593af2937aaca735b3f1c439ee0e0b4f7ec616ab564825a22079d1f96003d7290a6f1931a0f65d1af37299215479df8114dd3f83c", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00'], 0x2c}}, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r2, &(0x7f0000000980)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x3f6, 0x10, 0x70bd2a, 0x25dfdbfe, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0xc000}, 0x4) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000640)=0xfffffff8, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), 0xffffffffffffffff) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r10, 0x800452d3, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r8, &(0x7f0000000940)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000900)={&(0x7f00000006c0)=ANY=[@ANYBLOB="28020000", @ANYRES16=r9, @ANYBLOB="00022bbd7000fedbdf2503000000700008801400078008000600a600000008000600520000001c00078008000500a6c6254008000600e900000008000600410000003c000780080005006bed3c220800060014000000080006000e000000080006000a0000000800060033000000080006008300000008000600d90000000c0004800500030005000000bc0008803c00078008000600db000000080005008effc0020800060009000000080006003b000000080006006300000008000500ef9ff920080005006934e1341400078008000600bb00000008000600530000002c0007800800050005000000080005002f33595708000600be000000080005001fcf5d7c080006001e0000003c00078008000500abdf3a5b080006004c000000080005005c3a30090800050070699b14080005005da0a72a0800060012000000080005008e673b65dc000c800c000b8008000900318fc9403c000b8008000a007759000008000a0054d00000080009005b19214b08000900b70e237908000900af63225308000900eb10113108000900429d5d3244000b8008000900b68b231908000a00f2b3000008000a00a87c000008000a00996a000008000a0034b30000080009006321a37308000a005b4c000008000900050000000c000b800800090011329d7d1c000b8008000900263eb960080009006917b71f080009001e52ba0924000b80080009007bf3602d080009006aea885808000a00860c000008000a009fa20000"], 0x228}, 0x1, 0x0, 0x0, 0x4089}, 0x4010) sendmsg$tipc(r7, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) close(0x3) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000047}, 0x4048000) syz_emit_ethernet(0x82, &(0x7f00000009c0)=ANY=[@ANYBLOB="aaaaaaaaaa2117043a73dbde0800450000740000000000019078ac1e0001aced1414aa05009078e00000e0460004010000000000330000ac1414bbac1414004444e493ac1e000100000006ac1414bb00000004ffffffff00000010e000000200000002ac1414bb0000000aac1414bb00000008ac1414aa0000000eac1414bb00000000a70f8ab096d18803512f38e7cc5ab6477dd15425c3440920a9836afec53feddeddb480afe1b2187e374c0d8f1790b2"], 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x3) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r11, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000010000000900010073797a300000000070000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021340011800a0001006c696d6974000000240002800c000240000000000000008108000340fffffffd0c0001400000000000000007"], 0xb8}}, 0x0) sendmmsg$inet(r3, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000600)}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x1, 0xc0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x50}}, 0x4000000) 391.763512ms ago: executing program 0 (id=22380): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffffffffdac, &(0x7f0000000140)="5b030023e0f6f1", 0x0}, 0x50) socket$inet(0x2, 0x80000, 0x6) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r0, 0x89fd, &(0x7f0000000600)="dd57a634eda39192b9acd0f037bcb5477de2fb0051639d0c9c159f1f459b96c60a7c486e8310ea616f0240b5cd816fe6eb142d5d1723ca1feb76e53bf67d4beba2c80d1dc1fcf1d69520b7f33265e751f50e7d98e4c304c0dcf9c69f33c7175761306f0077764124ba57c611fb9a03234a801e936b618972c7357e13009626089a750d27363ca998d0c59a6f8b54ab19e0e6b91e2bb1cc611bacc16dd2a81ad20af5ef8712a7277dc307fd9023c959ab4e5548a967ea364a73f2b8de7d6dba9c407ca3ef272edc48f49869700bfdaaf5eea32b344b") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4, 0x0, 0x0, @fd}]}, 0x1c}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffe}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0xfeffff, 0x113, 0x3f00f000, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0x4a, 0xffffff0c}, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$sock(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000100)='&', 0x1}, {0x0, 0x4000}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r4, 0x30b, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000980)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000940)={&(0x7f00000003c0)={0x74, r5, 0xf10, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x29}}}}, [@NL80211_ATTR_REKEY_DATA={0x54, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "81023fb920404237"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="8cfee1f06b15414fb2cc72f3d245ed4e"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="c24e9725193a5c425ab33a1a291a3ebc"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02d62e0814d7dee5af05e6b50718658439e0e096adaef0b2"}]}]}, 0x74}, 0x1, 0x0, 0x0, 0xc0}, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x34, r4, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x44}, 0x4000000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r1, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa, &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x87, &(0x7f0000000240)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000300), &(0x7f0000000440), 0x8, 0x73, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) 289.674401ms ago: executing program 4 (id=22381): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000001c00"/28], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b15, &(0x7f0000000000)={'wlan1\x00'}) r1 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 286.042732ms ago: executing program 1 (id=22382): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0xa, @empty, @remote, @empty, @multicast2}}}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f332460916e6e893f1eeb0b723043c47c896ce0bce66a245ad99b8173d98cd824498949714ffaaca9f39817beb2de45406fb6db714e4b94bdae214fa68a0157eb3c00000000b6fc89398f2b9000f224891060017cfa6fa26fa7a34700458c60897d4a6148a1c11428607c40de60beac671e8e8fdecb03598aa623fa71f31bf0f871ab5c2ff88afc6002084e5b52710aee410e3e554d090d95983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed00000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32, @ANYBLOB="040000000100"], 0x50) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) write$nci(r1, &(0x7f0000000f80)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x0, 0x3, 0x0, 0x2, {0x5, 0x0, "39d5"}}, 0x7) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r0, 0x5, 0x4}, 0x20) 228.394294ms ago: executing program 0 (id=22383): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14}, 0x94) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0x5) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@ll={0x11, 0xf6, 0x0, 0x1, 0xe, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x80, 0x0, 0xfffffffffffffcd5, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab0785e34232aa8b31851466d0998a61d7da0c86d70000001010", @ANYRESOCT=r2, @ANYRES8=r0], 0x10b8}, 0x20000000) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x16, 0x0, 0x290) r5 = accept4$unix(r1, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) recvfrom$unix(r5, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000280)={0x0, 0x9}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0xe, 0x0, &(0x7f0000000240)="ffffffff75664a0a90f73e9eb3cf", 0x0, 0x6100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 169.524859ms ago: executing program 0 (id=22384): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89ff, &(0x7f0000001440)={'sit0\x00', 0x0}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000d40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}}, @NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x6c}, 0x1, 0x0, 0x0, 0x8804}, 0x10) (async) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x70, r4, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x54e4, @empty, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x80, @mcast2, 0x80}}}}]}]}, 0x70}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x401, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1b}}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x200}]}}}]}, 0x40}}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x170, r6, 0x1, 0x3, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x1c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8bef}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x31717a97}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xe8, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x91fb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x865a666}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x79106582}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4f57}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x143da2d8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa8e6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x44e2e252}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x727230c}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3b7589a5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa358}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66316b7f}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4bae9503}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1632}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x199d7003}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1406877b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd759}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x49f6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7816f936}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x49af831f}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2f44}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x724e53f0}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xfffffc00}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x70687d50}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1fef6238}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x744c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3618c8ad}]}]}]}, 0x170}}, 0x0) 121.621439ms ago: executing program 2 (id=22385): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = socket(0x10, 0x3, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1c, r5, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008880}, 0x20000800) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="40000000aecf05cf100003040000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r3, @ANYBLOB="08001f000c000000"], 0x40}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x101, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0xffffff7c}, 0x1c) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x18, 0x30, 0x800, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) socket(0x10, 0x3, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)) (async) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1c, r5, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008880}, 0x20000800) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="40000000aecf05cf100003040000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r3, @ANYBLOB="08001f000c000000"], 0x40}}, 0x0) (async) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x101, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0xffffff7c}, 0x1c) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x18, 0x30, 0x800, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x8000) (async) 120.002589ms ago: executing program 4 (id=22386): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='yeah', 0x4) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x6000, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r5, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000001c0)={0x9}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r5}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r4, &(0x7f0000000280), &(0x7f0000000100)=@tcp=r5, 0x1}, 0x20) r6 = socket(0x2d, 0x2, 0x0) setsockopt$packet_fanout_data(r6, 0x107, 0x16, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5202) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x34, r8, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x4040010) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r8, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x5}, 0x405c040) ioctl$XFS_IOC_GETBMAP(r1, 0xc0205826, &(0x7f0000000040)={0x1, 0x5, 0xf2, 0x8000, 0x2}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='yeah', 0x4) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x6000, 0x0) (async) socket$l2tp(0x2, 0x2, 0x73) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) (async) socket$inet(0x2, 0x2, 0x0) (async) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) (async) bind$inet(r5, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000001c0)={0x9}, 0x10) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r5}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r4, &(0x7f0000000280), &(0x7f0000000100)=@tcp=r5, 0x1}, 0x20) (async) socket(0x2d, 0x2, 0x0) (async) setsockopt$packet_fanout_data(r6, 0x107, 0x16, 0x0, 0x0) (async) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5202) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x34, r8, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x4040010) (async) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r8, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x5}, 0x405c040) (async) ioctl$XFS_IOC_GETBMAP(r1, 0xc0205826, &(0x7f0000000040)={0x1, 0x5, 0xf2, 0x8000, 0x2}) (async) 119.311824ms ago: executing program 5 (id=22387): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab968586dd", 0x36, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlinkprop={0x4c, 0x6c, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x14091, 0x8240}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}, @IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pim6reg0\x00'}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x1000) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) 41.865189ms ago: executing program 5 (id=22388): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000006c0)={'ip_vti0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x2, 0x6, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x44b, 0x0, 0x25dfdbff, {0x7a}}, 0x20}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@loopback}, {@in=@loopback, 0x0, 0x33}, @in6=@private1, {0x0, 0x0, 0x5}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}, @encap={0x1c}]}, 0x158}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5ee, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x50) ioctl$FS_IOC_GETFSLABEL(r6, 0x81009431, &(0x7f00000002c0)) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x20, 0x17, {0x14, 0x7, @l2={'eth', 0x3a, 'team_slave_0\x00'}}}}, ["", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) 0s ago: executing program 5 (id=22389): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001640)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) recvmsg$unix(r0, &(0x7f00000004c0)={&(0x7f0000000180), 0x6e, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x22fe0}], 0x3}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)={r1}) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000480)={&(0x7f0000000340), 0xc, &(0x7f0000000440)={&(0x7f0000000c80)=ANY=[@ANYBLOB="a4a42d15480000000d1411002dbd7000ffdbdf2508000300000000000800010001000000080001000000000008003e00010000000800030001000000080001000100000008003e000000000011e7790e6cd6f75205d912c85f50078bb62d58eeccf60042102aac214cca99b4e7eed873fd9def133d898c5caaadeed220f3a7beaf06d4d064b22322fae5cb7d3bacad4a3b30f13016d58e15f9055c3175ddb73984d9170574209ecfe373ed7aeccfd43480adeea5b7dcd6f381efe72dbf9f2fe94fd3ae0da43cbb84a7d2"], 0x48}, 0x1, 0x0, 0x0, 0x24000081}, 0x20) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) write$nci(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="610506be40020603097a03074ffd0745c9524de202810104"], 0x85) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x4004844) recvmsg$unix(r0, &(0x7f00000039c0)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f00000038c0), 0x0, &(0x7f0000003940)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x10}}], 0x30}, 0x2c2a936905ccb513) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f00000008c0)={'ip6gre0\x00', &(0x7f0000000840)={'syztnl2\x00', r2, 0x29, 0x40, 0x7, 0x1, 0x20, @mcast1, @mcast1, 0x20, 0x8000, 0x3, 0x6}}) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r11, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000540)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000580)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000005c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000dc0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000e00)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd7000fbdbdf250100000008000100030000000c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r13, @ANYBLOB="08000300", @ANYRES32=r14, @ANYBLOB="08000300", @ANYRES32=r15, @ANYBLOB="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", @ANYRES32=r16, @ANYBLOB="08000300", @ANYRES32=r17, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4048000) sendmsg$nl_xfrm(r9, &(0x7f0000000c40)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000900)=ANY=[@ANYBLOB="cc020000170000012abd7000fcdbdf257f000001000000000000000000000000000004d5ff000000ffffffff0000000000000000000000007f000001000000000000000000000000fc0000000000000000000000000000004e2100054e2200800a00808062000000", @ANYRES32=r10, @ANYRES32=r8, @ANYBLOB="0a010101000000000000000000000000fc0200000000000000000000000000014e2300004e230006000080a000000000", @ANYRES32=r2, @ANYRES32=r8, @ANYBLOB="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"], 0x2cc}, 0x1, 0x0, 0x0, 0x80000}, 0x1) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r9, &(0x7f000018efdc)="240000005a001f0214f9f407000904fcffffff1010000300feffffff0800000000000000", 0x24) socket$inet(0x2, 0x5, 0x400) kernel console output (not intermixed with test programs): 1_to_bridge with own address as source address (addr:6e:7c:20:79:75:74, vlan:0) [ 1345.228389][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1345.242155][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1345.255863][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:6e:7c:20:79:75:74, vlan:0) [ 1345.269930][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1345.283788][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1345.298475][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1345.312580][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1346.964655][T11896] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.992828][T18583] netlink: 72 bytes leftover after parsing attributes in process `syz.2.21140'. [ 1347.140717][T14011] Bluetooth: hci1: command tx timeout [ 1347.426477][T18634] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1347.734173][T18643] netlink: 24 bytes leftover after parsing attributes in process `syz.2.21152'. [ 1347.785592][T18643] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1347.792892][T18643] IPv6: NLM_F_CREATE should be set when creating new route [ 1348.058091][T11896] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1348.531442][T18679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21157'. [ 1348.543384][T18679] netlink: 'syz.3.21157': attribute type 1 has an invalid length. [ 1348.555430][T18679] netlink: 216 bytes leftover after parsing attributes in process `syz.3.21157'. [ 1348.610316][T18672] netlink: 76 bytes leftover after parsing attributes in process `syz.4.21155'. [ 1348.654210][T18680] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.21157'. [ 1348.794932][T11896] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1348.863381][T18550] lo speed is unknown, defaulting to 1000 [ 1349.219644][T14011] Bluetooth: hci1: command tx timeout [ 1349.305197][T18705] netlink: 56 bytes leftover after parsing attributes in process `syz.2.21163'. [ 1350.188964][ C1] net_ratelimit: 9801 callbacks suppressed [ 1350.188998][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1350.209139][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1350.223001][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:6e:7c:20:79:75:74, vlan:0) [ 1350.236899][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1350.250826][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1350.264591][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:6e:7c:20:79:75:74, vlan:0) [ 1350.278106][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1350.291916][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1350.306629][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1350.320582][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1351.014520][T18730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21169'. [ 1351.300719][T14011] Bluetooth: hci1: command tx timeout [ 1351.331990][T18550] lo speed is unknown, defaulting to 1000 [ 1351.426980][T18734] bond1: option lp_interval: invalid value (0) [ 1351.487202][T18734] bond1: option lp_interval: allowed values 1 - 2147483647 [ 1351.781862][T18734] bond1 (unregistering): Released all slaves [ 1351.817274][T18751] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21174'. [ 1351.840820][T18751] netlink: 24 bytes leftover after parsing attributes in process `syz.4.21174'. [ 1351.905758][T18550] lo speed is unknown, defaulting to 1000 [ 1351.925717][T18751] netlink: 24 bytes leftover after parsing attributes in process `syz.4.21174'. [ 1351.950360][T17014] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1351.976068][T17014] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1352.152727][T18749] gretap2: entered promiscuous mode [ 1352.172143][T16991] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1352.274170][T16991] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1352.393659][T11896] pimreg3: left allmulticast mode [ 1353.380363][T14011] Bluetooth: hci1: command tx timeout [ 1353.409760][T11896] bond7 (unregistering): (slave ip6gretap1): Releasing active interface [ 1353.521462][T11896] batman_adv: batadv0: Removing interface: gretap1 [ 1353.661319][T11896] bond5 (unregistering): (slave geneve3): Releasing active interface [ 1353.744604][T11896] bond4 (unregistering): (slave geneve2): Releasing active interface [ 1355.199639][ C1] net_ratelimit: 10506 callbacks suppressed [ 1355.199672][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1355.219751][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1355.233178][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:6e:7c:20:79:75:74, vlan:0) [ 1355.246162][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1355.259730][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1355.272844][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:6e:7c:20:79:75:74, vlan:0) [ 1355.286243][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1355.299963][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1355.313998][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1355.326976][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1360.208694][ C1] net_ratelimit: 18639 callbacks suppressed [ 1360.208727][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1360.228007][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1360.240967][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:6e:7c:20:79:75:74, vlan:0) [ 1360.253990][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1360.267031][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1360.280418][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:6e:7c:20:79:75:74, vlan:0) [ 1360.293728][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1360.306671][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1360.320825][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1360.334165][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1361.123528][T11896] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 1361.135060][T11896] bond0 (unregistering): Released all slaves [ 1361.170965][T11896] bond1 (unregistering): (slave veth5): Releasing active interface [ 1361.183038][T11896] bond1 (unregistering): Released all slaves [ 1361.210330][T11896] bond2 (unregistering): Released all slaves [ 1361.224981][T11896] bond3 (unregistering): Released all slaves [ 1361.236986][T11896] bond4 (unregistering): Released all slaves [ 1361.251482][T11896] bond5 (unregistering): Released all slaves [ 1361.263625][T11896] bond6 (unregistering): Released all slaves [ 1361.276491][T11896] bond7 (unregistering): Released all slaves [ 1361.289487][T11896] bond8 (unregistering): Released all slaves [ 1361.303908][T11896] bond9 (unregistering): Released all slaves [ 1361.446722][T18770] syzkaller0: entered promiscuous mode [ 1361.468524][T18770] syzkaller0: entered allmulticast mode [ 1361.495160][T18785] pim6reg: entered allmulticast mode [ 1361.513522][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1361.662588][T18816] netlink: 28 bytes leftover after parsing attributes in process `syz.0.21181'. [ 1365.218761][ C1] net_ratelimit: 15001 callbacks suppressed [ 1365.218792][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1365.238707][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:6e:7c:20:79:75:74, vlan:0) [ 1365.252369][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1365.265752][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1365.278916][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:6e:7c:20:79:75:74, vlan:0) [ 1365.291933][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1365.304900][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1365.320689][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1365.333552][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1365.346581][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:6e:7c:20:79:75:74, vlan:0) [ 1365.447463][T18821] bond17: entered promiscuous mode [ 1365.755580][T11896] tipc: Left network mode [ 1365.802383][T18835] syzkaller0: entered promiscuous mode [ 1365.808059][T18835] syzkaller0: entered allmulticast mode [ 1368.687111][T18865] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1368.708563][T18850] syzkaller1: entered promiscuous mode [ 1368.724059][T18850] syzkaller1: entered allmulticast mode [ 1368.947308][T18879] Bluetooth: MGMT ver 1.23 [ 1368.966614][T18879] Bluetooth: hci1: too big key_count value 32778 [ 1370.228970][ C1] net_ratelimit: 13993 callbacks suppressed [ 1370.229002][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1370.248247][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1370.262225][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1370.275237][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1370.288241][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:6e:7c:20:79:75:74, vlan:0) [ 1370.301781][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1370.314911][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1370.328390][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:6e:7c:20:79:75:74, vlan:0) [ 1370.342228][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1370.355293][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1375.240520][ C1] net_ratelimit: 15274 callbacks suppressed [ 1375.240534][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1375.260233][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1375.273138][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:6e:7c:20:79:75:74, vlan:0) [ 1375.287081][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1375.300817][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1375.314735][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:6e:7c:20:79:75:74, vlan:0) [ 1375.327657][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1375.340642][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1375.353621][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1375.366519][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1380.248781][ C1] net_ratelimit: 17772 callbacks suppressed [ 1380.248812][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:6e:7c:20:79:75:74, vlan:0) [ 1380.268147][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1380.281112][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1380.294038][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:6e:7c:20:79:75:74, vlan:0) [ 1380.307339][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1380.320604][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1380.333524][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:6e:7c:20:79:75:74, vlan:0) [ 1380.347376][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1380.361441][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1380.374535][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1380.482842][T18895] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 1380.524488][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1380.865576][ T5621] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1380.880907][ T5621] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1380.888305][ T5621] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1380.897591][ T5621] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1380.910407][ T5621] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1381.577197][T18927] netlink: 32 bytes leftover after parsing attributes in process `syz.2.21201'. [ 1381.619491][T18927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21201'. [ 1381.774021][T18939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21203'. [ 1382.979454][ T5621] Bluetooth: hci5: command tx timeout [ 1383.030292][T18948] netlink: 20 bytes leftover after parsing attributes in process `syz.0.21204'. [ 1383.140283][T18948] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1383.392394][T18968] veth0: entered promiscuous mode [ 1384.219854][T18963] veth0: left promiscuous mode [ 1384.359501][ T5282] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1385.059409][ T5621] Bluetooth: hci5: command tx timeout [ 1385.258678][ C1] net_ratelimit: 12312 callbacks suppressed [ 1385.258708][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1385.277514][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1385.290161][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1385.302840][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1385.315846][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1385.329124][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:6e:7c:20:79:75:74, vlan:0) [ 1385.342055][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1385.354656][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1385.367323][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:6e:7c:20:79:75:74, vlan:0) [ 1385.381198][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1385.706244][T19005] : entered promiscuous mode [ 1385.843924][T18919] lo speed is unknown, defaulting to 1000 [ 1385.852681][T18550] bridge0: port 1(bridge_slave_0) entered blocking state [ 1385.915123][T18550] bridge0: port 1(bridge_slave_0) entered disabled state [ 1385.977416][T18550] bridge_slave_0: entered allmulticast mode [ 1386.003259][T19018] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1386.037848][T18550] bridge_slave_0: entered promiscuous mode [ 1386.124376][T18550] bridge0: port 2(bridge_slave_1) entered blocking state [ 1386.184623][T18550] bridge0: port 2(bridge_slave_1) entered disabled state [ 1386.257988][T18550] bridge_slave_1: entered allmulticast mode [ 1386.347580][T18550] bridge_slave_1: entered promiscuous mode [ 1386.824084][T19049] netlink: 'syz.2.21220': attribute type 1 has an invalid length. [ 1386.884200][T19049] netlink: 228 bytes leftover after parsing attributes in process `syz.2.21220'. [ 1386.958302][T18550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1387.047827][T18550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1387.066411][T19063] netlink: 28 bytes leftover after parsing attributes in process `syz.4.21224'. [ 1387.149380][ T5621] Bluetooth: hci5: command tx timeout [ 1387.451558][T18919] lo speed is unknown, defaulting to 1000 [ 1387.468157][T18550] team0: Port device team_slave_0 added [ 1387.496434][T18919] lo speed is unknown, defaulting to 1000 [ 1387.516614][T18550] team0: Port device team_slave_1 added [ 1387.841806][T18550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1387.928078][T18550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1388.108343][T18550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1388.231676][ T5282] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1388.331302][T18550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1388.361609][T18550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1388.425931][T19100] netlink: 40 bytes leftover after parsing attributes in process `syz.4.21231'. [ 1388.445934][T18550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1388.558488][T11896] hsr_slave_0: left promiscuous mode [ 1388.590685][T11896] hsr_slave_1: left promiscuous mode [ 1389.219961][ T5621] Bluetooth: hci5: command tx timeout [ 1389.451276][T17004] smbdirect: ib_dev[syz2] removed [ 1389.715345][T18550] hsr_slave_0: entered promiscuous mode [ 1389.756634][T18550] hsr_slave_1: entered promiscuous mode [ 1389.776786][T18550] debugfs: 'hsr0' already exists in 'hsr' [ 1389.815994][T18550] Cannot create hsr debugfs directory [ 1390.268825][ C1] net_ratelimit: 10034 callbacks suppressed [ 1390.268852][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1390.288316][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1390.301368][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:6e:7c:20:79:75:74, vlan:0) [ 1390.314513][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1390.327547][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1390.340593][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1390.353653][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1390.367519][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1390.381371][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:6e:7c:20:79:75:74, vlan:0) [ 1390.394558][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1391.054556][T11896] IPVS: stop unused estimator thread 0... [ 1391.351825][T18550] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1391.808395][T18550] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1391.947070][T19184] netlink: 'syz.4.21242': attribute type 1 has an invalid length. [ 1392.087562][T18919] bridge0: port 1(bridge_slave_0) entered blocking state [ 1392.169588][T18919] bridge0: port 1(bridge_slave_0) entered disabled state [ 1392.207503][T18919] bridge_slave_0: entered allmulticast mode [ 1392.250209][T18919] bridge_slave_0: entered promiscuous mode [ 1392.317435][T18919] bridge0: port 2(bridge_slave_1) entered blocking state [ 1392.348556][T19190] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21244'. [ 1392.377042][T18919] bridge0: port 2(bridge_slave_1) entered disabled state [ 1392.431324][T18919] bridge_slave_1: entered allmulticast mode [ 1392.467805][T18919] bridge_slave_1: entered promiscuous mode [ 1392.656541][T18550] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1392.859849][T18919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1392.926466][T18919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1393.217046][T18919] team0: Port device team_slave_0 added [ 1393.352303][T18550] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.480778][T18919] team0: Port device team_slave_1 added [ 1393.563221][T19213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21247'. [ 1393.608516][T18919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1393.664795][T18919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1393.802955][T18919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1394.086989][T18919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1394.123463][T18919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1394.176165][T19226] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.21248'. [ 1394.230728][T18919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1394.654906][T18919] hsr_slave_0: entered promiscuous mode [ 1394.696317][T18919] hsr_slave_1: entered promiscuous mode [ 1394.726672][T18919] debugfs: 'hsr0' already exists in 'hsr' [ 1394.766932][T18919] Cannot create hsr debugfs directory [ 1394.784842][T19250] vcan0: tx address claim with dlc 0 [ 1394.886819][T19250] netlink: 24 bytes leftover after parsing attributes in process `syz.0.21253'. [ 1395.084364][T18550] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1395.179633][T18550] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1395.254483][T19262] bond0: left promiscuous mode [ 1395.279558][ C1] net_ratelimit: 9419 callbacks suppressed [ 1395.279588][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1395.280570][T19262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1395.286800][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:6e:7c:20:79:75:74, vlan:0) [ 1395.318058][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1395.331174][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1395.344366][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:6e:7c:20:79:75:74, vlan:0) [ 1395.358296][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1395.368214][T18550] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1395.371422][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1395.390841][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:6e:7c:20:79:75:74, vlan:0) [ 1395.404022][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1395.417025][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1395.430395][T19262] netlink: 'syz.0.21256': attribute type 4 has an invalid length. [ 1395.474006][T18550] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1395.561641][T18550] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1395.629248][T18550] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1395.674717][T18550] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1395.742202][T18550] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1396.342231][T19303] netlink: 388 bytes leftover after parsing attributes in process `syz.2.21264'. [ 1396.437263][T18919] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1396.493138][T18919] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1396.541898][T18919] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1396.603850][T18919] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1396.662354][T18919] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1396.755215][T18919] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1396.818598][T18919] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1396.886863][T18919] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1397.021979][T18550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1400.289325][ C1] net_ratelimit: 12134 callbacks suppressed [ 1400.289348][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1400.309103][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:6e:7c:20:79:75:74, vlan:0) [ 1400.321828][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1400.334531][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1400.347188][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:6e:7c:20:79:75:74, vlan:0) [ 1400.360846][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1400.373491][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1400.386081][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:6e:7c:20:79:75:74, vlan:0) [ 1400.398906][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1400.411441][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1400.635206][T19346] vcan0: entered allmulticast mode [ 1400.786600][T19397] netlink: 'syz.2.21272': attribute type 4 has an invalid length. [ 1400.882799][T19397] netlink: 'syz.2.21272': attribute type 4 has an invalid length. [ 1400.921094][T18550] 8021q: adding VLAN 0 to HW filter on device team0 [ 1401.046913][T16991] bridge0: port 1(bridge_slave_0) entered blocking state [ 1401.054096][T16991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1401.352883][T16991] bridge0: port 2(bridge_slave_1) entered blocking state [ 1401.360061][T16991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1401.598424][T18919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1401.765533][T18919] 8021q: adding VLAN 0 to HW filter on device team0 [ 1401.875937][T11896] bridge0: port 1(bridge_slave_0) entered blocking state [ 1401.883106][T11896] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1402.014199][T19444] syzkaller0: entered promiscuous mode [ 1402.046548][T19444] syzkaller0: entered allmulticast mode [ 1402.143514][T17004] bridge0: port 2(bridge_slave_1) entered blocking state [ 1402.150698][T17004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1402.258241][T19445] netlink: 'syz.2.21280': attribute type 1 has an invalid length. [ 1402.279594][T19451] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.21281'. [ 1402.304615][T19445] netlink: 224 bytes leftover after parsing attributes in process `syz.2.21280'. [ 1403.765689][T18550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1403.961536][T19518] netlink: 'syz.4.21292': attribute type 11 has an invalid length. [ 1404.037135][T19518] netlink: 'syz.4.21292': attribute type 4 has an invalid length. [ 1404.117410][T19518] netlink: 'syz.4.21292': attribute type 6 has an invalid length. [ 1404.168602][T19518] netlink: 199556 bytes leftover after parsing attributes in process `syz.4.21292'. [ 1404.234694][T19516] bridge0: port 3(veth1_to_bridge) entered disabled state [ 1404.242020][T19516] bridge0: port 2(bridge_slave_1) entered disabled state [ 1404.249422][T19516] bridge0: port 1(bridge_slave_0) entered disabled state [ 1404.404180][T19523] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1404.434048][T19523] bond1: (slave lo): Enslaving as an active interface with an up link [ 1404.497356][T18550] veth0_vlan: entered promiscuous mode [ 1404.518221][T19551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21300'. [ 1404.557756][T19551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21300'. [ 1404.584720][T18550] veth1_vlan: entered promiscuous mode [ 1404.714401][T18550] veth0_macvtap: entered promiscuous mode [ 1404.821652][T14011] Bluetooth: hci5: command 0x0405 tx timeout [ 1404.882878][ T5621] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1404.892349][ T5621] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1404.902768][ T5621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1404.911537][ T5621] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1404.926270][ T5621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1404.982202][T19575] netlink: 16 bytes leftover after parsing attributes in process `syz.2.21304'. [ 1404.998028][T18919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1405.044988][T19575] nbd: couldn't find a device at index 0 [ 1405.268564][T19591] netlink: 28 bytes leftover after parsing attributes in process `syz.2.21306'. [ 1405.427679][T18919] veth0_vlan: entered promiscuous mode [ 1405.462093][T19602] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21308'. [ 1405.481934][T18919] veth1_vlan: entered promiscuous mode [ 1405.502239][T19604] netlink: 'syz.0.21309': attribute type 1 has an invalid length. [ 1405.521821][T19599] net_ratelimit: 7818 callbacks suppressed [ 1405.521848][T19599] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1405.536056][T18919] veth0_macvtap: entered promiscuous mode [ 1405.554924][T19606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21309'. [ 1405.587039][T19604] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1405.613852][T18919] veth1_macvtap: entered promiscuous mode [ 1405.622990][T19604] netlink: 32 bytes leftover after parsing attributes in process `syz.0.21309'. [ 1405.645196][T19599] netlink: 'syz.2.21308': attribute type 1 has an invalid length. [ 1405.657265][T18919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1405.676159][T19573] lo speed is unknown, defaulting to 1000 [ 1405.687652][T18919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1405.747621][ T148] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1405.789589][T17004] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1405.834904][T17014] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1405.866880][T17014] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1405.945108][T19628] tipc: Enabled bearer , priority 24 [ 1406.031720][T17014] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1406.072051][T19573] lo speed is unknown, defaulting to 1000 [ 1406.122330][T17004] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1406.243247][T17004] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1406.401202][ T148] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1406.425091][T19659] netlink: 'syz.4.21320': attribute type 1 has an invalid length. [ 1406.434152][T19659] netlink: 'syz.4.21320': attribute type 1 has an invalid length. [ 1406.443344][T19659] netlink: 'syz.4.21320': attribute type 8 has an invalid length. [ 1406.463917][T16991] bridge_slave_1: left allmulticast mode [ 1406.481984][T16991] bridge_slave_1: left promiscuous mode [ 1406.495802][T16991] bridge0: port 2(bridge_slave_1) entered disabled state [ 1406.517073][T16991] bridge_slave_0: left allmulticast mode [ 1406.530593][T16991] bridge_slave_0: left promiscuous mode [ 1406.537675][T19664] netlink: 'syz.4.21322': attribute type 1 has an invalid length. [ 1406.552136][T16991] bridge0: port 1(bridge_slave_0) entered disabled state [ 1406.562455][T19664] netlink: 'syz.4.21322': attribute type 2 has an invalid length. [ 1406.586300][T19664] netlink: 'syz.4.21322': attribute type 1 has an invalid length. [ 1406.676579][T16991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1406.705938][T16991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1406.736145][T16991] bond0 (unregistering): Released all slaves [ 1406.765682][T16985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1406.795000][T16985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1406.817730][T19670] veth0: entered promiscuous mode [ 1406.887788][T19668] veth0: left promiscuous mode [ 1406.893505][T19682] netlink: 'syz.4.21325': attribute type 1 has an invalid length. [ 1406.948576][T19684] IPVS: length: 247 != 8 [ 1406.958028][T17014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1406.980830][ T5621] Bluetooth: hci2: command tx timeout [ 1407.012233][T17014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1407.075119][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1407.148950][T19695] netlink: 'syz.0.21329': attribute type 15 has an invalid length. [ 1407.322729][T19706] __nla_validate_parse: 14 callbacks suppressed [ 1407.322757][T19706] netlink: 4 bytes leftover after parsing attributes in process `syz.5.21198'. [ 1407.370225][T19710] netlink: 4 bytes leftover after parsing attributes in process `syz.5.21198'. [ 1407.672157][T19733] netlink: 28 bytes leftover after parsing attributes in process `syz.2.21336'. [ 1407.684765][T19335] IPVS: starting estimator thread 0... [ 1407.704975][T16991] hsr_slave_0: left promiscuous mode [ 1407.722933][T16991] hsr_slave_1: left promiscuous mode [ 1407.730050][T19738] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1407.746897][T16991] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1407.760985][T19738] netlink: 'syz.2.21336': attribute type 1 has an invalid length. [ 1407.782688][T19738] netlink: 224 bytes leftover after parsing attributes in process `syz.2.21336'. [ 1407.805382][T16991] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1407.826487][T19735] IPVS: using max 51 ests per chain, 122400 per kthread [ 1407.877246][T16991] veth0_macvtap: left promiscuous mode [ 1407.907823][T16991] veth1_vlan: left promiscuous mode [ 1407.926223][T19752] "syz.5.21340" (19752) uses obsolete ecb(arc4) skcipher [ 1407.929834][T16991] veth0_vlan: left promiscuous mode [ 1407.940583][T19753] netlink: 256 bytes leftover after parsing attributes in process `syz.4.21341'. [ 1408.022360][T19759] netlink: 'syz.4.21341': attribute type 11 has an invalid length. [ 1408.040332][T19759] netlink: 224 bytes leftover after parsing attributes in process `syz.4.21341'. [ 1408.187266][T19767] netlink: 'syz.5.21346': attribute type 1 has an invalid length. [ 1408.313023][T16991] team0 (unregistering): Port device team_slave_1 removed [ 1408.327292][T16991] team0 (unregistering): Port device team_slave_0 removed [ 1408.451267][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1408.655544][T19794] netlink: 288 bytes leftover after parsing attributes in process `syz.4.21355'. [ 1408.665938][T19794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21355'. [ 1408.737899][T19803] netlink: 44 bytes leftover after parsing attributes in process `syz.2.21354'. [ 1408.740672][T19573] bridge0: port 1(bridge_slave_0) entered blocking state [ 1408.776198][T19573] bridge0: port 1(bridge_slave_0) entered disabled state [ 1408.794542][T19573] bridge_slave_0: entered allmulticast mode [ 1408.805388][T19803] netlink: 35 bytes leftover after parsing attributes in process `syz.2.21354'. [ 1408.815478][T19573] bridge_slave_0: entered promiscuous mode [ 1408.821110][T19573] bridge0: port 2(bridge_slave_1) entered blocking state [ 1408.843495][T19573] bridge0: port 2(bridge_slave_1) entered disabled state [ 1408.873265][T19573] bridge_slave_1: entered allmulticast mode [ 1408.903302][T19573] bridge_slave_1: entered promiscuous mode [ 1408.960458][T19792] syzkaller0: entered promiscuous mode [ 1408.968384][T19792] syzkaller0: entered allmulticast mode [ 1408.977044][T19815] 8021q: VLANs not supported on ip6_vti0 [ 1409.061934][ T5621] Bluetooth: hci2: command tx timeout [ 1409.085928][T19573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1409.102375][T19573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1409.162599][T19573] team0: Port device team_slave_0 added [ 1409.186919][T19573] team0: Port device team_slave_1 added [ 1409.228035][T19573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1409.246946][T19573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1409.322657][T19573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1409.367978][T19573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1409.387990][T19573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1409.424270][T19573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1409.500414][T19573] hsr_slave_0: entered promiscuous mode [ 1409.512797][T19573] hsr_slave_1: entered promiscuous mode [ 1409.519754][T19573] debugfs: 'hsr0' already exists in 'hsr' [ 1409.525508][T19573] Cannot create hsr debugfs directory [ 1409.587178][ T5282] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1409.756496][T19573] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.893481][T19573] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.942568][T19881] sch_fq: defrate 0 ignored. [ 1410.018079][T19573] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1410.096689][T19901] bond8: (slave veth0_to_bond): Releasing active interface [ 1410.218036][T19910] veth0_to_bond: entered allmulticast mode [ 1410.245822][T19915] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1410.268522][T19573] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1410.397634][T19910] veth0_to_bond: left allmulticast mode [ 1410.487039][T19573] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1410.504229][T19573] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1410.535763][T19573] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1410.576616][T19573] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1410.596556][T19573] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1410.610835][T19573] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1410.630438][T19573] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1410.654520][T19573] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1410.955709][T19967] vlan2: entered promiscuous mode [ 1410.968869][T19967] vlan0: entered promiscuous mode [ 1410.986558][T19967] vlan2: entered allmulticast mode [ 1410.998407][T19967] vlan0: entered allmulticast mode [ 1411.005878][T19967] veth0_vlan: entered allmulticast mode [ 1411.140551][ T5621] Bluetooth: hci2: command tx timeout [ 1411.167604][T19573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1411.190718][T19573] 8021q: adding VLAN 0 to HW filter on device team0 [ 1411.205024][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1411.212199][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1411.244283][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1411.251444][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1411.349948][T20002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1411.366306][T19573] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1411.405827][T19573] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1411.855514][T20038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1411.905806][T20038] validate_nla: 12 callbacks suppressed [ 1411.905837][T20038] netlink: 'syz.2.21406': attribute type 2 has an invalid length. [ 1412.281913][T20073] tipc: Started in network mode [ 1412.294532][T20073] tipc: Node identity 320f9d86c383, cluster identity 4711 [ 1412.339793][T20073] tipc: Enabled bearer , priority 0 [ 1412.363657][T20078] syzkaller0: entered promiscuous mode [ 1412.382252][T20076] __nla_validate_parse: 20 callbacks suppressed [ 1412.382268][T20076] netlink: 1 bytes leftover after parsing attributes in process `syz.4.21414'. [ 1412.399894][T20078] syzkaller0: entered allmulticast mode [ 1412.407071][T20082] x_tables: duplicate underflow at hook 2 [ 1412.426492][T20073] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1412.476375][T20073] tipc: Resetting bearer [ 1412.510393][T20072] tipc: Resetting bearer [ 1412.533152][T20072] tipc: Disabling bearer [ 1412.565465][T19573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1412.855148][T19573] veth0_vlan: entered promiscuous mode [ 1412.987048][T20111] xt_socket: unknown flags 0x50 [ 1413.002710][T20114] netlink: 'syz.0.21422': attribute type 10 has an invalid length. [ 1413.031449][T20111] netlink: 24 bytes leftover after parsing attributes in process `syz.2.21421'. [ 1413.103031][T20116] bond0 (unregistering): Released all slaves [ 1413.164260][T19573] veth1_vlan: entered promiscuous mode [ 1413.219516][ T5621] Bluetooth: hci2: command tx timeout [ 1413.254615][T19573] veth0_macvtap: entered promiscuous mode [ 1413.266014][T19573] veth1_macvtap: entered promiscuous mode [ 1413.285463][T19573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1413.343970][T19573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1413.385535][T16991] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1413.388867][T20130] netlink: 'syz.0.21425': attribute type 11 has an invalid length. [ 1413.399368][T20135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21426'. [ 1413.412440][T16991] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1413.417394][T20130] netlink: 180760 bytes leftover after parsing attributes in process `syz.0.21425'. [ 1413.432147][ T35] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1413.474969][ T35] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1413.646067][T16985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1413.689674][T16985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1413.737250][T16985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1413.754898][T16985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1413.887049][T20171] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1413.947670][T20173] netlink: 4 bytes leftover after parsing attributes in process `syz.5.21435'. [ 1413.971838][T20179] netlink: 28 bytes leftover after parsing attributes in process `syz.4.21436'. [ 1414.014803][T20180] netlink: 56 bytes leftover after parsing attributes in process `syz.2.21437'. [ 1414.143857][T20180] bond2 (unregistering): Released all slaves [ 1414.159938][T20188] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.21439'. [ 1414.293626][T20186] ip6gretap1: entered promiscuous mode [ 1414.318555][T20186] ip6gretap1: entered allmulticast mode [ 1414.340748][T20197] netlink: 207952 bytes leftover after parsing attributes in process `syz.5.21440'. [ 1414.733922][T20227] sctp: [Deprecated]: syz.5.21446 (pid 20227) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1414.733922][T20227] Use struct sctp_sack_info instead [ 1414.825292][T20229] sctp: [Deprecated]: syz.5.21446 (pid 20229) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1414.825292][T20229] Use struct sctp_sack_info instead [ 1415.252940][T20254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21454'. [ 1415.442437][T20270] openvswitch: netlink: Message has 5 unknown bytes. [ 1415.915964][T20308] netlink: 'syz.4.21469': attribute type 1 has an invalid length. [ 1415.982004][T20308] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 1416.324561][T20333] syz_tun: entered allmulticast mode [ 1416.418061][T20332] syz_tun: left allmulticast mode [ 1416.825436][T20388] netlink: 'syz.1.21493': attribute type 5 has an invalid length. [ 1416.848248][T20387] netlink: 'syz.1.21493': attribute type 5 has an invalid length. [ 1416.892179][T20390] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1416.992029][T20396] tipc: Enabled bearer , priority 0 [ 1417.021808][T20396] syzkaller0: entered promiscuous mode [ 1417.048243][T20396] syzkaller0: entered allmulticast mode [ 1417.085942][T20396] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1417.147310][T20396] tipc: Resetting bearer [ 1417.175445][T20395] tipc: Resetting bearer [ 1417.202125][T20395] tipc: Disabling bearer [ 1417.383357][ T35] syzkaller0: tun_net_xmit 76 [ 1417.408921][ T35] syzkaller0: tun_net_xmit 48 [ 1417.437539][T32512] syzkaller0: tun_net_xmit 76 [ 1417.607889][T20445] x_tables: unsorted entry at hook 3 [ 1417.882109][T20461] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 1417.946465][T20464] netlink: 'syz.2.21511': attribute type 3 has an invalid length. [ 1418.047818][T20469] syzkaller0: entered promiscuous mode [ 1418.090328][T20469] syzkaller0: entered allmulticast mode [ 1418.100766][T20477] netlink: 'syz.0.21513': attribute type 1 has an invalid length. [ 1418.153796][T20481] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1418.535976][T20516] nbd: must specify a device to reconfigure [ 1418.565844][T20518] __nla_validate_parse: 10 callbacks suppressed [ 1418.565862][T20518] netlink: 48 bytes leftover after parsing attributes in process `syz.1.21523'. [ 1418.610208][T20518] netlink: 48 bytes leftover after parsing attributes in process `syz.1.21523'. [ 1418.890610][T20545] netlink: 'syz.4.21529': attribute type 1 has an invalid length. [ 1418.906768][T20545] netlink: 96 bytes leftover after parsing attributes in process `syz.4.21529'. [ 1418.933991][T20545] netlink: 1 bytes leftover after parsing attributes in process `syz.4.21529'. [ 1418.946225][T20543] syzkaller0: entered promiscuous mode [ 1418.952745][T20543] syzkaller0: entered allmulticast mode [ 1418.963330][T20545] netlink: 'syz.4.21529': attribute type 1 has an invalid length. [ 1418.973582][T20545] netlink: 'syz.4.21529': attribute type 8 has an invalid length. [ 1418.995109][T20545] netlink: 582 bytes leftover after parsing attributes in process `syz.4.21529'. [ 1419.024717][T20548] bridge8: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1419.044311][T20549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1419.111129][T20553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1419.171675][T20556] syzkaller0: entered promiscuous mode [ 1419.178494][T20556] syzkaller0: entered allmulticast mode [ 1419.181095][T20549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1419.204650][T20558] tc_dump_action: action bad kind [ 1419.281950][T20562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1419.720017][T20578] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1419.758787][T20587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21539'. [ 1419.760487][T14011] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1419.776110][T14011] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1419.784124][T14011] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1419.792955][T14011] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1419.800895][T14011] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1419.896939][ T148] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1419.994949][T20602] netlink: 164 bytes leftover after parsing attributes in process `syz.0.21542'. [ 1420.033478][T20602] netlink: 164 bytes leftover after parsing attributes in process `syz.0.21542'. [ 1420.085743][T20602] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21542'. [ 1420.117849][ T148] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1420.216161][ T148] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1420.333516][ T148] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1420.438580][T20634] netlink: 'syz.0.21550': attribute type 1 has an invalid length. [ 1420.473652][T16985] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1420.495378][T20643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21550'. [ 1420.536883][T11896] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1420.559770][T20634] netlink: 'syz.0.21550': attribute type 3 has an invalid length. [ 1420.597687][T16985] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1420.607679][T20634] NCSI netlink: No device for ifindex 813332851 [ 1420.777685][T16985] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1420.911289][ T148] pim6reg: left allmulticast mode [ 1420.945110][ T148] vcan0: left allmulticast mode [ 1421.003524][T20671] netlink: 'syz.5.21558': attribute type 4 has an invalid length. [ 1421.053958][ T148] bond1 (unregistering): (slave ip6gretap0): Releasing active interface [ 1421.081138][T20671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1421.210714][ T148] bond2 (unregistering): (slave gretap1): Releasing active interface [ 1421.290596][ T148] bond7 (unregistering): (slave bridge5): Releasing backup interface [ 1421.310857][ T148] bridge5 (unregistering): left promiscuous mode [ 1421.349699][ T148] bond0 (unregistering): Released all slaves [ 1421.363769][ T148] bond1 (unregistering): Released all slaves [ 1421.390657][ T148] bond2 (unregistering): Released all slaves [ 1421.402146][ T148] bond3 (unregistering): Released all slaves [ 1421.417210][ T148] bond4 (unregistering): Released all slaves [ 1421.430246][ T148] bond5 (unregistering): Released all slaves [ 1421.442847][ T148] bond6 (unregistering): (slave veth3): Releasing active interface [ 1421.452073][ T148] bond6 (unregistering): Released all slaves [ 1421.480038][ T148] bond7 (unregistering): Released all slaves [ 1421.491597][ T148] bond8 (unregistering): Released all slaves [ 1421.502983][T20593] lo speed is unknown, defaulting to 1000 [ 1421.673556][ T148] : left promiscuous mode [ 1421.778348][ T148] tipc: Left network mode [ 1421.788148][T20693] netlink: 'syz.5.21562': attribute type 1 has an invalid length. [ 1421.860127][T14011] Bluetooth: hci0: command tx timeout [ 1422.069652][T20713] netlink: 'syz.2.21565': attribute type 10 has an invalid length. [ 1422.203020][T20593] lo speed is unknown, defaulting to 1000 [ 1422.720845][T20755] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input8 [ 1423.010181][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1423.032017][ T148] hsr_slave_0: left promiscuous mode [ 1423.155313][T20782] IPVS: set_ctl: invalid protocol: 41 172.20.20.33:20001 [ 1423.365701][T20768] team0 (unregistering): Port device team_slave_0 removed [ 1423.404845][T20768] team0 (unregistering): Port device team_slave_1 removed [ 1423.481193][T20789] bond2: entered promiscuous mode [ 1423.493046][T20789] bond2: entered allmulticast mode [ 1423.499563][T20789] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1423.512573][T16985] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1423.547913][T16985] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1423.604327][T16985] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1423.681388][T16985] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1423.767433][T20811] __nla_validate_parse: 11 callbacks suppressed [ 1423.767451][T20811] netlink: 8 bytes leftover after parsing attributes in process `syz.5.21589'. [ 1423.890968][ T148] IPVS: stop unused estimator thread 0... [ 1423.939350][ T5621] Bluetooth: hci0: command tx timeout [ 1423.965259][T20593] bridge0: port 1(bridge_slave_0) entered blocking state [ 1423.973123][T20593] bridge0: port 1(bridge_slave_0) entered disabled state [ 1423.981857][T20593] bridge_slave_0: entered allmulticast mode [ 1423.990414][T20593] bridge_slave_0: entered promiscuous mode [ 1424.007400][T20593] bridge0: port 2(bridge_slave_1) entered blocking state [ 1424.015481][T20593] bridge0: port 2(bridge_slave_1) entered disabled state [ 1424.030330][T20593] bridge_slave_1: entered allmulticast mode [ 1424.066107][T20593] bridge_slave_1: entered promiscuous mode [ 1424.133433][T20833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21594'. [ 1424.162296][T20593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1424.197377][T20593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1424.257177][T20843] netlink: 8 bytes leftover after parsing attributes in process `syz.5.21597'. [ 1424.347527][T20836] IPv6: NLM_F_CREATE should be specified when creating new route [ 1424.353142][T20593] team0: Port device team_slave_0 added [ 1424.393223][T20593] team0: Port device team_slave_1 added [ 1424.517804][T20593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1424.521149][T20870] xt_bpf: check failed: parse error [ 1424.536989][T20863] netlink: 24 bytes leftover after parsing attributes in process `syz.0.21599'. [ 1424.541926][T20593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1424.625346][T20593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1424.641634][T16985] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1424.654403][T16985] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1424.672200][T20593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1424.679987][T20593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1424.708284][T20593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1424.761058][T20593] hsr_slave_0: entered promiscuous mode [ 1424.775856][T20593] hsr_slave_1: entered promiscuous mode [ 1424.789891][T20593] debugfs: 'hsr0' already exists in 'hsr' [ 1424.796347][T20593] Cannot create hsr debugfs directory [ 1424.805645][T20890] xt_hashlimit: size too large, truncated to 1048576 [ 1424.901978][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1425.016878][T20898] netlink: 16 bytes leftover after parsing attributes in process `syz.2.21606'. [ 1425.027904][T20593] netdevsim netdevsim4 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1425.050436][T20898] dvmrp0: entered allmulticast mode [ 1425.099804][T20593] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1425.136470][T20593] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1425.160530][T20901] validate_nla: 1 callbacks suppressed [ 1425.160559][T20901] netlink: 'syz.2.21607': attribute type 1 has an invalid length. [ 1425.199299][T20593] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1425.246755][T20901] bond3: (slave geneve2): making interface the new active one [ 1425.256100][T20908] netlink: 28 bytes leftover after parsing attributes in process `syz.2.21607'. [ 1425.266487][T20901] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 1425.276210][ T35] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1425.285748][ T35] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1425.295012][ T35] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1425.305988][T20908] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1425.314696][ T35] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1426.019146][ T5621] Bluetooth: hci0: command 0x040f tx timeout [ 1427.602767][T20874] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1427.617880][T20593] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1427.667706][T20593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1427.684182][T20593] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1427.713737][T20593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1427.731331][T20593] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1427.764477][T20593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1427.800378][T20593] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1427.832233][T20593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1428.016738][T20931] bond4: option min_links: invalid value (18446744073709551614) [ 1428.053255][T20931] bond4: option min_links: allowed values 0 - 2147483647 [ 1428.087085][T20931] bond4 (unregistering): Released all slaves [ 1428.100721][ T5621] Bluetooth: hci0: command 0x040f tx timeout [ 1428.147565][T20933] tipc: Enabling of bearer rejected, media not registered [ 1428.421934][T20968] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1428.429689][T20968] IPv6: NLM_F_CREATE should be set when creating new route [ 1428.437328][T20968] IPv6: NLM_F_CREATE should be set when creating new route [ 1428.468703][T20973] netlink: 24 bytes leftover after parsing attributes in process `syz.1.21620'. [ 1428.479921][T20972] netlink: 8 bytes leftover after parsing attributes in process `syz.5.21619'. [ 1428.481637][T20968] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1428.494311][T20593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1428.544233][T20972] netlink: 4 bytes leftover after parsing attributes in process `syz.5.21619'. [ 1428.561833][T20593] 8021q: adding VLAN 0 to HW filter on device team0 [ 1428.581015][ T1052] bridge0: port 1(bridge_slave_0) entered blocking state [ 1428.588780][ T1052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1428.628425][T16991] bridge0: port 2(bridge_slave_1) entered blocking state [ 1428.635600][T16991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1429.008567][T21004] netlink: 32 bytes leftover after parsing attributes in process `syz.1.21627'. [ 1429.453305][T21034] bond10: Removing last arp target with arp_interval on [ 1429.672860][T21044] netlink: 56 bytes leftover after parsing attributes in process `syz.1.21633'. [ 1429.777744][T21058] netlink: 'syz.2.21635': attribute type 8 has an invalid length. [ 1429.808881][T21058] sch_fq: defrate 0 ignored. [ 1429.841626][T21051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21634'. [ 1430.035473][T20593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1430.172677][T21079] netlink: 28 bytes leftover after parsing attributes in process `syz.2.21638'. [ 1430.190319][ T5621] Bluetooth: hci0: command 0x040f tx timeout [ 1430.236885][T21080] netlink: 28 bytes leftover after parsing attributes in process `syz.2.21638'. [ 1430.355495][T21096] netlink: 'syz.5.21642': attribute type 23 has an invalid length. [ 1430.561747][T21107] netlink: 16 bytes leftover after parsing attributes in process `syz.2.21644'. [ 1430.697578][T21114] syzkaller0: entered promiscuous mode [ 1430.730447][T21114] syzkaller0: entered allmulticast mode [ 1430.846059][T21125] netlink: 32 bytes leftover after parsing attributes in process `syz.0.21649'. [ 1430.867014][T20593] veth0_vlan: entered promiscuous mode [ 1430.922221][T20593] veth1_vlan: entered promiscuous mode [ 1431.023731][T20593] veth0_macvtap: entered promiscuous mode [ 1431.075854][T20593] veth1_macvtap: entered promiscuous mode [ 1431.094578][T21141] tipc: Started in network mode [ 1431.112005][T21141] tipc: Node identity 322567e41118, cluster identity 4711 [ 1431.155365][T21141] tipc: Enabled bearer , priority 0 [ 1431.199940][T21146] syzkaller0: entered promiscuous mode [ 1431.212146][T21146] syzkaller0: entered allmulticast mode [ 1431.226862][T21140] tipc: Enabling of bearer rejected, already enabled [ 1431.275799][T20593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1431.316703][T21140] tipc: Resetting bearer [ 1431.322310][T21153] netlink: 'syz.2.21653': attribute type 18 has an invalid length. [ 1431.338368][T21140] tipc: Disabling bearer [ 1431.356768][T20593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1431.374557][T21153] netlink: 'syz.2.21653': attribute type 18 has an invalid length. [ 1431.395124][T21156] netlink: 10984 bytes leftover after parsing attributes in process `syz.0.21654'. [ 1431.407256][T16991] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1431.436922][T16991] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1431.450016][T21156] openvswitch: netlink: Flow key attr not present in new flow. [ 1431.483841][T16991] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1431.513959][T16991] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1431.566580][T16991] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1431.593455][T16991] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1431.606300][T16991] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1431.662032][T16991] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1431.752774][T21177] block nbd9: server does not support multiple connections per device. [ 1431.762509][T21177] block nbd9: shutting down sockets [ 1431.775821][T21180] netlink: 40 bytes leftover after parsing attributes in process `syz.0.21657'. [ 1431.843203][T16991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1431.877596][T16991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1431.925947][T16991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1431.966305][T16991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1432.013243][T21195] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1432.053396][T21195] bridge0: port 2(bridge_slave_1) entered disabled state [ 1432.061356][T21195] bridge0: port 1(bridge_slave_0) entered disabled state [ 1432.135276][T21200] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21538'. [ 1432.156513][T21200] bridge0: port 2(bridge_slave_1) entered disabled state [ 1432.170266][T21200] bridge_slave_1 (unregistering): left allmulticast mode [ 1432.178168][T21200] bridge_slave_1 (unregistering): left promiscuous mode [ 1432.195513][T21200] bridge0: port 2(bridge_slave_1) entered disabled state [ 1432.239348][T21202] netlink: 'syz.2.21665': attribute type 1 has an invalid length. [ 1432.297786][T21202] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1432.321283][T21208] vlan3: entered promiscuous mode [ 1432.326732][T21208] bridge0: entered promiscuous mode [ 1432.342947][T21210] bond4: (slave veth0_to_bond): making interface the new active one [ 1432.354779][T21210] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1432.452766][T21214] bridge0: port 1(bridge_slave_0) entered disabled state [ 1432.565881][T21214] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1432.604115][T21214] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1432.738067][T21230] vcan1: entered promiscuous mode [ 1432.745796][T21230] vcan1: entered allmulticast mode [ 1432.764505][T11896] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1432.786258][T11896] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1432.841707][T11896] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1432.861559][T11896] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1432.873811][T21242] xt_TCPMSS: Only works on TCP SYN packets [ 1432.907647][T21245] bridge0: port 1(bridge_slave_0) entered disabled state [ 1433.034723][T21254] netlink: 'syz.0.21681': attribute type 21 has an invalid length. [ 1433.068993][T21257] syzkaller0: entered promiscuous mode [ 1433.091187][T21257] syzkaller0: entered allmulticast mode [ 1433.241483][T21276] netlink: 'syz.4.21685': attribute type 21 has an invalid length. [ 1433.266690][T21276] IPv6: NLM_F_CREATE should be specified when creating new route [ 1433.290000][T21278] netlink: 'syz.2.21686': attribute type 2 has an invalid length. [ 1433.375686][T21262] tipc: Resetting bearer [ 1433.627888][T11894] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1433.642446][T11894] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1433.655886][T11894] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1433.666022][T11894] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1433.683321][T11894] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1433.722615][T11894] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1433.754857][T11894] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1433.779009][T11894] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1433.820368][T21312] Cannot find set identified by id 65534 to match [ 1433.878243][T21306] bond5: option lacp_rate: invalid value (41) [ 1433.905786][T21306] bond5 (unregistering): Released all slaves [ 1434.213447][T21341] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 1434.244533][T21341] Cannot find add_set index 0 as target [ 1434.291826][T21347] netlink: 'syz.4.21702': attribute type 29 has an invalid length. [ 1434.314542][T21347] __nla_validate_parse: 8 callbacks suppressed [ 1434.314558][T21347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21702'. [ 1434.353180][T21352] IPVS: length: 24 != 3384 [ 1434.380119][T21356] netlink: 'syz.5.21703': attribute type 1 has an invalid length. [ 1434.614585][T21372] netlink: 36 bytes leftover after parsing attributes in process `syz.4.21707'. [ 1434.720603][T21375] netlink: 'syz.4.21708': attribute type 1 has an invalid length. [ 1434.731627][T21375] netlink: 96 bytes leftover after parsing attributes in process `syz.4.21708'. [ 1434.751049][T21375] netlink: 1 bytes leftover after parsing attributes in process `syz.4.21708'. [ 1434.766719][T21375] netlink: 606 bytes leftover after parsing attributes in process `syz.4.21708'. [ 1434.821035][T21382] netlink: 28 bytes leftover after parsing attributes in process `syz.0.21711'. [ 1434.836276][T21384] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1434.923278][T21392] netlink: 220 bytes leftover after parsing attributes in process `syz.1.21714'. [ 1435.144688][T21412] xt_hashlimit: invalid interval [ 1435.252512][T21416] bond1: entered promiscuous mode [ 1435.262104][T21416] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1435.295667][T21416] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1435.303446][T21416] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1435.314443][T21416] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 1435.315349][T21427] sctp: [Deprecated]: syz.4.21726 (pid 21427) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1435.315349][T21427] Use struct sctp_sack_info instead [ 1435.341196][T21416] bond1: (slave ip6gre1): making interface the new active one [ 1435.349397][T21416] ip6gre1: entered promiscuous mode [ 1435.356010][T21416] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 1435.366568][T21429] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1435.378328][T21424] sctp: [Deprecated]: syz.4.21726 (pid 21424) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1435.378328][T21424] Use struct sctp_sack_info instead [ 1435.446177][T21421] syzkaller0: entered promiscuous mode [ 1435.457796][T21421] syzkaller0: entered allmulticast mode [ 1435.467459][T21428] netlink: 144 bytes leftover after parsing attributes in process `syz.2.21725'. [ 1435.740786][T21452] netlink: 12 bytes leftover after parsing attributes in process `syz.4.21735'. [ 1435.751550][T21452] netlink: 12 bytes leftover after parsing attributes in process `syz.4.21735'. [ 1435.878551][T21463] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1436.000904][T21469] xfrm0 speed is unknown, defaulting to 1000 [ 1436.029449][T21469] xfrm0 speed is unknown, defaulting to 1000 [ 1436.036732][T21469] xfrm0 speed is unknown, defaulting to 1000 [ 1436.066341][T21476] bridge: RTM_NEWNEIGH with invalid ether address [ 1436.085941][T21473] veth0_to_bond: entered allmulticast mode [ 1436.233818][T21484] netlink: Unknown conntrack attr (0) [ 1436.260532][T21485] 8021q: VLANs not supported on tunl0 [ 1436.396697][ T42] xfrm0 speed is unknown, defaulting to 1000 [ 1436.403469][T21469] infiniband syz1: set down [ 1436.422919][T21469] infiniband syz1: added xfrm0 [ 1436.440466][T21469] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1436.444238][T21469] infiniband syz1: Couldn't open port 1 [ 1436.461127][T21469] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1436.480098][T21469] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1436.504800][T21469] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1436.633503][T21469] RDS/IB: syz1: added [ 1436.651358][T21469] smc: adding ib device syz1 with port count 1 [ 1436.666748][T21469] smc: ib device syz1 port 1 has no pnetid [ 1436.684369][ T42] xfrm0 speed is unknown, defaulting to 1000 [ 1436.696967][T21469] xfrm0 speed is unknown, defaulting to 1000 [ 1436.943507][T21547] Cannot find del_set index 0 as target [ 1436.966615][T21547] validate_nla: 4 callbacks suppressed [ 1436.966631][T21547] netlink: 'syz.5.21760': attribute type 29 has an invalid length. [ 1437.013976][T21547] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1437.020503][T21547] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1437.053864][T21469] xfrm0 speed is unknown, defaulting to 1000 [ 1437.114129][T21556] sctp: [Deprecated]: syz.0.21763 (pid 21556) Use of int in maxseg socket option. [ 1437.114129][T21556] Use struct sctp_assoc_value instead [ 1437.242462][T21469] xfrm0 speed is unknown, defaulting to 1000 [ 1437.278340][T21565] netlink: 'syz.0.21765': attribute type 27 has an invalid length. [ 1437.318408][T21565] netlink: 'syz.0.21765': attribute type 4 has an invalid length. [ 1437.566146][T21469] xfrm0 speed is unknown, defaulting to 1000 [ 1437.764444][T14011] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1437.773313][T14011] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1437.782216][T14011] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1437.799775][T14011] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1437.819283][T14011] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1438.068020][T21469] xfrm0 speed is unknown, defaulting to 1000 [ 1438.183560][T21614] team0: entered promiscuous mode [ 1438.214790][T21614] team_slave_0: entered promiscuous mode [ 1438.239006][T21614] team_slave_1: entered promiscuous mode [ 1438.249243][T21614] erspan0: entered promiscuous mode [ 1438.260003][T21614] debugfs: 'hsr1' already exists in 'hsr' [ 1438.271346][T21614] Cannot create hsr debugfs directory [ 1438.439460][T21639] netlink: 'syz.5.21780': attribute type 4 has an invalid length. [ 1438.466090][T21639] openvswitch: netlink: IP tunnel dst address not specified [ 1438.468280][T21469] xfrm0 speed is unknown, defaulting to 1000 [ 1438.478215][T21639] netlink: 'syz.5.21780': attribute type 4 has an invalid length. [ 1438.489591][T21591] lo speed is unknown, defaulting to 1000 [ 1438.704242][T21469] xfrm0 speed is unknown, defaulting to 1000 [ 1438.741595][T16985] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1438.770738][T16985] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1438.783418][T16985] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1438.794800][T16985] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1438.864016][T11894] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1438.902528][ T1052] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1438.935909][T16985] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1438.936162][T21663] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1438.967971][T16985] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1438.980506][T16999] vlan3: left allmulticast mode [ 1438.986582][T16999] bridge_slave_0: left allmulticast mode [ 1438.993018][T16999] vlan3: left promiscuous mode [ 1439.004266][T16999] bridge_slave_0: left promiscuous mode [ 1439.010934][T16999] bridge0: port 3(vlan3) entered disabled state [ 1439.041034][T16999] dvmrp0: left allmulticast mode [ 1439.123922][T16999] bond3 (unregistering): (slave gretap1): Releasing backup interface [ 1439.237935][T16999] bond5 (unregistering): (slave bridge5): Releasing backup interface [ 1439.246830][T16999] bridge5 (unregistering): left promiscuous mode [ 1439.265414][T16999] bond1 (unregistering): Released all slaves [ 1439.277609][T16999] bond2 (unregistering): Released all slaves [ 1439.290136][T16999] bond3 (unregistering): (slave bond4): Releasing backup interface [ 1439.300355][T16999] bond3 (unregistering): Released all slaves [ 1439.318320][T16999] bond4 (unregistering): Released all slaves [ 1439.331482][T16999] bond5 (unregistering): Released all slaves [ 1439.345159][T16999] bond6 (unregistering): Released all slaves [ 1439.355467][T16999] bond7 (unregistering): Released all slaves [ 1439.366912][T16999] bond8 (unregistering): Released all slaves [ 1439.393787][T16999] bond9 (unregistering): Released all slaves [ 1439.404175][T16999] bond0 (unregistering): Released all slaves [ 1439.415453][T16999] bond10 (unregistering): Released all slaves [ 1439.431241][T21469] xfrm0 speed is unknown, defaulting to 1000 [ 1439.438221][T21591] lo speed is unknown, defaulting to 1000 [ 1439.438236][T21668] syzkaller1: entered allmulticast mode [ 1439.492544][T16999] : left promiscuous mode [ 1439.531805][T16999] tipc: Disabling bearer [ 1439.548162][T16999] tipc: Disabling bearer [ 1439.554612][T16999] tipc: Disabling bearer [ 1439.563524][T16999] tipc: Left network mode [ 1439.572566][T16999] IPVS: stopping backup sync thread 21384 ... [ 1439.591621][T21469] xfrm0 speed is unknown, defaulting to 1000 [ 1439.737723][T21675] __nla_validate_parse: 15 callbacks suppressed [ 1439.737742][T21675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21788'. [ 1439.756047][T21591] xfrm0 speed is unknown, defaulting to 1000 [ 1439.756070][T21675] netlink: 'syz.2.21788': attribute type 3 has an invalid length. [ 1439.859063][ T5621] Bluetooth: hci1: command tx timeout [ 1439.881177][T21469] xfrm0 speed is unknown, defaulting to 1000 [ 1440.003004][T21469] xfrm0 speed is unknown, defaulting to 1000 [ 1440.128552][T21469] xfrm0 speed is unknown, defaulting to 1000 [ 1440.162941][T21591] bridge0: port 1(bridge_slave_0) entered blocking state [ 1440.171199][T21591] bridge0: port 1(bridge_slave_0) entered disabled state [ 1440.179392][T21591] bridge_slave_0: entered allmulticast mode [ 1440.187781][T21591] bridge_slave_0: entered promiscuous mode [ 1440.197699][T21591] bridge0: port 2(bridge_slave_1) entered blocking state [ 1440.205604][T21591] bridge0: port 2(bridge_slave_1) entered disabled state [ 1440.213891][T21591] bridge_slave_1: entered allmulticast mode [ 1440.222345][T21591] bridge_slave_1: entered promiscuous mode [ 1440.284949][T21591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1440.330644][T21591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1440.502124][T21690] dvmrp0: entered allmulticast mode [ 1440.514897][T21591] team0: Port device team_slave_0 added [ 1440.524408][T21591] team0: Port device team_slave_1 added [ 1440.535820][T16999] hsr_slave_0: left promiscuous mode [ 1440.541947][T16999] hsr_slave_1: left promiscuous mode [ 1440.718537][T21591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1440.725772][T21591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1440.753230][T21591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1440.765717][T21591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1440.772662][T21591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1440.800298][T21591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1440.839324][T21591] hsr_slave_0: entered promiscuous mode [ 1440.846228][T21591] hsr_slave_1: entered promiscuous mode [ 1440.852645][T21591] debugfs: 'hsr0' already exists in 'hsr' [ 1440.858542][T21591] Cannot create hsr debugfs directory [ 1440.936127][T21591] netdevsim netdevsim0 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1440.983763][T21591] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1441.008396][T16999] IPVS: stop unused estimator thread 0... [ 1441.042851][T21591] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1441.141928][T21591] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1441.642167][T21646] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1441.680666][T21591] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1441.728369][T21591] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1441.780772][T21591] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1441.807440][T21591] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1441.828423][T21591] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1441.847718][T21591] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1441.860175][T21591] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1441.874936][T21591] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1441.916801][T21696] tc action pedit offset must be on 32 bit boundaries [ 1441.942433][ T5621] Bluetooth: hci1: command tx timeout [ 1442.073417][T21719] syzkaller0: entered promiscuous mode [ 1442.110045][T21719] syzkaller0: entered allmulticast mode [ 1442.243224][T21736] netlink: 12 bytes leftover after parsing attributes in process `syz.4.21800'. [ 1442.275404][T21591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1442.341343][T21736] bond1: entered promiscuous mode [ 1442.347928][T21736] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1442.379433][T21736] sock: sock_set_timeout: `syz.4.21800' (pid 21736) tries to set negative timeout [ 1442.443144][T21591] 8021q: adding VLAN 0 to HW filter on device team0 [ 1442.507657][T16991] bridge0: port 1(bridge_slave_0) entered blocking state [ 1442.514819][T16991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1442.567146][T16999] bridge0: port 2(bridge_slave_1) entered blocking state [ 1442.574329][T16999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1442.796312][T21773] netlink: 'syz.2.21807': attribute type 9 has an invalid length. [ 1443.584112][ T148] bridge_slave_1: left allmulticast mode [ 1443.616322][ T148] bridge_slave_1: left promiscuous mode [ 1443.640932][ T148] bridge0: port 2(bridge_slave_1) entered disabled state [ 1443.661358][T21828] netlink: 56 bytes leftover after parsing attributes in process `syz.1.21816'. [ 1443.675346][T21829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21817'. [ 1443.694025][T21828] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21816'. [ 1443.707322][ T148] bridge_slave_0: left allmulticast mode [ 1443.715745][ T148] bridge_slave_0: left promiscuous mode [ 1443.722296][ T148] bridge0: port 1(bridge_slave_0) entered disabled state [ 1443.757146][T21839] netlink: 104 bytes leftover after parsing attributes in process `syz.5.21819'. [ 1443.806536][T21844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21817'. [ 1443.824831][T21844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21817'. [ 1443.832333][T21839] netlink: 104 bytes leftover after parsing attributes in process `syz.5.21819'. [ 1444.018799][ T5621] Bluetooth: hci1: command tx timeout [ 1444.128577][ T148] lo: left allmulticast mode [ 1444.238536][ T148] bond2 (unregistering): (slave ip6gre2): Releasing backup interface [ 1444.247615][ T148] ip6gre2 (unregistering): left promiscuous mode [ 1444.279791][ T148] bond1 (unregistering): (slave vti0): Releasing backup interface [ 1444.317259][ T148] bond8 (unregistering): (slave geneve2): Releasing active interface [ 1444.384711][ T148] team0: Port device bridge2 removed [ 1444.398046][ T148] bond7 (unregistering): (slave bridge5): Releasing backup interface [ 1444.409421][ T148] bridge5 (unregistering): left promiscuous mode [ 1444.443277][ T148] bond12 (unregistering): (slave bridge8): Releasing backup interface [ 1444.452161][ T148] bridge8 (unregistering): left promiscuous mode [ 1444.458582][ T148] bridge8 (unregistering): left allmulticast mode [ 1444.477332][ T148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1444.488107][ T148] bond0 (unregistering): (slave team0): Releasing backup interface [ 1444.500021][ T148] bond0 (unregistering): Released all slaves [ 1444.510990][ T148] bond1 (unregistering): Released all slaves [ 1444.523083][ T148] bond2 (unregistering): Released all slaves [ 1444.534417][ T148] bond3 (unregistering): Released all slaves [ 1444.545675][ T148] bond4 (unregistering): Released all slaves [ 1444.557815][ T148] bond5 (unregistering): Released all slaves [ 1444.572926][ T148] bond6 (unregistering): Released all slaves [ 1444.599519][ T148] bond7 (unregistering): Released all slaves [ 1444.611286][ T148] bond8 (unregistering): Released all slaves [ 1444.622757][ T148] bond9 (unregistering): Released all slaves [ 1444.634223][ T148] bond10 (unregistering): Released all slaves [ 1444.654974][ T148] bond11 (unregistering): Released all slaves [ 1444.674200][ T148] bond12 (unregistering): Released all slaves [ 1444.686498][ T148] bond13 (unregistering): Released all slaves [ 1444.698286][ T148] bond14 (unregistering): Released all slaves [ 1444.715587][T21829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21817'. [ 1444.794690][T21591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1444.886573][T21866] __nla_validate_parse: 1 callbacks suppressed [ 1444.886591][T21866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21823'. [ 1444.983077][T21869] netlink: 'syz.5.21824': attribute type 7 has an invalid length. [ 1445.065360][T21867] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1445.145104][T21867] bond0: (slave bond6): Enslaving as an active interface with a down link [ 1445.217765][T21591] veth0_vlan: entered promiscuous mode [ 1445.267614][T21889] v: renamed from vlan0 (while UP) [ 1445.308073][T21591] veth1_vlan: entered promiscuous mode [ 1445.329998][T21889] netlink: 120 bytes leftover after parsing attributes in process `syz.1.21828'. [ 1445.374638][T21889] netlink: 128 bytes leftover after parsing attributes in process `syz.1.21828'. [ 1445.462252][T21591] veth0_macvtap: entered promiscuous mode [ 1445.527852][T21591] veth1_macvtap: entered promiscuous mode [ 1445.585902][T21903] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21832'. [ 1445.614421][T21901] sctp: [Deprecated]: syz.1.21831 (pid 21901) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1445.614421][T21901] Use struct sctp_sack_info instead [ 1445.645147][T21591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1445.691628][T21591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1445.752737][ T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1445.794062][ T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1445.840036][ T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1445.895049][ T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1445.980442][T21929] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21836'. [ 1445.981926][T21931] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20000 [ 1446.009838][T21927] syzkaller0: entered promiscuous mode [ 1446.017772][T21927] syzkaller0: entered allmulticast mode [ 1446.082586][T21937] netlink: 'syz.4.21836': attribute type 1 has an invalid length. [ 1446.092030][T21936] netlink: 8 bytes leftover after parsing attributes in process `syz.5.21838'. [ 1446.109781][ T5621] Bluetooth: hci1: command tx timeout [ 1446.131427][T21936] openvswitch: netlink: Flow key attr not present in new flow. [ 1446.183870][T21937] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1446.228571][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1446.285882][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1446.313209][T21941] bond2: (slave dummy0): making interface the new active one [ 1446.332448][T21941] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 1446.386361][T21937] : renamed from dummy0 (while UP) [ 1446.513967][T21954] lo: entered promiscuous mode [ 1446.532343][T21954] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1446.583632][T21962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21843'. [ 1446.603836][T21954] netlink: 32 bytes leftover after parsing attributes in process `syz.1.21842'. [ 1446.618299][T11896] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1446.631497][ T148] tipc: Left network mode [ 1446.636001][T11896] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1446.652055][T21954] netlink: 128 bytes leftover after parsing attributes in process `syz.1.21842'. [ 1446.680364][T21954] netlink: 20 bytes leftover after parsing attributes in process `syz.1.21842'. [ 1447.096935][T21988] netlink: 'syz.1.21850': attribute type 2 has an invalid length. [ 1447.202332][T22002] netlink: 'syz.0.21854': attribute type 24 has an invalid length. [ 1447.336230][T22009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1447.443918][T22015] netlink: 'syz.5.21861': attribute type 1 has an invalid length. [ 1447.664162][T22035] netlink: 'syz.5.21867': attribute type 11 has an invalid length. [ 1447.665702][T22034] netlink: 'syz.0.21865': attribute type 1 has an invalid length. [ 1447.796240][T22033] ip6gretap1: entered promiscuous mode [ 1447.821680][T22033] ip6gretap1: entered allmulticast mode [ 1447.852085][T22038] bridge0: port 2(bridge_slave_1) entered disabled state [ 1447.860049][T22038] bridge0: port 1(bridge_slave_0) entered disabled state [ 1448.417557][T22092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1448.437602][ T148] hsr_slave_0: left promiscuous mode [ 1448.459951][ T148] hsr_slave_1: left promiscuous mode [ 1448.474194][ T148] veth1_macvtap: left promiscuous mode [ 1448.480961][ T148] veth0_macvtap: left promiscuous mode [ 1448.628351][ T148] team0 (unregistering): Port device team_slave_1 removed [ 1448.642095][ T148] team0 (unregistering): Port device team_slave_0 removed [ 1448.724398][T16991] smbdirect: ib_dev[syś2] removed [ 1448.920409][T22127] openvswitch: netlink: Multiple metadata blocks provided [ 1449.027472][ T148] IPVS: stop unused estimator thread 0... [ 1449.197351][T22152] batadv1: entered allmulticast mode [ 1449.252915][T22160] netlink: zone id is out of range [ 1449.264541][T22164] netlink: zone id is out of range [ 1449.275079][T22160] netlink: zone id is out of range [ 1449.291332][T22164] netlink: zone id is out of range [ 1449.298358][T22160] netlink: zone id is out of range [ 1449.320855][T22164] netlink: zone id is out of range [ 1449.347231][T22164] netlink: zone id is out of range [ 1449.351573][T22160] netlink: zone id is out of range [ 1449.390003][T22173] lo: entered allmulticast mode [ 1449.390357][T22164] netlink: zone id is out of range [ 1449.410262][T22173] tunl0: entered allmulticast mode [ 1449.431671][T22173] gre0: entered allmulticast mode [ 1449.453875][T22173] gretap0: entered allmulticast mode [ 1449.465053][T22173] erspan0: entered allmulticast mode [ 1449.477692][T22173] ip_vti0: entered allmulticast mode [ 1449.486434][T22173] ip6_vti0: entered allmulticast mode [ 1449.495468][T22181] netlink: 'syz.0.21905': attribute type 13 has an invalid length. [ 1449.506487][T22173] sit0: entered allmulticast mode [ 1449.522104][T22173] ip6tnl0: entered allmulticast mode [ 1449.531098][T22173] ip6gre0: entered allmulticast mode [ 1449.538614][T22173] syz_tun: entered allmulticast mode [ 1449.552978][T22180] macvlan0: entered promiscuous mode [ 1449.634374][T22192] netlink: 'syz.1.21908': attribute type 1 has an invalid length. [ 1449.816609][T22209] netlink: 'syz.1.21913': attribute type 3 has an invalid length. [ 1449.865817][T22212] netlink: 'syz.5.21914': attribute type 14 has an invalid length. [ 1449.897037][T22215] __nla_validate_parse: 11 callbacks suppressed [ 1449.897066][T22215] netlink: 52 bytes leftover after parsing attributes in process `syz.2.21915'. [ 1449.934857][T22215] netlink: 52 bytes leftover after parsing attributes in process `syz.2.21915'. [ 1449.952439][T22215] netlink: 52 bytes leftover after parsing attributes in process `syz.2.21915'. [ 1449.960584][T22223] netlink: 12 bytes leftover after parsing attributes in process `syz.4.21917'. [ 1449.972990][T22221] xt_policy: too many policy elements [ 1449.993402][T22222] netlink: 12 bytes leftover after parsing attributes in process `syz.4.21917'. [ 1450.370078][T22249] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21922'. [ 1450.417657][T22249] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1450.434011][T22249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21922'. [ 1450.450696][T22249] bond1 (unregistering): Released all slaves [ 1450.517722][T22255] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1450.690448][T22265] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.21925'. [ 1450.822685][ T29] audit: type=1800 audit(1782171005.842:67): pid=22264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.21926" name="cgroup.controllers" dev="tmpfs" ino=551 res=0 errno=0 [ 1450.904295][T22272] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1450.975607][T22274] bridge0: port 2(bridge_slave_1) entered disabled state [ 1450.991348][T22274] bridge0: port 1(bridge_slave_0) entered disabled state [ 1451.050743][T22274] bridge_slave_0: left allmulticast mode [ 1451.056516][T22274] bridge_slave_0: left promiscuous mode [ 1451.065224][T22274] bridge0: port 1(bridge_slave_0) entered disabled state [ 1451.080808][T22274] bridge_slave_1: left allmulticast mode [ 1451.086551][T22274] bridge_slave_1: left promiscuous mode [ 1451.093058][T22274] bridge0: port 2(bridge_slave_1) entered disabled state [ 1451.106297][T22274] bond0: (slave bond_slave_0): Releasing backup interface [ 1451.120599][T22274] bond0: (slave bond_slave_1): Releasing backup interface [ 1451.141785][T22274] team0: Port device team_slave_0 removed [ 1451.157322][T22274] team0: Port device team_slave_1 removed [ 1451.170543][T22274] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1451.183271][T22274] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1451.197548][T22274] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1451.220183][T22274] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1451.349948][T22296] lo: entered allmulticast mode [ 1451.366059][T22296] lo: left allmulticast mode [ 1451.388256][T22296] netlink: 'syz.1.21933': attribute type 150 has an invalid length. [ 1451.437001][T22300] netlink: 4 bytes leftover after parsing attributes in process `syz.5.21937'. [ 1451.447162][T22301] netlink: 'syz.0.21936': attribute type 11 has an invalid length. [ 1451.458497][T22301] netlink: 'syz.0.21936': attribute type 10 has an invalid length. [ 1451.467601][T22302] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21938'. [ 1451.478576][T22300] lo: left allmulticast mode [ 1451.484117][T22300] tunl0: left allmulticast mode [ 1451.492669][T22300] gre0: left allmulticast mode [ 1451.497547][T22300] gretap0: left allmulticast mode [ 1451.503715][T22300] erspan0: left allmulticast mode [ 1451.510010][T22300] ip_vti0: left allmulticast mode [ 1451.515625][T22300] ip6_vti0: left allmulticast mode [ 1451.521990][T22300] sit0: left allmulticast mode [ 1451.526905][T22300] ip6tnl0: left allmulticast mode [ 1451.533426][T22300] ip6gre0: left allmulticast mode [ 1451.542984][T22300] syz_tun: left allmulticast mode [ 1451.604294][T22300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1451.618109][T22300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1451.680328][T22300] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 1451.707603][T22300] vlan2: left promiscuous mode [ 1451.713296][T22300] vlan0: left promiscuous mode [ 1451.718298][T22300] vlan2: left allmulticast mode [ 1451.724361][T22300] vlan0: left allmulticast mode [ 1451.732083][T22300] veth0_vlan: left allmulticast mode [ 1451.742485][T22300] bond1: left promiscuous mode [ 1451.752117][T22300] ip6gre1: left promiscuous mode [ 1451.771025][T22301] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1451.785772][T22310] bridge0: port 3(veth1_to_bridge) entered blocking state [ 1451.799313][T22310] bridge0: port 3(veth1_to_bridge) entered disabled state [ 1451.807458][T22310] veth1_to_bridge: entered allmulticast mode [ 1451.825556][T22310] veth1_to_bridge: entered promiscuous mode [ 1451.897284][T17014] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1451.942805][T17014] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1451.972394][T17014] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1451.982553][T17014] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1452.003390][T17014] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1452.013967][T17014] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1452.075448][T22344] xt_l2tp: wrong L2TP version: 0 [ 1452.282899][T22354] x_tables: unsorted entry at hook 1 [ 1452.302663][T22354] gtp0: entered promiscuous mode [ 1452.304837][T22352] netlink: 'syz.0.21946': attribute type 1 has an invalid length. [ 1452.308106][T22354] gtp0: entered allmulticast mode [ 1452.335417][T22359] netlink: 'syz.1.21948': attribute type 1 has an invalid length. [ 1452.535855][T22372] bond2 (unregistering): Released all slaves [ 1452.560071][T22376] Unknown options in mask b7f2 [ 1452.766117][T22391] block nbd9: Unsupported socket: should be TCP or UNIX. [ 1452.876687][T22396] ip6tnl0: Caught tx_queue_len zero misconfig [ 1452.900857][T22401] Cannot find set identified by id 65534 to match [ 1452.927633][T22396] vlan2: entered allmulticast mode [ 1452.937144][T22396] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1452.986487][T22399] lo speed is unknown, defaulting to 1000 [ 1453.397996][T22413] team_slave_0 (unregistering): left promiscuous mode [ 1453.415038][T22413] team0: Port device team_slave_0 removed [ 1453.516165][T22428] nbd: couldn't find a device at index 0 [ 1453.652159][T22434] atomic_op ffff888062fcd198 conn xmit_atomic 0000000000000000 [ 1453.678598][T22434] syzkaller0: entered promiscuous mode [ 1453.687581][T22434] syzkaller0: entered allmulticast mode [ 1453.696466][T22399] xfrm0 speed is unknown, defaulting to 1000 [ 1453.823508][T22446] tipc: Enabling of bearer rejected, failed to enable media [ 1453.893035][T22454] netlink: 'syz.0.21979': attribute type 1 has an invalid length. [ 1453.921487][T22454] bond2: entered promiscuous mode [ 1453.927081][T22454] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1454.027789][T22454] bond2: (slave bridge1): making interface the new active one [ 1454.036880][T22454] bridge1: entered promiscuous mode [ 1454.050627][T22454] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 1454.060575][T22461] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 1454.083851][T22459] nbd: couldn't find a device at index 0 [ 1454.283393][T22470] geneve2: entered promiscuous mode [ 1454.983637][T22518] netlink: 'syz.5.22002': attribute type 1 has an invalid length. [ 1455.015121][T22518] bond2: entered promiscuous mode [ 1455.021262][T22518] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1455.037733][T22518] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1455.045834][T22518] bond2: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 1455.057004][T22518] bond2: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 1455.070153][T22518] bond2: (slave ip6gre2): making interface the new active one [ 1455.077692][T22518] ip6gre2: entered promiscuous mode [ 1455.085460][T22518] bond2: (slave ip6gre2): Enslaving as an active interface with an up link [ 1455.200024][T22529] syzkaller0: entered promiscuous mode [ 1455.205562][T22529] syzkaller0: entered allmulticast mode [ 1455.296064][T22540] __nla_validate_parse: 16 callbacks suppressed [ 1455.296083][T22540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22008'. [ 1455.371434][T22543] syzkaller0: entered promiscuous mode [ 1455.380010][T22543] syzkaller0: entered allmulticast mode [ 1455.445417][T22551] netlink: 4 bytes leftover after parsing attributes in process `syz.5.22011'. [ 1455.624659][T22564] netlink: 24 bytes leftover after parsing attributes in process `syz.5.22012'. [ 1455.706027][T22570] netlink: 'syz.0.22015': attribute type 3 has an invalid length. [ 1455.783239][T22580] netlink: 4 bytes leftover after parsing attributes in process `syz.5.22016'. [ 1455.812308][T22582] netlink: 'syz.1.22019': attribute type 64 has an invalid length. [ 1455.859131][T14011] Bluetooth: hci3: command 0x0406 tx timeout [ 1458.228582][T22535] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1458.244869][T22577] netlink: 264 bytes leftover after parsing attributes in process `syz.0.22017'. [ 1458.257521][T22589] netlink: 256 bytes leftover after parsing attributes in process `syz.1.22022'. [ 1458.325193][T22592] netlink: 20 bytes leftover after parsing attributes in process `syz.4.22023'. [ 1458.470246][T22602] netlink: 'syz.5.22027': attribute type 1 has an invalid length. [ 1458.546124][T22602] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1458.550696][T22612] netlink: 'syz.0.22029': attribute type 1 has an invalid length. [ 1458.553491][T22608] netlink: 'syz.0.22029': attribute type 1 has an invalid length. [ 1458.654383][T22626] netlink: 'syz.5.22027': attribute type 1 has an invalid length. [ 1458.668180][T22626] netlink: 'syz.5.22027': attribute type 2 has an invalid length. [ 1458.737820][T22602] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1458.944821][T22663] netlink: 96 bytes leftover after parsing attributes in process `syz.0.22043'. [ 1458.987761][T22669] netlink: 'syz.2.22046': attribute type 7 has an invalid length. [ 1459.014265][T22669] netlink: 32 bytes leftover after parsing attributes in process `syz.2.22046'. [ 1459.152835][T22681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22049'. [ 1459.164615][T22681] netlink: 'syz.2.22049': attribute type 1 has an invalid length. [ 1459.169671][T22673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1459.181067][T22673] 8021q: adding VLAN 0 to HW filter on device team0 [ 1459.193843][T22673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1459.236141][T22673] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1459.255723][T22673] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1459.266671][T22673] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1459.277672][T22673] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1459.837849][T22714] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1459.864280][T22714] bond1: (slave veth0_to_bond): making interface the new active one [ 1459.874170][T22714] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1459.951548][T22727] net_ratelimit: 9 callbacks suppressed [ 1459.951566][T22727] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1460.050413][T22733] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 1460.105782][T20673] IPVS: starting estimator thread 0... [ 1460.125556][T22748] erspan0: entered promiscuous mode [ 1460.219563][T22744] IPVS: using max 53 ests per chain, 127200 per kthread [ 1460.900341][T22800] tipc: Started in network mode [ 1460.905506][T22800] tipc: Node identity , cluster identity 4711 [ 1460.912585][T22800] tipc: Failed to obtain node identity [ 1460.918145][T22800] tipc: Enabling of bearer rejected, failed to enable media [ 1460.930127][T22800] syzkaller0: entered promiscuous mode [ 1460.938318][T22800] syzkaller0: entered allmulticast mode [ 1460.946736][T22800] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 1461.088365][T22812] validate_nla: 1 callbacks suppressed [ 1461.088394][T22812] netlink: 'syz.1.22075': attribute type 1 has an invalid length. [ 1461.105668][T22812] netlink: 'syz.1.22075': attribute type 1 has an invalid length. [ 1461.129589][T22814] __nla_validate_parse: 5 callbacks suppressed [ 1461.129606][T22814] netlink: 28 bytes leftover after parsing attributes in process `syz.2.22076'. [ 1461.146096][T22814] netlink: 28 bytes leftover after parsing attributes in process `syz.2.22076'. [ 1461.157281][T22814] netlink: 'syz.2.22076': attribute type 4 has an invalid length. [ 1461.214832][T22820] netlink: 14 bytes leftover after parsing attributes in process `syz.2.22078'. [ 1461.274053][T22824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22080'. [ 1461.284384][T22824] veth0_macvtap: left promiscuous mode [ 1461.547146][T22845] nbd: must specify at least one socket [ 1462.192135][T22872] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1462.237963][T22872] bond4 (unregistering): Released all slaves [ 1462.280806][T22858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1462.297898][T22858] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 1462.456508][T22881] netlink: 'syz.5.22096': attribute type 9 has an invalid length. [ 1462.690782][T22899] netlink: 'syz.5.22100': attribute type 21 has an invalid length. [ 1462.748585][T22901] netlink: 'syz.4.22101': attribute type 17 has an invalid length. [ 1462.782312][T22907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22102'. [ 1463.021897][T22923] netlink: 24 bytes leftover after parsing attributes in process `syz.1.22102'. [ 1463.066757][T22929] bond4: Unable to set up delay as MII monitoring is disabled [ 1463.076866][T22929] bond4 (unregistering): Released all slaves [ 1463.263963][T22941] Bluetooth: MGMT ver 1.23 [ 1463.544904][T22961] vcan1: entered promiscuous mode [ 1463.550660][T22961] vcan1: entered allmulticast mode [ 1465.746582][T22908] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1465.756290][T22907] netlink: 'syz.1.22102': attribute type 1 has an invalid length. [ 1465.764886][T22907] netlink: 224 bytes leftover after parsing attributes in process `syz.1.22102'. [ 1466.091738][T22989] netlink: 'syz.5.22125': attribute type 10 has an invalid length. [ 1466.110302][T22995] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1466.142657][T22989] bond3: (slave veth0_to_bond): Releasing active interface [ 1466.184152][T22989] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1466.205481][T23003] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1466.216085][T23002] netlink: 32 bytes leftover after parsing attributes in process `syz.4.22128'. [ 1466.238117][T22998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22129'. [ 1466.257588][T23003] netlink: 20 bytes leftover after parsing attributes in process `syz.0.22130'. [ 1466.278886][T22998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22129'. [ 1466.299623][T22998] netlink: 'syz.1.22129': attribute type 14 has an invalid length. [ 1466.309459][T23007] netlink: 16 bytes leftover after parsing attributes in process `syz.2.22131'. [ 1466.318897][T22998] netlink: 'syz.1.22129': attribute type 13 has an invalid length. [ 1466.319732][T22999] syzkaller0: entered promiscuous mode [ 1466.349194][T22999] syzkaller0: entered allmulticast mode [ 1466.368870][ T148] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1466.380455][ T148] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1466.388908][ T42] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1466.413417][T23018] netlink: 'syz.4.22135': attribute type 33 has an invalid length. [ 1466.414149][T23017] netlink: 28 bytes leftover after parsing attributes in process `syz.0.22134'. [ 1466.437049][T22998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22129'. [ 1466.473856][T23018] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1466.486778][T23018] bond3 (unregistering): Released all slaves [ 1466.508262][T23027] netlink: 'syz.2.22137': attribute type 11 has an invalid length. [ 1466.522449][T23025] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1466.548528][T23027] netlink: 'syz.2.22137': attribute type 1 has an invalid length. [ 1466.560102][T23027] netlink: 96 bytes leftover after parsing attributes in process `syz.2.22137'. [ 1466.573254][T23027] netlink: 658 bytes leftover after parsing attributes in process `syz.2.22137'. [ 1466.583834][T23027] netlink: 1 bytes leftover after parsing attributes in process `syz.2.22137'. [ 1466.819376][T23050] Cannot find add_set index 0 as target [ 1466.988624][T23066] macsec1: entered promiscuous mode [ 1466.998885][ T5354] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1467.073555][T23068] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1467.124360][T23084] netlink: 'syz.2.22156': attribute type 11 has an invalid length. [ 1467.139170][ T42] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1467.216128][T23075] gretap1: entered promiscuous mode [ 1467.239736][T23075] batman_adv: batadv0: Adding interface: gretap1 [ 1467.264519][T23075] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 1467.310037][T23075] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 1467.390309][T11894] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1467.407003][T11894] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1467.437731][T11894] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1467.464851][T23108] netlink: 'syz.5.22165': attribute type 11 has an invalid length. [ 1467.466828][T11894] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1467.525092][T23115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1467.541660][T23114] : entered promiscuous mode [ 1467.643452][T23117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1467.654997][T23117] 8021q: adding VLAN 0 to HW filter on device team0 [ 1467.680366][T23117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1467.745906][T23117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1467.761764][T23117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1467.764600][T23134] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1467.773641][T23117] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1467.776907][T23134] IPv6: NLM_F_CREATE should be set when creating new route [ 1467.787431][T23117] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1467.823369][T23117] veth1_vlan: left promiscuous mode [ 1467.824477][T23134] block nbd9: Unsupported socket: should be TCP or UNIX. [ 1467.830460][T23117] veth0_vlan: left promiscuous mode [ 1467.852758][T23117] veth0_vlan: entered promiscuous mode [ 1467.864257][T23117] veth1_vlan: entered promiscuous mode [ 1467.892421][T23117] veth1_macvtap: left promiscuous mode [ 1467.899577][T23117] veth0_macvtap: left promiscuous mode [ 1467.905871][T23117] veth0_macvtap: entered promiscuous mode [ 1467.913072][T23117] veth1_macvtap: entered promiscuous mode [ 1467.923944][T23117] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1467.932460][T23117] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1467.941551][T23117] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1467.950656][T23117] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1467.964818][T23117] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1467.973213][T23117] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 1467.996111][T16987] bridge0: port 1(bridge_slave_0) entered blocking state [ 1468.003288][T16987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1468.013157][T16987] bridge0: port 2(bridge_slave_1) entered blocking state [ 1468.020287][T16987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1468.075958][T16989] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1468.102215][T16989] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1468.127676][T16989] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1468.144757][T16989] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1468.234876][T23151] netlink: 'syz.0.22177': attribute type 1 has an invalid length. [ 1468.247738][ T148] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1468.286846][ T7837] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1468.296112][ T148] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1468.312245][T16989] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1468.321783][T16989] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1468.360408][T23161] netlink: 'syz.0.22177': attribute type 5 has an invalid length. [ 1468.424072][T23159] netlink: 'syz.2.22181': attribute type 1 has an invalid length. [ 1468.466468][T23159] netlink: 'syz.2.22181': attribute type 1 has an invalid length. [ 1468.486010][T23159] netlink: 'syz.2.22181': attribute type 8 has an invalid length. [ 1468.550771][T23172] syzkaller0: entered promiscuous mode [ 1468.556670][T23172] syzkaller0: entered allmulticast mode [ 1468.738253][T23186] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1468.800134][T20673] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1468.950260][T23207] syzkaller1: entered promiscuous mode [ 1468.958535][T23207] syzkaller1: entered allmulticast mode [ 1469.139870][T20673] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1469.186740][T23228] Cannot find set identified by id 0 to match [ 1469.258378][T23232] syzkaller0: entered promiscuous mode [ 1469.273996][T23232] syzkaller0: entered allmulticast mode [ 1469.438585][T23246] ip6gretap1: entered promiscuous mode [ 1469.452820][T23246] ip6gretap1: entered allmulticast mode [ 1469.745020][T23267] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1469.752305][T23267] IPv6: NLM_F_CREATE should be set when creating new route [ 1469.795844][T23269] syzkaller0: entered promiscuous mode [ 1469.802564][T23269] syzkaller0: entered allmulticast mode [ 1470.225220][T23305] tipc: Started in network mode [ 1470.231529][T23305] tipc: Node identity de88f6aae4a3, cluster identity 4711 [ 1470.247435][T23305] tipc: Enabled bearer , priority 0 [ 1470.283603][T23303] tipc: Disabling bearer [ 1470.519461][T23328] sctp: [Deprecated]: syz.4.22230 (pid 23328) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1470.519461][T23328] Use struct sctp_sack_info instead [ 1470.547771][T23333] lo: Caught tx_queue_len zero misconfig [ 1470.567255][T23333] ipvlan1: entered promiscuous mode [ 1470.753939][T23344] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1470.986159][T23355] syzkaller0: entered promiscuous mode [ 1470.999287][T23355] syzkaller0: entered allmulticast mode [ 1471.015738][T23355] 0: reclassify loop, rule prio 0, protocol 800 [ 1471.054674][T23363] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 1471.054737][T23363] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 1471.066071][T23357] syzkaller0: entered promiscuous mode [ 1471.090524][T23357] syzkaller0: entered allmulticast mode [ 1471.124988][T23368] validate_nla: 6 callbacks suppressed [ 1471.125004][T23368] netlink: 'syz.4.22245': attribute type 21 has an invalid length. [ 1471.142053][T23358] syzkaller0: left promiscuous mode [ 1471.147391][T23358] syzkaller0: left allmulticast mode [ 1471.157960][T23368] IPv6: NLM_F_CREATE should be specified when creating new route [ 1471.169718][T23369] gre0: entered promiscuous mode [ 1471.176386][T23369] gre0: entered allmulticast mode [ 1471.183192][T23368] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1471.190464][T23368] IPv6: NLM_F_CREATE should be set when creating new route [ 1471.197714][T23368] IPv6: NLM_F_CREATE should be set when creating new route [ 1471.204972][T23368] IPv6: NLM_F_CREATE should be set when creating new route [ 1471.453196][T23386] __nla_validate_parse: 33 callbacks suppressed [ 1471.453213][T23386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22248'. [ 1471.587593][T23399] netlink: 'syz.5.22254': attribute type 1 has an invalid length. [ 1471.665735][T23399] netlink: 248 bytes leftover after parsing attributes in process `syz.5.22254'. [ 1471.738553][T23411] netlink: 'syz.5.22257': attribute type 10 has an invalid length. [ 1471.749396][T23411] netlink: 228 bytes leftover after parsing attributes in process `syz.5.22257'. [ 1471.800089][T23414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22259'. [ 1471.804216][T23417] netlink: 20 bytes leftover after parsing attributes in process `syz.2.22258'. [ 1471.867561][T23423] netlink: 'syz.1.22260': attribute type 17 has an invalid length. [ 1471.890777][T23423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22260'. [ 1471.904798][T23423] netlink: 28 bytes leftover after parsing attributes in process `syz.1.22260'. [ 1471.924085][T23423] erspan0: entered promiscuous mode [ 1471.932342][T23423] erspan0: left promiscuous mode [ 1472.064960][T23433] netlink: 10184 bytes leftover after parsing attributes in process `syz.5.22263'. [ 1472.075352][T23433] netlink: 20 bytes leftover after parsing attributes in process `syz.5.22263'. [ 1472.083495][T23440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22266'. [ 1472.244101][T23456] tc_dump_action: action bad kind [ 1472.480202][T23480] netlink: 'syz.1.22277': attribute type 30 has an invalid length. [ 1472.499021][ C0] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 1472.499039][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1472.651818][T23487] syzkaller0: entered promiscuous mode [ 1472.666440][T23487] syzkaller0: entered allmulticast mode [ 1472.676143][T23487] TC_ACT_REPEAT abuse ? [ 1472.704976][T23491] team0 (uninitialized): Failed to send options change via netlink (err -105) [ 1472.724126][T23491] team0: entered promiscuous mode [ 1472.729831][T23491] team0: entered allmulticast mode [ 1473.122130][T23521] netlink: 'syz.5.22289': attribute type 3 has an invalid length. [ 1473.367829][T23537] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1473.475722][T23545] syzkaller1: entered promiscuous mode [ 1473.484077][T23545] syzkaller1: entered allmulticast mode [ 1473.506079][T23545] syzkaller1: left promiscuous mode [ 1473.520128][T23545] syzkaller1: left allmulticast mode [ 1473.565522][T23550] netlink: 'syz.0.22298': attribute type 3 has an invalid length. [ 1473.712463][T23566] tipc: Enabling not permitted [ 1473.718141][T23566] tipc: Enabling of bearer rejected, failed to enable media [ 1473.841278][T23572] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 1474.694274][T23642] sock: sock_timestamping_bind_phc: sock not bind to device [ 1474.776167][T23650] netlink: 'syz.1.22323': attribute type 1 has an invalid length. [ 1474.853048][T23650] bond3: entered promiscuous mode [ 1474.859646][T23650] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1474.887263][T23655] bond0: (slave bond_slave_1): Releasing backup interface [ 1475.251362][T23682] xt_hashlimit: size too large, truncated to 1048576 [ 1475.332850][T23687] netlink: 'syz.0.22334': attribute type 1 has an invalid length. [ 1475.379740][T23687] bond5: entered promiscuous mode [ 1475.385194][T23687] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1475.395196][T23687] bond5: entered allmulticast mode [ 1475.419810][T23687] bond5: (slave bridge2): making interface the new active one [ 1475.427435][T23687] bridge2: entered promiscuous mode [ 1475.433960][T23687] bridge2: entered allmulticast mode [ 1475.441416][T23687] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 1475.537457][T23691] netlink: 'syz.5.22335': attribute type 1 has an invalid length. [ 1475.602264][T20673] IPVS: starting estimator thread 0... [ 1475.607925][T23700] IPVS: ip_vs_edit_dest(): server weight less than zero [ 1475.719487][T23705] IPVS: using max 49 ests per chain, 117600 per kthread [ 1475.982312][T23738] ip_vti0: entered promiscuous mode [ 1476.075141][T23744] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1476.136680][T23750] validate_nla: 2 callbacks suppressed [ 1476.136710][T23750] netlink: 'syz.1.22349': attribute type 1 has an invalid length. [ 1476.245053][T23750] bond4: entered promiscuous mode [ 1476.254968][ T5354] IPVS: starting estimator thread 0... [ 1476.264226][T23750] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1476.349544][T23760] IPVS: using max 51 ests per chain, 122400 per kthread [ 1476.366258][T23750] bond4: (slave bridge2): making interface the new active one [ 1476.375242][T23750] bridge2: entered promiscuous mode [ 1476.382979][T23750] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 1476.524864][T23771] syzkaller0: entered promiscuous mode [ 1476.542844][T23771] syzkaller0: entered allmulticast mode [ 1476.761267][T23793] geneve3: entered promiscuous mode [ 1476.766658][T23793] geneve3: entered allmulticast mode [ 1476.796828][T17013] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 1476.833140][T17013] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 1476.856699][T23793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1476.871427][T17013] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 1476.886437][T17013] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 1477.008412][T23810] netlink: 'syz.2.22368': attribute type 4 has an invalid length. [ 1477.024178][T23811] __nla_validate_parse: 23 callbacks suppressed [ 1477.024193][T23811] netlink: 8 bytes leftover after parsing attributes in process `syz.5.22367'. [ 1477.403552][T23819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22371'. [ 1477.537793][T23832] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22374'. [ 1477.554439][T23834] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.22375'. [ 1477.631533][T23840] netlink: 12 bytes leftover after parsing attributes in process `syz.1.22377'. [ 1477.698275][T23845] netlink: 28 bytes leftover after parsing attributes in process `syz.4.22379'. [ 1477.724263][T23840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22377'. [ 1477.761623][T23840] macvlan1: entered promiscuous mode [ 1477.767040][T23840] macvlan1: entered allmulticast mode [ 1477.896923][T23863] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.22381'. [ 1477.926855][T23855] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.22381'. [ 1478.291275][T23890] netlink: 'syz.5.22389': attribute type 3 has an invalid length. [ 1478.748891][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1480.843906][T23857] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1481.303877][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1494.104112][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1499.222690][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1513.937635][T14011] Bluetooth: hci5: command 0x0405 tx timeout [ 1524.194293][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1533.145449][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1585.998678][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1586.005672][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P23857/1:b..l [ 1586.013673][ C0] rcu: (detected by 0, t=10502 jiffies, g=359173, q=3191 ncpus=2) [ 1586.021583][ C0] task:syz.1.22382 state:R running task stack:25776 pid:23857 tgid:23856 ppid:19573 task_flags:0x400140 flags:0x00080003 [ 1586.035078][ C0] Call Trace: [ 1586.038366][ C0] [ 1586.041311][ C0] __schedule+0x17d9/0x56c0 [ 1586.045842][ C0] ? __pfx___schedule+0x10/0x10 [ 1586.050701][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 1586.055841][ C0] ? __pfx___schedule+0x10/0x10 [ 1586.060706][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1586.065750][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 1586.071135][ C0] preempt_schedule_common+0x82/0xd0 [ 1586.076426][ C0] ? nl80211_netlink_notify+0x46b/0x840 [ 1586.082082][ C0] preempt_schedule_thunk+0x16/0x40 [ 1586.087294][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 1586.092619][ C0] __local_bh_enable_ip+0xe1/0x130 [ 1586.097738][ C0] nl80211_netlink_notify+0x46b/0x840 [ 1586.103116][ C0] ? nl80211_netlink_notify+0x74/0x840 [ 1586.108592][ C0] notifier_call_chain+0x1a5/0x3d0 [ 1586.113764][ C0] blocking_notifier_call_chain+0x6a/0x90 [ 1586.119510][ C0] netlink_release+0x11f8/0x1aa0 [ 1586.124606][ C0] ? netlink_release+0x106/0x1aa0 [ 1586.129654][ C0] ? __pfx_netlink_release+0x10/0x10 [ 1586.134950][ C0] ? down_write+0x16d/0x200 [ 1586.139545][ C0] ? __pfx_down_write+0x10/0x10 [ 1586.144412][ C0] sock_close+0xad/0x220 [ 1586.148658][ C0] ? __pfx_sock_close+0x10/0x10 [ 1586.153515][ C0] __fput+0x418/0xa50 [ 1586.157536][ C0] task_work_run+0x1d9/0x270 [ 1586.162135][ C0] ? __pfx_task_work_run+0x10/0x10 [ 1586.167259][ C0] ? kick_process+0xeb/0x160 [ 1586.171865][ C0] get_signal+0x1181/0x12c0 [ 1586.176385][ C0] ? __fput_deferred+0x216/0x380 [ 1586.181340][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 1586.186944][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1586.193111][ C0] ? __x64_sys_sendmsg+0x25d/0x290 [ 1586.198241][ C0] ? rcu_is_watching+0x15/0xb0 [ 1586.203015][ C0] exit_to_user_mode_loop+0x104/0x730 [ 1586.208399][ C0] ? rcu_is_watching+0x15/0xb0 [ 1586.213167][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1586.219248][ C0] do_syscall_64+0x353/0x580 [ 1586.223855][ C0] ? trace_irq_disable+0x3b/0x140 [ 1586.228894][ C0] ? clear_bhb_loop+0x40/0x90 [ 1586.233579][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1586.239470][ C0] RIP: 0033:0x7f325319ce59 [ 1586.243888][ C0] RSP: 002b:00007f32540cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1586.252304][ C0] RAX: 000000000000001c RBX: 00007f3253415fa0 RCX: 00007f325319ce59 [ 1586.260279][ C0] RDX: 0000000000000840 RSI: 0000200000000200 RDI: 0000000000000005 [ 1586.268258][ C0] RBP: 00007f3253232e6f R08: 0000000000000000 R09: 0000000000000000 [ 1586.276232][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1586.284201][ C0] R13: 00007f3253416038 R14: 00007f3253415fa0 R15: 00007fffa0258bb8 [ 1586.292185][ C0] [ 1586.295206][ C0] rcu: rcu_preempt kthread starved for 5197 jiffies! g359173 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1586.306404][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1586.316383][ C0] rcu: RCU grace-period kthread stack dump: [ 1586.322273][ C0] task:rcu_preempt state:R running task stack:28040 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1586.335769][ C0] Call Trace: [ 1586.339054][ C0] [ 1586.341988][ C0] __schedule+0x17d9/0x56c0 [ 1586.346516][ C0] ? rcu_is_watching+0x15/0xb0 [ 1586.351298][ C0] ? rcu_is_watching+0x15/0xb0 [ 1586.356067][ C0] ? __pfx___schedule+0x10/0x10 [ 1586.360925][ C0] ? schedule+0x90/0x360 [ 1586.365185][ C0] ? rcu_is_watching+0x15/0xb0 [ 1586.369955][ C0] ? lock_release+0x4b/0x3c0 [ 1586.374561][ C0] schedule+0x164/0x360 [ 1586.378724][ C0] schedule_timeout+0x152/0x2c0 [ 1586.383582][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1586.388958][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1586.394253][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1586.400065][ C0] ? prepare_to_swait_event+0x322/0x350 [ 1586.405623][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 1586.410495][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1586.416650][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1586.421944][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1586.427154][ C0] ? trace_irq_enable+0x3b/0x140 [ 1586.432109][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 1586.436714][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1586.441920][ C0] ? __kthread_parkme+0x71/0x1f0 [ 1586.446868][ C0] ? __kthread_parkme+0x196/0x1f0 [ 1586.451901][ C0] kthread+0x388/0x470 [ 1586.455975][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1586.461184][ C0] ? __pfx_kthread+0x10/0x10 [ 1586.465779][ C0] ret_from_fork+0x514/0xb70 [ 1586.470374][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1586.475484][ C0] ? __switch_to+0xc89/0x1420 [ 1586.480174][ C0] ? __pfx_kthread+0x10/0x10 [ 1586.484764][ C0] ret_from_fork_asm+0x1a/0x30 [ 1586.489541][ C0] [ 1586.492558][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1586.498884][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1586.504096][ C1] NMI backtrace for cpu 1 [ 1586.504113][ C1] CPU: 1 UID: 101 PID: 5281 Comm: dhcpcd Not tainted syzkaller #0 PREEMPT(full) [ 1586.504131][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1586.504141][ C1] RIP: 0010:__find_rr_leaf+0x37c/0x740 [ 1586.504291][ C1] Code: c6 e8 98 a5 6f f7 85 db 74 33 e8 4f a1 6f f7 eb 05 e8 48 a1 6f f7 4d 85 f6 0f 84 45 02 00 00 4c 3b 74 24 78 0f 84 3a 02 00 00 2f a1 6f f7 4d 85 ff 0f 85 84 fd ff ff e9 cd fd ff ff e8 7c 95 [ 1586.504305][ C1] RSP: 0018:ffffc90000a08160 EFLAGS: 00000286 [ 1586.504320][ C1] RAX: ffffffff8a5654d8 RBX: 0000000000000000 RCX: ffff88801ef21f00 [ 1586.504332][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1586.504342][ C1] RBP: ffffc90000a082b8 R08: ffffc90000a083e0 R09: ffffc90000a083f0 [ 1586.504353][ C1] R10: ffffc90000a08240 R11: fffff5200014104a R12: 1ffff1100f3cbb8c [ 1586.504369][ C1] R13: dffffc0000000000 R14: ffff88805d4ee800 R15: ffffc90000a083b8 [ 1586.504382][ C1] FS: 00007f086ec79780(0000) GS:ffff88812537c000(0000) knlGS:0000000000000000 [ 1586.504395][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1586.504406][ C1] CR2: 00007fff1d582150 CR3: 00000000334e8000 CR4: 00000000003526f0 [ 1586.504420][ C1] Call Trace: [ 1586.504427][ C1] [ 1586.504439][ C1] ? __pfx___find_rr_leaf+0x10/0x10 [ 1586.504460][ C1] ? __pfx_fib6_node_lookup+0x10/0x10 [ 1586.504478][ C1] ? ip6_multipath_l3_keys+0x1ad/0x8a0 [ 1586.504496][ C1] fib6_table_lookup+0x3c6/0xae0 [ 1586.504520][ C1] ? __pfx_fib6_table_lookup+0x10/0x10 [ 1586.504534][ C1] ? rt6_multipath_hash+0x148b/0x19b0 [ 1586.504584][ C1] ip6_pol_route+0x229/0x14d0 [ 1586.504598][ C1] ? ip6_pol_route+0x163/0x14d0 [ 1586.504614][ C1] ? __pfx_ip6_pol_route+0x10/0x10 [ 1586.504628][ C1] ? ktime_get+0x45/0x220 [ 1586.504650][ C1] ? ktime_get+0x1f5/0x220 [ 1586.504678][ C1] ? lapic_next_event+0x11/0x20 [ 1586.504701][ C1] ? clockevents_program_event+0x491/0x630 [ 1586.504720][ C1] fib6_rule_action+0x9d7/0xc00 [ 1586.504801][ C1] ? fib_rules_lookup+0x99/0xeb0 [ 1586.504929][ C1] ? rcu_is_watching+0x15/0xb0 [ 1586.504946][ C1] ? __pfx_fib6_rule_action+0x10/0x10 [ 1586.504967][ C1] ? lock_acquire+0x5f/0x350 [ 1586.504989][ C1] ? rcu_is_watching+0x15/0xb0 [ 1586.505004][ C1] ? trace_irq_enable+0x3b/0x140 [ 1586.505025][ C1] ? fib6_rule_match+0x799/0xa80 [ 1586.505047][ C1] ? __pfx_fib6_rule_action+0x10/0x10 [ 1586.505069][ C1] fib_rules_lookup+0x770/0xeb0 [ 1586.505093][ C1] ? fib_rules_lookup+0x99/0xeb0 [ 1586.505118][ C1] ? __pfx_fib_rules_lookup+0x10/0x10 [ 1586.505140][ C1] ? l3mdev_update_flow+0x26/0x610 [ 1586.505218][ C1] ? l3mdev_update_flow+0x4ad/0x610 [ 1586.505241][ C1] fib6_rule_lookup+0x1a0/0x730 [ 1586.505263][ C1] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 1586.505278][ C1] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 1586.505302][ C1] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 1586.505322][ C1] ip6_route_input+0x78d/0xb20 [ 1586.505340][ C1] ? __pfx_ip6_route_input+0x10/0x10 [ 1586.505359][ C1] ? nf_nat_ipv6_in+0x200/0x2c0 [ 1586.505439][ C1] ? NF_HOOK+0x9e/0x3c0 [ 1586.505479][ C1] ? rcu_is_watching+0x15/0xb0 [ 1586.505497][ C1] ? ip6_rcv_finish_core+0x222/0x420 [ 1586.505524][ C1] ip6_rcv_finish+0x141/0x280 [ 1586.505544][ C1] NF_HOOK+0x336/0x3c0 [ 1586.505563][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1586.505581][ C1] ? NF_HOOK+0x9e/0x3c0 [ 1586.505599][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1586.505617][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1586.505641][ C1] process_backlog+0x774/0x1860 [ 1586.505693][ C1] ? irqentry_exit+0x218/0x8f0 [ 1586.505714][ C1] ? process_backlog+0x3c3/0x1860 [ 1586.505738][ C1] __napi_poll+0xaa/0x330 [ 1586.505756][ C1] net_rx_action+0x61d/0xf50 [ 1586.505780][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1586.505797][ C1] ? xfrm_dev_backlog+0x24b/0x3c0 [ 1586.505840][ C1] ? rcu_is_watching+0x15/0xb0 [ 1586.505859][ C1] ? net_tx_action+0xbff/0xc30 [ 1586.505880][ C1] handle_softirqs+0x225/0x840 [ 1586.505902][ C1] ? __irq_exit_rcu+0xca/0x220 [ 1586.505924][ C1] __irq_exit_rcu+0xca/0x220 [ 1586.505943][ C1] irq_exit_rcu+0x9/0x30 [ 1586.505961][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1586.505980][ C1] [ 1586.505986][ C1] [ 1586.505992][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1586.506009][ C1] RIP: 0010:__free_frozen_pages+0x3d9/0xd20 [ 1586.506032][ C1] Code: 07 65 48 ff 8c c1 98 92 3b 93 48 b8 00 00 00 00 00 fc ff df 80 3c 03 00 74 08 48 89 ef e8 ff 79 0e 00 48 c7 45 00 00 00 00 00 <49> 8d 6c 24 30 48 89 eb 48 c1 eb 03 48 b8 00 00 00 00 00 fc ff df [ 1586.506045][ C1] RSP: 0018:ffffc900034ff3c8 EFLAGS: 00000246 [ 1586.506059][ C1] RAX: dffffc0000000000 RBX: 1ffffd40000fba33 RCX: dffffc0000000000 [ 1586.506071][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffea00007dd180 [ 1586.506081][ C1] RBP: ffffea00007dd198 R08: ffffea00007dd187 R09: 1ffffd40000fba30 [ 1586.506094][ C1] R10: dffffc0000000000 R11: fffff940000fba31 R12: ffffea00007dd180 [ 1586.506106][ C1] R13: 1ffffd40000fba31 R14: 0000000000000000 R15: 0000000000000000 [ 1586.506123][ C1] ? __free_frozen_pages+0x217/0xd20 [ 1586.506144][ C1] ? __free_slab+0x172/0x280 [ 1586.506161][ C1] __slab_free+0x274/0x2c0 [ 1586.506186][ C1] qlist_free_all+0x99/0x100 [ 1586.506207][ C1] kasan_quarantine_reduce+0x148/0x160 [ 1586.506227][ C1] __kasan_slab_alloc+0x22/0x80 [ 1586.506249][ C1] __kmalloc_node_track_caller_noprof+0x48f/0x7b0 [ 1586.506271][ C1] ? alloc_skb_with_frags+0xc6/0x760 [ 1586.506337][ C1] ? __kmalloc_node_track_caller_noprof+0x346/0x7b0 [ 1586.506361][ C1] __alloc_skb+0x2bd/0x7a0 [ 1586.506382][ C1] alloc_skb_with_frags+0xc6/0x760 [ 1586.506407][ C1] sock_alloc_send_pskb+0x878/0x990 [ 1586.506430][ C1] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1586.506445][ C1] ? lock_release+0x4b/0x3c0 [ 1586.506466][ C1] ? __wake_up_common_lock+0x195/0x1f0 [ 1586.506488][ C1] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 1586.506511][ C1] unix_dgram_sendmsg+0x4da/0x17b0 [ 1586.506563][ C1] ? aa_file_perm+0x18b/0x15f0 [ 1586.506582][ C1] ? rcu_is_watching+0x15/0xb0 [ 1586.506598][ C1] ? rcu_is_watching+0x15/0xb0 [ 1586.506614][ C1] ? lock_release+0x4b/0x3c0 [ 1586.506635][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1586.506665][ C1] ? aa_file_perm+0x4ed/0x15f0 [ 1586.506681][ C1] ? aa_sock_msg_perm+0xda/0x1b0 [ 1586.506696][ C1] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 1586.506712][ C1] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 1586.506726][ C1] sock_write_iter+0x47a/0x4c0 [ 1586.506743][ C1] ? __pfx_sock_write_iter+0x10/0x10 [ 1586.506766][ C1] do_iter_readv_writev+0x612/0x8c0 [ 1586.506789][ C1] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1586.506813][ C1] ? bpf_lsm_file_permission+0x9/0x20 [ 1586.506834][ C1] ? security_file_permission+0x75/0x260 [ 1586.506905][ C1] ? rw_verify_area+0x203/0x4c0 [ 1586.506926][ C1] vfs_writev+0x343/0x990 [ 1586.506945][ C1] ? __pfx_vfs_writev+0x10/0x10 [ 1586.506973][ C1] do_writev+0x154/0x2e0 [ 1586.506989][ C1] ? __pfx_do_writev+0x10/0x10 [ 1586.507005][ C1] ? __secure_computing+0xe7/0x2b0 [ 1586.507036][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1586.507052][ C1] do_syscall_64+0x174/0x580 [ 1586.507072][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1586.507087][ C1] ? clear_bhb_loop+0x40/0x90 [ 1586.507105][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1586.507120][ C1] RIP: 0033:0x7f086ed03407 [ 1586.507134][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1586.507147][ C1] RSP: 002b:00007fff1d581a50 EFLAGS: 00000202 ORIG_RAX: 0000000000000014 [ 1586.507163][ C1] RAX: ffffffffffffffda RBX: 00007f086ec79780 RCX: 00007f086ed03407 [ 1586.507174][ C1] RDX: 0000000000000005 RSI: 00007fff1d581ab0 RDI: 000000000000000a [ 1586.507184][ C1] RBP: 000055d0355ae870 R08: 0000000000000000 R09: 0000000000000000 [ 1586.507194][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 000055d06a5ab000 [ 1586.507205][ C1] R13: 000000000000012c R14: 0000000000004801 R15: 000055d06a5a6024 [ 1586.507222][ C1] [ 1586.911925][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!