last executing test programs: 3m8.225590538s ago: executing program 4 (id=4781): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0xb, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70fd30, 0x25dddbbd, {0x0, 0x0, 0x0, r4, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x86, 0x3}, {0x5, 0x7}}}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0x4}, {{0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) 3m6.710783349s ago: executing program 4 (id=4791): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x21, @empty}}, 0xfffffc7a, 0x1, 0x72597d2a, 0x7, 0x0, 0x6, 0x7}, &(0x7f00000002c0)=0x9b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$tipc(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000500)={0xffffffffffffffff}) syz_emit_ethernet(0x1011, &(0x7f0000000780)={@broadcast, @broadcast, @void, {@x25={0x805, {0x0, 0x58, 0xf6, "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"}}}}, &(0x7f00000017c0)={0x0, 0x2, [0x2fc, 0xab8, 0xb72, 0x3d1]}) splice(r4, 0x0, r3, 0x0, 0xffffffffffff8000, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r5, 0x0, 0x25, 0x0, @val=@iter={0x0}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710439000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) syz_emit_ethernet(0x101a, &(0x7f00000025c0)=ANY=[], 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) 3m6.264586981s ago: executing program 4 (id=4795): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="1c00000022000106"], 0x1c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x81}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={'nicvf0\x00', @random="665fb8d72cdc"}) 3m2.881837306s ago: executing program 4 (id=4803): socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000340)="0ed037c8216dea754f726dea65a8f4feb8998598192347a3361d1b9721b26fe9a1bba3871328839266d14904df06213d972919acdf6d5a3d8bc8c7a9c7a5e57eeac3a324d1da9f82bbaff45362a019ffe8874d93dfff7b83ab57158cedda9fefe0c1612ea8dd0cefd67df27a3c2ab78ac5252ff6ffcc16ad8fd5b96564da22e2fa8224086496c224a9f0dac09a240fc47292d48f642fc6d9458e9ae91b1360a1b3d7196b143ed8638a6dec47f26d99b930ad9633c866484d27915933b00ab145b42a1c437abdf8cf0c3b4c07a0212d49c3dc0bfa4c33b6fe76f7a9328cad7b1d9a971ff650", 0xe5, 0x15, &(0x7f0000000440)={0x11, 0x8, r2, 0x1, 0x39, 0x6, @remote}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(r3, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r4, 0x100, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x339edad14e1a3e3) r5 = socket(0x400000000010, 0x3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000480)=[@in6={0xa, 0x4e22, 0x3, @loopback, 0x59}, @in6={0xa, 0x4e24, 0x7, @mcast2}, @in6={0xa, 0x4e24, 0x9, @private1, 0x9}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e23, 0x94d, @private1, 0x127b5a96}, @in={0x2, 0x4e22, @loopback}], 0x90) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000009d40)=@newtfilter={0x3374, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0xfff1}, {0x0, 0xfff1}, {0x8, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x3344, 0x2, [@TCA_BASIC_ACT={0x3340, 0x3, [@m_police={0x3290, 0x3, 0x0, 0x0, {{0xb}, {0x31cc, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x7, 0x3, 0x9, 0x5dd0, 0x7f, 0x8000, 0x10, 0x1, 0x8, 0xfffffffc, 0x4, 0xf0, 0x3, 0x200, 0xc, 0xfffffffb, 0x2, 0x2, 0x8663, 0x9a6, 0x9, 0x9, 0x5, 0x2, 0x2, 0x3, 0x40, 0x7, 0x6, 0x7, 0x273, 0x0, 0x9afd, 0x5, 0x5, 0x9, 0x2, 0x3, 0x0, 0x10000, 0x5, 0x4, 0x1, 0x7, 0x9, 0x8, 0x40, 0x7ff, 0x6, 0x7f, 0x8bfe, 0x44, 0xedf4, 0x8, 0x5, 0xb, 0x7fffffff, 0xa, 0x1, 0x5, 0xc, 0x4, 0x1e722680, 0x7, 0x40, 0x6, 0x80, 0x0, 0xfff, 0x0, 0x81, 0x5, 0x7, 0xc, 0x400, 0x7, 0x6, 0x9, 0x1, 0x6c12, 0x7f, 0x6, 0x0, 0x100, 0x9, 0x22ca, 0x10000, 0x5, 0x770d, 0x5, 0x80, 0x6, 0x8, 0x79f0, 0x2, 0x6, 0x1, 0x3, 0x1, 0x992c, 0x0, 0x7, 0x9, 0xffffffff, 0x2, 0x450c2abd, 0x0, 0x5, 0x5, 0xffffffff, 0x6, 0x84d, 0x7, 0xfffffff3, 0x8, 0x7, 0x9, 0x4, 0xbfb6, 0x1, 0x3ff, 0x7, 0x80000001, 0x8, 0x0, 0x80000000, 0xfff, 0xc3, 0x80, 0xcbfa94b, 0x7, 0x100, 0x9, 0xf, 0xdd, 0xb1df, 0x0, 0x3, 0xffff, 0x5, 0x149, 0x7, 0x0, 0x0, 0x8001, 0x6eca, 0x2, 0x0, 0x3, 0x8, 0x0, 0x7a09, 0x1, 0x3, 0x1, 0x7fffffff, 0xdf, 0x1000, 0x6, 0x6, 0xfffffff0, 0x80, 0x0, 0x401, 0x13a3, 0x1b3d, 0x9, 0x5, 0x6, 0x2, 0x10, 0x7, 0x3ff, 0x9, 0x1c000000, 0x200, 0x6, 0xd, 0x101, 0xa5, 0x2, 0x70, 0x5, 0x5, 0x2, 0x10, 0x26, 0x6, 0x3, 0x1, 0x6, 0x1, 0xffff8000, 0x1, 0x8, 0x5, 0x1, 0x3, 0x2, 0x7fffffff, 0x0, 0x2, 0x6, 0x8, 0x40, 0xffff0001, 0xff, 0x7, 0x8001, 0x63, 0x7, 0x6, 0xffffff7f, 0x1, 0x1, 0x6, 0x6, 0x1ff, 0x800, 0x8001, 0x2, 0xa, 0x1, 0x5, 0x9, 0x6, 0x40000, 0x4, 0x80000000, 0xeef, 0x7, 0x2, 0x7, 0x8, 0x6, 0x300000, 0xf4, 0x3, 0x5, 0x100, 0x1, 0x6000000, 0x4, 0x5, 0x7, 0x4, 0x3, 0xf, 0x3, 0x280, 0x401, 0xf57, 0x6, 0x40, 0x5]}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x9, 0xd8b1, 0x1, 0x4, 0x67, 0x1, 0xfffff801, 0x6, 0xdc, 0x401, 0x6, 0xfffffe01, 0x8, 0x7, 0x2, 0x9, 0x1, 0x28, 0x1, 0x5, 0x80000001, 0x7, 0x385c, 0x7, 0xfffffff9, 0xf, 0x1, 0x9, 0x8, 0x2e6, 0x0, 0xee, 0xe5b4, 0x1, 0xf, 0x1000, 0x7, 0xfc15, 0x7, 0x7, 0x4, 0x8, 0x3, 0x2, 0xa, 0x9, 0x5, 0xd, 0x200, 0x2b2b060f, 0x4, 0x0, 0x4, 0xffffcb1d, 0x0, 0x4, 0x5aa, 0x79b6, 0x1, 0x78000000, 0x2, 0x2, 0x289, 0xf63c, 0x4d3bf4b3, 0x7f, 0x2, 0x8, 0x2, 0x1, 0xf3f8, 0xfffffffd, 0x3, 0x3, 0x8e1, 0x3, 0x0, 0x7, 0x79, 0x4, 0x9e, 0x3, 0xffff0001, 0x1, 0x5, 0x8001, 0x6, 0x1, 0x4, 0x2, 0x1, 0x1, 0x9, 0x28400000, 0x40, 0x6a, 0x0, 0x5, 0x8000, 0x2, 0x6, 0x7, 0x10, 0x3, 0xd, 0x1, 0x6, 0x8, 0x1, 0x0, 0x5, 0x9, 0x5, 0x7, 0x101, 0xf4, 0x0, 0x3, 0x7, 0x8, 0x3, 0x200, 0x5, 0x8, 0xe0, 0x2, 0xfcf, 0x81, 0x8f55, 0x9, 0x95, 0x2, 0x5, 0x101, 0x9, 0xfffffffb, 0x7, 0x80000001, 0x8, 0x1, 0x2, 0x2bc, 0x54, 0x60d, 0x5, 0x5, 0x0, 0x9, 0x5, 0x0, 0x2, 0xfffffff2, 0x9, 0x8001, 0x5, 0x6, 0x580000, 0x401, 0x1ff, 0x760, 0x5, 0x0, 0x5, 0x81, 0x7, 0xfff, 0x2, 0x8, 0x3, 0x200, 0x2, 0x7, 0x9, 0xfffffffa, 0xb, 0x7f, 0x4, 0x7, 0x10001, 0x0, 0x7, 0x77a, 0x2, 0x5, 0x3, 0x8, 0x3, 0xc, 0x1, 0x3, 0x0, 0x1, 0x7, 0x6, 0xd665, 0x7, 0x9, 0x3, 0x3, 0x1, 0x9, 0x0, 0x7f, 0x8, 0x0, 0xe, 0x3, 0x1, 0x8, 0x8, 0xfa, 0x80, 0x1, 0x2, 0x7f, 0x5, 0x10000, 0xfffffffb, 0x81000000, 0x1, 0x10, 0x2, 0x2, 0xfffff801, 0x9, 0xd583, 0x100, 0x5, 0x3, 0x6, 0x4, 0x4, 0x1, 0x6, 0x80000001, 0x1, 0x1, 0x57f, 0xe, 0xee, 0x29d4e241, 0x27, 0x3, 0x7, 0x46e8, 0xfffffffa, 0x529, 0x5, 0x3ff, 0x2, 0x6, 0x0, 0x4, 0x6, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x6, 0x3, 0x7fffffff, 0x8b, 0x8, 0x3, 0x8, 0x7, 0x9, 0x60bc, 0xc, 0x100, 0x2, 0x13, 0x1, 0x10000, 0x5, 0x1, 0xffffffff, 0x2, 0x1b1, 0x0, 0xff, 0xf85, 0xfff, 0x100, 0x3, 0x5a, 0x673d, 0x3ff, 0xfd, 0x1, 0x7b, 0x67, 0xafe2, 0x0, 0x4, 0x100, 0x8, 0x4, 0x7, 0x8, 0x10001, 0x4, 0xea14, 0x4, 0x8, 0x1, 0x1, 0x7b8, 0xfff, 0xfb, 0x6, 0x9c, 0x1, 0x6, 0x80000001, 0x7, 0x3, 0x3, 0x2, 0x0, 0x7, 0x2, 0x7, 0x5, 0x1, 0x9, 0x80000000, 0xffff, 0x8d3b, 0x3a000000, 0x9, 0x0, 0x1, 0xe, 0x6, 0x24000, 0x10, 0x7, 0xa58, 0xdcf6, 0x2, 0x3, 0x7f, 0x5, 0xf316, 0x1, 0x0, 0x7fff, 0x2, 0x7, 0xc, 0x7f, 0x3ff, 0x5, 0x80, 0x2, 0x2, 0x674f, 0x6, 0x0, 0xffff0000, 0xd, 0x1f, 0xffff8496, 0x0, 0x2, 0xfffffffc, 0x80000000, 0x0, 0xffff7fff, 0xd, 0x8, 0x7, 0x10001, 0x1, 0x0, 0x2, 0x3, 0x4, 0x6, 0x479, 0xfff, 0x80000000, 0x3, 0x59fb, 0x1, 0x3, 0x7fff, 0x3, 0x5, 0x1, 0x1, 0x1, 0xc, 0x0, 0x5, 0x4, 0x6, 0x2, 0x1, 0x3, 0x4, 0x7fa, 0x7, 0x8, 0x9, 0x31a3f8a9, 0x6, 0x8, 0x8, 0x2a48, 0x1800000, 0x80000000, 0xfffffffc, 0x2, 0x5, 0x7, 0x2, 0x5, 0x7, 0x3, 0x4, 0x8001, 0x6, 0x7, 0x3a, 0xff, 0x8, 0x4, 0x7, 0x5, 0x2ad, 0x5, 0x788e, 0x5, 0x3, 0x5, 0x9, 0x8, 0x2, 0x5, 0xffffffff, 0x7, 0x10000, 0x4, 0x7, 0xec25, 0x18c6, 0x4, 0x33a, 0x0, 0xeb, 0x80000000, 0x9, 0x4, 0x2, 0x24, 0xd29, 0x8, 0x7, 0x100, 0x7fffffff, 0x8, 0x486, 0xb, 0x5, 0xca, 0x7fff, 0xffff, 0x40, 0x3, 0xfc, 0x5, 0x3, 0x8b, 0x1, 0x9, 0xfff, 0x95fd, 0x7f, 0x6, 0x5, 0xf, 0x4, 0x6, 0xffff, 0xadb, 0x9, 0x7, 0xffffffff, 0x81, 0x5, 0xc3e9, 0x2, 0xfff, 0x3, 0x8, 0x4, 0x2, 0xf, 0xfffffffc, 0x5, 0x80, 0x3, 0x400, 0x40, 0x9, 0x4, 0x3, 0x0, 0x4, 0xfe2b, 0x1]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7fffffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x833a, 0x2, 0x4, 0x98, 0x7, {0xf, 0x2, 0x101, 0xb, 0x9, 0x9}, {0x19, 0x1, 0x17e2, 0x2}, 0x3, 0x9, 0x1}}, @TCA_POLICE_RATE64={0xc, 0x8, 0xdc53}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x29}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x5, 0xff, 0x3, 0xa, {0x0, 0x2, 0x7a03, 0x8000, 0x7, 0xa0d}, {0x4, 0x1, 0x3, 0x2de, 0x9, 0xfff}, 0x6, 0xfffffffb, 0xc477}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x7, 0x6, 0x3, 0x0, 0x5, 0x9, 0x2, 0xd, 0x4, 0x9, 0x6, 0x8, 0x5, 0x800, 0x2926aa84, 0x10000, 0x9, 0xb2, 0x49b, 0xd6ae, 0x6, 0x1, 0x1, 0x1, 0xf54d, 0x8, 0x6, 0x78e3, 0x1, 0xf2c, 0x5, 0x1, 0xf, 0xf5e, 0x521, 0x200d, 0x6, 0x0, 0x7, 0xb, 0x4, 0x4, 0x10001, 0x9, 0x9, 0x9b, 0x6, 0x4, 0xffffffff, 0xd3, 0x2, 0x4, 0x2, 0x1, 0xdd9, 0x6, 0x2, 0x3, 0x9, 0x7, 0x3fe000, 0x3, 0x8ee, 0x63, 0x10001, 0x6, 0xfff, 0xfffffffd, 0x7ff, 0x8001, 0x101, 0x7, 0x835e, 0x6, 0xfffffffc, 0x8, 0xfffffffb, 0x0, 0x6, 0x5, 0x8, 0x10000, 0x8, 0xfffffffa, 0x0, 0x3, 0x3, 0x8ec, 0x4, 0x675c, 0x5, 0x6, 0xa, 0xd48b, 0x3, 0x5, 0x3, 0x8, 0x101, 0x1000, 0x7, 0x8, 0x9, 0x8, 0x6, 0x1ff, 0x9, 0x6, 0x6, 0x8, 0x8, 0x7, 0xd, 0x80, 0x248ae0bd, 0x1ff, 0x8ce, 0x80, 0x8, 0xa, 0x100, 0x4a2, 0x83, 0x80000001, 0x3, 0x8, 0xfffffffd, 0x4, 0x2, 0x401, 0x4, 0x9, 0xad, 0x10001, 0x100, 0xffff6508, 0x3, 0x6, 0x4, 0x9e, 0x7, 0x75, 0x80000001, 0x4, 0x7, 0x0, 0x2, 0x9, 0x0, 0x1, 0xb, 0xf, 0x3, 0x7, 0x6, 0xfff, 0x0, 0x40, 0x8000, 0x7ff, 0xa8eb, 0x2, 0x84d, 0xff, 0x400, 0x3, 0x100, 0x2, 0x8, 0x6, 0x0, 0x5, 0x9, 0x17, 0x716, 0x4, 0x7, 0x3, 0x0, 0x7, 0x9d7, 0x1, 0x8, 0x2, 0x8, 0x4, 0x4, 0x2, 0x3, 0x6, 0xc, 0x3, 0x19, 0x227, 0x0, 0x8, 0x8000, 0x48ab, 0x5210, 0x2, 0x2, 0xef0d, 0x1, 0x4, 0x9, 0xffff, 0x8, 0xca, 0x81, 0xc, 0xb6d, 0x6, 0x8, 0x5, 0x5, 0x100, 0x2, 0x1, 0x1000, 0x8, 0x7, 0x0, 0x6, 0xe77, 0x0, 0x4, 0xfffffffc, 0x4256e8cd, 0x10001, 0x5208, 0x3, 0x4, 0x10, 0x9, 0x1, 0x9, 0x9, 0x3, 0x200, 0x50000, 0x2, 0x10000, 0x7, 0x8001, 0x8, 0x100, 0x10001, 0x8, 0x0, 0x3, 0x6, 0x9, 0x7, 0x1, 0xff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x46c, 0x1, 0x9, 0x3, 0xb11, {0xd, 0x0, 0x2, 0x7f, 0x70, 0x5}, {0x2, 0x2, 0x5, 0x0, 0x8, 0x1}, 0x7, 0x9, 0x8}}, @TCA_POLICE_RATE={0x404, 0x2, [0xc431, 0x5, 0x5, 0x9, 0x4, 0x7, 0xffffff41, 0x9, 0x0, 0xfffffffb, 0x1, 0x6, 0x400, 0x6, 0x0, 0x1, 0x401, 0x7fff, 0x8000, 0x9, 0x30da, 0x7, 0x73d0, 0x2, 0x1, 0xffffffff, 0x1, 0x6, 0x10000, 0x2, 0x9, 0x2, 0x4, 0xf, 0x9, 0xffffffff, 0x600000, 0xb79, 0x92a, 0x1, 0x401, 0x2, 0x7e6, 0x5, 0x25b, 0x4, 0x2, 0x2, 0x7, 0xd, 0x8000, 0x3d, 0x8, 0x7e, 0xfffffff9, 0x1, 0x3, 0x1, 0x6, 0x1, 0xfffffcd6, 0x6, 0x3, 0x800, 0xa9, 0x3, 0x2, 0x8, 0x8d, 0x4, 0xf2c, 0xe, 0x3, 0x2, 0x2, 0xd, 0xfffffff4, 0x7ff, 0xffff, 0x100, 0x3, 0x9, 0x2, 0x5e2, 0x80000000, 0x5, 0x8, 0x3, 0x3cc8, 0x9, 0xed47, 0x7, 0x6, 0x0, 0x6, 0x3, 0x7dd, 0x1, 0x4, 0x8, 0x4af, 0x3, 0x4, 0xffffffc0, 0x3, 0xe, 0x6, 0x0, 0x0, 0x8001, 0xa, 0xffff, 0xdb, 0x80000000, 0x8001, 0xfffffffc, 0x0, 0x5, 0xf14e, 0x7f, 0xc, 0x7f, 0x1, 0x401, 0xfffffffb, 0x1ff, 0x101, 0x6, 0xa, 0xffff, 0x4, 0x5, 0x560, 0x8, 0x1, 0x9, 0x4f0, 0x7fff, 0xf, 0x1, 0x3c, 0x7ff, 0x8, 0x6, 0x200, 0x2, 0x7, 0x396c, 0xffff, 0x35, 0xffff, 0x6, 0x0, 0x3, 0x8, 0x3, 0x6, 0x400, 0x6, 0x7, 0x7f, 0x8, 0x1, 0x8, 0x0, 0x2ac, 0x39, 0x5, 0x7, 0xa, 0x996, 0x4, 0x8, 0x8000, 0x0, 0x7, 0x6, 0x81, 0x1000, 0x27ff6872, 0x10000, 0x1, 0x2, 0x98, 0x3, 0x36b5e8c6, 0x46d, 0x0, 0x9b, 0x200, 0x10000, 0x8, 0x5, 0x8, 0x1, 0x7, 0xff, 0x5, 0x5b6, 0x9, 0x6, 0x7, 0x5, 0x800000, 0x3, 0x4, 0xfffffffc, 0xfe4, 0x8, 0x5, 0x2, 0x400, 0x7fffffff, 0x8, 0x1000, 0x2, 0x400, 0x2000000, 0x10, 0x2, 0x9, 0x8, 0x6, 0x1, 0xa9, 0x400000, 0x9, 0x80, 0x9, 0x4, 0x1, 0x3, 0x0, 0x25e, 0x8, 0x7, 0x8, 0x2, 0x6, 0xffff, 0x9, 0x3, 0x5b097351, 0x3c, 0x9, 0x4, 0x7fffffff, 0x421c07f5, 0xd, 0x7fff, 0x7, 0x24, 0xffffff5e, 0x800, 0xa]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0xbe52514, 0x40, 0x1, 0x5, 0x7, 0x3, 0xddf1, 0x8, 0x9, 0xfffffff7, 0x7, 0x95, 0x8, 0x4, 0x564, 0x4, 0xf3da, 0x0, 0xa, 0x7ff, 0x3, 0xa07, 0xd31, 0xffffffb2, 0x3, 0x4, 0x101, 0x100, 0x6, 0x2, 0x101, 0x6, 0x7, 0x0, 0x2, 0xffff, 0x5, 0x6, 0x7, 0x1de9ba5, 0x8, 0xa3fc, 0x4, 0x9, 0x970, 0xfffffffb, 0x2, 0x9, 0x4, 0x0, 0x3, 0x3, 0x401, 0x2, 0x1000, 0x2, 0x2, 0xc, 0x401, 0x9, 0x80000000, 0x1, 0x9, 0xc, 0x8, 0xd, 0xe, 0xae, 0xff, 0x2, 0x4, 0x1, 0x4, 0xffffffff, 0x4, 0x3, 0x6, 0x67f, 0xfff, 0x80000000, 0x4, 0x9a0, 0x889, 0x0, 0x6, 0xc000000, 0x1, 0x5, 0x3, 0x3, 0xfffffffa, 0xb06, 0x81, 0xf, 0x4, 0xff, 0xffffffff, 0x3, 0x1, 0x80000000, 0x8, 0x3, 0xfffffff4, 0x4, 0x8, 0x6, 0x4, 0x255c000, 0x0, 0x5, 0x9d, 0x6, 0x5, 0x101, 0x37a, 0x2, 0x8000, 0xfffffff2, 0x4, 0x9, 0x8000, 0x10, 0xa, 0x6, 0x7b0, 0x2, 0x4, 0x9, 0x1000, 0x6, 0x40, 0x1, 0x1, 0x3, 0xe, 0x6, 0x1, 0x80000000, 0x4, 0x3, 0x9, 0xf, 0x7, 0x84f, 0x7, 0x2, 0x8, 0x2, 0xea, 0xa, 0x5, 0xffffffff, 0x0, 0x3, 0x4, 0x9, 0xf111, 0x5f483825, 0x8001, 0x4, 0x35, 0xd, 0x7, 0x3, 0x91, 0x7, 0x9, 0xffffffff, 0x1, 0x7, 0xf, 0x8, 0x1, 0x3, 0x4, 0x10000, 0x7, 0xffff, 0x7fff, 0x5, 0x8, 0x7f, 0x400, 0x400, 0x5270, 0x2, 0x3, 0x6, 0x4, 0x1, 0x6, 0x5, 0x2, 0x6, 0x7, 0xf1, 0x6, 0xe5, 0xffffffff, 0x6, 0xe, 0x0, 0xff, 0xfffff000, 0x400, 0x9, 0x4, 0x7ff, 0x1000, 0x4, 0x92c, 0x3, 0x1, 0x0, 0x7, 0x3, 0x5, 0x2, 0x0, 0x800, 0x3ff, 0x6, 0x4, 0x3a82, 0x0, 0x7, 0x3, 0x4, 0x73, 0x7, 0x10, 0x8, 0x8, 0x7, 0x2, 0x8001, 0x6, 0x4, 0x3ff, 0x0, 0x23f, 0x6, 0x2fe, 0x2, 0x5, 0x1, 0x6, 0xfffff6f1, 0xf, 0x0, 0x2, 0x10, 0x7, 0x0, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80, 0x1, 0x1, 0x851, 0x6, 0x5, 0x2, 0x3, 0x5, 0x604, 0x8001, 0x29f20609, 0x4, 0xfffffffe, 0x3, 0x3, 0x200, 0x7, 0x8, 0x3, 0x6, 0x10000, 0x845, 0x4, 0x3, 0x9, 0xb159, 0x4, 0x4, 0xf, 0x1, 0x7, 0xb62b, 0x2, 0x8, 0x3, 0x80000000, 0x9, 0x80, 0x8, 0xd8, 0x101, 0x0, 0x6, 0x40, 0x5f6, 0x6, 0x6, 0x1, 0x6b5a96, 0x2, 0x3, 0x80000000, 0x7, 0x9, 0x4, 0xffff0000, 0x7f, 0xd92c, 0x4, 0x27, 0x4, 0x6, 0x0, 0x8, 0x77b, 0xc04, 0x2, 0x1, 0x2, 0xb, 0x6, 0x0, 0x1, 0x89d, 0x9, 0x5192, 0xfffffffa, 0x8, 0x0, 0x80000000, 0x6, 0x9, 0x9, 0x7, 0x5, 0x2, 0x7, 0x0, 0x7ff, 0x1ff, 0x1ee4, 0x1, 0x0, 0x0, 0x8, 0x4, 0xce, 0x4, 0x7fff, 0x1, 0x2, 0x5, 0x4, 0xffffffc0, 0xfffffffd, 0x6, 0x80, 0x7fffffff, 0x7, 0x5, 0x8, 0x1ff, 0x9, 0xb, 0x101, 0x6, 0x7ff, 0x0, 0x7, 0xfffffffe, 0x2000, 0x9, 0xc3, 0x7, 0x1, 0x7ff, 0x400, 0x10001, 0x9a5, 0x200, 0x2, 0xfff, 0x6, 0x0, 0x683, 0xc8, 0x80000000, 0xffff4a2a, 0x4, 0x8, 0x78e865f9, 0x3, 0x8, 0x4716, 0x2, 0x7ff, 0xd3, 0x400, 0x35a26479, 0xba, 0xfff, 0xd5b, 0x1, 0x8, 0x4, 0xb, 0x7, 0x4, 0x7, 0xf1, 0xb, 0x0, 0xe, 0x9, 0x2, 0x3ff, 0xa0, 0x1ff, 0x1, 0x2, 0x80000001, 0xb, 0x5ff2, 0x1, 0x7, 0x401, 0xffff, 0x3, 0x5, 0x3, 0x8, 0x7, 0x4e, 0x4, 0xfffffff6, 0x80000001, 0x80000000, 0xb2d, 0xc, 0x25e, 0x6, 0x9, 0x4, 0x1a9, 0x4, 0x80000000, 0x4, 0x0, 0x2, 0x538a, 0x5c8ddfef, 0x61bb, 0x5, 0x0, 0x2, 0x9, 0x9, 0x0, 0x10, 0x3, 0x8001, 0x9, 0x2, 0x2, 0x1, 0x6, 0x10001, 0x90b, 0x3, 0x10000, 0xf8000000, 0xa8e, 0xff, 0xce, 0x7, 0xe79c, 0x6, 0x1a1d567c, 0x8, 0x3a1d, 0x4, 0x8, 0x0, 0x3, 0x100, 0x0, 0x8, 0x80, 0x27, 0x7, 0x2, 0x3, 0xffffffff, 0x4, 0x6, 0x2, 0x9, 0xfff, 0x9, 0x1000, 0x401, 0x3, 0x1, 0x81, 0x10000]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x200, 0x6, 0xfffffbff, 0x897, 0x6, 0x1, 0x5, 0x0, 0x0, 0x7fff, 0x2, 0xb, 0x7, 0x4, 0xa, 0x80000001, 0x81, 0x9, 0x7, 0x1, 0xaa, 0x1, 0xc550, 0x7, 0x0, 0x3d35, 0x5, 0x1fd3, 0x2, 0x4000000, 0xc000, 0x1, 0x6, 0xf1a2, 0x9, 0x9, 0x1, 0xc, 0x8, 0x1, 0x7fffffff, 0x2, 0x9, 0xac, 0x9, 0x80000000, 0x2, 0x7, 0x3, 0x1, 0x10001, 0x9cc, 0xf62c, 0x9, 0xa7a, 0x1, 0xb, 0x622, 0x4, 0x100, 0x87, 0xa, 0x1, 0xd, 0x3, 0x6, 0x8, 0x47c, 0x1ff, 0x2, 0x7, 0x31b, 0x3, 0x80000000, 0x4, 0x6b, 0x6f, 0x6, 0x2, 0x4, 0x3ff, 0xd, 0x2, 0x0, 0x31e, 0x70, 0x2, 0x1e4, 0x8, 0x5, 0x8, 0x5, 0x5, 0x738c, 0x6, 0xe4, 0x2, 0x3, 0x2, 0xfffffa11, 0x10, 0x3, 0x6, 0x80, 0x0, 0x2213, 0x0, 0x74, 0x6, 0x0, 0x4, 0x8001, 0xb, 0xafc3, 0xfffffffd, 0x3, 0xf, 0x1, 0x4, 0x81, 0x200, 0x3, 0x2, 0x4, 0x6, 0x0, 0xf8, 0x101, 0x6, 0xc9, 0x4, 0x2447, 0x5, 0x0, 0xff, 0x8fe, 0x7, 0x8, 0x10001, 0xffff, 0x1, 0x8, 0x5, 0x3, 0x4, 0x6, 0x80000000, 0x7, 0x8, 0x7ff, 0x5, 0xfffffffe, 0x3, 0x24fb, 0x2a342fe8, 0x4, 0xfffffff8, 0x3, 0x9, 0xc0c, 0x7, 0x3, 0x8, 0xf85, 0x8, 0x0, 0x7, 0x800, 0x6, 0x2, 0x7, 0x8, 0x5, 0x8, 0xec, 0x4, 0xead5, 0xe0000000, 0x5, 0x3, 0x9, 0x200, 0x8, 0xfc, 0x9, 0x40, 0x5, 0x1c4c, 0x5, 0x9, 0x1, 0x1, 0x4, 0x40, 0x2, 0x0, 0x80000000, 0x2, 0xd, 0xc2b, 0xffffffff, 0x8, 0x6, 0x3ff, 0x7, 0x0, 0xffff, 0x3bba, 0x6, 0x2e, 0x8001, 0xc9b0, 0xfffffff8, 0x928, 0x5, 0x200, 0x1ff, 0x9, 0x8, 0x1, 0x4, 0x6, 0x0, 0x400, 0x6, 0x7408b615, 0x1, 0x2, 0x2, 0x5, 0x8, 0x3, 0x7fff, 0x10000, 0x7, 0x2, 0x5, 0xfffffff8, 0x1, 0xfffffff9, 0x4, 0x2, 0x4, 0x4, 0x46e57f04, 0xa2, 0x2, 0x100, 0x8, 0x200, 0x7ff, 0x0, 0x6, 0x2d1, 0x7f]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x1, 0x792, 0x200, 0x7, 0x9, 0x7, 0x5, 0xe8, 0x71, 0x0, 0x71d9f87, 0x3e, 0xf, 0x7, 0x9, 0x4, 0x4, 0x7, 0xc, 0x7, 0x0, 0x5, 0x101, 0x1000, 0x400, 0xe52, 0x4, 0x7, 0x3, 0x80f1, 0x0, 0x6347, 0x200, 0xc, 0x2, 0xfffffffe, 0x1d7, 0x2, 0xffff, 0x7, 0x81, 0x7, 0x5, 0xa, 0xdab, 0x6, 0x6, 0x80, 0x5, 0x1, 0x2ac, 0xf, 0x8, 0x1ff, 0x401, 0xb0c, 0x1, 0x0, 0x7b3, 0x100, 0x2, 0x10, 0x6, 0x9, 0x0, 0x9, 0x6, 0x80, 0x8, 0x8, 0x8, 0x1870, 0xffff, 0x1ff, 0x10001, 0x594, 0x5, 0x8, 0x9, 0x0, 0x8001, 0x3ff, 0x4e9a0259, 0x1, 0x66, 0x2, 0x2, 0xffff22d9, 0x0, 0x8, 0xffffffff, 0xffffffff, 0x6, 0x8, 0x0, 0x0, 0x2, 0x5, 0x5, 0x9b65, 0xd51f, 0x0, 0x9, 0x7, 0x2, 0x80000001, 0x0, 0x8, 0x10000, 0x0, 0x408000, 0x7fffffff, 0x8000, 0x7, 0xe68e, 0x401, 0x0, 0x9, 0x3, 0x9, 0x1a2d, 0x23, 0x3, 0x2a, 0xbf, 0xffffffff, 0x9, 0xfffffff2, 0x1, 0x6, 0x6e, 0x0, 0x71b, 0x7, 0xf506eb, 0x2044a22c, 0x1, 0x1, 0x1, 0x2038, 0x2, 0x4, 0x9, 0x0, 0x1, 0x7081, 0x10, 0x5, 0x8, 0x0, 0x8, 0x4, 0xc, 0x2, 0x3, 0x1, 0x0, 0x5, 0x7f, 0x5, 0x6, 0xbfb, 0x7, 0x7fff, 0x5, 0x7, 0x0, 0xf14, 0x10, 0x8001, 0x5, 0x9f2, 0xfaf, 0x40, 0x9, 0x8, 0x8, 0x10, 0x76, 0x1000, 0x8, 0xef5, 0x3, 0xbb63, 0x5, 0x3, 0x4, 0x1000, 0x7, 0x6, 0x4, 0x0, 0x1, 0x9, 0x7fffffff, 0x4, 0x3, 0x6, 0x8, 0x9, 0x4, 0x10000, 0xb, 0x401, 0x2c0000, 0x908, 0x9, 0x8, 0xfffff7c6, 0x280, 0x6, 0x3, 0x6, 0x7, 0x8, 0xffffffff, 0xd, 0xe6, 0x2d, 0x1, 0x8, 0x4, 0x0, 0x0, 0x10000, 0x9, 0x0, 0x1, 0xa, 0x5, 0xd94, 0x3, 0x6, 0x7, 0x7, 0x9, 0x5, 0x0, 0x6, 0x924f, 0xd, 0x60000000, 0x1, 0x1, 0x7, 0x1, 0x1, 0x5, 0x9, 0xcf, 0xfffffffe, 0xfffffffc, 0x3ab, 0x7, 0x4]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0xf, 0x2, 0x6, 0x4, 0x7, 0x8, 0xfff, 0x5, 0x3a, 0xfffffffc, 0x10001, 0x2, 0x3, 0x2, 0xffffff01, 0x9, 0xfffff001, 0xd, 0x3, 0x6, 0x6, 0x5, 0x2, 0xf, 0x2, 0x5, 0xffffffff, 0x7fff, 0x10, 0x401, 0x1, 0x9, 0x7fffffff, 0x1, 0xd707, 0xa, 0x158a, 0x1ee8, 0x9, 0x3, 0x2, 0xdf8, 0xfffffff7, 0x7ff, 0x3, 0x7, 0xe9e8, 0x6, 0x5ea, 0x2f8, 0x4, 0x6, 0xffff2d42, 0x287, 0x6, 0x6, 0x0, 0x4, 0xb, 0x5, 0x0, 0x3, 0x3, 0x10, 0x3, 0xffffffff, 0x93d4, 0x80000000, 0x10001, 0x8, 0x1000, 0x6, 0xa98, 0x8000, 0x0, 0x7f, 0xfffffff7, 0x7fff, 0x5, 0x1, 0x84, 0x1, 0x4, 0x80000001, 0x100, 0x7fffffff, 0x9, 0x0, 0x1, 0x1, 0xffffff17, 0x1, 0x6, 0x6, 0x4, 0x3829, 0x2, 0xebf, 0x4, 0x5, 0x800, 0x1, 0x8, 0xffff, 0x7, 0x100, 0x6, 0x5, 0x7, 0x9, 0x5, 0x8, 0x10, 0x5, 0x0, 0x5, 0xfffffc01, 0x5, 0x5, 0x6, 0x1a, 0x400, 0xffffffc6, 0xc, 0xfffffffc, 0x9, 0x3, 0x4, 0x2, 0x6, 0x2, 0x4, 0x9, 0x6, 0x3, 0x4, 0x7, 0x3, 0x7, 0x8001, 0x10000, 0x1, 0x4, 0x7fffffff, 0x20000000, 0xec, 0x0, 0x3, 0x3, 0x9, 0x74def3e1, 0x5, 0x80000000, 0xf0, 0x7fff, 0x3c2, 0x124a, 0xff, 0x2, 0x4, 0x5, 0x3, 0x9, 0x7eb, 0x2, 0x9, 0x7, 0xd, 0x4e97, 0x3, 0x40, 0xac2, 0x0, 0x40dd, 0xcd, 0x6, 0x7ba0, 0x6, 0x6, 0x5e, 0x5a64dffa, 0xd, 0x3ff, 0x200, 0x5, 0x5, 0x7fff, 0x1cc, 0x4, 0x5, 0x5, 0x2, 0x7, 0x9, 0x2, 0x9, 0x7, 0xd, 0x2, 0x1, 0x100, 0x7, 0x2, 0x7, 0x6, 0x1, 0x7, 0xffff0000, 0x7, 0x646, 0xaf, 0xd6, 0x9, 0x8, 0xffff, 0x9, 0xa, 0x5a20, 0x5, 0x5, 0x38a, 0x3, 0x3, 0x3ff, 0xe8, 0x0, 0x2, 0x40, 0xffffffff, 0x8, 0x3, 0xe, 0x7f, 0xead8, 0xfffffffc, 0x7, 0x7, 0x400, 0x7, 0x8, 0xaf, 0x8000, 0xa, 0x58, 0x3, 0x9, 0x0, 0x8, 0x7ff, 0x1a4, 0x5, 0xffffffff, 0x2, 0x8, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x10000000, 0xdb, 0x39b, 0x5, {0x98, 0x1, 0x3, 0x1, 0x100, 0x5}, {0x40, 0x2, 0x400, 0x9, 0x81, 0x7}, 0x0, 0x0, 0x5}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x6, 0xa, 0x3, 0x1, {0xf4, 0x0, 0xd, 0x0, 0x9, 0x7}, {0x2, 0x0, 0x1, 0xa28a, 0x3, 0x8001}, 0x80000001, 0x8000, 0x8000}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x80}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0xf, 0x7, 0x4, 0x7, 0x3, 0xd6d, 0x2, 0x1, 0xffff8001, 0x8de0, 0x0, 0x6, 0x3, 0x7, 0x3, 0x1, 0x2, 0x4, 0x401, 0x10000000, 0x3, 0x7, 0xcb, 0x3bd, 0xfffffff8, 0xfffffffb, 0x5, 0x6, 0x7, 0x33f56c83, 0x0, 0x0, 0x6, 0x10000, 0x4, 0x0, 0x2, 0x8, 0x7, 0x48e, 0x6, 0xc5, 0x6386be6a, 0x1, 0x8, 0x1, 0x80, 0xd, 0x200, 0x3, 0x8, 0x3, 0x3, 0x8, 0x200, 0x2, 0x81, 0x1, 0xb6000000, 0x0, 0x5, 0xa, 0x6, 0x8, 0x5, 0xfff, 0xacf, 0x8, 0x7908, 0x56f, 0x9, 0x5, 0x1, 0x1, 0x4, 0x6ca, 0x6, 0x1, 0x4, 0x1, 0x400, 0x80000000, 0x2, 0x9e38, 0x100, 0x5, 0x0, 0x80000000, 0x1000, 0x7, 0x0, 0x5, 0x6, 0x0, 0x0, 0x9, 0xaf6, 0x2, 0x7, 0xfffffffe, 0x0, 0x7fd, 0x1000, 0x6, 0x3, 0x101, 0x10, 0x0, 0x4, 0x8, 0x6, 0x2, 0x3, 0x9, 0x6, 0x7f, 0x5, 0xfffffffb, 0x7, 0xb6, 0x1, 0x7, 0x7, 0x2, 0x27, 0xff, 0x7f, 0x1, 0xe5fde38, 0xf4a, 0x4, 0x100, 0xd, 0x1ffe0, 0x9, 0x81, 0x50b, 0x3, 0x9, 0x2, 0x5, 0x6, 0x349d, 0x1, 0x424, 0x5, 0x655, 0x1000, 0x0, 0xc, 0x5, 0x4, 0x251, 0x1, 0x8000, 0x4, 0x2, 0x2e9, 0x7f, 0xffff, 0x1, 0x5, 0x9, 0x5, 0x300000, 0x7, 0x100, 0x4, 0xbe, 0x2, 0x9, 0x9, 0x4, 0xff, 0x3ff, 0x800, 0xf1, 0x4, 0x50, 0x4956, 0x5, 0xf15a, 0x6607, 0x0, 0x2, 0xd, 0x400, 0x40, 0xfffffffb, 0xffff, 0x0, 0xd3, 0x12000, 0x100, 0x3, 0x2, 0x6, 0x5, 0x3, 0x9b, 0xffff, 0x1, 0x100, 0x101, 0x4, 0x40, 0x2, 0x0, 0x6, 0x9, 0x6, 0x4, 0x7f, 0x200, 0xffffffff, 0x0, 0x4, 0x1, 0x2, 0x9, 0x4, 0x7fffffff, 0x4, 0xcfd, 0x20e9, 0x200, 0x0, 0xfffffff7, 0x5, 0x1000, 0x5, 0x75, 0xffffff7f, 0x1, 0x1a85e3e1, 0x8, 0x8, 0x101, 0x3, 0x1, 0xc, 0x5, 0x1000, 0x0, 0x8, 0xf1cb, 0x9, 0xfffffff7, 0x6, 0x2, 0x2, 0x6, 0x0, 0x3, 0x7fff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0xd8, 0x98b, 0xffffffff, 0x7a, 0x1, 0x7, 0x1, 0x1, 0xc55, 0x3ff, 0x4, 0x5, 0x4000000, 0x0, 0x8, 0x0, 0xae04, 0xb, 0x2, 0x4, 0x5, 0xffff025e, 0x3, 0x6, 0x4, 0x6, 0x81, 0x8, 0x3, 0x4c, 0x6, 0xcf45, 0x6, 0x0, 0x3, 0xff5d, 0x0, 0x401, 0xfffffffd, 0xfffffff7, 0x7fffffff, 0x4, 0x5, 0x72, 0x8, 0x1, 0x7f6ada46, 0x7, 0x100, 0x7fff, 0x4, 0x8000, 0x9, 0x0, 0xc, 0x6, 0x9, 0x6, 0x8000, 0x6, 0x9, 0x5, 0x1, 0xd3cf, 0x800, 0x4, 0x2, 0x94f5, 0x81, 0x8, 0x7, 0x1, 0x2, 0x2, 0x5, 0xffffffff, 0x5, 0x6, 0xfffffff7, 0x380d, 0x1, 0x1, 0x4, 0x3, 0x7, 0x7, 0x0, 0xffff7fff, 0x2, 0x6c87, 0x46d, 0x5, 0x5, 0x9, 0x9, 0x8, 0x401, 0x2, 0xa, 0x2, 0x7, 0x5, 0x80000001, 0x8001, 0x6, 0x9, 0x6, 0x8, 0x7ff, 0x2, 0x849, 0xc, 0x5, 0x2, 0xa33b, 0xe, 0xfffffffe, 0x80000000, 0xc, 0x8, 0x6, 0x7, 0x97df, 0xffffffff, 0x5, 0xd, 0xbc9, 0x7f, 0x2, 0x2, 0x200, 0x4, 0x6, 0x38e820ed, 0x412e, 0x9, 0x1000, 0x9, 0x5, 0x9, 0x9, 0x7, 0x7fffffff, 0x9, 0xe4, 0x4e, 0x1, 0x6, 0x1, 0x1, 0x2d, 0x921b, 0x200, 0xf, 0x4, 0x4, 0x2, 0x3, 0x0, 0xff, 0xffffffff, 0x7, 0x8, 0x2a, 0x7, 0x1ff, 0x4, 0x3, 0x39c, 0x3bd2f0e3, 0x6, 0x1, 0x2, 0x93, 0x8, 0x2, 0x6, 0x3, 0x80, 0x1, 0xa, 0x79547da4, 0xa93c, 0x9, 0xffff636c, 0x8, 0xb8, 0x1df, 0x8, 0x9, 0x8, 0x200, 0x7, 0x2, 0x1, 0xfffffffa, 0x0, 0x5, 0xfffffff8, 0xff, 0x8001, 0x5, 0x3, 0x69, 0x9c5, 0x5, 0x800, 0xffffffff, 0x6, 0x5, 0x2, 0x7, 0xa30a, 0xfd, 0x200, 0x6, 0x6, 0x4, 0x0, 0x7a, 0xf, 0x5, 0x8b, 0x667, 0x3, 0x3, 0x8, 0xf83, 0x2, 0x8, 0x8, 0x10, 0x4, 0x7ff, 0x10, 0x7, 0x1, 0x101, 0x9, 0x6, 0x235, 0x1ff, 0xfffffffd, 0xfff, 0x8, 0xfffffff7, 0x5, 0x1, 0x80000000, 0xffffffff, 0x7, 0x1, 0x1000, 0x0, 0xfffffff9]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffff6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x10001}], []]}, {0x9a, 0x6, "be5983b1b7f348ba18c5f136b62013b19c80ee1298a801cc7930b1b2248b2ae34374c760c29fe9741b32c31d5c0ecf5be487d362653132008996155f3a940b06a4920228cbc5a108ad6e66962481bb2d0b69c25da073dc010ba6770900dd720a5c4a44cc06977533400b93d12bb31beb396a9d8b3dd689f7d3e1e3e32e26b80c10fd5b467f70050a63de4cf09a58a2de842aad69c809"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_bpf={0x2c, 0x10, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_vlan={0x80, 0x11, 0x0, 0x0, {{0x9}, {0x4}, {0x52, 0x6, "c12eb53786ac70958b794c667513c2717c5ee3d362f8d51b4c99ec34e05aa2663b67047395b86f136a6d98d6a9bb5038553c788755b6aa189876d21564ed4c1dc7f46d7eac53359251e870c62f98"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x3374}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4801, 0xfffffdf8, {0x0, 0x0, 0x0, r2, {0x2}, {}, {0xa, 0x27}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xa32, 0x6, 0x1, 0xc, 0x0, 0x4, 0x8, 0x4, 0x68d8, 0x5, 0x4, 0x3, 0x12, 0x6, 0xfffffffd, 0xfffffe01}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 2m57.732123955s ago: executing program 4 (id=4809): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x6c, &(0x7f0000000180)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x37, 0x65, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x0, [0xff, 0x3]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x6]}, {}, {}, {}, {0x8, 0x6558, 0xfffffffd}}}}}}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) write$nci(r1, &(0x7f0000000dc0)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0xb7, @b={0xad, 0x3, 0x5, 0x1, 0x2, 0x62, 0x2, {}, 0x7f, 0x0, 0x4, 0x1, 0xac, "79518cecaefe85f9e2aab168e9743d19c2c1547ea86976226b62a3e2476bfab3c4b1c3a07ee7fd7e3e06372b3c18c005280b308265120a0a15407f59eca97d238c4f6d3f5f27a75161cb5892d27e888d6dcc6b05dcb9cf2162ec16b6d3f5699cb39ca318176ac06ef49eada6546ebfb57fd5e72b18890d1109fa890eba55f60aa3b3ef17310d5146d4679d0f5029eed3024d7bb86c62ca5ed1496df412fb678eec734b80c34307f96a86db7d"}}, 0xbc) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f000000fa00)=0x9) sendmsg$inet(r6, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x11) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r9], 0x1c}}, 0x840) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="74000093", @ANYRES16=r8, @ANYBLOB="02002cbd7000ffdbdf251b0000005e0019009150bc8c49c3e125652346b745bc419cf3f8c8c46c34c78c2de2701acf12c682558746aed4dbcc1097064f7a5cc90a2de06ea9bee15bc0e650001be458910b9581c0788e8fa984f63c3aa4f2b8d61dfec18fa1473b16a67c68920000"], 0x74}, 0x1, 0x0, 0x0, 0x20008040}, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000711227000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_emit_ethernet(0x6c, &(0x7f0000000180)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x37, 0x65, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x0, [0xff, 0x3]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x6]}, {}, {}, {}, {0x8, 0x6558, 0xfffffffd}}}}}}, 0x0) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)) (async) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) (async) write$nci(r1, &(0x7f0000000dc0)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0xb7, @b={0xad, 0x3, 0x5, 0x1, 0x2, 0x62, 0x2, {}, 0x7f, 0x0, 0x4, 0x1, 0xac, "79518cecaefe85f9e2aab168e9743d19c2c1547ea86976226b62a3e2476bfab3c4b1c3a07ee7fd7e3e06372b3c18c005280b308265120a0a15407f59eca97d238c4f6d3f5f27a75161cb5892d27e888d6dcc6b05dcb9cf2162ec16b6d3f5699cb39ca318176ac06ef49eada6546ebfb57fd5e72b18890d1109fa890eba55f60aa3b3ef17310d5146d4679d0f5029eed3024d7bb86c62ca5ed1496df412fb678eec734b80c34307f96a86db7d"}}, 0xbc) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) ioctl$int_in(r6, 0x5452, &(0x7f000000fa00)=0x9) (async) sendmsg$inet(r6, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x11) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)) (async) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r9], 0x1c}}, 0x840) (async) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="74000093", @ANYRES16=r8, @ANYBLOB="02002cbd7000ffdbdf251b0000005e0019009150bc8c49c3e125652346b745bc419cf3f8c8c46c34c78c2de2701acf12c682558746aed4dbcc1097064f7a5cc90a2de06ea9bee15bc0e650001be458910b9581c0788e8fa984f63c3aa4f2b8d61dfec18fa1473b16a67c68920000"], 0x74}, 0x1, 0x0, 0x0, 0x20008040}, 0x1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000711227000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) 2m54.174578669s ago: executing program 4 (id=4813): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x7a, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\a\x00\x00'}]}, 0x18}], 0x1, 0x0, 0x0, 0x2000c001}, 0x4004810) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x2, @multicast, 'veth1_to_team\x00'}}, 0x1e) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b19, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x70bd2b, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x38}}, 0x4000800) 2m37.849749585s ago: executing program 32 (id=4813): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x7a, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\a\x00\x00'}]}, 0x18}], 0x1, 0x0, 0x0, 0x2000c001}, 0x4004810) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x2, @multicast, 'veth1_to_team\x00'}}, 0x1e) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b19, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x70bd2b, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x38}}, 0x4000800) 2m27.147665361s ago: executing program 2 (id=4850): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r0, 0x84, 0x81, 0x0, &(0x7f0000001200)) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='l', 0x1}], 0x1, &(0x7f0000000380)=[@prinfo={0x18, 0x84, 0x5, {0x20, 0x9}}, @sndrcv={0x30, 0x84, 0x1, {0x3, 0x7fff, 0x200, 0x3, 0x7, 0x9, 0x6, 0xffffffff}}], 0x48, 0x2000}, 0x6) 2m24.62673491s ago: executing program 2 (id=4852): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f0000000140)={&(0x7f0000000100)=""/12, 0xc, 0x3, 0x7}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000240), 0x10) sendmsg$can_bcm(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="050000000300"/16, @ANYRES64=r3, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000003"], 0x38}, 0x300}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xe45}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600}, [@IFLA_MTU={0x8, 0x4, 0xffcd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4000) 2m16.652135924s ago: executing program 2 (id=4857): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xfff7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x40}, [@IFLA_GSO_MAX_SIZE={0x0, 0x29, 0x1e6cf}, @IFLA_PHYS_SWITCH_ID={0xd, 0x24, "e058be17bc4c8f1c69"}, @IFLA_MTU={0x8, 0x4, 0xe}]}, 0x5c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r8}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380), 0x80, r8}, 0x38) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$alg(r6, &(0x7f0000002700)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000440)="435293a6503293a75af770132a0dc54c661ff4979a6834f4c2984a29625edc6600b5d5858c543c8c841a04d48069badb102c1cb18a7c15dec0cd53c90239965d3bf02ffbc81b218bba4adb4839bc19792b1d1d6ce8f221c00a74cb0a28fcf67655d6be2a9237a0dffe8d19f1693d88e686c0aefdc2a017657fd8cef6bf04d9771b68b379db1e6b90c842db2160ab1ef60f31ad514ccc3fc575a9e152a85d8b7668bfa86de8ddc09146d3c9b14d88e0b9ff6276b534fb9fdf512a5d0066c96ec28a37087736272e13e6b2256321c869bb159ffa04", 0xd4}, {&(0x7f0000000600)="9614e7095cc046624d1126a59cd3298144bd891cd584994b0eedec560ea8fab066c5ae3e7fabe74ac7307d0b18e04a729c00eb7383b0904fd3120199fa24c7ca51d7105ea8a05ccd85e312d56ee8d35f619c701a80f6f45f392e75303f90f7f1a7cb8076e349c542cda1743ccd978bb76424553b2b9b24941460fd5a59061c878fb04daaec9e3de2600c181cc647033d05d07b9eedf299fe111854fc56f26516fb18428b834c89aef5135113a535915947d3d409a18c32ca4f0eddab2c5b6b21ee9e94e0d19667bcc2caa8d7b90a571d3908af", 0xd3}, {&(0x7f0000000880)="f6fb889f47e84e1c861a8d2f526001669a4b153100cd5bac5c243daf6243409da6596b44b07e9f82ee7c4cd8ccf4e68c97ac1d4f1487dcd1f80ce49a599b966bf1a0ea02929a1d275fb89f09e372de6089d6a76d2cd4c643cd0d916aaf2b52b7ecf876aa86f2f8a30e9f616ed8389b700cc0efdb33a518ac5071ff08ea7dd6fc93d02670c07d4784ab3979b69d030f69ed03c3c0a560f30625e39cd84fb3bd533931def99d771e75da49e1c506cb4b6ea5f8d866f3a3aa8c99c4e1872061d4fa6389497f00b0b62f7cf7ff9d1ba5004bce00ffc6eeda89ab2ff19a151c160ced0764bf2130039d214a701915269d0cda", 0xf0}, {&(0x7f0000000980)="3f3ed874477d", 0x6}, {&(0x7f00000009c0)="7adc1a8eb0e1e8dfe715c0ac2c1728aed3ba386ce76d515f5e727b86bd65191a4943ca3fef80d2d5dffe90fcc4c2a4167d580245761d74d4", 0x38}, {&(0x7f0000000a00)="beee7e448fb4ed5591aa8dbb4efd66d3a811be818d7bab43f3f76808aaab0083fae7f0fe72d294c0674143d509e4e109c2e2ad5ebbc8af911c26af83adb3fd291fd2228513943b5a64d9c7d68ed638cd1f7fe786e712463d1c", 0x59}, {&(0x7f0000000a80)="4c155d517005f0f702d27388a9b4fbf0af16b409edb68ba94b17cf5fa49d01625c05b55769e77749cd39897cdbbe780bda00eec87256eb9bf2e5c80131c8e96c5c546e99898ede9470b89c9bf5ab082e74f72d6a809cd6bc1b8cff5fd12fd405335efe9a29d9af956f515139306f37ef039a98de90ce0ca629e3667b577110ed00fcae5dc4e932e8a44cc1acd16af886a55bb565e09cb97d5ba6cd9053eee59423e8853322550c95781f1fe4350fc52c51802586c5e0dc1dd9708584bd4e6d576426b6702bc64ac7319eeb9b39ef80075092f91c0915741f50d3d4fb5ab35674d6d7", 0xe2}, {&(0x7f0000000b80)="e7205cc1ff084c377592f3342c5280189c1efb51087bc8f210f617ea16b20ac62b6481df83a8b22fbc49e374e73385b029a4f9db75b1d411805c691d84ddf7d6fb48f6587669864c9d13abe84ffd59660848e62205d5fa899cad543f7f199a19e456f3866f", 0x65}], 0x8, &(0x7f0000001380)=[@iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @iv={0x110, 0x117, 0x2, 0xf8, "1c4d645ff3ea950afd0d1c2d5f27b0d16b85c5c84b5890ffd351e990ddec514afc4344f6c9c5651d3ffaf2edb09ef5e6db253ae46453b9b2453301e98725e6e48c30b1e1296effd9ed09fef098ae3a4156b6171c604f4a631ed0acd4cb423b9ba659525aa081b614e8cbcd2cd041f9e523997cc33ae6856c3ebe0d324bcfec2a2c261e59a88538d1ee89408badd5622d4d862b99cd6208106873b7deb8c1b84e585f265040fb0722af25340f916d021c0d24b051b9adaa48065fbbe4686cf7c73edb9b989df8b64a2b7a7c194a7556e7b67b86e205277735e29c19a6d6062c1e466ae7842f12da1a643973154fd1cd559615bd9cc615128a"}, @assoc={0x18, 0x117, 0x4, 0x9}, @iv={0x100, 0x117, 0x2, 0xe8, "9c468dd1b5085c6d94f3eb74991c6cf328b2bbdec6dccaf632b8b0957f49b01e1b23e7f45de9982d278098498ca7be036279f961c96e6e94bdde6ad0d7d8fde6c074ad87d00afeba2d6c71c75ed2ad96dd83158d9ac935c2802f033f2f20827d0f637b7b13e94c9ae36505a2327efa83df32e9b7af36bb866f3327c70f9b9dc0e6d7bfa6d1148502c0cbb7b5ad1135c0701e5add5f7df6c12bec30fc28098848a00ac21ea3e66d7259fdb314358eed109fc35398f78df1ebeb0a963646d8634c940bba25466326faee80e19dce75d0a86c4e2bed9e0509c72834d592254e4335e07d53e0025bcd34"}, @assoc={0x18, 0x117, 0x4, 0x9}, @op={0x18}, @iv={0xc8, 0x117, 0x2, 0xae, "eda1041f79b14235720ebc69c07fbfd0f9deeaafce395bb8c2453824c5ca79c4d1356befe7b21cd62075a4e36e9478b4833c82556621b1ac4e66e236ea14a6a952a744c5fcc72e8c2191acd111caeb574c59a7085838d8863da08e21fcd859e48f142497b4d311c07a2012f6d06daa9797d752efdf57b4109ba648455abb0c7ae73b362ac05257ed2fc13e7aa9f74ed4ee31ad7320d21daeeac1d7a54a2b7859174887ec47f09e993942e7a19a8d"}, @assoc={0x18, 0x117, 0x4, 0x8}, @op={0x18}], 0x1368, 0x4}, 0x4000000) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0xa}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0xe6a7}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) syz_emit_ethernet(0x86, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @remote, {[@noop, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@remote}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x20}}, {}, {@multicast2}, {@local}, {@local}, {@multicast1}]}]}}}}}}}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}}, &(0x7f0000000180)=0x9c) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events.local\x00', 0x275a, 0x0) write$cgroup_devices(r13, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000140)=@ethtool_gstrings={0x1b, 0x7}}) 2m14.798261745s ago: executing program 3 (id=4858): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x4000000, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x0, 0xff9a, 0x100, 0x6, 0x1}, {0x7, 0x0, 0xc, 0x0, 0x7ff, 0x8}, 0x5, 0x8, 0x12d8}}, @TCA_TBF_RATE64={0xc, 0x4, 0x68320f62c310815e}, @TCA_TBF_PTAB={0x404, 0x3, [0x80, 0x6, 0xb46, 0x7fffffff, 0x41d, 0x4, 0x10000, 0x7ff, 0x101, 0x8, 0x16, 0x7, 0x5, 0x5, 0x4, 0x7, 0x0, 0x2, 0xd7, 0x6, 0x6, 0xfff, 0xf44, 0x401, 0x3, 0x0, 0x5, 0x37, 0x7, 0x9, 0x80000000, 0x9, 0x5939, 0x0, 0x2, 0x9, 0x401, 0x3, 0x2551, 0x0, 0x756, 0x3, 0x0, 0x6, 0x2, 0x14, 0x5, 0xce9, 0x79cd, 0x800, 0x5, 0x2, 0x5, 0x3, 0x7, 0x1, 0xa, 0x10001, 0x9, 0xfffffff8, 0x9, 0x6, 0xa, 0x8, 0x3, 0x1, 0xb, 0x1, 0x82d8, 0x1, 0x3, 0x3, 0x4, 0x10001, 0xfffffff9, 0x4, 0x0, 0x8, 0xf9d, 0x4, 0x800, 0x80000000, 0x80, 0x4, 0x5, 0x1c1, 0x7, 0x7, 0x6, 0x0, 0x8, 0x1ff, 0xb, 0x3, 0x6, 0x1, 0x7, 0x3, 0xffff, 0xfffffff3, 0x10000, 0x3, 0x101, 0x2, 0x215245f2, 0xd8, 0x8, 0xe0000000, 0x4000, 0x5, 0xa, 0x9, 0x10, 0xc, 0x7, 0x0, 0x8000, 0x4, 0x3, 0x8000, 0x10000, 0xd, 0x8, 0xf205, 0xfffffffd, 0x7fffffff, 0x1, 0x45f, 0x6f, 0x6, 0xafc, 0x5, 0x1ff800, 0x1, 0x1e8b, 0x5d9, 0x6, 0xc2, 0x5, 0x7, 0x8, 0x2, 0x3ff, 0x4, 0x5, 0x7ff, 0x27, 0x7fff, 0x3daf, 0x7, 0x9, 0xc, 0x5, 0x5, 0x93, 0xc, 0x2, 0x99, 0x6, 0x6, 0x8, 0x7, 0x8, 0x1, 0x40, 0xfffffffb, 0xa, 0x1, 0x2, 0x9, 0x0, 0x4, 0x3, 0x200, 0xebc1, 0xe, 0x1537, 0x4eaa, 0x4, 0xffffffff, 0x989, 0xaa, 0x1, 0x0, 0x4, 0x4, 0xe, 0x80000001, 0x5, 0x8, 0x7, 0x0, 0x7, 0x4, 0x81, 0x3, 0x603d, 0x0, 0x1, 0x8, 0x4, 0x18f, 0x9, 0x7, 0x200, 0x1, 0x2, 0x5f, 0x3, 0xfffffff8, 0x9, 0x0, 0x10, 0xfffffffa, 0x0, 0x0, 0x8, 0xb, 0xfffffffc, 0x3, 0x6, 0x7ff, 0xa, 0x5, 0x5, 0x2, 0x401, 0xff, 0x8, 0x5, 0x9, 0x5, 0x7fff, 0xe41, 0x7, 0x0, 0x200, 0xfffffe00, 0x8, 0x14000000, 0x5, 0x9, 0x6, 0x800, 0x8, 0x2, 0x7, 0x4, 0x10000, 0x0, 0x4, 0x8001, 0x0, 0x0, 0x80, 0x6]}]}}]}, 0x468}, 0x1, 0x0, 0x0, 0x8800}, 0x20044000) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r4], 0x68}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2m11.157673406s ago: executing program 3 (id=4861): socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xb4, r1, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x380000}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1ff}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0xb4}}, 0x20000000) r2 = socket$inet6(0xa, 0x2, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, 0x0, 0x17) connect$inet6(r2, &(0x7f0000000000)={0xa, 0xce23, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x1, @empty, 0x4}}, 0x0, 0x0, 0x22b, 0x0, "bb071f186b030000009f084524014004009412a6324d6193fcf19b49f3eefb1b56c54dc46d8bc477cd1100a0cc1dc2767bbe000100060000010100000a3200c0aeb3dc986300000000002000000400"}, 0x13c) r4 = socket$kcm(0x23, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001700010026bd7000fddbdf25080000000804050007000000"], 0xff2e}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000500)=0x9, 0x4) listen(r4, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x7ff}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) accept4(r4, 0x0, 0x0, 0x80000) socket$kcm(0x2, 0xa, 0x2) 2m7.377012806s ago: executing program 2 (id=4865): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB="84010000", @ANYRES16=r2, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054"], 0x184}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000003080101000000000000000262000000002c00048008000b4000000000080009400000000008000a4000000000080004400000000008000000000000000500030006000000"], 0x50}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}}, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00', 0x0}) bind$can_raw(r6, &(0x7f0000000000)={0x1d, r8}, 0x10) 2m3.816592417s ago: executing program 2 (id=4868): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000380), &(0x7f0000000400)=0x8) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x300, 0x70bd29, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x8081) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x1c, &(0x7f0000001840)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@snprintf={{}, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x15, 0x0, 0x0, 0x76}}], {{}, {0x5}, {0x28}}}, &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000280)="4cf84186ae79c94811ae35e2f0380cca40c139cdd13a97867e80a9ac6dc7d71764d5d796739b4643cb50b61384f37186380309850eb1c77da3ebd58eddf4bfd243d6cb2ecc2656bea81a2b847ebb497a", 0x50}], 0x1, 0x0, 0xb0}, 0x0) sendmsg$nl_crypto(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) 2m3.573923401s ago: executing program 3 (id=4869): r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40840}, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$sock_int(r2, 0x1, 0x10, 0x0, &(0x7f0000000000)) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x2, {0x41, 0x0, 0x4}}, 0x10) bind$tipc(r0, 0x0, 0x0) 2m0.960074651s ago: executing program 3 (id=4873): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1d, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x39}}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2b}, 0x94) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000740)={{r0, &(0x7f0000000300)='-{$+-\x00', 0x20000, &(0x7f0000000340)={@_ha_fsid={[0x4, 0x5]}, {0x4a1, 0x4, 0x9, 0x9}}, 0x4, &(0x7f0000000380)={@_ha_fsid}, &(0x7f00000003c0)=0x9}, {[0x3, 0x2, 0x9, 0x4e]}, 0x10000, 0x96, &(0x7f00000004c0)=""/150}) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000740)={{r0, &(0x7f0000000300)='-{$+-\x00', 0x20000, &(0x7f0000000340)={@_ha_fsid={[0x4, 0x5]}, {0x4a1, 0x4, 0x9, 0x9}}, 0x4, &(0x7f0000000380)={@_ha_fsid}, &(0x7f00000003c0)=0x9}, {[0x3, 0x2, 0x9, 0x4e]}, 0x10000, 0x96, &(0x7f00000004c0)=""/150}) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000800), 0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="ad76b6c5", 0x4) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="a9861869a75f66ef7d128ae4230965648a021cdf93508c9706dc1e4d9e1d4c436faf1d2786", 0x25}, {&(0x7f0000000240)="eeb9ff4efd6c", 0x6}, {&(0x7f00000001c0)='z3', 0x2}], 0x3, 0x0, 0x0, 0x4012}], 0x1, 0x0) recvmmsg$unix(r6, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000034c0)=""/4096, 0x1000}], 0x1}}], 0x2, 0x20, 0x0) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r4, 0x10, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8010) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x4}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x4}, 0x6) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="05000000080000000c0000000300000001000000", @ANYRES32, @ANYRESDEC=r2, @ANYRES32, @ANYRES32, @ANYRES8=r6], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0)="801d3a4ed443e439f73a2f391fcc4a6377abf66bf2e12eafaa4934423c5064eff8507f392aa1fd5fd86d51b95752e68cf5238aed92513465dbf8244a6f4e61", 0x5, r7}, 0x38) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r8, &(0x7f0000000240)=[{&(0x7f00000000c0)="6dd3403ec9c826f56189fb0c6a1002117696cfd7084e1678380770558aba4b3f5b88118f709b50bfad31a66f0aff8883d12d40625164b7d326fcc6f193d128cd6c3ecc"}, {&(0x7f0000000140)="5a29ab02dc835f848614f44e33664ff94a326ed7ac6bd1ae2838ade4379fefd9aef255af0d0a504d1ac58232f6470aabfc71057ea359d3e1ea3ca2da4ada7d583087cf176ae639ed82863cd18d3963908660b131208a0f099e2154f7e0ec4ea06cacf6591008c3bf56a0b1d5dce69d822e4250260bd9d96232ba0b22073b7f178e29bea4f9dbee7feb36c1c746f336c4b76de70bea5963764a7cd10dec4823bd00d9602bcf822fa7fc56a9bfd22b9a44f79f15f1b0db5e593dae3a08b1de382346367109fe9a2a79885d5cf9319d7a736cc9a1c8c3182169"}], 0x127d) socket$nl_route(0x10, 0x3, 0x0) unshare(0x20040600) (async) unshare(0x20040600) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0x3}, {0x8}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "09000000000000208f29d158039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c76000067af25166c2f0f85f36aa8867406119c010400002e31dea98204000000d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b5142ddf36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459ac3ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1008000"}, @TCA_RED_PARMS={0x14, 0x1, {0x8, 0x5, 0x2, 0x14, 0xf, 0x12, 0x4}}]}}]}, 0x148}}, 0x10000) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000580)={r8, r3, 0x11, 0x0, @void}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r12, &(0x7f0000000080)=ANY=[], 0x10448) (async) write$cgroup_subtree(r12, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x810, r12, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x23, 0xffffffffffffffff, 0x4}, 0x38) write(r0, &(0x7f00000000c0)="510003000000", 0x6) 1m59.765890368s ago: executing program 2 (id=4874): r0 = socket(0x28, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) (async, rerun: 64) r2 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) sendto$packet(r2, &(0x7f0000000140)="bad330fbc904a9f1a0ebca3ab554a8e1a26960cafc215545af3358823141ef31a57cb95152e2b120a42630e035ad7df46588c4af8c7ace97d82939304f44eef2e892670b4d7a8a93496725412f4053e574e6429a6131102707ae56469c5510d52daca0afd2baa8be980fab446f3f145c2c80cf414e000000000000000000", 0x7e, 0x20001041, &(0x7f00000001c0)={0x11, 0x8100, r1, 0x1, 0xd9, 0x6, @multicast}, 0x14) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000600)=@newtaction={0x50, 0x30, 0x1, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_bpf={0x38, 0x1, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="180100003600010000000000fcdbdf250701f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 32) r6 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) setsockopt$inet6_buf(r6, 0x29, 0x6, &(0x7f0000000180)="10000000000000000100000024000000", 0x10) (async, rerun: 64) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) r8 = openat$cgroup_pressure(r7, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="49575f83c61a4465e877990000000d0000000000000000000a000000100000a7cbe44d5f64d442d25558ff956f0f7034047c7432529478591ce03e13f84e17455308c91dbb79d5e8f2cd63176a8332f487eb0b5f229ea543075e19a0ca17f2a084218a36028b04da89427cbf03bbe35c9a3aea2502371faeb92b599b18df43177a291a7eb7a4fb91d6a85f16a5fe320208a6953b361d6b77e93f0f338ed3512ba301506d287575dd00c531c393ef9fd6cf8464b215e4cc30dd06bbc52082adc7703fc463abf07c6111", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000079d124dd03"], 0x50) r9 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r9, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) (async) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x40, r10, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x8ab3, 0x54}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x9}]}, 0x40}, 0x1, 0x0, 0x0, 0x48d0}, 0x4000) write$cgroup_pressure(r8, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) (async) close(0x4) (async, rerun: 64) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f00000004c0), r0) (rerun: 64) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r12, 0x400, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 64) r13 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r13, &(0x7f0000000400)={0x0, 0xa7, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e, 0x1}}]}, 0x4c}}, 0x0) getsockopt$inet_tcp_int(r3, 0x11e, 0x1, 0x0, &(0x7f0000000000)) (async, rerun: 32) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) (rerun: 32) 1m58.539482002s ago: executing program 1 (id=4875): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'}) ioctl(r0, 0x8b22, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$can_j1939(0x1d, 0x2, 0x7) sendmmsg(r2, 0x0, 0x0, 0x41) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) r3 = socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x803, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r4) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000003000000400001800d0001007564703a73797a30000000002c0004001400010002004e0f7f00000100000000000000001400020002004e207f0000020000000000000000"], 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000240)={0x0, 0x58, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x78}}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmmsg$inet6(r6, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffffac1414aa", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00)'], 0x50}}], 0x1, 0x0) 1m57.330400343s ago: executing program 3 (id=4877): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f0000009200)={0x77359400}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x0, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x1a}}]}, &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f0000009200)={0x77359400}) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x0, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x1a}}]}, &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) 1m55.197507868s ago: executing program 1 (id=4878): r0 = socket$inet(0x2, 0x0, 0xc46f) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000180), &(0x7f00000001c0)=0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x3d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xf1, @empty, 0x19f4929}], 0x1c) listen(r1, 0x100) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="d9", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @local}], 0x18, 0x40048d5}, 0x8050) close(0x4) connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e21, @empty}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) 1m55.073222135s ago: executing program 3 (id=4879): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100e4ae88a23bd6b2aaaecf86a0088161768c5fa90ab51c6a1e99bacf7a7e3a87fd7e15e9ba6f24f346729ccb8a24a88ad422f242c9446c1999c065566c33c2955803f401c5f3b252dcba1d845adb43aba3d696cded1caf1d250b43c081b923a8c8533cfd72bdd134bcb3cf9d22b54a04402a23acc041298a7e58858f2635ca832564eb3f9f0dcf3fc5ac1835624a345e5f9e217596030d2536643aa97e8ff4bbe147b1aa4ed7f7323ccd6bf19ed82f3c28fb0970a5094388fd2200e5d2ad935a673df48958434d143b4bf2c556cd10", @ANYRES32=r3, @ANYBLOB="08001f000c000000"], 0x40}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="086f450000e9f12ed8521a7000000000000000"], 0x24}}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$802154_dgram(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x24, @short={0x2, 0xffff, 0x3}}, 0x14, &(0x7f0000000100)={&(0x7f0000000080)="c2e70dbe9e1297e0ab8f8bd8f9c702925ff4be2732405f61940f5e5995ba6241aed0f0c916f5d2b3ba7c", 0x2a}, 0x1, 0x0, 0x0, 0x4}, 0x4040000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="a27d69e60000670000000800030000000000", @ANYRES32=r9, @ANYBLOB="0c00990002000000210000000800c300741300000800c40009000000"], 0x38}}, 0x880) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0000000206050600000000000000000200000005000100070000000900020073797a300000000011000300686173683a69702c6d61726b000000000500040003000000050005000200000096"], 0x4c}}, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x2a000, 0x0) write$tun(r11, &(0x7f0000000140)=ANY=[@ANYBLOB="000188a80311e750060c77095d4464ddaf5200029efc60ca82c970f14debbbbbbbbbbb11bee7df84c96676cf93c218b8107a65618b0245"], 0x28) sendmsg$IPCTNL_MSG_CT_GET(r10, 0x0, 0x80) sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c0000000906050600000000000000000200000005000100070000000900020073797a3000000000240007800c000180080001407f0000010c000280080001407ffd000108000a40"], 0x4c}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000440)={0x8607, 0x3, 0xe, 0xa2}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x48047}, 0x8000) r12 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r12, 0x8931, &(0x7f00000000c0)={'dummy0\x00', @ifru_hwaddr=@broadcast}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000400000000000000006c00000008000300", @ANYRES32=r5, @ANYBLOB="9c78ef"], 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 1m52.514338931s ago: executing program 1 (id=4881): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r0}) bind$xdp(r1, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x80000040}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f00000004c0)={&(0x7f00000000c0), 0x6e, &(0x7f0000000340)=[{&(0x7f0000000240)=""/214, 0xd6}], 0x1, &(0x7f0000000380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x138}, 0x1) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01003b03000000000000000000001000000002000000000000000000000100000000000000020000"], 0x0, 0x2a, 0x0, 0x0, 0x800001}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xa, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000101840000004000000000000000000000095000000000000009500000000000000950000000000000018400000feffffff050000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x9, 0x0, 0x0, 0x7ffffff, &(0x7f0000000200), 0x10}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x80}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0xffffffff}, {}, 0x0, 0x6e6bb5, 0x0, 0x0, 0x3, 0x2}}, 0xb8}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x20050800) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0x3}]}, 0x40}}, 0x0) r8 = openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r8, &(0x7f0000000200)=ANY=[@ANYBLOB='gretap0 8'], 0xa) 1m45.722272887s ago: executing program 1 (id=4883): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000068000301000000ef00000000000100000000000006000300000000000800010000000000240002"], 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f00000005c0)={0x0, 0x1b, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000020905000000000000000000000000003c0002002c00018014000300fc01000000000000000000000000000014000400ff0100000000e1ffffff0000000000010c00028005000100000000000800034000000001"], 0x58}}, 0x0) 1m43.813946852s ago: executing program 33 (id=4874): r0 = socket(0x28, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) (async, rerun: 64) r2 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) sendto$packet(r2, &(0x7f0000000140)="bad330fbc904a9f1a0ebca3ab554a8e1a26960cafc215545af3358823141ef31a57cb95152e2b120a42630e035ad7df46588c4af8c7ace97d82939304f44eef2e892670b4d7a8a93496725412f4053e574e6429a6131102707ae56469c5510d52daca0afd2baa8be980fab446f3f145c2c80cf414e000000000000000000", 0x7e, 0x20001041, &(0x7f00000001c0)={0x11, 0x8100, r1, 0x1, 0xd9, 0x6, @multicast}, 0x14) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000600)=@newtaction={0x50, 0x30, 0x1, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_bpf={0x38, 0x1, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="180100003600010000000000fcdbdf250701f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 32) r6 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) setsockopt$inet6_buf(r6, 0x29, 0x6, &(0x7f0000000180)="10000000000000000100000024000000", 0x10) (async, rerun: 64) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) r8 = openat$cgroup_pressure(r7, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="49575f83c61a4465e877990000000d0000000000000000000a000000100000a7cbe44d5f64d442d25558ff956f0f7034047c7432529478591ce03e13f84e17455308c91dbb79d5e8f2cd63176a8332f487eb0b5f229ea543075e19a0ca17f2a084218a36028b04da89427cbf03bbe35c9a3aea2502371faeb92b599b18df43177a291a7eb7a4fb91d6a85f16a5fe320208a6953b361d6b77e93f0f338ed3512ba301506d287575dd00c531c393ef9fd6cf8464b215e4cc30dd06bbc52082adc7703fc463abf07c6111", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000079d124dd03"], 0x50) r9 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r9, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) (async) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x40, r10, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x8ab3, 0x54}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x9}]}, 0x40}, 0x1, 0x0, 0x0, 0x48d0}, 0x4000) write$cgroup_pressure(r8, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) (async) close(0x4) (async, rerun: 64) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f00000004c0), r0) (rerun: 64) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r12, 0x400, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 64) r13 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r13, &(0x7f0000000400)={0x0, 0xa7, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e, 0x1}}]}, 0x4c}}, 0x0) getsockopt$inet_tcp_int(r3, 0x11e, 0x1, 0x0, &(0x7f0000000000)) (async, rerun: 32) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) (rerun: 32) 1m42.039403376s ago: executing program 1 (id=4886): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000000)={{r1}, "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"}) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000001, 0x8013, r0, 0xf6695000) 1m37.594449444s ago: executing program 34 (id=4879): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100e4ae88a23bd6b2aaaecf86a0088161768c5fa90ab51c6a1e99bacf7a7e3a87fd7e15e9ba6f24f346729ccb8a24a88ad422f242c9446c1999c065566c33c2955803f401c5f3b252dcba1d845adb43aba3d696cded1caf1d250b43c081b923a8c8533cfd72bdd134bcb3cf9d22b54a04402a23acc041298a7e58858f2635ca832564eb3f9f0dcf3fc5ac1835624a345e5f9e217596030d2536643aa97e8ff4bbe147b1aa4ed7f7323ccd6bf19ed82f3c28fb0970a5094388fd2200e5d2ad935a673df48958434d143b4bf2c556cd10", @ANYRES32=r3, @ANYBLOB="08001f000c000000"], 0x40}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="086f450000e9f12ed8521a7000000000000000"], 0x24}}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$802154_dgram(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x24, @short={0x2, 0xffff, 0x3}}, 0x14, &(0x7f0000000100)={&(0x7f0000000080)="c2e70dbe9e1297e0ab8f8bd8f9c702925ff4be2732405f61940f5e5995ba6241aed0f0c916f5d2b3ba7c", 0x2a}, 0x1, 0x0, 0x0, 0x4}, 0x4040000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="a27d69e60000670000000800030000000000", @ANYRES32=r9, @ANYBLOB="0c00990002000000210000000800c300741300000800c40009000000"], 0x38}}, 0x880) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0000000206050600000000000000000200000005000100070000000900020073797a300000000011000300686173683a69702c6d61726b000000000500040003000000050005000200000096"], 0x4c}}, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x2a000, 0x0) write$tun(r11, &(0x7f0000000140)=ANY=[@ANYBLOB="000188a80311e750060c77095d4464ddaf5200029efc60ca82c970f14debbbbbbbbbbb11bee7df84c96676cf93c218b8107a65618b0245"], 0x28) sendmsg$IPCTNL_MSG_CT_GET(r10, 0x0, 0x80) sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c0000000906050600000000000000000200000005000100070000000900020073797a3000000000240007800c000180080001407f0000010c000280080001407ffd000108000a40"], 0x4c}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000440)={0x8607, 0x3, 0xe, 0xa2}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x48047}, 0x8000) r12 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r12, 0x8931, &(0x7f00000000c0)={'dummy0\x00', @ifru_hwaddr=@broadcast}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000400000000000000006c00000008000300", @ANYRES32=r5, @ANYBLOB="9c78ef"], 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 1m37.290752646s ago: executing program 1 (id=4889): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r2, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x1000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000080), &(0x7f0000000100)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000003c0)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x1ff, '\x00', 0x0, r0, 0x1, 0x4, 0x4}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x0, 0x9, 0x1ff, 0x5, 0x1, 0x1, 0x13, '\x00', 0x0, r0, 0x0, 0x5, 0x3}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0xb80, 0x8}, 0xc) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001f80)={&(0x7f0000000900)="6be83c531f4c68461c1c5058dc26fef16dcd8de53f865eb05fc219d89d14801da3f40ccfb1a7e259359aaee4a7fda654ce0685de5c8450a4d3263edd", &(0x7f0000000e40)=""/4096, &(0x7f0000001e40)="7f950f992b38d30d764be4bdf839228f4f0a35a6f49977a76dff944648a65aac8c01aaf418acc6ef1a867daee2a8e10466a1219b59cf313e43fd0af08d257650227391821884ae63d91cfc289f2cc66b06428ef55a208f0834199f5a28bfc723ec4454f3e62bf029a56e4e018ef31f8ee730542a1fc01df40559976f5dd6e103be774f463ba523a9d7f0c0e47e16675636973086304a0994c073f0668ec80da7f75755a275c74c4cb4c1b483fa89f155bb674ed021c28ddaa8544af655ff44f07b7e9cb823a79c3137e745b464620f8f784aecee9a829f7b6d57b02b3a95ceecd62e79024b8a8b818301", &(0x7f0000001f40)="196885d396f86ba71d6e02423d4e5c105de0", 0x3, r4}, 0x38) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r9, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r9}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r10, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x440b0) 1m19.847306975s ago: executing program 35 (id=4889): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r2, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x1000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000080), &(0x7f0000000100)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000003c0)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x1ff, '\x00', 0x0, r0, 0x1, 0x4, 0x4}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x0, 0x9, 0x1ff, 0x5, 0x1, 0x1, 0x13, '\x00', 0x0, r0, 0x0, 0x5, 0x3}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0xb80, 0x8}, 0xc) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001f80)={&(0x7f0000000900)="6be83c531f4c68461c1c5058dc26fef16dcd8de53f865eb05fc219d89d14801da3f40ccfb1a7e259359aaee4a7fda654ce0685de5c8450a4d3263edd", &(0x7f0000000e40)=""/4096, &(0x7f0000001e40)="7f950f992b38d30d764be4bdf839228f4f0a35a6f49977a76dff944648a65aac8c01aaf418acc6ef1a867daee2a8e10466a1219b59cf313e43fd0af08d257650227391821884ae63d91cfc289f2cc66b06428ef55a208f0834199f5a28bfc723ec4454f3e62bf029a56e4e018ef31f8ee730542a1fc01df40559976f5dd6e103be774f463ba523a9d7f0c0e47e16675636973086304a0994c073f0668ec80da7f75755a275c74c4cb4c1b483fa89f155bb674ed021c28ddaa8544af655ff44f07b7e9cb823a79c3137e745b464620f8f784aecee9a829f7b6d57b02b3a95ceecd62e79024b8a8b818301", &(0x7f0000001f40)="196885d396f86ba71d6e02423d4e5c105de0", 0x3, r4}, 0x38) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r9, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r9}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r10, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x440b0) 40.433734178s ago: executing program 0 (id=4897): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x60, 0x30, 0x871a15abc695f839, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0x3003, 0x3, 0x4009, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x60}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@loopback}, {@in=@loopback, 0x0, 0x33}, @in6=@private1, {0x0, 0x0, 0x5}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}, @encap={0x1c, 0x4, {0x0, 0x1}}]}, 0x158}}, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 38.306384353s ago: executing program 0 (id=4898): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f00000003c0)={0x1, 'veth1_virt_wifi\x00'}, 0x13) ioctl$sock_TIOCINQ(r0, 0x541b, 0x0) 35.878895265s ago: executing program 0 (id=4899): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000000)="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") r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x80800) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3f2, 0x1, 0x70bd27, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4004880}, 0x20000070) write$bt_hci(r1, &(0x7f0000000240)={0x1, @read_local_ext_features={{0x1004, 0x1}, {0x6}}}, 0x5) sendmsg$kcm(r1, &(0x7f00000007c0)={&(0x7f0000000280)=@pptp={0x18, 0x2, {0x2, @private=0xa010102}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000300)="49ee3211acd6504ceb", 0x9}, {&(0x7f0000000340)="91f21daea4469d2d8e945a8bfad188e493e797e829350dab2b48343058b6e791233bc627d4cb6f5ca3802e22687d121707a952cc5fc5c2aada38963b43b9d5b7e76f47aa2dd655244bde306b72cbe83b08a1f4050e53d2833f0a20374c99266b7ef60290157dba16cd52c98378ac753bcf7073387abef25c747caf1feb57ddabe297fbca7f985f2ad62da6dad41d83cc0a096a48c29e26bfff68e2f065d2c1aa0ee3e97a5cb768da298f", 0xaa}, {&(0x7f0000000400)="c534efa152a1ffe5cf89068b11ae3aad9ea1524087566dbdd507b2aabf7c0574a94ddb856c43428625bdda425c60b8e5a4c2081e7b18fb25d3c7a5e7af730c20baf7d104ed8ed823ae3b13634b03f90ae2acb7177d71c4c59ff32c0363e17570241275d94bb7af354a0f7ab8b0800fb03df20b258978768c24da899b89b64fe667724cd64235928d72b524b9e4dddc4481ea7ad034c83938b0c9cc202be8db", 0x9f}, {&(0x7f00000004c0)="68020ff1d52dfb6282cd7e6e4ffcf420ffd227771cd7f19d5bc21ef6cf7c76011a8c7485388c4a210a987b807f137ee14e4a78e8eff32a4734730c9134173af498f5157cf8dafdee12e7c0771ffc5a78b63d2fec65a1f6d9fc9490301555cc63280bf1fbf1cee00dae5f225b2a730e399ceb5cb81cd4e1d71dceb34d0767c7bb5d2864ff7d15448aab0f0bb7d5914216c23d5a88ad12bcff55feda305735c44bc5189845b12ed7acbb2c90b1becff9432bc2bd0d176445c99cfd9e7872d85fa63906901fa5b9581cbe4c3a5e2f93d6d6f973f35b847dffe91e21832485ec3189fb0821687367bd94b3d888d33bfbd35fe4ab1adc", 0xf4}], 0x4, &(0x7f0000000600)=[{0x60, 0x10e, 0x3, "08b53d11286ac176a37077d373e595855b20bd951cca29f0162809692085d8b3e6690fa151e59dc9a3f74f4f8564072456529c5903fca6c58ac69ee9fd2695e8f89d4447b4b5d5226d0a47d4eeedf2"}, {0x108, 0x117, 0x0, "182ce9ebe49681573135fbb9737a1906b5c87dae7b38e21e0d82106f89f7db0128a6d3d6e84a090c5e9533dac63d4c997dd3395f45729ef4232e7e16746f60d8b5e68cf3150e20cca8a34a4c387cffbee0cb9629f66f59a90112a26997b2d54af744508303e8e57d63bcf3e7ee4b55aeacd9261179b1e6c15cfedc7ac00ac77dc83fd3d8e0b25b65b735e1a93bda2b7a823b0a29af3aa876211d8d462e627c634b94f4f6f2a563d23af200857621412ff09e4b0857ac51cc797902b11c97c5da85e6e7f7855a6fd112d0f2e02c45e1a19737baa71391fe3c5fdf9cc52b6e38535a4636b6f7b0dd678be529ccb92060a968"}, {0x28, 0x112, 0x3, "eca531b1efb8606729dd0be368a9cf4d0dec57"}], 0x190}, 0x4044085) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, 0x2, 0x8, 0x0, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa01}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040040}, 0x4000000) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@nat={'nat\x00', 0x1b, 0x5, 0x628, 0x0, 0x0, 0xffffffff, 0x440, 0x0, 0x558, 0x558, 0xffffffff, 0x558, 0x558, 0x5, &(0x7f0000000900), {[{{@ipv6={@remote, @local, [0xffffff00, 0xff000000], [0xff000000, 0xffffffff, 0xffffff00, 0xff], 'nicvf0\x00', 'macsec0\x00', {}, {}, 0x89, 0x8, 0x5}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@eui64={{0x28}}, @common=@dst={{0x48}, {0x20, 0x0, 0x0, [0xff85, 0xf4, 0xac, 0x8, 0x6168, 0x2, 0x0, 0x6, 0x8, 0x1325, 0x7f, 0x7, 0x3, 0x2, 0x9, 0x1ff], 0xa}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x10, @ipv4=@private=0xa010102, @ipv6=@mcast2, @port=0x4e20, @port=0x4e20}}}, {{@ipv6={@empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffffff, 0x325b1832c75b6efc, 0xffffff00, 0xffffff00], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'syz_tun\x00', 'bond_slave_1\x00', {0xff}, {0xff}, 0x0, 0x10, 0x3, 0x52}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@dst={{0x48}, {0x7, 0x4, 0x1, [0x5, 0x5, 0x4, 0x2, 0x3, 0xffff, 0x3, 0x7, 0x456a, 0xa, 0x1000, 0x3, 0x800, 0x7, 0x40, 0x7], 0x5}}, @common=@eui64={{0x28}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@mcast2, @ipv4=@local, @icmp_id=0x64, @port=0x4e20}}}, {{@ipv6={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00', [0xff000000, 0x0, 0x0, 0xffffffff], [0xff000000, 0xffffffff, 0xff, 0xff], 'veth0_to_hsr\x00', 'syzkaller0\x00', {0xff}, {}, 0x2c, 0x6, 0x4, 0x8}, 0x0, 0x138, 0x180, 0x0, {}, [@common=@srh1={{0x90}, {0x1, 0x3, 0xc, 0x9, 0x8, @remote, @mcast2, @empty, [0x0, 0xffffffff, 0xff000000], [0xff000000, 0x0, 0xffffff00, 0xff], [0x0, 0x0, 0xffffff00, 0xffffff00], 0x844, 0x1410}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x16, @ipv6=@loopback, @ipv4=@empty, @gre_key=0x8000, @icmp_id=0x66}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @local, [0xff, 0xff000000, 0xffffff00, 0xffffff00], [0xff000000, 0x0, 0xffffffff], 'veth0_to_bridge\x00', 'veth1_to_bridge\x00', {0xff}, {}, 0x2, 0x9, 0x5, 0xe}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28}, {0x84, 0x80}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x4, @ipv4=@private=0xa010100, @ipv6=@loopback, @icmp_id=0x64, @gre_key=0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001040), 0x1a000, 0x0) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000001080)) setsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f00000010c0)={@empty, @private=0xa010102, @broadcast}, 0xc) sendmsg$sock(r1, &(0x7f00000027c0)={&(0x7f0000001100)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000002600)=[{&(0x7f0000001180)="dde8eee1786221861adb6a458744d50b3cdb8b46b8b9dcbd1ce64e0fbe14ec21dc17", 0x22}, {&(0x7f00000011c0)="729dbd592f6c4db65bc147907b319412d3156e6a68ed39dbb4f1f077928d4cbbc3c2b2af616f370d21acee336fc84d00734625ab6d4590dd0408d856db24a4555de04614410411f53715fb658387a068a49b34e6eeb2c9a8be8958a033659674d6a91a14754ba357750814b9020cf87b5211065d25557b202a926ecd69b02a28f21822a5e62b622d4be7340d0b82c8b87a808ce02e8d2c3d2e0aa9c0a1c7a60ec5889f9f66ad3b46b6204f80ad5a555d9904241b7f68c78c509bfae6e5cbce4c", 0xc0}, {&(0x7f0000001280)="8a628b38f6bcf8daa9b8ec989fd9837117f0cda80ebd5957fe96a22716a3827c99db94707a3e82752a874ac12ce70b19d7c58928c5820016d272bb9f31aca47a1c9c4edc5acf36681f3df71403a01e87d8fe2add10c7fb7b8f0a9573219c6c21ceb54c45d695bcb8428d2d1c34fd4df95b282ee5992802f2266a47b990ca2a971b0eed4df0a470f636ea038a0089e91bec78578f8d69a1b8a73f58279c61532ddf8d734c2d6486a3375704e570912c1ebc4dde37b89f2582d8e46d23bb847d007c43b5ac621abca859add9729a1209a9", 0xd0}, {&(0x7f0000001380)="e6068c71b5c083c2d22d2200accbdc5c8db2937465d2df19818525ad9aeabcc54b6fcdefd49e881e6833e13700e7d8fe6d9877eea99031535e265195660413b960065e1f1ec57ea6d3770d31b88709e15e53624b9a58c3d68a9fc143df820c3ff3c51ae7f087de6384fdd3aec71dcd07121a58041dc264a514f20c271f7ebfec6f2c36c67ef48d36311d9e02", 0x8c}, {&(0x7f0000001440)="5df591d73fd904f4d80314eb0b1df66487810300b79aa1306ea57e568467d5c56db52a6e333ecdb2b1ff736c87467d6a1dab61ddc54c0e7804c3fd9d47434a59c50e", 0x42}, {&(0x7f00000014c0)="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", 0x1000}, {&(0x7f00000024c0)='/', 0x1}, {&(0x7f0000002500)="8c4bcd336aea38162e113d9c5133a0559e3dbc36e1ddd0359d3e8b57e0849b37083982479f11c5c192b6dca83441245742d2c7a6675a159c37", 0x39}, {&(0x7f0000002540)="26db92e2476c82f3590bd0fc170a57a49ecd412abbeaeb7f7395b2b2990e7c7521ca9c1a0dfab26eb79ad9ba0ba8a1d931aa056b99a59828a4d7429edc2582dadb457ea31f2a50af3004ac4390e7265f8b6c1ab0dd", 0x55}, {&(0x7f00000025c0)="29322715cd475952ef32f742c3aaa4f0033b00c8fa5e8e58141fd6e6ac382e1382d72dbb06d6375dd43616db", 0x2c}], 0xa, &(0x7f00000026c0)=[@txtime={{0x18, 0x1, 0x3d, 0x23}}, @timestamping={{0x14, 0x1, 0x25, 0x14b}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0xc}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0xac}}, @mark={{0x14, 0x1, 0x24, 0xe0f8}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x81}}], 0xf0}, 0x4000050) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000002840)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000002880)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000028c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000002900)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000002940)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000002980)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000029c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000002ac0)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x4c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x4c}, 0x1, 0x0, 0x0, 0x41800}, 0x800) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r3) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000002c40)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002c00)={&(0x7f0000002b80)={0x50, r11, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x26}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x19}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x21}]}, 0x50}, 0x1, 0x0, 0x0, 0x4880}, 0xc000) write$tun(0xffffffffffffffff, &(0x7f0000002c80)={@void, @val={0x2, 0x80, 0x7, 0x6, 0x69c9, 0xf}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0xa, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev={0xfe, 0x80, '\x00', 0x37}, @empty, @dev={0xfe, 0x80, '\x00', 0xe}}}, 0x3e) sendmsg$IEEE802154_LLSEC_DEL_KEY(r3, &(0x7f0000002d80)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002d40)={&(0x7f0000002d00)={0x40, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0xc800}, 0x40) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002e00), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000002e40)={'wg1\x00', 0x0}) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f0000002f40)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002f00)={&(0x7f0000002e80)={0x74, r12, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r13}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x81}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x4) ioctl$OCFS2_IOC_REFLINK(r2, 0x40186f04, &(0x7f0000003000)={&(0x7f0000002f80)='-C\x00', &(0x7f0000002fc0)='nat\x00', 0x5}) bpf$PROG_LOAD(0x5, &(0x7f00000045c0)={0x1b, 0x11, &(0x7f0000003200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8b7, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x1, 0x0, 0x3, 0x5, 0xb, 0xffffffffffffffa2, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x6}, @ringbuf_query, @tail_call, @map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x993}]}, &(0x7f00000032c0)='syzkaller\x00', 0xd, 0x59, &(0x7f0000003300)=""/89, 0x41000, 0x18, '\x00', r13, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000033c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000003400)={0x3, 0xd, 0x6, 0xffffff01}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000004580)}, 0x94) 30.955209852s ago: executing program 0 (id=4900): sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x4, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040001}, 0x4000) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='io.bfq.weight\x00', 0x2, 0x0) readv(r0, &(0x7f0000003540)=[{&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/174, 0xae}, {&(0x7f0000001200)=""/142, 0x8e}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/111, 0x6f}, {&(0x7f0000002340)=""/240, 0xf0}, {&(0x7f0000002440)=""/46, 0x2e}, {&(0x7f0000002480)=""/4096, 0x1000}, {&(0x7f0000003480)=""/176, 0xb0}], 0x9) (async) ioctl$XFS_IOC_FSGROWFSRT(r0, 0x40105870, &(0x7f0000003600)={0x4, 0x1}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000003640), 0x591003, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000003680)={'veth1_to_bond\x00', @remote}) readv(r1, &(0x7f0000003d00)=[{&(0x7f00000036c0)=""/34, 0x22}, {&(0x7f0000003700)=""/53, 0x35}, {&(0x7f0000003740)=""/236, 0xec}, {&(0x7f0000003840)=""/161, 0xa1}, {&(0x7f0000003900)=""/57, 0x39}, {&(0x7f0000003940)=""/185, 0xb9}, {&(0x7f0000003a00)=""/231, 0xe7}, {&(0x7f0000003b00)=""/3, 0x3}, {&(0x7f0000003b40)=""/148, 0x94}, {&(0x7f0000003c00)=""/249, 0xf9}], 0xa) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000003dc0)={r0, 0x0, 0x8001, 0xa}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000003e40)={'sit0\x00', &(0x7f0000003e00)={@private=0xa010100, 0x0, 0x0, 0x10, 0x0, [{@empty}]}}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000003fc0)={&(0x7f0000003e80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003f80)={&(0x7f0000003ec0)={0x88, 0x1403, 0x800, 0x70bd27, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge_slave_0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pimreg1\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x81) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000004040), r2) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000004100)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000040c0)={&(0x7f0000004080)={0x18, r3, 0x20, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x18}}, 0x20008800) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000004140)={'veth1_to_team\x00', 0x8000}) (async) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) (async) socket$igmp6(0xa, 0x3, 0x2) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000004180)) write$cgroup_subtree(r2, &(0x7f00000041c0)={[{0x2d, 'memory'}, {0x2b, 'cpuset'}, {0x2b, 'rdma'}]}, 0x16) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x3, &(0x7f0000004200)=""/61, &(0x7f0000004240)=0x3d) (async) read$alg(r2, &(0x7f0000004280)=""/205, 0xcd) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000043c0), r2) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000004580)={&(0x7f0000004380)={0x10, 0x0, 0x0, 0x60000001}, 0xc, &(0x7f0000004540)={&(0x7f0000004400)={0x114, r5, 0x800, 0x70bd25, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0x114}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000004600), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r6, &(0x7f0000004740)={&(0x7f00000045c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000004700)={&(0x7f0000004640)={0xa4, r7, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4041}, 0x9000) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000004780)) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000004800), r6) sendmsg$NL802154_CMD_NEW_SEC_DEV(r8, &(0x7f0000004900)={&(0x7f00000047c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000048c0)={&(0x7f0000004840)={0x58, r9, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVICE={0xc, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVICE={0x18, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40803}, 0x4015) (async) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000004940)={0x1, 0x2, 0x8}) 22.676901649s ago: executing program 0 (id=4901): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000140007000000e4ff000000002b"], 0x14}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x658, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x62c, 0x2, [@TCA_BPF_ACT={0x628, 0x1, [@m_bpf={0xc8, 0x11, 0x0, 0x0, {{0x8}, {0x4}, {0x9d, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e1028d910282"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x19c, 0x5, 0x0, 0x0, {{0x7}, {0x88, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x81, 0x6, {0x7, 'raw\x00', 0x7, 0x100, "5922b40f3b9231ba6e0c37dcda932a70335da3c7ed969269be350eede0a5fda559f5cb1d2965da3399446c574f0d7ed3b4810fc3efe0304c7bb1d3ed00a60a15519cae499f11ac626316a075637035e57ffcbd48e9b64e"}}]}, {0xed, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa220154db33399242bca9f4fac65c74cb6264c28ac7a50037564c7b417fb61d617d212ab3243c30e0e82d9a12651b74553d539b991a302489af94626e5aac41c53b2"}, {0xc, 0x7, {0x0, 0xeb0757422c733451}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_connmark={0x140, 0x1b, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x58800, 0x3, 0x5, 0x6, 0x7}, 0xc33}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x1, 0x7, 0x4}, 0x1}}]}, {0xd5, 0x6, "f270d82c886adacf5114c5d4956f4c0386b817377052208700569e3e94411f8656731bf43d4ce53f014d54b20522c3d868362a84b835ace8d5781d9502179d3ae2be79b08417ea95f622fbbe392f9a4a239373bb16bf08e1d1a31eb023d2007b6b41cb949b6308ddb142dbe0d846716145c55703fbd8c7a3936b5f2be5c41d959a6ae73d3b986e29a38be71293c21abf0c9e792157a90f9cc665de40a6566ab690253f7096302d89dfe6ecf48b4e79a6b22d951064f151a6ef776fe1ef8b510d561b11fe7475fb5af8fe93bec2dae22e1a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_tunnel_key={0xfc, 0x8, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}]}, {0x85, 0x6, "51719d53a2b05eda58a80a40d29b01394b8749d7d9ef9f47cce75187b6f333f4bfe797fa4227bf38cf0b71e1b4888d8d1ed410a788c182ba498076ca9ab3d63a8f29175d44a2e8364296c34ac0cdb8972288ecf6515bec4861a53e1e18e54679f5666b0536d0a008aa9b3be1f5e00c4c72460249c372de16eb2cfc15714543d6f3"}, {0xc}, {0xc, 0x8, {0x3, 0xddc47d017e85c037}}}}, @m_xt={0x184, 0x13, 0x0, 0x0, {{0x7}, {0x15c, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x75, 0x6, {0x9, 'raw\x00', 0xef, 0x7, "859b467c76be5255b2d4f6101cf6d6cb72c6b46512ecba82df24523b07075e859fd68154d7171a2ca3415ec79cc8ff85b058dae9f1d49e867787957d80637320c0378f6dd94a52c2fc8509"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0x71, 0x6, {0x800, 'security\x00', 0x1, 0x7, "d5e486c3628c9e8c7a111651b758fe819fd071b9b7f85b09d69fe633753b56c91ebb716bda7cbe3f10db8feb7bc1aa6f7814145a0e3654c9f2b23521e6b910aa4c428134bb648b"}}, @TCA_IPT_TARG={0x45, 0x6, {0x8, 'security\x00', 0xd, 0x6ccd, "51100666dd78f1337c421065ba00caa97aaa8e1aa207a78c6d7e2a"}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x658}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 16.950843393s ago: executing program 0 (id=4902): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x60000600) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000200), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)={0x5, 0x3, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "6e8b02d66efc80bb"}}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x8080) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) getsockopt$sock_int(r0, 0x1, 0xb, &(0x7f00000000c0), &(0x7f0000000180)=0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001a00010008000000fcdbdf2502000000", @ANYRES32=0x0, @ANYBLOB="00000000140003000700000002000000000000000000000014000100fe8000000000000000000000000000bb38b77f16e57e8ccca641e17da98faf2c00b0d5d9b645cfde8216b8de923ca27591f63efbc5384e5f51b02d55257925c3b7864427b488169c246e9a7e01157b2784387d783ae57c8e4195c06dac439361eed63f859036f53b60490ba97084d8a01ad2b3c5d4106182e674ef04487689e63e69090207674f30f49f998176d1ce392355ca0affb6dea4"], 0x44}}, 0x0) 0s ago: executing program 36 (id=4902): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x60000600) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000200), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)={0x5, 0x3, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "6e8b02d66efc80bb"}}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x8080) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) getsockopt$sock_int(r0, 0x1, 0xb, &(0x7f00000000c0), &(0x7f0000000180)=0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001a00010008000000fcdbdf2502000000", @ANYRES32=0x0, @ANYBLOB="00000000140003000700000002000000000000000000000014000100fe8000000000000000000000000000bb38b77f16e57e8ccca641e17da98faf2c00b0d5d9b645cfde8216b8de923ca27591f63efbc5384e5f51b02d55257925c3b7864427b488169c246e9a7e01157b2784387d783ae57c8e4195c06dac439361eed63f859036f53b60490ba97084d8a01ad2b3c5d4106182e674ef04487689e63e69090207674f30f49f998176d1ce392355ca0affb6dea4"], 0x44}}, 0x0) kernel console output (not intermixed with test programs): ge_slave_0: entered promiscuous mode [ 447.336343][T18760] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.371424][T18760] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.406369][T18760] bridge_slave_1: entered allmulticast mode [ 447.437507][T18760] bridge_slave_1: entered promiscuous mode [ 447.626618][T18760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.702533][T18760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.810570][T18876] __nla_validate_parse: 1 callbacks suppressed [ 447.810589][T18876] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3383'. [ 447.905992][T18879] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3384'. [ 447.978025][T18760] team0: Port device team_slave_0 added [ 448.029089][ T4929] Bluetooth: hci1: command tx timeout [ 448.037557][T18760] team0: Port device team_slave_1 added [ 448.241688][T18890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3386'. [ 448.251865][T18760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.265834][T18760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.301713][T18760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.384604][T18760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.402827][T18760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.446197][T18760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.511182][ T5828] net_ratelimit: 6 callbacks suppressed [ 448.511205][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.527701][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.623310][T18760] hsr_slave_0: entered promiscuous mode [ 448.631572][T18760] hsr_slave_1: entered promiscuous mode [ 448.640372][T18760] debugfs: 'hsr0' already exists in 'hsr' [ 448.652167][T18760] Cannot create hsr debugfs directory [ 448.671513][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.683647][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.087972][T18760] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.100827][T18760] netdevsim netdevsim4 eth3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 449.113722][T18901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3390'. [ 449.125360][T18760] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.141363][T18901] openvswitch: netlink: Flow actions attr not present in new flow. [ 449.403984][T18760] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.447750][T18760] netdevsim netdevsim4 eth2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 449.494081][T18760] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.560386][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.568869][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.635976][T18760] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.667165][T18760] netdevsim netdevsim4 eth1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 449.700596][T18760] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.748716][T18915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3394'. [ 449.837261][T18760] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.850269][T18760] netdevsim netdevsim4 eth0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 449.863253][T18760] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.109035][ T4929] Bluetooth: hci1: command tx timeout [ 450.694927][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.704666][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.904340][T18879] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 450.941399][T18760] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 451.055730][T18760] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 451.076899][T18760] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 451.124972][T18760] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 451.151260][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.176087][T18760] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 451.208055][T18760] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 451.235375][T18760] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 451.267652][T18760] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 451.301826][T18926] team0: Device gtp0 is of different type [ 451.618749][T18948] wg0: entered allmulticast mode [ 451.647616][T18948] wg0: left allmulticast mode [ 451.685981][T18951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3401'. [ 451.762108][T18951] netlink: 23 bytes leftover after parsing attributes in process `syz.2.3401'. [ 451.797332][T18760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.860818][T18760] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.955745][T10614] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.963373][T10614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.082111][T18965] syzkaller0: entered promiscuous mode [ 452.107324][T18965] syzkaller0: entered allmulticast mode [ 452.137782][T18966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3406'. [ 452.167720][T18967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3406'. [ 452.182515][ T7829] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.189937][ T7829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.198054][ T4929] Bluetooth: hci1: command tx timeout [ 452.931666][T18993] netlink: 'syz.3.3413': attribute type 27 has an invalid length. [ 453.027504][T18998] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3417'. [ 453.286513][T19006] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3420'. [ 453.542294][T19017] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3423'. [ 453.590233][T19017] net_ratelimit: 14 callbacks suppressed [ 453.590252][T19017] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 453.705625][T19025] syzkaller1: entered promiscuous mode [ 453.740384][T19025] syzkaller1: entered allmulticast mode [ 453.791069][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.800403][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.216847][T17211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.351978][T18760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 454.734839][T19055] bond2: (slave 26±ÿ†Ý'É|d<): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 454.819627][T19055] bond2: (slave 26±ÿ†Ý'É|d<): Enslaving as an active interface with an up link [ 454.844691][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.854401][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.861342][T19055] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 454.892754][T19066] Bluetooth: ISO socket layer initialized [ 455.166642][T19079] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3437'. [ 455.514153][T18760] veth0_vlan: entered promiscuous mode [ 455.537845][T18760] veth1_vlan: entered promiscuous mode [ 455.640851][T18760] veth0_macvtap: entered promiscuous mode [ 455.663784][T18760] veth1_macvtap: entered promiscuous mode [ 455.749790][T19092] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3442'. [ 455.795824][T19094] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.870619][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.879449][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.943220][T19094] bridge_slave_1 (unregistering): left allmulticast mode [ 455.971118][T19094] bridge_slave_1 (unregistering): left promiscuous mode [ 455.990901][T19094] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.117033][T19099] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3442'. [ 456.380596][T18760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 456.517511][T19113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3449'. [ 456.529406][T19113] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3449'. [ 456.539741][T19113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3449'. [ 456.557437][T19115] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 456.573304][T19115] xt_hashlimit: size too large, truncated to 1048576 [ 456.579868][T19114] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3447'. [ 456.596300][T19111] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 456.630421][T19111] bond1: (slave lo): Enslaving as an active interface with an up link [ 456.691895][T19111] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 456.747641][T18760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 456.918943][ T7814] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.949263][ T7814] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.080525][T10614] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.177867][T10614] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.293953][T10614] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.328603][T10614] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.392430][T19142] ªªªªª»: renamed from dummy0 (while UP) [ 457.489210][T10614] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.507775][T10614] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.541998][T19144] block nbd2: not configured, cannot reconfigure [ 457.857527][ T10] IPVS: starting estimator thread 0... [ 458.032089][T19156] IPVS: using max 34 ests per chain, 81600 per kthread [ 458.514634][T19173] bond1: (slave lo): Releasing backup interface [ 458.565901][T19173] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 458.612403][T19173] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 458.623299][T19185] __nla_validate_parse: 1 callbacks suppressed [ 458.623318][T19185] netlink: 27 bytes leftover after parsing attributes in process `syz.0.3466'. [ 458.735156][T19173] bond2: (slave lo): Enslaving as an active interface with an up link [ 458.750128][T19173] net_ratelimit: 6 callbacks suppressed [ 458.750147][T19173] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 459.007390][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.015925][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.059883][T19207] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3471'. [ 459.226324][T19209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3472'. [ 459.264811][T19209] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3472'. [ 459.277823][T19212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3472'. [ 459.413754][T19209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3472'. [ 459.430324][T10618] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.487194][T19209] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3472'. [ 459.488518][T19221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3475'. [ 459.503580][T10618] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.538352][T10618] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.551992][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 459.561263][T10617] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.603817][T19222] netlink: 'syz.4.3475': attribute type 10 has an invalid length. [ 459.764485][T19229] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3477'. [ 459.816100][T19229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3477'. [ 460.041074][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.049640][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.269564][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.571855][T19237] syzkaller0: entered promiscuous mode [ 460.594813][T19237] syzkaller0: entered allmulticast mode [ 460.619449][T19238] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 460.695538][T19252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 460.812499][T19252] netlink: 'syz.4.3481': attribute type 2 has an invalid length. [ 461.070226][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.078877][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.200810][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.209704][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.354357][ T5828] net_ratelimit: 3 callbacks suppressed [ 464.354535][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.372895][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.394305][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.403021][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.954790][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 466.349069][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.434355][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.443228][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.480429][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.489683][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.875780][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.392832][T17211] net_ratelimit: 3 callbacks suppressed [ 469.392851][T17211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.561092][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.569981][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.226559][T19285] __nla_validate_parse: 4 callbacks suppressed [ 470.226580][T19285] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3489'. [ 470.390381][T19285] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3489'. [ 470.449294][T19285] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3489'. [ 470.465340][T19298] openvswitch: netlink: IPv6 tunnel dst address is zero [ 470.501566][T19281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3489'. [ 470.590876][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.599630][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.822071][T19314] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 470.871496][T19313] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3496'. [ 470.919590][T19313] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3496'. [ 470.976407][T19313] vlan2: entered promiscuous mode [ 470.992861][T19313] bridge0: entered promiscuous mode [ 471.262301][T19324] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3500'. [ 471.533630][T19331] netlink: 'syz.4.3502': attribute type 1 has an invalid length. [ 471.619366][T19341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3502'. [ 471.639673][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.648047][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.652553][T19331] 8021q: adding VLAN 0 to HW filter on device bond1 [ 472.039587][T19357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.144696][T19357] netlink: 'syz.3.3506': attribute type 2 has an invalid length. [ 472.170874][T19357] netlink: 'syz.3.3506': attribute type 2 has an invalid length. [ 473.096424][T19363] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3510'. [ 473.156396][ T4929] Bluetooth: hci5: command 0x0406 tx timeout [ 473.225748][T19370] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3511'. [ 473.834873][T19400] netlink: 'syz.3.3520': attribute type 7 has an invalid length. [ 474.079128][T19408] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 474.305739][T19415] netlink: 'syz.3.3524': attribute type 9 has an invalid length. [ 474.340980][T19415] netlink: 'syz.3.3524': attribute type 4 has an invalid length. [ 474.462895][T19414] 8021q: VLANs not supported on ip_vti0 [ 474.752627][ T2085] net_ratelimit: 15 callbacks suppressed [ 474.752645][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.767302][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.855296][T19431] tipc: Enabling of bearer rejected, failed to enable media [ 475.062354][T19449] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 475.115767][T19455] smc: net device lo erased user defined pnetid SYZ0 [ 475.152150][T19455] smc: smcd device lo erased user defined pnetid SYZ0 [ 475.472009][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.790108][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.799684][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.831677][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.840354][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.869922][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.878226][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.960116][ T24] net_ratelimit: 3 callbacks suppressed [ 479.960130][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.974938][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.999509][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.008026][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.551103][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.040503][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.049380][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.070366][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.079039][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.109929][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.160818][ T24] net_ratelimit: 2 callbacks suppressed [ 485.160833][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.175243][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.190466][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.200068][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.073722][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.082904][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.232009][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.240504][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.628887][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.270188][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.359917][ T2085] net_ratelimit: 3 callbacks suppressed [ 490.359932][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.374217][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.675283][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.399538][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.408923][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.441797][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.450227][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.479313][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.488030][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.709126][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.552302][ T24] net_ratelimit: 2 callbacks suppressed [ 495.552316][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.566811][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.591067][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.599672][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.769803][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.629114][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.637678][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.679647][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.688682][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.322244][T19481] netlink: 'syz.1.3543': attribute type 1 has an invalid length. [ 499.434860][T19486] netlink: 'syz.3.3544': attribute type 21 has an invalid length. [ 499.480826][T19488] macvtap1: entered allmulticast mode [ 499.514178][T19494] __nla_validate_parse: 4 callbacks suppressed [ 499.514196][T19494] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3547'. [ 499.611763][T19492] netlink: 'syz.2.3545': attribute type 4 has an invalid length. [ 499.622377][T19481] macvtap2: entered allmulticast mode [ 499.697742][T19488] bond3: (slave bridge1): making interface the new active one [ 499.719123][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.760254][T19488] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 499.983280][T19512] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3550'. [ 500.750596][ T24] net_ratelimit: 2 callbacks suppressed [ 500.750614][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.764994][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.102019][T19557] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3561'. [ 501.137238][T19559] netlink: 'syz.2.3562': attribute type 1 has an invalid length. [ 501.154567][T19557] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3561'. [ 501.232534][T19557] geneve3: entered promiscuous mode [ 501.253484][T19557] geneve3: entered allmulticast mode [ 501.290326][T19563] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3564'. [ 501.329204][T10617] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 501.361493][T19563] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3564'. [ 501.390769][T19569] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3565'. [ 501.393903][T10617] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 501.425344][T19563] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3564'. [ 501.528652][T10617] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 501.569987][T10617] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 501.804872][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.813767][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.026011][T19591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3571'. [ 502.274647][T19606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3576'. [ 502.830166][T17211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.920999][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.929619][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.524073][T19667] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 503.531621][T19667] IPv6: NLM_F_CREATE should be set when creating new route [ 503.539271][T19667] IPv6: NLM_F_CREATE should be set when creating new route [ 503.569168][T19667] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 503.590016][T19668] 8021q: adding VLAN 0 to HW filter on device bond3 [ 503.765041][T19678] netlink: 'syz.2.3595': attribute type 33 has an invalid length. [ 503.799920][T19678] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 503.813956][T19678] bond1 (unregistering): Released all slaves [ 503.871247][ T4929] Bluetooth: hci3: command 0x0406 tx timeout [ 503.965893][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.974688][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.991408][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.869754][ T5718] net_ratelimit: 1 callbacks suppressed [ 505.869775][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.031109][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.039697][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.112698][T19644] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 506.297783][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.307074][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.397900][T19689] __nla_validate_parse: 4 callbacks suppressed [ 506.397922][T19689] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3600'. [ 506.515997][T19690] syzkaller0: entered promiscuous mode [ 506.529935][T19690] syzkaller0: entered allmulticast mode [ 506.553344][T19691] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 506.634945][T19697] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 506.924618][T19697] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 507.007352][T19707] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3601'. [ 507.020033][T19709] ip_tables: iptables: counters copy to user failed while replacing table [ 507.026314][T19689] netlink: 284 bytes leftover after parsing attributes in process `syz.1.3600'. [ 507.049727][T19709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.063478][T19700] ip6_vti0: entered promiscuous mode [ 507.080204][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.088742][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.105102][T19700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3601'. [ 507.281795][T19720] xt_hashlimit: size too large, truncated to 1048576 [ 507.377896][T19727] netlink: 'syz.2.3608': attribute type 10 has an invalid length. [ 507.418808][T19727] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 507.713639][T19741] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3610'. [ 507.803341][T19747] netlink: 'syz.2.3612': attribute type 10 has an invalid length. [ 507.858884][T19747] netlink: 'syz.2.3612': attribute type 2 has an invalid length. [ 507.906449][T19747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3612'. [ 508.024032][T19747] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 508.037159][T19747] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 508.082754][T19747] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 508.125582][T19747] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 508.307320][ T5718] hid-generic 0005:16C0:05DF.0002: unknown main item tag 0x0 [ 508.316410][ T5718] hid-generic 0005:16C0:05DF.0002: unknown main item tag 0x0 [ 508.357356][ T5718] hid-generic 0005:16C0:05DF.0002: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 508.442161][T19772] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3619'. [ 508.489353][T19773] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3619'. [ 508.630718][T19749] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 509.125975][T19803] pim6reg: entered allmulticast mode [ 509.186554][T19806] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿAZøZ´”àIƺ¥þ àø§% [ 509.791301][T19828] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3633'. [ 509.815148][T19829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 510.202471][T19841] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3638'. [ 510.433171][T19842] 8021q: adding VLAN 0 to HW filter on device bond1 [ 510.469965][T19842] 8021q: adding VLAN 0 to HW filter on device bond2 [ 510.490428][T19842] 8021q: adding VLAN 0 to HW filter on device bond3 [ 510.501400][T19842] bond3: entered allmulticast mode [ 510.506738][T19842] bridge1: entered allmulticast mode [ 510.516710][T19842] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 510.533838][T19842] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 510.551266][T19842] bridge1: entered promiscuous mode [ 510.911046][T19864] netlink: 'syz.0.3646': attribute type 28 has an invalid length. [ 510.921366][T19855] netlink: 'syz.1.3642': attribute type 1 has an invalid length. [ 510.936616][T19864] netlink: 'syz.0.3646': attribute type 3 has an invalid length. [ 510.968525][T19855] netlink: 'syz.1.3642': attribute type 2 has an invalid length. [ 511.232249][ T2085] net_ratelimit: 9 callbacks suppressed [ 511.232267][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.247400][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.653083][T19896] __nla_validate_parse: 2 callbacks suppressed [ 511.653101][T19896] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3656'. [ 511.797530][T19906] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 511.950997][T17211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.170973][T19921] Bluetooth: MGMT ver 1.23 [ 512.206411][T19921] Bluetooth: hci1: too big key_count value 32778 [ 512.270161][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.278715][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.051928][T19948] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3668'. [ 513.113442][T19948] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3668'. [ 513.209799][T19954] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 513.209996][T19953] xt_limit: Overflow, try lower: 536871034/127 [ 513.236982][T19956] --map-set only usable from mangle table [ 513.275044][T19958] netlink: 'syz.4.3674': attribute type 5 has an invalid length. [ 513.296276][T19955] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 513.315715][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.324235][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.393524][T19955] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 513.468950][T19955] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 513.548830][T19955] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 513.594407][T19974] sctp: [Deprecated]: syz.0.3680 (pid 19974) Use of int in max_burst socket option. [ 513.594407][T19974] Use struct sctp_assoc_value instead [ 513.666729][T19955] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 513.751911][T19974] netlink: 'syz.0.3680': attribute type 12 has an invalid length. [ 513.825248][T19974] netlink: 'syz.0.3680': attribute type 29 has an invalid length. [ 513.866283][T19974] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3680'. [ 513.929709][T19974] netlink: 'syz.0.3680': attribute type 2 has an invalid length. [ 513.970002][T19993] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3682'. [ 514.351169][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.827601][T10620] smbdirect: ib_dev[syz2] removed [ 514.999059][T20010] Cannot find set identified by id 0 to match [ 515.174961][T20013] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.942505][T20035] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3695'. [ 515.990123][T20040] xt_socket: unknown flags 0xe4 [ 516.035112][T20042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3696'. [ 516.067922][T20046] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3697'. [ 516.080606][T20042] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3696'. [ 516.269432][ T5828] net_ratelimit: 8 callbacks suppressed [ 516.269451][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.316790][T20058] syzkaller0: entered promiscuous mode [ 516.322871][T20058] syzkaller0: entered allmulticast mode [ 516.589707][T20064] netlink: 'syz.3.3700': attribute type 1 has an invalid length. [ 516.796136][T20065] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 516.925549][T20079] netlink: 'syz.2.3702': attribute type 1 has an invalid length. [ 516.934018][T20081] 8021q: VLANs not supported on syzkaller1 [ 517.209233][T20079] bond1: entered promiscuous mode [ 517.239377][T20079] bond1: entered allmulticast mode [ 517.262086][T20079] 8021q: adding VLAN 0 to HW filter on device bond1 [ 517.325916][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.670616][T20104] netlink: 'syz.3.3708': attribute type 1 has an invalid length. [ 518.028788][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.518541][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.549359][T20140] sock: sock_set_timeout: `syz.3.3715' (pid 20140) tries to set negative timeout [ 518.802798][T20149] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3716'. [ 519.352581][T20163] netlink: 'syz.1.3722': attribute type 21 has an invalid length. [ 519.375936][T20163] netlink: 'syz.1.3722': attribute type 1 has an invalid length. [ 519.400076][T20164] netlink: 'syz.1.3722': attribute type 3 has an invalid length. [ 519.418406][T20164] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3722'. [ 519.425288][T20168] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3723'. [ 519.483998][T20168] xt_CT: You must specify a L4 protocol and not use inversions on it [ 519.514232][T20169] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 519.551598][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.011293][T20194] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3734'. [ 520.017579][T20192] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3733'. [ 520.330701][T20214] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 520.419833][T20220] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3740'. [ 520.421210][T20217] netlink: 332 bytes leftover after parsing attributes in process `syz.3.3739'. [ 520.591928][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.696208][T20234] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 520.994251][T10617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.142348][T20247] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3748'. [ 521.206208][T20247] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3748'. [ 521.396532][T20254] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3750'. [ 521.609176][T20258] netlink: 'syz.4.3751': attribute type 83 has an invalid length. [ 522.109791][ T5828] net_ratelimit: 6 callbacks suppressed [ 522.109809][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.173764][T20296] netlink: 'syz.1.3760': attribute type 63 has an invalid length. [ 522.221836][T20296] netlink: 'syz.1.3760': attribute type 63 has an invalid length. [ 522.318065][T20303] netlink: 'syz.4.3761': attribute type 34 has an invalid length. [ 523.152151][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.480419][T20355] sctp: [Deprecated]: syz.4.3769 (pid 20355) Use of int in maxseg socket option. [ 523.480419][T20355] Use struct sctp_assoc_value instead [ 523.816756][T20358] bond5: entered promiscuous mode [ 523.851679][T20378] __nla_validate_parse: 6 callbacks suppressed [ 523.851700][T20378] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3774'. [ 523.879784][T20376] netlink: 'syz.1.3770': attribute type 2 has an invalid length. [ 523.915652][T20358] 8021q: adding VLAN 0 to HW filter on device bond5 [ 523.946392][T20376] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3770'. [ 524.109404][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.128650][T20358] 8021q: adding VLAN 0 to HW filter on device bond5 [ 524.164082][T20358] bond5: (slave sit1): The slave device specified does not support setting the MAC address [ 524.189325][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.230348][T20358] bond5: (slave sit1): Error -95 calling set_mac_address [ 524.270511][T20393] netlink: 'syz.2.3779': attribute type 83 has an invalid length. [ 524.348776][T20302] Bluetooth: hci2: command 0x041b tx timeout [ 524.962041][T20405] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 525.234856][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.354525][T20424] xt_policy: too many policy elements [ 525.502582][T20428] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3788'. [ 525.646373][T20437] netlink: 'syz.0.3788': attribute type 1 has an invalid length. [ 525.927537][T20394] infiniband syz2: set active [ 525.953305][T20394] infiniband syz2: added bond_slave_1 [ 526.076205][T20394] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 526.153581][T20394] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 526.172952][T20450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3793'. [ 526.193679][T20452] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3792'. [ 526.225401][T20394] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 526.227219][T20451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3793'. [ 526.276104][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.291085][T20448] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3792'. [ 526.492425][T20394] RDS/IB: syz2: added [ 526.527937][T20394] smc: adding ib device syz2 with port count 1 [ 526.569578][T20394] smc: ib device syz2 port 1 has no pnetid [ 527.149159][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.261036][T20484] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3801'. [ 527.309244][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.444889][T10614] pimreg: left allmulticast mode [ 528.350712][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.723434][T10614] bond0 (unregistering): Released all slaves [ 528.757716][T10614] bond1 (unregistering): Released all slaves [ 528.801974][T10614] bond2 (unregistering): Released all slaves [ 528.830280][T10614] bond3 (unregistering): Released all slaves [ 528.863718][T10614] bond4 (unregistering): Released all slaves [ 528.885712][T10614] bond5 (unregistering): Released all slaves [ 528.919227][T10614] bond6 (unregistering): Released all slaves [ 528.941829][T10614] bond7 (unregistering): (slave veth5): Releasing active interface [ 528.955895][T10614] bond7 (unregistering): Released all slaves [ 528.995749][T10614] bond8 (unregistering): Released all slaves [ 529.042886][T10614] bond9 (unregistering): Released all slaves [ 529.108055][T10614] bond10 (unregistering): Released all slaves [ 529.165494][T10614] bond11 (unregistering): (slave C): Releasing backup interface [ 529.189277][T10614] bond11 (unregistering): (slave C): last VLAN challenged slave left bond - VLAN blocking is removed [ 529.214375][T10614] bond11 (unregistering): Released all slaves [ 529.349233][T20511] vlan1: entered allmulticast mode [ 529.363754][T20511] veth0_vlan: entered allmulticast mode [ 529.389251][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.564606][T10614] tipc: Disabling bearer [ 529.602908][T10614] tipc: Left network mode [ 529.714209][T10614] IPVS: stopping master sync thread 6963 ... [ 529.737601][T10614] IPVS: stopping backup sync thread 6719 ... [ 529.993834][T20538] openvswitch: netlink: Message has 43 unknown bytes. [ 530.217182][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.438079][T20547] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3817'. [ 530.440040][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.589430][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.967148][T20553] tipc: Started in network mode [ 530.996496][T20553] tipc: Node identity ee4de86eb952, cluster identity 4711 [ 531.020915][T20553] tipc: Enabled bearer , priority 0 [ 531.166250][T20555] syzkaller0: entered promiscuous mode [ 531.198999][T20555] syzkaller0: entered allmulticast mode [ 531.293186][T20545] tipc: Resetting bearer [ 531.442935][T20567] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.3821'. [ 531.470825][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.479590][T20567] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.3821'. [ 531.493211][T20545] tipc: Disabling bearer [ 531.947961][T20579] macsec1: entered promiscuous mode [ 532.510317][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 532.510599][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.232487][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.559264][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.677868][T20625] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3832'. [ 533.864035][T20632] netlink: 'syz.4.3834': attribute type 1 has an invalid length. [ 533.877271][T20631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3835'. [ 533.895272][T20631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3835'. [ 533.920972][T20631] netlink: 'syz.0.3835': attribute type 3 has an invalid length. [ 534.003159][T20632] 8021q: adding VLAN 0 to HW filter on device bond4 [ 534.685977][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.921551][T20659] veth0_macvtap: entered allmulticast mode [ 534.939248][T20659] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 535.605139][T20667] netlink: 'syz.1.3846': attribute type 8 has an invalid length. [ 535.629067][T20667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3846'. [ 535.710306][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.741357][T20667] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.051017][T20680] netlink: 'syz.4.3849': attribute type 1 has an invalid length. [ 536.086965][T20679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3850'. [ 536.107950][T20681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3849'. [ 536.268635][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.771801][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.881432][T20702] openvswitch: netlink: IP tunnel dst address not specified [ 537.727682][T20714] xt_l2tp: invalid flags combination: 8 [ 537.791322][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.981039][T20720] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3862'. [ 538.253227][T10614] IPVS: stop unused estimator thread 0... [ 538.463774][T20731] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 538.494283][T20734] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3864'. [ 538.504871][T20735] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3865'. [ 538.569831][T20735] netlink: 'syz.2.3865': attribute type 1 has an invalid length. [ 538.572141][T20739] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 538.829648][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.905064][T20757] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3871'. [ 539.181698][T20766] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3873'. [ 539.236664][T20768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3874'. [ 539.310114][T17211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.954153][T20804] netlink: 420 bytes leftover after parsing attributes in process `syz.0.3882'. [ 540.099428][T20807] openvswitch: netlink: IP tunnel dst address not specified [ 540.155328][T20807] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 540.754256][T20839] __nla_validate_parse: 1 callbacks suppressed [ 540.754276][T20839] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3893'. [ 540.965908][T20837] bond6: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 541.002982][T20837] bond6 (unregistering): Released all slaves [ 541.760191][T20883] Cannot find add_set index 4 as target [ 541.784088][T20879] bridge0: port 1(ipvlan2) entered blocking state [ 541.816673][T20885] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3909'. [ 541.840926][T20879] bridge0: port 1(ipvlan2) entered disabled state [ 541.900900][T20879] ipvlan2: entered allmulticast mode [ 541.916589][T20879] bridge0: entered allmulticast mode [ 541.945529][T20879] ipvlan2: left allmulticast mode [ 541.967068][T20879] bridge0: left allmulticast mode [ 542.470615][T20910] GUP no longer grows the stack in syz.0.3915 (20910): 200000003000-20000000a000 (200000001000) [ 542.521295][T20910] CPU: 0 UID: 0 PID: 20910 Comm: syz.0.3915 Not tainted syzkaller #0 PREEMPT(full) [ 542.521325][T20910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 542.521337][T20910] Call Trace: [ 542.521345][T20910] [ 542.521353][T20910] dump_stack_lvl+0xe8/0x150 [ 542.521388][T20910] __get_user_pages+0x238c/0x2720 [ 542.521460][T20910] ? __gup_longterm_locked+0xc3b/0x15c0 [ 542.521506][T20910] __gup_longterm_locked+0xd52/0x15c0 [ 542.521528][T20910] ? lock_acquire+0x106/0x350 [ 542.521570][T20910] gup_fast_fallback+0x1d8c/0x20e0 [ 542.521618][T20910] ? __pfx_gup_fast_fallback+0x10/0x10 [ 542.521647][T20910] ? is_valid_gup_args+0x11f/0x200 [ 542.521674][T20910] ? get_user_pages_fast+0x4d/0xb0 [ 542.521692][T20910] __iov_iter_get_pages_alloc+0x378/0xa40 [ 542.521722][T20910] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 542.521759][T20910] iov_iter_get_pages2+0x5e/0xa0 [ 542.521784][T20910] __se_sys_vmsplice+0x7b5/0x1660 [ 542.521823][T20910] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 542.521846][T20910] ? __pfx_futex_wait+0x10/0x10 [ 542.521943][T20910] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.521963][T20910] do_syscall_64+0x174/0x580 [ 542.521986][T20910] ? trace_irq_disable+0x3b/0x140 [ 542.522006][T20910] ? clear_bhb_loop+0x70/0xc0 [ 542.522025][T20910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.522041][T20910] RIP: 0033:0x7fa24ff9e0d9 [ 542.522058][T20910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 542.522073][T20910] RSP: 002b:00007fa250e78028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 542.522093][T20910] RAX: ffffffffffffffda RBX: 00007fa250225fa0 RCX: 00007fa24ff9e0d9 [ 542.522106][T20910] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 542.522117][T20910] RBP: 00007fa250035024 R08: 0000000000000000 R09: 0000000000000000 [ 542.522127][T20910] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 542.522136][T20910] R13: 00007fa250226038 R14: 00007fa250225fa0 R15: 00007fff98709a08 [ 542.522168][T20910] [ 542.759749][T20910] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 543.137995][T20932] netlink: 'syz.0.3922': attribute type 1 has an invalid length. [ 543.336494][T20942] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3926'. [ 543.394309][T20947] netlink: 'syz.1.3925': attribute type 1 has an invalid length. [ 543.407744][T20936] bond5 (unregistering): Released all slaves [ 543.426107][T20947] netlink: 'syz.1.3925': attribute type 1 has an invalid length. [ 543.469813][T20952] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3924'. [ 543.619089][T20939] vlan2: entered allmulticast mode [ 543.745220][T20956] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3928'. [ 543.925455][T20965] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3930'. [ 544.385343][T20980] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3935'. [ 544.455367][T20980] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3935'. [ 544.766267][T20993] openvswitch: netlink: IPv4 frag type 32 is out of range max 2 [ 544.878740][T20999] netlink: 'syz.0.3940': attribute type 63 has an invalid length. [ 545.020918][T21007] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3942'. [ 545.412622][T21014] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 545.648624][T21017] can: request_module (can-proto-3) failed. [ 545.673288][T21024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3947'. [ 545.835453][T21024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 545.901450][T21031] hsr0: entered allmulticast mode [ 545.936430][T21031] hsr_slave_0: entered allmulticast mode [ 545.990309][T21031] hsr_slave_1: entered allmulticast mode [ 546.003275][T21034] IPv6: NLM_F_CREATE should be specified when creating new route [ 546.037910][T21034] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 546.045479][T21034] IPv6: NLM_F_CREATE should be set when creating new route [ 546.053569][T21034] IPv6: NLM_F_CREATE should be set when creating new route [ 546.649931][T21060] syzkaller1: entered promiscuous mode [ 546.691824][T21060] syzkaller1: entered allmulticast mode [ 546.717895][T21061] xt_nfacct: accounting object `' does not exist [ 546.775382][T21064] __nla_validate_parse: 1 callbacks suppressed [ 546.775401][T21064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3959'. [ 546.814095][T21066] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3957'. [ 546.839830][T21064] netlink: 'syz.2.3959': attribute type 6 has an invalid length. [ 547.298933][T10613] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.374501][T10613] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.449294][T10613] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.481820][T10613] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.514489][T21077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3961'. [ 547.618229][T21084] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3964'. [ 548.167805][T21101] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3967'. [ 548.385822][T21103] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3969'. [ 548.450830][T21103] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3969'. [ 548.496092][T21103] netlink: 'syz.1.3969': attribute type 1 has an invalid length. [ 548.941373][T21124] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3975'. [ 549.169734][T21135] netlink: 'syz.3.3976': attribute type 4 has an invalid length. [ 549.222952][T21136] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3976'. [ 549.266082][T21135] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3976'. [ 549.405339][T21135] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 549.695440][T21158] netlink: 'syz.4.3985': attribute type 11 has an invalid length. [ 549.949462][ T5623] Bluetooth: hci4: command 0x0406 tx timeout [ 549.971243][T21167] xt_TCPMSS: Only works on TCP SYN packets [ 549.995511][T21166] xt_TCPMSS: Only works on TCP SYN packets [ 550.384297][T21178] FAULT_INJECTION: forcing a failure. [ 550.384297][T21178] name failslab, interval 1, probability 0, space 0, times 0 [ 550.475519][T21178] CPU: 0 UID: 0 PID: 21178 Comm: syz.4.3989 Not tainted syzkaller #0 PREEMPT(full) [ 550.475545][T21178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 550.475556][T21178] Call Trace: [ 550.475562][T21178] [ 550.475570][T21178] dump_stack_lvl+0xe8/0x150 [ 550.475599][T21178] should_fail_ex+0x40c/0x560 [ 550.475622][T21178] should_failslab+0xa8/0x100 [ 550.475648][T21178] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 550.475668][T21178] ? local_lock_release+0x9c/0x160 [ 550.475694][T21178] ? __alloc_skb+0x1d7/0x7a0 [ 550.475714][T21178] ? __alloc_skb+0x1d7/0x7a0 [ 550.475742][T21178] __alloc_skb+0x1d7/0x7a0 [ 550.475768][T21178] netlink_sendmsg+0x5d4/0xb40 [ 550.475796][T21178] ? __pfx_netlink_sendmsg+0x10/0x10 [ 550.475818][T21178] ? aa_sock_msg_perm+0xf1/0x1b0 [ 550.475849][T21178] ? __pfx_netlink_sendmsg+0x10/0x10 [ 550.475865][T21178] sock_sendmsg_nosec+0x13a/0x180 [ 550.475889][T21178] ____sys_sendmsg+0x54e/0x850 [ 550.475911][T21178] ? __pfx_____sys_sendmsg+0x10/0x10 [ 550.475935][T21178] ? import_iovec+0x73/0xa0 [ 550.475959][T21178] ___sys_sendmsg+0x2a5/0x360 [ 550.475975][T21178] ? __lock_acquire+0x683/0x2cf0 [ 550.476000][T21178] ? __pfx____sys_sendmsg+0x10/0x10 [ 550.476049][T21178] ? __fget_files+0x2a/0x420 [ 550.476069][T21178] ? __fget_files+0x3a2/0x420 [ 550.476098][T21178] __x64_sys_sendmsg+0x1b1/0x290 [ 550.476118][T21178] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 550.476151][T21178] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.476170][T21178] do_syscall_64+0x174/0x580 [ 550.476189][T21178] ? trace_irq_disable+0x3b/0x140 [ 550.476209][T21178] ? clear_bhb_loop+0x70/0xc0 [ 550.476230][T21178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.476247][T21178] RIP: 0033:0x7f5e4899e0d9 [ 550.476263][T21178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 550.476277][T21178] RSP: 002b:00007f5e498bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 550.476295][T21178] RAX: ffffffffffffffda RBX: 00007f5e48c25fa0 RCX: 00007f5e4899e0d9 [ 550.476307][T21178] RDX: 0000000000008000 RSI: 0000200000000380 RDI: 0000000000000003 [ 550.476318][T21178] RBP: 00007f5e498bd090 R08: 0000000000000000 R09: 0000000000000000 [ 550.476329][T21178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 550.476338][T21178] R13: 00007f5e48c26038 R14: 00007f5e48c25fa0 R15: 00007ffdc1cddc38 [ 550.476366][T21178] [ 550.916949][T21183] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 551.030022][T21183] netlink: 'syz.1.3990': attribute type 5 has an invalid length. [ 551.955877][T21213] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 552.010979][T21214] __nla_validate_parse: 5 callbacks suppressed [ 552.010997][T21214] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4000'. [ 552.161782][T21214] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4000'. [ 552.250995][T21214] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4000'. [ 552.267017][T21222] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.4001'. [ 552.369520][T21225] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 552.646125][T21234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4005'. [ 552.740801][T21234] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4005'. [ 552.834078][T21234] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4005'. [ 553.283416][T21256] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 553.322281][T21256] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4010'. [ 553.405439][T21266] netlink: 'syz.0.4013': attribute type 12 has an invalid length. [ 553.584498][T21269] FAULT_INJECTION: forcing a failure. [ 553.584498][T21269] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 553.629223][T21269] CPU: 1 UID: 0 PID: 21269 Comm: syz.4.4014 Not tainted syzkaller #0 PREEMPT(full) [ 553.629246][T21269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 553.629256][T21269] Call Trace: [ 553.629262][T21269] [ 553.629268][T21269] dump_stack_lvl+0xe8/0x150 [ 553.629296][T21269] should_fail_ex+0x40c/0x560 [ 553.629318][T21269] _copy_from_iter+0x1d3/0x1660 [ 553.629341][T21269] ? kmem_cache_alloc_node_noprof+0x1c1/0x610 [ 553.629362][T21269] ? rcu_is_watching+0x15/0xb0 [ 553.629386][T21269] ? trace_kmem_cache_alloc+0x29/0xe0 [ 553.629406][T21269] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 553.629424][T21269] ? __pfx__copy_from_iter+0x10/0x10 [ 553.629443][T21269] ? __alloc_skb+0x276/0x7a0 [ 553.629464][T21269] ? __alloc_skb+0x276/0x7a0 [ 553.629490][T21269] ? netlink_sendmsg+0x650/0xb40 [ 553.629508][T21269] ? skb_put+0x112/0x210 [ 553.629561][T21269] netlink_sendmsg+0x6c0/0xb40 [ 553.629588][T21269] ? __pfx_netlink_sendmsg+0x10/0x10 [ 553.629609][T21269] ? aa_sock_msg_perm+0xf1/0x1b0 [ 553.629637][T21269] ? __pfx_netlink_sendmsg+0x10/0x10 [ 553.629653][T21269] sock_sendmsg_nosec+0x13a/0x180 [ 553.629677][T21269] ____sys_sendmsg+0x54e/0x850 [ 553.629706][T21269] ? __pfx_____sys_sendmsg+0x10/0x10 [ 553.629731][T21269] ? import_iovec+0x73/0xa0 [ 553.629754][T21269] ___sys_sendmsg+0x2a5/0x360 [ 553.629770][T21269] ? __lock_acquire+0x683/0x2cf0 [ 553.629795][T21269] ? __pfx____sys_sendmsg+0x10/0x10 [ 553.629844][T21269] ? __fget_files+0x2a/0x420 [ 553.629862][T21269] ? __fget_files+0x3a2/0x420 [ 553.629888][T21269] __x64_sys_sendmsg+0x1b1/0x290 [ 553.629907][T21269] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 553.629940][T21269] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.629958][T21269] do_syscall_64+0x174/0x580 [ 553.629979][T21269] ? trace_irq_disable+0x3b/0x140 [ 553.629998][T21269] ? clear_bhb_loop+0x70/0xc0 [ 553.630018][T21269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.630034][T21269] RIP: 0033:0x7f5e4899e0d9 [ 553.630051][T21269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 553.630065][T21269] RSP: 002b:00007f5e498bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 553.630083][T21269] RAX: ffffffffffffffda RBX: 00007f5e48c25fa0 RCX: 00007f5e4899e0d9 [ 553.630095][T21269] RDX: 0000000000008000 RSI: 0000200000000380 RDI: 0000000000000003 [ 553.630106][T21269] RBP: 00007f5e498bd090 R08: 0000000000000000 R09: 0000000000000000 [ 553.630116][T21269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 553.630127][T21269] R13: 00007f5e48c26038 R14: 00007f5e48c25fa0 R15: 00007ffdc1cddc38 [ 553.630155][T21269] [ 553.960200][T21275] netlink: 232 bytes leftover after parsing attributes in process `syz.3.4016'. [ 554.097064][T21283] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4018'. [ 554.197374][T21283] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 554.337514][T21284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 554.603476][T21297] netlink: 'syz.1.4022': attribute type 1 has an invalid length. [ 554.659963][T21300] netlink: 'syz.1.4022': attribute type 1 has an invalid length. [ 554.988171][T21314] xt_hashlimit: size too large, truncated to 1048576 [ 555.006982][T21314] xt_hashlimit: max too large, truncated to 1048576 [ 555.021609][T21314] xt_hashlimit: invalid rate [ 555.181622][T21326] IPVS: Unknown mcast interface: dvmrp1 [ 555.257454][T21334] tipc: Started in network mode [ 555.301069][T21334] tipc: Node identity ac14140f, cluster identity 4711 [ 555.332745][T21334] tipc: New replicast peer: 255.255.255.255 [ 555.423299][T21334] tipc: Enabled bearer , priority 1 [ 555.460019][T21338] netlink: 'syz.3.4033': attribute type 2 has an invalid length. [ 555.873002][T21363] netlink: 'syz.1.4039': attribute type 12 has an invalid length. [ 556.334777][T21386] tipc: Enabling of bearer rejected, media not registered [ 556.376819][T21386] netlink: 'syz.0.4047': attribute type 8 has an invalid length. [ 556.808719][T17211] tipc: Node number set to 2886997007 [ 557.094486][T21420] Bluetooth: MGMT ver 1.23 [ 561.804059][T21441] FAULT_INJECTION: forcing a failure. [ 561.804059][T21441] name failslab, interval 1, probability 0, space 0, times 0 [ 561.828550][T21441] CPU: 1 UID: 0 PID: 21441 Comm: syz.2.4060 Not tainted syzkaller #0 PREEMPT(full) [ 561.828575][T21441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 561.828585][T21441] Call Trace: [ 561.828591][T21441] [ 561.828598][T21441] dump_stack_lvl+0xe8/0x150 [ 561.828635][T21441] should_fail_ex+0x40c/0x560 [ 561.828656][T21441] should_failslab+0xa8/0x100 [ 561.828679][T21441] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 561.828696][T21441] ? local_lock_release+0x9c/0x160 [ 561.828718][T21441] ? __alloc_skb+0x1d7/0x7a0 [ 561.828734][T21441] ? __alloc_skb+0x1d7/0x7a0 [ 561.828757][T21441] __alloc_skb+0x1d7/0x7a0 [ 561.828780][T21441] netlink_ack+0x136/0xb30 [ 561.828795][T21441] ? __pfx_genl_rcv_msg+0x10/0x10 [ 561.828814][T21441] ? __pfx_nl80211_post_doit+0x10/0x10 [ 561.828899][T21441] ? __pfx_ref_tracker_free+0x10/0x10 [ 561.828987][T21441] netlink_rcv_skb+0x2a4/0x4a0 [ 561.829003][T21441] ? __pfx_genl_rcv_msg+0x10/0x10 [ 561.829022][T21441] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 561.829051][T21441] ? down_read+0x2be/0x330 [ 561.829074][T21441] genl_rcv+0x28/0x40 [ 561.829091][T21441] netlink_unicast+0x7bb/0x940 [ 561.829123][T21441] netlink_sendmsg+0x813/0xb40 [ 561.829149][T21441] ? __pfx_netlink_sendmsg+0x10/0x10 [ 561.829170][T21441] ? aa_sock_msg_perm+0xf1/0x1b0 [ 561.829197][T21441] ? __pfx_netlink_sendmsg+0x10/0x10 [ 561.829213][T21441] sock_sendmsg_nosec+0x13a/0x180 [ 561.829237][T21441] ____sys_sendmsg+0x54e/0x850 [ 561.829259][T21441] ? __pfx_____sys_sendmsg+0x10/0x10 [ 561.829284][T21441] ? import_iovec+0x73/0xa0 [ 561.829309][T21441] ___sys_sendmsg+0x2a5/0x360 [ 561.829325][T21441] ? __lock_acquire+0x683/0x2cf0 [ 561.829350][T21441] ? __pfx____sys_sendmsg+0x10/0x10 [ 561.829409][T21441] ? __fget_files+0x2a/0x420 [ 561.829430][T21441] ? __fget_files+0x3a2/0x420 [ 561.829457][T21441] __x64_sys_sendmsg+0x1b1/0x290 [ 561.829477][T21441] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 561.829511][T21441] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.829530][T21441] do_syscall_64+0x174/0x580 [ 561.829548][T21441] ? trace_irq_disable+0x3b/0x140 [ 561.829568][T21441] ? clear_bhb_loop+0x70/0xc0 [ 561.829587][T21441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.829603][T21441] RIP: 0033:0x7f2fdcd9e0d9 [ 561.829628][T21441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 561.829642][T21441] RSP: 002b:00007f2fddbfe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 561.829660][T21441] RAX: ffffffffffffffda RBX: 00007f2fdd025fa0 RCX: 00007f2fdcd9e0d9 [ 561.829672][T21441] RDX: 0000000000008000 RSI: 0000200000000380 RDI: 0000000000000003 [ 561.829683][T21441] RBP: 00007f2fddbfe090 R08: 0000000000000000 R09: 0000000000000000 [ 561.829693][T21441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 561.829702][T21441] R13: 00007f2fdd026038 R14: 00007f2fdd025fa0 R15: 00007fff4c809618 [ 561.829730][T21441] [ 561.852414][T21445] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 562.338751][T21444] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 562.400701][T21457] __nla_validate_parse: 9 callbacks suppressed [ 562.400721][T21457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4062'. [ 562.456257][T21460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4062'. [ 562.482190][T21457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4062'. [ 562.516372][T21457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4062'. [ 562.578724][T21457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4062'. [ 562.724897][T21457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4062'. [ 563.125055][T21485] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4071'. [ 563.167716][T21485] netlink: 344 bytes leftover after parsing attributes in process `syz.0.4071'. [ 563.526219][T21502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4078'. [ 563.545565][T21510] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 563.804716][T21524] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4084'. [ 563.910606][T21524] bridge3: entered promiscuous mode [ 563.916591][T21524] bridge3: entered allmulticast mode [ 564.354227][T21552] gretap0: entered promiscuous mode [ 564.393286][T21552] 0ªî{X¹¦: renamed from gretap0 [ 564.432935][T21552] 0ªî{X¹¦: left promiscuous mode [ 564.463264][T21552] 0ªî{X¹¦: entered allmulticast mode [ 564.497350][T21552] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 565.150926][T21581] netlink: 'syz.2.4101': attribute type 11 has an invalid length. [ 565.946419][T21611] sctp: [Deprecated]: syz.3.4112 (pid 21611) Use of struct sctp_assoc_value in delayed_ack socket option. [ 565.946419][T21611] Use struct sctp_sack_info instead [ 566.097605][T21624] netlink: 'syz.4.4117': attribute type 25 has an invalid length. [ 566.536679][T21644] netlink: 'syz.2.4124': attribute type 21 has an invalid length. [ 566.558392][T21644] IPv6: NLM_F_CREATE should be specified when creating new route [ 566.595195][T21644] netlink: 'syz.2.4124': attribute type 1 has an invalid length. [ 567.083860][T21680] sctp: [Deprecated]: syz.2.4134 (pid 21680) Use of int in max_burst socket option deprecated. [ 567.083860][T21680] Use struct sctp_assoc_value instead [ 568.107134][T21719] __nla_validate_parse: 15 callbacks suppressed [ 568.107155][T21719] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4143'. [ 568.617190][T21715] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 568.683600][T21759] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4151'. [ 568.712806][T21758] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4154'. [ 569.166585][T21770] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 569.182792][T21772] netlink: 71 bytes leftover after parsing attributes in process `syz.1.4159'. [ 569.224500][T21770] netlink: 'syz.0.4158': attribute type 24 has an invalid length. [ 569.290637][T21778] netlink: 'syz.0.4158': attribute type 16 has an invalid length. [ 569.354972][T21778] netlink: 'syz.0.4158': attribute type 17 has an invalid length. [ 569.401447][T21772] netlink: 'syz.1.4159': attribute type 13 has an invalid length. [ 569.428920][T21772] veth1_macvtap: left promiscuous mode [ 569.448144][T21772] macsec0: entered allmulticast mode [ 569.480936][T21787] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4161'. [ 569.624480][T21790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 569.751099][T21796] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4162'. [ 569.793782][T21778] ip6_vti0: left promiscuous mode [ 569.837895][T21778] veth0_to_bond: left allmulticast mode [ 569.907992][T21778] veth0_macvtap: left allmulticast mode [ 569.931174][T21778] bond1: left allmulticast mode [ 569.940971][T21778] A link change request failed with some changes committed already. Interface dvmrp0 may have been left with an inconsistent configuration, please check. [ 569.970812][T21779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4160'. [ 570.192987][T21810] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4166'. [ 570.239435][T21810] bridge: RTM_NEWNEIGH with invalid ether address [ 570.379928][T21821] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4168'. [ 570.696806][T21839] syzkaller0: entered promiscuous mode [ 570.716182][T21839] syzkaller0: entered allmulticast mode [ 570.747945][T21845] netlink: 'syz.1.4174': attribute type 33 has an invalid length. [ 570.814892][T21847] netlink: 'syz.1.4174': attribute type 2 has an invalid length. [ 571.339497][T21861] netlink: 'syz.4.4180': attribute type 3 has an invalid length. [ 571.705867][T21868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4183'. [ 572.026610][ T29] audit: type=1107 audit(1786608027.843:10): pid=21885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='³KÓË.ý:–ÿÙªim|8yI!!ØaUnÇ­I' [ 572.437635][T21908] netlink: 'syz.4.4194': attribute type 21 has an invalid length. [ 572.685122][T21908] bond6: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 572.750839][T21908] bond6 (unregistering): Released all slaves [ 573.817761][T21954] __nla_validate_parse: 3 callbacks suppressed [ 573.817777][T21954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4204'. [ 573.904671][T21958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4204'. [ 574.044825][T21967] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 574.172221][T21975] syzkaller1: entered promiscuous mode [ 574.209528][T21975] syzkaller1: entered allmulticast mode [ 574.299821][T21975] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 574.326763][T21986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4214'. [ 574.383378][T21988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4214'. [ 574.472059][T21993] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 574.496582][T21993] xt_hashlimit: size too large, truncated to 1048576 [ 574.711543][T21998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 574.874019][T22005] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4219'. [ 574.904146][T22005] bridge: RTM_NEWNEIGH with invalid ether address [ 575.040437][T22015] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 575.069271][T22016] tipc: Enabling of bearer rejected, failed to enable media [ 575.333722][T22029] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4226'. [ 575.410109][T22031] netlink: 'syz.2.4227': attribute type 1 has an invalid length. [ 575.440303][T22029] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4226'. [ 575.455182][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806848b800: rx timeout, send abort [ 575.505633][T22034] netlink: zone id is out of range [ 575.522887][T22034] netlink: zone id is out of range [ 575.528813][T22034] netlink: zone id is out of range [ 575.552531][T22034] netlink: zone id is out of range [ 575.578441][T22034] netlink: zone id is out of range [ 575.588471][T22034] netlink: zone id is out of range [ 575.602901][T22034] netlink: zone id is out of range [ 575.621895][T22034] netlink: zone id is out of range [ 575.638078][T22034] netlink: zone id is out of range [ 575.668503][T22045] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4229'. [ 575.670930][T22034] netlink: zone id is out of range [ 575.778967][T22035] bridge6: entered promiscuous mode [ 575.826131][T22035] bond3: (slave bridge6): making interface the new active one [ 575.876832][T22035] bond3: (slave bridge6): Enslaving as an active interface with an up link [ 575.916669][T22053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4233'. [ 575.933057][T22043] bridge7: entered promiscuous mode [ 575.944864][T22043] bond3: (slave bridge7): Enslaving as a backup interface with an up link [ 575.957165][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806848b400: rx timeout, send abort [ 575.966147][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806848b800: abort rx timeout. Force session deactivation [ 575.984622][T22054] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4233'. [ 576.341873][T22054] mac80211_hwsim hwsim34 wlan0: entered allmulticast mode [ 576.465626][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806848b400: abort rx timeout. Force session deactivation [ 576.546886][T22063] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 577.392612][ T7829] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 577.451490][ T7829] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.460144][T22085] netlink: 'syz.3.4243': attribute type 10 has an invalid length. [ 577.607455][T22084] dvmrp0: entered allmulticast mode [ 577.812268][T22085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 577.896176][T22085] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 578.574828][T22099] netlink: 'syz.2.4245': attribute type 5 has an invalid length. [ 578.636209][T22099] netlink: 'syz.2.4245': attribute type 9 has an invalid length. [ 579.100592][T22110] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 579.661692][T22119] __nla_validate_parse: 5 callbacks suppressed [ 579.661712][T22119] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4253'. [ 579.831487][T22122] netlink: 288 bytes leftover after parsing attributes in process `syz.2.4254'. [ 580.135495][T22133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4256'. [ 580.840101][T22141] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4256'. [ 581.385039][T22159] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 583.144147][T22189] net_ratelimit: 25 callbacks suppressed [ 583.144167][T22189] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 583.714522][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 583.910782][T22204] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 583.977785][T22202] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4279'. [ 584.390634][T22216] netlink: 516 bytes leftover after parsing attributes in process `syz.1.4282'. [ 584.463384][T22217] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4283'. [ 585.092994][T22231] x_tables: duplicate underflow at hook 1 [ 585.120469][T22230] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4284'. [ 585.417876][T22240] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4288'. [ 585.890667][T22249] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 587.375573][T22282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4301'. [ 587.549678][ T5623] Bluetooth: hci1: command 0x0405 tx timeout [ 587.597676][T22262] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4297'. [ 588.079752][T22288] netlink: 'syz.3.4304': attribute type 64 has an invalid length. [ 588.177065][T22294] netlink: 'syz.3.4304': attribute type 64 has an invalid length. [ 588.292067][T22296] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 588.450701][T22299] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 588.592033][T22305] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4310'. [ 589.006759][T22319] netlink: 'syz.3.4310': attribute type 1 has an invalid length. [ 589.806989][T22319] 8021q: adding VLAN 0 to HW filter on device bond3 [ 590.110427][T22336] 8021q: VLANs not supported on ip6_vti0 [ 590.914751][T22349] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4319'. [ 591.019090][T22349] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4319'. [ 591.030670][T22352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4320'. [ 591.087814][T22356] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 591.111215][T22352] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4320'. [ 591.773242][T22375] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4327'. [ 592.392700][T22391] netlink: 'syz.0.4331': attribute type 33 has an invalid length. [ 592.587356][T22389] SET target dimension over the limit! [ 593.256606][T22416] syz2: rxe_newlink: already configured on bond_slave_1 [ 593.299536][ T29] audit: type=1800 audit(1786608049.103:11): pid=22411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4337" name="memory.events" dev="tmpfs" ino=1709 res=0 errno=0 [ 593.425751][T22413] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 593.928649][T22422] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 593.937490][T22433] netlink: 'syz.4.4339': attribute type 34 has an invalid length. [ 593.992256][T22433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4339'. [ 594.670843][T22436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4341'. [ 594.996035][T22459] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4346'. [ 595.059942][T22460] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4345'. [ 595.072142][T22461] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4347'. [ 595.221368][T22458] netlink: 'syz.2.4344': attribute type 1 has an invalid length. [ 596.211413][T22476] netlink: 'syz.1.4349': attribute type 1 has an invalid length. [ 596.548445][T22484] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 596.724278][T22488] netlink: 'syz.3.4353': attribute type 1 has an invalid length. [ 596.736190][T22479] bond7: (slave veth5): Enslaving as an active interface with a down link [ 596.810989][T22482] 8021q: adding VLAN 0 to HW filter on device bond7 [ 596.836027][T22492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4352'. [ 597.233214][T22475] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 598.112800][T22502] macvlan0: entered promiscuous mode [ 598.390504][T22510] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4358'. [ 598.829253][T22519] block nbd0: Unsupported socket: should be TCP or UNIX. [ 598.925156][T22520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4359'. [ 599.680037][T22527] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4364'. [ 599.769331][T22527] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 599.820595][T22530] syz2: rxe_newlink: already configured on bond_slave_1 [ 599.908105][T22529] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4364'. [ 599.988181][T22529] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 600.445332][T22539] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4366'. [ 600.451156][T22537] netlink: 'syz.1.4367': attribute type 30 has an invalid length. [ 601.429743][T22551] syz_tun: entered promiscuous mode [ 601.527145][T22551] team0: Port device syz_tun added [ 601.799771][T22563] netlink: 236 bytes leftover after parsing attributes in process `syz.4.4371'. [ 601.857752][T22563] netlink: 236 bytes leftover after parsing attributes in process `syz.4.4371'. [ 602.446868][T22576] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 602.583396][T22581] syz2: rxe_newlink: already configured on bond_slave_1 [ 602.625567][T22571] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 602.780797][T22585] openvswitch: netlink: Missing valid actions attribute. [ 602.842022][T22585] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 603.387902][T22597] openvswitch: netlink: IP tunnel dst address not specified [ 603.428468][T22597] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 604.117702][T22611] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4385'. [ 604.509686][T22607] 8021q: VLANs not supported on sit0 [ 604.610190][T22615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4384'. [ 605.596338][T22630] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 607.100325][T22663] syzkaller1: entered promiscuous mode [ 607.139632][T22663] syzkaller1: entered allmulticast mode [ 607.277226][T22673] syz2: rxe_newlink: already configured on bond_slave_1 [ 608.124150][T22686] netlink: 'syz.4.4410': attribute type 16 has an invalid length. [ 608.196576][T22686] netlink: 'syz.4.4410': attribute type 3 has an invalid length. [ 608.238315][T22686] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4410'. [ 608.367610][T22691] netlink: 5428 bytes leftover after parsing attributes in process `syz.3.4412'. [ 608.434292][T22691] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 608.491909][T22693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4412'. [ 609.175683][T22709] syzkaller0: entered promiscuous mode [ 609.195786][T22709] syzkaller0: entered allmulticast mode [ 610.091531][T10614] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 611.114448][T22735] syz2: rxe_newlink: already configured on bond_slave_1 [ 612.743557][T22717] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 612.785586][T22722] kthread_run failed with err -4 [ 613.345096][T22749] veth1_to_bond: entered allmulticast mode [ 613.426492][T22754] veth1_to_bond: entered promiscuous mode [ 613.529122][T22749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4426'. [ 613.541393][T22756] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4427'. [ 613.844752][T22749] veth1_to_bond (unregistering): left allmulticast mode [ 613.898943][T22749] veth1_to_bond (unregistering): left promiscuous mode [ 614.027307][T22749] bond0: (slave bond_slave_1): Releasing backup interface [ 614.234732][T10614] smc: removing ib device syz2 [ 614.532822][T10614] smbdirect: ib_dev[syz2] removed [ 614.877059][T22770] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4431'. [ 615.105103][T22770] erspan0: entered promiscuous mode [ 615.836652][T22781] netlink: 'syz.1.4435': attribute type 1 has an invalid length. [ 616.566314][T22781] 8021q: adding VLAN 0 to HW filter on device bond9 [ 617.203433][T22797] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4440'. [ 617.265670][T22792] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 617.276499][T22797] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4440'. [ 617.355638][T22792] bond5 (unregistering): Released all slaves [ 618.023516][T22810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4442'. [ 618.139566][T22811] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4442'. [ 618.226678][T22810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4442'. [ 618.260735][ T24] IPVS: starting estimator thread 0... [ 618.310583][T22810] netlink: 'syz.1.4442': attribute type 10 has an invalid length. [ 618.429098][T22816] IPVS: using max 34 ests per chain, 81600 per kthread [ 619.618267][T22845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4450'. [ 619.742757][T22847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4451'. [ 619.752686][T22845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4450'. [ 619.874475][T22847] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4451'. [ 620.016303][T22847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4451'. [ 620.060129][T22849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4452'. [ 620.098422][T22847] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4451'. [ 620.384002][T22849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4452'. [ 620.744687][T22856] netlink: 'syz.1.4453': attribute type 5 has an invalid length. [ 620.767981][T22856] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4453'. [ 621.012565][T22849] hsr_slave_1 (unregistering): left promiscuous mode [ 621.129995][T22857] netlink: 'syz.2.4452': attribute type 12 has an invalid length. [ 621.212961][T22857] netlink: 'syz.2.4452': attribute type 29 has an invalid length. [ 621.251906][T22857] netlink: 'syz.2.4452': attribute type 2 has an invalid length. [ 621.342409][T22857] netlink: 260 bytes leftover after parsing attributes in process `syz.2.4452'. [ 623.903700][T22906] geneve0: entered allmulticast mode [ 625.384712][T22928] netlink: 'syz.0.4467': attribute type 1 has an invalid length. [ 626.820199][T22949] __nla_validate_parse: 1 callbacks suppressed [ 626.820417][T22949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4473'. [ 627.061776][T22966] netlink: 'syz.1.4473': attribute type 83 has an invalid length. [ 628.361820][T22988] xt_TPROXY: Can be used only with -p tcp or -p udp [ 629.081927][T23004] netlink: 'syz.1.4486': attribute type 12 has an invalid length. [ 629.515702][T23013] sctp: [Deprecated]: syz.3.4488 (pid 23013) Use of int in maxseg socket option. [ 629.515702][T23013] Use struct sctp_assoc_value instead [ 629.595639][T23016] sctp: [Deprecated]: syz.2.4489 (pid 23016) Use of int in max_burst socket option deprecated. [ 629.595639][T23016] Use struct sctp_assoc_value instead [ 629.645052][T23018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4490'. [ 630.318792][T23030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4492'. [ 630.376084][T23030] netlink: 'syz.1.4492': attribute type 1 has an invalid length. [ 630.470595][T23032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4492'. [ 630.533988][T23034] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4494'. [ 630.592742][T23031] netlink: 'syz.0.4493': attribute type 1 has an invalid length. [ 630.621180][T23036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4492'. [ 630.813598][T23036] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4492'. [ 631.396119][T23030] 8021q: adding VLAN 0 to HW filter on device bond10 [ 631.850250][T23052] syzkaller1: entered promiscuous mode [ 631.869477][T23052] syzkaller1: entered allmulticast mode [ 632.804270][T23056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4498'. [ 633.043021][T23075] x_tables: duplicate underflow at hook 3 [ 633.051634][T23077] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4501'. [ 633.170932][T23078] netlink: 277 bytes leftover after parsing attributes in process `syz.0.4500'. [ 633.401165][T23006] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 633.564071][T23054] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4487'. [ 634.586222][T23090] 8021q: adding VLAN 0 to HW filter on device bond5 [ 634.652351][T23090] bond0: (slave bond5): Enslaving as an active interface with a down link [ 634.696304][T23094] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4505'. [ 635.840767][T23117] bond0: (slave bond_slave_1): Releasing backup interface [ 635.984475][T23122] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4511'. [ 636.226471][T23122] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4511'. [ 636.355405][T23129] IPv6: NLM_F_CREATE should be specified when creating new route [ 637.085082][T23138] netlink: 666 bytes leftover after parsing attributes in process `syz.0.4516'. [ 637.127172][T23141] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 638.342089][T23165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4525'. [ 638.391370][T23170] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4526'. [ 638.451152][T23170] netlink: 'syz.3.4526': attribute type 3 has an invalid length. [ 638.572054][T23170] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4526'. [ 638.646588][T23170] netlink: 'syz.3.4526': attribute type 3 has an invalid length. [ 639.065692][ T29] audit: type=1107 audit(1786608094.873:12): pid=23183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ÁKÈAG¹m-ý¤v(©u-£Ã‰;ÇÇ:^Ä9S ' [ 639.229713][T23188] netlink: 'syz.1.4530': attribute type 46 has an invalid length. [ 639.349880][T23188] ip_tables: iptables: counters copy to user failed while replacing table [ 639.483853][T23194] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4531'. [ 639.500870][T23196] netlink: 136 bytes leftover after parsing attributes in process `syz.1.4530'. [ 639.698037][T23200] block nbd0: Unsupported socket: should be TCP or UNIX. [ 639.845340][T23211] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4533'. [ 639.907118][T23213] netlink: 'syz.4.4536': attribute type 14 has an invalid length. [ 640.447324][T23222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4539'. [ 640.489159][T23222] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4539'. [ 640.578279][T23220] bridge8: entered promiscuous mode [ 640.593043][T23208] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 640.649059][T23220] bridge8: entered allmulticast mode [ 640.865948][T23225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4540'. [ 641.256831][T23238] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4545'. [ 641.682587][T23248] netlink: 'syz.3.4548': attribute type 8 has an invalid length. [ 641.938277][T20302] Bluetooth: hci2: command 0x041b tx timeout [ 642.108902][T20302] Bluetooth: hci1: command 0x0405 tx timeout [ 642.869143][T23243] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 643.029075][T23254] mac80211_hwsim hwsim33 syzkaller0: entered promiscuous mode [ 643.058778][T23254] mac80211_hwsim hwsim33 syzkaller0: entered allmulticast mode [ 644.068701][T23262] netlink: 'syz.2.4552': attribute type 11 has an invalid length. [ 644.287172][T23265] bond4: entered promiscuous mode [ 644.462542][T23266] macvlan2: entered promiscuous mode [ 644.603774][T23266] macvlan2: entered allmulticast mode [ 644.676422][T23266] bond4: (slave macvlan2): Opening slave failed [ 644.747452][T23281] openvswitch: netlink: Duplicate or invalid key (type 0). [ 645.560832][T23289] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 646.823967][T23311] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4560'. [ 646.842988][T23305] netlink: 'syz.4.4559': attribute type 10 has an invalid length. [ 647.037764][T23305] syz_tun: entered promiscuous mode [ 647.543529][T23305] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 647.900147][T23318] netlink: 'syz.3.4562': attribute type 4 has an invalid length. [ 647.950934][T23320] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4563'. [ 648.954903][T23348] netlink: 284 bytes leftover after parsing attributes in process `syz.0.4571'. [ 649.089827][T23352] netlink: 284 bytes leftover after parsing attributes in process `syz.0.4571'. [ 649.208367][T23359] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4573'. [ 649.605479][T23371] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_macvtap, syncid = 4, id = 0 [ 649.831438][T23368] tipc: Enabled bearer , priority 0 [ 649.963016][T23368] syzkaller0: entered promiscuous mode [ 650.019089][T23368] syzkaller0: entered allmulticast mode [ 650.099572][T23374] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 650.626702][T23379] tipc: Resetting bearer [ 650.707668][T23394] 8021q: VLANs not supported on sit0 [ 650.765891][T23397] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4584'. [ 650.781852][T23367] tipc: Resetting bearer [ 650.796131][T23382] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4581'. [ 651.304735][T23367] tipc: Disabling bearer [ 651.800448][T23394] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4581'. [ 651.838432][T23394] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4581'. [ 651.901944][ T10] tipc: Node number set to 2886997039 [ 652.652141][T23434] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4590'. [ 653.336692][T23434] hsr_slave_1 (unregistering): left promiscuous mode [ 653.563434][T23450] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 653.594074][T23448] gretap2: entered promiscuous mode [ 653.627275][T23448] batman_adv: batadv0: Adding interface: gretap2 [ 653.758249][T23448] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 653.834713][T23448] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 654.158250][T23457] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4596'. [ 654.503868][T23462] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4597'. [ 656.057736][ T5623] block nbd2: Receive control failed (result -32) [ 656.089985][ T5623] block nbd2: Receive control failed (result -32) [ 656.167790][T23472] netlink: 'syz.1.4599': attribute type 12 has an invalid length. [ 657.486001][T23533] A link change request failed with some changes committed already. Interface 26±ÿ†Ý'É|d< may have been left with an inconsistent configuration, please check. [ 657.853041][T23539] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 658.095416][T23555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4608'. [ 658.793363][T23560] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4611'. [ 658.977952][T23566] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4613'. [ 658.994616][T23555] team_slave_0 (unregistering): left promiscuous mode [ 659.022367][T23566] netlink: 'syz.1.4613': attribute type 7 has an invalid length. [ 659.041038][T23555] team0: Port device team_slave_0 removed [ 659.076499][T23566] netlink: 'syz.1.4613': attribute type 8 has an invalid length. [ 659.162736][T23566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4613'. [ 659.826577][T23578] netlink: 'syz.1.4617': attribute type 1 has an invalid length. [ 660.130886][T23578] bond11: entered promiscuous mode [ 660.161421][T23578] 8021q: adding VLAN 0 to HW filter on device bond11 [ 660.200499][T23577] syzkaller0: entered promiscuous mode [ 660.227158][T23594] netlink: 'syz.2.4620': attribute type 1 has an invalid length. [ 660.236593][T23577] syzkaller0: entered allmulticast mode [ 660.284261][T23594] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4620'. [ 662.289828][T23625] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4627'. [ 662.325682][T23625] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4627'. [ 663.317453][T23636] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4629'. [ 663.441973][T23635] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4628'. [ 663.610857][T23639] netlink: 'syz.0.4630': attribute type 1 has an invalid length. [ 664.450270][T23641] macvtap1: entered allmulticast mode [ 664.553029][T23656] netlink: 'syz.3.4632': attribute type 1 has an invalid length. [ 664.610235][T23648] macvtap2: entered allmulticast mode [ 664.674776][T23656] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.4632'. [ 664.832760][T23653] bond6: (slave bridge4): making interface the new active one [ 664.961438][T23653] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 665.971632][T23683] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4636'. [ 666.094674][T23683] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.102665][T23683] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.859267][T23702] IPVS: length: 127 != 320 [ 667.390561][T23712] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4643'. [ 667.817832][T23721] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4645'. [ 669.692785][T23756] netlink: 'syz.4.4653': attribute type 10 has an invalid length. [ 669.901924][T23756] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 669.958486][T23756] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 669.985189][T23770] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4654'. [ 670.106194][T23771] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4657'. [ 670.111248][T23773] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4658'. [ 670.627174][T23782] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4661'. [ 670.728044][T23773] bond6: option packets_per_slave: invalid value (18446744073709551615) [ 670.751802][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 670.801506][T23773] bond6: option packets_per_slave: allowed values 0 - 65535 [ 670.931535][T23773] bond6 (unregistering): Released all slaves [ 671.253552][T23778] bond8: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 671.421578][T23778] bond8 (unregistering): Released all slaves [ 671.484458][T23797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4666'. [ 672.127723][T23807] ipvlan1: entered promiscuous mode [ 672.200034][T23809] netlink: 'syz.1.4669': attribute type 1 has an invalid length. [ 672.217577][T23807] ipvlan1: entered allmulticast mode [ 672.257169][T23807] veth0_vlan: entered allmulticast mode [ 673.076656][T23809] 8021q: adding VLAN 0 to HW filter on device bond12 [ 673.130866][T23829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4672'. [ 673.420580][T23814] bond12: (slave geneve2): making interface the new active one [ 673.487175][T23814] bond12: (slave geneve2): Enslaving as an active interface with an up link [ 673.789561][T23819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4671'. [ 674.436173][T23857] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4677'. [ 675.406829][T23889] netlink: zone id is out of range [ 675.434290][T23889] netlink: set zone limit has 4 unknown bytes [ 677.372676][T23937] pim6reg527: entered allmulticast mode [ 678.010855][T23948] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4702'. [ 678.238385][T23878] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 679.348035][T23962] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4706'. [ 679.460434][T23969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4707'. [ 679.817126][T23979] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4708'. [ 679.863792][T23980] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4709'. [ 680.025742][T23980] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4709'. [ 682.720826][T24044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4726'. [ 682.790855][T24046] netlink: 'syz.2.4724': attribute type 21 has an invalid length. [ 682.835398][T24046] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4724'. [ 682.960741][T24046] netlink: 'syz.2.4724': attribute type 4 has an invalid length. [ 683.093407][T24064] netlink: 'syz.2.4724': attribute type 21 has an invalid length. [ 683.273623][T24046] netlink: 'syz.2.4724': attribute type 5 has an invalid length. [ 683.386893][T24064] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4724'. [ 683.472528][T24046] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4724'. [ 683.566175][T24072] Cannot find add_set index 2 as target [ 683.957730][T24064] netlink: 'syz.2.4724': attribute type 4 has an invalid length. [ 684.050034][T24064] netlink: 'syz.2.4724': attribute type 5 has an invalid length. [ 684.107553][T24064] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4724'. [ 684.156749][T24083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4731'. [ 684.224547][T24081] ip6gre1: entered allmulticast mode [ 684.270077][T24083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4731'. [ 684.599551][T24094] netlink: 'syz.2.4732': attribute type 39 has an invalid length. [ 685.781197][T24111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4736'. [ 686.031052][T24115] netlink: 'syz.3.4738': attribute type 1 has an invalid length. [ 686.093043][T24115] netlink: 'syz.3.4738': attribute type 3 has an invalid length. [ 686.228389][T24115] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4738'. [ 686.267579][T24115] NCSI netlink: No device for ifindex 813332851 [ 686.828722][ T10] IPVS: starting estimator thread 0... [ 687.009160][T24140] IPVS: using max 37 ests per chain, 88800 per kthread [ 687.520516][T24147] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 687.529816][T24147] IPv6: NLM_F_CREATE should be set when creating new route [ 687.538810][T24147] IPv6: NLM_F_CREATE should be set when creating new route [ 687.586605][T24153] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4748'. [ 687.680611][T24151] netlink: 'syz.3.4751': attribute type 2 has an invalid length. [ 687.794104][T24147] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 687.973994][T24151] : entered promiscuous mode [ 688.457512][T24163] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4753'. [ 688.886452][T24173] ip_tables: iptables: counters copy to user failed while replacing table [ 690.191225][T24182] IPVS: Error connecting to the multicast addr [ 690.266566][T24185] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 691.183753][T24194] netlink: 'syz.0.4763': attribute type 1 has an invalid length. [ 691.355561][T24194] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4763'. [ 691.496419][T24194] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.599955][T24194] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.732989][T24217] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 692.071259][T24227] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4773'. [ 692.125779][T24229] netlink: 'syz.2.4774': attribute type 1 has an invalid length. [ 692.218596][T24229] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4774'. [ 692.689804][T24237] veth0: entered promiscuous mode [ 692.732701][T24235] veth0: left promiscuous mode [ 693.021642][T24246] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4778'. [ 693.042645][T24247] netlink: 'syz.2.4779': attribute type 1 has an invalid length. [ 693.102984][T24247] netlink: 'syz.2.4779': attribute type 4 has an invalid length. [ 693.239234][T24247] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4779'. [ 693.425990][T24257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4783'. [ 693.485673][T24259] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4784'. [ 693.739506][T24263] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4784'. [ 694.357937][T24270] ip_tables: iptables: counters copy to user failed while replacing table [ 694.368048][T24269] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4787'. [ 695.057879][T24279] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 701.039751][T24334] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4804'. [ 701.235839][T24334] openvswitch: netlink: EtherType 0 is less than min 600 [ 701.720781][T24337] netlink: 524 bytes leftover after parsing attributes in process `syz.1.4805'. [ 703.997617][T24350] SET target dimension over the limit! [ 706.860725][T24364] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 708.625435][T24393] netlink: 'syz.1.4815': attribute type 64 has an invalid length. [ 708.925508][T24393] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4815'. [ 710.586057][T24409] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4818'. [ 711.435055][T24413] tc_dump_action: action bad kind [ 714.880087][T24423] netlink: 248 bytes leftover after parsing attributes in process `syz.3.4824'. [ 714.974335][T24423] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4824'. [ 717.540874][T24390] infiniband syz2: set active [ 717.782306][T24390] infiniband syz2: added bond_slave_1 [ 717.864588][T24390] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 717.965089][T24390] infiniband syz2: Couldn't open port 1 [ 718.479703][T24390] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 718.727503][T24390] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 719.268029][T24390] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 720.182145][T24390] RDS/IB: syz2: added [ 720.361033][T24390] smc: adding ib device syz2 with port count 1 [ 720.429143][T24390] smc: ib device syz2 port 1 has no pnetid [ 727.145654][T24485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 728.745048][T24494] RDS: rds_bind could not find a transport for fc00::, load rds_tcp or rds_rdma? [ 729.015218][T24495] netlink: 'syz.2.4843': attribute type 1 has an invalid length. [ 729.624066][T20302] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 729.653073][ T4929] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 729.678197][ T4929] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 729.699624][ T4929] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 729.713202][ T4929] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 730.718019][T24495] 8021q: adding VLAN 0 to HW filter on device bond5 [ 732.031138][ T4929] Bluetooth: hci0: command tx timeout [ 734.063407][T24517] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4847'. [ 734.108792][ T4929] Bluetooth: hci0: command tx timeout [ 736.193007][ T4929] Bluetooth: hci0: command tx timeout [ 738.039853][T24532] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 738.168648][T24533] openvswitch: netlink: Flow actions attr not present in new flow. [ 738.269280][ T4929] Bluetooth: hci0: command tx timeout [ 738.322122][T24540] lo: entered allmulticast mode [ 738.948704][T24540] tunl0: entered allmulticast mode [ 740.227035][T24540] gre0: entered allmulticast mode [ 741.277105][T24540] erspan0: entered allmulticast mode [ 741.439960][T24540] ip_vti0: entered allmulticast mode [ 741.552536][T24540] ip6_vti0: entered allmulticast mode [ 741.672960][T24540] sit0: entered allmulticast mode [ 742.129210][T24540] ip6tnl0: entered allmulticast mode [ 742.262339][T24540] ip6gre0: entered allmulticast mode [ 742.557143][T24540] syz_tun: entered allmulticast mode [ 747.556070][T24556] ip6gre2: entered allmulticast mode [ 747.923816][T24560] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4857'. [ 748.723853][T24562] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 750.060787][T24576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4860'. [ 751.024584][T24575] veth1_to_bond: entered allmulticast mode [ 751.057478][T24575] veth1_to_bond: left allmulticast mode [ 751.777770][T24580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4861'. [ 751.858509][T24583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4861'. [ 753.782780][T24583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4861'. [ 755.330720][T24594] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4865'. [ 755.956995][T24594] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4865'. [ 758.436283][T24604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4868'. [ 763.168733][T24629] netlink: 'syz.2.4874': attribute type 1 has an invalid length. [ 763.835320][T24635] tipc: New replicast peer: 127.0.0.2 [ 763.841225][T24629] netlink: 200 bytes leftover after parsing attributes in process `syz.2.4874'. [ 763.930760][T24635] tipc: Enabled bearer , priority 1 [ 764.183693][T24642] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4874'. [ 764.484035][T24629] netlink: 'syz.2.4874': attribute type 1 has an invalid length. [ 765.080632][T24629] netlink: 200 bytes leftover after parsing attributes in process `syz.2.4874'. [ 765.871924][T24629] netlink: 'syz.2.4874': attribute type 1 has an invalid length. [ 766.162165][T24629] netlink: 200 bytes leftover after parsing attributes in process `syz.2.4874'. [ 766.700367][T24629] netlink: 'syz.2.4874': attribute type 1 has an invalid length. [ 767.456563][T24629] netlink: 200 bytes leftover after parsing attributes in process `syz.2.4874'. [ 767.907909][T24627] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4874'. [ 768.552692][T24657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4879'. [ 768.563628][T24656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4880'. [ 768.939001][T24658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4879'. [ 771.414706][T24665] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4881'. [ 773.557884][T24672] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4882'. [ 773.881406][T24672] netlink: 'syz.0.4882': attribute type 1 has an invalid length. [ 774.327472][T24672] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4882'. [ 775.382644][T24672] netlink: 'syz.0.4882': attribute type 1 has an invalid length. [ 777.307964][T24676] netlink: 'syz.1.4883': attribute type 1 has an invalid length. [ 777.482258][T24676] netlink: 'syz.1.4883': attribute type 2 has an invalid length. [ 783.840715][T24689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4887'. [ 785.920046][ T5623] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 785.938968][ T5623] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 785.959453][ T5623] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 786.188638][ T5623] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 786.261580][ T5623] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 786.991326][T24695] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4889'. [ 788.852652][ T4929] Bluetooth: hci6: command tx timeout [ 790.908588][ T4929] Bluetooth: hci6: command tx timeout [ 791.013126][T24695] bond13: entered promiscuous mode [ 791.167287][T24695] 8021q: adding VLAN 0 to HW filter on device bond13 [ 792.990590][ T4929] Bluetooth: hci6: command tx timeout [ 793.339956][ T5623] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 793.355828][ T5623] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 793.369017][ T5623] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 793.379735][ T5623] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 793.579487][ T5623] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 794.156912][T24707] 8021q: adding VLAN 0 to HW filter on device bond13 [ 794.617421][T24707] bond13: (slave sit3): The slave device specified does not support setting the MAC address [ 795.080372][ T5623] Bluetooth: hci6: command tx timeout [ 795.790245][ T5623] Bluetooth: hci7: command tx timeout [ 796.381701][T24707] bond13: (slave sit3): Error -95 calling set_mac_address [ 797.630172][ T4929] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 797.660482][ T4929] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 797.687913][ T4929] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 797.772090][ T4929] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 797.812137][ T4929] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 797.869439][ T4929] Bluetooth: hci7: command tx timeout [ 799.949489][ T5623] Bluetooth: hci7: command tx timeout [ 800.759076][ T5623] Bluetooth: hci8: command tx timeout [ 802.119292][ T5623] Bluetooth: hci7: command tx timeout [ 802.828304][ T5623] Bluetooth: hci8: command tx timeout [ 804.908821][ T5623] Bluetooth: hci8: command tx timeout [ 806.988818][ T5623] Bluetooth: hci8: command tx timeout [ 808.989932][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 811.119026][ T4929] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 811.195506][ T4929] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 811.207493][ T4929] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 811.245884][ T4929] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 811.367437][ T4929] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 814.229754][ T4929] Bluetooth: hci0: command tx timeout [ 816.270208][ T4929] Bluetooth: hci0: command tx timeout [ 818.357506][ T4929] Bluetooth: hci0: command tx timeout [ 820.434665][ T4929] Bluetooth: hci0: command tx timeout [ 826.919800][ T7829] bond0 (unregistering): Released all slaves [ 846.163941][ T5623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 846.185543][ T5623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 846.217697][ T5623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 846.232326][ T5623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 846.254471][ T5623] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 849.152496][ T5623] Bluetooth: hci2: command tx timeout [ 851.249754][ T5623] Bluetooth: hci2: command tx timeout [ 853.438868][ T5623] Bluetooth: hci2: command tx timeout [ 854.007861][ T4929] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 854.105812][ T4929] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 854.151165][ T4929] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 854.242659][ T4929] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 854.265556][ T4929] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 855.469844][ T5623] Bluetooth: hci2: command tx timeout [ 856.549397][ T5623] Bluetooth: hci4: command tx timeout [ 857.620216][ T4929] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 857.646083][ T4929] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 857.805525][ T4929] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 857.920714][ T4929] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 857.961413][ T4929] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 858.700182][ T4929] Bluetooth: hci4: command tx timeout [ 860.349846][ T4929] Bluetooth: hci9: command tx timeout [ 860.750015][ T4929] Bluetooth: hci4: command tx timeout [ 862.456687][ T4929] Bluetooth: hci9: command tx timeout [ 862.854216][ T4929] Bluetooth: hci4: command tx timeout [ 864.593418][ T4929] Bluetooth: hci9: command tx timeout [ 866.680939][ T4929] Bluetooth: hci9: command tx timeout [ 876.249723][ T5623] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 876.393625][T20302] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 876.419793][T20302] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 876.455720][T20302] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 877.170957][T20302] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 879.832730][T20302] Bluetooth: hci10: command tx timeout [ 881.878934][T20302] Bluetooth: hci10: command tx timeout [ 883.949187][T20302] Bluetooth: hci10: command tx timeout [ 884.646968][ T4929] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 884.661088][ T4929] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 884.677727][ T4929] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 884.718023][ T4929] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 884.730708][ T4929] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 886.039018][T20302] Bluetooth: hci10: command tx timeout [ 886.994244][T20302] Bluetooth: hci11: command tx timeout [ 889.071063][T20302] Bluetooth: hci11: command tx timeout [ 891.150103][T20302] Bluetooth: hci11: command tx timeout [ 893.228766][T20302] Bluetooth: hci11: command tx timeout [ 913.468227][ T5623] Bluetooth: hci6: command 0x0406 tx timeout [ 913.606804][T24657] Set syz0 is full, maxelem 65536 reached [ 913.671876][ T5623] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 913.689934][ T5623] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 913.706933][ T5623] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 913.727507][ T5623] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 913.741741][ T5623] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 914.564469][ T5623] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 914.701462][ T5623] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 915.048827][ T5623] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 915.059091][ T5623] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 915.068060][ T5623] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 915.868609][ T5623] Bluetooth: hci12: command tx timeout [ 916.407912][ T4929] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 916.444428][ T4929] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 916.457748][ T4929] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 916.473722][ T4929] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 916.505855][ T4929] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 917.228777][T24891] Bluetooth: hci13: command tx timeout [ 917.978452][T24891] Bluetooth: hci12: command tx timeout [ 918.619374][T24891] Bluetooth: hci7: command 0x0406 tx timeout [ 918.760837][T24891] Bluetooth: hci14: command tx timeout [ 919.318902][T24879] Bluetooth: hci13: command tx timeout [ 920.032935][T24879] Bluetooth: hci12: command tx timeout [ 920.850504][T24879] Bluetooth: hci14: command tx timeout [ 921.398565][T24879] Bluetooth: hci13: command tx timeout [ 922.148400][T24891] Bluetooth: hci12: command tx timeout [ 922.948822][T24891] Bluetooth: hci14: command tx timeout [ 923.469160][T24891] Bluetooth: hci13: command tx timeout [ 923.721427][T24891] Bluetooth: hci8: command 0x0406 tx timeout [ 925.007339][T24879] Bluetooth: hci14: command tx timeout [ 927.161457][T24657] syz_tun (unregistering): left promiscuous mode [ 927.272104][T24657] team0: Port device syz_tun removed [ 929.680175][T24891] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 929.698784][T24891] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 929.732572][T24891] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 929.785951][T24891] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 929.823375][T24891] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 931.899506][T24891] Bluetooth: hci3: command tx timeout [ 933.948452][T24891] Bluetooth: hci3: command tx timeout [ 936.038969][T24891] Bluetooth: hci3: command tx timeout [ 938.118804][T24879] Bluetooth: hci3: command tx timeout [ 939.308870][T24879] Bluetooth: hci0: command 0x0406 tx timeout [ 944.942852][T24879] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 944.966801][T24879] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 945.013821][T24879] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 945.040821][T24879] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 945.055715][T24879] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 947.549528][T24879] Bluetooth: hci15: command tx timeout [ 949.635272][T24879] Bluetooth: hci15: command tx timeout [ 951.710882][T24879] Bluetooth: hci15: command tx timeout [ 953.799450][T24879] Bluetooth: hci15: command tx timeout [ 957.473844][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 965.201565][T24891] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 965.299420][T24891] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 965.335887][T24891] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 965.633863][T24891] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 965.761311][T24891] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 968.048646][T24891] Bluetooth: hci16: command tx timeout [ 969.788454][T24891] Bluetooth: hci2: command 0x0406 tx timeout [ 970.112677][T24891] Bluetooth: hci16: command tx timeout [ 972.189806][T24891] Bluetooth: hci16: command tx timeout [ 974.278815][T24891] Bluetooth: hci16: command tx timeout [ 974.332098][T24879] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 974.356948][T24879] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 974.369110][T24879] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 974.389129][T24879] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 974.405391][T24879] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 976.527368][T24891] Bluetooth: hci17: command tx timeout [ 977.502591][T24879] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 977.520369][T24879] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 977.533912][T24879] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 977.711796][T24879] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 977.721022][T24879] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 978.590478][T24879] Bluetooth: hci17: command tx timeout [ 979.792434][T24879] Bluetooth: hci18: command tx timeout [ 980.108907][T24879] Bluetooth: hci4: command 0x0406 tx timeout [ 980.698946][T24891] Bluetooth: hci17: command tx timeout [ 981.869060][T24891] Bluetooth: hci18: command tx timeout [ 982.755077][T24891] Bluetooth: hci17: command tx timeout [ 983.948459][T24891] Bluetooth: hci18: command tx timeout [ 985.148652][T24891] Bluetooth: hci9: command 0x0406 tx timeout [ 986.028724][T24879] Bluetooth: hci18: command tx timeout [ 989.801295][T24891] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 989.850380][T24891] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 989.866018][T24891] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 989.899543][T24891] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 989.926179][T24891] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 991.408919][ T30] INFO: task kworker/u8:19:7829 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 991.544059][ T30] Not tainted syzkaller #0 [ 991.571566][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 991.656650][ T30] task:kworker/u8:19 state:D stack:21120 pid:7829 tgid:7829 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 991.911048][ T30] Workqueue: netns cleanup_net [ 991.982483][ T30] Call Trace: [ 992.028321][T24891] Bluetooth: hci19: command tx timeout [ 992.085956][ T30] [ 992.130542][ T30] __schedule+0x17d9/0x56c0 [ 992.166795][ T30] ? __lock_acquire+0x683/0x2cf0 [ 992.276661][ T30] ? __lock_acquire+0x683/0x2cf0 [ 992.390479][ T30] ? irqentry_exit+0x218/0x8f0 [ 992.408956][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 992.499828][ T30] ? __pfx___schedule+0x10/0x10 [ 992.508273][ T30] ? schedule+0x90/0x2b0 [ 992.526266][ T30] schedule+0x164/0x2b0 [ 992.739164][ T30] schedule_preempt_disabled+0x13/0x30 [ 992.746580][ T30] rwsem_down_write_slowpath+0x87d/0x1080 [ 993.086128][ T30] ? rwsem_down_write_slowpath+0x498/0x1080 [ 993.510257][ T30] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 993.831060][ T30] ? __rtnl_unlock+0x68/0xf0 [ 993.857659][ T30] ? rdma_dev_exit_net+0x8f/0x340 [ 993.913239][ T30] down_write+0x1bc/0x200 [ 994.001803][ T30] ? __pfx_down_write+0x10/0x10 [ 994.036657][ T30] ? rdma_net_to_dev_net+0x23/0x240 [ 994.063488][ T30] ? rdma_net_to_dev_net+0x23/0x240 [ 994.074487][ T30] ? rdma_net_to_dev_net+0x1ed/0x240 [ 994.096997][ T30] rdma_dev_exit_net+0x8f/0x340 [ 994.107298][ T30] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 994.239580][T24891] Bluetooth: hci19: command tx timeout [ 994.519042][ T30] ops_undo_list+0x43d/0x8d0 [ 994.524744][ T30] ? __pfx_ops_undo_list+0x10/0x10 [ 994.548113][ T30] ? idr_destroy+0x218/0x290 [ 994.558082][ T30] ? do_raw_spin_unlock+0xf5/0x210 [ 994.848308][ T30] cleanup_net+0x572/0x810 [ 994.854609][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 995.162211][ T30] ? rcu_is_watching+0x15/0xb0 [ 995.187960][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 995.411375][ T30] process_scheduled_works+0xa8e/0x14e0 [ 996.105342][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 996.118103][ T30] ? assign_work+0x3cf/0x5d0 [ 996.128090][ T30] worker_thread+0xa47/0xfb0 [ 996.138422][ T30] kthread+0x388/0x470 [ 996.148112][ T30] ? __pfx_worker_thread+0x10/0x10 [ 996.199096][ T30] ? __pfx_kthread+0x10/0x10 [ 996.223526][ T30] ret_from_fork+0x514/0xb70 [ 996.238090][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 996.268738][T24891] Bluetooth: hci19: command tx timeout [ 996.296676][ T30] ? __switch_to+0xc89/0x1420 [ 996.348985][ T30] ? __pfx_kthread+0x10/0x10 [ 996.455683][ T30] ret_from_fork_asm+0x1a/0x30 [ 996.547656][ T30] [ 996.769353][ T30] [ 996.769353][ T30] Showing all locks held in the system: [ 996.858088][ T30] 1 lock held by khungtaskd/30: [ 996.867947][ T30] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 997.024831][ T30] 3 locks held by kworker/u8:3/48: [ 997.078377][ T30] #0: ffff8880b873b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 997.298795][ T30] #1: ffff8880b8724440 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 997.460208][ T30] #2: ffff88801e690a90 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0x67/0x14d0 [ 997.879899][ T30] 3 locks held by kworker/u8:5/80: [ 997.886189][ T30] 2 locks held by getty/5366: [ 998.039917][ T30] #0: ffff888035f8e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 998.062256][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 998.118095][ T30] 5 locks held by kworker/u8:19/7829: [ 998.348695][T24891] Bluetooth: hci19: command tx timeout [ 998.641079][ T30] 2 locks held by kworker/u8:28/10617: [ 999.452969][ T30] #0: ffff8880b873b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 999.708862][ T30] #1: ffff8880b8724440 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 999.738885][ T30] 4 locks held by kworker/u8:4/23496: [ 1000.228348][ T30] #0: ffff8880b863b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 1000.520347][T24879] Bluetooth: hci10: command 0x0406 tx timeout [ 1000.818751][ T30] #1: ffff8880b8724440 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 1000.933572][ T30] #2: ffff8880375007a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 1000.948205][ T30] #3: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: ieee80211_sta_active_ibss+0xc7/0x330 [ 1000.960740][ T30] 1 lock held by syz.4.4813/24390: [ 1001.148603][ T30] #0: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 1001.178243][ T30] 4 locks held by syz-executor/24692: [ 1001.207050][ T30] #0: ffffffff90018348 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720 [ 1001.306448][ T30] #1: ffff88801c2952a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140