last executing test programs: 4m41.39349888s ago: executing program 2 (id=6452): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000740)=@nat={'nat\x00', 0x62, 0x5, 0x4c8, 0x0, 0x198, 0xffffffff, 0x0, 0x240, 0x430, 0x430, 0xffffffff, 0x430, 0x430, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'hsr0\x00', 'wg1\x00', {}, {}, 0x0, 0x2}, 0x0, 0x70, 0xa8, 0x0, {0x22e}}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @remote, @empty, @gre_key=0x6, @gre_key=0xfea}}}}, {{@ip={@rand_addr=0x64010101, @empty, 0xff, 0x0, 'caif0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x5e, 0x1, 0x30}, 0x0, 0xb8, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x250, 0x7fffffe}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x3dc, {0x0, @private, @remote, @icmp_id, @gre_key}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_team\x00', 'ipvlan0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0xc, @private=0xa110100, @private=0xa010101, @gre_key=0x10, @gre_key=0x6}}}}, {{@ip={@remote, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'netdevsim0\x00'}, 0x0, 0x1b8, 0x1f0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@icmp={{0x28}, {0x11, "6e82"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x528) socket$kcm(0x29, 0x2, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000003b00010324bd7022ffdbdf25030000002bc367098937756d7ec890c6a59ec727469c2cadf822ce26119c9accb57c65232a0ac00ddcf87cf8e472a5d35455c2"], 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x40000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x609, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88aefe86, 0x40000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xffe4) r11 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r11, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000005c0)={0x3, {{0xa, 0x4e23, 0xc, @mcast1, 0xfffffff8}}, 0x0, 0x1, [{{0xa, 0x8001, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x30000}}]}, 0x110) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003601008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r10], 0x5c}}, 0x40) 4m40.36847946s ago: executing program 2 (id=6455): r0 = socket(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) getsockopt(r0, 0x200000000114, 0x2721, 0x0, &(0x7f0000000040)) 4m40.059883004s ago: executing program 2 (id=6459): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000002c0000001d0a050000000000000000000a0000020900010073797a31000000000c0010"], 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 4m39.821595742s ago: executing program 2 (id=6462): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002bc0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000002c00)={0x20, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x10000) 4m39.60577391s ago: executing program 2 (id=6465): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000740)=@nat={'nat\x00', 0x62, 0x5, 0x4c8, 0x0, 0x198, 0xffffffff, 0x0, 0x240, 0x430, 0x430, 0xffffffff, 0x430, 0x430, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'hsr0\x00', 'wg1\x00', {}, {}, 0x0, 0x2}, 0x0, 0x70, 0xa8, 0x0, {0x22e}}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @remote, @empty, @gre_key=0x6, @gre_key=0xfea}}}}, {{@ip={@rand_addr=0x64010101, @empty, 0xff, 0x0, 'caif0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x5e, 0x1, 0x30}, 0x0, 0xb8, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x250, 0x7fffffe}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x3dc, {0x0, @private, @remote, @icmp_id, @gre_key}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_team\x00', 'ipvlan0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0xc, @private=0xa110100, @private=0xa010101, @gre_key=0x10, @gre_key=0x6}}}}, {{@ip={@remote, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'netdevsim0\x00'}, 0x0, 0x1b8, 0x1f0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@icmp={{0x28}, {0x11, "6e82"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x528) socket$kcm(0x29, 0x2, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000003b00010324bd7022ffdbdf25030000002bc367098937756d7ec890c6a59ec727469c2cadf822ce26119c9accb57c65232a0ac00ddcf87cf8e472a5d35455c2"], 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x40000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x609, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88aefe86, 0x40000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xffe4) r11 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r11, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000005c0)={0x3, {{0xa, 0x4e23, 0xc, @mcast1, 0xfffffff8}}, 0x0, 0x1, [{{0xa, 0x8001, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x30000}}]}, 0x110) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003601008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r10], 0x5c}}, 0x40) 4m38.880333596s ago: executing program 2 (id=6470): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000270001002b000000001f000006"], 0x14}}, 0x4004804) 4m23.779929624s ago: executing program 32 (id=6470): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000270001002b000000001f000006"], 0x14}}, 0x4004804) 2m28.322799088s ago: executing program 1 (id=7322): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000100)={0x40000006}) write$cgroup_int(r2, &(0x7f0000000040)=0x1, 0x12) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xd, 0x80010, r5, 0x782f9000) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r11, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a2a1}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x132, 0x3e60, 0x7, 0x6, 0xfffffffa}, 0x53}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc8c0}, 0x2) r12 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r12, 0x107, 0xf, &(0x7f0000000600), 0x56) setsockopt$inet6_int(r2, 0x29, 0x46, &(0x7f00000002c0)=0x800, 0x4) sendmsg$kcm(r12, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r9, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003004024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x20040000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000700)=@framed, &(0x7f0000000300)='GPL\x00', 0x8}, 0x94) sendmsg$nl_route(r0, 0x0, 0x4000001) 2m28.069011088s ago: executing program 1 (id=7327): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000020000800000000000000000850000004f0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000690f0000850000002a00000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r0, 0xffffffffffffffff, 0x3, 0x0, @void}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r0, 0x0, 0x7, 0x0, &(0x7f0000000100)="e0b9547ed387db", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'gretap0\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x700, 0x8000, 0x3, 0xffff, {{0x5, 0x4, 0x0, 0x5, 0x14, 0x64, 0x0, 0x2, 0x4, 0x0, @multicast1, @empty}}}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r3, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0xffffffffffffff6f, &(0x7f00000002c0)={&(0x7f0000000a40)=ANY=[], 0x148}}, 0x4810) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0xb, &(0x7f0000000040)=0x15, 0x4) sendmsg$netlink(r5, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="14c937ff5d5d928b43a3000000220023071600b6c7045f6a684d0a77864cff0000000000000400a980"], 0x14}], 0x1, 0x0, 0x0, 0x24008015}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r1}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x2c, 0x36, 0x107, 0x70bd2a, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x23, 0x0, 0x0, @pid}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r7, 0x84, 0xc, &(0x7f00000000c0), 0x4) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f00000001c0)={0x3, 0xca, 0x10, 0x0, 0x9, 0xa5, 0x6, 0x6, 0x9, 0x4, 0x5, 0x9, 0x2}, 0xe) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0x12, "1fe473a8cb3169d4d5b7259627b5cf5b8a50"}, &(0x7f0000000700)=0x1a) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r6, 0x84, 0x78, &(0x7f0000000040), 0x4) 2m27.134361283s ago: executing program 1 (id=7330): r0 = socket(0x10, 0x80002, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r1, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) sendmmsg$inet(r1, &(0x7f0000002f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x3c, r5, 0x1, 0x70bd2b, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}]}, 0x3c}}, 0x400400c) r6 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008814}, 0x20008040) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="7a0af8ff75257078bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf52866651ddd73f30f2382f6cda4bfdd45be583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce72d75946c2b638d91dbef661962239c77edf2d34b12cd48a1b20fb7dd8432619f2c50d77bc0ea9b0af58e6fff4942eb613eff289026d5045ef76d7d864409eb2dc9518a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5208ff0df2db761014b1b999a12df6bee431a668135b8214afa5827b56a8074bf1e6cf5d84b35a3a3a4c66824fe12dbe20fcf50a194185b9e2d8b815fedb0d982936156be3cdda66fb977aef7c9cb92428ef25d9bf665bd60024c09e9eed544126fabe4cb8d826e1ec03cc492f5cad6227c94fea467aea7fa8b58abc37056433edf43fba5566a3e022034ac81fd48f9b7314ffa730017fbd37fdb23bc26992529402a520ef67e246415a6a8ca9d4aa797a95ca3314ded0d8a24abd57e042888a9141ab4e6c6b939aaefc248791464970c43120211b9bc82a85cd2fc18f535c7986c2d52ba62f74f00000000008000000000000000000000000040000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000002900)=r7, 0x4) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf0b, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4000000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32, @ANYBLOB="10000180040004800800"], 0x28}}, 0x0) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000240)=0x4, 0x4) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x40000) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r9, 0x84, 0x1, 0x0, 0x0) r10 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in=@initdev={0xac, 0x1e, 0x3, 0x0}, 0x4e1f, 0x0, 0x0, 0x3, 0xa, 0x0, 0x0, 0x87}, {0xec, 0x8000000000000000, 0x1, 0x6811221b, 0x1d26, 0x8000000000010001, 0x200000200000003, 0x100000000}, {0x7ae, 0x1, 0x6, 0x7}, 0x6, 0x0, 0x1, 0x0, 0x6, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x0, 0x6c}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x44}, 0x0, 0x3, 0x2, 0x0, 0x9}}, 0xe8) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) setsockopt$RDS_GET_MR_FOR_DEST(r11, 0x114, 0x7, &(0x7f0000000180)={@vsock={0x28, 0x0, 0x0, @local}, {0x0}, 0x0, 0x12}, 0xa0) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @loopback, 0x1ff}, 0x1c) 2m26.82823562s ago: executing program 1 (id=7333): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xfc}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x20000810) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00010002"], 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) mmap$xdp(&(0x7f0000001000/0x2000)=nil, 0x2000, 0xf, 0x11, r2, 0x100000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x3, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x4f}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x520, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x450, 0x2e0, 0x2e0, 0x450, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {0x0, 0x10}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x5, 0x4}, {0x0, 0x6, 0x2}, {0xffffffffffffffff, 0x1, 0x4}, 0x9, 0x80}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000023c0)}, 0x20001) socket(0x400000000010, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x1b) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r5, 0x0) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000580)={0x0, @nfc={0x27, 0x0, 0xffffffffffffffff, 0x3}, @rc={0x1f, @none}, @hci={0x1f, 0x2, 0x2}, 0x2, 0x0, 0x0, 0x0, 0x8008, 0x0, 0x10001, 0xbed, 0x8}) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) writev(r6, 0x0, 0x0) epoll_create1(0x0) 2m26.016993475s ago: executing program 1 (id=7339): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x2, 0x2c, 0x0, 0xe000, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @remote, {[@generic={0x94, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x4}}}}}}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000e50584236c3906b5482b1600000000000000000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70300000a000000850000006900000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet6(0xa, 0x80002, 0x0) socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="fc0000", 0x3) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, r7, 0x200, 0x470bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x6}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x40488d1}, 0x20040000) write$cgroup_int(r5, &(0x7f0000001480)=0x2, 0x12) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x1, 0x401}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x1, 0x0, 0x7fffffff}, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x1100000000f336, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c) connect$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="58010000100005000100287a95f70000000000000000000000000000000000010000000000000000000000000000000100000000000000000a00b13264910000", @ANYRES32=0x0, @ANYRES32=0x80, @ANYBLOB="000000000000000000000000000000010000123433000000000000000000000000000000000000010000000000000000ffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000a000000800000000000000048000100686d6163287368613129000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000170001000000000000000000000002000000004000002000000000000000"], 0x158}}, 0x0) sendmsg$nl_xfrm(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) sendmmsg$inet6(r8, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)='A', 0x1}], 0x1}}], 0x1, 0x4000801) 2m25.085443759s ago: executing program 1 (id=7346): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x11}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x2e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write(0xca, &(0x7f0000000040)="0300", 0x2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000600)={'wpan0\x00'}) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x388, 0x160, 0x8, 0x7f02ae, 0x0, 0x200, 0x2b8, 0x2e8, 0x2e8, 0x2b8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x14}, [0xffffffff, 0x0, 0x0, 0xffffff00], [0xffffffff, 0xff000000, 0xff, 0xffffffff], 'veth0_vlan\x00', 'veth1_to_team\x00', {}, {0xff}, 0x3c, 0x6, 0x0, 0x40}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth1_macvtap\x00', {}, '\x00', {0xff}, 0xc, 0x1e}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xa, 0x6, 0x3}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0x0, 0xffffff00], [0x0, 0xffffffff], 'wlan0\x00', 'netdevsim0\x00', {}, {0xff}, 0x2c, 0x0, 0x1, 0x7b}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@dst={{0x48}, {0xa, 0x0, 0x1, [0xff, 0x6, 0xff, 0x4608, 0x3, 0xe, 0x2, 0x8000, 0x4, 0x400, 0x800, 0x0, 0x8, 0x7, 0x0, 0x50], 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x7, 0x0, 0x8, 0x400, 'snmp\x00', 'syz1\x00', {0xffffffff8cdbbefd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan3\x00'}) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000001000)=0xfffffffc, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000000300)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)="89", 0x0}, 0x32) listen(r5, 0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x9, 0x6, 0x0, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x8000004) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r8, 0x0) recvmmsg(r8, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) r9 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000440)}], 0x61, 0x0, 0x0, 0x400401c}], 0x1, 0x8800) sendto$inet6(r9, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, 0x8) close(r9) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r2) sendmsg$NLBL_MGMT_C_PROTOCOLS(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002abd70070000000a0001007770616e3300000008000400030000090800020005000000080004000200000008000c000100000006000b002a0000000800020003000000080007001d953aa1a609dba01effffffff7de151599bce04a2477a2c6dbae99bdfd874e3942e4099e39b3d1a147fc8eb826e02e55f39d4629b1d729a96524e7becb92016530693a5bfbd74a7addb118ffb50893cee2200479db0affa291ea406000000000000cdea0e65d5ddf90a7837c9b77cf265b8d02a8a2155428930676b2f99d694350c0299ece2000000000000c281734ed2b7d4c55f4e"], 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x4080) 2m10.027617395s ago: executing program 33 (id=7346): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x11}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x2e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write(0xca, &(0x7f0000000040)="0300", 0x2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000600)={'wpan0\x00'}) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x388, 0x160, 0x8, 0x7f02ae, 0x0, 0x200, 0x2b8, 0x2e8, 0x2e8, 0x2b8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x14}, [0xffffffff, 0x0, 0x0, 0xffffff00], [0xffffffff, 0xff000000, 0xff, 0xffffffff], 'veth0_vlan\x00', 'veth1_to_team\x00', {}, {0xff}, 0x3c, 0x6, 0x0, 0x40}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth1_macvtap\x00', {}, '\x00', {0xff}, 0xc, 0x1e}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xa, 0x6, 0x3}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0x0, 0xffffff00], [0x0, 0xffffffff], 'wlan0\x00', 'netdevsim0\x00', {}, {0xff}, 0x2c, 0x0, 0x1, 0x7b}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@dst={{0x48}, {0xa, 0x0, 0x1, [0xff, 0x6, 0xff, 0x4608, 0x3, 0xe, 0x2, 0x8000, 0x4, 0x400, 0x800, 0x0, 0x8, 0x7, 0x0, 0x50], 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x7, 0x0, 0x8, 0x400, 'snmp\x00', 'syz1\x00', {0xffffffff8cdbbefd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan3\x00'}) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000001000)=0xfffffffc, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000000300)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)="89", 0x0}, 0x32) listen(r5, 0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x9, 0x6, 0x0, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x8000004) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r8, 0x0) recvmmsg(r8, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) r9 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000440)}], 0x61, 0x0, 0x0, 0x400401c}], 0x1, 0x8800) sendto$inet6(r9, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, 0x8) close(r9) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r2) sendmsg$NLBL_MGMT_C_PROTOCOLS(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002abd70070000000a0001007770616e3300000008000400030000090800020005000000080004000200000008000c000100000006000b002a0000000800020003000000080007001d953aa1a609dba01effffffff7de151599bce04a2477a2c6dbae99bdfd874e3942e4099e39b3d1a147fc8eb826e02e55f39d4629b1d729a96524e7becb92016530693a5bfbd74a7addb118ffb50893cee2200479db0affa291ea406000000000000cdea0e65d5ddf90a7837c9b77cf265b8d02a8a2155428930676b2f99d694350c0299ece2000000000000c281734ed2b7d4c55f4e"], 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x4080) 2m2.935569802s ago: executing program 5 (id=7549): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc020000000000000000000000000000040012"], 0x8c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x34, 0x24, 0x0, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {}, {0x0, 0x2}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@deltclass={0x24, 0x29, 0x800, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff3}, {0xb, 0xfff1}, {0x6, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48008}, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8}}}, 0x24}}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002b00)=ANY=[@ANYBLOB="60000000020603000000000000000000000000160900020073797a3100000000050001000700000014000780080013005607497408001240080000000500050002000000050004000000000014000300686173683a69702c706f72742c6970"], 0x60}, 0x1, 0x0, 0x0, 0x20004000}, 0x8004) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008800}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time_for_children\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/pid\x00') connect(r4, 0x0, 0x0) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r8, 0x107, 0x11, &(0x7f0000000140)=0xc6, 0x4) sendmsg$can_bcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x1, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6bcd41fd8"}}, 0x48}}, 0x410) sendmsg$can_bcm(r4, 0x0, 0x1) socket$l2tp(0x2, 0x2, 0x73) unshare(0x20000400) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x2c}}, 0x0) 2m2.573051416s ago: executing program 5 (id=7553): r0 = socket(0x10, 0x80002, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r1, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) sendmmsg$inet(r1, &(0x7f0000002f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x3c, r5, 0x1, 0x70bd2b, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}]}, 0x3c}}, 0x400400c) r6 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008814}, 0x20008040) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000002900)=r7, 0x4) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf0b, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4000000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab", @ANYRES32, @ANYBLOB="1000018004000480080001"], 0x28}}, 0x0) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000240)=0x4, 0x4) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x40000) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r9, 0x84, 0x1, 0x0, 0x0) r10 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in=@initdev={0xac, 0x1e, 0x3, 0x0}, 0x4e1f, 0x0, 0x0, 0x3, 0xa, 0x0, 0x0, 0x87}, {0xec, 0x8000000000000000, 0x1, 0x6811221b, 0x1d26, 0x8000000000010001, 0x200000200000003, 0x100000000}, {0x7ae, 0x1, 0x6, 0x7}, 0x6, 0x0, 0x1, 0x0, 0x6, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x0, 0x6c}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x44}, 0x0, 0x3, 0x2, 0x0, 0x9}}, 0xe8) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) setsockopt$RDS_GET_MR_FOR_DEST(r11, 0x114, 0x7, &(0x7f0000000180)={@vsock={0x28, 0x0, 0x0, @local}, {0x0}, 0x0, 0x12}, 0xa0) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @loopback, 0x1ff}, 0x1c) 2m1.790251615s ago: executing program 5 (id=7557): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x18, 0x49, [0xfac05, 0xfac0c, 0xfac04, 0xfac01, 0xfac00]}]]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m1.13804382s ago: executing program 5 (id=7563): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) 2m0.909477633s ago: executing program 5 (id=7566): r0 = socket(0x10, 0x80002, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r1, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) sendmmsg$inet(r1, &(0x7f0000002f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x3c, r5, 0x1, 0x70bd2b, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}]}, 0x3c}}, 0x400400c) r6 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008814}, 0x20008040) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000002900)=r7, 0x4) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf0b, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4000000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da2", @ANYRES32, @ANYBLOB="1000018004000480080001"], 0x28}}, 0x0) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000240)=0x4, 0x4) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x40000) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r9, 0x84, 0x1, 0x0, 0x0) r10 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in=@initdev={0xac, 0x1e, 0x3, 0x0}, 0x4e1f, 0x0, 0x0, 0x3, 0xa, 0x0, 0x0, 0x87}, {0xec, 0x8000000000000000, 0x1, 0x6811221b, 0x1d26, 0x8000000000010001, 0x200000200000003, 0x100000000}, {0x7ae, 0x1, 0x6, 0x7}, 0x6, 0x0, 0x1, 0x0, 0x6, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x0, 0x6c}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x44}, 0x0, 0x3, 0x2, 0x0, 0x9}}, 0xe8) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) setsockopt$RDS_GET_MR_FOR_DEST(r11, 0x114, 0x7, &(0x7f0000000180)={@vsock={0x28, 0x0, 0x0, @local}, {0x0}, 0x0, 0x12}, 0xa0) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @loopback, 0x1ff}, 0x1c) 2m0.512889913s ago: executing program 5 (id=7573): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000270001002b000000001f000006"], 0x14}}, 0x4004804) 1m45.409875367s ago: executing program 34 (id=7573): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000270001002b000000001f000006"], 0x14}}, 0x4004804) 6.756358824s ago: executing program 3 (id=8162): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8e0400000000000000c61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b36db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece010000000100000010223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff814f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffff854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e92604e1026e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c36981edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ce852364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b00000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, 0x0, 0xc0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001440)=ANY=[], 0x114}], 0x1}, 0x0) recvmmsg(r4, &(0x7f00000065c0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r5, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000180)=""/197, 0xc5}, {&(0x7f0000001640)=""/197, 0xc5}, {&(0x7f0000000440)=""/56, 0x38}, {&(0x7f0000000500)=""/167, 0xa7}, {&(0x7f0000001740)=""/4076, 0xfec}], 0x5}, 0x2}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x3}], 0x7, 0x100, 0x0) write$tun(r2, &(0x7f0000001280)=ANY=[@ANYBLOB="000086dd0000110005000000a60c6b63851e0f9829"], 0xfce) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000003c0)='nv', 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendto$inet(r1, &(0x7f0000000240)="c9", 0x1, 0x4044880, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000004000000040200081200000000000000a24500b7586c90e502e3bd05350b64dcbdc64c5f781baa4992e93b25c5728ef1c3e7f29ece63247c20dc96c1c635d94a69cecaffdcea7ac940232fd3fa1fdbf00f06ec4d43d33ac567a2a9845e44a6bfcb5988b352275f058437f56505bb3f72931efb6ffb8c53a744456f34804dc5b04ae576bf5fe3e2e4238ad4866a5c5dc0aac8a51e3164b80d40cdd3ff9fe40a7aff0887d2df8afce38c1c322a4df65e650b0fb78d93da378119203c43b07476078d4ee632a4e5ddefe31f7b9f1c7502f25446d9c04857acd097615d22a531b3", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES32], 0x50) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 6.475488674s ago: executing program 6 (id=8166): socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000010000000000000104000000200000000100000000000001"], 0x0, 0x3c}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, &(0x7f00000000c0)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x71, 0x8, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x86dd, 0x26, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000000)={0x1d, r5, 0x3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100e1ff0000000000000000850000008a00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$kcm(r4, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x40) 5.128292434s ago: executing program 7 (id=8167): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x6, 0x7, 0x200, 0x4, 0x8, 0x8ed, 0x10, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8810) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x3c, 0x2c, 0xd2f, 0x10b52c, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xfff5, 0x10}, {}, {0x8, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xb, 0xf}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) 4.979652881s ago: executing program 0 (id=8168): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000200000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4000, 0x640}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x4c}}, 0x884) 4.934398045s ago: executing program 6 (id=8169): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendto(r4, &(0x7f0000000000)="68000000300005050100000000000000000000005400018050000180090001006761746500000000400002801800020000000000000000000000000000000000000000001800058014000180080001000000000008000300640000000c000700e803ffe400000000", 0x68, 0x0, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) 4.772928609s ago: executing program 3 (id=8171): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x1000d, 0x0, 0x0, 0x41100}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r1, 0x8b2a, &(0x7f0000000040)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000300)=0x3, 0x4) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='freezer.parent_freezing\x00', 0x0, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000340)="07000000010001", 0x7) r5 = socket$kcm(0x10, 0x3, 0x10) bind$alg(r0, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000640)={@empty}, &(0x7f0000000680)=0x14) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="1400000016000b63d25a8064100094f90224fc05", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e21, @loopback}, 0x10) 4.629977672s ago: executing program 7 (id=8172): socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000010000000000000104000000200000000100000000000001"], 0x0, 0x3c}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, &(0x7f00000000c0)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x71, 0x8, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x86dd, 0x26, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r4, &(0x7f0000000000)={0x1d, 0x0, 0x3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100e1ff0000000000000000850000008a00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$kcm(r4, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x40) getsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000100)=0x4, &(0x7f0000000180)=0x4) 3.495866524s ago: executing program 7 (id=8173): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4000, 0x640}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008001}, 0x8000) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x4c}}, 0x884) 3.385153807s ago: executing program 0 (id=8174): pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) close(0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa002a1}, 0xc, &(0x7f0000000180)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000090a010100000000ff000000020000060c000b400000000062af001b080008400000000010001180090001007866726d000000001c000000090a010200000000000000000100000808000c40000080012c000000020a010400"], 0xa8}, 0x1, 0x0, 0x0, 0x20000001}, 0x8884) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r1, 0x215eb000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80002, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) 3.255373502s ago: executing program 6 (id=8175): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, 0x0, 0xc0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001440)=ANY=[@ANYBLOB="1400000030000103000000000000000001"], 0x114}], 0x1}, 0x0) recvmmsg(r4, &(0x7f00000065c0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r5, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000180)=""/197, 0xc5}, {&(0x7f0000001640)=""/197, 0xc5}, {&(0x7f0000000440)=""/56, 0x38}, {&(0x7f0000000500)=""/167, 0xa7}, {&(0x7f0000001740)=""/4076, 0xfec}], 0x5}, 0x2}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x3}], 0x7, 0x100, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000003c0)='nv', 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendto$inet(r1, &(0x7f0000000240)="c9", 0x1, 0x4044880, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000004000000040200081200000000000000a24500b7586c90e502e3bd05350b64dcbdc64c5f781baa4992e93b25c5728ef1c3e7f29ece63247c20dc96c1c635d94a69cecaffdcea7ac940232fd3fa1fdbf00f06ec4d43d33ac567a2a9845e44a6bfcb5988b352275f058437f56505bb3f72931efb6ffb8c53a744456f34804dc5b04ae576bf5fe3e2e4238ad4866a5c5dc0aac8a51e3164b80d40cdd3ff9fe40a7aff0887d2df8afce38c1c322a4df65e650b0fb78d93da378119203c43b07476078d4ee632a4e5ddefe31f7b9f1c7502f25446d9c04857acd097615d22a531b3", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES32], 0x50) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 3.253653418s ago: executing program 3 (id=8176): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaa0300bb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r3], 0x68}}, 0x8c1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ac"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x40050) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x20000880) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f0000000180), 0x4) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000200000000050005"], 0x80}}, 0x0) sendmmsg(r8, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r8, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0209000902"], 0x10}}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000240), 0x3) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'tunl0\x00', 0x0}) recvmsg(r9, &(0x7f0000002840)={&(0x7f0000000080)=@caif=@util, 0x80, &(0x7f0000002680)=[{&(0x7f0000000100)=""/58, 0x3a}, {&(0x7f0000000140)=""/127, 0x7f}, {&(0x7f00000001c0)=""/113, 0x71}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000002240)=""/253, 0xfd}, {&(0x7f0000002340)=""/236, 0xec}, {&(0x7f0000002440)=""/223, 0xdf}, {&(0x7f0000002540)=""/107, 0x6b}, {&(0x7f00000025c0)=""/178, 0xb2}], 0x9, &(0x7f0000002740)=""/247, 0xf7}, 0x40012140) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x2000, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0xb, 0x1}}, {0x6, 0x2, [0x4782]}}]}]}, 0x58}}, 0x4000010) 3.2298738s ago: executing program 4 (id=8177): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x3a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000001000)=@xdp={0x2c, 0x0, r4, 0x42}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000f80)="27030200dc0f14000e0007000024c1020000ff3207c2fb7fe0406e52534b4f6b3d00000000000000892f3c35d5a8f7a6", 0x30}], 0x1}, 0x0) 2.915402525s ago: executing program 4 (id=8178): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000200000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, 0x312, 0x800}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x4c}}, 0x884) 2.910811103s ago: executing program 7 (id=8179): socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000400)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x11, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x15, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4433000041000701fefffffffeffffff017c0000040042800c00018006000600800a0000203302801c3317800400150004008b80080086800400b2800633018024", @ANYRES64=r1], 0x3344}, 0x1, 0x0, 0x0, 0x4040044}, 0xc000) 2.656554964s ago: executing program 7 (id=8180): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'}) r2 = socket$inet(0x2, 0x2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, 0x0, &(0x7f0000000100)) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)={0x24, r6, 0x309, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4090}, 0x24000890) 2.327489959s ago: executing program 4 (id=8181): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, 0x0, 0xc0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001440)=ANY=[], 0x114}], 0x1}, 0x0) recvmmsg(r4, &(0x7f00000065c0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r5, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000180)=""/197, 0xc5}, {&(0x7f0000001640)=""/197, 0xc5}, {&(0x7f0000000440)=""/56, 0x38}, {&(0x7f0000000500)=""/167, 0xa7}, {&(0x7f0000001740)=""/4076, 0xfec}], 0x5}, 0x2}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x3}], 0x7, 0x100, 0x0) write$tun(r2, &(0x7f0000001280)=ANY=[@ANYBLOB="000086dd0000110005000000a60c6b63851e0f9829"], 0xfce) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000003c0)='nv', 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendto$inet(r1, &(0x7f0000000240)="c9", 0x1, 0x4044880, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000004000000040200081200000000000000a24500b7586c90e502e3bd05350b64dcbdc64c5f781baa4992e93b25c5728ef1c3e7f29ece63247c20dc96c1c635d94a69cecaffdcea7ac940232fd3fa1fdbf00f06ec4d43d33ac567a2a9845e44a6bfcb5988b352275f058437f56505bb3f72931efb6ffb8c53a744456f34804dc5b04ae576bf5fe3e2e4238ad4866a5c5dc0aac8a51e3164b80d40cdd3ff9fe40a7aff0887d2df8afce38c1c322a4df65e650b0fb78d93da378119203c43b07476078d4ee632a4e5ddefe31f7b9f1c7502f25446d9c04857acd097615d22a531b3", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES32], 0x50) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 2.274800653s ago: executing program 0 (id=8182): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="b2754c3e", @ANYRES16=r1, @ANYBLOB="170900000000ffdbdf250100000008001800ac1414aa060002000100000008000a0001000000050007000000000008000900fffffffe08001900e0000002"], 0x44}}, 0x4) listen(0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000008000000180100002520732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000f98500000006000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r2, 0x0, 0x8, 0x22, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000600)=""/34, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) epoll_create1(0x80000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) r5 = socket(0x2, 0x3, 0x6) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000140)={0x84, @dev={0xac, 0x14, 0x14, 0x3a}, 0x4e21, 0x3, 'lblc\x00', 0x1d, 0x80002, 0x64}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7030000ffffff1f850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="800000000802021100000000000000000000000000640001000006020202020202010882848b960c12182400"/53], 0x36) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x5, 0x15}, {@dev={0xac, 0x14, 0x14, 0x50}, 0x4e21, 0x1, 0xcd, 0x4}}, 0x44) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88d1}, 0x4000080) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x408c0c0) sendmsg$sock(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) close(r3) r9 = socket$kcm(0x1e, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000003c40)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x98, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x0, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x20000001, 0x0, 0x40000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}}, 0x0) sendmsg$kcm(r9, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) write$cgroup_devices(r3, &(0x7f00000005c0)=ANY=[], 0xfffffeff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r3) 2.161699986s ago: executing program 6 (id=8183): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000200000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4000, 0x640}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, 0x312, 0x800}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x4c}}, 0x884) 2.128568907s ago: executing program 3 (id=8184): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) sendto(r4, &(0x7f0000000000)="68000000300005050100000000000000000000005400018050000180090001006761746500000000400002801800020000000000000000000000000000000000000000001800058014000180080001000000000008000300640000000c000700e803ffe400000000", 0x68, 0x0, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) 1.921247519s ago: executing program 7 (id=8185): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vxcan1\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="54000000020603000000000000000000000000000d000300686173683a6e65740000000005000400000000000900020073797a31000000000c000780080008400000007005000500020300000500010006"], 0x54}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8948, &(0x7f00000002c0)={'bond0\x00', @broadcast}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff80850000000400000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x60000000}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r7}, 0xc) ioctl$BTRFS_IOC_SCRUB_CANCEL(r3, 0x941c, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffffffe}]}}}]}]}], {0x14}}, 0xd4}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a31000000000500010007ffe2001c0007800c00018008000140f60000020c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) 1.179634877s ago: executing program 0 (id=8186): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8, 0xa, r7}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4000, 0x640}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, 0x312, 0x800}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x4c}}, 0x884) 1.076368548s ago: executing program 6 (id=8187): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x7, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x5, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd31, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x4, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0x7, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x3, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffff7f, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0x3, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0x3, 0x421, 0x3ff, 0x2, 0xd, 0x7, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r9, {0x10}, {}, {0xa, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 1.04616431s ago: executing program 3 (id=8188): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x1000d, 0x0, 0x0, 0x41100}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r1, 0x8b2a, &(0x7f0000000040)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000300)=0x3, 0x4) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='freezer.parent_freezing\x00', 0x0, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r4, &(0x7f0000000340)="07000000010001", 0x7) r5 = socket$kcm(0x10, 0x3, 0x10) bind$alg(r0, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000640)={@empty, 0x0}, &(0x7f0000000680)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x8, 0x2f, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xf}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @ldst={0x1, 0x1, 0x4, 0x1, 0x0, 0xc, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xb}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000540)='syzkaller\x00', 0xc0000, 0x90, &(0x7f0000000580)=""/144, 0x41000, 0x24, '\x00', r6, @fallback=0x2c, r3, 0x8, &(0x7f00000006c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000700)={0x1, 0xd, 0x5, 0x2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000740)=[r3], 0x0, 0x10, 0x7270fef1}, 0x94) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="1400000016000b63d25a8064100094f90224fc05", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e21, @loopback}, 0x10) 946.486649ms ago: executing program 4 (id=8189): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) sendto(r5, &(0x7f0000000000)="68000000300005050100000000000000000000005400018050000180090001006761746500000000400002801800020000000000000000000000000000000000000000001800058014000180080001000000000008000300640000000c000700e803ffe400000000", 0x68, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) 808.150213ms ago: executing program 0 (id=8190): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x37000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x94) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xfffe, 0xd, @mcast1, 0x1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000001080)=ANY=[@ANYBLOB="01000000000000000a00000300000000ff01000000000000000000000000000100"/71], 0x110) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b00000000007c0f60e4319cc543ba12ff350a4d7cc08dc1c3db2577320b907f1285eb47"], 0x28}}, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000008000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r7}, &(0x7f0000000080), &(0x7f00000000c0)=r8}, 0x20) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r5, 0x1, 0xfffffffc, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x11) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) ioctl$NILFS_IOCTL_SET_SUINFO(r6, 0x40186e8d, &(0x7f0000000200)={&(0x7f00000001c0)=[{0xfffffffffffffffc, 0x2, 0x0, {0x3d25bbe, 0x4, 0x1}}, {0x6, 0x1, 0x0, {0x5, 0x634b, 0x1}}], 0x2, 0x20, 0xfffa, 0x400}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) 255.720834ms ago: executing program 3 (id=8191): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4000, 0x640}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008001}, 0x8000) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x4c}}, 0x884) 245.878254ms ago: executing program 6 (id=8192): socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000010000000000000104000000200000000100000000000001"], 0x0, 0x3c}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, &(0x7f00000000c0)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x71, 0x8, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x86dd, 0x26, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000000)={0x1d, r5, 0x3}, 0x18) recvmsg$kcm(r4, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x40) getsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000100)=0x4, &(0x7f0000000180)=0x4) 219.481262ms ago: executing program 4 (id=8193): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x84, 0x2c, 0xd2f, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x40, 0x8, 0x7}}]}, {0xfffffffffffffc20}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500400086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) 42.604332ms ago: executing program 4 (id=8194): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x1000d, 0x0, 0x0, 0x41100}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r1, 0x8b2a, &(0x7f0000000040)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000300)=0x3, 0x4) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='freezer.parent_freezing\x00', 0x0, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) r5 = socket$kcm(0x10, 0x3, 0x10) bind$alg(r0, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000640)={@empty, 0x0}, &(0x7f0000000680)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x8, 0x2f, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xf}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @ldst={0x1, 0x1, 0x4, 0x1, 0x0, 0xc, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xb}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000540)='syzkaller\x00', 0xc0000, 0x90, &(0x7f0000000580)=""/144, 0x41000, 0x24, '\x00', r6, @fallback=0x2c, r3, 0x8, &(0x7f00000006c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000700)={0x1, 0xd, 0x5, 0x2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000740)=[r3], 0x0, 0x10, 0x7270fef1}, 0x94) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="1400000016000b63d25a8064100094f90224fc05", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e21, @loopback}, 0x10) 0s ago: executing program 0 (id=8195): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) sendto(r4, &(0x7f0000000000)="68000000300005050100000000000000000000005400018050000180090001006761746500000000400002801800020000000000000000000000000000000000000000001800058014000180080001000000000008000300640000000c000700e803ffe400000000", 0x68, 0x0, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): 0][ T895] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7172'. [ 1317.600969][ T5948] tipc: Subscription rejected, illegal request [ 1317.680157][ T899] syzkaller0: entered promiscuous mode [ 1317.680186][ T899] syzkaller0: entered allmulticast mode [ 1317.702009][ T901] syzkaller0: entered promiscuous mode [ 1317.702046][ T901] syzkaller0: entered allmulticast mode [ 1317.706237][ T901] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1317.803410][ T903] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7176'. [ 1317.813214][ T905] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7177'. [ 1318.136205][T13638] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1318.136248][T13638] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.137374][T13638] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1318.137408][T13638] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.137453][T13638] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1318.137483][T13638] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.137524][T13638] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1318.137553][T13638] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.233004][ T931] syzkaller0: entered promiscuous mode [ 1318.233031][ T931] syzkaller0: entered allmulticast mode [ 1318.299028][ T924] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1318.380735][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1318.482983][ T943] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1318.486019][ T943] netlink: 'syz.5.7182': attribute type 1 has an invalid length. [ 1318.532924][ T943] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1318.617792][ T948] syzkaller0: entered promiscuous mode [ 1318.617821][ T948] syzkaller0: entered allmulticast mode [ 1318.960502][ T968] __nla_validate_parse: 1 callbacks suppressed [ 1318.960530][ T968] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7184'. [ 1318.960597][ T968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7184'. [ 1318.960616][ T968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7184'. [ 1318.960716][ T968] netlink: 108 bytes leftover after parsing attributes in process `syz.4.7184'. [ 1318.960735][ T968] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7184'. [ 1319.196603][ T970] tcf_pedit_act: 7 callbacks suppressed [ 1319.196630][ T970] tc action pedit unable to extract header offset for header type (0x4) [ 1319.196648][ T970] tc action pedit unable to extract header offset for header type (0x4) [ 1319.196663][ T970] tc action pedit unable to extract header offset for header type (0x4) [ 1319.196677][ T970] tc action pedit unable to extract header offset for header type (0x4) [ 1319.196692][ T970] tc action pedit unable to extract header offset for header type (0x4) [ 1319.196707][ T970] tc action pedit unable to extract header offset for header type (0x4) [ 1319.196722][ T970] tc action pedit unable to extract header offset for header type (0x4) [ 1319.196736][ T970] tc action pedit unable to extract header offset for header type (0x4) [ 1319.196751][ T970] tc action pedit unable to extract header offset for header type (0x4) [ 1319.196765][ T970] tc action pedit unable to extract header offset for header type (0x4) [ 1319.196794][ T970] 0: reclassify loop, rule prio 0, protocol 800 [ 1319.403245][ T972] block nbd6: server does not support multiple connections per device. [ 1319.403586][ T972] block nbd6: shutting down sockets [ 1319.429497][ T975] netlink: 'syz.4.7188': attribute type 3 has an invalid length. [ 1319.618345][ T983] syzkaller0: left promiscuous mode [ 1319.618373][ T983] syzkaller0: left allmulticast mode [ 1319.704291][ T987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1319.738936][ T987] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7190'. [ 1319.739282][ T987] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7190'. [ 1319.797473][ T986] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7192'. [ 1319.862764][ T991] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7195'. [ 1319.864215][ T991] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1319.866912][ T991] netlink: 'syz.5.7195': attribute type 1 has an invalid length. [ 1320.131356][ T991] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1320.182460][ T1432] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1320.182515][ T1432] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1320.182554][ T1432] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1320.182593][ T1432] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1320.466313][ T1006] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1320.515147][ T1006] netlink: 'syz.3.7197': attribute type 1 has an invalid length. [ 1320.535098][ T1004] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7198'. [ 1320.584611][ T1006] 8021q: adding VLAN 0 to HW filter on device bond99 [ 1320.790970][ T1012] syzkaller0: left promiscuous mode [ 1320.790998][ T1012] syzkaller0: left allmulticast mode [ 1320.887797][ T1017] block nbd6: server does not support multiple connections per device. [ 1320.888161][ T1017] block nbd6: shutting down sockets [ 1321.019967][ T66] IPVS: starting estimator thread 0... [ 1321.120486][ T1021] IPVS: using max 25 ests per chain, 60000 per kthread [ 1321.501166][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1321.651079][ T1055] syzkaller1: entered promiscuous mode [ 1321.651105][ T1055] syzkaller1: entered allmulticast mode [ 1321.729448][ T1049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1321.771740][ T1061] syzkaller0: entered promiscuous mode [ 1321.771767][ T1061] syzkaller0: entered allmulticast mode [ 1321.919354][T12426] tipc: Subscription rejected, illegal request [ 1322.175079][ T1066] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1322.178596][ T1066] netlink: 'syz.5.7213': attribute type 1 has an invalid length. [ 1322.233697][ T1066] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1322.546975][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1322.655019][ T1079] block nbd6: server does not support multiple connections per device. [ 1322.656337][ T1079] block nbd6: shutting down sockets [ 1323.294415][ T1099] netlink: 'syz.4.7224': attribute type 4 has an invalid length. [ 1323.599503][ T1113] syzkaller0: entered promiscuous mode [ 1323.599521][ T1113] syzkaller0: entered allmulticast mode [ 1323.848420][ T1117] syzkaller0: entered promiscuous mode [ 1323.848448][ T1117] syzkaller0: entered allmulticast mode [ 1323.866982][ T1117] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1324.042437][ T1119] syzkaller0: entered promiscuous mode [ 1324.042465][ T1119] syzkaller0: entered allmulticast mode [ 1324.183231][ T1127] netlink: 'syz.4.7231': attribute type 2 has an invalid length. [ 1324.202747][ T1127] debugfs: '.PÑè'óG!DEÒSˆ' already exists in 'ieee80211' [ 1324.448568][ T1134] __nla_validate_parse: 16 callbacks suppressed [ 1324.448588][ T1134] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7234'. [ 1324.778606][ T1149] syzkaller0: mtu less than device minimum [ 1324.780166][ T1149] syzkaller0: entered promiscuous mode [ 1324.780187][ T1149] syzkaller0: entered allmulticast mode [ 1324.785867][ T1149] tipc: Resetting bearer [ 1325.067890][ T1159] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7241'. [ 1325.067962][ T1159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7241'. [ 1325.067981][ T1159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7241'. [ 1325.068050][ T1159] netlink: 108 bytes leftover after parsing attributes in process `syz.1.7241'. [ 1325.068067][ T1159] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7241'. [ 1325.132966][ T1165] syzkaller0: entered promiscuous mode [ 1325.132984][ T1165] syzkaller0: entered allmulticast mode [ 1325.138591][ T1165] tipc: Enabled bearer , priority 0 [ 1325.139880][ T1164] tipc: Resetting bearer [ 1325.218347][ T1164] tipc: Disabling bearer [ 1325.360151][ T1173] block nbd6: server does not support multiple connections per device. [ 1325.376051][ T1173] block nbd6: shutting down sockets [ 1325.475815][ T1176] block nbd6: server does not support multiple connections per device. [ 1325.478086][ T1176] block nbd6: shutting down sockets [ 1325.661167][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1325.821949][ T1189] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7249'. [ 1325.953260][ T1193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1325.983715][ T1193] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7250'. [ 1325.983936][ T1193] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7250'. [ 1326.076522][ T1348] tipc: Subscription rejected, illegal request [ 1326.145036][ T1199] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7251'. [ 1326.700623][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1326.811654][ T1228] block nbd6: server does not support multiple connections per device. [ 1326.812869][ T1228] block nbd6: shutting down sockets [ 1326.948416][ T1230] block nbd6: server does not support multiple connections per device. [ 1326.949806][ T1230] block nbd6: shutting down sockets [ 1327.360013][ T1250] syzkaller0: entered promiscuous mode [ 1327.360041][ T1250] syzkaller0: entered allmulticast mode [ 1327.703391][ T1256] syzkaller0: entered promiscuous mode [ 1327.703410][ T1256] syzkaller0: entered allmulticast mode [ 1327.707324][ T1256] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1328.067149][ T1263] block nbd6: server does not support multiple connections per device. [ 1328.067503][ T1263] block nbd6: shutting down sockets [ 1328.414101][ T1270] block nbd6: server does not support multiple connections per device. [ 1328.414521][ T1270] block nbd6: shutting down sockets [ 1328.458707][ T1275] syzkaller0: entered promiscuous mode [ 1328.458732][ T1275] syzkaller0: entered allmulticast mode [ 1329.516695][ T1286] __nla_validate_parse: 8 callbacks suppressed [ 1329.516718][ T1286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7276'. [ 1329.548341][ T1288] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7278'. [ 1329.642256][ T1290] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7277'. [ 1329.766182][ T1302] block nbd6: server does not support multiple connections per device. [ 1329.766539][ T1302] block nbd6: shutting down sockets [ 1329.846594][ T1301] syzkaller0: entered promiscuous mode [ 1329.846621][ T1301] syzkaller0: entered allmulticast mode [ 1329.872373][ T1301] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1330.044571][ T1314] syzkaller1: entered promiscuous mode [ 1330.044599][ T1314] syzkaller1: entered allmulticast mode [ 1330.088413][ T1316] ip_tables: iptables: counters copy to user failed while replacing table [ 1330.145626][ T1314] bond11: option tlb_dynamic_lb: invalid value (128) [ 1330.148107][ T1314] bond11 (unregistering): Released all slaves [ 1330.359821][ T1323] syzkaller1: entered promiscuous mode [ 1330.359848][ T1323] syzkaller1: entered allmulticast mode [ 1330.610177][ T1325] block nbd6: server does not support multiple connections per device. [ 1330.614125][ T1325] block nbd6: shutting down sockets [ 1336.859574][ T1341] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1336.961598][ T1347] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7294'. [ 1336.961682][ T1347] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7294'. [ 1336.961703][ T1347] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7294'. [ 1336.961780][ T1347] netlink: 108 bytes leftover after parsing attributes in process `syz.5.7294'. [ 1336.961799][ T1347] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7294'. [ 1337.099695][ T1356] syzkaller0: entered promiscuous mode [ 1337.099725][ T1356] syzkaller0: entered allmulticast mode [ 1337.627252][ T1377] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7302'. [ 1337.771025][ T1385] block nbd6: server does not support multiple connections per device. [ 1337.772711][ T1385] block nbd6: shutting down sockets [ 1337.916468][ T1390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1337.990895][ T1388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1338.049408][ T1388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1338.140778][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1338.279099][ T1399] block nbd6: server does not support multiple connections per device. [ 1338.279481][ T1399] block nbd6: shutting down sockets [ 1338.311896][ T1402] netlink: 'syz.5.7308': attribute type 10 has an invalid length. [ 1338.324230][ T1403] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1338.338879][ T1403] netlink: 'syz.0.7307': attribute type 1 has an invalid length. [ 1338.350691][ T1402] team0: Port device dummy0 added [ 1338.416547][ T1403] 8021q: adding VLAN 0 to HW filter on device bond80 [ 1338.634523][T13674] wlan0 speed is unknown, defaulting to 1000 [ 1338.634551][T13674] xyz0: Port: 1 Link DOWN [ 1338.908195][ T1429] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 1339.180811][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1339.549190][ T1414] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1339.549226][ T1414] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1339.777386][ T1437] netlink: 'syz.1.7314': attribute type 1 has an invalid length. [ 1339.777413][ T1437] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7314'. [ 1339.988114][ T1443] block nbd6: server does not support multiple connections per device. [ 1339.988458][ T1443] block nbd6: shutting down sockets [ 1340.203350][ T1455] netlink: 'syz.0.7319': attribute type 1 has an invalid length. [ 1340.221079][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1340.313542][ T1460] netlink: 'syz.3.7317': attribute type 62 has an invalid length. [ 1340.313571][ T1460] netlink: 'syz.3.7317': attribute type 3 has an invalid length. [ 1340.488729][ T1461] bridge1: entered promiscuous mode [ 1340.488760][ T1461] bridge1: entered allmulticast mode [ 1340.509405][ T1461] team0: Port device bridge1 added [ 1340.524748][ T1465] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1340.529410][ T1461] bridge0: port 1(team0) entered blocking state [ 1340.530025][ T1461] bridge0: port 1(team0) entered disabled state [ 1340.556634][ T1465] netlink: 'syz.1.7321': attribute type 1 has an invalid length. [ 1340.559093][ T1461] team0: entered allmulticast mode [ 1340.559127][ T1461] team_slave_0: entered allmulticast mode [ 1340.559148][ T1461] team_slave_1: entered allmulticast mode [ 1340.585848][ T1461] dummy0: entered allmulticast mode [ 1340.588158][ T1461] team0: entered promiscuous mode [ 1340.588183][ T1461] team_slave_0: entered promiscuous mode [ 1340.588377][ T1461] team_slave_1: entered promiscuous mode [ 1340.588556][ T1461] dummy0: entered promiscuous mode [ 1340.661915][ T1465] 8021q: adding VLAN 0 to HW filter on device bond96 [ 1340.825015][ T1473] syzkaller0: Caught tx_queue_len zero misconfig [ 1341.032196][ T1481] syzkaller0: entered promiscuous mode [ 1341.032224][ T1481] syzkaller0: entered allmulticast mode [ 1341.056027][ T1481] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1341.165060][ T1490] netlink: 'syz.1.7327': attribute type 1 has an invalid length. [ 1341.165085][ T1490] netlink: 'syz.1.7327': attribute type 2 has an invalid length. [ 1341.261984][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1341.925264][ T1504] block nbd6: server does not support multiple connections per device. [ 1341.927349][ T1504] block nbd6: shutting down sockets [ 1342.248466][ T1510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7332'. [ 1342.266233][ T1510] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1342.282692][ T1510] netlink: 'syz.4.7332': attribute type 1 has an invalid length. [ 1342.353521][ T1510] 8021q: adding VLAN 0 to HW filter on device bond85 [ 1342.375414][ T1517] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7333'. [ 1342.415031][ T1510] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7332'. [ 1342.447030][ T1514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7334'. [ 1342.685711][ T1512] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7331'. [ 1342.685789][ T1512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7331'. [ 1342.685818][ T1512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7331'. [ 1342.685889][ T1512] netlink: 108 bytes leftover after parsing attributes in process `syz.3.7331'. [ 1342.685907][ T1512] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7331'. [ 1343.018700][ T1540] tc_dump_action: action bad kind [ 1343.333441][ T1548] netlink: 64 bytes leftover after parsing attributes in process `syz.5.7340'. [ 1344.382555][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1344.517569][ T1585] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1344.538820][ T1585] validate_nla: 1 callbacks suppressed [ 1344.538844][ T1585] netlink: 'syz.0.7347': attribute type 1 has an invalid length. [ 1344.725774][ T1585] 8021q: adding VLAN 0 to HW filter on device bond81 [ 1345.089033][ T1601] netlink: 'syz.5.7350': attribute type 2 has an invalid length. [ 1345.385962][ T1619] syzkaller0: left promiscuous mode [ 1345.386016][ T1619] syzkaller0: left allmulticast mode [ 1345.421411][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1346.179403][ T1634] netlink: 'syz.3.7359': attribute type 1 has an invalid length. [ 1346.456371][ T1640] IPVS: mh: UDP 127.0.0.1:20000 - no destination available [ 1346.508990][ T1642] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1346.538447][ T1642] netlink: 'syz.4.7361': attribute type 1 has an invalid length. [ 1346.872168][ T1642] 8021q: adding VLAN 0 to HW filter on device bond86 [ 1347.034778][ T1650] netlink: 'syz.0.7362': attribute type 6 has an invalid length. [ 1347.153504][ T1655] netlink: 'syz.3.7365': attribute type 1 has an invalid length. [ 1347.153530][ T1655] netlink: 'syz.3.7365': attribute type 3 has an invalid length. [ 1347.272148][ T1660] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 1347.288254][ T1660] veth61: left allmulticast mode [ 1347.297113][ T1660] veth63: left allmulticast mode [ 1347.302792][ T1660] veth65: left allmulticast mode [ 1347.308433][ T1660] veth67: left allmulticast mode [ 1347.309040][ T1660] veth69: left allmulticast mode [ 1347.327744][ T1660] veth75: left allmulticast mode [ 1347.328220][ T1660] veth77: left allmulticast mode [ 1347.328689][ T1660] veth79: left allmulticast mode [ 1347.329267][ T1660] veth81: left allmulticast mode [ 1347.329696][ T1660] veth83: left allmulticast mode [ 1347.330139][ T1660] veth85: left allmulticast mode [ 1347.363809][ T1660] veth87: left allmulticast mode [ 1347.365225][ T1660] veth95: left allmulticast mode [ 1347.365619][ T1660] veth97: left allmulticast mode [ 1347.367613][ T1660] veth105: left allmulticast mode [ 1347.367877][ T1660] ip6gretap1: left allmulticast mode [ 1347.368474][ T1660] veth107: left allmulticast mode [ 1347.368868][ T1660] veth109: left allmulticast mode [ 1347.369716][ T1660] bond78: left promiscuous mode [ 1347.369737][ T1660] veth111: left promiscuous mode [ 1347.423770][ T1660] veth111: left allmulticast mode [ 1347.429871][ T1660] veth113: left allmulticast mode [ 1347.437172][ T1660] veth115: left allmulticast mode [ 1347.437680][ T1660] veth117: left allmulticast mode [ 1347.586498][ T1665] block nbd6: server does not support multiple connections per device. [ 1347.587646][ T1665] block nbd6: shutting down sockets [ 1347.742340][ T1667] __nla_validate_parse: 20 callbacks suppressed [ 1347.742367][ T1667] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7368'. [ 1347.825059][ T1669] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7369'. [ 1348.080968][ T1680] block nbd6: server does not support multiple connections per device. [ 1348.081337][ T1680] block nbd6: shutting down sockets [ 1348.139557][ T1683] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1348.182352][ T1683] netlink: 'syz.3.7374': attribute type 1 has an invalid length. [ 1348.234323][ T1683] 8021q: adding VLAN 0 to HW filter on device bond100 [ 1348.288535][ T1683] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7374'. [ 1348.349928][ T1691] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7377'. [ 1348.508902][ T1695] syzkaller0: entered promiscuous mode [ 1348.508930][ T1695] syzkaller0: entered allmulticast mode [ 1348.548238][ T1697] block nbd6: server does not support multiple connections per device. [ 1348.549751][ T1697] block nbd6: shutting down sockets [ 1348.616153][ T1695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7378'. [ 1348.962702][ T1703] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1348.968613][ T1703] netlink: 'syz.0.7380': attribute type 1 has an invalid length. [ 1349.017396][ T1703] 8021q: adding VLAN 0 to HW filter on device bond82 [ 1349.057595][ T1705] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7381'. [ 1349.057637][ T1705] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7381'. [ 1349.058415][ T1703] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7380'. [ 1349.280007][ T1717] block nbd6: server does not support multiple connections per device. [ 1349.289446][ T1717] block nbd6: shutting down sockets [ 1349.295317][ T1713] netlink: 'syz.5.7382': attribute type 4 has an invalid length. [ 1349.531599][ T1727] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1349.675887][ T1736] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7388'. [ 1349.785696][ T1739] block nbd6: server does not support multiple connections per device. [ 1349.786743][ T1739] block nbd6: shutting down sockets [ 1349.819992][ T1740] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7389'. [ 1350.175438][ T1727] 8021q: adding VLAN 0 to HW filter on device bond83 [ 1350.396845][ T1751] block nbd6: server does not support multiple connections per device. [ 1350.398207][ T1751] block nbd6: shutting down sockets [ 1350.789154][ T1769] validate_nla: 2 callbacks suppressed [ 1350.789179][ T1769] netlink: 'syz.0.7399': attribute type 4 has an invalid length. [ 1350.802193][ T1769] netlink: 'syz.0.7399': attribute type 4 has an invalid length. [ 1350.825949][ T1771] block nbd6: server does not support multiple connections per device. [ 1350.827028][ T1771] block nbd6: shutting down sockets [ 1352.548059][ T1792] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1352.561140][ T1791] block nbd6: server does not support multiple connections per device. [ 1352.561467][ T1791] block nbd6: shutting down sockets [ 1352.569374][ T1792] netlink: 'syz.3.7406': attribute type 1 has an invalid length. [ 1352.651720][ T1792] 8021q: adding VLAN 0 to HW filter on device bond101 [ 1352.943792][ T1802] block nbd6: server does not support multiple connections per device. [ 1352.944184][ T1802] block nbd6: shutting down sockets [ 1352.949089][ T1801] __nla_validate_parse: 6 callbacks suppressed [ 1352.949151][ T1801] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7409'. [ 1353.198616][ T1816] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7411'. [ 1353.215742][ T1816] batman_adv: batadv0: Removing interface: gretap1 [ 1353.233149][ T1816] batman_adv: batadv0: Removing interface: macvlan3 [ 1353.316633][ T1821] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7413'. [ 1353.318620][ T1821] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1353.334075][ T1821] netlink: 'syz.5.7413': attribute type 1 has an invalid length. [ 1353.415497][ T1821] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1353.487818][ T1821] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7413'. [ 1353.881706][ T1842] netlink: 4912 bytes leftover after parsing attributes in process `syz.4.7417'. [ 1353.952359][ T1848] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1353.971148][ T1848] netlink: 'syz.3.7420': attribute type 1 has an invalid length. [ 1354.127307][ T1851] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7420'. [ 1354.376697][ T1848] 8021q: adding VLAN 0 to HW filter on device bond102 [ 1354.489929][ T1856] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1354.509249][ T1856] netlink: 'syz.3.7421': attribute type 1 has an invalid length. [ 1354.612335][ T1856] 8021q: adding VLAN 0 to HW filter on device bond103 [ 1354.659309][ T1856] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7421'. [ 1354.681546][ T1862] block nbd6: server does not support multiple connections per device. [ 1354.683764][ T1862] block nbd6: shutting down sockets [ 1354.815584][ T1864] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7424'. [ 1354.926730][ T1871] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1354.967171][ T1871] netlink: 'syz.0.7426': attribute type 1 has an invalid length. [ 1355.102174][ T1871] 8021q: adding VLAN 0 to HW filter on device bond84 [ 1355.129517][ T1871] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7426'. [ 1355.521266][ T1896] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1355.524542][ T1896] netlink: 'syz.3.7434': attribute type 1 has an invalid length. [ 1355.571324][ T1896] 8021q: adding VLAN 0 to HW filter on device bond104 [ 1355.679140][ T1900] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7434'. [ 1355.898733][ T1908] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1355.916841][ T1908] netlink: 'syz.3.7437': attribute type 1 has an invalid length. [ 1355.949626][ T1908] 8021q: adding VLAN 0 to HW filter on device bond105 [ 1355.973112][ T1910] netlink: 'syz.5.7438': attribute type 3 has an invalid length. [ 1356.218155][ T1922] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1356.233900][ T1922] netlink: 'syz.0.7441': attribute type 1 has an invalid length. [ 1356.324693][ T1922] 8021q: adding VLAN 0 to HW filter on device bond85 [ 1356.418808][ T1926] netlink: 'syz.5.7442': attribute type 4 has an invalid length. [ 1356.449173][ T1926] netlink: 'syz.5.7442': attribute type 4 has an invalid length. [ 1356.758973][ T1938] netlink: 'syz.0.7448': attribute type 1 has an invalid length. [ 1356.769188][ T1939] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1356.811514][ T1939] netlink: 'syz.4.7447': attribute type 1 has an invalid length. [ 1356.855553][ T1939] 8021q: adding VLAN 0 to HW filter on device bond87 [ 1356.993887][ T1945] netlink: 'syz.0.7448': attribute type 1 has an invalid length. [ 1357.056269][ T1949] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1357.078819][ T1949] netlink: 'syz.4.7449': attribute type 1 has an invalid length. [ 1357.097605][ T1950] block nbd6: server does not support multiple connections per device. [ 1357.098091][ T1950] block nbd6: shutting down sockets [ 1357.151338][ T1945] 8021q: adding VLAN 0 to HW filter on device bond86 [ 1357.187662][ T1949] 8021q: adding VLAN 0 to HW filter on device bond88 [ 1358.055828][ T1992] __nla_validate_parse: 26 callbacks suppressed [ 1358.055854][ T1992] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7459'. [ 1358.059779][ T1992] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1358.100086][ T1992] netlink: 'syz.5.7459': attribute type 1 has an invalid length. [ 1358.174012][ T1992] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1358.218637][ T1992] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7459'. [ 1358.345310][ T1999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7461'. [ 1358.362207][ T2001] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1358.418335][ T2001] 8021q: adding VLAN 0 to HW filter on device bond89 [ 1358.439813][ T2006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1358.445989][ T2001] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7462'. [ 1358.646242][ T2012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7466'. [ 1358.648326][ T2012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7466'. [ 1358.871947][ T2021] syzkaller0: entered promiscuous mode [ 1358.871973][ T2021] syzkaller0: entered allmulticast mode [ 1359.144511][ T2031] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1359.187159][ T2031] 8021q: adding VLAN 0 to HW filter on device bond90 [ 1359.207874][ T2032] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7473'. [ 1359.224857][ T2031] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7474'. [ 1359.242644][ T2032] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1359.395933][ T2032] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1359.409479][T14985] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1359.431562][T14985] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1359.436027][T14985] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1359.461468][T14985] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1359.466426][T14985] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1359.522567][ T5625] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1359.525069][ T5625] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1359.527289][ T5625] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1359.551825][ T5625] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1359.565726][ T5625] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1359.589358][ T2032] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7473'. [ 1360.047831][ T2061] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1360.048087][ T2061] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1360.048252][ T2061] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1360.048427][ T2061] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1360.048597][ T2061] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1360.048763][ T2061] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1360.048927][ T2061] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1360.049100][ T2061] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1360.049264][ T2061] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1360.049427][ T2061] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1360.219494][ T2047] ovs-s!: entered promiscuous mode [ 1360.370990][ T2074] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1360.587175][ T2083] netlink: 164 bytes leftover after parsing attributes in process `syz.5.7485'. [ 1360.588547][ T2084] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1360.693455][ T2090] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1360.720494][ T2084] 8021q: adding VLAN 0 to HW filter on device bond91 [ 1360.794705][ T2090] 8021q: adding VLAN 0 to HW filter on device bond106 [ 1360.989985][ T2037] wlan0 speed is unknown, defaulting to 1000 [ 1361.011954][ T2037] wg2 speed is unknown, defaulting to 1000 [ 1361.043551][ T2037] ±ÿ speed is unknown, defaulting to 1000 [ 1361.046478][ T2105] siw: device registration error -23 [ 1361.235384][ T2110] block nbd6: server does not support multiple connections per device. [ 1361.237017][ T2110] block nbd6: shutting down sockets [ 1361.580728][ T5625] Bluetooth: hci6: command tx timeout [ 1361.934411][ T2142] block nbd6: server does not support multiple connections per device. [ 1361.934835][ T2142] block nbd6: shutting down sockets [ 1362.027098][ T2037] bridge0: port 1(bridge_slave_0) entered blocking state [ 1362.027288][ T2037] bridge0: port 1(bridge_slave_0) entered disabled state [ 1362.027759][ T2037] bridge_slave_0: entered allmulticast mode [ 1362.055240][ T2037] bridge_slave_0: entered promiscuous mode [ 1362.072806][ T2037] bridge0: port 2(bridge_slave_1) entered blocking state [ 1362.072958][ T2037] bridge0: port 2(bridge_slave_1) entered disabled state [ 1362.073144][ T2037] bridge_slave_1: entered allmulticast mode [ 1362.131642][ T2037] bridge_slave_1: entered promiscuous mode [ 1362.263091][ T2037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1362.269548][ T2037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1362.330124][ T2152] block nbd6: server does not support multiple connections per device. [ 1362.342895][ T2152] block nbd6: shutting down sockets [ 1362.363296][ T2037] team0: Port device team_slave_0 added [ 1362.366529][ T2037] team0: Port device team_slave_1 added [ 1362.416815][ T2037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1362.416836][ T2037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1362.416863][ T2037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1362.469620][ T2037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1362.469641][ T2037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1362.469676][ T2037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1362.598105][ T2037] hsr_slave_0: entered promiscuous mode [ 1362.599304][ T2037] hsr_slave_1: entered promiscuous mode [ 1362.600110][ T2037] debugfs: 'hsr0' already exists in 'hsr' [ 1362.600134][ T2037] Cannot create hsr debugfs directory [ 1362.951925][ T2172] block nbd6: server does not support multiple connections per device. [ 1362.971360][ T2172] block nbd6: shutting down sockets [ 1363.087194][ T2168] syzkaller0: entered promiscuous mode [ 1363.087219][ T2168] syzkaller0: entered allmulticast mode [ 1363.512755][ T2181] __nla_validate_parse: 7 callbacks suppressed [ 1363.512778][ T2181] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7519'. [ 1363.663164][ T5625] Bluetooth: hci6: command tx timeout [ 1363.664057][ T2037] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1363.686415][ T2037] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1363.687461][ T2037] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1363.708423][ T2037] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1363.709884][ T2037] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1363.743848][ T2184] block nbd6: server does not support multiple connections per device. [ 1363.745822][ T2184] block nbd6: shutting down sockets [ 1363.775786][ T2037] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1363.776766][ T2037] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1363.817933][ T2037] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1364.045072][ T2037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1364.078388][ T2199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7526'. [ 1364.158412][ T2203] block nbd6: server does not support multiple connections per device. [ 1364.158772][ T2203] block nbd6: shutting down sockets [ 1364.198727][ T2037] 8021q: adding VLAN 0 to HW filter on device team0 [ 1364.268350][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 1364.268503][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1364.307227][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 1364.307340][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1364.596323][ T2215] syzkaller0: entered promiscuous mode [ 1364.596350][ T2215] syzkaller0: entered allmulticast mode [ 1364.742328][ T2229] validate_nla: 8 callbacks suppressed [ 1364.742353][ T2229] netlink: 'syz.3.7534': attribute type 4 has an invalid length. [ 1364.748179][ T2229] netlink: 'syz.3.7534': attribute type 4 has an invalid length. [ 1364.886811][ T2233] xt_hashlimit: size too large, truncated to 1048576 [ 1364.993046][ T2238] block nbd6: server does not support multiple connections per device. [ 1364.994986][ T2238] block nbd6: shutting down sockets [ 1365.328821][ T2249] netlink: 'syz.3.7538': attribute type 4 has an invalid length. [ 1365.383744][ T2249] netlink: 'syz.3.7538': attribute type 4 has an invalid length. [ 1365.604707][ T2037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1365.741903][ T5625] Bluetooth: hci6: command tx timeout [ 1365.797073][ T2266] syzkaller0: entered promiscuous mode [ 1365.797101][ T2266] syzkaller0: entered allmulticast mode [ 1365.893795][ T2268] netlink: 'syz.5.7545': attribute type 4 has an invalid length. [ 1365.957461][ T2270] netlink: 'syz.5.7545': attribute type 4 has an invalid length. [ 1366.255870][ T2282] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7549'. [ 1366.259424][ T2282] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7549'. [ 1366.437303][ T2037] veth0_vlan: entered promiscuous mode [ 1366.474031][ T2037] veth1_vlan: entered promiscuous mode [ 1366.552934][ T2037] veth0_macvtap: entered promiscuous mode [ 1366.559318][ T2037] veth1_macvtap: entered promiscuous mode [ 1366.590894][ T2037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1366.637133][ T2037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1366.639669][ T2290] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7551'. [ 1366.658738][ T2292] block nbd6: server does not support multiple connections per device. [ 1366.659081][ T2292] block nbd6: shutting down sockets [ 1366.682203][ T2289] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7552'. [ 1366.682232][ T2289] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7552'. [ 1366.705082][ T2290] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1366.741790][ T5949] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1366.742275][ T5949] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1366.742331][ T5949] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1366.742374][ T5949] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1366.787945][ T2289] syzkaller0: entered promiscuous mode [ 1366.787969][ T2289] syzkaller0: entered allmulticast mode [ 1366.828510][ T2290] netlink: 'syz.4.7551': attribute type 1 has an invalid length. [ 1366.963405][ T2290] 8021q: adding VLAN 0 to HW filter on device bond92 [ 1367.019018][ T2290] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7551'. [ 1367.333586][T13638] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1367.333617][T13638] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1367.469258][ T2311] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7558'. [ 1367.506500][ T2317] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7559'. [ 1367.507407][ T1348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1367.507431][ T1348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1367.830898][ T5625] Bluetooth: hci6: command tx timeout [ 1368.183490][ T2337] net_ratelimit: 45 callbacks suppressed [ 1368.183515][ T2337] ip_tables: iptables: counters copy to user failed while replacing table [ 1368.221915][ T2339] block nbd6: server does not support multiple connections per device. [ 1368.222342][ T2339] block nbd6: shutting down sockets [ 1368.251593][ T2341] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1368.274484][ T2341] netlink: 'syz.4.7567': attribute type 1 has an invalid length. [ 1368.349600][ T2341] 8021q: adding VLAN 0 to HW filter on device bond93 [ 1368.689796][ T2363] block nbd6: server does not support multiple connections per device. [ 1368.727150][ T2363] block nbd6: shutting down sockets [ 1368.774217][ T2366] __nla_validate_parse: 2 callbacks suppressed [ 1368.774243][ T2366] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7575'. [ 1368.978692][ T2373] netlink: 136 bytes leftover after parsing attributes in process `syz.3.7576'. [ 1369.008498][ T2375] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7578'. [ 1369.105521][ T2378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7579'. [ 1369.172159][ T2378] veth87: entered allmulticast mode [ 1369.227594][ T2383] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7582'. [ 1369.387847][ T2388] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1369.394295][ T2385] block nbd6: server does not support multiple connections per device. [ 1369.395587][ T2385] block nbd6: shutting down sockets [ 1369.431095][ T2388] netlink: 'syz.3.7584': attribute type 1 has an invalid length. [ 1369.484209][ T2388] 8021q: adding VLAN 0 to HW filter on device bond107 [ 1369.583688][ T2391] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7584'. [ 1369.716333][ T2393] bridge0: port 2(bridge_slave_1) entered disabled state [ 1369.717138][ T2393] bridge0: port 1(bridge_slave_0) entered disabled state [ 1369.849305][ T2393] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1369.868710][ T2393] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1370.015191][T12426] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1370.016236][ T1348] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1370.016312][ T1348] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1370.016351][ T1348] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1370.213776][ T2406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7592'. [ 1370.358766][ T2416] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7593'. [ 1370.425373][ T2411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7595'. [ 1370.568675][ T2424] block nbd6: server does not support multiple connections per device. [ 1370.572495][ T2424] block nbd6: shutting down sockets [ 1371.019187][ T2441] netlink: 'syz.0.7604': attribute type 46 has an invalid length. [ 1371.019215][ T2441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7604'. [ 1371.655252][ T2475] syzkaller1: entered promiscuous mode [ 1371.655303][ T2475] syzkaller1: entered allmulticast mode [ 1371.954127][ T2486] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1372.365037][ T2506] netlink: 'syz.6.7622': attribute type 4 has an invalid length. [ 1372.396064][ T2506] netlink: 'syz.6.7622': attribute type 4 has an invalid length. [ 1372.428133][ T2511] block nbd6: server does not support multiple connections per device. [ 1372.429302][ T2511] block nbd6: shutting down sockets [ 1372.557802][ T2513] netlink: 'syz.4.7624': attribute type 1 has an invalid length. [ 1372.557831][ T2513] netlink: 'syz.4.7624': attribute type 3 has an invalid length. [ 1372.754551][ T2520] netlink: 'syz.6.7625': attribute type 1 has an invalid length. [ 1372.754586][ T2520] netlink: 'syz.6.7625': attribute type 1 has an invalid length. [ 1372.754602][ T2520] netlink: 'syz.6.7625': attribute type 2 has an invalid length. [ 1372.829372][ T2521] dummy0: left promiscuous mode [ 1372.829402][ T2521] dummy0: left allmulticast mode [ 1372.844629][ T2521] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 1372.848505][ T2521] veth29: left allmulticast mode [ 1372.864990][ T2521] veth31: left allmulticast mode [ 1372.866025][ T2521] veth33: left allmulticast mode [ 1372.870166][ T2521] veth39: left allmulticast mode [ 1372.889712][ T2521] bond32: left promiscuous mode [ 1372.889738][ T2521] bond32: left allmulticast mode [ 1372.901645][ T2521] veth41: left allmulticast mode [ 1372.903202][ T2521] veth47: left allmulticast mode [ 1372.903651][ T2521] veth49: left allmulticast mode [ 1372.905799][ T2521] veth53: left allmulticast mode [ 1372.907283][ T2521] veth59: left allmulticast mode [ 1372.907445][ T2521] macvlan4: left promiscuous mode [ 1372.907463][ T2521] macvlan4: left allmulticast mode [ 1372.907888][ T2521] veth61: left allmulticast mode [ 1372.908055][ T2521] macvlan5: left promiscuous mode [ 1372.908074][ T2521] macvlan5: left allmulticast mode [ 1372.908500][ T2521] veth63: left allmulticast mode [ 1372.908674][ T2521] macvlan6: left promiscuous mode [ 1372.908690][ T2521] macvlan6: left allmulticast mode [ 1372.909705][ T2521] veth67: left allmulticast mode [ 1372.992681][ T2521] veth69: left allmulticast mode [ 1372.993007][ T2521] veth71: left allmulticast mode [ 1372.993416][ T2521] veth73: left allmulticast mode [ 1372.993525][ T2521] macvlan7: left promiscuous mode [ 1372.993536][ T2521] macvlan7: left allmulticast mode [ 1372.998661][ T2521] veth79: left allmulticast mode [ 1372.998778][ T2521] macvlan8: left promiscuous mode [ 1372.998790][ T2521] macvlan8: left allmulticast mode [ 1373.018767][ T2521] veth83: left allmulticast mode [ 1373.222179][ T2521] veth87: left allmulticast mode [ 1373.298833][ T2527] syzkaller0: entered promiscuous mode [ 1373.298861][ T2527] syzkaller0: entered allmulticast mode [ 1373.932754][ T2559] __nla_validate_parse: 4 callbacks suppressed [ 1373.932776][ T2559] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7636'. [ 1373.939212][ T2559] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1373.977708][ T2559] netlink: 'syz.4.7636': attribute type 1 has an invalid length. [ 1374.042314][ T2551] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7634'. [ 1374.042361][ T2551] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7634'. [ 1374.083682][ T2566] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7636'. [ 1374.137408][ T2559] 8021q: adding VLAN 0 to HW filter on device bond94 [ 1374.148471][ T2568] block nbd6: server does not support multiple connections per device. [ 1374.148847][ T2568] block nbd6: shutting down sockets [ 1374.249712][ T2568] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7638'. [ 1374.514599][ T2580] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7642'. [ 1374.514629][ T2580] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7642'. [ 1374.538921][ T2580] syzkaller0: entered promiscuous mode [ 1374.538946][ T2580] syzkaller0: entered allmulticast mode [ 1374.852938][ T2593] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7646'. [ 1374.899948][ T2600] netlink: 'syz.0.7649': attribute type 4 has an invalid length. [ 1376.191699][ T2666] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7665'. [ 1376.467555][ T2681] validate_nla: 2 callbacks suppressed [ 1376.467580][ T2681] netlink: 'syz.6.7673': attribute type 4 has an invalid length. [ 1376.494190][ T2679] netlink: 'syz.4.7672': attribute type 4 has an invalid length. [ 1377.294050][ T2715] openvswitch: netlink: Unknown key attributes 20 [ 1377.370064][ T2721] tipc: Started in network mode [ 1377.370101][ T2721] tipc: Node identity ac1414aa, cluster identity 4711 [ 1377.376434][ T2721] tipc: New replicast peer: 172.20.20.187 [ 1377.377389][ T2721] tipc: Enabled bearer , priority 26 [ 1377.619286][ T2728] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7686'. [ 1377.905257][ T2738] netlink: 'syz.6.7689': attribute type 1 has an invalid length. [ 1377.905284][ T2738] netlink: 'syz.6.7689': attribute type 3 has an invalid length. [ 1378.490627][ T5752] tipc: Node number set to 2886997162 [ 1379.606500][ T2804] __nla_validate_parse: 7 callbacks suppressed [ 1379.606518][ T2804] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7712'. [ 1380.022389][ T2819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1380.026134][ T2819] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7715'. [ 1380.026307][ T2819] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7715'. [ 1380.110001][ T5949] tipc: Subscription rejected, illegal request [ 1380.713750][ T2842] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7720'. [ 1380.713819][ T2842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7720'. [ 1380.713838][ T2842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7720'. [ 1380.713905][ T2842] netlink: 108 bytes leftover after parsing attributes in process `syz.4.7720'. [ 1380.713922][ T2842] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7720'. [ 1380.827448][ T2846] ip_tables: iptables: counters copy to user failed while replacing table [ 1380.995381][ T2850] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7723'. [ 1381.087426][ T2864] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7726'. [ 1381.587645][ T2890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1381.699628][T12426] tipc: Subscription rejected, illegal request [ 1383.216235][ T2938] netlink: 'syz.6.7751': attribute type 2 has an invalid length. [ 1383.454599][ T2944] netlink: 'syz.4.7754': attribute type 4 has an invalid length. [ 1383.542128][ T2946] sctp: [Deprecated]: syz.0.7755 (pid 2946) Use of int in max_burst socket option. [ 1383.542128][ T2946] Use struct sctp_assoc_value instead [ 1383.833418][ T2957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1383.903316][T12426] wlan0: Trigger new scan to find an IBSS to join [ 1384.034421][ T148] tipc: Subscription rejected, illegal request [ 1384.129744][T14985] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1384.144315][T14985] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1384.165049][T14985] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1384.168924][T14985] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1384.169659][T14985] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1384.229668][ T2966] syzkaller1: entered promiscuous mode [ 1384.229687][ T2966] syzkaller1: entered allmulticast mode [ 1384.748201][ T2967] wlan0 speed is unknown, defaulting to 1000 [ 1384.764231][ T2967] wg2 speed is unknown, defaulting to 1000 [ 1384.778149][ T2967] ±ÿ speed is unknown, defaulting to 1000 [ 1385.519625][ T2967] bridge0: port 1(bridge_slave_0) entered blocking state [ 1385.519822][ T2967] bridge0: port 1(bridge_slave_0) entered disabled state [ 1385.535902][ T2967] bridge_slave_0: entered allmulticast mode [ 1385.537947][ T2967] bridge_slave_0: entered promiscuous mode [ 1385.554148][ T2967] bridge0: port 2(bridge_slave_1) entered blocking state [ 1385.554326][ T2967] bridge0: port 2(bridge_slave_1) entered disabled state [ 1385.554492][ T2967] bridge_slave_1: entered allmulticast mode [ 1385.556559][ T2967] bridge_slave_1: entered promiscuous mode [ 1385.642982][ T2967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1385.646789][ T2967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1385.891821][ T2967] team0: Port device team_slave_0 added [ 1385.924637][ T2967] team0: Port device team_slave_1 added [ 1385.999635][ T2967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1385.999656][ T2967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1385.999686][ T2967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1386.040116][ T3028] __nla_validate_parse: 12 callbacks suppressed [ 1386.047673][ T3028] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7778'. [ 1386.087099][ T2967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1386.087121][ T2967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1386.087152][ T2967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1386.204024][ T2967] hsr_slave_0: entered promiscuous mode [ 1386.205271][ T2967] hsr_slave_1: entered promiscuous mode [ 1386.206134][ T2967] debugfs: 'hsr0' already exists in 'hsr' [ 1386.206156][ T2967] Cannot create hsr debugfs directory [ 1386.230893][ T5625] Bluetooth: hci7: command tx timeout [ 1386.352838][ T3035] block nbd6: server does not support multiple connections per device. [ 1386.355555][ T3035] block nbd6: shutting down sockets [ 1386.762273][ T3049] netlink: 'syz.3.7784': attribute type 4 has an invalid length. [ 1386.950865][T12426] wlan0: Trigger new scan to find an IBSS to join [ 1387.018685][ T2967] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1387.043316][ T2967] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1387.062190][ T2967] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1387.087133][ T2967] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1387.101847][ T2967] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1387.122338][ T2967] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1387.125972][ T2967] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1387.169209][ T2967] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1387.204958][ T3056] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7789'. [ 1387.205029][ T3056] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7789'. [ 1387.205047][ T3056] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7789'. [ 1387.205114][ T3056] netlink: 108 bytes leftover after parsing attributes in process `syz.6.7789'. [ 1387.205132][ T3056] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7789'. [ 1387.674896][ T2967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1387.734324][ T2967] 8021q: adding VLAN 0 to HW filter on device team0 [ 1387.765076][ T1348] bridge0: port 1(bridge_slave_0) entered blocking state [ 1387.765195][ T1348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1387.809136][ T1348] bridge0: port 2(bridge_slave_1) entered blocking state [ 1387.809252][ T1348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1387.846855][ T1348] wlan0: Creating new IBSS network, BSSID 4a:55:32:b2:26:d9 [ 1387.915084][ T3085] block nbd6: server does not support multiple connections per device. [ 1387.919629][ T3085] block nbd6: shutting down sockets [ 1388.304722][ T5625] Bluetooth: hci7: command tx timeout [ 1388.707585][ T3101] xt_hashlimit: size too large, truncated to 1048576 [ 1389.238017][ T3109] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7797'. [ 1390.414542][ T5625] Bluetooth: hci7: command tx timeout [ 1391.293848][ T3056] Set syz1 is full, maxelem 65536 reached [ 1392.474139][ T5625] Bluetooth: hci7: command tx timeout [ 1395.146730][ T3126] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7801'. [ 1395.146761][ T3126] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7801'. [ 1395.168114][ T3126] mac80211_hwsim hwsim141 syzkaller0: entered promiscuous mode [ 1395.168200][ T3126] mac80211_hwsim hwsim141 syzkaller0: entered allmulticast mode [ 1395.238815][ T3133] block nbd6: server does not support multiple connections per device. [ 1395.249265][ T3133] block nbd6: shutting down sockets [ 1395.408795][ T3139] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7805'. [ 1396.123184][ T3148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7804'. [ 1396.631186][ T3173] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7811'. [ 1398.246995][ T3195] block nbd6: server does not support multiple connections per device. [ 1398.247331][ T3195] block nbd6: shutting down sockets [ 1401.575158][ T2967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1401.714154][ T3217] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7815'. [ 1401.784375][ T3205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7816'. [ 1401.785079][ T3205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7816'. [ 1401.785459][ T3205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7816'. [ 1401.785732][ T3205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7816'. [ 1401.786111][ T3205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7816'. [ 1401.787741][ T3205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7816'. [ 1401.788029][ T3205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7816'. [ 1401.788370][ T3205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7816'. [ 1401.788730][ T3205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7816'. [ 1402.618771][ T3244] block nbd6: server does not support multiple connections per device. [ 1402.619143][ T3244] block nbd6: shutting down sockets [ 1402.919951][ T2967] veth0_vlan: entered promiscuous mode [ 1402.936110][ T2967] veth1_vlan: entered promiscuous mode [ 1403.186893][ T2967] veth0_macvtap: entered promiscuous mode [ 1403.209482][ T2967] veth1_macvtap: entered promiscuous mode [ 1403.246479][ T2967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1403.266591][ T2967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1403.310988][ T5947] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.312313][T12426] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.313860][T13638] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.313906][T13638] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.779337][ T5949] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1403.779362][ T5949] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1403.878218][ T5948] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1403.878243][ T5948] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1404.115198][ T3269] block nbd6: server does not support multiple connections per device. [ 1404.117242][ T3269] block nbd6: shutting down sockets [ 1404.488622][ T3279] syzkaller0: entered promiscuous mode [ 1404.488659][ T3279] syzkaller0: entered allmulticast mode [ 1405.000154][ T3288] bridge0: port 2(bridge_slave_1) entered disabled state [ 1405.000898][ T3288] bridge0: port 1(bridge_slave_0) entered disabled state [ 1405.184187][ T3288] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1405.210042][ T3288] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1405.410556][T12426] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1405.411603][T12426] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1405.411651][T12426] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1405.411691][T12426] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1405.518485][ T3292] tipc: Enabling of bearer rejected, failed to enable media [ 1405.873147][ T3318] block nbd6: server does not support multiple connections per device. [ 1405.874220][ T3318] block nbd6: shutting down sockets [ 1405.940013][ T3323] syzkaller0: entered promiscuous mode [ 1405.940032][ T3323] syzkaller0: entered allmulticast mode [ 1406.196898][ T3334] netlink: 'syz.3.7848': attribute type 1 has an invalid length. [ 1406.363414][ T3338] tipc: Enabling of bearer rejected, already enabled [ 1406.748599][ T3347] __nla_validate_parse: 14 callbacks suppressed [ 1406.748626][ T3347] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7854'. [ 1406.856111][ T3350] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7855'. [ 1406.904941][ T3351] block nbd6: server does not support multiple connections per device. [ 1406.905294][ T3351] block nbd6: shutting down sockets [ 1407.223344][ T3358] syzkaller0: entered promiscuous mode [ 1407.223365][ T3358] syzkaller0: entered allmulticast mode [ 1412.895722][ T3374] syzkaller0: entered promiscuous mode [ 1412.895751][ T3374] syzkaller0: entered allmulticast mode [ 1413.164490][ T3404] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7869'. [ 1413.185842][ T3403] syzkaller0: entered promiscuous mode [ 1413.185871][ T3403] syzkaller0: entered allmulticast mode [ 1413.397248][ T3413] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7873'. [ 1413.527001][ T3416] syzkaller0: entered promiscuous mode [ 1413.527028][ T3416] syzkaller0: entered allmulticast mode [ 1413.551585][ T3416] tipc: Enabled bearer , priority 0 [ 1413.568421][ T3418] netlink: 'syz.3.7875': attribute type 1 has an invalid length. [ 1413.578734][ T3415] tipc: Resetting bearer [ 1413.631828][ T3415] tipc: Disabling bearer [ 1413.878738][ T3431] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1414.045926][ T3434] syzkaller0: entered promiscuous mode [ 1414.045954][ T3434] syzkaller0: entered allmulticast mode [ 1414.980040][ T3473] block nbd6: server does not support multiple connections per device. [ 1414.999340][ T3473] block nbd6: shutting down sockets [ 1415.235510][ T3478] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7887'. [ 1419.533699][ T3496] syzkaller0: entered promiscuous mode [ 1419.533729][ T3496] syzkaller0: entered allmulticast mode [ 1419.572375][ T3496] tipc: Enabled bearer , priority 0 [ 1419.601471][ T3498] block nbd6: server does not support multiple connections per device. [ 1419.601847][ T3498] block nbd6: shutting down sockets [ 1419.638226][ T3496] tipc: Resetting bearer [ 1419.663920][ T3495] tipc: Resetting bearer [ 1419.729205][ T3495] tipc: Disabling bearer [ 1419.960582][ T3514] netlink: 'syz.7.7896': attribute type 4 has an invalid length. [ 1420.627432][ T3532] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 1420.908785][ T3536] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7901'. [ 1421.837490][ T3541] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7902'. [ 1422.768806][ T3505] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1422.984817][ T3545] netlink: 'syz.3.7906': attribute type 1 has an invalid length. [ 1423.124270][ T3545] 8021q: adding VLAN 0 to HW filter on device bond108 [ 1423.138193][ T3548] bond90: (slave veth0_to_bond): Releasing active interface [ 1423.192949][ T3548] bond108: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1423.351766][ T3545] bridge34: entered promiscuous mode [ 1423.441150][ T3545] bond108: (slave bridge34): Enslaving as an active interface with an up link [ 1423.755187][ T3551] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7907'. [ 1423.755357][ T3574] netlink: 'syz.3.7908': attribute type 4 has an invalid length. [ 1423.851447][ T3578] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7910'. [ 1424.057038][ T3580] block nbd6: server does not support multiple connections per device. [ 1424.059027][ T3580] block nbd6: shutting down sockets [ 1424.124312][ T3584] xt_hashlimit: size too large, truncated to 1048576 [ 1424.325913][ T6475] hid-generic 0005:0008:0009.0001: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 1424.504336][ T3593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7915'. [ 1424.505692][ T3593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1425.315660][ T3615] sctp: [Deprecated]: syz.3.7919 (pid 3615) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1425.315660][ T3615] Use struct sctp_sack_info instead [ 1425.644113][ T3622] netlink: 'syz.3.7921': attribute type 4 has an invalid length. [ 1426.103413][ T3643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7925'. [ 1426.401353][ T3648] pimreg9: entered allmulticast mode [ 1426.421508][ T3646] netlink: 'syz.7.7928': attribute type 9 has an invalid length. [ 1426.421531][ T3646] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7928'. [ 1426.496707][ T3651] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7930'. [ 1426.538757][ T3653] netlink: 68 bytes leftover after parsing attributes in process `syz.7.7931'. [ 1427.027636][ T3676] netlink: 'syz.0.7935': attribute type 11 has an invalid length. [ 1427.303969][ T3689] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7937'. [ 1427.321003][ T3676] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1427.347326][ T3676] veth1_vlan: left promiscuous mode [ 1427.374262][ T3676] veth1_vlan: entered promiscuous mode [ 1427.379959][ T3676] geneve0: left promiscuous mode [ 1427.395046][ T3676] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1427.396527][ T3676] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1427.398204][ T3676] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1427.433874][ T3676] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1427.440019][ T3676] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1427.457854][ T3676] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1427.469364][ T3676] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1427.479755][ T3676] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1427.489254][ T3676] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1427.497922][ T3676] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1427.508490][ T3676] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1427.517373][ T3676] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1427.531719][ T3676] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1427.537360][ T3676] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1427.538847][ T3676] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1427.544887][ T3676] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1427.569599][ T5949] bond3: (slave bridge3): link status up again after 0 ms [ 1427.581638][ T3676] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1427.584330][ T3676] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 1427.584840][ T5947] bond3: (slave bridge3): link status up again after 0 ms [ 1427.587058][ T3676] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 1427.588807][ T3676] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 1427.612699][ T3676] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1427.614610][ T1348] bond3: (slave bridge3): link status up again after 0 ms [ 1427.641481][T12426] bond3: (slave bridge3): link status up again after 0 ms [ 1427.651875][ T5949] bond3: (slave bridge3): link status up again after 0 ms [ 1427.652940][ T3676] 8021q: adding VLAN 0 to HW filter on device batadv6 [ 1427.654181][ T3676] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1427.682703][T12426] bond3: (slave bridge3): link status up again after 0 ms [ 1427.683595][ T3676] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1427.687248][ T3676] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1427.688534][ T3676] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 1427.689780][T13671] gretap2: entered promiscuous mode [ 1427.714084][ T5949] bond3: (slave bridge3): link status up again after 0 ms [ 1427.745457][ T5948] bond3: (slave bridge3): link status up again after 0 ms [ 1427.762308][ T5948] bond3: (slave bridge3): link status up again after 0 ms [ 1427.907539][ T1348] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1427.907727][ T1348] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1427.907792][ T1348] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1428.025337][ T3696] syzkaller0: entered promiscuous mode [ 1428.025365][ T3696] syzkaller0: entered allmulticast mode [ 1428.135002][ T3704] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7940'. [ 1428.458511][ T3709] syzkaller0: entered promiscuous mode [ 1428.458539][ T3709] syzkaller0: entered allmulticast mode [ 1428.897563][ T3714] netlink: 'syz.4.7944': attribute type 1 has an invalid length. [ 1428.932800][ T3714] bond95: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1429.125721][ T3722] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7943'. [ 1429.125941][ T3722] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7943'. [ 1429.126927][ T148] tipc: Subscription rejected, illegal request [ 1429.991078][ T3675] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1430.357453][ T3730] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7947'. [ 1430.439776][ T3737] netlink: 'syz.7.7950': attribute type 11 has an invalid length. [ 1430.554274][ T3737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1430.568500][ T3737] 8021q: adding VLAN 0 to HW filter on device team0 [ 1430.608064][ T3737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1430.695191][ T3737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1430.711950][ T3737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1430.738636][ T3737] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1430.738664][ T3737] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1430.781439][ T3737] veth1_vlan: left promiscuous mode [ 1430.782817][ T3737] veth0_vlan: left promiscuous mode [ 1430.784630][ T3737] veth0_vlan: entered promiscuous mode [ 1430.787031][ T3737] veth1_vlan: entered promiscuous mode [ 1430.823590][ T3737] veth1_macvtap: left promiscuous mode [ 1430.824898][ T3737] veth0_macvtap: left promiscuous mode [ 1430.826085][ T3737] veth0_macvtap: entered promiscuous mode [ 1430.827679][ T3737] veth1_macvtap: entered promiscuous mode [ 1430.882393][ T3737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1430.887829][ T3737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1430.893978][ T3737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1430.922470][ T3737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1431.087964][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 1431.088095][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1431.118514][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 1431.118651][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1431.612334][ T3753] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7952'. [ 1431.660760][ T5949] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1431.660889][ T5949] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1431.661761][T13638] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1431.661819][T13638] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1431.963670][ T3757] syzkaller0: entered promiscuous mode [ 1431.963697][ T3757] syzkaller0: entered allmulticast mode [ 1431.964686][ T3768] netlink: 'syz.6.7957': attribute type 1 has an invalid length. [ 1432.588665][ T3765] veth3: entered allmulticast mode [ 1432.601147][ T3765] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1438.213592][ T3768] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1438.279214][T12426] net_ratelimit: 28 callbacks suppressed [ 1438.279238][T12426] bond3: (slave bridge3): failed to get link speed/duplex [ 1438.468199][ T5949] bond3: (slave bridge3): failed to get link speed/duplex [ 1438.509501][ T3788] netlink: 'syz.6.7958': attribute type 1 has an invalid length. [ 1438.536148][ T3787] netlink: 'syz.7.7959': attribute type 1 has an invalid length. [ 1438.638938][ T3792] veth5: entered allmulticast mode [ 1438.650572][ T3792] bond2: (slave veth5): Enslaving as an active interface with a down link [ 1438.652759][T12426] bond3: (slave bridge3): failed to get link speed/duplex [ 1438.766059][ T3796] veth3: entered allmulticast mode [ 1438.783742][ T3796] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1438.786967][T12426] bond3: (slave bridge3): failed to get link speed/duplex [ 1438.820976][ T3790] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7960'. [ 1438.849556][ T3787] bond1: (slave veth0_to_bond): making interface the new active one [ 1438.866025][ T3787] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1438.972453][ T1348] bond3: (slave bridge3): failed to get link speed/duplex [ 1439.082136][T12426] bond3: (slave bridge3): failed to get link speed/duplex [ 1439.114888][ T3810] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1439.153334][ T3809] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7963'. [ 1439.153361][ T3809] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7963'. [ 1439.190952][ T156] bond3: (slave bridge3): failed to get link speed/duplex [ 1439.221002][ T3817] netlink: 'syz.7.7965': attribute type 1 has an invalid length. [ 1439.302819][ T5949] bond3: (slave bridge3): failed to get link speed/duplex [ 1439.360019][ T3817] veth5: entered allmulticast mode [ 1439.391014][ T3817] bond2: (slave veth5): Enslaving as an active interface with a down link [ 1439.427950][ T3822] bond1: (slave veth0_to_bond): Releasing active interface [ 1439.534546][ T3822] bond2: (slave veth0_to_bond): making interface the new active one [ 1439.535555][ T3822] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1439.589402][ T5949] bond3: (slave bridge3): failed to get link speed/duplex [ 1439.714576][ T5948] bond3: (slave bridge3): failed to get link speed/duplex [ 1439.755678][ T3827] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7968'. [ 1440.016314][ T3829] netlink: 'syz.3.7967': attribute type 8 has an invalid length. [ 1440.016339][ T3829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7967'. [ 1440.048551][ T3835] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7970'. [ 1440.437788][ T3848] syzkaller1: entered promiscuous mode [ 1440.437815][ T3848] syzkaller1: entered allmulticast mode [ 1440.729919][ T3857] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7977'. [ 1440.759947][ T3856] netlink: 'syz.0.7976': attribute type 1 has an invalid length. [ 1440.888936][ T3856] veth81: entered allmulticast mode [ 1440.909931][ T3856] bond87: (slave veth81): Enslaving as an active interface with a down link [ 1440.951941][ T3861] bond87: (slave veth0_to_bond): making interface the new active one [ 1440.954177][ T3861] bond87: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1441.094691][ T3867] netlink: 164 bytes leftover after parsing attributes in process `syz.6.7979'. [ 1441.401585][ T3875] netlink: 'syz.3.7983': attribute type 1 has an invalid length. [ 1441.453350][ T3875] bond108: (slave veth0_to_bond): Releasing backup interface [ 1441.453378][ T3875] bond108: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1441.460668][ T3875] bond109: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1441.497598][ T3875] macvlan3: entered promiscuous mode [ 1441.497624][ T3875] macvlan3: entered allmulticast mode [ 1441.499437][ T3875] bond109: entered promiscuous mode [ 1441.504156][ T3875] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1441.506155][ T3875] bond109: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1441.534619][ T3875] bond109: left promiscuous mode [ 1441.891971][ T3884] netlink: 'syz.3.7986': attribute type 1 has an invalid length. [ 1442.034178][ T3890] bond109: (slave veth0_to_bond): Releasing active interface [ 1442.059541][ T3890] bond110: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1442.077900][ T3896] netlink: 'syz.7.7990': attribute type 4 has an invalid length. [ 1442.137192][ T3884] macvlan3: entered promiscuous mode [ 1442.137226][ T3884] macvlan3: entered allmulticast mode [ 1442.137834][ T3884] bond110: entered promiscuous mode [ 1442.158777][ T3884] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1442.171083][ T3884] bond110: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1442.362710][ T3901] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7989'. [ 1442.464826][ T3884] bond110: left promiscuous mode [ 1442.877129][ T3908] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7992'. [ 1442.894596][ T3915] netlink: 'syz.7.7994': attribute type 1 has an invalid length. [ 1442.986157][ T3917] bond2: (slave veth0_to_bond): Releasing active interface [ 1443.005352][ T3917] bond3: (slave veth0_to_bond): making interface the new active one [ 1443.006523][ T3917] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1443.084912][ T3915] macvlan2: entered promiscuous mode [ 1443.084931][ T3915] macvlan2: entered allmulticast mode [ 1443.085454][ T3915] bond3: entered promiscuous mode [ 1443.085472][ T3915] veth0_to_bond: entered promiscuous mode [ 1443.086267][ T3915] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1443.087001][ T3915] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1443.087073][ T3915] bond3: left promiscuous mode [ 1443.087085][ T3915] veth0_to_bond: left promiscuous mode [ 1443.343846][ T156] net_ratelimit: 18 callbacks suppressed [ 1443.343872][ T156] bond3: (slave bridge3): failed to get link speed/duplex [ 1443.349117][ T3927] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1443.451256][ T5947] bond3: (slave bridge3): failed to get link speed/duplex [ 1443.588372][ T3938] netlink: 'syz.7.8001': attribute type 1 has an invalid length. [ 1443.640954][ T5948] bond3: (slave bridge3): failed to get link speed/duplex [ 1443.688680][ T3938] veth7: entered allmulticast mode [ 1443.695965][ T3938] bond4: (slave veth7): Enslaving as an active interface with a down link [ 1443.719935][ T3941] syzkaller0: entered promiscuous mode [ 1443.719960][ T3941] syzkaller0: entered allmulticast mode [ 1443.738357][ T3938] bond3: (slave veth0_to_bond): Releasing active interface [ 1443.753412][ T3938] bond4: (slave veth0_to_bond): making interface the new active one [ 1443.754424][ T3938] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1443.989066][ T3947] netlink: 'syz.0.8004': attribute type 4 has an invalid length. [ 1444.090732][ T5949] bond3: (slave bridge3): failed to get link speed/duplex [ 1444.281692][ T5948] bond3: (slave bridge3): failed to get link speed/duplex [ 1444.393294][ T5948] bond3: (slave bridge3): failed to get link speed/duplex [ 1444.500996][T12426] bond3: (slave bridge3): failed to get link speed/duplex [ 1444.710458][ T1348] bond3: (slave bridge3): failed to get link speed/duplex [ 1444.820620][ T5949] bond3: (slave bridge3): failed to get link speed/duplex [ 1444.965163][ T3976] netlink: 'syz.3.8013': attribute type 1 has an invalid length. [ 1445.078056][ T3981] mac80211_hwsim hwsim141 syzkaller0: left promiscuous mode [ 1445.078091][ T3981] mac80211_hwsim hwsim141 syzkaller0: left allmulticast mode [ 1445.193609][ T3976] veth119: entered allmulticast mode [ 1445.236313][ T3980] bond110: (slave veth0_to_bond): Releasing active interface [ 1445.306619][ T3980] bond111: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1445.379610][ T3976] macvlan3: entered promiscuous mode [ 1445.379637][ T3976] macvlan3: entered allmulticast mode [ 1445.384188][ T3976] bond111: entered promiscuous mode [ 1445.396926][ T3976] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1445.404869][ T3976] bond111: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1445.408266][ T3976] bond111: left promiscuous mode [ 1445.666139][ T3995] netlink: 'syz.0.8019': attribute type 4 has an invalid length. [ 1445.720960][ T3992] __nla_validate_parse: 2 callbacks suppressed [ 1445.720986][ T3992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8018'. [ 1445.721007][ T3992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8018'. [ 1446.084109][ T4005] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8020'. [ 1446.084154][ T4005] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8020'. [ 1446.440092][ T4017] netlink: 'syz.4.8027': attribute type 1 has an invalid length. [ 1446.713133][ T4020] veth89: entered allmulticast mode [ 1446.753780][ T4026] netlink: 'syz.7.8029': attribute type 1 has an invalid length. [ 1446.770052][ T4022] bond95: (slave veth0_to_bond): Releasing active interface [ 1446.832686][ T4022] bond96: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1446.859636][ T4036] netlink: 'syz.0.8030': attribute type 1 has an invalid length. [ 1446.887714][ T4017] macvlan10: entered promiscuous mode [ 1446.887741][ T4017] macvlan10: entered allmulticast mode [ 1446.902355][ T4017] bond96: entered promiscuous mode [ 1446.912646][ T4017] 8021q: adding VLAN 0 to HW filter on device macvlan10 [ 1446.914878][ T4017] bond96: (slave macvlan10): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1446.917194][ T4017] bond96: left promiscuous mode [ 1447.073997][ T4033] veth9: entered allmulticast mode [ 1447.126685][ T4024] bond4: (slave veth0_to_bond): Releasing active interface [ 1447.155707][ T4024] bond5: (slave veth0_to_bond): making interface the new active one [ 1447.169498][ T4024] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1447.334856][ T4037] veth83: entered allmulticast mode [ 1447.361366][ T4038] macvlan2: entered promiscuous mode [ 1447.361394][ T4038] macvlan2: entered allmulticast mode [ 1447.362150][ T4038] bond5: entered promiscuous mode [ 1447.362172][ T4038] veth0_to_bond: entered promiscuous mode [ 1447.363260][ T4038] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1447.364213][ T4038] bond5: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1447.364315][ T4038] bond5: left promiscuous mode [ 1447.364333][ T4038] veth0_to_bond: left promiscuous mode [ 1447.374647][ T4046] netlink: 'syz.3.8032': attribute type 4 has an invalid length. [ 1447.465853][ T4040] bond87: (slave veth0_to_bond): Releasing active interface [ 1447.497117][ T4040] bond88: (slave veth0_to_bond): making interface the new active one [ 1447.513117][ T4040] bond88: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1447.543027][ T4031] macvlan3: entered promiscuous mode [ 1447.543059][ T4031] macvlan3: entered allmulticast mode [ 1447.543588][ T4031] bond88: entered promiscuous mode [ 1447.543626][ T4031] veth0_to_bond: entered promiscuous mode [ 1447.546715][ T4031] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1447.557730][ T4031] bond88: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1447.558115][ T4031] bond88: left promiscuous mode [ 1447.558159][ T4031] veth0_to_bond: left promiscuous mode [ 1447.687482][ T4045] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8033'. [ 1447.782941][ T4055] netlink: 'syz.7.8034': attribute type 1 has an invalid length. [ 1447.947530][ T4061] netlink: 'syz.0.8035': attribute type 1 has an invalid length. [ 1447.961886][ T4057] veth11: entered allmulticast mode [ 1448.104322][ T4055] bond5: (slave veth0_to_bond): Releasing active interface [ 1448.131802][ T4055] bond6: (slave veth0_to_bond): making interface the new active one [ 1448.136580][ T4055] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1448.222333][ T4061] 8021q: adding VLAN 0 to HW filter on device bond89 [ 1448.335083][ T4076] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8038'. [ 1448.335111][ T4076] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8038'. [ 1448.813914][ T4066] bond89: (slave veth85): Enslaving as an active interface with a down link [ 1448.833441][ T4057] macvlan2: entered promiscuous mode [ 1448.833462][ T4057] macvlan2: entered allmulticast mode [ 1448.833950][ T4057] bond6: entered promiscuous mode [ 1448.833964][ T4057] veth0_to_bond: entered promiscuous mode [ 1448.834708][ T4057] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1448.835366][ T4057] bond6: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1448.835477][ T4057] bond6: left promiscuous mode [ 1448.835501][ T4057] veth0_to_bond: left promiscuous mode [ 1448.954845][ T4070] 8021q: adding VLAN 0 to HW filter on device batadv29 [ 1448.958603][ T4070] bond89: (slave batadv29): making interface the new active one [ 1448.976864][ T4070] batadv29: entered promiscuous mode [ 1448.978140][ T4070] bond89: (slave batadv29): Enslaving as an active interface with an up link [ 1449.241590][ T4089] netlink: 'syz.0.8040': attribute type 1 has an invalid length. [ 1449.717739][ T4091] veth87: entered allmulticast mode [ 1449.742450][ T4093] bond88: (slave veth0_to_bond): Releasing active interface [ 1449.771912][ T4093] bond90: (slave veth0_to_bond): making interface the new active one [ 1449.773335][ T4093] bond90: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1449.803518][ T4081] net_ratelimit: 15 callbacks suppressed [ 1449.803541][ T4081] ip_tables: iptables: counters copy to user failed while replacing table [ 1449.855652][ T4097] macvlan3: entered promiscuous mode [ 1449.855673][ T4097] macvlan3: entered allmulticast mode [ 1449.856313][ T4097] bond90: entered promiscuous mode [ 1449.856336][ T4097] veth0_to_bond: entered promiscuous mode [ 1449.857154][ T4097] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1449.906373][ T4097] bond90: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1449.906497][ T4097] bond90: left promiscuous mode [ 1449.906516][ T4097] veth0_to_bond: left promiscuous mode [ 1450.027525][ T4106] mac80211_hwsim hwsim141 syzkaller0: entered promiscuous mode [ 1450.027566][ T4106] mac80211_hwsim hwsim141 syzkaller0: entered allmulticast mode [ 1450.221447][ T5949] bond3: (slave bridge3): failed to get link speed/duplex [ 1450.264058][ T4117] netlink: 'syz.7.8044': attribute type 1 has an invalid length. [ 1450.375264][ T4120] bond6: (slave veth0_to_bond): Releasing active interface [ 1450.442054][ T4120] bond7: (slave veth0_to_bond): making interface the new active one [ 1450.443920][ T4120] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1450.474419][ T4126] netlink: 'syz.6.8047': attribute type 1 has an invalid length. [ 1450.491496][ T4127] netlink: 'syz.0.8046': attribute type 4 has an invalid length. [ 1450.529346][ T4113] syzkaller0: entered promiscuous mode [ 1450.529458][ T4113] syzkaller0: entered allmulticast mode [ 1450.575089][ T4124] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 1450.594661][ T4117] macvlan2: entered promiscuous mode [ 1450.594690][ T4117] macvlan2: entered allmulticast mode [ 1450.595592][ T4117] bond7: entered promiscuous mode [ 1450.595615][ T4117] veth0_to_bond: entered promiscuous mode [ 1450.596929][ T4117] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1450.598212][ T4117] bond7: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1450.598406][ T4117] bond7: left promiscuous mode [ 1450.598425][ T4117] veth0_to_bond: left promiscuous mode [ 1450.716758][ T4126] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1450.755702][ T4130] bond3: (slave veth7): Enslaving as an active interface with a down link [ 1450.777610][ T4133] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1450.787551][ T4133] bond3: (slave batadv1): making interface the new active one [ 1450.795193][ T4133] batadv1: entered promiscuous mode [ 1450.795659][ T4133] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 1450.801805][ T1432] bond3: (slave bridge3): failed to get link speed/duplex [ 1450.953393][ T4138] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1451.049925][ T4140] netlink: 'syz.7.8049': attribute type 1 has an invalid length. [ 1451.119201][ T4144] netlink: 'syz.6.8050': attribute type 1 has an invalid length. [ 1456.227282][ T4128] syzkaller1: entered promiscuous mode [ 1456.227302][ T4128] syzkaller1: entered allmulticast mode [ 1456.243142][ T4140] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 1456.324166][ T4144] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1456.388045][ T4146] veth9: entered allmulticast mode [ 1456.414415][ T4153] netlink: 'syz.3.8052': attribute type 1 has an invalid length. [ 1456.424010][ T5947] bond3: (slave bridge3): failed to get link speed/duplex [ 1456.532314][ T5947] bond3: (slave bridge3): failed to get link speed/duplex [ 1456.642551][ T4153] 8021q: adding VLAN 0 to HW filter on device bond112 [ 1456.722451][ T4163] netlink: 'syz.7.8053': attribute type 1 has an invalid length. [ 1456.804763][ T4155] bond112: (slave veth121): Enslaving as an active interface with a down link [ 1456.943402][ T5949] bond3: (slave bridge3): failed to get link speed/duplex [ 1457.024631][ T4168] veth13: entered allmulticast mode [ 1457.078331][ T4168] bond8: (slave veth13): Enslaving as an active interface with a down link [ 1457.093950][ T5949] bond3: (slave bridge3): failed to get link speed/duplex [ 1457.161324][ T4158] macvlan2: entered promiscuous mode [ 1457.161353][ T4158] macvlan2: entered allmulticast mode [ 1457.161914][ T4176] netlink: 'syz.0.8057': attribute type 1 has an invalid length. [ 1457.163291][ T4158] bond8: entered promiscuous mode [ 1457.166638][ T4158] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1457.169839][ T4158] bond8: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1457.173018][ T4158] bond8: left promiscuous mode [ 1457.309630][ T4161] ip_tables: iptables: counters copy to user failed while replacing table [ 1457.331333][ T4176] 8021q: adding VLAN 0 to HW filter on device bond91 [ 1457.493549][ T4179] bond91: (slave veth89): Enslaving as an active interface with a down link [ 1457.613370][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv30 [ 1457.633350][ T4183] bond91: (slave batadv30): making interface the new active one [ 1457.647655][ T4183] batadv30: entered promiscuous mode [ 1457.654769][ T4183] bond91: (slave batadv30): Enslaving as an active interface with an up link [ 1457.654844][ T4187] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8059'. [ 1457.699975][ T4193] netlink: 'syz.7.8061': attribute type 4 has an invalid length. [ 1457.861519][ T44] bond3: (slave bridge3): failed to get link speed/duplex [ 1457.894489][ T4199] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8063'. [ 1457.909778][ T4200] syzkaller1: entered promiscuous mode [ 1457.909850][ T4200] syzkaller1: entered allmulticast mode [ 1457.941826][ T4200] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 1457.973317][ T5949] bond3: (slave bridge3): failed to get link speed/duplex [ 1458.100706][ T5949] bond3: (slave bridge3): failed to get link speed/duplex [ 1458.213378][ T1432] bond3: (slave bridge3): failed to get link speed/duplex [ 1458.235625][ T4207] netlink: 'syz.6.8067': attribute type 1 has an invalid length. [ 1458.289454][ T4186] ip_tables: iptables: counters copy to user failed while replacing table [ 1458.323762][ T4207] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1458.366036][ T4211] bond4: (slave veth9): Enslaving as an active interface with a down link [ 1458.387425][ T4213] netlink: 'syz.0.8068': attribute type 1 has an invalid length. [ 1458.470130][ T4207] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1458.475586][ T4207] bond4: (slave batadv2): making interface the new active one [ 1458.477186][ T4207] batadv2: entered promiscuous mode [ 1458.477811][ T4207] bond4: (slave batadv2): Enslaving as an active interface with an up link [ 1458.550674][ T4210] veth15: entered allmulticast mode [ 1458.616750][ T4215] veth91: entered allmulticast mode [ 1458.655543][ T4216] bond7: (slave veth0_to_bond): Releasing active interface [ 1458.687783][ T4213] bond90: (slave veth0_to_bond): Releasing active interface [ 1458.708111][ T4213] bond92: (slave veth0_to_bond): making interface the new active one [ 1458.709775][ T4213] bond92: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1458.813711][ T4219] macvlan3: entered promiscuous mode [ 1458.813732][ T4219] macvlan3: entered allmulticast mode [ 1458.814346][ T4219] bond92: entered promiscuous mode [ 1458.814362][ T4219] veth0_to_bond: entered promiscuous mode [ 1458.825069][ T4219] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1458.833638][ T4219] bond92: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1458.869074][ T4219] bond92: left promiscuous mode [ 1458.869102][ T4219] veth0_to_bond: left promiscuous mode [ 1459.013088][ T4226] netlink: 'syz.7.8071': attribute type 1 has an invalid length. [ 1459.237447][ T4230] veth15: entered allmulticast mode [ 1459.253126][ T4230] bond9: (slave veth15): Enslaving as an active interface with a down link [ 1459.292442][ T4226] bond9: (slave veth0_to_bond): making interface the new active one [ 1459.299897][ T4226] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1459.322927][ T4234] netlink: 'syz.0.8073': attribute type 1 has an invalid length. [ 1459.338899][ T4232] netlink: 'syz.4.8072': attribute type 1 has an invalid length. [ 1459.412853][ T4234] 8021q: adding VLAN 0 to HW filter on device bond93 [ 1459.515279][ T4236] bond93: (slave veth93): Enslaving as an active interface with a down link [ 1459.564959][ T4237] veth91: entered allmulticast mode [ 1459.576011][ T4237] bond97: (slave veth91): Enslaving as an active interface with a down link [ 1459.599395][ T4234] 8021q: adding VLAN 0 to HW filter on device batadv31 [ 1459.611205][ T4234] bond93: (slave batadv31): making interface the new active one [ 1459.613005][ T4234] batadv31: entered promiscuous mode [ 1459.613570][ T4234] bond93: (slave batadv31): Enslaving as an active interface with an up link [ 1459.651474][ T4239] bond96: (slave veth0_to_bond): Releasing active interface [ 1459.696635][ T4239] bond97: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1459.809628][ T4246] netlink: 'syz.7.8075': attribute type 4 has an invalid length. [ 1459.862520][ T4247] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8074'. [ 1459.971381][ T4252] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1460.022495][ T4256] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 1460.028004][ T4250] syzkaller1: entered promiscuous mode [ 1460.028032][ T4250] syzkaller1: entered allmulticast mode [ 1460.029449][ T4255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8077'. [ 1460.105919][ T4252] bond5: (slave veth11): Enslaving as an active interface with a down link [ 1460.195362][ T4255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8077'. [ 1460.217137][ T4257] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 1460.219381][ T4257] bond5: (slave batadv3): making interface the new active one [ 1460.237890][ T4257] batadv3: entered promiscuous mode [ 1460.238493][ T4257] bond5: (slave batadv3): Enslaving as an active interface with an up link [ 1460.336367][ T4255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8077'. [ 1460.336722][ T4255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8077'. [ 1460.337014][ T4255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8077'. [ 1460.337324][ T4255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8077'. [ 1460.337782][ T4255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8077'. [ 1460.445119][ T4261] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1460.504828][ T4263] bond10: (slave veth17): Enslaving as an active interface with a down link [ 1460.577120][ T4264] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1460.591717][ T4264] bond10: (slave batadv1): making interface the new active one [ 1460.593113][ T4264] batadv1: entered promiscuous mode [ 1460.594801][ T4264] bond10: (slave batadv1): Enslaving as an active interface with an up link [ 1460.654327][ T4268] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1460.667007][ T1348] batadv29: left promiscuous mode [ 1460.752530][ T4270] bond6: (slave veth13): Enslaving as an active interface with a down link [ 1460.773596][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 1460.778727][ T4272] bond6: (slave batadv4): making interface the new active one [ 1460.797440][ T4272] batadv4: entered promiscuous mode [ 1460.805793][ T4272] bond6: (slave batadv4): Enslaving as an active interface with an up link [ 1460.944552][ T4280] veth123: entered allmulticast mode [ 1460.964250][ T4280] bond113: (slave veth123): Enslaving as an active interface with a down link [ 1461.001727][ T4276] bond111: (slave veth0_to_bond): Releasing active interface [ 1461.027588][ T4276] bond113: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1461.076276][ T4285] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1461.183278][ T4287] bond11: (slave veth19): Enslaving as an active interface with a down link [ 1461.391800][ T4290] veth95: entered allmulticast mode [ 1461.414414][ T4290] bond94: (slave veth95): Enslaving as an active interface with a down link [ 1461.453257][ T4285] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1461.456779][ T4285] bond11: (slave batadv2): making interface the new active one [ 1461.458152][ T4285] batadv2: entered promiscuous mode [ 1461.458663][ T4285] bond11: (slave batadv2): Enslaving as an active interface with an up link [ 1461.523507][ T4295] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1461.537659][ T4297] macvlan3: entered promiscuous mode [ 1461.537685][ T4297] macvlan3: entered allmulticast mode [ 1461.538352][ T4297] bond94: entered promiscuous mode [ 1461.539303][ T4297] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1461.541387][ T4297] bond94: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1461.546024][ T4297] bond94: left promiscuous mode [ 1461.666850][ T4298] 8021q: adding VLAN 0 to HW filter on device bond114 [ 1461.726208][ T4299] bond7: (slave veth15): Enslaving as an active interface with a down link [ 1461.847375][ T4300] bond114: (slave veth125): Enslaving as an active interface with a down link [ 1461.871877][ T4301] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 1461.875361][ T4301] bond7: (slave batadv5): making interface the new active one [ 1461.876866][ T4301] batadv5: entered promiscuous mode [ 1461.877334][ T4301] bond7: (slave batadv5): Enslaving as an active interface with an up link [ 1461.934064][ T4313] validate_nla: 9 callbacks suppressed [ 1461.934087][ T4313] netlink: 'syz.0.8089': attribute type 4 has an invalid length. [ 1461.949769][ T4304] 8021q: adding VLAN 0 to HW filter on device batadv26 [ 1461.964709][ T4304] bond114: (slave batadv26): making interface the new active one [ 1461.969352][ T4304] batadv26: entered promiscuous mode [ 1461.973223][ T4304] bond114: (slave batadv26): Enslaving as an active interface with an up link [ 1462.068825][ T5948] net_ratelimit: 9 callbacks suppressed [ 1462.068850][ T5948] bond3: (slave bridge3): failed to get link speed/duplex [ 1462.222584][ T5949] bond3: (slave bridge3): failed to get link speed/duplex [ 1462.424684][ T4328] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 1462.429714][ T4320] syzkaller1: entered promiscuous mode [ 1462.429739][ T4320] syzkaller1: entered allmulticast mode [ 1462.486573][ T1432] bond3: (slave bridge3): failed to get link speed/duplex [ 1462.590621][T13638] bond3: (slave bridge3): failed to get link speed/duplex [ 1462.689369][ T4334] netlink: 'syz.6.8096': attribute type 1 has an invalid length. [ 1462.726444][ T4334] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1462.730424][T13638] bond3: (slave bridge3): failed to get link speed/duplex [ 1462.785488][ T4334] bond8: (slave veth17): Enslaving as an active interface with a down link [ 1462.836305][ T4334] 8021q: adding VLAN 0 to HW filter on device batadv6 [ 1462.839594][ T4334] bond8: (slave batadv6): making interface the new active one [ 1462.874733][ T4334] batadv6: entered promiscuous mode [ 1462.875208][ T4334] bond8: (slave batadv6): Enslaving as an active interface with an up link [ 1462.900668][ T44] bond3: (slave bridge3): failed to get link speed/duplex [ 1462.976465][ T5949] batadv1: left promiscuous mode [ 1462.993863][ T4342] netlink: 'syz.3.8099': attribute type 1 has an invalid length. [ 1463.050496][ T5949] bond3: (slave bridge3): failed to get link speed/duplex [ 1463.128830][ T4342] veth127: entered allmulticast mode [ 1463.151248][ T4342] bond115: (slave veth127): Enslaving as an active interface with a down link [ 1463.166247][ T4348] netlink: 'syz.7.8101': attribute type 1 has an invalid length. [ 1463.188072][ T4344] macvlan3: entered promiscuous mode [ 1463.188100][ T4344] macvlan3: entered allmulticast mode [ 1463.188771][ T4344] bond115: entered promiscuous mode [ 1463.213460][ T4344] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1463.217110][ T4344] bond115: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1463.217399][ T4344] bond115: left promiscuous mode [ 1463.291563][ T4348] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1463.364808][ T4349] bond12: (slave veth21): Enslaving as an active interface with a down link [ 1463.395964][ T4353] __nla_validate_parse: 10 callbacks suppressed [ 1463.395988][ T4353] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8100'. [ 1463.396008][ T4353] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8100'. [ 1463.452519][ T4355] netlink: 'syz.0.8102': attribute type 1 has an invalid length. [ 1463.556922][ T4351] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 1463.559936][ T4351] bond12: (slave batadv3): making interface the new active one [ 1463.576541][ T4351] batadv3: entered promiscuous mode [ 1463.577039][ T4351] bond12: (slave batadv3): Enslaving as an active interface with an up link [ 1463.698216][ T4355] 8021q: adding VLAN 0 to HW filter on device bond95 [ 1463.718670][ T5947] bond3: (slave bridge3): failed to get link speed/duplex [ 1463.812809][ T4358] bond95: (slave veth97): Enslaving as an active interface with a down link [ 1463.837180][ T4370] netlink: 'syz.7.8105': attribute type 4 has an invalid length. [ 1463.919072][ T4362] 8021q: adding VLAN 0 to HW filter on device batadv32 [ 1463.934884][ T4362] bond95: (slave batadv32): making interface the new active one [ 1463.936375][ T4362] batadv32: entered promiscuous mode [ 1463.936881][ T4362] bond95: (slave batadv32): Enslaving as an active interface with an up link [ 1463.999976][ T4374] netlink: 'syz.4.8106': attribute type 1 has an invalid length. [ 1464.041614][ T156] bond3: (slave bridge3): failed to get link speed/duplex [ 1464.249101][ T4386] netlink: 'syz.0.8108': attribute type 1 has an invalid length. [ 1464.262542][ T4373] veth93: entered allmulticast mode [ 1464.282812][ T4373] bond98: (slave veth93): Enslaving as an active interface with a down link [ 1464.285683][ T4387] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 1464.327430][ T4376] bond97: (slave veth0_to_bond): Releasing active interface [ 1464.355540][ T4376] bond98: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1464.506629][ T4386] 8021q: adding VLAN 0 to HW filter on device bond96 [ 1464.565838][ T4374] macvlan10: entered promiscuous mode [ 1464.565866][ T4374] macvlan10: entered allmulticast mode [ 1464.567349][ T4374] bond98: entered promiscuous mode [ 1464.573122][ T4374] 8021q: adding VLAN 0 to HW filter on device macvlan10 [ 1464.584854][ T4374] bond98: (slave macvlan10): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1464.587375][ T4374] bond98: left promiscuous mode [ 1464.733167][ T4389] bond96: (slave veth99): Enslaving as an active interface with a down link [ 1464.735421][ T4384] syzkaller1: entered promiscuous mode [ 1464.735447][ T4384] syzkaller1: entered allmulticast mode [ 1464.777092][ T44] bond3: (slave bridge3): failed to get link speed/duplex [ 1464.997411][ T4403] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8111'. [ 1465.089297][ T4411] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8113'. [ 1465.121179][ T4399] bridge0: port 2(bridge_slave_1) entered disabled state [ 1465.121494][ T4399] bridge0: port 1(bridge_slave_0) entered disabled state [ 1465.128621][ T4412] netlink: 'syz.6.8114': attribute type 1 has an invalid length. [ 1465.363632][ T4399] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1465.376134][ T4399] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1465.711961][ T4416] veth19: entered allmulticast mode [ 1465.726732][ T4416] bond9: (slave veth19): Enslaving as an active interface with a down link [ 1465.876456][ T4431] netlink: 'syz.3.8115': attribute type 1 has an invalid length. [ 1465.896511][ T4420] bond1: (slave veth0_to_bond): Releasing active interface [ 1465.912538][ T4420] bond9: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1466.076315][ T4431] 8021q: adding VLAN 0 to HW filter on device bond116 [ 1466.119384][ T4432] bond116: (slave veth129): Enslaving as an active interface with a down link [ 1466.166765][ T4434] 8021q: adding VLAN 0 to HW filter on device batadv27 [ 1466.170108][ T4434] bond116: (slave batadv27): making interface the new active one [ 1466.187722][ T4434] batadv27: entered promiscuous mode [ 1466.188460][ T4434] bond116: (slave batadv27): Enslaving as an active interface with an up link [ 1466.309928][ T4436] veth21: entered allmulticast mode [ 1466.328511][ T4436] bond10: (slave veth21): Enslaving as an active interface with a down link [ 1466.329695][ T4443] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8117'. [ 1466.391751][ T4449] 8021q: adding VLAN 0 to HW filter on device bond99 [ 1466.410830][ T4439] bond9: (slave veth0_to_bond): Releasing active interface [ 1466.437454][ T4439] bond10: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1466.484402][ T4453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8118'. [ 1466.484431][ T4453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8118'. [ 1466.516763][ T4450] bond99: (slave veth95): Enslaving as an active interface with a down link [ 1466.517560][ T5949] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1466.520101][ T5948] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1466.520475][ T5948] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1466.520517][ T5948] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1467.203119][ T4469] validate_nla: 3 callbacks suppressed [ 1467.203144][ T4469] netlink: 'syz.7.8122': attribute type 1 has an invalid length. [ 1467.955674][ T4446] gretap2: left promiscuous mode [ 1468.266336][ T4449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1468.270107][ T4449] bond99: (slave batadv0): making interface the new active one [ 1468.291022][ T4449] batadv0: entered promiscuous mode [ 1468.293271][ T4449] bond99: (slave batadv0): Enslaving as an active interface with an up link [ 1468.326945][ T5949] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1468.326989][ T5949] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1468.429351][ T4461] workqueue: Failed to create a rescuer kthread for wq "bond117": -EINTR [ 1468.456613][ T4462] veth131: entered allmulticast mode [ 1468.498557][ T4478] netlink: 'syz.0.8123': attribute type 1 has an invalid length. [ 1468.549976][ T4480] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 1468.607373][ T4463] bond113: (slave veth0_to_bond): Releasing active interface [ 1468.613962][ T1348] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1468.614079][ T1348] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1468.614722][ T1348] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1468.614804][ T1348] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1468.677360][ T4469] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 1468.730930][ T4470] veth23: entered allmulticast mode [ 1468.900622][ T4478] 8021q: adding VLAN 0 to HW filter on device bond97 [ 1468.924521][ T4492] netlink: 'syz.3.8125': attribute type 1 has an invalid length. [ 1468.985507][ T4481] bond97: (slave veth101): Enslaving as an active interface with a down link [ 1469.009192][ T4483] 8021q: adding VLAN 0 to HW filter on device batadv33 [ 1469.021712][ T4483] bond97: (slave batadv33): making interface the new active one [ 1469.023530][ T4483] batadv33: entered promiscuous mode [ 1469.023996][ T4483] bond97: (slave batadv33): Enslaving as an active interface with an up link [ 1469.024280][ T4477] syzkaller1: entered promiscuous mode [ 1469.024299][ T4477] syzkaller1: entered allmulticast mode [ 1469.073507][ T4485] bond97 (unregistering): (slave veth101): Releasing active interface [ 1469.083189][ T4485] bond97 (unregistering): (slave batadv33): Releasing active interface [ 1469.083288][ T4485] batadv33: left promiscuous mode [ 1469.105227][ T4485] bond97 (unregistering): Released all slaves [ 1469.192169][ T4496] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8126'. [ 1469.369358][ T4506] netlink: 'syz.3.8128': attribute type 1 has an invalid length. [ 1469.384781][ T4505] netlink: 'syz.0.8129': attribute type 1 has an invalid length. [ 1469.415871][ T4506] 8021q: adding VLAN 0 to HW filter on device bond118 [ 1469.476503][ T4505] 8021q: adding VLAN 0 to HW filter on device bond97 [ 1469.515080][ T4513] netlink: 'syz.4.8130': attribute type 1 has an invalid length. [ 1469.537097][ T4506] bond118: (slave veth131): Enslaving as an active interface with a down link [ 1469.574939][ T4510] bond97: (slave veth103): Enslaving as an active interface with a down link [ 1469.595141][ T4512] 8021q: adding VLAN 0 to HW filter on device batadv28 [ 1469.597916][ T4512] bond118: (slave batadv28): making interface the new active one [ 1469.599023][ T4512] batadv28: entered promiscuous mode [ 1469.599365][ T4512] bond118: (slave batadv28): Enslaving as an active interface with an up link [ 1469.666241][ T4505] 8021q: adding VLAN 0 to HW filter on device batadv34 [ 1469.668795][ T4505] bond97: (slave batadv34): making interface the new active one [ 1469.669910][ T4505] batadv34: entered promiscuous mode [ 1469.694653][ T4505] bond97: (slave batadv34): Enslaving as an active interface with an up link [ 1469.747891][ T4506] bond118 (unregistering): (slave veth131): Releasing active interface [ 1469.768959][ T4506] bond118 (unregistering): (slave batadv28): Releasing active interface [ 1469.768993][ T4506] batadv28: left promiscuous mode [ 1469.792101][ T4506] bond118 (unregistering): Released all slaves [ 1469.869545][ T4514] veth97: entered allmulticast mode [ 1469.888351][ T4516] netlink: 'syz.6.8131': attribute type 1 has an invalid length. [ 1469.899299][ T4511] bond98: (slave veth0_to_bond): Releasing active interface [ 1470.021449][ T4516] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1470.205441][ T4517] bond11: (slave veth23): Enslaving as an active interface with a down link [ 1470.243777][ T4528] netlink: 'syz.7.8133': attribute type 1 has an invalid length. [ 1470.288786][ T4519] 8021q: adding VLAN 0 to HW filter on device batadv7 [ 1470.317012][ T4519] bond11: (slave batadv7): making interface the new active one [ 1470.331199][ T4519] batadv7: entered promiscuous mode [ 1470.331658][ T4519] bond11: (slave batadv7): Enslaving as an active interface with an up link [ 1470.437059][ T4528] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1471.159758][ T4537] bond13: (slave veth23): Enslaving as an active interface with a down link [ 1471.253160][ T4539] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 1471.256472][ T4539] bond13: (slave batadv4): making interface the new active one [ 1471.258007][ T4539] batadv4: entered promiscuous mode [ 1471.258483][ T4539] bond13: (slave batadv4): Enslaving as an active interface with an up link [ 1471.354234][ T4548] netlink: 'syz.3.8137': attribute type 1 has an invalid length. [ 1471.534430][ T4547] bond118: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1471.683773][ T4551] veth25: entered allmulticast mode [ 1471.778737][ T4559] net_ratelimit: 2 callbacks suppressed [ 1471.778796][ T4559] ip_tables: iptables: counters copy to user failed while replacing table [ 1471.798263][ T4555] bond9: (slave veth0_to_bond): Releasing active interface [ 1471.831940][ T4547] macvlan3: entered promiscuous mode [ 1471.831967][ T4547] macvlan3: entered allmulticast mode [ 1471.832669][ T4547] bond118: entered promiscuous mode [ 1471.836761][ T4547] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1471.894722][ T4547] bond118: left promiscuous mode [ 1471.933167][ T4564] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8141'. [ 1471.935278][ T4564] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8141'. [ 1471.935869][ T4564] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8141'. [ 1471.947854][ T4564] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8141'. [ 1471.956441][ T4564] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8141'. [ 1471.957266][ T4564] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8141'. [ 1472.367912][ T4553] ip_tables: iptables: counters copy to user failed while replacing table [ 1472.695107][ T4581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8144'. [ 1472.695136][ T4581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8144'. [ 1472.797091][ T4586] netlink: 'syz.4.8146': attribute type 1 has an invalid length. [ 1473.527847][ T4588] veth97: entered allmulticast mode [ 1473.541983][ T4588] bond100: (slave veth97): Enslaving as an active interface with a down link [ 1473.578528][ T4590] bond100: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1473.617398][ T4591] macvlan10: entered promiscuous mode [ 1473.617426][ T4591] macvlan10: entered allmulticast mode [ 1473.619920][ T4591] bond100: entered promiscuous mode [ 1473.639170][ T4591] 8021q: adding VLAN 0 to HW filter on device macvlan10 [ 1473.640107][ T4591] bond100: (slave macvlan10): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1473.667556][ T4591] bond100: left promiscuous mode [ 1473.808504][ T4599] netlink: 'syz.6.8148': attribute type 1 has an invalid length. [ 1473.900892][ T4599] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1473.973142][ T4603] bond12: (slave veth25): Enslaving as an active interface with a down link [ 1473.995468][ T4599] 8021q: adding VLAN 0 to HW filter on device batadv8 [ 1474.014201][ T4599] bond12: (slave batadv8): making interface the new active one [ 1474.019031][ T4599] batadv8: entered promiscuous mode [ 1474.019516][ T4599] bond12: (slave batadv8): Enslaving as an active interface with an up link [ 1474.325542][ T4610] syzkaller0: entered promiscuous mode [ 1474.325571][ T4610] syzkaller0: entered allmulticast mode [ 1474.367696][ T4620] netlink: 'syz.6.8154': attribute type 1 has an invalid length. [ 1474.399295][ T4620] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1474.432512][ T4623] netlink: 'syz.7.8153': attribute type 1 has an invalid length. [ 1480.426386][ T4620] bond13: (slave veth27): Enslaving as an active interface with a down link [ 1480.431295][ T4623] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 1480.457334][ T4624] 8021q: adding VLAN 0 to HW filter on device batadv9 [ 1480.459658][ T4624] bond13: (slave batadv9): making interface the new active one [ 1480.505851][ T4624] batadv9: entered promiscuous mode [ 1480.506373][ T4624] bond13: (slave batadv9): Enslaving as an active interface with an up link [ 1480.553497][ T4643] netlink: 'syz.0.8157': attribute type 1 has an invalid length. [ 1480.584257][ T4628] bond13 (unregistering): (slave veth27): Releasing active interface [ 1480.587000][ T4628] bond13 (unregistering): (slave batadv9): Releasing active interface [ 1480.587037][ T4628] batadv9: left promiscuous mode [ 1480.589078][ T4628] bond13 (unregistering): Released all slaves [ 1480.635702][ T4631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8155'. [ 1480.768080][ T4648] netlink: 'syz.4.8159': attribute type 1 has an invalid length. [ 1480.825671][ T4643] 8021q: adding VLAN 0 to HW filter on device bond98 [ 1481.988615][ T4644] bond98: (slave veth105): Enslaving as an active interface with a down link [ 1482.005744][ T4646] 8021q: adding VLAN 0 to HW filter on device batadv35 [ 1482.008181][ T4646] bond98: (slave batadv35): making interface the new active one [ 1482.009273][ T4646] batadv35: entered promiscuous mode [ 1482.009661][ T4646] bond98: (slave batadv35): Enslaving as an active interface with an up link [ 1482.018042][ T4648] workqueue: Failed to create a rescuer kthread for wq "bond101": -EINTR [ 1482.211934][T13638] batadv7: left promiscuous mode [ 1482.212984][ T156] batadv0: left promiscuous mode [ 1482.388107][ T4680] netlink: 'syz.7.8163': attribute type 1 has an invalid length. [ 1482.404334][ T4683] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8162'. [ 1482.421042][ T4684] netlink: 'syz.0.8164': attribute type 1 has an invalid length. [ 1482.489611][ T4680] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1482.574324][ T4684] 8021q: adding VLAN 0 to HW filter on device bond99 [ 1482.627650][ T4693] netlink: 'syz.4.8165': attribute type 1 has an invalid length. [ 1482.682368][ T4685] bond14: (slave veth25): Enslaving as an active interface with a down link [ 1483.590685][ T4687] bond99: (slave veth107): Enslaving as an active interface with a down link [ 1483.653786][ T4691] 8021q: adding VLAN 0 to HW filter on device batadv36 [ 1483.656916][ T4691] bond99: (slave batadv36): making interface the new active one [ 1483.658177][ T4691] batadv36: entered promiscuous mode [ 1483.658547][ T4691] bond99: (slave batadv36): Enslaving as an active interface with an up link [ 1483.710081][ T4680] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 1483.722704][ T4680] bond14: (slave batadv5): making interface the new active one [ 1483.723830][ T4680] batadv5: entered promiscuous mode [ 1483.724268][ T4680] bond14: (slave batadv5): Enslaving as an active interface with an up link [ 1483.725486][ T4693] workqueue: Failed to create a rescuer kthread for wq "bond101": -EINTR [ 1483.731798][ T4694] bond14 (unregistering): (slave veth25): Releasing active interface [ 1483.776220][ T4694] bond14 (unregistering): (slave batadv5): Releasing active interface [ 1483.776254][ T4694] batadv5: left promiscuous mode [ 1483.779857][ T4694] bond14 (unregistering): Released all slaves [ 1483.826474][ T4684] bond99 (unregistering): (slave veth107): Releasing active interface [ 1483.841317][ T4684] bond99 (unregistering): (slave batadv36): Releasing active interface [ 1483.841352][ T4684] batadv36: left promiscuous mode [ 1483.921345][ T4684] bond99 (unregistering): Released all slaves [ 1483.983806][ T4700] veth99: entered allmulticast mode [ 1484.046150][ T4702] bond100: (slave veth0_to_bond): Releasing active interface [ 1484.129330][ T4711] netlink: 'syz.0.8168': attribute type 1 has an invalid length. [ 1484.225942][ T4711] veth109: entered allmulticast mode [ 1484.237492][ T4715] netlink: 'syz.6.8169': attribute type 1 has an invalid length. [ 1484.266705][ T4711] bond99: (slave veth109): Enslaving as an active interface with a down link [ 1484.292575][ T4717] bond92: (slave veth0_to_bond): Releasing active interface [ 1484.299972][ T4717] bond99: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1484.355848][ T4715] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1484.455817][ T4724] 8021q: adding VLAN 0 to HW filter on device batadv10 [ 1484.487316][ T4724] bond13: (slave batadv10): making interface the new active one [ 1484.502778][ T4724] bond13: (slave batadv10): Enslaving as an active interface with an up link [ 1484.559436][ T4719] bond13: (slave veth29): Enslaving as an active interface with a down link [ 1484.588799][ T4711] macvlan3: entered promiscuous mode [ 1484.588827][ T4711] macvlan3: entered allmulticast mode [ 1484.589554][ T4711] bond99: entered promiscuous mode [ 1484.608160][ T4711] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1484.609059][ T4711] bond99: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1484.615307][ T4711] bond99: left promiscuous mode [ 1485.601630][ T4719] bond13 (unregistering): (slave batadv10): Releasing active interface [ 1485.609226][ T4719] bond13 (unregistering): (slave veth29): Releasing active interface [ 1485.636919][ T4719] bond13 (unregistering): Released all slaves [ 1485.693657][ T1348] batadv4: left promiscuous mode [ 1485.838540][ T4739] veth27: entered allmulticast mode [ 1485.957684][ T4746] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8175'. [ 1485.979384][ T4742] ip_tables: iptables: counters copy to user failed while replacing table [ 1486.262905][ T4762] netlink: 'syz.4.8178': attribute type 1 has an invalid length. [ 1486.265635][ T4761] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1486.444503][ T4764] bond101: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1486.522412][ T4762] macvlan10: entered promiscuous mode [ 1486.522442][ T4762] macvlan10: entered allmulticast mode [ 1486.526183][ T4762] bond101: entered promiscuous mode [ 1486.528244][ T4762] 8021q: adding VLAN 0 to HW filter on device macvlan10 [ 1486.557171][ T4762] bond101: left promiscuous mode [ 1486.884913][ T4773] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8181'. [ 1486.956497][ T4778] netlink: 'syz.3.8184': attribute type 1 has an invalid length. [ 1487.008602][ T4778] 8021q: adding VLAN 0 to HW filter on device bond119 [ 1487.021429][ T4780] netlink: 'syz.6.8183': attribute type 1 has an invalid length. [ 1487.051777][ T4783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1487.121418][ T4783] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8182'. [ 1487.121779][ T4783] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8182'. [ 1487.211545][ T4780] veth31: entered allmulticast mode [ 1487.233475][ T4778] 8021q: adding VLAN 0 to HW filter on device batadv29 [ 1487.237933][ T4778] bond119: (slave batadv29): making interface the new active one [ 1487.239281][ T4778] bond119: (slave batadv29): Enslaving as an active interface with an up link [ 1487.284623][ T4780] bond10: (slave veth0_to_bond): Releasing active interface [ 1487.298694][ T4780] bond13: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1487.343400][ T4780] macvlan2: entered promiscuous mode [ 1487.343427][ T4780] macvlan2: entered allmulticast mode [ 1487.345918][ T4780] bond13: entered promiscuous mode [ 1487.346962][ T4780] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1487.648635][ T4780] bond13: left promiscuous mode [ 1487.712651][ T4778] bond119 (unregistering): (slave batadv29): Releasing active interface [ 1487.737657][ T4778] bond119 (unregistering): Released all slaves [ 1487.937182][ T4792] veth111: entered allmulticast mode [ 1488.034348][ T4793] bond99: (slave veth0_to_bond): Releasing active interface [ 1488.807015][ T4823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8190'. [ 1488.807045][ T4823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8190'. [ 1488.934623][ T4826] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8193'. [ 1488.934667][ T4826] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8193'. [ 1489.099401][ T4836] netlink: 'syz.0.8195': attribute type 1 has an invalid length. [ 1489.421152][ T32] INFO: task syz.1.7346:1572 blocked for more than 143 seconds. [ 1489.421183][ T32] Not tainted syzkaller #0 [ 1489.421196][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1489.421209][ T32] task:syz.1.7346 state:D stack:25216 pid:1572 tgid:1569 ppid:5617 task_flags:0x400140 flags:0x00080002 [ 1489.421281][ T32] Call Trace: [ 1489.421290][ T32] [ 1489.421307][ T32] __schedule+0x17db/0x58f0 [ 1489.421370][ ** replaying previous printk message ** [ 1489.421370][ T32] ? __pfx___schedule+0x10/0x10 [ 1489.421405][ T32] ? schedule+0x90/0x2b0 [ 1489.421434][ T32] schedule+0x164/0x2b0 [ 1489.421461][ T32] schedule_preempt_disabled+0x13/0x30 [ 1489.421485][ T32] __mutex_lock+0x7c1/0x1550 [ 1489.421518][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1489.421549][ T32] ? nfsd_nl_unlock_filesystem_doit+0x2af/0x410 [ 1489.421586][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1489.421611][ T32] ? lockdep_hardirqs_on+0x7b/0x110 [ 1489.421660][ T32] nfsd_nl_unlock_filesystem_doit+0x2af/0x410 [ 1489.421693][ T32] ? __nla_parse+0x40/0x60 [ 1489.421724][ T32] ? __pfx_nfsd_nl_unlock_filesystem_doit+0x10/0x10 [ 1489.421759][ T32] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1489.421788][ T32] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1489.421827][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 1489.421865][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1489.421908][ T32] ? bpf_lsm_capable+0x9/0x20 [ 1489.421930][ T32] ? security_capable+0x7e/0x2c0 [ 1489.421966][ T32] genl_rcv_msg+0x614/0x7a0 [ 1489.422002][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1489.422028][ T32] ? __pfx_nfsd_nl_unlock_filesystem_doit+0x10/0x10 [ 1489.422086][ T32] netlink_rcv_skb+0x226/0x4a0 [ 1489.422122][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1489.422151][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1489.422205][ T32] ? down_read+0x2be/0x330 [ 1489.422239][ T32] genl_rcv+0x28/0x40 [ 1489.422264][ T32] netlink_unicast+0x7bd/0x940 [ 1489.422341][ T32] netlink_sendmsg+0x813/0xb40 [ 1489.422390][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1489.422436][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 1489.422466][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1489.422501][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 1489.422543][ T32] ____sys_sendmsg+0x54e/0x850 [ 1489.422581][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1489.422624][ T32] ? import_iovec+0x73/0xa0 [ 1489.422658][ T32] ___sys_sendmsg+0x2a5/0x360 [ 1489.422687][ T32] ? __lock_acquire+0x747/0x2de0 [ 1489.422718][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 1489.422755][ T32] ? futex_wait+0x2a2/0x390 [ 1489.422824][ T32] ? __fget_files+0x2a/0x420 [ 1489.422857][ T32] ? __fget_files+0x3a2/0x420 [ 1489.422903][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 1489.422937][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1489.422993][ T32] do_syscall_64+0x166/0x520 [ 1489.423018][ T32] ? trace_irq_disable+0x3b/0x140 [ 1489.423043][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1489.423075][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1489.423106][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1489.423130][ T32] RIP: 0033:0x7f9dcef9e159 [ 1489.423153][ T32] RSP: 002b:00007f9dcfe57028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1489.423180][ T32] RAX: ffffffffffffffda RBX: 00007f9dcf225fa0 RCX: 00007f9dcef9e159 [ 1489.423198][ T32] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000003 [ 1489.423215][ T32] RBP: 00007f9dcf03506b R08: 0000000000000000 R09: 0000000000000000 [ 1489.423232][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1489.423247][ T32] R13: 00007f9dcf226038 R14: 00007f9dcf225fa0 R15: 00007ffc099aae78 [ 1489.423285][ T32] [ 1489.423380][ T32] [ 1489.423380][ T32] Showing all locks held in the system: [ 1489.423401][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 1489.423419][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1489.423508][ T32] locks held by getty/5371: 2, on CPU#0: [ 1489.423525][ T32] #0: ffff8880355750a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1489.423596][ T32] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1489.423729][ T32] locks held by syz.2.6470/30804: 2, on CPU#0: [ 1489.423748][ T32] #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1489.423807][ T32] #1: ffffffff8f09f500 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 1489.423880][ T32] locks held by syz.1.7346/1572: 2, on CPU#1: [ 1489.423897][ T32] #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1489.423955][ T32] #1: ffffffff8f09f500 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_unlock_filesystem_doit+0x2af/0x410 [ 1489.424025][ T32] locks held by syz.5.7573/2362: 2, on CPU#0: [ 1489.424042][ T32] #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1489.424108][ T32] #1: ffffffff8f09f500 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 1489.424180][ T32] locks held by syz.7.8185/4789: 2, on CPU#1: [ 1489.424197][ T32] #0: ffffffff9aee9560 (nfnl_subsys_ipset){+.+.}-{4:4}, at: call_ad+0x26c/0xb50 [ 1489.424265][ T32] #1: ffffffff8ed62c68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1489.424331][ T32] locks held by syz.3.8191/4828: 3, on CPU#1: [ 1489.424349][ T32] #0: ffffffff8f9b9908 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1489.424419][ T32] #1: ffffffff90252520 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc1d/0x1c30 [ 1489.424479][ T32] #2: ffffffff8ed62c68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 1489.424545][ T32] locks held by syz.3.8191/4833: 1, on CPU#1: [ 1489.424562][ T32] #0: ffffffff90252520 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc1d/0x1c30 [ 1489.424622][ T32] locks held by syz.3.8191/4837: 2, on CPU#0: [ 1489.424639][ T32] #0: ffffffff8f997828 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1489.424708][ T32] #1: ffffffff90252520 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc1d/0x1c30 [ 1489.424778][ T32] locks held by syz.6.8192/4829: 2, last CPU#0: [ 1489.424795][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: bpf_test_timer_enter+0xf9/0x260 [ 1489.424864][ T32] #1: ffffffff8ed5c900 (rcu_read_lock_bh){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1489.424928][ T32] locks held by syz.0.8195/4836: 2, on CPU#0: [ 1489.424945][ T32] #0: ffffffff907a6a40 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1489.425012][ T32] #1: ffffffff90252520 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc1d/0x1c30 [ 1489.425079][ T32] locks held by syz.0.8195/4841: 2, on CPU#1: [ 1489.425097][ T32] #0: ffffffff907c1628 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1489.425165][ T32] #1: ffffffff90252520 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc1d/0x1c30 [ 1489.425226][ T32] locks held by syz.0.8195/4844: 1, on CPU#1: [ 1489.425243][ T32] #0: ffffffff90252520 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 1489.425303][ T32] locks held by syz.0.8195/4845: 1, on CPU#1: [ 1489.425320][ T32] #0: ffffffff90252520 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x419/0x810 [ 1489.425381][ T32] locks held by syz.4.8194/4838: 1, on CPU#0: [ 1489.425398][ T32] #0: ffffffff90252520 (rtnl_mutex){+.+.}-{4:4}, at: wext_ioctl_dispatch+0xa2/0x410 [ 1489.425467][ T32] locks held by syz.4.8194/4840: 1, on CPU#1: [ 1489.425485][ T32] #0: ffff88805182cd60 (sk_lock-AF_SMC){+.+.}-{0:0}, at: smc_connect+0xbd/0xdb0 [ 1489.425554][ T32] locks held by syz.4.8194/4843: 3, on CPU#1: [ 1489.425571][ T32] #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1489.425628][ T32] #1: ffff888034cf16e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 1489.425696][ T32] #2: ffffffff90252520 (rtnl_mutex){+.+.}-{4:4}, at: ethnl_default_dump_one+0x308/0xd50 [ 1489.425755][ T32] locks held by syz.4.8194/4846: 1, on CPU#1: [ 1489.425773][ T32] #0: ffff88805182cd60 (sk_lock-AF_SMC){+.+.}-{0:0}, at: smc_connect+0xbd/0xdb0 [ 1489.425841][ T32] [ 1489.425849][ T32] ============================================= [ 1489.425849][ T32] [ 1489.425869][ T32] NMI backtrace for cpu 1 [ 1489.425886][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1489.425912][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1489.425926][ T32] Call Trace: [ 1489.425936][ T32] [ 1489.425946][ T32] dump_stack_lvl+0xe8/0x150 [ 1489.425981][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 1489.426016][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1489.426061][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1489.426100][ T32] sys_info+0x135/0x170 [ 1489.426131][ T32] watchdog+0xfd7/0x1030 [ 1489.426163][ T32] ? watchdog+0x1c7/0x1030 [ 1489.426195][ T32] kthread+0x38b/0x480 [ 1489.426219][ T32] ? __pfx_watchdog+0x10/0x10 [ 1489.426241][ T32] ? __pfx_kthread+0x10/0x10 [ 1489.426266][ T32] ret_from_fork+0x514/0xb70 [ 1489.426293][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1489.426330][ T32] ? __switch_to+0xc89/0x1420 [ 1489.426366][ T32] ? __pfx_kthread+0x10/0x10 [ 1489.426391][ T32] ret_from_fork_asm+0x1a/0x30 [ 1489.426445][ T32] [ 1489.426455][ T32] Sending NMI from CPU 1 to CPUs 0: [ 1489.426487][ C0] NMI backtrace for cpu 0 [ 1489.426503][ C0] CPU: 0 UID: 0 PID: 4829 Comm: syz.6.8192 Not tainted syzkaller #0 PREEMPT(full) [ 1489.426526][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1489.426538][ C0] RIP: 0010:unwind_next_frame+0x29b/0x2550 [ 1489.426569][ C0] Code: 00 00 45 39 e8 0f 84 07 04 00 00 4a 8d 14 ad 34 43 8d 90 45 29 e8 4e 8d 24 82 49 83 c4 fc 49 89 d5 4c 39 e2 0f 86 22 02 00 00 <49> 29 d5 49 c1 fd 02 4a 8d 04 6d 00 00 00 00 4c 01 e8 48 8d 14 46 [ 1489.426587][ C0] RSP: 0018:ffffc9002d91ef20 EFLAGS: 00000202 [ 1489.426605][ C0] RAX: ffffffff90f01150 RBX: ffffffff90f01154 RCX: ffffffff90f01158 [ 1489.426621][ C0] RDX: ffffffff90f01154 RSI: ffffffff919d1c64 RDI: ffffffff8c6d9c20 [ 1489.426636][ C0] RBP: ffffffff89bbd9c8 R08: 0000000000000009 R09: 0000000000000000 [ 1489.426649][ C0] R10: ffffc9002d91f018 R11: ffffffff81b285f0 R12: ffffffff90f01154 [ 1489.426664][ C0] R13: ffffffff90f01154 R14: ffffc9002d91efc8 R15: ffffffff90f01158 [ 1489.426680][ C0] FS: 00007fcde2aef6c0(0000) GS:ffff888124cd1000(0000) knlGS:0000000000000000 [ 1489.426697][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1489.426712][ C0] CR2: 00007f2cf11eb840 CR3: 0000000050c52000 CR4: 00000000003526f0 [ 1489.426729][ C0] Call Trace: [ 1489.426736][ C0] [ 1489.426747][ C0] ? bpf_clone_redirect+0x319/0x4b0 [ 1489.426768][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1489.426792][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1489.426813][ C0] arch_stack_walk+0x11b/0x150 [ 1489.426838][ C0] ? bpf_clone_redirect+0x319/0x4b0 [ 1489.426860][ C0] stack_trace_save+0xa9/0x100 [ 1489.426890][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1489.426919][ C0] ? kfree+0x1c5/0x650 [ 1489.426956][ C0] ? __lock_acquire+0x747/0x2de0 [ 1489.426978][ C0] kasan_save_track+0x3e/0x80 [ 1489.426998][ C0] ? kasan_save_track+0x3e/0x80 [ 1489.427016][ C0] ? kasan_save_free_info+0x40/0x50 [ 1489.427043][ C0] ? __kasan_slab_free+0x5c/0x80 [ 1489.427064][ C0] ? kmem_cache_free+0x182/0x650 [ 1489.427082][ C0] ? __tcf_kfree_skb_list+0x14b/0x300 [ 1489.427104][ C0] ? __dev_queue_xmit+0x208d/0x3820 [ 1489.427132][ C0] ? __bpf_redirect+0xc5b/0x1250 [ 1489.427150][ C0] ? bpf_clone_redirect+0x319/0x4b0 [ 1489.427196][ C0] ? __tcf_kfree_skb_list+0x14b/0x300 [ 1489.427218][ C0] kasan_save_free_info+0x40/0x50 [ 1489.427246][ C0] __kasan_slab_free+0x5c/0x80 [ 1489.427268][ C0] kmem_cache_free+0x182/0x650 [ 1489.427291][ C0] __tcf_kfree_skb_list+0x14b/0x300 [ 1489.427326][ C0] __dev_queue_xmit+0x208d/0x3820 [ 1489.427352][ C0] ? bpf_prog_test_run+0x2c5/0x340 [ 1489.427374][ C0] ? __sys_bpf+0xa22/0xd90 [ 1489.427400][ C0] ? __dev_queue_xmit+0x29b/0x3820 [ 1489.427433][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1489.427473][ C0] ? skb_release_data+0x30f/0xab0 [ 1489.427505][ C0] __bpf_redirect+0xc5b/0x1250 [ 1489.427531][ C0] bpf_clone_redirect+0x319/0x4b0 [ 1489.427560][ C0] ? bpf_test_run+0x1d1/0x830 [ 1489.427587][ C0] bpf_prog_9aed3a937bd8d0ba+0x22/0x2a [ 1489.427605][ C0] bpf_test_run+0x354/0x830 [ 1489.427644][ C0] ? __pfx_bpf_test_run+0x10/0x10 [ 1489.427680][ C0] ? __kasan_krealloc+0xec/0x110 [ 1489.427707][ C0] ? convert___skb_to_skb+0x3d/0x5b0 [ 1489.427738][ C0] bpf_prog_test_run_skb+0xe35/0x2230 [ 1489.427778][ C0] ? __fget_files+0x3a2/0x420 [ 1489.427808][ C0] ? __fget_files+0x2a/0x420 [ 1489.427837][ C0] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1489.427865][ C0] bpf_prog_test_run+0x2c5/0x340 [ 1489.427890][ C0] __sys_bpf+0xa22/0xd90 [ 1489.427916][ C0] ? __pfx___sys_bpf+0x10/0x10 [ 1489.427939][ C0] ? do_futex+0x458/0x4e0 [ 1489.427981][ C0] ? rcu_is_watching+0x16/0xb0 [ 1489.428007][ C0] __x64_sys_bpf+0xba/0xd0 [ 1489.428028][ C0] do_syscall_64+0x166/0x520 [ 1489.428049][ C0] ? trace_irq_disable+0x3b/0x140 [ 1489.428070][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1489.428090][ C0] ? clear_bhb_loop+0x70/0xc0 [ 1489.428113][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1489.428132][ C0] RIP: 0033:0x7fcde1b9e159 [ 1489.428151][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1489.428170][ C0] RSP: 002b:00007fcde2aef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1489.428190][ C0] RAX: ffffffffffffffda RBX: 00007fcde1e25fa0 RCX: 00007fcde1b9e159 [ 1489.428205][ C0] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1489.428218][ C0] RBP: 00007fcde1c3506b R08: 0000000000000000 R09: 0000000000000000 [ 1489.428230][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1489.428243][ C0] R13: 00007fcde1e26038 R14: 00007fcde1e25fa0 R15: 00007ffc555220f8 [ 1489.428268][ C0] [ 1489.477054][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1490.810766][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1490.819926][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1490.830017][ T32] Call Trace: [ 1490.833337][ T32] [ 1490.836298][ T32] vpanic+0x56d/0xa60 [ 1490.840416][ T32] ? __pfx___schedule+0x10/0x10 [ 1490.845333][ T32] ? __pfx_vpanic+0x10/0x10 [ 1490.850094][ T32] panic+0xc5/0xd0 [ 1490.853879][ T32] ? __pfx_panic+0x10/0x10 [ 1490.858880][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 1490.864480][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 1490.870006][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 1490.876358][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 1490.883993][ T32] watchdog+0x1030/0x1030 [ 1490.888385][ T32] ? watchdog+0x1c7/0x1030 [ 1490.893874][ T32] kthread+0x38b/0x480 [ 1490.897992][ T32] ? __pfx_watchdog+0x10/0x10 [ 1490.902712][ T32] ? __pfx_kthread+0x10/0x10 [ 1490.907630][ T32] ret_from_fork+0x514/0xb70 [ 1490.912654][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1490.917854][ T32] ? __switch_to+0xc89/0x1420 [ 1490.922628][ T32] ? __pfx_kthread+0x10/0x10 [ 1490.927316][ T32] ret_from_fork_asm+0x1a/0x30 [ 1490.932175][ T32] [ 1490.935971][ T32] Kernel Offset: disabled [ 1490.940968][ T32] Rebooting in 86400 seconds..