last executing test programs: 3m20.413299494s ago: executing program 3 (id=2345): bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10022, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYRES16=r4], 0x20}, 0xfc40) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) bind$rds(r6, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x5, 0x0}}, 0x10, &(0x7f0000001540)=[{&(0x7f0000000300)=""/98, 0x62}], 0x1, &(0x7f0000000180)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x1}, @rdma_dest={0x18, 0x114, 0x2, {0x3, 0x9}}], 0x30}, 0x4000000) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x3, 0x80}, {0x94, 0x0, 0x0, 0xffffff81}, {0x6}]}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r7 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r7, 0x6b, 0x1, &(0x7f0000001d00)=[{0x3, 0x2, {0x1, 0xf1, 0x4}, {0x1, 0x1, 0xa0bbd5adb134c2be}, 0xfe, 0x1}, {0x0, 0x2, {0x2, 0xf1, 0x3}, {0x2, 0x1}, 0xfd, 0xfd}], 0x40) r8 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$6lowpan_control(r8, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:10 2', 0x1b) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0xde, 0x85, 0x6}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x6a8, 0x3a0, 0x3a0, 0x230, 0x4c8, 0x0, 0x5d8, 0x5d8, 0x5d8, 0x5d8, 0x5d8, 0x6, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}]}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xc5}}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b3b646c379c506e83e205648a3c73050b9ad7575387a074e5d1ee348ed6a"}}, {{@ipv6={@mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, [0xff, 0xffffffff, 0xff000000, 0xff000000], [0xff, 0x0, 0x0, 0xffffffff], 'pimreg\x00', 'veth0_to_hsr\x00', {0xff}, {}, 0x2, 0x1, 0x7, 0x10}, 0x0, 0x100, 0x170, 0x0, {}, [@common=@srh={{0x30}, {0x6, 0x10, 0x1, 0x5, 0x0, 0x300, 0x808}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x6, 0xff, 0x8, 0x1, 0x0, "964c73a55ed6aeafc78481772ab7e8fc4e10447d3d796fd3ac6cb3cb887fea413c6eb54f49c48c1ae0401fa2fb4831414e02fbb153db6db0b430bd31e8518c59"}}}, {{@ipv6={@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0x0, 0xffffff00, 0xff000000], [0xffffffff, 0x0, 0xff000000, 0xffffff00], '\x00', 'netpci0\x00', {0xff}, {}, 0x6, 0x7, 0x2, 0xa}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d4], 0xf, 0x2, 0x3}}, @common=@ipv6header={{0x28}, {0x2, 0x0, 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0xd}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @empty, [0x0, 0xffffff00, 0x0, 0xff000000], [0x0, 0xff000000, 0xff, 0xffffffff], 'ip6_vti0\x00', 'geneve1\x00', {0xff}, {0xff}, 0x491e597b2835c6af, 0x40, 0x0, 0xc}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x9, 0xffffff61, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e22}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x708) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0xfdfffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000580)=ANY=[@ANYRES16=0x0], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) 3m18.430461917s ago: executing program 3 (id=2351): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendto$inet6(r0, 0x0, 0x100000, 0x0, &(0x7f0000000000)={0xa, 0xfffe, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffc}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000130005002cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="12030000000000000a0001"], 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x40042) 3m17.817037065s ago: executing program 3 (id=2354): r0 = socket(0x2, 0xa, 0x300) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_int(r1, 0x0, 0x7, 0x0, &(0x7f00000000c0)) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040)=0x9, 0x4) unshare(0x480) close(0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) poll(&(0x7f0000000040)=[{r5, 0x10}], 0x1, 0x1) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) socket$inet6(0xa, 0x6, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000004000000850000007d00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000630f000085000000d000"/96], &(0x7f00000004c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000340)={0x1d, r8, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r7, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) setsockopt$SO_J1939_FILTER(r7, 0x6b, 0x1, &(0x7f0000000240), 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000090000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r9 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r9, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000140)=ANY=[], 0xe0}], 0x1, 0x0, 0x0, 0x800}, 0x40040) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000041000701fefffffffeffffff017c0000040042800c00018006000600800a0000100002800c00148008000400"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000240)={r5, &(0x7f0000000300)='\x06\xc4g\xcd\x06\x1f\x12\xe9[\xc7\xf9U\bB\aN\xb4~\xe5\x1f8\x0fx\x18\xd5\x96m\xa4\x153\xdcZd$\xcb\xa9o)\xfd\xd0\x8c\xd7\a`uez\xa9', 0x115000, &(0x7f0000000140)={@_ha_fsid={[0x5251]}, {0xd5cb, 0x30e, 0x9, 0x2c000000000000}}, 0x10, &(0x7f00000001c0), &(0x7f0000000200)=0x1}) setsockopt$inet_sctp_SCTP_CONTEXT(r10, 0x84, 0x11, &(0x7f00000002c0)={0x0, 0x84ca}, 0x8) 3m16.650098862s ago: executing program 3 (id=2365): r0 = socket(0x2, 0xa, 0x300) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_int(r1, 0x0, 0x7, 0x0, &(0x7f00000000c0)) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040)=0x9, 0x4) unshare(0x480) close(0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) poll(&(0x7f0000000040)=[{r5, 0x10}], 0x1, 0x1) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) socket$inet6(0xa, 0x6, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000004000000850000007d00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000630f000085000000d000"/96], &(0x7f00000004c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000340)={0x1d, r9, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r8, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r9, {0xffff, 0xe}, {0xfff1, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0xc096}, 0x20000050) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000090000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r10 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r10, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000140)=ANY=[], 0xe0}], 0x1, 0x0, 0x0, 0x800}, 0x40040) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000041000701fefffffffeffffff017c0000040042800c00018006000600800a0000100002800c00148008000400"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000240)={r5, &(0x7f0000000300)='\x06\xc4g\xcd\x06\x1f\x12\xe9[\xc7\xf9U\bB\aN\xb4~\xe5\x1f8\x0fx\x18\xd5\x96m\xa4\x153\xdcZd$\xcb\xa9o)\xfd\xd0\x8c\xd7\a`uez\xa9', 0x115000, &(0x7f0000000140)={@_ha_fsid={[0x5251]}, {0xd5cb, 0x30e, 0x9, 0x2c000000000000}}, 0x10, &(0x7f00000001c0), &(0x7f0000000200)=0x1}) setsockopt$inet_sctp_SCTP_CONTEXT(r11, 0x84, 0x11, &(0x7f00000002c0)={0x0, 0x84ca}, 0x8) 3m15.277874562s ago: executing program 3 (id=2375): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(0xffffffffffffffff) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) r5 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000280)={0x0, 0xffe4, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b3ed1b8", 0x71}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0xfffffe16}], 0x3}, 0xc854) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) sendfile(r3, r4, 0x0, 0xffffffff000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r6, 0x0, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44010}, 0x40000) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x14, r7, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)=@newchain={0x2f44, 0x64, 0x300, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff2}, {0xfff3, 0xfff3}, {0xa, 0x1ffe4}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffffe}, @TCA_CHAIN={0x8, 0xb, 0xaebe}, @filter_kind_options=@f_u32={{0x8}, {0x1c60, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x8}, @TCA_U32_SEL={0x164, 0x5, {0x0, 0x3, 0x0, 0x2, 0x82, 0x97, 0x3, 0x8, [{0x4, 0x722e, 0x8, 0x1}, {0x5, 0x4, 0x8, 0x100}, {0xc0, 0xea1, 0xfffffffc, 0x10}, {0x6, 0x57e4d660, 0x1, 0x205}, {0x3, 0x0, 0x3, 0x7}, {0x3ff, 0x0, 0x1, 0x1}, {0x5b6d, 0x1, 0x1, 0x6f}, {0x5, 0x2, 0x5, 0x58c}, {0x5, 0x9, 0x400, 0xc2b15ac}, {0xcbc3, 0x2, 0x6, 0x4}, {0x4, 0x4, 0x6, 0x4}, {0x80, 0x7, 0x400, 0x41}, {0xfffffffd, 0x3, 0x80, 0x10000}, {0x4, 0xfff, 0x2, 0xfffffff8}, {0xc8aa, 0x3, 0xa, 0x7}, {0x7ff, 0x4, 0x1, 0x1}, {0xc3d, 0x7, 0x5a8, 0x4}, {0x9, 0x4, 0x7}, {0xc00, 0x800, 0x1, 0x8}, {0xf1, 0x8, 0x401, 0x8}, {0x1, 0x8, 0x0, 0x400}]}}, @TCA_U32_INDEV={0x14, 0x8, 'veth0_to_batadv\x00'}, @TCA_U32_POLICE={0x884, 0x6, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x1c, 0x8, 0x1, 0x40, 0x2, 0xe949, 0x9e, 0x0, 0x101, 0x6, 0x0, 0x2, 0x7, 0x7, 0x71c0, 0x7, 0x9, 0x2, 0x5, 0x7, 0x5, 0x4, 0xb4, 0x2, 0x0, 0x7, 0x8, 0x9, 0x9, 0x4, 0x1, 0x2, 0x5f, 0x100, 0x600000, 0x8, 0x2, 0xfffffffa, 0x6, 0x3, 0x2, 0xfffffff2, 0x1, 0x8001, 0xffffffff, 0x4, 0x5, 0x4, 0x93dd, 0xe7, 0x8, 0x7f, 0x9, 0x0, 0xffffff14, 0x7, 0x5, 0x6, 0x4, 0x7c6, 0x7, 0x2400000, 0x2, 0xff, 0x2, 0xcda, 0x7ff, 0x1, 0x3, 0x2, 0x5d2, 0x10001, 0xd1a, 0x4, 0x1, 0x6, 0x67, 0x7fffffff, 0x2, 0x1, 0x1, 0x0, 0x8019, 0x6, 0xfffffff8, 0x0, 0x9, 0x800, 0xd6, 0x8, 0x2, 0x3, 0x7fff, 0x8, 0x5, 0x7, 0x0, 0x5, 0x1, 0x2, 0x4, 0x0, 0x1, 0x7, 0x8, 0x3, 0x8, 0x38b, 0x7, 0x1, 0x0, 0x2c, 0x4, 0xa27, 0x800, 0x0, 0x0, 0x9, 0x3ef, 0x4, 0xfffffffa, 0x3ff, 0xfffffffe, 0x7, 0x7fff, 0x4, 0x5, 0x2, 0x6, 0x8001, 0x68b1, 0x0, 0x7, 0x7fffffff, 0xa18d, 0x0, 0x5, 0x7fff, 0xb0d, 0x3, 0x9, 0x7, 0x7ff, 0x97, 0x0, 0x1f64, 0xfffffffd, 0x2, 0x3, 0x4, 0x8000, 0x6, 0x59f3, 0x41814ee7, 0x100, 0x693a, 0x13f, 0xc340, 0x101, 0x1, 0x2, 0x0, 0xf6, 0x2, 0xc, 0x8, 0x5, 0x1, 0x9, 0xcb2, 0x4, 0x0, 0x401, 0x0, 0x6, 0x6efd5449, 0x3, 0x0, 0x101, 0x80, 0x4, 0x5e, 0x8, 0x1, 0x0, 0xfb99, 0x3, 0xd, 0xf02, 0x0, 0xf04, 0x7, 0x3, 0x6, 0x8, 0xcf5c, 0x4, 0x10001, 0x2a8, 0x80, 0x1, 0x0, 0xffff, 0x1ff, 0x6, 0xffffff96, 0x28b7, 0x1, 0xd, 0x6, 0x1, 0x5, 0xffffca9e, 0xc6, 0x100, 0x9, 0x8, 0x7, 0x0, 0x1, 0x5, 0x7, 0x0, 0xb7ee, 0x8001, 0x2, 0x5, 0x1ff, 0xf, 0x0, 0x5, 0x2, 0x40, 0x5ffa000, 0x7f, 0xb, 0xa6, 0xffffff4d, 0x2, 0x5, 0xe469, 0x0, 0x8, 0x7, 0xd6, 0x6, 0xfff, 0x5, 0x83d, 0x9, 0x4, 0x61f, 0x0, 0xc, 0x3, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x80000001, 0x1, 0x5, 0x5, 0xfff, {0x2c, 0x2, 0x7, 0x9, 0x4, 0x4}, {0xc9, 0x1, 0x5, 0x1, 0x7ff, 0xba2}, 0x1, 0xa, 0x3}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0x4, 0x181, 0x3, 0x1, 0x80000000, 0x7f, 0x0, 0xfffffffd, 0x8000, 0x3, 0x91, 0x800, 0x7, 0xfffffffd, 0x3, 0x1, 0x2, 0xe4, 0x1, 0x8, 0x1, 0x8, 0x5, 0x6, 0x10000, 0xfffffffa, 0xa, 0x81, 0x0, 0x5, 0x2, 0x6, 0x4, 0x0, 0x6, 0x7, 0x2, 0x55, 0x9, 0xa6b, 0x3, 0x7b9ac27d, 0x6, 0x2, 0x7, 0x2, 0x9, 0x1, 0x6, 0x5, 0x162b, 0x1, 0xbc, 0x3, 0xffff, 0x400, 0xfffffffc, 0x8001, 0x9, 0xc, 0x5, 0x1ff, 0x3, 0x2, 0x5, 0x1, 0x5eecc589, 0x5, 0x9, 0x200, 0x6, 0x81, 0x0, 0x2, 0x0, 0x8, 0x9, 0x6, 0x1, 0x81, 0x1ff, 0x13, 0xc, 0xfffffff7, 0xea, 0x7, 0x17f7, 0x5, 0x80000001, 0xccdf, 0x3ff, 0x5, 0x39bb, 0xbff, 0x7, 0x8001, 0x37e, 0x0, 0x7, 0x3, 0x3, 0x7, 0x1250a5bc, 0x1, 0x7, 0x3, 0x0, 0xe, 0x0, 0x7fffffff, 0x9, 0x45f6, 0xffffffff, 0x6, 0x1000, 0x4, 0x9, 0x8, 0x1ff, 0x9eca, 0xb, 0x7f, 0x9f7, 0x8, 0x18, 0x5, 0xe, 0xa25, 0x7f, 0xb39, 0x3, 0x8, 0x9, 0x1, 0xb55a, 0x0, 0x5, 0x401, 0x9, 0x10000, 0x9, 0x7f, 0x4, 0x1, 0x9, 0xcbe, 0x0, 0xff, 0x7fffffff, 0x0, 0x7, 0x9, 0x7, 0x7, 0xfffffffc, 0x2, 0x4, 0x5, 0x1, 0x2, 0xa77, 0x9, 0x7, 0x10, 0x526, 0x6, 0x9, 0x1, 0x0, 0x1, 0x2, 0x6, 0x4, 0x5, 0x7, 0x5, 0x8, 0xff, 0x3, 0xfffffffb, 0x68d, 0x6efaf6fc, 0x0, 0x0, 0x0, 0x6, 0x1, 0xfffffc00, 0xff74, 0x0, 0x1, 0x3, 0x7, 0x1, 0x101, 0x7, 0x800, 0xb, 0x5, 0x5, 0x9, 0x1ff, 0x4, 0xb5, 0x6, 0x6819b2b7, 0x7f, 0x44, 0x8, 0x3, 0xf5d4, 0x834, 0xc, 0xc, 0x0, 0x5, 0x10000, 0x6, 0x7fff, 0x6, 0x3ff, 0x0, 0x7, 0x8, 0x2, 0xffff93a7, 0x8000, 0x0, 0x1522, 0x400000, 0x8, 0xffffffff, 0xfffffff9, 0x2, 0x4, 0x2, 0x6, 0x4, 0x3, 0x762b, 0x9, 0x7, 0x4, 0xc67, 0x3, 0x7fff, 0x9, 0xd84f, 0x6, 0x7, 0x80, 0x8, 0x200, 0x3ff, 0x3]}]}, @TCA_U32_MARK={0x10, 0xa, {0x9, 0x9}}, @TCA_U32_ACT={0x1238, 0x7, [@m_skbedit={0x118, 0x2, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x2, 0x8}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x80000000, 0x38, 0x6, 0x1, 0x8}}]}, {0xcb, 0x6, "5d8a67131c355dbf0a521ea3ce555d8aaf0286bcc84a2bcd69ac741c53a4dc78f84f945701b64c8d637a1c887bb724efd8f16f592bce037526a55c985fc9314cd9e4c70bb5db31dd8f1dbf2f72b65c144631b5bd61969ec21350629f655b66dad1380f8b5af546d44fd720a45b3312438234ee51346d1a2e889adca87456deff4520631b3f2d6888a2c0f8026d1722179a4daa4fbfcd60096d75eb9c73907d49e8ca80d0c77e60c1811a3df5e34abde7a0b8cef2ae97047bfaca680cdf3fa8a777f5c9759d3103"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_pedit={0xf7c, 0x15, 0x0, 0x0, {{0xa}, {0xf14, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0xa8, 0x5, 0x0, 0x1, [{0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x7}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe68, 0x4, {{{0x3, 0x9, 0x3, 0x5b8f, 0x5}, 0x3, 0x5e, [{0x4, 0xfffffffc, 0xebf, 0x0, 0x6, 0x7}, {0x3, 0x772, 0x3, 0x10001, 0x3ff}, {0x4, 0x80000000, 0x1000, 0x5, 0xbdc, 0xe1a}]}, [{0x3, 0xe, 0xf, 0xffffff3e, 0x3eb, 0x2}, {0x84, 0x6ee, 0x8, 0x6, 0x1ff, 0x7}, {0x80, 0xf0c7, 0x0, 0x0, 0x0, 0x7}, {0xd0, 0x8, 0x100, 0x1, 0x0, 0x80000000}, {0x4, 0x8, 0xce, 0x7, 0x14, 0x1}, {0x7, 0x9, 0x6, 0x2, 0x0, 0x2}, {0x8bf6, 0xb89, 0x7f, 0x6, 0xf7, 0x5}, {0x4, 0xc, 0x6, 0x7, 0x9, 0x30}, {0x8, 0x7, 0xffffffff, 0x7, 0x1, 0x10001}, {0x9, 0xa, 0x1, 0xdac9, 0x7f, 0x4}, {0x8, 0x1, 0x5, 0x5, 0x1, 0xfffffff9}, {0x2, 0x4, 0x5, 0x6}, {0x400, 0xb, 0x6, 0x10, 0x6, 0xfffffffe}, {0xc, 0x7f, 0xf34, 0x101, 0xf, 0x800}, {0xf6, 0x9, 0x6, 0x40000000, 0x59, 0x2}, {0xc52, 0x2, 0xc8, 0x9, 0xffff, 0x8}, {0x5, 0x9, 0x3, 0x8001, 0xf6, 0x6}, {0x5, 0x5, 0x400, 0x801, 0x58, 0xfffffffa}, {0x87, 0x3, 0x3, 0x6, 0x59}, {0x5, 0xfffffffe, 0x8000, 0x8, 0x1, 0x509}, {0xc, 0x5, 0x100, 0x1, 0x0, 0x1}, {0xffffffff, 0x4, 0x1, 0x400, 0xffff, 0x6}, {0x7fffffff, 0x8, 0xe7dd, 0x3ff, 0x4, 0x2}, {0xffffffff, 0xffffffff, 0x4, 0x101, 0x400, 0x6}, {0x6, 0x4, 0x840c, 0x0, 0x8, 0x7}, {0x6, 0x55, 0x7bec, 0x5, 0x3f, 0x8}, {0x6, 0x7fffffff, 0x4, 0x7, 0x57bd, 0x10f1}, {0x0, 0x5, 0x2, 0xc951, 0x4, 0x80000001}, {0x6a6, 0xd9, 0x4, 0x5}, {0x8, 0x1, 0x8ab, 0xfffffffc, 0x1, 0x6}, {0x0, 0x6, 0x8, 0x8, 0xb21, 0x7}, {0x8, 0x1, 0x40, 0x8, 0x0, 0x21e}, {0x494e72f4, 0x5, 0x1, 0x6, 0x1, 0x7fffffff}, {0x2, 0xb59, 0x80000001, 0x8, 0x80000000, 0xf3dc}, {0x66, 0xff, 0x10001, 0xfffffffe, 0x3, 0x3}, {0x6, 0x9, 0x4, 0x4, 0x75, 0xb64f}, {0x1000, 0x6, 0x4, 0x7, 0x8d22, 0x3}, {0x10, 0x7, 0x6, 0x3ff, 0x3, 0x2}, {0x9, 0x0, 0x0, 0x9, 0x2044, 0x5}, {0x7, 0x3c, 0x101, 0x2, 0x9, 0x7}, {0xd4, 0x4, 0x3ff, 0x81, 0x7e9, 0x5}, {0x9, 0x6, 0x13, 0x6, 0x2, 0xfffffff9}, {0x3ff, 0x0, 0x8, 0x6ae, 0xd, 0x5}, {0x7, 0xf78a, 0x1a2, 0x9, 0x9, 0x6}, {0x7, 0x8, 0x8, 0x1, 0x400, 0x8}, {0xffffffff, 0x14, 0x81, 0x9, 0x5, 0x6}, {0xf, 0x8, 0xfffffffe, 0x10000, 0x6, 0x40}, {0x8001, 0x3, 0x1, 0x9, 0x9, 0x1000}, {0x5, 0x60e2, 0x6, 0x5511, 0x5, 0x800}, {0x5, 0x7, 0x40, 0x88ab, 0x2, 0x101}, {0x2, 0x3, 0x2, 0xe, 0x5, 0x4}, {0xfffffffb, 0x6, 0x2, 0x0, 0x34a}, {0xa000, 0x80, 0x401, 0x10, 0x4, 0x5}, {0x10, 0x7, 0x3, 0x5, 0x32d, 0x2}, {0x2, 0x0, 0x3, 0x8, 0x80000001, 0x5}, {0x0, 0x7, 0x7, 0x81, 0x0, 0x7}, {0x3, 0x3, 0x3ff, 0x2, 0x1, 0x68}, {0x80, 0x8, 0x2b580000, 0x7fffffff, 0xfffffe8a, 0x8}, {0x2, 0x4a, 0x6, 0x401, 0x9}, {0x7, 0x0, 0x4, 0x5}, {0x0, 0x81, 0x4, 0x2, 0x1, 0xffff}, {0x5, 0xc, 0x3, 0x1000, 0x7, 0x6}, {0x3, 0x27, 0x0, 0x100, 0x6, 0x2}, {0x4000000, 0x4, 0xff, 0x6, 0x3, 0xff}, {0x0, 0x2, 0xc28, 0x3, 0x3, 0x81e}, {0x2, 0x6, 0x5, 0x8, 0xe, 0x5}, {0x56bf0fd4, 0x1000, 0x80000000, 0x1, 0xe5, 0xa5b}, {0x579cdc00, 0x2, 0x1, 0x1, 0x72c, 0x50}, {0x7aac, 0x7fff, 0x400000, 0x4, 0xfffffff7, 0x5}, {0x100, 0x9, 0x9, 0x4, 0x4000000, 0x80}, {0x1, 0x7, 0x5542, 0x4, 0x8}, {0x9c2, 0x3, 0x6, 0x1, 0x7aa6, 0xf}, {0x9836, 0x0, 0x1, 0x4, 0x4, 0xfffffff4}, {0x1, 0x200, 0x4, 0x5, 0x0, 0x9}, {0x9, 0x2, 0x5, 0x8, 0x4, 0x8}, {0x42, 0x2, 0x800, 0x7, 0x5, 0x6}, {0x4, 0x100, 0x80, 0x2, 0x8d7f, 0x6}, {0x0, 0x5, 0x3, 0x2, 0x6, 0x7}, {0x2, 0x4, 0x2, 0x7, 0x1ff, 0x7}, {0x5, 0x3bc2, 0x4, 0x1, 0x8, 0x10001}, {0x80000000, 0xbb, 0x7, 0x6, 0x9, 0xa01}, {0x3, 0x2, 0x3, 0x5, 0x8, 0x1}, {0x3, 0x7, 0x7, 0x2, 0x27e5666c, 0x1927}, {0x200, 0x8, 0x6, 0x0, 0x4, 0x1}, {0x9, 0x0, 0x8978, 0xc4e, 0x8001, 0xfffffffa}, {0x3, 0x3, 0x10000, 0x5, 0x9, 0x3}, {0x6, 0x86, 0x1, 0x4, 0x10000}, {0x8, 0x37bd5de8, 0xe7, 0x6, 0x0, 0x101}, {0x6, 0x7, 0x3, 0x8, 0x0, 0x3}, {0x8, 0x7, 0x2, 0x8, 0x4, 0xfffffffc}, {0x7, 0x8, 0x1000, 0xfffffff7, 0x4, 0x5}, {0x4, 0x78, 0x0, 0x6, 0x7, 0xdb1}, {0x3, 0x2, 0x3, 0x7fff, 0x9, 0x5}, {0x7, 0x4, 0xe7, 0x800, 0x448, 0x7}, {0x5, 0x1, 0x401, 0x88, 0x0, 0x9}, {0xfff, 0x10, 0x78, 0x5, 0xfffffffc, 0x5}, {0xfffffffa, 0xfffffe00, 0x5, 0x1, 0x5e2d, 0x6ab2}, {0x8001, 0x4, 0x9, 0x9, 0x2, 0xfffffff9}, {0x6, 0x3e, 0x6, 0x7, 0x80000000, 0xfffffffc}, {0x5, 0x4, 0x1, 0x2, 0x0, 0x7}, {0xfffff800, 0x6, 0xc59, 0x2, 0x8, 0x2d5}, {0x5, 0x101, 0x0, 0x1, 0x1, 0xfffffffa}, {0x40, 0x2, 0x400, 0x7, 0x7, 0xf64}, {0x80, 0x9, 0x7, 0x7, 0x2}, {0xef, 0x53, 0x7ff, 0x8, 0x7, 0x5}, {0xab37, 0x40, 0x9f, 0x2, 0x1, 0x68be}, {0x81, 0x1, 0x7fffffff, 0x3, 0x8, 0x7}, {0x100, 0x5, 0xff, 0xe, 0x34, 0x1}, {0x2, 0x0, 0x6ec, 0x10, 0x5, 0xc}, {0x7, 0x2, 0x9f85, 0x4, 0x4, 0x3}, {0x10001, 0x4, 0x9, 0xa9a, 0xd0aa, 0x8}, {0x7, 0x1, 0x61e, 0x2, 0xd4, 0x4}, {0x10, 0x14000000, 0x4d2d, 0x4, 0x74, 0x3}, {0x7, 0x1, 0xffffffff, 0x1, 0x80000000, 0x1000}, {0x1, 0xffff, 0x5af10922, 0x90, 0x5, 0x6}, {0x6, 0x0, 0x401, 0x80, 0x6, 0x8}, {0x5, 0xfffffffe, 0x8001, 0x8, 0xac}, {0x80000001, 0x4, 0xffff, 0xd567, 0x5, 0x9}, {0xc, 0x4, 0x2, 0x0, 0x9, 0x7f}, {0x7, 0x7, 0x401, 0x1, 0x7}, {0x6, 0x44b8, 0x1, 0x8, 0xffffffee, 0x5}, {0x1, 0x73d, 0x2, 0x3, 0xb7, 0x3}, {0x9, 0x6, 0x7, 0xfff, 0x6, 0x3}, {0x3, 0x401, 0x465, 0xc, 0x7, 0x8}, {0xfffffffe, 0x2, 0x8, 0x2, 0xfffffffb, 0x3}, {0x8, 0x4, 0x1, 0x8, 0x6, 0x2}, {0xfffff7f9, 0x40, 0x0, 0x9, 0xfff}, {0xaa, 0xfffffffe, 0x3, 0xb, 0x9, 0x4}], [{0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x2}, {}, {0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x4}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {0x93518968d5001c60}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5}, {0x1}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0x2, 0x1}, {0x4}, {0x2}, {0x3}, {0x4}, {0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x2}, {}, {0x5}, {0x4, 0x1}, {}, {0x2}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x5}, {0x1}, {0x4}, {0x3, 0x1}, {}, {}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x4}, {0x3}, {0x2}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x5}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x7}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x5, 0x1}, {0x4}, {0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x5}], 0x1}}]}, {0x3e, 0x6, "e7e70e416a0a80987956d2fd9fb5632b6dbf7c5fd869a145833e6726659f63b3807dd8081c557fbb1a2445bde60ec2ac9ef9d0f0e9c574dff76d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ct={0xe0, 0x19, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}, @TCA_CT_LABELS={0x14, 0x7, "d1a25e335889fabd66022a45484c75cf"}]}, {0x93, 0x6, "7bc90f75c00bc6fb94d766f9bc462d424886f378ca62e4da5a8f6838c52363715e9c4767a0712820485cdc388757545ee662da904ee071ee4c6aded82ecc676174e25004fb895d37567754a9273cc21ef7bd556be0d8790248320ef2bc3f0cf33bb1ca6d220264c3cb080255defabcf7171c96491cc61695979a37b261d96b5f535b5b267affa741603a4cb07dd15b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_sample={0xc0, 0x11, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xf}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5ef9}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xa}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x55a1}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xfff}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xa, 0x6, 0x0, 0x7, 0x6}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x5, 0x3, 0x3, 0x3, 0x401}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3ff}]}, {0x2a, 0x6, "8a1c1e34d4093034c2fde3b225c50016f2ecdb7de474f9d0281b90ed4aeaf6a5512ad4ff2f4b"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_U32_MARK={0x10, 0xa, {0x5, 0xd}}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x1298, 0x2, [@TCA_MATCHALL_ACT={0x128c, 0x2, [@m_ife={0xa0, 0x1b, 0x0, 0x0, {{0x8}, {0x68, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xf68, 0x1, 0x4, 0xa, 0xfffeffff}}}, @TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_SMAC={0xa, 0x4, @link_local}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_TYPE={0x6, 0x5, 0x7fff}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x2, 0xc167, 0xffffffffffffffff, 0x9, 0xfffffe01}}}]}, {0x11, 0x6, "0edb1d845c1a8e3bddea6932fd"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ct={0x103c, 0x6, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast1}]}, {0x1004, 0x6, "33ed4b210ef12eeec997add6b9c222259da73230307e227f532d2bf58a9c63e55ae51c7bda0baba79561781b5bb31d51bc43eb93b2087bad772df7c4cad11ff1e71554ad46869f2b5019bc44900c96c7c2eaf9f756b3d4c94c46ed8c3e45c744f30337659b37fd5ddac56ae282d4f78cd3aeb01f81101c1c53f4ffc5b20102c4c888d89f1957ec5976517bcff917606bdecf3682b64afe10399e6af44957d9d8df3a0675eeff8d8c397232cc21c61d560af26208754087729fbe3362a3cdafd3604b7bcecc2b0407e85a254cf65d6ee9f92136fbc87a3793f1c5485985aa1b56970950ad5be63c03a726b76c928e3941b205202c14961ae88d89e9ee7162ea8ff56682cb130825ef05ad571ae398c31568e256487b021ba603f131c596eeab10b5b36d59bb4c9c57545d5e5fb8887f150b20e5326ec7e7288b095a484376430b9ca73991e5dcdd7bddc31206d5d1a625da2e93f7fbc261ea6f47fa509a4e49c918a2167b9178cfab7ded2762b36181b5a319726237c9ca15a3e62e61c1c69effc69cf39599cac47e0a1669f2e9e8f200fce08442782e126d7b832f268d557af6097bff7057d855e5c3792d32ea329ca8dc5d680ad8238967c9559e9f0b1973df77eb10a6d2e43b11ffd9b49c3b2d1ef0a553bdd7b5646ce1783f7b187ceb05ad4a5b36f3eb2e909db4ab4280a816f3371a5661bf309bec483c14463fb8b4bf56cbeb198f11a2133e89e371f7fc4c806feb10f4bea9fd7158ec59c29a01270dad2a77bd068f226b15bde43e892d5947247a0fd8a83f5130b621ffcd8850c1b3a411b7d95e13c3989d00ffe68cde8ef5455783d997d8a830d2c369eb309d3c2cd913254fa2e929b02b821c1db313bd74e7704ad246f9b4f823d9a8e3b2fe1647dc9abf944d6de3715f761b018a14de175a43b130a69d14783cab02da33c408d9da15508ecac8175a628637c8c033241c3de0027356242ba1a12cb0066b77b1768fab13c20442d581632d3438217403a5468d270b91b7ee008f05fe9e679e3df1e7787df2d72ea1bde233f40f7430dc57e47c81dded3ee93eca3c1ea08cd782efd27221cc4fbfbe2826ba6fe06705d50bca482ef48fd09815b3fcbd4514c4ab1fe0bb66dfc1e9ae045ab312a6b9f76f1106ce60738580c7b55dda053dc33448afde2dcbbc338e7c55d8dcd96c60178a0365aa31e3edf52eac2527e9ed57efc91debabda4feca0fe97357f1a83cec9615294bc6a6ecba405d0b41cb4e1b4a2becd2a9adea48d93960c4c8137089b3a7e2c52fc80f20314540bfc69d164440158e9b3017c4315827b9055ffbd08af046a2eb408a8488a8d2a02c9a98088620f7cee35dff77e04cff4d71e8f5313b9cdf96619a91e75face0ceb244a5c96f9e813026ce281bda45c7b6c0ba56ef0884f903eedc8fdc06b06400f3966621b9ccaabd3605f7cf235c593ce014469518abe732acb2fdb2ba4724825f27b590fec8078b482b659d5c6730caa148cb0598041e39cc533793d9525568f7d9a2e2a22a4fc1d5c6105545eb411646a091d86e6da2780ca358e8bedcf7bc492ec23182414d6e0cf51c4c1f490086c350998e0e9a46f3808fba098f8e91156838f42b485f5d60e7c0c7970fded101a8d985b3d0f0deae347397286e4dfc34c2d4c4ebf595ded223d09d5de06c6adf20bfb4f5e42d3f69d4137da141bbdb34d54bfeaeea6ec314441d9584b31b43e5584e6c7349b2083635e80b23e78b8c818b0c6720511d015d601d93e6be3de3f6b62404be6aad7006d461e13275ab9d5b8180d80a2b590296a533e56c8888360a395712e234ec0e7e8b463d2d317616634fab24ad5c83b3403d6dff2df6d79f4ab5326b37a84ef26bf42a9c1ea8cb4749baf132b18f7be33ca154226506c37e238c271a9a35afffce19ade3ff29247f2dba189a9a95d68c9faf3eb02dd4aacf7a17e01cc8a1ef91fa129fe4553918da5bb68f34eaca595c450f46fdb6182a7ee6c0a9635fbacf507dddddd80fff1c5a36df593d51e7257bdc81013f6a61560349b2906b8aed6e36152cd6fedc3d43472d319f5e9a74d0bf0e2491b86c6b41955e8cc6e43b8b8083ec600ab4723f03684f27238c87bd75aedaefe3c243fd10ec41499e7cf0e3f8ffc67d382cc418037e93bd433a490e802c1b46fc36128aad6492bb7d6162fa71fbfdd73fc86e055b2852a4c16f99032cbae1cc8abe1d7a20b3885c34ec503a3c2a24eacf455edad7a6418f5afbdac6297f292a2c366654708217f401e04b36887fc219212029156ad461c9e258d466d05d35c4116d074b72616f3200ada3367d1939529ce17a65092d2e91dd810b80a97ada15782d30bc79d38ba48194ccfee883289846dad7086d8366c0738c058a0a912633fe231deb302290e761219bbf99ad888fe9f9ee4759124c6884c1edcc3adc430a39130e253dca0a8dcb1d6d24bbd44f9dde9b47fb0c670d9780f23c8ae8f17bbd37a1b45110051128acd76d788c13d35e771c3081f955bf261e8a6286c2db23971a961d2082d2af5372492e663dea002eb49d77ce65d239deaa2c5bd1cd86301b7cb47b79493080a10134b95b1b62f0d9c7aea59906a23e84c3654d7d4b898a327eb5f38cbece5c75841966783630438b0b5ebc11e1cc0398dc0c0b94492f2505fe9da8b15b750dc8dcc49db0754ee87bf14eae7d51e5a11a66ae0a36f9cd469751cad8520443e2510d05394a83156ef4b196d60c03c39e7ce7331438e225347ccabbd19a76911f9deb1dc1b589c8aad417ed5c426a5deca971fbc7723c394cb74007de8906c33a3c854d73cd6e34eed2fe9e5c270f998099b2b5e7b68100e3869b94b37279f327a6fad0bd0beb66cf498537a0d0ab56d46a660ece82f468a4d48de17d968533185f81a977d0bcd8080a85f6c35077b0043ea20cbe0f254c0ea1e72108b963c46f00c2d5b7dc55a9e64acffee37ee19867a42d88e22ef9f642d4ac0babc68557fbdd01b449467d0206c26f32ce06fb528bafafdd17e6a451773fb11de959768477810a3f067d9036f654ce6ca303e9ae19df3865d7ba7b670b633a1eb8cf30da41e5f6c6e836512ea815eca095bff855d33d4cd7db62b9ac4f8b3b17fb468e1bb7906d22799cb8b43e559cf3d14c7ed85af1f6bf749212bf9cbc312f38cea3c99fed571532348b758be998ba7cd7a6255507cd90de1d38384a66f02f4ad60a8b4e022e8fb4d039a9a92a51629d20f5d0b3ab33006ac79d119acd7ca322d0f34c3e459bf1ce58207ce88ece6c38c6b8d1ab9d217f75b2ad0fe2312d942c012a823ddf4c0f3179e364e9ed4d3f2c1510615beff30f60a0cdd1571dfc84500383f2b1148b9af17e42cd44c9e0ec9d951c447e0a67744b1c11a09921587c6340e99aa60de8de4345d0a4702bdd28ec5f3ba06311bd5600c403d052730939e5ec447a4f1b03e1c0e32d6c30d311dfa7cf616f6f154b343423cfeb6116cbe02d547e54cb6756a35001930d275ae9e739ed0291b493ac68b6b2bbddba3cf345b52cb17c9137c6846fe9e0fb2b9dfaef9c9ab454d4068b515c3c01d20cdda4711c712b8876521cf6db5132a73d0c0dc63b4e999908354532b896f57e1663e6330d03b2057e9eb8f4b5e49047e5b2bac8f58d3eeff5a04153740a817d342896acf53f89e31e30ea954cd3e79bd2d0cf89cb2baaab1bf08533c5b28ac6fb7581f0a19618481856c0b00b4c079d1aec559d54fb5a686d27235a1df5d6e7a1d2bb5e7312d834940fa3df44f7e419ab2f181bccdaf0edd9481aa6dd6891ef46575ce5d24013aab135f76522667dea1b1261fcb8c784bc2e7ca3f610bae96040eceebd963d175d4c60c9948ab125c6adc05999e728a70a047b346e89f4630a4ce878d340a0618a12bec2a2e656f9b222789996599ecacb5bc9adae4eeb40fc6e55acb3aecd75063adacd7397ad6aa9e7e98e4a2114d70ec5c339e859950d72327813f91cb96a51396557bedf615b23d3b367b77f7bdc1d07655e3d96c8942d0426d1e3979956decd4cc58397ff701d56cce313749b64defadbc1c8b2851c3202d3001a5fc5b6f8bd3a704a03ff6c23f15ce81f11a776cbe35b572b77a85da25a978f786e584788adf918e1a24e62cf76704ee4252bf473d1b58f2981f207d65ad8b3342ce75d3ecd25575c20b0dd7bdc8396890af2b17f8ab4455815f037c50807a6b1f03cca45c0aa07a57453882e3a31c97c52b2719567a3d504a09c51cef7f63cbcdac0c34d07fd4977b46aa8d3362a0155228c50d4abc004d376ea274c352bb27f82ae0919e66fbb6e916c4781cf80355473103cd41b861ef1975798cbc0a3c9ab9eaf6992661c7689f9ec9224cd1c6f5dd62f4b2ee4d5de1e719b3f0560c7091cd420f87d44cdf9be1787c3cfcaff067e8e5bfe3ad558ae11bf99c17cfafb3dff84a023eb3117c29d29e52c593e00993b68f96ecf2e027d38e0f96d7297d78fe512d3bcf56a9c500d0007e0435515507505ad383d38ef5c9cec33bb96e81d1d3423af1f02a4cc5acbfd698ddab72a528e6fd792793f52591d0eab87c8e15e84381f133ac9c64b6450941d8d52a16d950bbd4a95276ce3f4259b5b4b3a00f5904c9f2af715951b832a0c94b60cfe10120997dbbe9c95229416e04649ff3a831fe3a53627120a93353749e4d4426ea7186b47075a27968a55dc197adc986ebe3dcb919a7d8944e51a99a2cd2e468c2a4db0c445a96e0daa8b008e5ce6ef1d35efbffe37a96dddb788b4656b5d618dfa5d62bbaefc4446e26c38a96874222567b2a54bf352291592dc35cf2a43b96679456f045baee9ae7af01c3227676ec151f9a5f4c34a982485b15caa3c2d3135ff8f0f60eef0b46ab8d9e6c5a434e46a36f8f81e6c7c0589fe62f49c6c511263db2091df888e19de66950d5109ab90adb734b24426c05fa3bf9c5d1c7acf8915c96da5ef95ef1e251d76dbf8f1bfe7ea30e60353f4d3332085d5a6740e1ac1aa5fd9b578839ec8db2435151c146b00d5b1444ef0f51a7bb1fc7ec4d7bdb21682c10c1ae656a5b1c65feb4b2771a9ec4a05591898014d1ad19e3fda2fa1a916ca382a808e032fd53d19f9cb36048c164cc8d728718782b16b57224f6b27301d092e9b123c5f1c452de28affae8cb7928d3079e000c4b8d2a3f250fd94e0fa43b25acc25c588c77dbf2494639d67e6146d3014d40e7dfe150624f4fa08d45c347b20afcfc54fe23f7df29422f7e9418e084f0c6330596c45825476f17e9963ffe370a577440ca7416e2800229e6dd95c0da1cab541f363cf21a103bef28d52d99146f29dabb2e5fe5220f87d5689fd5750a5be70899c8b59ba751a86e3e93514fd4aa5eba08c320c228d12b1ea3fa502dec793fd548796439525e0327ea9ef123b383fb416836e49de1b098d605f76a36507092b3e11207c0d2aa08f58b4d45b49ef0116632d28ba0ed5c3cb257adbaa0c5a74b9bb7518c4f0b034065fec017a366ec27ef4201427d40f7e0285a5266aa019023048636126e85319d4e472cf2639a59bb0e75afc5f6d09ce6a78717968f1e0165dc033021c52c9be4730cbae723eaae0e929b7ebfbbf81258356efb3696a6ad09e077eadcfe706b7099e454acf8865a1b8022cada337ee8d1059f2cb8967a625f17aa635bce43a6ddf4cd2174fc54300df10e0dd123a21bd45d669ec242b9afce760f64b0a74037d92a973cb2346efb51f6f7a40e612845be02b18cdaf4bf632c4582c91bc0a9571af1e4b4208ee0f696385d2a164ba2a33413c1a3a9cd96fe"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_gact={0x10c, 0xd, 0x0, 0x0, {{0x9}, {0x88, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x0, 0x10000000, 0xff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x10001, 0x3, 0x10001, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1e97, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x89e, 0x1, 0x8, 0xb6d0, 0x65c}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x160f, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x6, 0x20000000, 0x10000, 0xa}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1577}}]}, {0x5c, 0x6, "beb01c3625342e578cbcfc33a8975da799f18b12ff17d86c0ff6dffd41ab8001cf7975faaa8b4ab56f9a1d305cde935ce9ef3dbe3cc0d9626b0d52532f1e7ceafe58739422b4336754c76e9ba93faea72b62d9a09321b92f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ct={0xa0, 0x1e, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0x31}}, @TCA_CT_ZONE={0x6, 0x4, 0x1ff}]}, {0x66, 0x6, "c1979a508ff6a42d4d05d37185a0d84c78284d45d46b0d45635d0e1acd59a35c5705e4a9c2ecc46dac8557c118d9bb32d0d691a5c6b73f354938abd386e0a819c1e8c4e76be9fbfcec6d5a5252f50d340d7390ab5645cb272a5dd9c08d225697230c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0xffff}}]}}]}, 0x2f44}, 0x1, 0x0, 0x0, 0x404c040}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRESDEC=r1, @ANYRESHEX], 0x44}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 3m14.244571569s ago: executing program 3 (id=2383): syz_emit_ethernet(0x82, &(0x7f00000006c0)={@broadcast, @random="6c7621d7cc94", @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x48, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @empty, @private1, [@hopopts={0x11}], "fafb17c133d11e591c2199cf1fae5505"}}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000027000100f9ff0700fcdbdf2506000000ea3755db8c8ae267858ced1e13b6a0ee72f02280cf0c5c814ca5a114da64"], 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008084) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000240)=0xa10c, 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x2}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000180)={r3, 0x2}, &(0x7f00000001c0)=0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000c40)=@newqdisc={0x8c, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x21, [], 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xfffa]}}]}}]}, 0x8c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="70020000100001002bbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) socket(0x5, 0x800, 0x5c57) 2m58.4969978s ago: executing program 32 (id=2383): syz_emit_ethernet(0x82, &(0x7f00000006c0)={@broadcast, @random="6c7621d7cc94", @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x48, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @empty, @private1, [@hopopts={0x11}], "fafb17c133d11e591c2199cf1fae5505"}}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000027000100f9ff0700fcdbdf2506000000ea3755db8c8ae267858ced1e13b6a0ee72f02280cf0c5c814ca5a114da64"], 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008084) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000240)=0xa10c, 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x2}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000180)={r3, 0x2}, &(0x7f00000001c0)=0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000c40)=@newqdisc={0x8c, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x21, [], 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xfffa]}}]}}]}, 0x8c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="70020000100001002bbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) socket(0x5, 0x800, 0x5c57) 2m28.715072529s ago: executing program 2 (id=2653): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000050e8850000007000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)={0x110, 0x14, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@nested={0xff, 0x4e, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @typed={0x14, 0x2001, 0x0, 0x0, @ipv6=@empty}, @generic="2a725624d55e18f54ca5798d3fe7955ef9868c011de6a6d4494d7aba163930e7a6d17e0b2db61f06be12a8fe12bf5df24b2807a60c94c81f539deb8a1f987eb7669e1395c2ce8f7c2854902221ce978006451bd593aa73c50e0dfd544fd4fa321cbe1ddd38f2dfb0cec37543dac9e03b4dc38a9d937e23023ab86a8ce5f7a6d9772d2c9b91825cd6f77be8203cbe17d83dbb0590b1ef553211edef00ead1ebbe1b58e5b323435a913a2e5ce557c4ec021c723d2022c694102308a8fb6114ab4d007089b6a2816f689a565d4e70637725b2ff73", @typed={0xc, 0xe9, 0x0, 0x0, @u64=0x7}]}]}, 0x110}], 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000006800010000000000f0ff000c0000000500000000000ac7161a0ed7c1afff2000"], 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) mkdirat$cgroup(r4, &(0x7f00000000c0)='syz1\x00', 0x1ff) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x5, "41b57012b47bc8e8d84d9c5998b300"}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf, 0x8, 0x1a95, 0x88ad, 0x2, 0x7, 0x2752}}, {0x4}}]}]}, 0x6c}}, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a0010000000", 0x28}, {&(0x7f0000000000)="11c9064268e9", 0x6}], 0x2}, 0x40) (async) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001300010000000002ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000000000000005002100000000001413350064756d6d79300000000000004b9b0000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) write$cgroup_freezer_state(r5, &(0x7f0000000040)='FROZEN\x00', 0x7) r11 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto(r11, &(0x7f0000000500)="3c538797ed3fcf9d06bc603f6cc5f9aeeddf8d8b8237b4c41366b86792d2b722e5dcf050", 0x24, 0x0, 0x0, 0x0) connect$l2tp6(r11, &(0x7f0000000200)={0xa, 0x0, 0x7, @empty, 0x100, 0x3}, 0x20) (async) r12 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$inet_opts(r12, 0x0, 0xd, 0x0, 0x0) (async) r13 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r13, 0x0, 0x2e, &(0x7f0000000340)={0x0, {{0x2, 0xfffe, @multicast1}}, {{0x2, 0x4e21, @broadcast}}}, 0x108) (async) sendfile(r5, r5, 0x0, 0x9) 2m28.107078496s ago: executing program 2 (id=2658): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x90, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8001}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7ff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x90}, 0x1, 0x0, 0x0, 0x40004}, 0x20000080) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRES32=r0], 0xfffffffffffffde6) 2m27.972749492s ago: executing program 2 (id=2660): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(r2) (async) listen(r1, 0x5) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f00000002c0)={0x0, @sco, @nfc={0x27, 0x0, 0xffffffffffffffff, 0x2}, @qipcrtr={0x2a, 0x1, 0xfffffffe}, 0x5, 0x0, 0x0, 0x0, 0x3ff, &(0x7f0000000200)='veth1_virt_wifi\x00', 0xc28, 0x732, 0x8}) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000680)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], 0xa3) r3 = socket(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x1e, 0x4, 0x0) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r6, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/211, 0xd3}], 0x1}}], 0x1, 0x0, 0x0) connect$can_bcm(r6, &(0x7f0000000300), 0x10) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYRESHEX=r5, @ANYBLOB="6dbc9e738d1456a4f11b732287b62032cdb52f81ca7f460fd1eb076efecef7437428cd0a50f0d1c3deccdcaaca943ec0ef65ef6992d1b1c0c3d09a54ae5515f96676a0cfd6b094feca5fb45075cd9a638e470596ee523af44f2f080a047fbb46879389bbef15c5a70fa6d6ded01cf77c4852fb513ea427a9267a2a9d761018"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) (async) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r8, &(0x7f0000000240)=ANY=[@ANYBLOB="2d4e65742000000000000000000000ffb33161340e897b78b420449f2cbd5ec1eaece8b4d50ba22d537d961c9b6a40c99090f252920a2a9d4cab8c26af40d14b0dfad55187b7c688c802fc9cbd712e37f82806da8f58cce7fafc8e72f60fb410151f2d09f56f039cd42572fcfe78"], 0x5) ioctl$FS_IOC_RESVSP(r8, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00001f100e1fff26bd0858252e000000000000", @ANYRES32=0x0, @ANYBLOB="48310600003f000008001f0005000000140012800b000100627269646765000004000280"], 0x3c}, 0x1, 0x0, 0x0, 0x20048001}, 0x40000) (async) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x1010, 0xffffffffffffffff, 0xffffd000) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)="89", 0x1}], 0x1}}], 0x1, 0x20000000) (async) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000080), 0x4) 2m26.837852961s ago: executing program 2 (id=2670): syz_emit_ethernet(0x32, &(0x7f00000007c0)={@random="e90c610faca2", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x4e21, 0xfffe, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x1}}}}}}}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@empty, @in=@private=0xa010101, 0x0, 0x3, 0xffff, 0x0, 0x2}, {0x9, 0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x1}, 0x2, 0x0, 0x1, 0x0, 0x6, 0x1}, {{@in=@remote, 0x0, 0x6c}, 0x0, @in6=@local, 0x0, 0x0, 0x3, 0x0, 0x0, 0x400000, 0xffffffff}}, 0xe8) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="4142002100000000030076657468305f746f5f687372000000000a0001007f809a43e36f00000000"], 0x40}}, 0x4080) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000400), 0xffffffffffffffff) sendto$inet(0xffffffffffffffff, &(0x7f0000000140)="0986ee2cdacf1874955fbfd426cc959af635dac6cc9e1827be0dfb8bf4f83e0fd41a02995c8e2a3249dac5bd", 0x2c, 0x4000, &(0x7f0000000180)={0x2, 0x4e23, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x7, 0xfff2}, {0xa, 0xffff}, {0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xd7, 0xd782, 0x8, 0x704, 0x4}, 0xe}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000000) write$tun(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="0001080006aa"], 0x1c) 2m26.096520116s ago: executing program 2 (id=2676): r0 = socket$inet(0x2, 0x1, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x4, 0x0, [0x4, 0x80, 0x6, 0xffffffffffffffff, 0xfffffffffffffff7, 0xd], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x78) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x0, 'rose0\x00', {0x2}, 0x80c}) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x290, 0x0, 0x5802, 0x294, 0x0, 0x294, 0x1c0, 0x378, 0x378, 0x1c0, 0x378, 0x3, 0x0, {[{{@ipv6={@private2, @ipv4={'\x00', '\xff\xff', @empty}, [0x0, 0xffffffff, 0xff000000], [0xffffff00, 0xffffff00, 0xffffff00, 0xff], 'rose0\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x3b, 0x6, 0x1, 0x24}, 0x0, 0xa8, 0xd0, 0x52020000}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3, 0xab9, 0x0, '\x00', {0xfff}}}}], {{'\x00', 0x0, 0xa8, 0x1c0}, {0x28}}}}, 0x2f0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000940)=ANY=[], 0x310) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000800)={0x2, {{0x2, 0x2, @multicast2}}, 0x1, 0x1, [{{0x2, 0x4e21, @empty}}]}, 0x110) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000e00)={0x80, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x4, 0x19}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0x1e, 0x34, @random="1cdd0b4d31c5f59e85734a2bdf441a0aead7fcdc32bb9f88018f"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}]}, 0x80}, 0x1, 0x0, 0x0, 0x860}, 0x4000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000000)={'wlan1\x00', &(0x7f00000004c0)=@ethtool_ringparam={0x10, 0xfffffff8, 0x5, 0x1, 0xfffffff8, 0x8, 0x1, 0x3, 0x9}}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4000054}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003f000500010000000000000001010000000000000f0001006f76732d7302082100000000080002"], 0x30}}, 0x0) close(r4) r9 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r9, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r9, &(0x7f0000002100)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8d}, 0x1c) sendmmsg$inet6(r9, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000002500)={'gretap0\x00', &(0x7f0000002440)={'syztnl0\x00', 0x0, 0x40, 0x1, 0x0, 0x4, {{0x13, 0x4, 0x0, 0x3f, 0x4c, 0x67, 0x0, 0x40, 0x29, 0x0, @multicast1, @broadcast, {[@timestamp_addr={0x44, 0xc, 0xc4, 0x1, 0xc, [{@private=0xa0100fc, 0x3ff}]}, @timestamp_addr={0x44, 0xc, 0x35, 0x1, 0xc, [{@private=0xa010100}]}, @cipso={0x86, 0x16, 0xffffffffffffffff, [{0x5, 0x10, "a8b66474fdd320d39498454bf8b1"}]}, @generic={0x94, 0x7, "4e30168766"}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x40}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xf}, 0x94) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) 2m25.243054525s ago: executing program 2 (id=2680): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000007110180000000000de000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x27, 0x1, 0x7fff9, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008084) 2m9.593220804s ago: executing program 33 (id=2680): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000007110180000000000de000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x27, 0x1, 0x7fff9, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008084) 14.092473318s ago: executing program 1 (id=3293): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x6, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x6, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000010001000006"], 0x1c}}, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000010001000006"], 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000ffe91000010400070200000000020000", @ANYRES32=0x0, @ANYBLOB="0382000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000380)=0x6e, 0x0) (async) accept4$unix(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000380)=0x6e, 0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) write$nci(r4, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r4, &(0x7f0000000180)=ANY=[@ANYBLOB='@A\t', @ANYRES32=r7], 0xe) 13.25817745s ago: executing program 1 (id=3297): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x1a, 0x4, 0x9) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x30, 0x10, 0x437, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40c89}, [@IFLA_TARGET_NETNSID={0x8}, @IFLA_NET_NS_FD={0x8}]}, 0x30}}, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x81) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000080)={0x0, 0xde0f}, &(0x7f0000000100)=0x8) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004d00004800010000010690780a010102ac1414aa070c0576800000000000000144140b01ac1e000100000000ac1414aa0000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ebf1000090780000"], 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000001c0)=0x0) syz_open_procfs$namespace(r4, &(0x7f0000000240)='ns/pid\x00') sendmmsg$inet6(r2, &(0x7f0000001fc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f40)=ANY=[@ANYBLOB="24000000000000000000000000850000fe00000000000000001000aa", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x28}}], 0x2, 0x4000000) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x2, @empty, 0x3}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f00000008c0)={r2, &(0x7f00000007c0)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x4000, &(0x7f0000000800)={@_ha_fsid={[0x43f, 0x3]}, {0x4, 0x4, 0x40, 0x7fff}}, 0x2, &(0x7f0000000840)={@_ha_fsid}, &(0x7f0000000880)=0x8}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004f00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r10, 0x8, &(0x7f00000000c0)={0x9, 0x5}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r10, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r11, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000900)={0x0, 0xc, 0x8}, 0xc) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x780, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x50) r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000009c0)={0x0, 0x7f, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1c, 0x23, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000005000000000000006400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000829302000400000018500000050000000000000000000000b7080000000000007b8af8ff00000000b7080000008000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000000000000000000018180000", @ANYRES32, @ANYBLOB="0000000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x7fff, 0x58, &(0x7f0000000540)=""/88, 0x41100, 0x2, '\x00', 0x0, @fallback=0x3d, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x5, 0x0, 0x80, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000a00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, r7, r8, r9, r12, r13, r14], 0x0, 0x10, 0x6b}, 0x94) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f0000000080)={r6}, 0x8) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="fbe5f08e3f", 0x5}], 0x1) 12.21278332s ago: executing program 1 (id=3301): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x0, 0x4, 0x0, 0x0, 0xfffffffc}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffffb, 0x0, 0xfffffffc, 0x1000}}]}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x6}]}}}]}, 0x70}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20040000, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x1}, 0x1c) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000940), r0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x34, r5, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000004}, 0x24040810) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@updpolicy={0x290, 0x19, 0x1, 0x0, 0x25dfdbff, {{@in=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0xfffffffffffffffc}, {0x0, 0x1400000004, 0x800009d8}, 0x0, 0xfffffffe, 0x1, 0x0, 0x0, 0x2}, [@tmpl={0x4}, @iptfs_drop_time={0x8, 0x24, 0xd0d}, @migrate={0x1cc, 0x11, [{@in=@loopback, @in=@local, @in6=@private1, @in6=@private2, 0x32, 0x2, 0x0, 0x34ff, 0xa, 0xa}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@remote, @in6=@private1, @in6=@private1, 0x3c, 0x1, 0x0, 0x0, 0x2, 0xa}, {@in=@empty, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@remote, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xe}}, 0xff, 0x0, 0x0, 0x3503, 0x2, 0x2}, {@in=@multicast2, @in=@multicast2, @in6=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x32, 0x3, 0x0, 0x0, 0x2, 0x2}, {@in=@local, @in=@multicast2, @in=@private=0xa010101, @in6=@private1, 0x8cadaf0c9216cda1, 0x3, 0x0, 0x3506, 0x2, 0x2}, {@in6=@loopback, @in=@empty, @in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2b, 0x1, 0x0, 0x3503, 0x2, 0x2}]}]}, 0x290}, 0x1, 0x0, 0x0, 0x64040081}, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r7) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r8, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e0"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) 7.479298927s ago: executing program 1 (id=3306): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) (async) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fbdbdf250100000017000100", @ANYRES32=r3, @ANYBLOB="400002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r1, @ANYBLOB], 0x5c}, 0x1, 0x400000000000000, 0x0, 0x10}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYRES32=r0, @ANYRES16=r5, @ANYBLOB="050000000000fcdbdf214400000008000300", @ANYBLOB="65df1d125e4922316a29564b7eadb28ac87bbdc9c7c2a63651d83d0e1f600eeda2ceb8d593c88baa6a87872208dc3babc9a5fe828082e72a53c4", @ANYBLOB="79c8b84114e472d6aee2ebbeceab5fc432b7d8b5bf995dee2a0470f80821ba18983db9bc4df74a33cb71b4006699a92adbfa6525f968394f7c2b3c4fb2c370d4ec610bd8e193498446476574c5fe4f11698e707314d5fa91249ed45851a7591369c7353812a636b43209be9ad25dfb103d500457a3fd9e4187"], 0x30}, 0x1, 0x0, 0x0, 0x20004044}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r3, @ANYRES16, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r9, @ANYBLOB="82afd087de45d4c273b7e406d79d0d00000000c4501ba52b"], 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r9, @ANYBLOB="050034005d0000000a002a00680406010000000000000000bd1cd61f6a7600000800420001000000080035000300000064de1fc797a4cde8f355c57d82d53d8bfa7f7e7a2f9efcb189de28fdafa8"], 0x4c}, 0x1, 0x0, 0x0, 0x2008010}, 0x2400c844) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r11, 0x0, r13, 0x0, 0xf3a, 0x0) (async) close(r12) (async) write(r10, 0x0, 0x0) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x8010, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000003, 0x32, 0xffffffffffffffff, 0x0) (async) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x20, 0x5, 0x28, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r14, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r15}, 0xc) r16 = socket$nl_route(0x10, 0x3, 0x0) write(r16, &(0x7f00000006c0)="300000001c00010401000000000000002d000000010000008000000105000100260000000a0002000000000000000000300000001c00010401000000000000002d000000010000008000000105000100270000000a0002000000000000000000300000001d00010401000000000000002d000000010000008000000105000100280000000a000200000000000000000030", 0x91) (async) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r5, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40400}, 0x8000) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) 6.775354079s ago: executing program 4 (id=3310): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32, @ANYBLOB="10005e01"], 0x2c}}, 0x800) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='memory.swap.events\x00', 0x0, 0x0) sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x2c, r3, 0xc, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_FAMILY={0x5, 0xd, 0x28}, @GTPA_NET_NS_FD={0x8, 0x7, r4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8005}, 0x1) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x12, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5000000010000104020006000000000000000000", @ANYRES32=0x0, @ANYBLOB="2825020000080000280012800c0001006d6163766c616e00180002800a000900000000ff00000000080007000100000008000500", @ANYRES32=r6], 0x50}}, 0x800) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) bind(r9, &(0x7f0000000080)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) syz_emit_ethernet(0x6c, &(0x7f0000000000)={@remote, @broadcast, @void, {@mpls_uc={0x8847, {[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x2, 0x5e, 0x67, 0x0, 0xb, 0x2f, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xb}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0x4, 0x90a, 0xffff]}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x0, {{0x2, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x79}, 0x1, {0x6}}}, {0x8, 0x22eb, 0x2, {{0x8, 0x2, 0x9, 0x0, 0x1, 0x2, 0x0, 0xca}, 0x2, {0xe, 0x0, 0x1, 0x12, 0x1, 0x0, 0x1, 0x1}}}}}}}}}, 0x0) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x4000000) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, 0x0, 0x8050) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x8004) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000004c0)={0x0, 0x0, 0x5, 0x7ff, @vifc_lcl_addr=@local, @multicast1}, 0x10) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r10, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@remote, @multicast1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 6.706460213s ago: executing program 1 (id=3311): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000180), r0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)={0x68, r1, 0x5, 0x0, 0x0, {0x1, 0x1}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x68}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000003c0)=ANY=[@ANYBLOB="8c00000034661a0d54cef5", @ANYRES16=r1, @ANYBLOB="050000000000000000000501000030000180060001000a000000060002001100000014000300fe8000000000000000000000000000aa060004001f9000004800028014000100fc000000000000000000000000000001060002001f900000080003000300000008000400010000000800050000000000080006000000000006000b000a000000"], 0x8c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$kcm(0x2a, 0x2, 0x0) socket$kcm(0x2a, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2c, 0x0, 0x1, 0x401, 0x21, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8d7f1b7f2655125c}, 0x0) socket$alg(0x26, 0x5, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0x10, &(0x7f0000000700)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0], 0x0, 0x200023, &(0x7f00000000c0)=[{}, {}, {}, {}], 0x20, 0xfe57, &(0x7f00000001c0), &(0x7f0000000140), 0x8, 0x9b, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r3, 0x0, 0x2, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x8, 0x0, &(0x7f0000000400)) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000000314010000000000000000002500020073797a5f6465766963655f6e616d655f33325f63686172735f31323334353637000000000800410073697700070033006c6f0000"], 0x48}}, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r6) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x8) ioctl$PPPIOCGNPMODE(r6, 0xc008744c, 0x0) 6.429578481s ago: executing program 0 (id=3312): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x90) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan4\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r5, @ANYBLOB="3f9d00000000fedbdf251700000008000300", @ANYRES32=r6, @ANYBLOB="a000308014000400403a050c5baee2004ef2b6d713459a7a8000018008000100000000001c00038008000200020000000600010002000000060003005d55000005000200030000003f00038006000300a3aa0000080002000000000006000100ffff000008000200010000000800020002000000060003000000000006000100ffff00000c000500010000000000000008000400010000000500"], 0xbc}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)={0x170, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x84, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "44ea9c269b6e5148cb4ec4a576f8760935e9ed85a3f151be5e462bc2f25faec5"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "02f519fed1958aa8aa657aaba6d13058"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "18e62d705c3058cc092c320243a0bcfb740def81dd13c536b08420d76547e42b"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "c4249b2e171811a9bf32c68a062f98151760474f127d34f70c0f61aeae4986e2"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_KEY={0xb0, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "adf73ff3e6eb9e469f2cf79488da155f28343e1560775e852f8dccf7b625de1d"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xf}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "c07964df9fb98eed7b3109dff1c279eb"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "420df1da5176dd0d6fc8cf6366af91a62d32595e884c8e4da33cc1659eb1d00b"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "28d4cb7cae5d18f4cb212d9b6d61f95c"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "217731f667a84606a07e427f323439e60e28f486735cd7f564e09bad97d1125d"}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x1b, &(0x7f0000000040)=0xa0d9, 0x4) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010025bd7000ffdbdf2500000000", @ANYRES32=r8], 0x20}, 0x1, 0x0, 0x0, 0xc881}, 0x8080) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r10, 0x0, 0x4000000) write$cgroup_int(r10, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="004100000000000014002b8008000100", @ANYBLOB="048f938c88adba5aa5053d5c4084b94c0aa8da563a381ab6d7d2279c98bbcb0a8c478210aa3417", @ANYRES32=r1, @ANYBLOB="340000001000010027bd70000000000000000000"], 0x34}}, 0x4008000) 5.655844601s ago: executing program 0 (id=3315): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018400000040000000000000000000000950000000002000095000000000000009500000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000500000085000000060000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x9}, 0x94) 5.139690737s ago: executing program 0 (id=3316): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x1800) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000700)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f00000001c0)={0x1, 0x3, 0x5, 0x1, {0x0, 0x419, 0x7fffffff, 0x4, 0x1ff}, [0xc, 0x8, 0x100000000]}}, @subvolid=0x7fff}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x19, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008b00000000000000013e110018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014002000b7030000000000108500000086000000bf0900000000000055090100000000009500000000000000ad0a060000000000b500fffffffffff31801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050008008500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x9, 0x1001, &(0x7f0000001cc0)=""/4097, 0x40f00, 0x24}, 0x94) 4.997626105s ago: executing program 5 (id=3318): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x2092) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000004000000000000009aaa000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001d000000850000007d00000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$can_bcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x5, 0x400, 0x0, {0x77359400}, {0x77359400}, {0x0, 0x0, 0x1}, 0x1, @can={{0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "8d416cfa6fc2313e"}}, 0x48}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x2092) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) connect$can_bcm(r2, &(0x7f0000000000), 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000004000000000000009aaa000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001d000000850000007d00000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$can_bcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x5, 0x400, 0x0, {0x77359400}, {0x77359400}, {0x0, 0x0, 0x1}, 0x1, @can={{0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "8d416cfa6fc2313e"}}, 0x48}}, 0x0) (async) 4.66003323s ago: executing program 6 (id=3319): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x24, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x18000}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r5) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x40, r6, 0x60b, 0x70bd2d, 0x2, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x9}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000000}, 0x4080) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x40, r6, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x24004000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@private}}, &(0x7f0000000540)=0xe8) sendmsg$nl_generic(r3, &(0x7f0000000840)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)=ANY=[@ANYBLOB="500100002500000e26bd7000fbdbdf2505000000d4b34a4cc0da4093e5573e5220389b276f983fa207dbfc9c6522ddf979aaf082007b6238b4417ffe8c2021108ba312613bf67c6a96723520ef6c9f5700dd0dceaf6073c447ec7f61e0216f4e1b7a00640073797a6b616c6c65720000000c00590000000000000000000800b600ba0c000008005a00", @ANYRES32=r2, @ANYBLOB="bd00fa800400c28008001600", @ANYRES32=r7, @ANYBLOB="f2663b54ccc1a73c804c3fd641320f2bfa4a3a4b68b88b9b4b2cc4aa65ce941e7bd56e397f104a8ec4f47cae65619f01d1b68acb70c47ce244bb5b73e1f342ab0d85f385a86379fec0f30085149720f16842acf29ef900adc0209b80803460af99595dfafd00b91b24607dadfe0a9cfbfb413e20227de7185cb5c5e22026274c2fe64fac968c583f095a2e39757430e5ae21837023b4231ac7fc1e4bf8abb0426001d25021b8beb9dafa4d169d000000000000"], 0x150}, 0x1, 0x0, 0x0, 0x2004c094}, 0x27022c6bcfac3ff6) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0x80000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@alu={0x4, 0x1, 0x4, 0x1, 0x4, 0x4}]}, &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) listen(r2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r3) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000880)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, r9, 0x2, 0x70bd23, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1a}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x4004) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r8, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r2}, 0x20) recvmmsg(r2, &(0x7f0000002440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/52, 0x34}], 0x1}, 0x9}, {{&(0x7f0000000b40)=@rc, 0x80, &(0x7f0000002380)=[{&(0x7f0000000bc0)=""/243, 0xf3}, {&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000001e80)=""/171, 0xab}, {&(0x7f0000001f40)=""/86, 0x56}, {&(0x7f0000001fc0)=""/155, 0x9b}, {&(0x7f0000002080)=""/189, 0xbd}, {&(0x7f0000002140)=""/78, 0x4e}, {&(0x7f00000021c0)=""/223, 0xdf}, {&(0x7f00000022c0)=""/154, 0x9a}], 0x9}, 0x4a}], 0x3, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f00000002c0), 0x0, 0x40c0) shutdown(r2, 0x1) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r10, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000820200"/29], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r11}, @ldst={0x1, 0x2, 0x4, 0x0, 0x0, 0x1}]}, &(0x7f0000000d40)='syzkaller\x00', 0x8}, 0x94) ioctl$XFS_IOC_PATH_TO_HANDLE(r11, 0xc0385869, &(0x7f00000001c0)={r10, &(0x7f0000000040)='\x00', 0xc0101, &(0x7f0000000080)={@align=0x8000, {0x2, 0x6, 0xffff3871, 0x7}}, 0xda, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0xb552}) setsockopt$inet_icmp_ICMP_FILTER(r12, 0x1, 0x1, &(0x7f0000000200)={0xc0000000}, 0x4) sendmsg$TIPC_CMD_RESET_LINK_STATS(r10, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x30, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x8010) 4.438551621s ago: executing program 5 (id=3320): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x200}, [@generic={0x81, 0x1, 0x1, 0x64}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8eceb2e30985c02b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x67) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x44}}, 0x0) 4.362423392s ago: executing program 0 (id=3321): socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r1, 0x0, &(0x7f00000004c0)=@tcp6=r0}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x74, r4, {0x4, 0xfff2}, {0xafabc05531515610, 0xd}, {0x8, 0x2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x5, [@float={0x6, 0x0, 0x0, 0x10, 0x4}, @decl_tag={0xe, 0x0, 0x0, 0x11, 0x3, 0x1}, @fwd={0x8}, @typedef={0xc, 0x0, 0x0, 0x8, 0x4}, @struct={0x8, 0x5, 0x0, 0x4, 0x0, 0x10, [{0xa, 0x1, 0x81}, {0x3, 0x5}, {0x8, 0x1, 0xe34b}, {0x4, 0x5, 0x5}, {0x5, 0x5, 0x5}]}]}, {0x0, [0x0, 0x2e, 0x2e]}}, &(0x7f0000000a00)=""/59, 0x99, 0x3b, 0x0, 0x4}, 0x28) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00100000000040000000d89bce79d5ac5cac001f00", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000010000000500"/28], 0x50) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000bc0)=@generic={&(0x7f0000000b80)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xf, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x98c, 0x0, 0x0, 0x0, 0xd}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000880)='GPL\x00', 0x5, 0x3c, &(0x7f00000008c0)=""/60, 0x41000, 0x20, '\x00', r4, 0x0, r5, 0x8, &(0x7f0000000a80)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000ac0)={0x4, 0x7, 0x6, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000c00)=[r6, r7], 0x0, 0x10, 0x5a}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r9, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x3c}, 0x1, 0x0, 0x0, 0x24048044}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)}, 0x4005) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c0007"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x30}, [@alu={0x4, 0x0, 0x9, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f00000002c0)='GPL\x00', 0xf}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x2f, 0xa7, 0x9, 0x1, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x7, 0x80, 0x1, 0x7}}) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.048447594s ago: executing program 4 (id=3322): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000180)=0x20) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$FIOCLEX(r3, 0x5451) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="a8d707260020c7795c3377f400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000fcffffff000000008000000085000000a800000018110000", @ANYRES32=r4, @ANYBLOB="000000f8ffffffb703000008000000b70400000200000085000000a6000000950000000000000000000000000000000000000000000000d7c4da5b428fbfc1a1952827030000000000000000f66583822d69f8f921186ba023d9570c7a8d9c78c848b5fdbe02a4b75ce63cbba11fc63f3defc6edaa6aaa02bd6c5839699f3737c076aee10872c9a3a64fe2fe1e0e9c9895a758f473ef27c9c1f1b4a1095b3e7ad80daddd993a3029d91c623fbc5ffba1564df7ffe44f6164c2e3b4d2bae788a958c72e4d23083b99bb5272a3cee98003e10749c1d0cc6ab954"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x1f, 0x80, 0xcb, r7}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010100}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_LOCAL={0x8, 0x2, @private=0xa010101}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_RT_PRIORITY={0x8, 0x9, 0xffffffff}, @IFA_RT_PRIORITY={0x8, 0x9, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x300) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a18, 0x800, 0x0, 0x4b6ae4f95a5de35b) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) recvmmsg(r8, &(0x7f0000004700)=[{{&(0x7f0000000200)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000b00)=""/206, 0xce}, {&(0x7f0000000c00)=""/61, 0x3d}, {&(0x7f0000000d80)=""/149, 0x95}, {&(0x7f0000000e40)=""/161, 0xa1}, {&(0x7f0000000f00)=""/36, 0x24}, {&(0x7f0000001040)=""/248, 0xf8}, {&(0x7f0000000a00)=""/182, 0xb6}, {&(0x7f0000001240)=""/106, 0x6a}], 0x8, &(0x7f0000001340)=""/7, 0x7}, 0x7}, {{&(0x7f0000001380)=@sco, 0x80, &(0x7f0000002600)=[{&(0x7f0000001400)=""/71, 0x47}, {&(0x7f0000001480)}, {&(0x7f00000014c0)=""/25, 0x19}, {&(0x7f0000002800)=""/218, 0xda}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x5, &(0x7f0000002680)=""/193, 0xc1}, 0x521}, {{&(0x7f0000002780)=@phonet, 0x80, &(0x7f0000004300)=[{&(0x7f0000003300)=""/4096, 0x1000}], 0x1, &(0x7f0000004340)=""/50, 0x32}, 0x47d}, {{&(0x7f0000004380)=@qipcrtr, 0x80, &(0x7f0000004680)=[{&(0x7f0000004400)=""/92, 0x5c}, {&(0x7f0000004480)=""/232, 0xe8}, {&(0x7f0000004580)=""/255, 0xff}], 0x3, &(0x7f00000046c0)=""/50, 0x32}, 0x3}], 0x4, 0x1, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r9) recvmmsg$unix(r10, &(0x7f00000049c0)=[{{&(0x7f0000000580), 0x6e, &(0x7f0000003280)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000001200)=""/23, 0x17}, {&(0x7f0000000680)=""/217, 0xd9}, {&(0x7f0000000780)=""/128, 0x80}, {&(0x7f0000000800)=""/245, 0xf5}, {0x0}, {&(0x7f00000064c0)=""/4103, 0x1007}], 0x7}}, {{0x0, 0x0, &(0x7f0000004800), 0x0, &(0x7f0000004880)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x108}}], 0x2, 0x12060, &(0x7f0000004a40)={0x0, 0x3938700}) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001000)={{r12}, &(0x7f0000000ac0), &(0x7f0000000fc0)}, 0x20) sendmsg$L2TP_CMD_TUNNEL_GET(r9, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\t\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="04002abd7000fedbdf2504000000080019000a01010105001200ec00000006001a004e21000006001c0004000000"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40008) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00'}) socket(0x10, 0x3, 0x0) 3.909370252s ago: executing program 6 (id=3323): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x12}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x90}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4000000}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xed}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xb0}, 0x1, 0x0, 0x0, 0x8890}, 0x24008000) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x3, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004054}, 0x0) 3.782521607s ago: executing program 5 (id=3324): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x17, r2, 0x1, 0x7, 0x6, @local}, 0x14) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="d84b779230835d13dc"], 0x14}}, 0x8000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010100000000000000410000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x16, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r5}, 0xc) getsockname$packet(r1, &(0x7f00000018c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000549b01050000000000c4000007008209", @ANYRES32=r6, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="00000001e000030000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.205200409s ago: executing program 5 (id=3325): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) unshare(0x22020600) (async) unshare(0x24000000) unshare(0x10000000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r2) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000004640)={0x0, 0x0, &(0x7f0000004600)={&(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES32=r3, @ANYRES8=r3], 0x3c}, 0x1, 0x0, 0x0, 0x24008014}, 0x240400c0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) bind$netlink(r7, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r6, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r8, @ANYBLOB="01000000000000002400128009000100626f6e64"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async) r9 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r7, &(0x7f0000000200)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0x0, @mcast1, 0x7}}, 0x24) (async) bind$rxrpc(r9, &(0x7f0000000100)=@in4={0x21, 0x400, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) (async) listen(r9, 0xae) (async) write(0xffffffffffffffff, &(0x7f0000000000)="300000001c00010401000000000000002d000000010000008000000105000100080000000a0002000000000000000000300000001c00010401000000000000002d000000010000008000000105000100090000000a0002000000000000000000300000001c00010401000000000000002d0000000100000080000001050001000a0000000a0002000000000000000000300000001c00010401000000000000002d0000000100000080000001050001000b0000000a0002000000000000000000300000001c00010401000000000000002d0000000100000080000001050001000c0000000a0002000000000000000000300000001c00010401000000000000002d000000010000", 0x107) (async) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000380)=ANY=[@ANYRES32=r2, @ANYBLOB="5e7a746dd735fbdef4929c97fe8959ceba9138896d67add509028500c86957e625007bb2f3290d031e458409b6da89dc93c8bd0037a470050000010000000076b5fc8401b2916502e0d5ac8eda7bbb49f679214c2092df206e3b75a32baa455ad3b61f1820a330bd3838931a8cc92a5c1bcd30f1bb1185eaf068275aa3b5101dc44a058269fff0bcf2dad5f70a38567b261558196368573acf4512cbc3497daeac7db75bd460cd", @ANYRES32=r10, @ANYRESHEX=r3, @ANYRES32=r1, @ANYRESDEC, @ANYRES8=r5], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000000, 0x20010, r10, 0x8a606000) (async) r11 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x34}}}, 0x284, 0xb5, 0xa, 0x3, 0x0, 0x5, 0xfc}, &(0x7f00000001c0)=0x9c) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r12 = socket(0x1, 0x803, 0x2) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 3.121620841s ago: executing program 6 (id=3326): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$l2tp6(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f0000002500)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000700600000000000009000400731168000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x0, 0xfffffffd}, 0x20) (async) connect$l2tp6(r1, &(0x7f0000000200)={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x29}, 0x9, 0xfefffffe}, 0x20) (async) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) (async) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) (async) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) close(r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async, rerun: 32) sendmsg$rds(r2, &(0x7f0000001c00)={&(0x7f0000000280)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001700)=[{&(0x7f0000001540)=""/49, 0x31}, {&(0x7f0000001580)=""/139, 0x8b}, {&(0x7f0000001640)=""/43, 0x2b}, {&(0x7f0000001680)=""/82, 0x52}], 0x4, &(0x7f0000001d00)=[@mask_cswp={0x58, 0x114, 0x9, {{0xfffffff7, 0x7}, &(0x7f0000001740)=0x8000000000000000, &(0x7f0000001780), 0x2, 0x0, 0xf41c, 0xe835, 0x8, 0x9}}, @mask_cswp={0x58, 0x114, 0x9, {{0x947, 0x401}, &(0x7f00000017c0)=0xf53, &(0x7f0000001800)=0x9, 0x400, 0x9, 0xfffffffffffffffd, 0x5, 0x4, 0x8}}, @cswp={0x58, 0x114, 0x7, {{0x3d7d, 0x8}, &(0x7f0000001840)=0xa0000000, &(0x7f0000001880)=0xff9, 0x1, 0x2, 0x1, 0x4, 0x4a, 0x2}}, @cswp={0x58, 0x114, 0x7, {{0x81, 0x6}, &(0x7f0000001c40)=0x2, &(0x7f0000001cc0)=0x5, 0x8, 0x10000, 0x80000001, 0x7, 0x41, 0xffffffffffffffff}}], 0x160, 0x4000004}, 0x20008040) (async, rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d000000040000000200000000000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r4, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r5, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000400)=r2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r6, &(0x7f0000000000), &(0x7f0000000500)=""/216}, 0x20) getsockopt$sock_buf(r1, 0x1, 0x3d, 0x0, &(0x7f0000000100)=0x9) (async, rerun: 64) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0xc0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xa}, 0x1c) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) read(r8, &(0x7f0000000540)=""/4096, 0x1000) (async, rerun: 64) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r9, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) (async) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x8015) 2.545020119s ago: executing program 4 (id=3327): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000100001040000000004000000000069f41932818c3da4e8437c6e39f0f3b6b14abb92580974d27e84a3ffa367af1af1b95158218417c3c865e49fed0b1c8b609887204d0b3de9", @ANYRES32=0x0, @ANYBLOB="0003000000090000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB], 0x44}}, 0x0) (async) unshare(0x8040480) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES32=r3], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r6 = socket(0x40000000015, 0x5, 0x0) r7 = socket(0x28, 0x6, 0x3a) setsockopt$MRT6_INIT(r7, 0x29, 0xc8, &(0x7f0000000100), 0x4) (async) setsockopt$MRT6_TABLE(r7, 0x29, 0xd1, 0x0, 0x0) (async) r8 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x6d91fb6102d8910c, 0x0, 0x0) (async) sendto$inet6(r8, 0x0, 0x0, 0x40000, 0x0, 0x0) (async) bind$bt_hci(r6, &(0x7f0000000040), 0x6) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r9) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)={0x14, r10, 0xe2c40cf0776ef37, 0xfffffffd, 0x0, {0x5}}, 0x14}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'gre0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x7800, 0x7800, 0xffffffbf, 0x8, {{0x19, 0x4, 0x3, 0x28, 0x64, 0x66, 0x0, 0x1, 0x2f, 0x0, @multicast1, @rand_addr=0x64010101, {[@end, @timestamp={0x44, 0x20, 0x23, 0x0, 0xd, [0xfffffffe, 0x8d, 0x5, 0x6b, 0x3, 0x0, 0x4]}, @lsrr={0x83, 0x1b, 0xf0, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @empty, @local, @empty]}, @rr={0x7, 0x13, 0x57, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @remote]}]}}}}}) (async) r11 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) 2.544487448s ago: executing program 0 (id=3328): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xc0041, 0x0) socket$kcm(0x1e, 0x5, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) socket$kcm(0x1e, 0x9, 0x0) socket$kcm(0x1e, 0x4, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8946, &(0x7f0000000040)={'ipvlan1\x00', @random='\x00\x00\x00\x00\x00 '}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0x90) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x8, 0x3, 0x3a0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, [0x0, 0x0, 0x0, 0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'macsec0\x00', 'dvmrp1\x00'}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth0_to_bond\x00', {0x1, 0x3, 0x3, 0x3, 0x1, 0x80000001, 0x7fff, 0x18, 0x40}, {0x1}}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x9, 0x3ff, 0x372, 0xfff, 'pptp\x00', 'syz1\x00', {0x4}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}, [], [0xff], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x9, 0xfffe, 0x3, 0x0, 'netbios-ns\x00', 'syz1\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x400) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000018140100020000000300000008000100"], 0x20}, 0x1, 0x0, 0x0, 0x9}, 0x0) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r0, @ANYBLOB="e1ed6f24d61a58cec867a7232e84e348930eeb2518c473"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b7000000ff00001fbfa300000000000007030000f0ffffff6a0af0fff8ffffff61a4f4ff0000000066040200000000001d400200000000004704000001ed00006203000000ffffffcf440000000000007a0a00ff00ffffffc30300ffe1000000b4000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebaa0f040000c72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204ab3949006c3172171652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d156ae8383117c039862198899b212c55318294270a1ad10c80fef7c247afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15f279b513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aa0000000000000000832371fe5bc621426d1ed0a4a99702cc1b692c3f0b15629eaf4c12a1e717d29135753208165b9cdbae2ed9dc7358f0e3adde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbad937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594807031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac42738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca9be8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998802008f0232b39578052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91ed92cac7c2ccd17d338bbda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922928e000000ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abb8a9982ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139566fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe6290421338ef8f6d27117cd1471bf3c0b64416fbbe955da0281e7ef7f7d5176150e86cda98d07f7de2088cb2ffd1d4c71097635c2bb3d9a0b01e757256ee427f0a244d48682bf89e2279b383b616b40f116172bc1b995eb2c1220597af8df52646f1f0cb65cfa7e038e8bb5d4d52b86a61d82dc14a4f5cc7e6061c65ccdbc2afc3f363ecf34ad0b227687c3ea8d63683ddd5914116edd9e075da9e3638647188bc8f95107c9250995eb6cadcd0f65b8504ff10304f2ceba275f9d485ed5554d64005db877f0fbb3beba59666ff66f132d5077835823592d6d392f5ff62f6f876eb10d8cbf0a73f8421b74c8916e4077b8866c95ad88bc7130244183ed216210f10f69b3e0ee13d06e4eb240cce5ec1c3b1defe4c0f8b83a34ef4f5f8f9ceefb678ad29d3683e3c44a01549e55ffca41c0b06e013f054257646c58b667ec0701004c239589b3e64ef5e1d5ed22b5fd5a90fe3453327c3652d5c9762428f0bd0178d1b80a60f64343ab77d8baa0a388711c8d2d6d3e9049814b15b6ea21387040989d69c3aa27256c55780f33d20823d8e2eb6e56850162969bf4c6c9632a55cf5be00"/2944], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x4a) 2.267498658s ago: executing program 4 (id=3329): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20048000}, 0x8094) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r3, 0x0) sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f0000000b00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000400}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000840)={0x260, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xd8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x88}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf820}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x237c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdbac}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0xcc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xee21}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}]}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5848}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x547}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff07af}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x58933135}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8e29}]}]}, 0x260}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008810) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7200000000003900000008000300", @ANYRES32=r6, @ANYBLOB="28005a80240003801400030006000a0004000700cb000500c87c040004000200040001"], 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async) sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r5, 0x0, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x4) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, 0xfffffffffffffffc, &(0x7f00000000c0)=0x10) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, 0x0, 0x0) (async) sendto$inet(r9, &(0x7f00000000c0)="78e93059c29923e14128fd6477c52dc288ca44259db55b23ef1c", 0x1a, 0x4000000, &(0x7f0000000100)={0x2, 0x4e20, @multicast1}, 0x10) r10 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r10, 0x29, 0x39, &(0x7f0000000700)="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", 0x118) (async) connect$inet6(r10, &(0x7f0000000180)={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10001}, 0x1c) 2.211414868s ago: executing program 5 (id=3330): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) listen(r2, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd23, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, 0x35a38, 0x4522f}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040044) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x1c, r6, 0x1, 0x70bd2a, 0x65dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44001}, 0xc800) sendmsg$NL80211_CMD_DEL_PMK(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x7c, r4, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x99}, 0x1000) 1.625276698s ago: executing program 6 (id=3331): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc}, 0x40004) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000880)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000280)={0x34, 0xd, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c090}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x18, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb}}, @snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100", @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x2402c055}, 0x8010) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}, 0x1, 0x0, 0x0, 0x8000}, 0x20040010) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000640)={"742657ba6aa9caafcad136e03acab66c", 0x0, 0x0, {0x7, 0x5}, {0x3, 0x40}, 0x9, [0x5, 0x5, 0x0, 0x1, 0x5, 0x50, 0x200, 0x3, 0xf, 0x8, 0x9, 0x7fff, 0x4, 0xc2f, 0x1, 0x1]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000980)={'veth1_to_bridge\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_SET(r4, &(0x7f0000001cc0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f00000009c0)=ANY=[@ANYBLOB="b4120000", @ANYRES16=r5, @ANYBLOB="01002dbd7000fedbdf250a000000180001801400020076657468300000000000000000000000780001801400020076657468315f746f5f62726964676500140002006e7230000000000000000000000000001400020076657468315f746f5f7465616d00000008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="080003000200000014000200626f6e645f736c6176655f31000000000800030003000000b4000300e3c895796c8348d68e5bbb31a32b09087816eb4cd77b35d8282c154d67065cc82e22bb72449203c1881946f052b6d07b32eb1dab9679de2dfa9019752725a0fbe3d76c651df9d0c43cb9fba10b564cb8b871a5accc988ae00667f639deed373ffcf8501628d06b6b3e5f3d8c565d1cdf92e96cb26b176428fb72181f15dfe069cd5c08a62fe3d1c0b30bf10b9314e37cc5434bfbfdf75fc431799740f571e59229ed5efcd2a423900000000000000000"], 0x12b4}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r7, 0x800442d3, &(0x7f0000000000)={0xfffffe00, 0x69b4, 0x9, @local, 'veth0_macvtap\x00'}) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x0, 0x0, 0x1, 0x1, 0x4000, 0x1}, 0x20) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000740)=r3) r9 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r9, &(0x7f0000000340)="78e6ab08951cdb2ccf5ca254eab346eae09aab88738bd08cf5356861122eaa16e7d791d808f524cfcb716847645e2db6e7aa2dca2d242f00ec11dd1602bf5ae8dbb1475631729a2717973c98c1436b514f972fe0f3e25f100d7befb85a4b01970936171ae1bd1aa013b45b91a133e322b1b4e43f69e2ccd21f7f135b8e47877116c54b4434e4942fe18fa86deb65fa6a2afc", 0x92, 0x800, &(0x7f0000000480)={0xa, 0x4e21, 0x400, @mcast2, 0x8001}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r7}, 0x8) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, r11, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffbd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r13 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000008c0)='cgroup.procs\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000800e80000000073110900008000009500080000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f00)=ANY=[@ANYBLOB="20010000410007012cbd7000fddbdf25037c00000400c28008010180040110801400080000000000000000000000000000000001ec000b"], 0x120}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) 1.518463261s ago: executing program 0 (id=3332): pipe(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000000206010800000000000000000000000014000780080012400000000305001500090000000500010006000000050005000a00000005000400000000000900020073798530000000000c000300686173683a6970"], 0x58}, 0x1, 0x0, 0x0, 0x20015051}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) syz_emit_ethernet(0x46, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaabb018014b6a4c1d83cc200000108004a5d0038006800000c21907864010100ac1414aa89135d640002000000000000000002e0000001004e214e2204b1907840740e234b310000"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000000)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x8, 0x0, 0xfffffffe, @vifc_lcl_ifindex, @empty}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) write(r4, &(0x7f0000000080)="340000001a000100000000000000000002202000000000000000000008000100e001020308000200ac1414bb0800030001000000", 0x34) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000700180a050000000000000000000a0000000900010073797a30000000000900020073797a31000000001400000011"], 0x54}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xfffffffffffffeda, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp=r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200000000000000000000000000019e9d0734e40dbb9bd66b91cd38c91952b7464ba1dc4837d9bdedecaae63eb227f01bfebb3de110f626840aa30d9178747818bc18aceb97c31983daf4ece59687bf44b494aae55caf"], 0xfdef) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x10001, 0x12) sendfile(r2, r1, 0x0, 0xf03a0005) openat$cgroup_ro(r1, &(0x7f00000001c0)='cgroup.freeze\x00', 0x7a44, 0x1700) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}}) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000406050000000000000000000a0000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x58010}, 0x800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 1.499595093s ago: executing program 4 (id=3333): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000140), 0x12) r3 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x74, &(0x7f0000000180)=[@in6={0xa, 0x4e21, 0x6, @remote, 0x5}, @in={0x2, 0x4e25, @empty}, @in6={0xa, 0x4e23, 0x400, @private2={0xfc, 0x2, '\x00', 0x21}, 0x2d4}, @in6={0xa, 0x4e23, 0xf479, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xeb}, @in={0x2, 0x4e21, @local}]}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000002c0)={r4, 0x694}, &(0x7f0000000300)=0x8) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}, 0x1c) (async) openat$cgroup_freezer_state(r1, &(0x7f00000000c0), 0x2, 0x0) (async) setsockopt$inet6_int(r5, 0x29, 0x4b, 0x0, 0x0) (async) pread64(r3, &(0x7f0000001840)=""/4096, 0x1000, 0x8) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) (async) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) (async) writev(r7, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000", 0x36}], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) (async) recvfrom$inet6(r5, &(0x7f0000000540), 0x0, 0x1, &(0x7f0000000580)={0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xffffffff}, 0x1c) (async) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000540)={'\x00', 0x4000}) (async) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f"], 0x18) (async) close(r6) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) pread64(r2, &(0x7f0000000080)=""/46, 0x2e, 0x0) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000240), 0x12) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x240, 0x240, 0x0, 0x350, 0x370, 0x350, 0x4, 0x0, {[{{@arp={@private, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_batadv\x00', 'batadv0\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "bc2e329885ea3654891fbae8c6c66e07212432bde429bcda7deb48d85c6f5e269c2021c8f8dc09af0b3f2e10e8ac79cc67e264613c4be6838ee2daacf7926a6e"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr, @broadcast}}}, {{@arp={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0\x00', 'veth0_to_bond\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) (async) syz_emit_ethernet(0x86, &(0x7f00000005c0)=ANY=[], 0x0) 1.201574264s ago: executing program 6 (id=3334): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r5, &(0x7f0000002e80)=[{{0x0, 0x0, 0x0}, 0x3fffff}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000000180)=""/33, 0x21}, {&(0x7f0000003740)=""/195, 0xc3}, {&(0x7f0000003840)=""/172, 0xac}, {&(0x7f0000003900)=""/151, 0x97}, {&(0x7f0000000280)=""/101, 0x65}], 0x6}, 0x9}, {{0x0, 0x0, 0x0}, 0xb91b}, {{0x0, 0x0, 0x0}, 0x8}], 0x5, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$inet6(0xa, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r10, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0xa, 0x4e23, 0x3, @dev, 0x400000}, 0xffffffffffffffff, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa4ffffff, 0x200]}}, 0x5c) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0x7}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_fw={{0x7}, {0x58, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1e, 0x3}}, @TCA_FW_MASK={0x8, 0x5, 0x65a}, @TCA_FW_MASK={0x8, 0x5, 0xfffffffa}, @TCA_FW_MASK={0x8, 0x5, 0x5}, @TCA_FW_MASK={0x8, 0x5, 0xff5}, @TCA_FW_MASK={0x8}, @TCA_FW_MASK={0x8, 0x5, 0x6}, @TCA_FW_MASK={0x8, 0x5, 0x7}, @TCA_FW_INDEV={0x14, 0x3, 'veth0_to_hsr\x00'}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 661.589976ms ago: executing program 5 (id=3335): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002c00128009000100626f6e64000000001c00028005002100030400080500010004"], 0x4c}}, 0x40) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, 0x0, 0x10b8}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) unshare(0x8040480) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) recvfrom(r3, &(0x7f0000000100)=""/1, 0x1, 0x102, &(0x7f0000000180)=@pptp={0x18, 0x2, {0x1, @empty}}, 0x80) close(r3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x18000000000002a0, 0x45, 0x0, &(0x7f0000000080)="b9ff0300600d698cff9e14f086dd", 0x0, 0xe02, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 285.659764ms ago: executing program 1 (id=3336): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="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", 0xffffffffffffff8e}], 0x1, &(0x7f0000000580)=ANY=[@ANYRES16=r0, @ANYRES32=r0], 0x38, 0x2000c080}, 0x280008d0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a6c000000060a010400000000000000000a0000010900010073797a3100000000400004803c0001800c0001007061796c6f6164002c00028008000440000000054000000014080006400000000608000240000000020900020073797a3200000000140000001100010010000000000000000000000a"], 0x94}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000240)={0x0, 0xf5, "9145580d3bfeffb0c4e5149f3d830a5921b48a241243106daea1a4d8faa73c23e7b5f0236ed22d04a8e497d13fba461f1e5f093b2b686253e696cb11546b5fe76ff2674ab18b8091095003cfa58b775a067d0bc1fd8b72f10c4a84848d202b2565d5ae6a33e2885141534c54ee9d1baf555aafc458512f0aa3eb61d009246b787d033f8d2428f62ca9616c12301fc2c1e6e24a7cbb6b82dcf7dbec8ff004b1c92293f6f80506a3667c81d9ba3183790e18d4a2b4d790d71340bbebc4e4a8314f145b074db5dba7058ed5538803139aa1bbbc5e89b507baec9ee3e82c2d3feee43bcf35768c04645548352dfbbc1775900b8345c682"}, &(0x7f0000000340)=0xfd) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000380)={r2, 0x3ff, 0x8}, 0x8) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) socket$kcm(0x2, 0xa, 0x2) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x3, 0x7) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000280)={@dev={0xfe, 0x80, '\x00', 0x14}, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r8, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e1e, 0x80000, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES8=r8], 0x18}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r7, @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="0c000b0003000060020000c0"], 0x30}, 0x1, 0x0, 0x0, 0x4008840}, 0x30004016) r9 = socket$can_bcm(0x1d, 0x2, 0x2) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000003c0)={r2, 0x10001}, &(0x7f0000000440)=0x8) sendmsg$sock(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000013000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000070000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021340011800a0001006c696d6974000000240002800c00014000000000000000000c0002400003680800044000000001140000001000010000000000000000000384000a"], 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) connect$can_bcm(r9, &(0x7f00000000c0), 0x10) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e000000000400028008000a00", @ANYRES32=r4, @ANYBLOB="d4d9628ac35dd43c64d762ea0be1c1d67193d07b92433c7be4fb86c3897a1941a21ee42693b384440a166ea96ea917b15030e2460d6c31534371f9c62e8aaa458b633571bc290c38cd80aff017e1a233e6432ea753a537ea00fafa63e8b58e70d5849091dc331fd2db2107d015bac7d377ed8402bfc270441b402d8f539c27937836"], 0x3c}, 0x1, 0x0, 0x0, 0x45844}, 0x0) 695.55µs ago: executing program 4 (id=3337): r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x70bd25, 0x0, {0x2, 0x0, 0x0, 0x0, {0xffe0, 0xa}, {0xd}, {0x4, 0xa}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x200, 0x6, 0x0, 0xfffff7fd, 0x80}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x4, 0x8, 0x407, 0x1, 0x9d06, 0x2}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008814}, 0x20000040) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x8, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, 'wg0\x00'}}, 0x1e) sendmmsg$inet(r1, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="0283", 0x2}], 0x1}}], 0x1, 0x2400c8c0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r2, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}]}, 0x2c}}, 0x10) 0s ago: executing program 6 (id=3338): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) (async) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f00000000c0), &(0x7f0000000140)=0x4) (async) r1 = socket(0x1, 0x1, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r3}, 0x4) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x18, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000feffffff00000000060000001801000020756ca500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fe0f00008500000006000000b7080000000000007b8af8ff00000000b7080000000000877b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ffffffff0000000000008000d71a0000400002009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x7}, 0x94) (async) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000500)={0x3c, r5, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d5}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) r6 = socket(0x11, 0x3, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x0, 0x4e6a, 0x50, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x7, 0x7, 0xbd22, 0x5}}) connect$can_bcm(r6, &(0x7f00000006c0)={0x1d, r7}, 0x10) (async) socket$netlink(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x13, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) syz_emit_ethernet(0xd4, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbbc6aaaaaaaa008100000086dd64ecaa25009a2900ff01000000000800000000000000000700000000000000000000000000000101f77f527c45266c967dbf9e6d4334de8d27a4ab6a41a6b7c1f93b382c581e8432255362b3fdca226a31a9d23c070bbc65de68e16486cf29197810ba064a49c2d7093cd9b1fe0dc0899290b13a96f1bdd67de0acbfe988186f9a9f734fc22d90c16e4a723c4c03f9a84c59d29e981a0a1575f5ddd12e1d6b67e0dc5eb7d3fa2885909cdb77c8e0c08ed4f3c7b9ef10f7ae0869816d7781ef0beaf7"], 0x0) write$rfkill(r8, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r9, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) (async) bind$inet(r9, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) (async) sendmmsg$inet(r9, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000240)="a85751ad519b201965da2ebcc4898c7f46cb0819b38bbf504fd2617bf9689f2cdbe63959901f5afb841befbb8787b77bc6855e836e2c277f600c31ff7ea5acf0a9525fa1c161d06b23b802aaf4716846d96af1654995ec32db50c7e056aa45212cd6", 0x62}], 0x2}}], 0x1, 0x20008000) socket$inet(0x2, 0xa, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) kernel console output (not intermixed with test programs): length. [ 402.190887][T15227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2179'. [ 402.190924][T15227] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2179'. [ 402.221357][T15231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2180'. [ 402.236867][T15228] bond6: entered promiscuous mode [ 402.237768][T15228] 8021q: adding VLAN 0 to HW filter on device bond6 [ 402.293174][T15229] 8021q: adding VLAN 0 to HW filter on device bond6 [ 402.293563][T15229] bond6: (slave gre3): The slave device specified does not support setting the MAC address [ 402.293585][T15229] bond6: (slave gre3): Setting fail_over_mac to active for active-backup mode [ 402.320803][T15229] bond6: (slave gre3): making interface the new active one [ 402.320826][T15229] gre3: entered promiscuous mode [ 402.340681][T15229] bond6: (slave gre3): Enslaving as an active interface with an up link [ 402.406240][T15231] bond6 (unregistering): (slave gre3): Releasing backup interface [ 402.406270][T15231] gre3: left promiscuous mode [ 402.431579][T15231] bond6 (unregistering): Released all slaves [ 402.605386][T15236] xt_IDLETIMER: timeout value is zero [ 403.160215][T15251] x_tables: duplicate underflow at hook 1 [ 403.345394][T15256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2185'. [ 403.827715][T11886] page_pool_release_retry() stalled pool shutdown: id 124, 1 inflight 60 sec [ 404.672414][T15280] netlink: 'syz.1.2188': attribute type 1 has an invalid length. [ 404.804878][T15280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.931477][T15280] macvlan2: entered promiscuous mode [ 404.931503][T15280] macvlan2: entered allmulticast mode [ 404.959476][T15280] bond0: entered promiscuous mode [ 404.960201][T15280] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 404.988860][T15280] bond0: left promiscuous mode [ 405.399148][T15301] syzkaller0: entered promiscuous mode [ 405.399172][T15301] syzkaller0: entered allmulticast mode [ 406.061542][T15332] IPv6: NLM_F_CREATE should be specified when creating new route [ 406.067328][T15332] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 406.067369][T15332] IPv6: NLM_F_CREATE should be set when creating new route [ 406.067590][T15332] IPv6: NLM_F_CREATE should be set when creating new route [ 406.067661][T15332] IPv6: NLM_F_CREATE should be set when creating new route [ 406.119401][T15332] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2197'. [ 406.142049][T15334] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2198'. [ 406.142392][T15334] unsupported nlmsg_type 40 [ 406.249953][T15337] lo: entered allmulticast mode [ 406.347970][T15337] lo: left allmulticast mode [ 406.670465][T15348] bond8: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 406.693354][T15348] bond8 (unregistering): Released all slaves [ 406.719218][T15353] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2202'. [ 407.003842][T15360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2204'. [ 407.086093][T15364] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2206'. [ 407.088753][T15364] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2206'. [ 407.114091][T15364] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2206'. [ 407.118234][T15365] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2206'. [ 407.196329][T15367] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2207'. [ 407.511218][T15380] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2210'. [ 408.933386][T15412] ovs-system: entered promiscuous mode [ 409.629540][T15447] tipc: Enabling of bearer rejected, failed to enable media [ 409.904697][T15447] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 410.134179][T15447] bond7 (unregistering): Released all slaves [ 410.307777][T15468] RDS: rds_bind could not find a transport for ::80:0:c001:0:20:0, load rds_tcp or rds_rdma? [ 410.610879][T15479] netlink: 'syz.1.2234': attribute type 1 has an invalid length. [ 411.550545][T15514] Cannot find add_set index 0 as target [ 411.573384][T15516] netlink: 'syz.3.2243': attribute type 1 has an invalid length. [ 412.975067][T15562] netlink: 'syz.0.2251': attribute type 1 has an invalid length. [ 412.975114][T15562] netlink: 'syz.0.2251': attribute type 1 has an invalid length. [ 413.546888][T15551] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 413.560338][T15551] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 414.400334][T15551] ip6gretap0: left allmulticast mode [ 414.439551][T15551] gretap0: left allmulticast mode [ 414.517343][T15555] bond14: (slave syz_tun): speed changed to 0 on port 1 [ 414.556148][T15555] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 414.562066][T11814] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.562119][T11814] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.562160][T11814] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.562200][T11814] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.567531][T15568] __nla_validate_parse: 14 callbacks suppressed [ 414.567570][T15568] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2252'. [ 414.586107][T15568] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2252'. [ 414.621378][T11812] bond14: (slave syz_tun): link status up again after 0 ms [ 414.621466][T11812] bond14: (slave syz_tun): failed to get link speed/duplex [ 414.722735][T11812] bond14: (slave syz_tun): failed to get link speed/duplex [ 414.837610][T11814] bond14: (slave syz_tun): failed to get link speed/duplex [ 414.944496][ T6799] bond14: (slave syz_tun): failed to get link speed/duplex [ 415.028601][T15582] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2253'. [ 415.053397][T11812] bond14: (slave syz_tun): failed to get link speed/duplex [ 415.093555][T15585] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2255'. [ 415.144659][T15587] netlink: 204 bytes leftover after parsing attributes in process `syz.3.2255'. [ 415.164877][T11812] bond14: (slave syz_tun): failed to get link speed/duplex [ 415.274890][T15583] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 415.276489][T11814] bond14: (slave syz_tun): failed to get link speed/duplex [ 415.360845][T15604] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2258'. [ 415.393634][T11814] bond14: (slave syz_tun): failed to get link speed/duplex [ 416.027583][T15614] veth0: entered allmulticast mode [ 416.319338][T15629] syzkaller0: entered promiscuous mode [ 416.319364][T15629] syzkaller0: entered allmulticast mode [ 416.364044][T15630] tipc: Enabled bearer , priority 0 [ 416.380624][ T8536] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.381580][ T8536] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.381624][ T8536] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.381695][ T8536] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.501248][T15629] tipc: Resetting bearer [ 416.764787][T15627] tipc: Resetting bearer [ 416.885407][T15627] tipc: Disabling bearer [ 417.666239][T15672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2275'. [ 418.184884][T15693] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2277'. [ 418.212935][T15693] netlink: 'syz.4.2277': attribute type 1 has an invalid length. [ 418.289527][T15691] xt_CT: No such helper "syz0" [ 418.744916][T15693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2277'. [ 419.067214][T15703] ipt_ah: unknown flags FF [ 419.455624][T15710] netlink: 'syz.4.2282': attribute type 1 has an invalid length. [ 419.456858][T15711] netlink: 'syz.4.2282': attribute type 1 has an invalid length. [ 419.511710][T15710] 8021q: adding VLAN 0 to HW filter on device bond13 [ 419.622918][ T6798] net_ratelimit: 27 callbacks suppressed [ 419.622942][ T6798] bond14: (slave syz_tun): failed to get link speed/duplex [ 419.733210][T11814] bond14: (slave syz_tun): failed to get link speed/duplex [ 419.871566][T15721] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2286'. [ 419.882712][ T6798] bond14: (slave syz_tun): failed to get link speed/duplex [ 419.924231][T15724] netlink: 'syz.4.2285': attribute type 7 has an invalid length. [ 419.924273][T15724] netlink: 'syz.4.2285': attribute type 3 has an invalid length. [ 419.924304][T15724] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2285'. [ 419.988050][T15729] netlink: 'syz.3.2287': attribute type 4 has an invalid length. [ 420.033955][T15732] netlink: 'syz.0.2288': attribute type 49 has an invalid length. [ 420.072056][ T6799] bond14: (slave syz_tun): failed to get link speed/duplex [ 420.072430][T15732] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2288'. [ 420.076828][T15732] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2288'. [ 420.182221][T11814] bond14: (slave syz_tun): failed to get link speed/duplex [ 420.291997][T11814] bond14: (slave syz_tun): failed to get link speed/duplex [ 420.402039][ T6798] bond14: (slave syz_tun): failed to get link speed/duplex [ 420.437972][T15752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2291'. [ 420.440322][T15753] tipc: Enabling of bearer rejected, failed to enable media [ 420.512051][ T6798] bond14: (slave syz_tun): failed to get link speed/duplex [ 420.629232][ T6799] bond14: (slave syz_tun): failed to get link speed/duplex [ 420.753854][ T6798] bond14: (slave syz_tun): failed to get link speed/duplex [ 420.927473][T15771] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2295'. [ 420.950010][T15771] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2295'. [ 420.950045][T15771] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2295'. [ 420.980740][T15771] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2295'. [ 420.980774][T15771] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2295'. [ 421.929835][T15771] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.954170][T15771] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.179869][T15775] tipc: MTU too low for tipc bearer [ 422.185940][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.193261][ T8533] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.193599][ T8533] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.193709][ T8533] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.285959][T11892] wg2 speed is unknown, defaulting to 1000 [ 422.286026][T11892] syz2: Port: 1 Link DOWN [ 422.338102][T11895] wg2 speed is unknown, defaulting to 1000 [ 422.736110][T15808] Cannot find add_set index 0 as target [ 424.253729][T15860] tipc: Enabling of bearer rejected, failed to enable media [ 424.672035][T11814] net_ratelimit: 25 callbacks suppressed [ 424.672077][T11814] bond14: (slave syz_tun): failed to get link speed/duplex [ 424.681409][T15879] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 424.706555][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 424.708418][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 424.708770][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 424.783182][ T6798] bond14: (slave syz_tun): failed to get link speed/duplex [ 424.901965][ T8533] bond14: (slave syz_tun): failed to get link speed/duplex [ 425.009916][T15884] __nla_validate_parse: 149 callbacks suppressed [ 425.009938][T15884] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2318'. [ 425.097494][ T8533] bond14: (slave syz_tun): failed to get link speed/duplex [ 425.126442][T15889] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2319'. [ 425.215030][T15889] ip6gre1: entered promiscuous mode [ 425.215080][T15889] ip6gre1: entered allmulticast mode [ 425.222540][ T13] bond14: (slave syz_tun): failed to get link speed/duplex [ 425.302505][T15889] netlink: 'syz.1.2319': attribute type 6 has an invalid length. [ 425.302531][T15889] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2319'. [ 425.332411][ T13] bond14: (slave syz_tun): failed to get link speed/duplex [ 425.443319][ T13] bond14: (slave syz_tun): failed to get link speed/duplex [ 425.552093][ T13] bond14: (slave syz_tun): failed to get link speed/duplex [ 425.664670][T11812] bond14: (slave syz_tun): failed to get link speed/duplex [ 427.062533][T15959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2334'. [ 427.849623][T15974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2336'. [ 428.180289][T15974] hsr_slave_1 (unregistering): left promiscuous mode [ 428.497775][T15995] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.743148][T16003] netlink: 'syz.1.2343': attribute type 4 has an invalid length. [ 428.850543][T16009] netlink: 'syz.3.2344': attribute type 49 has an invalid length. [ 429.992639][T15986] tipc: Resetting bearer [ 430.782471][ T8533] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.782507][ T8533] netdevsim netdevsim2 eth1: unset [0, 1] type 1 family 0 port 4352 - 0 [ 430.782533][ T8533] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.782573][ T8533] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.782621][ T8533] netdevsim netdevsim2 eth2: unset [0, 1] type 1 family 0 port 4352 - 0 [ 430.782646][ T8533] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.782682][ T8533] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.782707][ T8533] netdevsim netdevsim2 eth3: unset [0, 1] type 1 family 0 port 4352 - 0 [ 430.782732][ T8533] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.792696][ T8533] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.792795][ T8533] netdevsim netdevsim2 eth0: unset [0, 1] type 1 family 0 port 4352 - 0 [ 430.792854][ T8533] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.209707][T16042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 431.226915][T16040] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2348'. [ 431.262728][T16044] netlink: 'syz.3.2351': attribute type 1 has an invalid length. [ 431.354743][T16052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2349'. [ 431.457154][T16044] 8021q: adding VLAN 0 to HW filter on device bond7 [ 431.492186][T16052] net_ratelimit: 181 callbacks suppressed [ 431.492208][T16052] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 432.051690][T16069] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 432.267604][T16076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2358'. [ 432.492089][T16085] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2359'. [ 432.494779][T16083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2357'. [ 432.841544][T16093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2361'. [ 432.841606][T16093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2361'. [ 432.859596][T16093] gre0: left promiscuous mode [ 432.859646][T16093] gre0: left allmulticast mode [ 432.893145][T16093] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2361'. [ 432.893169][T16093] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 433.461104][T16122] netlink: 279 bytes leftover after parsing attributes in process `syz.2.2370'. [ 433.461167][T16122] veth0_to_bond: default FDB implementation only supports local addresses [ 433.488508][T16124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2365'. [ 433.557153][T16124] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 433.881012][T16136] xt_CT: You must specify a L4 protocol and not use inversions on it [ 434.160165][T16137] netlink: 'syz.2.2372': attribute type 2 has an invalid length. [ 434.372583][T16142] bond8: option ad_select: invalid value (34) [ 434.381035][T16142] bond8 (unregistering): Released all slaves [ 434.512811][T16143] bond8: option ad_select: invalid value (34) [ 434.515547][T16143] bond8 (unregistering): Released all slaves [ 435.024903][T16162] netlink: 'syz.4.2380': attribute type 22 has an invalid length. [ 435.030140][T16162] netlink: 'syz.4.2380': attribute type 22 has an invalid length. [ 435.217302][T16174] netlink: 'syz.4.2380': attribute type 22 has an invalid length. [ 435.842094][T16193] mac80211_hwsim hwsim28 wlan0: entered promiscuous mode [ 435.842158][T16193] mac80211_hwsim hwsim28 wlan0: entered allmulticast mode [ 435.842521][T16193] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 436.506189][T16213] __nla_validate_parse: 4 callbacks suppressed [ 436.506212][T16213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2385'. [ 436.538039][T16213] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 436.807581][T16219] xt_TCPMSS: Only works on TCP SYN packets [ 437.118548][T16228] ipvlan1: entered promiscuous mode [ 437.120613][T16228] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 437.120890][T16228] team0: Device ipvlan1 failed to register rx_handler [ 437.449218][T16235] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2392'. [ 437.449283][T16235] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2392'. [ 437.479978][T16236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2392'. [ 437.484940][T16237] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2392'. [ 437.485017][T16237] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2392'. [ 437.589692][T16240] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2393'. [ 437.689076][T16244] x_tables: duplicate underflow at hook 3 [ 438.048743][T16250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2397'. [ 438.177154][T16256] syzkaller0: entered promiscuous mode [ 438.177180][T16256] syzkaller0: entered allmulticast mode [ 438.202966][T16255] openvswitch: netlink: Missing key (keys=40, expected=100) [ 438.211215][T16256] tipc: Enabled bearer , priority 0 [ 438.256125][T16256] tipc: Resetting bearer [ 438.260068][T16254] tipc: Resetting bearer [ 438.322856][T16254] tipc: Disabling bearer [ 438.967979][T16282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2405'. [ 439.045460][T16290] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 440.830234][T16308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2412'. [ 440.915809][T16311] macsec0: entered promiscuous mode [ 440.915848][T16311] veth1_macvtap: entered promiscuous mode [ 440.994418][T16316] netlink: 'syz.4.2414': attribute type 9 has an invalid length. [ 441.194383][T16324] block nbd0: server does not support multiple connections per device. [ 441.198121][T16324] block nbd0: shutting down sockets [ 441.710215][T16348] __nla_validate_parse: 2 callbacks suppressed [ 441.710261][T16348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2420'. [ 441.746825][T16348] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 442.137161][T16356] syzkaller0: entered promiscuous mode [ 442.137218][T16356] syzkaller0: entered allmulticast mode [ 442.163832][T16366] bridge_slave_0: default FDB implementation only supports local addresses [ 442.487845][T16380] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2430'. [ 445.583726][T16390] tap0: tun_chr_ioctl cmd 2147767520 [ 445.822489][T16405] Set syz1 is full, maxelem 2076 reached [ 446.642963][T16439] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2442'. [ 446.778038][T16448] bond14: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 446.779852][T16448] bond14: (slave ip6tnl1): Error -95 calling set_mac_address [ 446.850206][T16455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2440'. [ 446.898805][T16455] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 447.139140][T16462] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2447'. [ 447.788842][T16490] netlink: 'syz.1.2453': attribute type 10 has an invalid length. [ 447.804283][T16485] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2453'. [ 447.979778][T16481] syzkaller0: entered promiscuous mode [ 447.979803][T16481] syzkaller0: entered allmulticast mode [ 447.996755][T16490] syz_tun: entered promiscuous mode [ 449.731456][T16524] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 450.847237][T16505] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 450.847283][T16505] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 450.847338][T16505] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 450.849022][T16523] 8021q: VLANs not supported on ip_vti0 [ 451.087495][T16525] lo speed is unknown, defaulting to 1000 [ 451.233954][T16531] smc: net device vlan1 applied user defined pnetid SYZ2 [ 451.235737][T16531] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2462'. [ 451.264791][T16534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2464'. [ 451.368722][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 451.380468][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 451.383850][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 451.385204][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 451.386492][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 451.491639][ T5623] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 451.509851][ T5623] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 451.521618][ T5623] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 451.535698][ T5623] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 451.557597][ T5623] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 451.650563][T16543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2463'. [ 451.677369][T16543] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 451.879733][T16548] gtp0: entered promiscuous mode [ 451.879759][T16548] gtp0: entered allmulticast mode [ 452.118514][T16554] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 452.129756][T16525] wg2 speed is unknown, defaulting to 1000 [ 452.164495][T16557] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2468'. [ 452.599600][T16574] xt_hashlimit: max too large, truncated to 1048576 [ 452.655327][T16575] xt_hashlimit: max too large, truncated to 1048576 [ 452.816438][T16577] syzkaller1: entered promiscuous mode [ 452.816462][T16577] syzkaller1: entered allmulticast mode [ 452.839586][T16577] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 452.879646][T16577] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2472'. [ 452.886299][T16536] lo speed is unknown, defaulting to 1000 [ 453.119651][T16580] tc action pedit 'at' offset 5 out of bounds [ 453.663569][ T5623] Bluetooth: hci5: command tx timeout [ 453.864192][T16594] netlink: 'syz.4.2478': attribute type 1 has an invalid length. [ 453.864212][T16594] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2478'. [ 453.864227][T16594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2478'. [ 453.944921][T16594] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2478'. [ 453.946883][T16536] wg2 speed is unknown, defaulting to 1000 [ 454.140140][T16595] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2477'. [ 454.167826][T16595] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 454.890352][T16625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2485'. [ 454.890379][T16625] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2485'. [ 454.890396][T16625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2485'. [ 454.890411][T16625] netlink: 'syz.1.2485': attribute type 5 has an invalid length. [ 455.742043][ T5623] Bluetooth: hci5: command tx timeout [ 456.277558][T16644] netlink: 'syz.1.2489': attribute type 6 has an invalid length. [ 456.277582][T16644] netlink: 'syz.1.2489': attribute type 7 has an invalid length. [ 456.277608][T16644] netlink: 'syz.1.2489': attribute type 8 has an invalid length. [ 456.309361][T16651] netlink: NAT attribute type 5 has unexpected length (0 != 2) [ 456.309402][T16651] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 457.232337][T16536] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.232600][T16536] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.232752][T16536] bridge_slave_0: entered allmulticast mode [ 457.241106][T16536] bridge_slave_0: entered promiscuous mode [ 457.288590][T16536] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.288784][T16536] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.288933][T16536] bridge_slave_1: entered allmulticast mode [ 457.290901][T16536] bridge_slave_1: entered promiscuous mode [ 457.400758][T16536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.422873][T16536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 457.566882][T16686] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2494'. [ 457.636419][T16536] team0: Port device team_slave_0 added [ 457.639520][T16536] team0: Port device team_slave_1 added [ 457.694937][T16536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 457.694956][T16536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.694985][T16536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 457.697157][T16536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.697173][T16536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.697200][T16536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.833563][ T5623] Bluetooth: hci5: command tx timeout [ 457.840323][T16536] hsr_slave_0: entered promiscuous mode [ 457.841439][T16536] hsr_slave_1: entered promiscuous mode [ 457.859227][T16536] debugfs: 'hsr0' already exists in 'hsr' [ 457.859250][T16536] Cannot create hsr debugfs directory [ 457.889897][T16680] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 458.276402][T16696] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2496'. [ 458.967287][T16736] tap0: tun_chr_ioctl cmd 1074025677 [ 458.967385][T16736] tap0: linktype set to 805 [ 458.992203][T16741] netlink: 'syz.1.2506': attribute type 3 has an invalid length. [ 458.992243][T16741] netlink: 'syz.1.2506': attribute type 1 has an invalid length. [ 458.992276][T16741] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2506'. [ 459.053503][T16536] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 459.107853][T16536] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 459.108952][T16536] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 459.131151][T16536] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 459.187370][T16536] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 459.214063][T16536] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 459.335400][T16536] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 459.363410][T16536] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 459.685710][T16741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2506'. [ 459.686224][T16741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2506'. [ 459.687098][T16741] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2506'. [ 459.843086][T16757] IPVS: Error connecting to the multicast addr [ 459.865248][T16536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.902430][ T5623] Bluetooth: hci5: command tx timeout [ 459.908149][T16536] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.933651][ T152] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.933822][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.028823][T11819] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.028932][T11819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.268887][T16775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2510'. [ 460.280089][T16775] IPVS: Unknown mcast interface: vcan0 [ 460.815106][T16787] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2514'. [ 461.332447][T16805] netlink: 'syz.0.2518': attribute type 3 has an invalid length. [ 461.530378][T16814] veth0: entered promiscuous mode [ 461.541309][T16816] netlink: Conntrack attr has 1 unknown bytes [ 461.541379][T16816] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 461.560886][T16814] netlink: Conntrack attr has 1 unknown bytes [ 461.560917][T16814] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 461.710001][T16808] veth0: left promiscuous mode [ 461.798707][T16824] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2524'. [ 462.302553][T16536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.709817][T16867] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2531'. [ 462.935053][T16873] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 463.717530][T16536] veth0_vlan: entered promiscuous mode [ 463.752818][T16536] veth1_vlan: entered promiscuous mode [ 463.784208][T16900] netlink: 'syz.1.2538': attribute type 1 has an invalid length. [ 463.867108][T16906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2540'. [ 463.933679][T16900] 8021q: adding VLAN 0 to HW filter on device bond8 [ 463.965328][T16898] bond8: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 463.985274][T16898] netlink: 'syz.1.2538': attribute type 4 has an invalid length. [ 463.985295][T16898] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2538'. [ 464.000242][T16904] bond8: entered promiscuous mode [ 464.000263][T16904] bond8: entered allmulticast mode [ 464.105220][T16907] 8021q: VLANs not supported on ip_vti0 [ 464.105715][T16536] veth0_macvtap: entered promiscuous mode [ 464.165219][T16536] veth1_macvtap: entered promiscuous mode [ 464.194699][T16536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 464.210635][T16536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 464.293832][ T8531] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.293877][ T8531] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.293911][ T8531] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.293943][ T8531] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.611666][ T8532] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.611725][ T8532] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.930128][ T8532] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.930151][ T8532] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.950687][T16931] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 464.974808][T16934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2547'. [ 464.974845][T16934] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2547'. [ 465.001986][T16931] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 465.427378][T16942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2548'. [ 465.672509][T16950] Bluetooth: hci0: unsupported parameter 5135 [ 465.672531][T16950] Bluetooth: hci0: unsupported parameter 8192 [ 465.672544][T16950] Bluetooth: hci0: unsupported parameter 5135 [ 465.672556][T16950] Bluetooth: hci0: unsupported parameter 8192 [ 465.798680][T16940] syzkaller0: entered promiscuous mode [ 465.798708][T16940] syzkaller0: entered allmulticast mode [ 468.616179][T16961] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 468.620858][T16978] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2555'. [ 468.885729][T16983] netlink: 'syz.5.2559': attribute type 1 has an invalid length. [ 468.926631][T16985] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 468.944056][T16985] bond0: (slave batadv1): Enslaving as an active interface with an up link [ 469.026484][T16983] bond0: (slave veth3): Enslaving as an active interface with an up link [ 469.187180][T16991] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2560'. [ 469.430290][T17003] netlink: 'syz.5.2562': attribute type 22 has an invalid length. [ 469.430467][T17003] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2562'. [ 469.516665][T17010] netlink: 'syz.5.2562': attribute type 22 has an invalid length. [ 469.516721][T17010] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2562'. [ 469.545398][T17005] 8021q: VLANs not supported on ip_vti0 [ 469.603160][T17008] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2564'. [ 469.688687][T17008] veth7: entered promiscuous mode [ 469.688715][T17008] veth7: entered allmulticast mode [ 469.749938][T17014] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2566'. [ 469.837397][T17021] netlink: 67 bytes leftover after parsing attributes in process `syz.5.2568'. [ 469.958152][T17008] veth9: entered promiscuous mode [ 469.958177][T17008] veth9: entered allmulticast mode [ 470.063579][T17027] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2570'. [ 470.417631][T17032] gre0: entered promiscuous mode [ 470.417670][T17032] gre0: entered allmulticast mode [ 470.526200][T17044] netlink: 'syz.2.2576': attribute type 4 has an invalid length. [ 470.529273][T17044] netlink: 'syz.2.2576': attribute type 4 has an invalid length. [ 470.958330][T17062] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 470.958585][T17059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2579'. [ 470.958840][T17054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2579'. [ 471.930717][T17079] digital: digital_start_poll: Unknown protocol [ 471.978149][T17089] netlink: 'syz.4.2583': attribute type 3 has an invalid length. [ 472.508044][T17106] netlink: 'syz.0.2587': attribute type 1 has an invalid length. [ 472.580222][T17106] 8021q: adding VLAN 0 to HW filter on device bond8 [ 472.631447][T17101] bond8: (slave veth0_to_bond): making interface the new active one [ 472.650561][T17101] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 472.650685][T17110] žÿ: renamed from team_slave_1 [ 472.744857][T17102] netlink: 'syz.5.2589': attribute type 3 has an invalid length. [ 473.054784][T17123] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 473.059909][T17123] bond1 (unregistering): Released all slaves [ 474.007921][T17146] tipc: Resetting bearer [ 474.048471][T17150] __nla_validate_parse: 5 callbacks suppressed [ 474.048530][T17150] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2600'. [ 474.062500][T17158] netlink: 'syz.1.2603': attribute type 2 has an invalid length. [ 474.263931][T17158] D†'|o: entered promiscuous mode [ 474.378330][T17167] tipc: Enabled bearer , priority 0 [ 474.380529][T17166] syzkaller0: entered promiscuous mode [ 474.380551][T17166] syzkaller0: entered allmulticast mode [ 474.432456][T17166] tipc: Resetting bearer [ 474.463085][T17161] tipc: Resetting bearer [ 474.574694][T17161] tipc: Disabling bearer [ 475.952659][T17198] IPVS: set_ctl: invalid protocol: 22 0.0.0.0:20000 [ 475.959888][T17198] IPVS: set_ctl: invalid protocol: 137 100.1.1.0:20004 [ 475.996542][T17198] syzkaller0: entered promiscuous mode [ 475.996568][T17198] syzkaller0: entered allmulticast mode [ 476.077390][T17201] block nbd0: server does not support multiple connections per device. [ 476.096870][T17201] block nbd0: shutting down sockets [ 476.298139][T17211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2616'. [ 476.771540][T17232] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20001 [ 476.911075][T17208] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 476.911141][T17208] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 476.966589][T17239] sit0: entered promiscuous mode [ 476.966980][T17239] netlink: 'syz.2.2622': attribute type 1 has an invalid length. [ 476.967017][T17239] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2622'. [ 477.108128][T17244] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 477.318763][T17246] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2623'. [ 477.532381][T17251] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2625'. [ 477.535059][T17251] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2625'. [ 477.783600][T17256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2626'. [ 478.082327][T17263] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (32769) ! [ 478.154337][T17269] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2629'. [ 478.265547][T17268] netlink: 'syz.0.2630': attribute type 13 has an invalid length. [ 478.265573][T17268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2630'. [ 478.265599][T17268] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 478.971255][T17296] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2637'. [ 479.046438][T17296] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 479.046504][T17296] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 479.144343][T17304] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2639'. [ 479.191069][T17307] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2641'. [ 479.609440][T17322] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2642'. [ 479.689130][T17322] xt_hashlimit: size too large, truncated to 1048576 [ 479.746943][T17335] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2646'. [ 479.903125][T17335] vlan1: entered allmulticast mode [ 479.903151][T17335] bond0: entered allmulticast mode [ 480.537177][T17353] netlink: 'syz.0.2649': attribute type 1 has an invalid length. [ 480.592545][T17353] 8021q: adding VLAN 0 to HW filter on device bond9 [ 480.678747][T17353] bond8: (slave veth0_to_bond): Releasing active interface [ 480.700186][T17360] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2652'. [ 480.718308][T17353] bond9: (slave veth0_to_bond): making interface the new active one [ 480.730359][T17353] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 480.777356][T17356] netlink: 'syz.1.2650': attribute type 24 has an invalid length. [ 480.801964][T17364] netlink: 'syz.0.2649': attribute type 1 has an invalid length. [ 480.835458][T17359] bond9: entered promiscuous mode [ 480.835484][T17359] veth0_to_bond: entered promiscuous mode [ 480.835717][T17359] bond9: entered allmulticast mode [ 480.835732][T17359] veth0_to_bond: entered allmulticast mode [ 480.956927][T17369] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2653'. [ 481.030820][T17372] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2653'. [ 481.048884][T17369] netlink: 'syz.2.2653': attribute type 10 has an invalid length. [ 481.071137][T17369] dummy0: entered promiscuous mode [ 481.071357][T17369] dummy0: entered allmulticast mode [ 481.091364][T17369] team0: Port device dummy0 added [ 481.210163][T17371] syzkaller0: entered promiscuous mode [ 481.210211][T17371] syzkaller0: entered allmulticast mode [ 481.269408][T17378] IPVS: set_ctl: invalid protocol: 4 172.20.20.31:20001 [ 481.693508][T17397] pim6reg1: entered promiscuous mode [ 481.693532][T17397] pim6reg1: entered allmulticast mode [ 482.002619][T17399] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 482.032183][T17399] bond1: (slave macvlan2): making interface the new active one [ 482.054044][T17399] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 482.091855][ T5746] bond_slave_0: entered promiscuous mode [ 482.092839][ T5746] bond_slave_1: entered promiscuous mode [ 482.092906][ T5746] batadv1: entered promiscuous mode [ 482.093748][ T5746] veth3: entered promiscuous mode [ 482.519586][T17421] syzkaller0: entered promiscuous mode [ 482.519614][T17421] syzkaller0: entered allmulticast mode [ 482.679452][T17428] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2670'. [ 483.441371][T17453] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2673'. [ 483.458528][T17453] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 483.458652][T17453] syzkaller1: linktype set to 773 [ 483.739072][T17461] x_tables: duplicate entry at hook 1 [ 483.781886][T17462] ovs-s!: entered promiscuous mode [ 483.933749][T17461] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2677'. [ 484.281215][T17470] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2679'. [ 484.281278][T17470] netlink: 192 bytes leftover after parsing attributes in process `syz.0.2679'. [ 484.718052][T17488] netlink: 'syz.1.2683': attribute type 21 has an invalid length. [ 484.718290][T17488] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2683'. [ 484.730233][T17488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2683'. [ 484.819381][T17494] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2684'. [ 485.046089][T17505] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2686'. [ 485.348723][T17509] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2690'. [ 485.691170][T17522] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 485.714445][T17530] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2693'. [ 485.915523][T17539] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 485.915553][T17539] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 485.921069][T17534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2695'. [ 485.949944][T17534] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 486.297355][T17550] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2700'. [ 486.833863][T17559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 488.311005][T17593] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 488.311036][T17593] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 488.426057][T17571] netlink: 'syz.4.2707': attribute type 4 has an invalid length. [ 488.495285][T17599] netlink: 'syz.1.2715': attribute type 1 has an invalid length. [ 488.495308][T17599] netlink: 'syz.1.2715': attribute type 7 has an invalid length. [ 488.495323][T17599] netlink: 'syz.1.2715': attribute type 8 has an invalid length. [ 488.495340][T17599] NCSI netlink: No device for ifindex 1073545264 [ 489.055454][T17618] sctp: [Deprecated]: syz.4.2723 (pid 17618) Use of int in max_burst socket option. [ 489.055454][T17618] Use struct sctp_assoc_value instead [ 489.482589][T17628] __nla_validate_parse: 10 callbacks suppressed [ 489.482612][T17628] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2726'. [ 489.570321][T17630] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2727'. [ 489.805942][T17632] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2728'. [ 490.414614][ T5623] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 490.429482][ T5623] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 490.432297][ T5623] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 490.451748][ T5623] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 490.454893][ T5623] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 490.594042][ T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 490.596252][ T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 490.597526][ T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 490.601415][ T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 490.626470][ T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 491.057584][ T5615] : (slave syz_tun): Releasing backup interface [ 491.351487][T17671] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2738'. [ 491.406169][ T8534] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 491.576534][ T8534] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 491.717949][ T8534] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 491.881229][T17683] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2740'. [ 491.985377][ T8534] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 492.010316][T17687] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2742'. [ 492.091338][T17691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2742'. [ 492.151151][T17691] veth9: entered promiscuous mode [ 492.151177][T17691] veth9: entered allmulticast mode [ 492.164695][T17691] bridge6: port 1(veth9) entered blocking state [ 492.164891][T17691] bridge6: port 1(veth9) entered disabled state [ 492.168505][T17691] bridge6: port 1(veth9) entered blocking state [ 492.168633][T17691] bridge6: port 1(veth9) entered forwarding state [ 492.198637][T17690] syzkaller1: entered promiscuous mode [ 492.198663][T17690] syzkaller1: entered allmulticast mode [ 492.270097][T17687] veth11: entered promiscuous mode [ 492.270134][T17687] veth11: entered allmulticast mode [ 492.271231][T17687] bridge6: port 2(veth11) entered blocking state [ 492.271368][T17687] bridge6: port 2(veth11) entered disabled state [ 492.292546][T17687] bridge6: port 2(veth11) entered blocking state [ 492.292859][T17687] bridge6: port 2(veth11) entered forwarding state [ 492.388156][T17646] lo speed is unknown, defaulting to 1000 [ 492.656431][T17704] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2743'. [ 492.713261][ T5623] Bluetooth: hci6: command tx timeout [ 492.769786][T11814] bridge6: port 1(veth9) entered disabled state [ 492.829104][T11814] bridge6: port 2(veth11) entered disabled state [ 493.624205][T17724] xt_hashlimit: size too large, truncated to 1048576 [ 493.865871][ T8534] bond9 (unregistering): (slave ipip0): Releasing backup interface [ 493.866003][ T8534] ipip0 (unregistering): left promiscuous mode [ 493.927607][ T8534] bond12 (unregistering): (slave geneve3): Releasing active interface [ 494.037511][ T8534] bond4 (unregistering): (slave bridge4): Releasing backup interface [ 494.109052][ T8534]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 494.111175][ T8534]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 494.123567][ T8534]  (unregistering): Released all slaves [ 494.141661][ T8534] bond1 (unregistering): Released all slaves [ 494.165285][ T8534] bond2 (unregistering): Released all slaves [ 494.185439][ T8534] bond3 (unregistering): Released all slaves [ 494.210732][ T8534] bond4 (unregistering): Released all slaves [ 494.247601][ T8534] bond0 (unregistering): Released all slaves [ 494.266743][ T8534] bond5 (unregistering): (slave bond6): Releasing backup interface [ 494.267497][ T8534] bond5 (unregistering): Released all slaves [ 494.301056][ T8534] bond6 (unregistering): Released all slaves [ 494.333935][ T8534] bond7 (unregistering): Released all slaves [ 494.354331][ T8534] bond8 (unregistering): Released all slaves [ 494.374900][ T8534] bond9 (unregistering): Released all slaves [ 494.426755][ T8534] bond10 (unregistering): Released all slaves [ 494.450029][ T8534] bond11 (unregistering): Released all slaves [ 494.482882][ T8534] bond12 (unregistering): Released all slaves [ 494.504700][ T8534] bond13 (unregistering): Released all slaves [ 494.524952][ T8534] bond14 (unregistering): Released all slaves [ 494.570680][T17710] lo speed is unknown, defaulting to 1000 [ 494.580175][T17646] wg2 speed is unknown, defaulting to 1000 [ 494.759864][ T8534] ovs-s!!: left promiscuous mode [ 494.799008][ T5623] Bluetooth: hci6: command tx timeout [ 494.993596][ T8534] tipc: Left network mode [ 495.619122][T17745] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2752'. [ 495.646055][T17738] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 496.350809][T17710] wg2 speed is unknown, defaulting to 1000 [ 496.417314][T17759] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2753'. [ 496.862503][ T5623] Bluetooth: hci6: command tx timeout [ 497.524416][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 498.289554][T17793] smc: net device vlan1 applied user defined pnetid SYZ2 [ 498.509969][T17791] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2759'. [ 498.613932][T17809] openvswitch: netlink: Message has 4 unknown bytes. [ 498.620688][T17809] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2762'. [ 498.778394][T17810] netlink: zone id is out of range [ 498.778412][T17810] netlink: zone id is out of range [ 498.778420][T17810] netlink: zone id is out of range [ 498.778429][T17810] netlink: zone id is out of range [ 498.778438][T17810] netlink: zone id is out of range [ 498.778447][T17810] netlink: zone id is out of range [ 498.778455][T17810] netlink: zone id is out of range [ 498.778464][T17810] netlink: zone id is out of range [ 498.800869][T17809] netlink: 239 bytes leftover after parsing attributes in process `syz.5.2762'. [ 498.954639][ T5623] Bluetooth: hci6: command tx timeout [ 499.203417][T17821] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2764'. [ 499.204456][T17646] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.204569][T17646] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.204751][T17646] bridge_slave_0: entered allmulticast mode [ 499.206886][T17646] bridge_slave_0: entered promiscuous mode [ 499.239957][T17646] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.240394][T17646] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.240669][T17646] bridge_slave_1: entered allmulticast mode [ 499.267814][T17646] bridge_slave_1: entered promiscuous mode [ 499.671089][T17646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.755868][T17646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.644668][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 500.657777][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 500.667249][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 500.684637][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 500.685742][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 500.837710][T17837] veth0_macvtap: entered promiscuous mode [ 500.856214][T17837] net_ratelimit: 6 callbacks suppressed [ 500.856321][T17837] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 500.889511][T17646] team0: Port device team_slave_0 added [ 500.892591][T17854] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 500.915242][T17646] team0: Port device team_slave_1 added [ 500.919043][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 501.168311][T17646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 501.168332][T17646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 501.168369][T17646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 501.302906][ T8534] hsr_slave_0: left promiscuous mode [ 501.307399][ T8534] hsr_slave_1: left promiscuous mode [ 501.311401][ T8534] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 501.327867][ T8534] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 501.502142][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 501.868831][ T8534] team0 (unregistering): Port device 76žÿ removed [ 501.897467][ T8534] team0 (unregistering): Port device team_slave_0 removed [ 502.327061][T17646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.327083][T17646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.327112][T17646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 502.327781][T17854] syzkaller0: entered promiscuous mode [ 502.327800][T17854] syzkaller0: entered allmulticast mode [ 502.669435][T17889] sctp: [Deprecated]: syz.1.2776 (pid 17889) Use of struct sctp_assoc_value in delayed_ack socket option. [ 502.669435][T17889] Use struct sctp_sack_info instead [ 502.782537][ T52] Bluetooth: hci1: command tx timeout [ 502.848159][T17899] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2777'. [ 503.009704][T17646] hsr_slave_0: entered promiscuous mode [ 503.010776][T17646] hsr_slave_1: entered promiscuous mode [ 503.011530][T17646] debugfs: 'hsr0' already exists in 'hsr' [ 503.011550][T17646] Cannot create hsr debugfs directory [ 503.556828][T17917] Bluetooth: hci0: unsupported parameter 5135 [ 503.556852][T17917] Bluetooth: hci0: unsupported parameter 8192 [ 503.556866][T17917] Bluetooth: hci0: unsupported parameter 5135 [ 503.556880][T17917] Bluetooth: hci0: unsupported parameter 8192 [ 503.653958][T17920] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2779'. [ 503.791415][T17926] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2779'. [ 504.227817][ T8534] IPVS: stop unused estimator thread 0... [ 504.294170][T17934] netlink: 'syz.0.2780': attribute type 10 has an invalid length. [ 504.480755][T17949] openvswitch: netlink: Flow actions attr not present in new flow. [ 504.565147][T17934] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 504.568743][T17934] team0: Port device netdevsim1 added [ 504.689744][T17850] lo speed is unknown, defaulting to 1000 [ 504.689820][T17944] : left promiscuous mode [ 504.862824][ T52] Bluetooth: hci1: command tx timeout [ 504.943777][T17947] ip6tnl2: entered allmulticast mode [ 505.000175][ T5278] 8021q: adding VLAN 0 to HW filter on device eth3 [ 505.001026][T11819] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 505.001279][T11819] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 505.025313][ T5619] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 505.443249][T11870] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 505.473438][T17962] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2783'. [ 505.473514][T17962] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2783'. [ 505.503030][T11870] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 505.517313][T17964] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2785'. [ 505.531128][T17967] batadv_slave_1: entered promiscuous mode [ 505.668773][T17850] wg2 speed is unknown, defaulting to 1000 [ 505.684501][T17967] netlink: 'syz.5.2784': attribute type 34 has an invalid length. [ 505.736638][T17970] netlink: 'syz.1.2785': attribute type 3 has an invalid length. [ 505.736704][T17970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2785'. [ 506.475443][T17985] ip_tables: iptables: counters copy to user failed while replacing table [ 506.602558][T17987] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 506.828685][T17967] netlink: 'syz.5.2784': attribute type 10 has an invalid length. [ 506.867876][T17646] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 506.889127][T17646] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 506.890578][T17646] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 506.940231][T17646] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 506.942918][ T52] Bluetooth: hci1: command tx timeout [ 506.978403][T17646] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 507.023447][T17646] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 507.039103][T17646] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 507.073019][T17646] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 507.075717][T17965] batadv_slave_1: left promiscuous mode [ 507.132301][T17996] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2789'. [ 507.803508][T17646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.156285][T18035] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2796'. [ 508.174948][T17646] 8021q: adding VLAN 0 to HW filter on device team0 [ 508.219860][T17850] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.219975][T17850] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.220127][T17850] bridge_slave_0: entered allmulticast mode [ 508.244133][T17850] bridge_slave_0: entered promiscuous mode [ 508.431959][T17850] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.433335][T17850] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.433528][T17850] bridge_slave_1: entered allmulticast mode [ 508.435518][T17850] bridge_slave_1: entered promiscuous mode [ 508.561255][ T8534] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.561485][ T8534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 508.624163][T18028] syzkaller0: entered promiscuous mode [ 508.624189][T18028] syzkaller0: entered allmulticast mode [ 508.630836][T17850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.631839][T18033] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2794'. [ 508.674052][T17850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 508.736841][T11819] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.737067][T11819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 509.022062][ T52] Bluetooth: hci1: command tx timeout [ 509.049361][T17850] team0: Port device team_slave_0 added [ 509.083108][T17850] team0: Port device team_slave_1 added [ 509.298064][T18064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2801'. [ 509.299882][T17850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.299935][T17850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.299998][T17850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.347449][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 509.382458][T17850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 509.382514][T17850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.382785][T17850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 509.813838][T18081] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2802'. [ 509.900755][T18072] tipc: Resetting bearer [ 509.935104][T17850] hsr_slave_0: entered promiscuous mode [ 509.936207][T17850] hsr_slave_1: entered promiscuous mode [ 509.936958][T17850] debugfs: 'hsr0' already exists in 'hsr' [ 509.936979][T17850] Cannot create hsr debugfs directory [ 511.941251][T18133] bond10: entered promiscuous mode [ 511.941317][T18133] bond10: entered allmulticast mode [ 512.085421][T17850] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 512.114754][T17850] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 512.239217][T17850] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 512.258471][T17850] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 512.260339][T17850] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 512.293099][T17850] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 512.299748][T17850] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 512.335300][T17850] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 512.745259][T17646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 512.895103][T17850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 513.050384][T17850] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.087685][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.087800][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.126820][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.126934][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 514.957157][T18225] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2821'. [ 514.988023][T18230] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 515.038514][T18231] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2823'. [ 515.041362][T18229] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2823'. [ 515.041388][T18229] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2823'. [ 515.169587][T18225] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2821'. [ 515.169655][T18225] netlink: 356 bytes leftover after parsing attributes in process `syz.1.2821'. [ 515.169695][T18225] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2821'. [ 515.293059][T18244] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2823'. [ 515.373808][T18231] team0: Port device team_slave_0 removed [ 515.398207][T18229] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2823'. [ 515.400176][T17646] veth0_vlan: entered promiscuous mode [ 515.434064][T18228] syzkaller1: entered promiscuous mode [ 515.434124][T18228] syzkaller1: entered allmulticast mode [ 515.470475][T18231] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2823'. [ 515.538831][T17850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 515.557304][T18225] netlink: 'syz.1.2821': attribute type 1 has an invalid length. [ 515.722700][T17646] veth1_vlan: entered promiscuous mode [ 515.882338][T18255] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 515.882417][T18255] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 515.884054][T18255] tipc: Resetting bearer [ 516.060811][T17646] veth0_macvtap: entered promiscuous mode [ 516.121245][T17646] veth1_macvtap: entered promiscuous mode [ 516.174623][T17646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 516.213983][T17646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 516.335049][T18263] nbd: nbd64 already in use [ 516.355638][ T59] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.356085][ T59] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.356325][ T59] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.356367][ T59] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.570023][T17850] veth0_vlan: entered promiscuous mode [ 516.612410][ T152] tipc: Subscription rejected, illegal request [ 516.647996][T17850] veth1_vlan: entered promiscuous mode [ 516.879625][T18279] xt_IDLETIMER: timeout value is too big [ 517.066649][ T8533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.066709][ T8533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.171423][T17850] veth0_macvtap: entered promiscuous mode [ 517.301299][T10176] udevd[10176]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 517.491688][T17850] veth1_macvtap: entered promiscuous mode [ 517.541409][ T8533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.541469][ T8533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.780290][T17850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 517.867649][T17850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 518.023530][ T1426] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.141986][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 518.153369][ T8533] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.163683][ T152] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.163729][ T152] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.047305][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.047330][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.139588][ T6799] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.139675][ T6799] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.656155][T18327] team0: Device macvlan3 is up. Set it down before adding it as a team port [ 520.091418][T18341] netlink: 'syz.0.2844': attribute type 1 has an invalid length. [ 520.162862][T18351] __nla_validate_parse: 52 callbacks suppressed [ 520.162885][T18351] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2845'. [ 520.220856][T18355] netlink: 'syz.6.2845': attribute type 8 has an invalid length. [ 520.220883][T18355] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2845'. [ 520.388680][T18347] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.438500][T18347] bridge_slave_1 (unregistering): left allmulticast mode [ 520.438532][T18347] bridge_slave_1 (unregistering): left promiscuous mode [ 520.438626][T18347] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.489790][T18346] netlink: 260 bytes leftover after parsing attributes in process `syz.6.2845'. [ 520.510715][T18355] veth1_to_team: entered promiscuous mode [ 520.519102][T18355] gretap0: entered promiscuous mode [ 520.528586][T18355] veth1_to_team: left promiscuous mode [ 520.539180][T18355] gretap0: left promiscuous mode [ 521.191080][T18368] pim6reg1: entered promiscuous mode [ 521.191115][T18368] pim6reg1: entered allmulticast mode [ 521.207925][T18380] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 521.302599][T18381] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 521.603442][T18388] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2855'. [ 521.603547][T18388] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2855'. [ 522.442088][T18411] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2859'. [ 522.442414][T18411] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2859'. [ 522.609232][T18421] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2862'. [ 522.703887][T18420] tipc: Resetting bearer [ 523.438388][T18420] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 523.438476][T18420] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 523.622094][T18420] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 523.622119][T18420] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 523.888396][ T5623] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 523.912357][ T5623] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 523.923790][ T5623] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 523.930378][ T5623] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 523.944123][ T5623] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 524.070080][ T52] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 524.071189][ T52] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 524.071591][ T52] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 524.096910][ T5614] bond0: (slave syz_tun): Releasing backup interface [ 524.109194][ T52] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 524.109889][ T52] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 524.259363][T18444] openvswitch: netlink: IP tunnel TTL not specified. [ 524.259402][T18444] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 524.577207][T18454] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2869'. [ 525.687604][T18440] lo speed is unknown, defaulting to 1000 [ 525.803680][T18485] syzkaller1: entered promiscuous mode [ 525.803706][T18485] syzkaller1: entered allmulticast mode [ 526.224071][ T52] Bluetooth: hci7: command tx timeout [ 526.353705][T18500] netlink: 'syz.6.2881': attribute type 1 has an invalid length. [ 527.484429][T18504] team0: Port device team_slave_1 removed [ 527.522452][T18440] wg2 speed is unknown, defaulting to 1000 [ 528.166551][T18542] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2885'. [ 528.303889][ T52] Bluetooth: hci7: command tx timeout [ 528.575622][T18552] workqueue: name exceeds WQ_NAME_LEN. Truncating to: '¸ŠŸ>úáÂN9Ü5äx×Ùhˉ½p¡þàn [ 528.909664][T18562] C: renamed from veth1_to_team (while UP) [ 528.932883][T18562] netlink: 'syz.5.2892': attribute type 1 has an invalid length. [ 528.932925][T18562] netlink: 116 bytes leftover after parsing attributes in process `syz.5.2892'. [ 528.933998][T18562] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 529.277100][T18573] xt_policy: neither incoming nor outgoing policy selected [ 529.356670][T18576] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2896'. [ 529.771726][T18581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2898'. [ 529.786202][T18582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2898'. [ 529.823276][T18589] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2898'. [ 529.927344][T18440] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.927468][T18440] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.929356][T18440] bridge_slave_0: entered allmulticast mode [ 529.956240][T18440] bridge_slave_0: entered promiscuous mode [ 530.013408][T18440] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.013679][T18440] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.014097][T18440] bridge_slave_1: entered allmulticast mode [ 530.045092][T18440] bridge_slave_1: entered promiscuous mode [ 530.106025][T18440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 530.124719][T18440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 530.180294][T18440] team0: Port device team_slave_0 added [ 530.189719][T18440] team0: Port device team_slave_1 added [ 530.237624][T18440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 530.237644][T18440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 530.237672][T18440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 530.240221][T18440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 530.240236][T18440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 530.240265][T18440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.382242][ T52] Bluetooth: hci7: command tx timeout [ 530.383411][T18440] hsr_slave_0: entered promiscuous mode [ 530.384454][T18440] hsr_slave_1: entered promiscuous mode [ 530.385553][T18440] debugfs: 'hsr0' already exists in 'hsr' [ 530.385573][T18440] Cannot create hsr debugfs directory [ 530.895401][T18607] netlink: 'syz.1.2902': attribute type 21 has an invalid length. [ 530.895427][T18607] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2902'. [ 531.036689][T18440] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 26902 - 0 [ 531.036730][T18440] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.479738][T18440] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 26902 - 0 [ 531.479777][T18440] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.680614][T18628] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2907'. [ 531.713887][T18630] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 532.038745][T18643] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 532.149974][T18645] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2910'. [ 532.149998][T18645] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2910'. [ 532.150026][T18645] netlink: 'syz.6.2910': attribute type 14 has an invalid length. [ 532.291433][T18440] team0: Port device netdevsim1 removed [ 532.301330][T18440] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 26902 - 0 [ 532.301368][T18440] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.409960][T18647] vti0: entered promiscuous mode [ 532.409983][T18647] vti0: entered allmulticast mode [ 532.466473][ T52] Bluetooth: hci7: command tx timeout [ 532.786518][T18440] batman_adv: batadv0: Removing interface: vlan2 [ 532.838076][T18440] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 26902 - 0 [ 532.838125][T18440] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.889935][T18660] batman_adv: batadv0: Adding interface: syzkaller0 [ 532.889957][T18660] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 532.889992][T18660] batman_adv: batadv0: Interface activated: syzkaller0 [ 532.949345][T18655] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 532.987016][T18655] batman_adv: batadv0: Removing interface: syzkaller0 [ 533.248293][T18676] __nla_validate_parse: 2 callbacks suppressed [ 533.248312][T18676] netlink: 220 bytes leftover after parsing attributes in process `syz.5.2918'. [ 533.309974][T18676] netlink: 120 bytes leftover after parsing attributes in process `syz.5.2918'. [ 533.310002][T18676] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2918'. [ 533.312398][T18676] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2918'. [ 533.312565][T18676] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2918'. [ 533.312601][T18676] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2918'. [ 533.343134][T18676] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2918'. [ 533.343191][T18676] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2918'. [ 533.490748][T18688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2919'. [ 533.533650][T18440] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 533.561628][T18440] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 533.574321][T18440] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 533.600462][T18440] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 533.616006][T18440] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 533.652016][T18440] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 533.652954][T18440] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 533.684636][T18440] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 534.121706][T18440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 534.164742][T18440] 8021q: adding VLAN 0 to HW filter on device team0 [ 534.227790][ T152] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.228000][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.300643][ T8537] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.300879][ T8537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.506837][T18720] batman_adv: batadv0: Adding interface: syzkaller0 [ 534.506889][T18720] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.506957][T18720] batman_adv: batadv0: Interface activated: syzkaller0 [ 534.509529][T18721] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.510167][T18721] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.550597][T18720] netlink: 'syz.5.2926': attribute type 1 has an invalid length. [ 534.590191][T18725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2927'. [ 534.605790][T18721] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 534.967459][T18744] bridge1: entered promiscuous mode [ 534.998711][T18744] bond2: (slave bridge1): making interface the new active one [ 535.026810][T18744] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 535.029951][T18740] 8021q: VLANs not supported on vcan0 [ 535.075350][T18440] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 535.075385][T18440] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 535.146969][T18719] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 535.269557][T18719] batman_adv: batadv0: Removing interface: syzkaller0 [ 535.625632][T18760] A link change request failed with some changes committed already. Interface vxcan1 may have been left with an inconsistent configuration, please check. [ 535.704498][T18767] netlink: 'syz.5.2937': attribute type 1 has an invalid length. [ 535.797434][T18767] bond4: entered promiscuous mode [ 535.798122][T18767] 8021q: adding VLAN 0 to HW filter on device bond4 [ 535.942306][T18767] bond4: (slave bridge2): making interface the new active one [ 535.942331][T18767] bridge2: entered promiscuous mode [ 535.948633][T18767] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 536.061985][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 536.188066][T18771] netlink: 'syz.1.2939': attribute type 1 has an invalid length. [ 536.663515][T18794] sctp: [Deprecated]: syz.5.2943 (pid 18794) Use of int in max_burst socket option. [ 536.663515][T18794] Use struct sctp_assoc_value instead [ 537.223892][T18805] xt_hashlimit: size too large, truncated to 1048576 [ 537.256142][T18811] Cannot find set identified by id 0 to match [ 537.675636][T18440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 538.278489][T18440] veth0_vlan: entered promiscuous mode [ 538.338724][T18440] veth1_vlan: entered promiscuous mode [ 538.418480][T18440] veth0_macvtap: entered promiscuous mode [ 538.467790][T18440] veth1_macvtap: entered promiscuous mode [ 538.499341][T18440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 538.517848][T18440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 538.574687][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.574773][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.574816][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.574856][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.784459][ T152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.784518][ T152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.934216][ T6799] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.934240][ T6799] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.030290][T18845] netlink: 'syz.5.2951': attribute type 1 has an invalid length. [ 539.215370][T18845] 8021q: adding VLAN 0 to HW filter on device bond5 [ 539.277734][T18858] __nla_validate_parse: 18 callbacks suppressed [ 539.277757][T18858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2953'. [ 539.315253][T18862] netlink: 'syz.6.2954': attribute type 11 has an invalid length. [ 540.292370][T18898] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2962'. [ 540.300379][ T5619] hid-generic 0005:15C2:0009.0004: item fetching failed at offset 0/2 [ 540.301179][ T5619] hid-generic 0005:15C2:0009.0004: probe with driver hid-generic failed with error -22 [ 540.556997][T18902] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2963'. [ 540.965018][ T5623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 540.971425][ T5623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 540.991743][ T5623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 540.993056][ T5623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 540.994517][ T5623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 542.325210][T18936] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2969'. [ 542.327188][T18936] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2969'. [ 543.104159][ T5623] Bluetooth: hci0: command tx timeout [ 543.856411][T18910] lo speed is unknown, defaulting to 1000 [ 543.884728][T18957] can: request_module (can-proto-3) failed. [ 544.335784][T18981] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2978'. [ 544.357695][T18982] Bluetooth: MGMT ver 1.23 [ 544.373369][T18982] Bluetooth: hci0: unsupported parameter 5135 [ 544.373389][T18982] Bluetooth: hci0: unsupported parameter 8192 [ 544.373403][T18982] Bluetooth: hci0: unsupported parameter 5135 [ 544.373416][T18982] Bluetooth: hci0: unsupported parameter 8192 [ 544.524066][ T8537] bridge6: port 2(veth11) entered disabled state [ 544.592893][T18983] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20002 [ 544.667995][ T8537] bridge6: port 1(veth9) entered disabled state [ 544.810779][T18991] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2979'. [ 545.147991][T18998] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2982'. [ 545.199871][ T5623] Bluetooth: hci0: command tx timeout [ 545.800985][ T8537] bond1 (unregistering): (slave veth7): Releasing active interface [ 545.801056][ T8537] batadv1: entered promiscuous mode [ 545.826061][ T8537] bond1 (unregistering): (slave batadv1): Releasing active interface [ 545.826121][ T8537] batadv1: left promiscuous mode [ 545.833721][ T8537] bond1 (unregistering): Released all slaves [ 545.873530][ T8537] bond2 (unregistering): Released all slaves [ 545.898966][ T8537] bond3 (unregistering): Released all slaves [ 545.937727][ T8537] bond4 (unregistering): Released all slaves [ 545.961250][ T8537] bond5 (unregistering): (slave bond6): Releasing backup interface [ 545.970516][ T8537] bond5 (unregistering): Released all slaves [ 545.991172][ T8537] bond6 (unregistering): Released all slaves [ 546.036611][ T8537] bond0 (unregistering): Released all slaves [ 546.060400][ T8537] bond7 (unregistering): Released all slaves [ 546.088941][ T8537] bond8 (unregistering): (slave veth0_to_bond): Releasing active interface [ 546.091350][ T8537] bond8 (unregistering): Released all slaves [ 546.123547][ T8537] bond9 (unregistering): Released all slaves [ 546.186475][T18991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 546.256326][T18991] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 546.495488][T19018] openvswitch: netlink: Port 856954028 exceeds max allowable 65535 [ 546.517392][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 546.641732][ T8537] D†'|o: left promiscuous mode [ 546.702913][T18910] wg2 speed is unknown, defaulting to 1000 [ 546.879081][ T8537] tipc: Left network mode [ 547.121428][ T8537] IPVS: stopping master sync thread 6267 ... [ 547.129153][T19015] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 547.180529][T19015] bond1 (unregistering): Released all slaves [ 547.272110][ T5623] Bluetooth: hci0: command tx timeout [ 547.583444][T19043] syzkaller1: entered promiscuous mode [ 547.583472][T19043] syzkaller1: entered allmulticast mode [ 547.848388][T19056] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2992'. [ 548.620603][T19078] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.620725][T19078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 548.621052][T19078] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.621163][T19078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 548.916995][T19075] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2996'. [ 549.068061][T19092] ÿÿÿ: renamed from bond_slave_0 (while UP) [ 549.145620][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 549.342178][ T5623] Bluetooth: hci0: command tx timeout [ 549.527267][T19105] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 550.065582][T19117] sctp: [Deprecated]: syz.4.3003 (pid 19117) Use of int in maxseg socket option. [ 550.065582][T19117] Use struct sctp_assoc_value instead [ 550.288505][T19129] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 550.831107][T19142] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3008'. [ 550.911144][T19144] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3008'. [ 550.911245][T19144] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3008'. [ 551.303069][T19154] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3008'. [ 551.949169][ T8537] hsr_slave_0: left promiscuous mode [ 551.951316][ T8537] hsr_slave_1: left promiscuous mode [ 551.977893][ T8537] veth1_vlan: left allmulticast mode [ 552.251322][ T8537] smc: removing net device vlan1 with user defined pnetid SYZ2 [ 552.593306][ T8537] team0 (unregistering): Port device dummy0 removed [ 552.651370][ T6799] smc: removing ib device syz0 [ 552.777079][T19129] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.836679][ T6799] smbdirect: ib_dev[syz0] removed [ 552.889864][ T5278] 8021q: adding VLAN 0 to HW filter on device eth3 [ 553.588275][T19129] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.680869][T18910] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.681034][T18910] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.681203][T18910] bridge_slave_0: entered allmulticast mode [ 553.714605][T18910] bridge_slave_0: entered promiscuous mode [ 553.869134][T19177] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 553.888941][T18910] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.889086][T18910] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.889253][T18910] bridge_slave_1: entered allmulticast mode [ 553.925719][T18910] bridge_slave_1: entered promiscuous mode [ 554.243800][T19129] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.330019][T19186] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3014'. [ 554.330076][T19186] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3014'. [ 554.370636][T19189] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3015'. [ 554.605000][T18910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 554.852833][T19129] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.119066][T18910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 555.396145][T19210] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3017'. [ 555.396237][T19210] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3017'. [ 555.422894][T19210] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3017'. [ 555.443435][T18910] team0: Port device team_slave_0 added [ 555.469196][T18910] team0: Port device team_slave_1 added [ 555.797335][T19212] bridge1: entered allmulticast mode [ 555.801138][T19215] 8021q: VLANs not supported on ip6gre0 [ 556.027148][T19218] vti0: left promiscuous mode [ 556.145790][T19234] netlink: 'syz.0.3021': attribute type 3 has an invalid length. [ 556.272922][T18910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 556.272941][T18910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 556.272969][T18910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 556.306082][ T5278] 8021q: adding VLAN 0 to HW filter on device eth4 [ 556.344344][T18910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 556.344362][T18910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 556.344391][T18910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 556.815653][T19242] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3023'. [ 556.986835][T19253] ip6t_frag: unknown flags 4 [ 557.408316][T18910] hsr_slave_0: entered promiscuous mode [ 557.421616][T18910] hsr_slave_1: entered promiscuous mode [ 557.438341][T18910] debugfs: 'hsr0' already exists in 'hsr' [ 557.438366][T18910] Cannot create hsr debugfs directory [ 558.134360][ T1426] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.886722][T19300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3030'. [ 558.942427][ T1171] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.943425][ T1171] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.087332][T19310] netlink: 'syz.5.3031': attribute type 10 has an invalid length. [ 559.087656][T19311] netlink: 'syz.5.3031': attribute type 10 has an invalid length. [ 559.217061][T19300] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 559.308354][T19319] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3032'. [ 559.656272][T19324] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3033'. [ 560.333378][ T8533] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.689438][T19350] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3037'. [ 561.087947][T19360] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3041'. [ 561.216459][T19350] 8021q: adding VLAN 0 to HW filter on device bond1 [ 561.545120][ T8537] IPVS: stop unused estimator thread 0... [ 561.833804][T19379] netlink: 'syz.4.3045': attribute type 3 has an invalid length. [ 561.942851][T19373] netlink: 'syz.4.3045': attribute type 3 has an invalid length. [ 562.414254][T19381] syzkaller1: entered promiscuous mode [ 562.414280][T19381] syzkaller1: entered allmulticast mode [ 563.249776][T19413] syzkaller1: entered promiscuous mode [ 563.249804][T19413] syzkaller1: entered allmulticast mode [ 563.958307][T19439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3051'. [ 563.958379][T19439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3051'. [ 564.066631][T18910] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 564.105010][T18910] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 564.107552][T18910] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 564.138385][T18910] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 564.141303][T18910] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 564.168262][T18910] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 564.171471][T18910] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 564.211961][T18910] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 564.244681][ T152] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.304680][ T59] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.315205][ T152] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.352651][ T1426] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.670544][T19458] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3054'. [ 564.924103][T19471] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3057'. [ 564.951546][T18910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 565.014074][T18910] 8021q: adding VLAN 0 to HW filter on device team0 [ 565.110148][ T8533] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.110397][ T8533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 565.130244][T19478] netlink: 564 bytes leftover after parsing attributes in process `syz.6.3060'. [ 565.226443][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.226671][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 565.913306][T19502] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3063'. [ 566.780314][T19535] syzkaller0: entered promiscuous mode [ 566.780340][T19535] syzkaller0: entered allmulticast mode [ 566.817246][T19535] tipc: Started in network mode [ 566.817279][T19535] tipc: Node identity 06a9cd8d43cc, cluster identity 4711 [ 566.817425][T19535] tipc: Enabled bearer , priority 0 [ 566.977380][T19535] tipc: Resetting bearer [ 567.157230][T19535] tipc: Disabling bearer [ 567.715455][T19565] ip6t_ah: unknown flags 4 [ 567.735231][T19556] : option downdelay: invalid value (18446744073709547007) [ 567.735300][T19556] : option downdelay: allowed values 0 - 2147483647 [ 567.763615][T19556]  (unregistering): Released all slaves [ 568.378184][T18910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 568.770513][T18910] veth0_vlan: entered promiscuous mode [ 568.871522][T18910] veth1_vlan: entered promiscuous mode [ 569.141080][T18910] veth0_macvtap: entered promiscuous mode [ 569.167557][T18910] veth1_macvtap: entered promiscuous mode [ 569.358157][T18910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 569.446723][T18910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 569.726052][ T1426] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.729094][ T1426] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.935406][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.935602][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.178688][T19620] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 570.239054][T19617] syzkaller0: entered promiscuous mode [ 570.239114][T19617] syzkaller0: entered allmulticast mode [ 570.381459][ T8537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.381504][ T8537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.681296][ T8537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.681337][ T8537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 571.274873][T11890] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 571.302744][T19638] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 571.421727][T19648] netlink: 100 bytes leftover after parsing attributes in process `syz.6.3089'. [ 571.947913][T19665] C: renamed from veth1_to_team (while UP) [ 571.963091][T19665] netlink: 'syz.4.3092': attribute type 1 has an invalid length. [ 571.963113][T19665] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3092'. [ 571.963558][T19665] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 572.083108][T19668] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3095'. [ 572.510040][T19673] netlink: 'syz.5.3096': attribute type 11 has an invalid length. [ 572.542079][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 573.027503][T19688] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3100'. [ 573.247073][T19693] mac80211_hwsim hwsim41 wlan0: entered promiscuous mode [ 573.247141][T19693] mac80211_hwsim hwsim41 wlan0: entered allmulticast mode [ 573.280191][T19697] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3102'. [ 573.298029][T19693] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 573.740637][ T6799] IPVS: starting estimator thread 0... [ 573.759320][T19717] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 573.761240][T19716] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 573.832968][T19722] IPVS: using max 28 ests per chain, 67200 per kthread [ 574.436825][T19742] netlink: 2 bytes leftover after parsing attributes in process `syz.5.3109'. [ 574.693074][T19744] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3110'. [ 574.693142][T19744] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3110'. [ 574.754120][T19752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3114'. [ 574.790237][T19749] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3112'. [ 575.195233][T19744] macsec1: entered promiscuous mode [ 575.195258][T19744] bridge0: entered promiscuous mode [ 577.273035][T19845] syzkaller0: create flow: hash 1183003960 index 2 [ 577.441739][T19845] syzkaller0: delete flow: hash 1183003960 index 2 [ 577.477333][ T1171] syzkaller0: tun_net_xmit 76 [ 577.477623][ T1171] syzkaller0: tun_net_xmit 48 [ 580.782789][ T9] page_pool_release_retry() stalled pool shutdown: id 191, 1 inflight 60 sec [ 580.876836][T19884] __nla_validate_parse: 3 callbacks suppressed [ 580.876858][T19884] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3140'. [ 580.876876][T19884] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3140'. [ 580.876893][T19884] netlink: 'syz.1.3140': attribute type 4 has an invalid length. [ 580.946745][T19883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3140'. [ 581.163901][T19896] netlink: 'syz.6.3144': attribute type 12 has an invalid length. [ 581.163927][T19896] netlink: 'syz.6.3144': attribute type 29 has an invalid length. [ 581.163942][T19896] netlink: 148 bytes leftover after parsing attributes in process `syz.6.3144'. [ 581.163977][T19896] netlink: 59 bytes leftover after parsing attributes in process `syz.6.3144'. [ 581.619561][T19911] syzkaller0: entered promiscuous mode [ 581.619588][T19911] syzkaller0: entered allmulticast mode [ 581.648317][T19911] tipc: Started in network mode [ 581.648352][T19911] tipc: Node identity 9674e72011c7, cluster identity 4711 [ 581.648646][T19911] tipc: Enabled bearer , priority 0 [ 581.682912][T19911] tipc: Resetting bearer [ 581.708672][T19910] tipc: Resetting bearer [ 581.745182][T19910] tipc: Disabling bearer [ 582.049659][T19897] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3143'. [ 582.049702][T19897] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3143'. [ 582.307677][T19919] bond1 (unregistering): Released all slaves [ 582.348202][T19923] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3151'. [ 583.067081][T19949] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.3154'. [ 583.553689][T19968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3161'. [ 584.586255][T19993] À: option downdelay: invalid value (18446744073709547007) [ 584.586319][T19993] À: option downdelay: allowed values 0 - 2147483647 [ 584.600972][T19993] À (unregistering): Released all slaves [ 586.059537][T20056] pimreg9: entered allmulticast mode [ 586.059883][T20053] __nla_validate_parse: 3 callbacks suppressed [ 586.059940][T20053] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3175'. [ 586.095124][T20053] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3175'. [ 586.095503][T20053] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3175'. [ 586.096170][T20053] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3175'. [ 586.332534][T20065] netlink: 88 bytes leftover after parsing attributes in process `syz.6.3178'. [ 586.334538][T20066] netlink: 88 bytes leftover after parsing attributes in process `syz.6.3178'. [ 586.334974][T20067] netlink: 88 bytes leftover after parsing attributes in process `syz.6.3178'. [ 586.635336][T20073] ip6t_hbh: unknown flags AD [ 587.905323][T20012] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 588.290536][T20088] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3186'. [ 588.328877][T20087] netlink: 144 bytes leftover after parsing attributes in process `syz.5.3185'. [ 588.860486][T20107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3192'. [ 588.968583][T20097] netlink: 'syz.1.3188': attribute type 7 has an invalid length. [ 589.476490][T20123] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 589.696066][T20125] tc_dump_action: action bad kind [ 589.738215][T20125] nf_ct_set_timeout: 14 callbacks suppressed [ 589.738234][T20125] No such timeout policy "syz1" [ 589.784122][T20125] tc_dump_action: action bad kind [ 589.804883][T20134] No such timeout policy "syz1" [ 589.914339][ T152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.914392][ T152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.964474][ T1426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.964530][ T1426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.357589][T20152] ip_tables: iptables: counters copy to user failed while replacing table [ 590.488084][T20152] ip_tables: iptables: counters copy to user failed while replacing table [ 590.572463][T20161] block nbd0: server does not support multiple connections per device. [ 590.577784][T20158] IPVS: set_ctl: invalid protocol: 33 224.0.0.1:20004 [ 590.603086][T20161] block nbd0: shutting down sockets [ 591.424159][T20168] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 591.424202][T20168] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 591.444978][T20185] __nla_validate_parse: 12 callbacks suppressed [ 591.445031][T20185] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3213'. [ 591.607040][T20189] netlink: 'syz.0.3214': attribute type 1 has an invalid length. [ 591.700955][T20168] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 591.700979][T20168] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 592.116665][T20204] Bluetooth: MGMT ver 1.23 [ 592.116701][T20204] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 592.119099][T20202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3218'. [ 592.187052][T20202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3218'. [ 592.229528][T20211] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3221'. [ 592.337449][T20211] netlink: 136 bytes leftover after parsing attributes in process `syz.4.3221'. [ 592.518010][T20219] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 592.518117][T20219] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 592.518214][T20219] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 592.518307][T20219] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 592.518400][T20219] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 592.518528][T20219] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 592.518630][T20219] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 592.518731][T20219] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 592.518832][T20219] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 592.518942][T20219] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 593.167277][T20239] netpci0: tun_chr_ioctl cmd 1074025678 [ 593.167344][T20239] netpci0: group set to 0 [ 593.249996][T20272] netlink: 9 bytes leftover after parsing attributes in process `syz.5.3227'. [ 593.768076][T20272] 0·: renamed from hsr0 (while UP) [ 593.819179][T20272] 0·: entered allmulticast mode [ 593.819205][T20272] hsr_slave_0: entered allmulticast mode [ 593.819223][T20272] hsr_slave_1: entered allmulticast mode [ 593.819714][T20272] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 593.974070][T20290] syzkaller0: entered promiscuous mode [ 593.974096][T20290] syzkaller0: entered allmulticast mode [ 593.981120][T20290] netlink: 168 bytes leftover after parsing attributes in process `syz.6.3229'. [ 594.498661][T20310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3231'. [ 594.775157][T20322] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3235'. [ 598.087152][T20319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3231'. [ 598.090269][T20318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3231'. [ 598.300434][T20324] geneve0: entered promiscuous mode [ 598.347834][T20324] batman_adv: batadv0: Adding interface: macvlan4 [ 598.347908][T20324] batman_adv: batadv0: The MTU of interface macvlan4 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 598.347964][T20324] batman_adv: batadv0: Interface activated: macvlan4 [ 598.814192][T20340] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3241'. [ 598.958833][T20349] netlink: 'syz.4.3241': attribute type 15 has an invalid length. [ 599.231282][T20357] netlink: 'syz.5.3243': attribute type 1 has an invalid length. [ 599.231575][T20357] netlink: 'syz.5.3243': attribute type 2 has an invalid length. [ 600.269330][T20366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3247'. [ 600.375445][T20369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3247'. [ 600.395394][T20366] syz_tun: entered promiscuous mode [ 600.402303][T20366] macvtap1: entered promiscuous mode [ 600.402744][T20366] macvtap1: entered allmulticast mode [ 600.402793][T20366] syz_tun: entered allmulticast mode [ 600.493016][T20376] netlink: 'syz.4.3248': attribute type 3 has an invalid length. [ 600.493080][T20376] netlink: 'syz.4.3248': attribute type 1 has an invalid length. [ 600.493117][T20376] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3248'. [ 600.493211][T20376] NCSI netlink: No device for ifindex 0 [ 601.172586][T20386] lo: entered promiscuous mode [ 601.336652][T20395] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 601.900735][T20386] tunl0: entered promiscuous mode [ 601.925152][T20386] gre0: entered promiscuous mode [ 602.077560][T20386] gretap0: entered promiscuous mode [ 602.091377][T20386] erspan0: entered promiscuous mode [ 602.107656][T20386] ip_vti0: entered promiscuous mode [ 602.113994][T20386] ip6_vti0: entered promiscuous mode [ 602.128478][T20386] sit0: entered promiscuous mode [ 602.140784][T20386] ip6tnl0: entered promiscuous mode [ 602.143134][T20386] ip6gre0: entered promiscuous mode [ 602.154339][T20386] syz_tun: entered promiscuous mode [ 602.162815][T20386] ip6gretap0: entered promiscuous mode [ 602.173640][T20386] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.174799][T20386] bridge0: entered promiscuous mode [ 602.204335][T20386] vcan0: entered promiscuous mode [ 602.209907][T20386] ÿÿÿ: left promiscuous mode [ 602.210114][T20386] bond_slave_1: left promiscuous mode [ 602.211119][T20386] batadv1: left promiscuous mode [ 602.211423][T20386] veth3: left promiscuous mode [ 602.211550][T20386] bond0: entered promiscuous mode [ 602.211618][T20386] ÿÿÿ: entered promiscuous mode [ 602.223072][T20386] bond_slave_1: entered promiscuous mode [ 602.223547][T20386] batadv1: entered promiscuous mode [ 602.223977][T20386] veth3: entered promiscuous mode [ 602.275688][T20386] team0: entered promiscuous mode [ 602.275712][T20386] team_slave_1: entered promiscuous mode [ 602.280748][T20386] nlmon0: entered promiscuous mode [ 602.282553][T20386] batadv0: entered promiscuous mode [ 602.300145][T20386] vxcan0: entered promiscuous mode [ 602.316453][T20386] veth0: entered promiscuous mode [ 602.319956][T20386] veth1: entered promiscuous mode [ 602.341350][T20386] wg0: entered promiscuous mode [ 602.352930][T20386] wg1: entered promiscuous mode [ 602.355391][T20386] wg2: entered promiscuous mode [ 602.358789][T20386] veth0_to_bridge: entered promiscuous mode [ 602.404465][T20386] veth0_to_bond: entered promiscuous mode [ 602.423402][T20386] veth1_to_bond: entered promiscuous mode [ 602.440090][T20386] C: entered promiscuous mode [ 602.457642][T20386] veth0_to_batadv: entered promiscuous mode [ 602.479246][T20386] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 602.497463][T20386] batadv_slave_0: entered promiscuous mode [ 602.514701][T20386] veth1_to_batadv: entered promiscuous mode [ 602.520563][T20386] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 602.520670][T20386] batadv_slave_1: entered promiscuous mode [ 602.528790][T20386] xfrm0: entered promiscuous mode [ 602.538587][T20386] veth0_to_hsr: entered promiscuous mode [ 602.551533][T20386] veth1_to_hsr: entered promiscuous mode [ 602.578137][T20386] 0·: entered promiscuous mode [ 602.588277][T20386] veth1_virt_wifi: entered promiscuous mode [ 602.600482][T20386] veth0_virt_wifi: entered promiscuous mode [ 602.617367][T20386] virt_wifi0: entered promiscuous mode [ 602.659334][T20386] vlan0: entered promiscuous mode [ 602.670276][T20386] vlan1: entered promiscuous mode [ 602.684023][T20386] macvlan0: entered promiscuous mode [ 602.705092][T20386] macvlan1: entered promiscuous mode [ 602.716522][T20386] ipvlan0: entered promiscuous mode [ 602.717046][T20386] ipvlan1: entered promiscuous mode [ 602.750259][T20386] macvtap0: entered promiscuous mode [ 602.757051][T20386] macsec0: entered promiscuous mode [ 602.772693][T20386] geneve1: entered promiscuous mode [ 602.780033][T20386] mac80211_hwsim hwsim36 wlan0: entered promiscuous mode [ 602.780213][T20386] mac80211_hwsim hwsim37 wlan1: entered promiscuous mode [ 602.780371][T20386] wireguard0: entered promiscuous mode [ 602.807654][T20386] veth2: entered promiscuous mode [ 602.827214][T20386] bond1: entered promiscuous mode [ 602.827283][T20386] macvlan2: entered promiscuous mode [ 602.846803][T20386] mac80211_hwsim hwsim39 wlan2: entered promiscuous mode [ 602.846972][T20386] ip6tnl1: entered promiscuous mode [ 602.847106][T20386] ip6erspan0: entered promiscuous mode [ 602.847328][T20386] gtp0: entered promiscuous mode [ 602.849128][T20386] erspan1: entered promiscuous mode [ 602.849338][T20386] ip6tnl2: entered promiscuous mode [ 602.873218][T20386] macvlan3: entered promiscuous mode [ 602.901132][T20386] bond2: entered promiscuous mode [ 602.901469][T20386] bond3: entered promiscuous mode [ 602.942958][T20386] vlan2: entered promiscuous mode [ 602.947505][T20386] bond5: entered promiscuous mode [ 602.949871][T20386] veth4: entered promiscuous mode [ 602.950455][T20386] veth5: entered promiscuous mode [ 602.950924][T20386] netdevsim netdevsim5 eth0: entered promiscuous mode [ 602.951315][T20386] netdevsim netdevsim5 eth1: entered promiscuous mode [ 602.951676][T20386] netdevsim netdevsim5 eth2: entered promiscuous mode [ 602.966176][T20386] netdevsim netdevsim5 eth3: entered promiscuous mode [ 602.966411][T20386] batman_adv: batadv0: Interface deactivated: macvlan4 [ 602.976062][T20386] macvlan4: entered promiscuous mode [ 603.120491][T20384] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 603.122333][ T3345] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.135594][ T3345] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.149920][ T8537] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.153477][ T6799] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.174562][T20390] netlink: 'syz.1.3254': attribute type 4 has an invalid length. [ 603.488529][T20411] batman_adv: batadv0: Adding interface: syzkaller0 [ 603.488590][T20411] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 603.488654][T20411] batman_adv: batadv0: Interface activated: syzkaller0 [ 603.564284][T20409] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 603.814549][T20409] batman_adv: batadv0: Removing interface: syzkaller0 [ 604.149672][T20423] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3261'. [ 604.195133][T20425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3263'. [ 604.354250][T20418] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.354806][T20418] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.009754][T20442] xt_hashlimit: overflow, rate too high: 0 [ 605.106391][T20418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 605.148146][T20418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 605.796911][T20418] mac80211_hwsim hwsim41 wlan0: left promiscuous mode [ 605.796976][T20418] mac80211_hwsim hwsim41 wlan0: left allmulticast mode [ 605.809771][T20418] vti0: left allmulticast mode [ 605.964098][T20425] netlink: 'syz.1.3263': attribute type 1 has an invalid length. [ 605.964161][T20425] netlink: 'syz.1.3263': attribute type 2 has an invalid length. [ 606.081336][ T6799] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.096347][ T6799] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.096676][ T6799] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.100378][ T3345] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.392549][T20459] netlink: 'syz.5.3267': attribute type 10 has an invalid length. [ 606.438984][T20459] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 606.520809][T20459] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3267'. [ 607.561711][T20481] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3270'. [ 607.561843][T20481] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3270'. [ 607.598712][T20472] 8021q: adding VLAN 0 to HW filter on device bond1 [ 607.779818][T20481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 607.851123][T20481] bond1: (slave bond0): making interface the new active one [ 607.929485][T20481] bond1: (slave bond0): Enslaving as an active interface with an up link [ 607.945891][T20477] tipc: Started in network mode [ 607.945960][T20477] tipc: Node identity fe5a19c123af, cluster identity 4711 [ 607.946458][T20477] tipc: Enabled bearer , priority 0 [ 608.130290][T20472] bond1 (unregistering): (slave bond0): Releasing active interface [ 608.166000][T20472] bond1 (unregistering): Released all slaves [ 608.363566][T20492] ip_tables: iptables: counters copy to user failed while replacing table [ 608.408732][T20484] tipc: Resetting bearer [ 608.451906][T20471] tipc: Disabling bearer [ 608.995714][T20493] netlink: 'syz.4.3275': attribute type 16 has an invalid length. [ 608.995777][T20493] netlink: 'syz.4.3275': attribute type 17 has an invalid length. [ 609.414706][T20493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 609.450491][T20493] 8021q: adding VLAN 0 to HW filter on device team0 [ 609.498231][T20493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 609.747926][T20493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 609.766428][T20493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 609.829918][T20493] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 609.829975][T20493] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 609.883922][T20493] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 610.450200][ T3345] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.450461][ T3345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 610.487070][ T3345] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.487296][ T3345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 610.700228][T20520] tipc: Enabling of bearer rejected, failed to enable media [ 612.264658][T20536] vxcan2: entered allmulticast mode [ 612.723058][T20556] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 612.723147][T20556] IPv6: NLM_F_CREATE should be set when creating new route [ 612.724998][T20556] IPv6: NLM_F_CREATE should be set when creating new route [ 613.460943][T20567] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3286'. [ 613.461013][T20567] openvswitch: netlink: Invalid VLAN frame [ 614.753453][T20585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3290'. [ 614.753532][T20585] netlink: 'syz.4.3290': attribute type 10 has an invalid length. [ 614.753592][T20585] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3290'. [ 614.847335][T20575] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3288'. [ 615.008624][T20585] geneve2: entered promiscuous mode [ 615.008694][T20585] geneve2: entered allmulticast mode [ 615.052176][ T8531] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.052308][ T8531] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.052408][ T8531] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.052505][ T8531] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.885922][T20608] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3296'. [ 615.891592][T20608] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3296'. [ 617.065107][T20629] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3299'. [ 617.068459][T20632] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3299'. [ 617.708407][T20646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3301'. [ 621.399951][T20638] bridge_slave_0: left allmulticast mode [ 621.400019][T20638] bridge_slave_0: left promiscuous mode [ 621.418167][T20638] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.464420][T20638] bridge_slave_1: left allmulticast mode [ 621.464482][T20638] bridge_slave_1: left promiscuous mode [ 621.465074][T20638] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.556915][T20638] bond0: (slave bond_slave_0): Releasing backup interface [ 621.610266][T20638] bond0: (slave bond_slave_1): Releasing backup interface [ 621.706122][T20638] team0: Port device team_slave_0 removed [ 621.708639][T20638] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 621.708702][T20638] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 621.728147][T20638] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 622.129855][T20665] netlink: 'syz.1.3306': attribute type 1 has an invalid length. [ 622.129918][T20665] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3306'. [ 622.224393][T20666] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3306'. [ 622.850217][T20684] netlink: 'syz.4.3310': attribute type 9 has an invalid length. [ 623.683923][T20693] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3313'. [ 623.960817][T20698] netlink: 'syz.6.3313': attribute type 62 has an invalid length. [ 624.267475][T20684] syz_tun: entered allmulticast mode [ 624.519391][T20706] x_tables: duplicate underflow at hook 2 [ 624.604411][T20684] dvmrp8: entered allmulticast mode [ 624.651531][T20683] syz_tun: left allmulticast mode [ 625.364610][T20723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3321'. [ 625.483532][T20717] 8021q: adding VLAN 0 to HW filter on device bond6 [ 625.792968][T20730] netlink: 51 bytes leftover after parsing attributes in process `syz.4.3322'. [ 625.828455][T20732] ip_tables: iptables: counters copy to user failed while replacing table [ 626.444778][T20736] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3325'. [ 626.518742][T20687] lo speed is unknown, defaulting to 1000 [ 626.684743][T20724] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 626.956826][T20751] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3327'. [ 626.974270][T20752] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 626.996615][T20736] 8021q: adding VLAN 0 to HW filter on device bond7 [ 627.011321][T20687] lo speed is unknown, defaulting to 1000 [ 627.012623][T20687] lo speed is unknown, defaulting to 1000 [ 627.013842][T20687] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 627.013905][T20687] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 627.013952][T20687] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 627.067567][T20687] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 627.336652][T20687] lo speed is unknown, defaulting to 1000 [ 627.375511][T20757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3328'. [ 627.394097][T20687] lo speed is unknown, defaulting to 1000 [ 627.404325][T20687] lo speed is unknown, defaulting to 1000 [ 627.448915][T20687] lo speed is unknown, defaulting to 1000 [ 627.460910][T20687] lo speed is unknown, defaulting to 1000 [ 627.577364][T20687] lo speed is unknown, defaulting to 1000 [ 627.995923][T20763] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 628.015113][T20772] openvswitch: netlink: Multiple metadata blocks provided [ 628.030695][T20763] bond8 (unregistering): Released all slaves [ 628.195980][T20774] netlink: 'syz.4.3333': attribute type 4 has an invalid length. [ 628.235465][T20687] lo speed is unknown, defaulting to 1000 [ 628.274139][T20687] lo speed is unknown, defaulting to 1000 [ 628.463511][T20785] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3334'. [ 629.108996][T20794] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3335'. [ 629.299309][T20798] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3336'. [ 629.473016][T20801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3336'. [ 629.520858][ T32] INFO: task syz.2.2680:17473 blocked for more than 143 seconds. [ 629.520923][ T32] Not tainted syzkaller #0 [ 629.520934][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 629.520965][ T32] task:syz.2.2680 state:D stack:25624 pid:17473 tgid:17471 ppid:5627 task_flags:0x400140 flags:0x00080002 [ 629.521129][ T32] Call Trace: [ 629.521259][ T32] [ 629.521358][ T32] __schedule+0x17db/0x58f0 [ 629.521711][ T32] ? __pfx___schedule+0x10/0x10 [ 629.528071][ T32] ? schedule+0x90/0x2b0 [ 629.528171][ T32] schedule+0x164/0x2b0 [ 629.528251][ T32] schedule_preempt_disabled+0x13/0x30 [ 629.528314][ T32] __mutex_lock+0x7c1/0x1550 [ 629.528486][ T32] ? __mutex_lock+0x5d4/0x1550 [ 629.528576][ T32] ? nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 629.528795][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 629.528859][ T32] ? __kasan_kmalloc+0x93/0xb0 [ 629.529010][ T32] ? __nla_validate_parse+0x2429/0x2d50 [ 629.529187][ T32] ? do_syscall_64+0x166/0x520 [ 629.529280][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.529423][ T32] nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 629.529517][ T32] ? __pfx___nla_validate_parse+0x10/0x10 [ 629.529609][ T32] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 629.529698][ T32] ? trace_kmalloc+0x2a/0xf0 [ 629.529734][ T32] ? __kmalloc_noprof+0x38c/0x720 [ 629.529760][ T32] ? __nla_parse+0x40/0x60 [ 629.529794][ T32] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 629.529922][ T32] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 629.529959][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 629.529995][ T32] ? __pfx_genl_family_rcv_ ** replaying previous printk message ** [ 629.529995][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 629.530038][ T32] ? bpf_lsm_capable+0x9/0x20 [ 629.530085][ T32] ? security_capable+0x7e/0x2c0 [ 629.530156][ T32] genl_rcv_msg+0x614/0x7a0 [ 629.530190][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 629.530216][ T32] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 629.530261][ T32] netlink_rcv_skb+0x226/0x4a0 [ 629.530296][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 629.530324][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 629.530374][ T32] ? down_read+0x2be/0x330 [ 629.530409][ T32] genl_rcv+0x28/0x40 [ 629.530432][ T32] netlink_unicast+0x7bd/0x940 [ 629.530482][ T32] netlink_sendmsg+0x813/0xb40 [ 629.530527][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 629.530571][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 629.530644][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 629.530677][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 629.530773][ T32] ____sys_sendmsg+0x54e/0x850 [ 629.530912][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 629.531011][ T32] ? import_iovec+0x73/0xa0 [ 629.531134][ T32] ___sys_sendmsg+0x2a5/0x360 [ 629.531226][ T32] ? __lock_acquire+0x747/0x2de0 [ 629.531320][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 629.531506][ T32] ? __fget_files+0x2a/0x420 [ 629.531594][ T32] ? __fget_files+0x3a2/0x420 [ 629.531692][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 629.531760][ T32] ? _raw_spin_unlock_irq+0x2e/0x50 [ 629.531825][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 629.531919][ T32] ? do_user_addr_fault+0xc4c/0x1340 [ 629.532007][ T32] do_syscall_64+0x166/0x520 [ 629.532083][ T32] ? trace_irq_disable+0x3b/0x140 [ 629.532165][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.532222][ T32] ? clear_bhb_loop+0x70/0xc0 [ 629.532306][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.532365][ T32] RIP: 0033:0x7fadffb9e159 [ 629.532442][ T32] RSP: 002b:00007fae00a00028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 629.532511][ T32] RAX: ffffffffffffffda RBX: 00007fadffe26090 RCX: 00007fadffb9e159 [ 629.639435][ T32] RDX: 0000000004008084 RSI: 0000200000000140 RDI: 0000000000000003 [ 629.639495][ T32] RBP: 00007fadffc3506b R08: 0000000000000000 R09: 0000000000000000 [ 629.639529][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 629.639569][ T32] R13: 00007fadffe26128 R14: 00007fadffe26090 R15: 00007ffd59f7aa18 [ 629.639696][ T32] [ 629.639874][ T32] [ 629.639874][ T32] Showing all locks held in the system: [ 629.639902][ T32] locks held by pr/ttyS0/16: 2, last CPU#1: [ 629.640063][ T32] #0: ffffffff8ec364f8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 629.640294][ T32] #1: ffffffff9ad3e098 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 629.640546][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 629.663954][ T32] #0: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 629.664296][ T32] locks held by getty/5372: 2, on CPU#0: [ 629.664335][ T32] #0: ffff8880356570a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 629.664567][ T32] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 629.664730][ T32] locks held by kworker/u8:17/8531: 2, last CPU#0: [ 629.664768][ T32] #0: ffff8880272c8140 ((wq_completion)wg-kex-wg1#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 629.664959][ T32] #1: ffffc9000380fc40 ((work_completion)(&peer->clear_peer_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 629.665114][ T32] locks held by syz.3.2383/16192: 2, on CPU#0: [ 629.665144][ T32] #0: ffffffff902c3fa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 629.665268][ T32] #1: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 629.665416][ T32] locks held by syz.2.2680/17473: 2, on CPU#1: [ 629.665452][ T32] #0: ffffffff902c3fa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 629.665588][ T32] #1: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 629.665723][ T32] locks held by syz-executor/17850: 4, last CPU#0: [ 629.665753][ T32] #0: ffffffff8ee363b0 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10f/0x480 [ 629.665893][ T32] #1: ffff88802ab3d038 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 629.665966][ T32] #2: ffff888056f469b8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 629.666030][ T32] #3: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 629.666094][ T32] locks held by syz.0.3332/20776: 2, on CPU#0: [ 629.666109][ T32] #0: ffff888058666400 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 629.666204][ T32] #1: ffffffff90253060 (rtnl_mutex){+.+.}-{4:4}, at: mrtsock_destruct+0xeb/0x320 [ 629.666301][ T32] locks held by syz.0.3332/20783: 1, on CPU#0: [ 629.666315][ T32] #0: ffffffff90253060 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x2fb/0x1c50 [ 629.666403][ T32] locks held by syz.5.3335/20794: 3, last CPU#0: [ 629.666417][ T32] #0: ffffffff907a7940 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 629.666516][ T32] #1: ffffffff90253060 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc1d/0x1c30 [ 629.666608][ T32] #2: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 629.666671][ T32] locks held by syz.1.3336/20798: 4, last CPU#0: [ 629.666687][ T32] #0: ffffffff902c3fa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 629.666739][ T32] #1: ffffffff902c3de0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 629.666793][ T32] #2: ffffffff8f669de8 (vdpa_dev_lock){+.+.}-{4:4}, at: vdpa_nl_cmd_dev_add_set_doit+0x582/0xbd0 [ 629.666893][ T32] #3: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 629.666945][ T32] locks held by syz.1.3336/20801: 2, on CPU#0: [ 629.666959][ T32] #0: ffffffff907a8c78 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 629.667020][ T32] #1: ffffffff90253060 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc1d/0x1c30 [ 629.667075][ T32] [ 629.667080][ T32] ============================================= [ 629.667080][ T32] [ 629.667095][ T32] NMI backtrace for cpu 0 [ 629.667112][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 629.667134][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 629.667146][ T32] Call Trace: [ 629.667154][ T32] [ 629.667163][ T32] dump_stack_lvl+0xe8/0x150 [ 629.667202][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 629.667275][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 629.667311][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 629.667347][ T32] sys_info+0x135/0x170 [ 629.667399][ T32] watchdog+0xfd7/0x1030 [ 629.667430][ T32] ? watchdog+0x1c7/0x1030 [ 629.667459][ T32] kthread+0x38b/0x480 [ 629.667480][ T32] ? __pfx_watchdog+0x10/0x10 [ 629.667500][ T32] ? __pfx_kthread+0x10/0x10 [ 629.667522][ T32] ret_from_fork+0x514/0xb70 [ 629.667551][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 629.667571][ T32] ? __switch_to+0xc89/0x1420 [ 629.667617][ T32] ? __pfx_kthread+0x10/0x10 [ 629.667645][ T32] ret_from_fork_asm+0x1a/0x30 [ 629.667693][ T32] [ 629.667701][ T32] Sending NMI from CPU 0 to CPUs 1: [ 629.667733][ C1] NMI backtrace for cpu 1 [ 629.667747][ C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 629.667766][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 629.667776][ C1] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 629.667800][ C1] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 cc cc cc cc cc 89 f6 31 d2 e9 a6 ba a6 03 66 0f 1f 44 00 [ 629.667857][ C1] RSP: 0018:ffffc90000a18950 EFLAGS: 00000046 [ 629.667871][ C1] RAX: 000000000000056b RBX: ffff8880b8723c80 RCX: 0000000000000838 [ 629.667883][ C1] RDX: 0000000000000000 RSI: 000000000000056b RDI: 0000000000000838 [ 629.667894][ C1] RBP: ffffc90000a18a20 R08: 0000000000000100 R09: 0000000000000001 [ 629.667905][ C1] R10: 0000000000000003 R11: ffffffff81754510 R12: 000000000000056b [ 629.667916][ C1] R13: dffffc0000000000 R14: 000000001000573d R15: 0000000000000020 [ 629.667929][ C1] FS: 0000000000000000(0000) GS:ffff888124dcd000(0000) knlGS:0000000000000000 [ 629.667942][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 629.667954][ C1] CR2: 00007f2053201ff8 CR3: 0000000079922000 CR4: 00000000003526f0 [ 629.667969][ C1] Call Trace: [ 629.667975][ C1] [ 629.667981][ C1] lapic_next_event+0x11/0x20 [ 629.668000][ C1] clockevents_program_event+0x385/0x630 [ 629.668037][ C1] ? __pfx_clockevents_program_event+0x10/0x10 [ 629.668060][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 629.668078][ C1] ? tick_program_event+0x8f/0x120 [ 629.668097][ C1] __hrtimer_rearm_deferred+0x36c/0x4b0 [ 629.668124][ C1] irqentry_exit+0x8d3/0x910 [ 629.668155][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 629.668174][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x9a/0xa0 [ 629.668204][ C1] Code: c1 e1 05 4c 8d 51 28 4d 39 ca 77 1e 49 ff c0 4c 89 02 48 c7 44 0a 08 07 00 00 00 48 89 7c 0a 10 48 89 74 0a 18 48 89 44 0a 20 81 40 21 0a cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 629.668220][ C1] RSP: 0018:ffffc90000a18b70 EFLAGS: 00000246 [ 629.668237][ C1] RAX: ffffffff89ec00eb RBX: 0000000000000000 RCX: ffff88801e2a0000 [ 629.668251][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 629.668264][ C1] RBP: 1ffff1100751945b R08: 0000000000000100 R09: 0000000000000004 [ 629.668278][ C1] R10: dffffc0000000000 R11: fffff52000143170 R12: ffff88803a8ca2c0 [ 629.668293][ C1] R13: ffff88803a8ca2da R14: 0000000000000000 R15: dffffc0000000000 [ 629.668314][ C1] ? pie_calculate_probability+0x13b/0x7f0 [ 629.668392][ C1] pie_calculate_probability+0x13b/0x7f0 [ 629.668431][ C1] fq_pie_timer+0x27d/0x5a0 [ 629.668477][ C1] ? fq_pie_timer+0x4d/0x5a0 [ 629.668510][ C1] call_timer_fn+0x18d/0x5f0 [ 629.668537][ C1] ? __pfx_fq_pie_timer+0x10/0x10 [ 629.668565][ C1] ? call_timer_fn+0xd5/0x5f0 [ 629.668592][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 629.668627][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 629.668650][ C1] ? __pfx_fq_pie_timer+0x10/0x10 [ 629.668681][ C1] __run_timer_base+0x652/0x8b0 [ 629.668716][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 629.668744][ C1] ? ktime_get+0x1f5/0x220 [ 629.668767][ C1] ? lapic_next_event+0x11/0x20 [ 629.668795][ C1] run_timer_softirq+0xb7/0x170 [ 629.668821][ C1] handle_softirqs+0x226/0x860 [ 629.668853][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 629.668888][ C1] __irq_exit_rcu+0xcb/0x220 [ 629.668917][ C1] irq_exit_rcu+0x9/0x30 [ 629.668944][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 629.668968][ C1] [ 629.668975][ C1] [ 629.668982][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 629.669005][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 629.669028][ C1] Code: f7 e8 2d 08 bb f5 f7 c3 00 02 00 00 74 05 e8 90 52 e7 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 94 15 ac f5 65 48 8b 05 0c 61 ac 07 48 85 c0 74 18 5b 41 5e e9 [ 629.669045][ C1] RSP: 0018:ffffc90000157ca8 EFLAGS: 00000206 [ 629.669062][ C1] RAX: 0000000000000006 RBX: 0000000000000206 RCX: 8000000000000001 [ 629.669076][ C1] RDX: 0000000000000000 RSI: ffffffff8e4152cd RDI: 0000000000000001 [ 629.669089][ C1] RBP: ffffc90000157e18 R08: ffffffff907a417f R09: 1ffffffff20f482f [ 629.669106][ C1] R10: dffffc0000000000 R11: fffffbfff20f4830 R12: 0000000000000002 [ 629.669120][ C1] R13: ffff88801e2a0000 R14: ffffffff9ad3e080 R15: dffffc0000000000 [ 629.669154][ C1] nbcon_kthread_func+0x6c4/0x880 [ 629.669181][ C1] ? nbcon_kthread_func+0x163/0x880 [ 629.669204][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 629.669231][ C1] ? __kthread_parkme+0x71/0x1f0 [ 629.669263][ C1] ? __kthread_parkme+0x199/0x1f0 [ 629.669297][ C1] kthread+0x38b/0x480 [ 629.669315][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 629.669336][ C1] ? __pfx_kthread+0x10/0x10 [ 629.669357][ C1] ret_from_fork+0x514/0xb70 [ 629.669378][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 629.669399][ C1] ? __switch_to+0xc89/0x1420 [ 629.669430][ C1] ? __pfx_kthread+0x10/0x10 [ 629.669449][ C1] ret_from_fork_asm+0x1a/0x30 [ 629.669492][ C1] [ 629.711233][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 630.900985][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 630.910173][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 630.920239][ T32] Call Trace: [ 630.923537][ T32] [ 630.926481][ T32] vpanic+0x56d/0xa60 [ 630.930509][ T32] ? __pfx___schedule+0x10/0x10 [ 630.935372][ T32] ? __pfx_vpanic+0x10/0x10 [ 630.939915][ T32] panic+0xc5/0xd0 [ 630.943676][ T32] ? __pfx_panic+0x10/0x10 [ 630.948122][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 630.953597][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 630.958981][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 630.965167][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 630.971352][ T32] watchdog+0x1030/0x1030 [ 630.975704][ T32] ? watchdog+0x1c7/0x1030 [ 630.980134][ T32] kthread+0x38b/0x480 [ 630.984227][ T32] ? __pfx_watchdog+0x10/0x10 [ 630.988911][ T32] ? __pfx_kthread+0x10/0x10 [ 630.993533][ T32] ret_from_fork+0x514/0xb70 [ 630.998137][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 631.003257][ T32] ? __switch_to+0xc89/0x1420 [ 631.007959][ T32] ? __pfx_kthread+0x10/0x10 [ 631.012569][ T32] ret_from_fork_asm+0x1a/0x30 [ 631.017393][ T32] [ 631.021033][ T32] Kernel Offset: disabled [ 631.025390][ T32] Rebooting in 86400 seconds..