last executing test programs: 3m5.774277338s ago: executing program 0 (id=7439): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYRES16=r0], 0x48) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000380)) (async) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000380)) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r3, 0x215eb000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r3, 0x215eb000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket(0xa, 0x3, 0xff) (async) r4 = socket(0xa, 0x3, 0xff) r5 = socket$rxrpc(0x21, 0x2, 0x9) setsockopt$RXRPC_SECURITY_KEYRING(r5, 0x110, 0x2, &(0x7f0000000080)='\xfb[\x00', 0x3) sendmsg$inet6(r4, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="671723d7c6012c", 0x7}, {&(0x7f0000000180)="9e91d91a92dc7c8f06c24fbe79d9284d0c66c92c658bb539e2ffb332c99223a7df", 0x21}], 0x2}, 0x20008b88) 3m5.539727016s ago: executing program 0 (id=7440): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000002840)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d616373656300001800028005000900010000000c000100000000000000000008000500", @ANYRES32=r0], 0x50}}, 0x0) 3m5.071298698s ago: executing program 0 (id=7443): r0 = socket$inet(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1400000010000100ffef0000000000000300000a440000000c0a010100000000000000000a0000060900020073797a310000000009000171c5797a3100000000801400008004000180080003c000000001040002801400000011"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="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"], 0x270}}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0xfc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800c0001006d6163766c616e00100002800a0009000180c2000003000008000500", @ANYRES32=r4], 0x48}}, 0x0) 3m4.766662121s ago: executing program 0 (id=7447): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000000)={'gre0\x00', r2, 0x7f10, 0x80, 0xe, 0x1, {{0x1b, 0x4, 0x3, 0x0, 0x6c, 0x64, 0x0, 0xb9, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x36}, {[@timestamp_addr={0x44, 0x14, 0xf4, 0x1, 0x6, [{@loopback, 0x9}, {@multicast1, 0x6}]}, @timestamp_prespec={0x44, 0x44, 0x5e, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x24}, 0x4}, {@local, 0x8}, {@multicast2}, {@loopback, 0x9}, {@multicast1, 0xffffffff}, {@empty, 0x1}, {@broadcast, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}]}]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0xffffff05, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x0, 0x24, 0x714, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x9, 0xa}, {0x9, 0x4}, {0x2, 0x9}}, [@TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0x4, 0x4, 0x7fff, 0x7, 0x1, 0x2, 0x81}}, {0x0, 0x2, [0x4, 0x7ff, 0x2, 0x0, 0x0, 0x8]}}, {{0x0, 0x1, {0x8, 0xff, 0xd13, 0x1, 0x2, 0x1ff, 0x3}}, {0x0, 0x2, [0x400, 0x5]}}, {{0x0, 0x1, {0x0, 0xa4, 0x0, 0xffffffff, 0x0, 0x1, 0x2}}, {0x0, 0x2, [0x4, 0x6]}}, {{0x0, 0x1, {0x48, 0x2, 0x0, 0x0, 0xbcdaa35c5f1789a6, 0x7fffffff, 0x4}}, {0x0, 0x2, [0x7, 0x4, 0xa1, 0x5]}}, {{0x0, 0x1, {0xe3, 0x5, 0x1, 0x0, 0x1, 0xf, 0xe66}}, {0x0, 0x2, [0x6, 0x7, 0x7, 0xb]}}, {{0x0, 0x1, {0x0, 0x1, 0xf, 0xfdd8, 0x2, 0x3, 0x2}}, {0x0, 0x2, [0x800, 0x7]}}, {{0x0, 0x1, {0x10, 0x36, 0x1, 0x7, 0x0, 0x6, 0xfffffffb}}, {0x0, 0x2, [0x1ff, 0x3, 0x3]}}, {{0x0, 0x1, {0xa, 0xe, 0x1, 0x2, 0x1, 0x4bed, 0x101}}, {0x0, 0x2, [0xfffe]}}]}, @TCA_INGRESS_BLOCK={0x0, 0xd, 0x2fc}, @TCA_INGRESS_BLOCK={0x0, 0xd, 0x7f}]}, 0x24}}, 0x40080) 3m4.306885059s ago: executing program 0 (id=7451): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) write(r0, &(0x7f0000000500)="240000001e005f02141f00fffffffff801000000080000000000000008000902009ea5b1", 0x24) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000040)=0xfffffff7, &(0x7f0000000200)=0x4) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, 0x0, &(0x7f0000000340)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x48, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e24, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, @in6={0xa, 0x4e21, 0x106, @empty, 0x5}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={r2}, 0x8) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r4 = accept$alg(r3, 0x0, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000240)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000280)=0x28) write(r4, &(0x7f0000000b00)="6dfc1faf45b5f14932dd8f5f62d3811765867c23d40353b4c7c38b2c9fa9243b5585f027bfaf068fbbd2329a2de58f41f070ba91823aa3fd9d1a43ec617d97ab60bc497fab80c4517ef8f49952ead338a9a35537b2c0c0b5486c3f6c8c30ef54f9d66c3d3999ad786e09923f00228ffa847cf063ccefcee97858cdbbfeb1420b42811a97822aa93e76a35d11f63094b9cec685d90304940fb5bdb50f523c683d6b9614453e936cd22ee5fa0f16864d75269e92a0ab450ed7c3e4c25e7be74fa7d8a0fb5bbd48f9b09e023c33bb53a7dd372c945601e63d44b88ce8fbc94c7066", 0xe0) recvmmsg(r4, &(0x7f00000022c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000500)=""/232, 0xe8}], 0x1}, 0x3}], 0x1, 0x2100, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x97}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f4bec", 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m3.240591893s ago: executing program 0 (id=7462): r0 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$802154_raw(0x24, 0x4, 0x0) (async) syz_init_net_socket$802154_raw(0x24, 0x4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) (async) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x100000, 0x1}}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r3, 0x0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r3, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r1, 0x0) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000001100)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x5, 0xb}, 0x90) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000001100)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x5, 0xb}, 0x90) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x1010, r0, 0x7098000) (async) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x1010, r0, 0x7098000) syz_emit_ethernet(0x3e, &(0x7f0000000c40)={@multicast, @local, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "8750bb", 0x8, 0x0, 0xff, @dev={0xfe, 0x80, '\x00', 0xb}, @empty, {[@routing={0x87, 0x0, 0x0, 0x5}]}}}}}, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8}, &(0x7f00000006c0), &(0x7f0000000700)=r7}, 0x20) recvmsg$unix(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/167, 0xa7}], 0x1}, 0x40012062) ioctl$sock_inet_SIOCGIFPFLAGS(r7, 0x8935, &(0x7f0000000200)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r6}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r6}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r9, 0x29, 0x1, &(0x7f0000000100), 0x4) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x40}}, 0x20040850) 2m47.914956745s ago: executing program 32 (id=7462): r0 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$802154_raw(0x24, 0x4, 0x0) (async) syz_init_net_socket$802154_raw(0x24, 0x4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) (async) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x100000, 0x1}}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r3, 0x0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r3, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r1, 0x0) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000001100)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x5, 0xb}, 0x90) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000001100)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x5, 0xb}, 0x90) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x1010, r0, 0x7098000) (async) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x1010, r0, 0x7098000) syz_emit_ethernet(0x3e, &(0x7f0000000c40)={@multicast, @local, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "8750bb", 0x8, 0x0, 0xff, @dev={0xfe, 0x80, '\x00', 0xb}, @empty, {[@routing={0x87, 0x0, 0x0, 0x5}]}}}}}, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8}, &(0x7f00000006c0), &(0x7f0000000700)=r7}, 0x20) recvmsg$unix(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/167, 0xa7}], 0x1}, 0x40012062) ioctl$sock_inet_SIOCGIFPFLAGS(r7, 0x8935, &(0x7f0000000200)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r6}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r6}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r9, 0x29, 0x1, &(0x7f0000000100), 0x4) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x40}}, 0x20040850) 8.069423683s ago: executing program 3 (id=9100): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002f00090028bd70000000170004000000040018", @ANYRES64=r0], 0x18}, 0x1, 0x0, 0x0, 0x42884}, 0x10) 7.59461636s ago: executing program 3 (id=9105): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000d40)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61103400000000006113380000000000bfa00000000000000700000008ffffffd50301001874004095000600000000006916000000000000bf67000000000000360607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d2aca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c437dc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc28206c812439ab129ae818837ee15620789c524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418df19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c747664e9f7478f82000000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$unix(0x1, 0x1, 0x0) listen(r1, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet(0x2, 0x1, 0x6) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000001c0)={0x0, {{0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, '\x00', 0x16}, 0xff7fffff}}, {{0xa, 0x4e21, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000800"/547], 0x610) r4 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x71228}, [@IFLA_MTU={0x8, 0x4, 0x81}, @IFLA_GROUP={0x8, 0x1b, 0x400}]}, 0x30}}, 0x4004090) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000d40)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x44}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61103400000000006113380000000000bfa00000000000000700000008ffffffd50301001874004095000600000000006916000000000000bf67000000000000360607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d2aca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c437dc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc28206c812439ab129ae818837ee15620789c524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418df19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c747664e9f7478f82000000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$unix(0x1, 0x1, 0x0) (async) listen(r1, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) socket$inet(0x2, 0x1, 0x6) (async) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) (async) shutdown(r2, 0x0) (async) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) (async) socket(0xa, 0x1, 0x0) (async) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000001c0)={0x0, {{0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, '\x00', 0x16}, 0xff7fffff}}, {{0xa, 0x4e21, 0x4a3, @local, 0x4f1}}}, 0x108) (async) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000800"/547], 0x610) (async) socket(0xa, 0x1, 0x0) (async) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x71228}, [@IFLA_MTU={0x8, 0x4, 0x81}, @IFLA_GROUP={0x8, 0x1b, 0x400}]}, 0x30}}, 0x4004090) (async) 7.241356894s ago: executing program 3 (id=9108): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="008000"}) (async) ioctl(r4, 0x8b2a, &(0x7f0000000040)) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r3, 0x0, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0xb}]}}}]}, 0x3c}}, 0x48000) (async) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xb4, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x13}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20048081}, 0x20008084) (async) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x2001, 0x880b, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "dbdd9ede7e2313a7a23925f03dbbcf5cde982cab6b38bf7b463ae5f42c35dd1d", "6a7710ebcf55344ae76b375fa62e3502b74659d7dbde072d61b6238412ad5f1a0a4f358515e45cea781c9e9b26806f68", "dd72b3bd460f4ebd662f8cd823dfd0d963970deffa6dd57d8176d2b5", {"4e3bc06c34c945e45e27e747494b407f", "256d9ddc3e6e1f7c5f7b4c5e69c1dd72"}}}}}}}, 0x0) 7.127271857s ago: executing program 3 (id=9111): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r3, r3, 0x19, 0x0, @val=@netfilter={0x0, 0x0, 0x6}}, 0x20) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000000080)={'TPROXY\x00'}, &(0x7f00000001c0)=0x1e) 6.850914059s ago: executing program 3 (id=9113): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c000480280001800e000100636f6e6e6c696d6974000000140002800800014000000f8308000240000000010900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a381e6d8a83fec33648f2ceb0dfca86e14a2305e1de59a529ef618f3d73a31c9b25ad1fabfa66d82f6c8308c56579f6554f9b535c439cbd63953e7b9332df08b504e81a45017c11556ce938f7bb0f4d4bc49fec629cd2e981374d38649e5b63e59be010b36701f3b9e41388bd958b09ada2e8a19199afd8895599436b0069d438e69d04b3ad4a19b2aea10df4d84a0a20ad211689d406f6f8a6a451a1c0ea74f88770ff45e590a75d62a21d64f0bd9b713f4cfd70292ff2f0c6f3ef59a88a02ef5f33815691e5b760008e830df72c3153aba5f63bda8ab1f8fdd2e0d62c00fd62dc29d8fa"], 0x80}}, 0x0) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x18ff, 0x0, 0x1, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x4}, 0x50) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000300)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0, 0x7a, &(0x7f0000000400)=[{}], 0x8, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xcd, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0x20, &(0x7f0000000900)={&(0x7f00000007c0)=""/231, 0xe7, 0x0, &(0x7f00000008c0)}}, 0x10) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1200000001000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000400"/28], 0x48) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r4, &(0x7f00000001c0), &(0x7f0000000280)=@udp=r5}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000640)="b4", &(0x7f0000000180)=@udp=r5}, 0x20) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6694de96, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x14, 0x15, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000e46206244942e0a4cf73247592000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008510000004000000186700000800000000000000a2c0c10009dd2e0d0100000085000000350000002906feffffffffffbf91000000000000b7020000010000008500000085000000b70000"], &(0x7f0000000240)='GPL\x00', 0xea, 0x28, &(0x7f0000000280)=""/40, 0x41100, 0x28, '\x00', r2, @lirc_mode2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000780)={0x5, 0x8, 0x0, 0x4}, 0x10, r3, 0xffffffffffffffff, 0x0, &(0x7f0000000a80)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, r6], 0x0, 0x10, 0x80}, 0x94) 6.615579687s ago: executing program 3 (id=9117): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000071121300000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x1c, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x10, 0x6}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000071121300000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x1c, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x10, 0x6}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x2f, 0x0, 0x0, 0x7fff, 0x11, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x8000, 0x7, 0x1, 0x3}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@newchain={0x64, 0x64, 0x20, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r0, {0x6, 0x3}, {0xfff1, 0x2}, {0x8, 0xfff1}}, [@filter_kind_options=@f_route={{0xa}, {0x34, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x56}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_TO={0x8, 0x2, 0xd1}, @TCA_ROUTE4_IIF={0x8, 0x4, r1}, @TCA_ROUTE4_TO={0x8, 0x2, 0x14}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x2d}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0xf4184a1a8a670a77) 3.204273112s ago: executing program 4 (id=9138): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000069108e0000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1f6}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2e}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) 2.934585571s ago: executing program 4 (id=9140): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000040)={0x0, 0x2}, 0x8) sendto$inet(r2, &(0x7f0000000100)="ab", 0x34000, 0x4004815, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r1) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r1) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000500)={'vxcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000540)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5e, r6}) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000012000501000000000000000005"], 0x40}}, 0x0) readv(r5, &(0x7f0000003680)=[{&(0x7f0000000300)=""/215, 0xd7}, {0x0}], 0x2) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000000000000020000000000000000000067be04e1d31cef9a7a3870b8623e"]) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010003000000fddbdf2501000000080002000200000024000480050003000200000005000300010000000500030002000000050003000700000008000100ffffffff08000100ffffffff"], 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xa, 0xfff3}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}]}}]}, 0x44}}, 0x0) r7 = socket(0x10, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x10}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newtaction={0x78, 0x30, 0x51b, 0x0, 0x0, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x78}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4004044) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r7) sendmsg$NL80211_CMD_JOIN_OCB(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x58, r8, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x2f}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x39}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1b6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1450}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000c1}, 0x4000000) 2.766416449s ago: executing program 1 (id=9142): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="58d3151e3414bc43960f37288dbb5ab2dfae1da809786fcf7d3461269489facd6613d74896c80df169b90871ac4a61cca84d7f94fdbc32eca6745409b63ad5548720", @ANYRESOCT=r0, @ANYRESOCT=r1], 0x64}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r3 = socket(0x1a, 0x2, 0x80) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x4e24, @rand_addr=0x64010100}}, 0x27c0}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r8, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) sendmsg$inet(r5, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000240)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2a, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0xc4d9898eb3ae1711) 2.330426996s ago: executing program 2 (id=9144): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x26, 0x301, 0x270bda5, 0x25dfdbfa, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x40008b0}, 0x80) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x5}) r2 = socket$kcm(0xa, 0x3, 0x87) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000080)={r2}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x142011}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r4, 0x911, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3e}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040011) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x4) 2.182245128s ago: executing program 1 (id=9147): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x72}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7d}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) 1.962571555s ago: executing program 2 (id=9148): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40ffffff"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x44040) (async) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x0, 0x11, 0x148, 0x0, 0x0, 0x1b0, 0x2a8, 0x2a8, 0x1b0, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x2a}, 0xffffff00, 0xffffffff, 'pim6reg\x00', 'veth0_vlan\x00', {0xff}, {0xff}, 0x5e, 0x3, 0x2}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x6, 0x5, 0x5, 0x6, 0x20], 0x7, 0x1}, {0xffffffffffffffff, [0x56, 0x7, 0x8, 0x5e, 0x1], 0x0, 0x7}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xfffa, 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x2, 0x9, 0x8, 'syz0\x00', {0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 1.958427074s ago: executing program 1 (id=9149): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r4, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c0c5}, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x1000) 1.957502228s ago: executing program 4 (id=9150): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000001300), 0x4) connect$inet6(r0, &(0x7f0000001380)={0xa, 0x4e22, 0x1000, @private0, 0x9b}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r1, &(0x7f0000000800)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000140)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000840)=[@dontfrag={{0x14, 0x29, 0x36}}], 0x18}}], 0x1, 0x0) r2 = socket(0x1e, 0x80000, 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x89}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc0, &(0x7f00000020c0)=""/192}, 0x80) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0xc, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x40040) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000003c0)='bbr', 0x3) sendmmsg$inet(r5, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000400)='l', 0x1}], 0x1}}], 0x1, 0x24040015) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0, 0x12, &(0x7f0000000280)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x7c, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r2, r6, 0x25, 0x1a, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00 \x00', 0x18, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, {[], @mld={0x187, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, 0x0) 1.655270915s ago: executing program 5 (id=9153): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000300000000000000000000030000000003000000020000000000000000000000000000010500000010000000010000000000001200000000005f", @ANYRES16, @ANYRES8], 0x0, 0x4f}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001800010000000000fedbdf251d01000008000a00", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069001a000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) listen(r5, 0xfffffffc) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x2c, 0x2c, 0xd27, 0x30bd29, 0x259fdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xe}, {}, {0x7}}, [@TCA_CHAIN={0x8, 0xb, 0x80000000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = accept(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x80) recvmmsg$unix(r7, &(0x7f0000000400), 0x0, 0x40012122, 0x0) 1.630134671s ago: executing program 2 (id=9154): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff01c}, {0x16}]}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000001a40)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x98, 0x8, 0xfa04, 0x1b0, 0x6c02, 0x1b0, 0x194, 0x194, 0x1b0, 0x194, 0x3, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x32}, 0x0, 0x0, 'veth0_to_hsr\x00', 'dvmrp1\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'vlan0\x00', {}, {}, 0x0, 0x1, 0x44}, 0x0, 0xb0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x4, 0x5, 0x3, 0x1, 0x2, 0x4], 0x4}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1b, 0x5, 0x1, 0x9, 'syz0\x00', 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) syz_emit_ethernet(0xfc8, &(0x7f00000011c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa00080045000fba0000000000849078ac1414bbffffffffdd9dec79219eb549dbd024c796335bc5ff0e043319357749084ca9d0ae1378f4e88112a2f7c10fd1523b9007773fd2b2bd0ebabccd2e5c35fb3baff587585840f2530c6f4d025f118440ac22a8b34da7b5e1e873bd429686be3ef84439e05fc0fefedb8b897b09445a9e10cf24aec2ff3ca6a86d94df0c4a928ed904dcfb02e6c6c5918a839d33cb9b55dfb3cd89d80eb18dc06415d313b4ea240a65eff4b941ac018e8f81de044239960271333255291b5fbfdcf8db25e175640f36986b859aeb3370ca17e6a20aeeb5c5d27eb097fc1fab796a7ff8fcbe119bbe4be2c8a5c58890191c59bea20bfe4edf9c5453e59f610d3bd1d6eb49b02e464aee0480187c5717936add1347b08cdf5b056adb941708e8a0498900419e98b75658c6dd00f88eebf8c9aaee2e38c80eafcf6ca08ea305da9c7050948ef78a1457a2e933287fe8d2e100cb00078ed829985f8812d543cc5cdb71521f4113829551efe915e4d6773f2d285cc1e8813919356ca5ef202b0d2b8a3d7de51e4635e761ffd7efe5d51dd1325596f0e4e1c0b1ce73240cb931227892d66f3629c9d152372d5790c1c25e2f6f850a5eb83654f423b84adbbf4169d472b2cddaa7137ff14c2944ade3a57613806810707a2e6c078beb4b87cf8cf39c9950bcb3f9bb42308bd5e68d81f7f4d9e528541703059787f5e342be8ebb9841d587f7455b409115d511c130d9641fc74391228bda52d2fa58e2ca74b26583e73e2cfb881945d8ecbc77eb35e783057f6c35ba06b7f639ec516ee54bf3645f6ec436ba859e22ed480a862285aa21f3d5cd3734dde388a7f8920c4a6b4a952f830e0d2811f2f2714e660e961de0b3e0b8d5fd1007690a61e414e82245dbe4e47c73465ed40af1cee2eae4801ee408ad1fce81ff8db77082c5efd93fa9a1a3e3d78eff84f326df1c6fa656cc7d4dab842fe8e0d9ce47ad0a7e74dfe1a53776a346a22dc7a0e476754d385d99aa9cbd3f445ffb2ed61e01b28fc071d706ad204b1e8014481dba0cbc460b67e64d6e955184271cedef7f951021e3595ebe9c3384b53efafb67cbed2aa1ede5d7fcff3a9d27d05766fb8894d7948609441759f4c4dfa33b6d486d4fb7e231f04d4f0f9e98f4b156129d9307fb9ebf3b278232062e7fe9ec2db7c4c991f83733368a107bf5798a1df45c919d71cce45ed907240c2f2fa6a4227e8e11cef2e7968c63e7a1adc3edec2170c17ed2cc54d0ea2b34e99b81015ffe51a501c2b73ddac5223e69d0dd451d358c0cd2ff56850ec1e9e349901f168d854284da68d80c68298a75c5d859008c82fe08b4cf2e68a2c0190760a03aff1be2c9425b6d5ef5c67bafb6d16fffeeb0211d90abbade4db9d6a9e9c981dde14c1d54e9138f9760bcdccbf17e7416042cfe7bbd8bba2f739f7f900ee45b965316b950e8474f3be92081fb63f43a4858b39e20e14d5a38c0973d680f2fda9e310d0e088523bdcbb728bcd0074447b4ace876da5642cd7d781cdb023a31446e0a0c59d5388674a5c8a97927e014a73d0330bd5c5187db79f1c546a8bcca008263509c23b246dea58fb36c44d373c1c92ffdd1600c27d4b10b3fc86b88ecefe8743bb59a6b8e443f06d2ae3a6908b6bc65b647deee13262225b8879dd79413ffa3d4aef91a0a04d4dc3030b5beb081c5fdf9152c3a17e6b24457fd580d84d3006af27ff44d6ec3664c4955a1d1dc5eb041682644ae564390a3d0aa602b2a18cdd3f8a1efff7b8f3afc31c283c9b74b806a98bd9f1ad8ecce410160c0a27f7ef90a2b0c1bea64e187adc04a04bff7c435659bc4c3ce5c2730e121972541062102e93d2a136e1aaaf3e25d547cad6e2b0874500fc098469494d2654808ee88588fd167f4332061a9b4cae6b22d87624e325e89a269f61ce0d26465ddfedc1f0fa2a5cf1ee7fe3e6cb375f1ff04cf8d22667debe574b8395023bde9a8302376af2e119c4c88433d1722011ade605f3a4201860742b0392ac96cc138d9ddb952f4e4742a7fd9d625465dac35347c1662b2085c357120c6ff69dedc013c5fe46555a4448b0be41e21ad73162bf9aa1cfb70f4702c7051c0a13fae918133f123d33c5c02e66ae8fceb3109b2e13a7a3e71484d59dfcba16db2d21549be1ba6cd5ad7610eefda427982384961f18bd6857ad97e868c2914d0ba934a296eda52646031c4504864061f3cba1df65cd04ef6b1050fb30b5abbbe28f8f7adb8073e452f4c0c5492a5f8d427ddf451ae303a86639e5dbccfe2b2bedb911d534a77c012e2f8a24917d98ab14557caf3e66040f21767685644f0003459762d4ab25a0e33a92b54748cf46a977505074b79b9b0746b2b5b168876a2ca10bb903edc1d1992a4a94c0ee0dd7b37add092163b5fbaf16090f8143187d060b19e3822f3def14717e41558f9582467a5a5f89148450fde235e7a5bb900e4e9d14e2147bfd2a52f84a115eb170bf3d3b9b39e9781960be4e53025c7dce005e1458140bb9cf9da8fa1124ac558fb220d57c23a7f120f5171eb2208d9e6ab7186ae457973da564f1fd45b241c15596035f55034c3995a587b4471068076839420df947f10ab2fc211732d768c135d63cc5eeda1bdfc780e7ed90855fa5a364e63f529703cd0f691b0b6a41232bfd1c1f61ef6b16ed3b9055ca888c8ebcd16a0623ede9e4e37b7d6175e3d0ddba8e7d87639eb8b0ba246131951a581575f1adf4c598a9f2f087d5eb2a0a5834d8cb12b0ad76d9381a838ccfbfcc20bbb970474c48677f10aa57be1d607d5b049d397178035f7f3393cd9000336c83218850ecd64142a22f7ae7e6a7e62013d6d105eb7c862e13979698681d44121ee9e2e552315d4d3913ff7bcd90d6bed72d50107a971a37d5a1d75efeebf03cc91239b7e427fba8df6b79674c15acd2093289fe6155063af81d85840abf4635f66083b3707d34b2149dfdf95cb4deb71e1574118c242b160c770347e6b1f135a985e89fe8e6d7f40281cfb6dc05cd8b9d4f6680c0863acb34516092acdf2bea67f54ab4282ba2d898287f34d9384e335b2ddbb87aaea8cadb8f0b397e99a68a7a214fae5a1f56c95bcd901534c23cd5cff3c168813d7fa1191dd7437c96b07324a7b21b48e205b859dcd080bd62ab7cca4bd7a73959218d0eeb21c887483201eaf3afb19efe1741b57332c5441685a7bb8324dde85faafc785312b58aabef2eef6a8048663bf13db9ae9edd4b1dcebc99890693f11b354b1f1aad19b66251b4bcaed0daed73b87dedd140fd680e7d3355362844d1d7ba2ae6be7ffae59d7b3c679b890448b0de1acf591abfe6f3096794b7e142e0ac0862ab8cb76eb79b17d1138be3747f907c3f11c636a0f0e0d315d1ff05aab0ce62fbac03a2b4ddeac7ee192bba2da93b7a926271f6d594aa14de2c294ad0c77770a624d1ce24cc8d8f5e9b629604fa7897f0cbd641f76a85dc8df33b5715eb100e30e53b85110d2252c22575a7365eb08006b4d62d305e780101965094ce2aaad170df470870e687fb280b772d41ad5d470b71e256af3a0d2c02df95821d38f28cdff26fa7a3f6e920edbd3174d2d2bde854ef68dae8a0a4a63753c825930903a2ca75d4321bad0ad9ff6852f94dd04972a45bb9625b3726dfbcc959e85242f0d327b181aee0fdab7af064dd97151b131a5c4a51a66692cbbd9f1348a16470cedef1b255e172cd2b15184177ad43744de941869af884ff8e59ef0e63ac5e1b99c851e0f915359ce12d9c380bb6f9c2bc773267157afeda7abcc120a31a1b72af6662bff7f5f194dad00b4ebfdcbb4dfc39854412db1ae99b449d741f841239159ea467cf1e38b95bcb7603ebcb400cb31410b2a4e25126caade0019bf667cc998bc4582578da0f8a6268f6d114ccf9dd8379995e8be1b934bb5645d72f97e05628129a7d2bc548e08796341f43dc3c9fcbe89d8284dc6633bee0d17e99f600425f0172b6bc478f5117dadf15e36e850ecc0ca75664ef8e4877a44b4ffa22a6f1d6719f8d81f9937928caa0690b77406a3298aaf446e2f78343267399bb7f64c60f82bf5d07210281eaad09a3810790720c98a041332c809be7aea1480b9e5eb989085c23b4aee75143068def3e89d1c417b63321e68d340a1472d2504088c17cd75de0e700508c55a7246ca9a762cc50ca35cbcaa7dcf4ae3264c32ff2cd67566ed501fb8182b5f16c58295783f3b2b554b06aae700f198c71ad7519868c1e6fbeb0246569b04beeb8b71bcbb9af93372bee365efb1d7424689e8241b1dc346a73a84b5773487f388356b8dbec1a108846e3f8dc74865b156e8ad18b353efc4ad0b11412a381fec8f5d45678b4f8b6805913e7aff71acf9052ae3b73e41e19668f9b53bfd75b778970831b6891a78ffe0d4863e62cbbf6cf8c085032864479cd3a250842984dcc2860f057f86c8e2d4d2afefb8a45b7d5b8c94e752f369a1b434c827cd26cd0276a8b40019a95ebe7c16de4c1ce8efbd5c70e0c507631818aa4fbc937d212e428aefa895069656babdbd921af974da32c49f4ca6d1e1e28319b427c8bad4d650809c673ec6073770b4097e5700a8071110fd07acbc5a59f8d7b0735a98fd40ce03718a9a93c035948859215c59f54343b08bfd95a35d73c5f09a9ebe63c509fe8443fa74e6efd0fd87defc7cb16725ce3c3d5f7664cfe253faf2cbeb307052dd2269b6266acdb31e2006b9355f673ca5c9cb907605ce071824254b139607a069531f9598f4040ddeb9cd018e9dfa1808032dfb65a4af0820da810a7b58fbb65ac8e65b017a40ec2d445a5c7b78d1f0e717b19427ef1fe6cc08c5e9da5a7d1d508fd939854589dcba8d75ff3d8d1c1fb28af1ed6900bcd4cedbe42fd6243c81264fe81be756bfd71ebcd4d96bd7ec50a676bc57e130bd8da21bb6e888eb6c8402516f6fe6dfe25be9a3e33f2cdbed9de00efb867cbe80ec2309458f41924b967d254166e5a0a5f776395214a67900d180704b9fb09f9c4c4c62fd382fcd5efe099e22d2c82f198a39d193f65b68e09454e2ab8f2d7413c64563742f1c34ca9285e501bff5efa30a0da946f875d23162eaa53c4008bed38e9a190b08ff8bfb6bfb91553c4c329fc73b8be308b00347dee2afdc08bab311c75386f452b706d1820c9038998924665010a548c09743a16167b0b09373b5cd2fb1da4f6c9ea5b1f1dd7775f6fcb23eab4fd1990364dacb2a1656b9bcf1c4866b7222872a3a3a03d397499222a3f31a35d3aeaf6a6d39f0fbee1e0f6e1e10ba0774f15f245d955cc8132d86c2d768f8a06274caa5a12c46e9e08ee556c1da49830f1e6c0a0c53a9ef1489c3fba0251c3e6839e891ac298108f3ed05066e48b8bda2c5f6e691c7a7425b7019e0a547f6560a0af41831a4a790c3a8eac9a3a9119da3eef85cb12f3f3115f04ae95534ac847b4ee2cc2fc43cdba382ecae7c4f499ce1be1ca1907313ff665c2fd7d4c8f36716f33b6861f5cf3f1c878feadfa9a664b8d629a16c750c466326a951efaa830e4f328270041f2ca0be49f0affe5806b94b027033f008957e83d167d6fe4168ec4fb79385cc06e257bba807ecfccaba56cf751dac996b7a347d36ec52b0f5d16425402416c735530bd7c545f8c753fb3b1054b82bc368ef4ac3dcc9c3273b39a10000"], 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000001e00010a0001e50000000000001b"], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="b70000001a000000bca30000000000002403000040feffff7b1af0ff0000000079a4f0ff000000001f030000000000002e030200000000002604fdffffff000e61141800000000001d430000000000007a0a00fe0000001f6114140000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f2440000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c9494963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c88629a6c921c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fbf05b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71ca3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b60f132a2bf8a858392f34072d99aee0ec70aa6d75096e608d97ac4b7bfa2e0ae3e59718e7a7691a98b1334e34553300000000000000000000000000000000062c7cf52e9624806a4833e1c0059e5a703ab9c2e9b38779270dc5e80af75d509b1a31fe6ed3f8c0172659256dc88de4e377c8a07e95ec5549ae47dc43b93a159a201be254048b9e0857ea3c736c761e686f9b3d0690f035617a12055b2cb3a03794d67b95e7f4fc6af323120c09d0503c8ce92e869e22bb2590299ad76d541f844d32f96184f74d433793bbd75ec15fb1497ce835445212421cb4e3ce08395c9055a2"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 1.446406726s ago: executing program 1 (id=9155): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$nci(r0, &(0x7f0000000040)=@NCI_OP_CORE_GENERIC_ERROR_NTF={0x0, 0x1, 0x3, 0x7, 0x6, 0x1}, 0x4) (async) socketpair(0x28, 0x5, 0x6c62, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$team(&(0x7f0000000080), r2) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) (async) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x8, 0x9, [0xef, 0x9, 0x5, 0x0, 0xcd, 0x7, 0xffff, 0x9, 0x200]}, &(0x7f0000000180)=0x1a) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000001c0)={r5, 0x3a, "e172c9a6f5bd6bf92e883c4ed12f7cd9918f519c45e79eb4bbabb4401afd60a098c69e5db9cea6f47116a01ddb83bdd692a6251d410fc2cb62e6"}, &(0x7f0000000240)=0x42) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000380)={r2, &(0x7f0000000280)='\xa4():\\\x00', 0x101000, &(0x7f00000002c0)={@_ha_fsid={[0x0, 0x3]}, {0x241, 0xb968, 0xc, 0x5}}, 0x2, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000340)=0x4}) (async) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7b, 0x7b, 0x5, [@datasec={0x2, 0x6, 0x0, 0xf, 0x3, [{0x4, 0xff, 0x7fffffff}, {0x1, 0x8001, 0x5}, {0x1, 0x1000, 0x291e}, {0x1, 0x5, 0x8}, {0x1, 0x0, 0x200}, {0x2, 0x1, 0x2}], "eabff1"}, @restrict={0x5, 0x0, 0x0, 0xb, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x3, 0x9}}]}, {0x0, [0x5f, 0x0, 0x61]}}, &(0x7f0000000580)=""/234, 0x99, 0xea, 0x0, 0xffffffff}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000700)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000740)=[0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0], 0x0, 0x88, &(0x7f00000007c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x68, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000a00), &(0x7f0000000a40)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x10, 0x11, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0xd}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='syzkaller\x00', 0x7ff, 0x0, 0x0, 0x41000, 0x48, '\x00', r4, @fallback=0x6, r8, 0x8, &(0x7f00000006c0)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, r10, 0xffffffffffffffff, 0x0, &(0x7f0000000ac0)=[r11, 0x1], 0x0, 0x10, 0x100}, 0x94) (async) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg$unix(r7, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000bc0)=""/61, 0x3d}, {&(0x7f0000000c00)=""/189, 0xbd}, {&(0x7f0000000cc0)=""/235, 0xeb}, {&(0x7f0000000dc0)=""/157, 0x9d}, {&(0x7f0000000e80)=""/123, 0x7b}], 0x5, &(0x7f0000000f80)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}}], 0x1, 0x1, &(0x7f0000001100)={r12, r13+60000000}) (async) clock_gettime(0x0, &(0x7f0000003c00)={0x0, 0x0}) recvmmsg$unix(r15, &(0x7f0000003a80)=[{{&(0x7f0000001140), 0x6e, &(0x7f0000001380)=[{&(0x7f00000011c0)=""/243, 0xf3}, {&(0x7f00000012c0)=""/139, 0x8b}], 0x2}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000013c0)=""/141, 0x8d}, {&(0x7f0000001480)=""/76, 0x4c}], 0x2, &(0x7f0000001540)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x148}}, {{&(0x7f00000016c0)=@abs, 0x6e, &(0x7f0000002980)=[{&(0x7f0000001740)=""/97, 0x61}, {&(0x7f00000017c0)=""/86, 0x56}, {&(0x7f0000001840)=""/231, 0xe7}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000002940)=""/48, 0x30}], 0x5, &(0x7f0000002a00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf8}}, {{&(0x7f0000002b00)=@abs, 0x6e, &(0x7f0000002fc0)=[{&(0x7f0000002b80)=""/40, 0x28}, {&(0x7f0000002bc0)=""/58, 0x3a}, {&(0x7f0000002c00)=""/129, 0x81}, {&(0x7f0000002cc0)=""/135, 0x87}, {&(0x7f0000002d80)=""/64, 0x40}, {&(0x7f0000002dc0)=""/88, 0x58}, {&(0x7f0000002e40)=""/198, 0xc6}, {&(0x7f0000002f40)=""/93, 0x5d}], 0x8, &(0x7f0000003040)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x148}}, {{&(0x7f00000031c0), 0x6e, &(0x7f0000003440)=[{&(0x7f0000003240)=""/127, 0x7f}, {&(0x7f00000032c0)=""/133, 0x85}, {&(0x7f0000003380)=""/5, 0x5}, {&(0x7f00000033c0)=""/85, 0x55}], 0x4, &(0x7f0000003480)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{&(0x7f0000003500)=@abs, 0x6e, &(0x7f00000039c0)=[{&(0x7f0000003580)=""/245, 0xf5}, {&(0x7f0000003680)=""/59, 0x3b}, {&(0x7f00000036c0)=""/9, 0x9}, {&(0x7f0000003700)=""/169, 0xa9}, {&(0x7f00000037c0)}, {&(0x7f0000003800)=""/220, 0xdc}, {&(0x7f0000003900)=""/131, 0x83}], 0x7, &(0x7f0000003a40)}}], 0x6, 0x102, &(0x7f0000003c40)={r16, r17+60000000}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000003d40)={&(0x7f0000003c80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003d00)={&(0x7f0000003cc0)=@can_delroute={0x3c, 0x19, 0x300, 0x70bd2d, 0x25dfdbff, {0x1d, 0x1, 0x1}, [@CGW_DST_IF={0x8, 0xa, r9}, @CGW_MOD_OR={0x15, 0x2, {{{}, 0x7, 0x0, 0x0, 0x0, "a08a49f35fadcf36"}, 0x2}}, @CGW_DST_IF={0x8, 0xa, r9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8014}, 0x4000) setsockopt$RDS_GET_MR_FOR_DEST(r14, 0x114, 0x7, &(0x7f0000003e40)={@pppoe={0x18, 0x0, {0x2, @multicast, 'veth0_to_hsr\x00'}}, {&(0x7f0000003d80)=""/97, 0x61}, &(0x7f0000003e00), 0x68}, 0xa0) (async) r25 = openat$cgroup_netprio_ifpriomap(r19, &(0x7f0000003f00), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r25, &(0x7f0000003f40)={'wg0', 0x32, 0x35}, 0x6) sendmsg$SMC_PNETID_FLUSH(r21, &(0x7f0000004080)={&(0x7f0000003f80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004040)={&(0x7f0000003fc0)={0x60, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x8810}, 0x20004894) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000040c0)={r23, 0x0, 0x25, 0x16, @void}, 0x10) write$6lowpan_control(r24, &(0x7f0000004100)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e) (async) r26 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r22, 0x84, 0x77, &(0x7f0000004140)={r6, 0x80, 0xa, [0x5, 0x7, 0x80, 0x100, 0x8, 0x6, 0xe, 0x25e, 0x81, 0x5]}, &(0x7f0000004180)=0x1c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r26, 0x84, 0x7c, &(0x7f00000041c0)={r27, 0x0, 0x9}, &(0x7f0000004200)=0x8) r28 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004280), r18) sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x1c, r28, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4) (async) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r20, &(0x7f0000004440)={&(0x7f0000004380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000004400)={&(0x7f00000043c0)={0x1c, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000040) 1.38018094s ago: executing program 2 (id=9156): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f00000030c0)={{r0, &(0x7f0000000100)='bbr', 0x200000, &(0x7f00000001c0)={@align=0x8, {0x0, 0xf, 0x4, 0x401}}, 0x10, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0x3}, 0x6, &(0x7f0000003000)=[{0x2, 0x3ff, &(0x7f00000002c0)=',!\x00', &(0x7f0000000300)="1a577dd4b8267764dab58482f1bc3756169baa9d613e305f79eb3dc134124df89c63169b753895ae6a1dac512208cefcfd4a1f8a845bfeba94b470c12d76016dc86fe21b060e74e0c34bb0f148118e0665503be4664b01dfbe467673c065af05dc90f0f3a21b2582ae65d4233c", 0x6d, 0x20}, {0x1, 0x6, &(0x7f0000000380)='bbr', &(0x7f00000003c0)="3e11737306c4d52b66624ca23f2465d4eb424eed60790a51a50cfabb581aeb90dcf41b49cd6b8957875754e9fefb716ffe0c134c8a1a4f415fbf95c18fb711f3e8b3790d831310e92809be3f04015d80e19f5f74092cb2736de3704ace1603fbb8f3fd4831b8f6946dad4ca952463f40a8eb769137fde14e5a2737", 0x7b, 0x1a}, {0x3, 0x98e3, &(0x7f0000000440)='{!+\x00', &(0x7f0000000480)="0a509fb5846b6713e1b2f79d0fe45b5392a9bce7fb69d794cbd462b7d200f8aa3ff4f90c1bf9504cc032dabe0309ffac85f265f0d32dec2901918e1451fcd261", 0x40, 0x22}, {0x2, 0x2af, &(0x7f0000000540)='bbr', &(0x7f0000001e00)="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", 0x1000, 0x2a}, {0x1, 0x35a3, &(0x7f0000002e00)=',\x00', &(0x7f0000002e40)="8f1389fea9a66e58c0a037b7aec75be519955bb437a5b8afb428fdf4307937977ff1d72e89beb925dfaefd20e3cf6de6bed210ffbe25854cda900eee96d6f71b99e5ce8a874404824b76d69bdcb5191a04d03c98984eb08cad2e2f9a85bdaca8cdc071a454a4b07d3f734c1ca3657dc441ad6a882867de8dcf5ee6aad1191957688c5bf286d76069cdcb8cf2314400f20c79e756b6da47bac213c8d608975d8a99747e6f56b90d78e245a644236c2e309102ac84d0517927ae93c00faa4a6be97a80f5718d54a61a1847fb225e7579b59e63a222214eeeae1f98c6bd97ce2555685f2e3803da01", 0xe7, 0x30}, {0x1, 0x4, &(0x7f0000002f40)='bbr', &(0x7f0000002f80)="7dcb71f0fa31d17bbf0615cad6919e760d3410e267198f54dacfa8334dc41d0b6412f2ebe4ae400923836b82d0e47fc47ee10bc9e543d115aaa6a8e561a200b6e89a0c", 0x43, 0x30}]}) write$tcp_congestion(r1, &(0x7f0000003140)='dctcp\x00', 0x6) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e0000ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24a13cb604000000000000000000000000000000c7aa5035897b20a6c23f1fc4af2990c07f784b985a3de7740bd338487029", 0x121}, {&(0x7f0000001340)="641a6a2b8647e6b5208cf9599b1d890aa834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0186c6e0cd8e068d542bab5c97caba72ac16f5bc7741f5158ec0938626e40f5b86baaab3ced2903dddcca7363065dcaba065147a234a37da348f1b4674d76b0c1082e3b05a7b4ae2b09fe66b31b14359ebbcf827f84113e16dca1d6be0c2cc7", 0x90}, {&(0x7f0000001980)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8ae", 0x30}], 0x4}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)="31fdffffffffffffff74098b2e5e55a1828636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d7c9c8c569334e9547e1e343b451d9025c4e153612d4674b9411fb4de29559900bcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a487b0d736", 0xc3}], 0x1}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f00000014c0)="fa98151f51a5cd01a13cca732ada71da23eb1dbc1760afa900e0a7e5bd78d1aae07a60bfa40ae396026e0e2659a1e1332ac789341255aedc3223c16d66ce458c85f3c4372aa7f0ba420f8f046adc689289630718809ab9af264df85d4598d711f214896cc1b41c69a9868bfe470ae01ca415120bfb", 0x75}, {&(0x7f0000001540)="417e1fcc84ba36d92eced7b76463a43ac6c3c9eb0773f03237cfb1c88c6f5c3ff8deb0767df1a43ed83eee5101fafe74471d69f3cdc3446cf9ded344d8fd6aa575be67f8f82a441939bdba0aa19c5c1438243d72a5b568bbc12cc965c0c639ee7fbb0c980242dc0b2856e9142f0909a2d9f4388e6c9be93c703892c4e14676278a121f86052dbb6694647460a139614be42fb89d5b1da1a07994b7509c5dcc1c63cba1acb07b44c35d557db3b025ebb1fd5688a91a7ff0e10cc58cad5b11d03df3e48d9a92f6ae06ace666b610b4ae069289", 0xd2}, {&(0x7f0000001640)="22c042cdf9bd9c9359e29aca901441bdb830df717384916ecdcc1d0484ed77459f0c21dac7fa1210c9447c04280f15323586b95a25dd43caf003485edf322562a00b43181318ae3bfcea72de3037f7df5359077a896792091a036aba4e0c3ef293f697c44727b36f3bf42cb3c71530bbed474ad5a846a8de5b34607b0faf9b2dcec2bc82ae6e71ef130dd6405279774a6f69daca2a", 0x95}, {&(0x7f0000001700)="da6f8d3b8b961886541a2204f8c0d33c36d1a4f5230c10bc47e5a9480deb3d8e31decade1af4cd5eca9e7df889a7b9b93e94df020eb3c8d310d5d262a992ffe343813df0c4fa48ce044eacf256ddcc410e8f5cf757acb16e43fc4bb9253fa884d993a2407b8e5edb41b712aaed60028ae756b61dc2abc81b0a1c5958ed4a626994fb1f653ebbefb398db1cfd2e8be44018ceadc4ea416548f0808782996b05f5a6cbb38b2a82b0f666604d438f3733f1a623260acc46016bee26ff084f3dc09ff53ef902e39a146072ddbc0f920a014bb84051621793a41503850a", 0xdb}], 0x4}}], 0x3, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000000c0)="f43945ca864918caf5375823337eb7c72fc5b6b5161a2c0ca175ff29e6e88a7cc3f70000000000", 0xffffffffffffff73, 0x340080d1, 0x0, 0x0) 1.353731335s ago: executing program 5 (id=9157): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000580)={'wpan0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r3) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000740)={0x2c, r4, 0x607, 0x70bd27, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x2c}}, 0x8000) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r4, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x4004000) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0x10, 0x20, 0xac60, 0x5, {{0x14, 0x4, 0x1, 0x5, 0x50, 0x67, 0x0, 0x8, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xb}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0xb, 0xf8, [@rand_addr=0x64010102, @empty]}, @timestamp={0x44, 0x18, 0xe8, 0x0, 0x2, [0x5, 0x1, 0x2, 0x2, 0xfffffffd]}, @timestamp_prespec={0x44, 0xc, 0x9e, 0x3, 0x0, [{@rand_addr=0x64010101, 0x4ed5}]}, @generic={0x83, 0xb, "6a9edcb5bdfb4791c7"}]}}}}}) sendmsg$inet6(r7, &(0x7f0000000040)={&(0x7f00000000c0)={0xa, 0x4e20, 0xfffffffe, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x0, 0x29, 0x32, {@empty, r8}}}, @pktinfo={{0xfffffffffffffff9, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x16}, r8}}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x58, 0x2, '\x00', [@hao={0xc9, 0x10, @remote}, @enc_lim={0x4, 0x1, 0x8}]}}}], 0x60}, 0x0) (async) sendmsg$TIPC_CMD_DISABLE_BEARER(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="030253fcfffffddbdf250100000200000000024100000018001369623a7665745540c16fda85237821fcb39014ef"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x200000c4) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r9) sendmsg$NLBL_CIPSOV4_C_ADD(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34010000", @ANYRES16=r10, @ANYBLOB="01000000000000000000010000000400048008000200010000000800010000000000080108805400078008000500000000000800050000000000080005009d2c690d0800050000000000080005000000000008000500000000000800050000ebffff070005"], 0x134}}, 0x4048014) sendmsg$NFC_CMD_GET_SE(r9, &(0x7f00000004c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8005}, 0x20000000) 1.121612049s ago: executing program 1 (id=9158): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r1, 0xfffffffc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e00000004000280080040"], 0x3c}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'ip6gretap0\x00', @local}) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x8, 0x6, 0x9) r4 = socket$key(0xf, 0x3, 0x2) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r5, &(0x7f00000020c0), 0x0, 0x41) sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="fe090009070000002abd7000fedbc141101e1a00e0000002000000000000000000000000fe8800000000000000000000000000011e00100068c5b07ac344064dc999d2c9fa8837971251060ed0374c673e80177a9e7adc8979c140a637476c81252a249889a7273b3ed7d938014c04e4daa9d83c7e4a05436bfc410bae12de135e3c9bc552db163372c4ae2f3d7373381072e1fbb89bd046f35988293fe89cfe4b8e92fb580c4063006479666d706889a2547213dedf0a57ad013dfa4193c604147604e84acb4dc95e8881017752c13c1eab5a227bd99b2148cf03ad583ba57ec44abaca6ed44b883b26554518dc38b482e3bc285e44d4910df72217f91387a3ec976644ebd2758b83cbf95942f8d660d3de86eab19bb64c36e8e1528de9de115e9ad8b7ff7da6744547f889dc74d19d4fe619b34245174bddf02130e2a35c7da09358207874539936d7d56877fbc149ed242f297206ce622096248ac722f0481ce6c4449d849f6ac903c5792846b449b97b321dd9dc656bfd35cd81d94e9f7139cf17da31f5281753c68c3cf41404c1e30b147eb3b11cc8d86284b3ed68969184052b"], 0x38}}, 0x8000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_hsr\x00', 0x0}) socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=@newtclass={0x24, 0x28, 0xff, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x5, 0xd}, {0xffff, 0xc}, {0xffff, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x9, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000200000000000000000000000d600010025000000851000000100000095000000000000001840000002000000000000000000000095000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) 1.120908322s ago: executing program 2 (id=9159): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x7, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x1, 0x80, 0x6, 0x0, {{0x7, 0x4, 0x2, 0x5, 0x1c, 0x65, 0x0, 0x8, 0x29, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0x7, 0xd4, [@remote]}, @noop]}}}}}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r6, 0x0, 0x8, &(0x7f0000000300)=0x2, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0xac5e, 0x0, r1, 0x7, '\x00', r5, r2, 0x0, 0x0, 0x1}, 0x50) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) getsockopt$sock_int(r8, 0x1, 0x2f, 0x0, &(0x7f0000000040)) shutdown(r7, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000100)=[@in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e21, @remote}], 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_tracing={0x1a, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000700)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x1a, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x8ad4, r4, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 1.030816384s ago: executing program 5 (id=9160): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2f}]}}}, {0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "910d000000"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x104}, 0x1, 0x0, 0x0, 0x180}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x41, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003480)={&(0x7f0000000180)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010004200000fddbdf2502020200140002006e7230000000000000000000000000000900010073797a3200000000090003"], 0x70}, 0x1, 0x40030000000000, 0x0, 0x4000005}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000041000701fefeffff00000000017c0000040042801400018006000600800a000008001600", @ANYRES32, @ANYBLOB="040002"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0x2000c800) 963.537982ms ago: executing program 4 (id=9161): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000380)="fc5cc45c490704289349a8af1d25", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f00000000c0)=0x1, 0x4) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x891b, 0x0) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, 0x0, 0x0) sendmmsg(r4, &(0x7f0000005a00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)}}, {{0x0, 0x0, 0x0}}], 0x3, 0x41) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r5, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0c00000004000000040000000700000000000000", @ANYRES32=r7, @ANYBLOB="000000002194734af763a2cfdc000000000000000053a103abd9923c81ac378fac1bb1bb36b83f82e4fb78bc7bbd350641b685d198462740b5dd7b8d6fdcf9a3898035cbf4f60675b98093ad49a82d53151c1f90c3da2ae67bfe2f5461f50c8fc7dfdedb", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x7}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0xfffffffe}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x1f, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@map_fd={0x18, 0x6, 0x1, 0x0, r7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @alu={0x4, 0x1, 0x6, 0x3, 0x2, 0x244}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x10, 0xfff, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r7, r8, r7, r7]}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r10}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r11, &(0x7f0000000080), 0x0}, 0x20) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) 821.41654ms ago: executing program 1 (id=9162): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, 0x0, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000300)={'filter\x00', 0x0, 0x0, 0x0, [0xca94, 0x3c90, 0x2c91, 0x97, 0x669fb6a2, 0xffffffffffffffff]}, &(0x7f00000003c0)=0x78) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0xb) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000380)={@multicast2, @local, 0x1, 0x2, [@local, @loopback]}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x80}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007500)={0x28, 0x3f, 0x107, 0x70bd2b, 0x0, {0x3, 0x7c}, [@typed={0x4, 0x110}, @nested={0xd, 0x1, 0x0, 0x1, [@generic="6d14ff356ee88bd200"]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc040) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f00000000c0)={0x1f, 0x0, 0x1}, 0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001000800010000000000080002007f0000010c0002800500010000000000080007400000000004000f80"], 0x68}}, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x400448cb, 0x0) sendto$inet(r0, &(0x7f0000000100)="f43945ca864918caf5375823337eb7c71a2c0ca175ff29e6e88a7cc3fe1db5369670d18fdbd702f700000000007c0ac16ee4f1ba28c23d00f0484a94618666fc6878613931fa4e2105d5e51484ee0c8230230720482e62c8e1595a4eaa1f5a66062ee517d185861826564e988a9ac91da3ce9374379503dfa5d7bff070249a23357a193a54b7515fffc71408dd979014a5fbb18eedbddad1edc89ceca17987b4", 0xa0, 0x14008891, 0x0, 0x0) 821.014954ms ago: executing program 2 (id=9163): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0xff, 0x200, 0x4, 0x2, r2}, 0x10) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x2c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 545.515504ms ago: executing program 5 (id=9164): r0 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x9, 0x79, 0x7fff, 0x4, @dev={0xfe, 0x80, '\x00', 0x3d}, @local, 0x700, 0x7, 0x80000001, 0x5}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vxcan0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c00)={&(0x7f00000004c0)={0x724, r0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r1}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r2}, {0x278, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffffce36}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8826}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}, {{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x170, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r10}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r11}, {0x180, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r12}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x800, 0x2, 0x5}, {0x7, 0x5, 0xa, 0x5}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xff, 0x6, 0x6, 0x8}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8f}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x724}, 0x1, 0x0, 0x0, 0x4c044}, 0x11) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000c80), &(0x7f0000000cc0)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000dc0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000d40), &(0x7f0000000d80)}, 0x20) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=@bloom_filter={0x1e, 0x8, 0x3, 0x808, 0x12000, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x5, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000e80), &(0x7f0000000ec0)}, 0x20) ioctl$XFS_IOC_PATH_TO_HANDLE(r13, 0xc0385869, &(0x7f0000001040)={r13, &(0x7f0000000f40)='&-\x00', 0x100, &(0x7f0000000f80)={@align=0x3, {0x800, 0x0, 0x3ff, 0x8}}, 0xdecc, &(0x7f0000000fc0), &(0x7f0000001000)=0x3}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r13, 0x4048587b, &(0x7f0000001500)={{r13, &(0x7f0000001280)='hash\x00', 0x2000, &(0x7f00000012c0)={@_ha_fsid={[0xff, 0x7]}, {0x8, 0x7, 0x1}}, 0x3, &(0x7f0000001300)={@_ha_fsid}, &(0x7f0000001340)=0x3}, 0x1, &(0x7f00000014c0)=[{0x1, 0x1, &(0x7f0000001380)='](-)/\x00', &(0x7f00000013c0)="0a18d21a70f249ec707c6ee67ebc5f952799a65d9cf96ffea874df0a5eb89e25ff1a45271f61a07f9e5f504723eac38cddb5215c69f854b415631c8074d10ba88b9bacd1d5a21b288e1d9d25d8b73b5e6f6da2e07cbcd032f86f47d2d02bf96911ad2cfc2f6ffa6f5db4e51277c705b377f02ba3cad44ce672fc091ac5fec545d170471b05db3c44d4ecc07f97ad361e36db0aca9801d9210cea4b8a93af903659d6d29dbe102e5ce7ac1003dad15dd066cf765b6b76168821492c4a335f4ea0d2e1b7b05bcdd6c09a4a88a28ee8c3b68470509845825b96fadfde6efa10eee661715816eded5fe1a466ec33", 0xec, 0x1a}]}) ioctl$XFS_IOC_PATH_TO_HANDLE(r13, 0xc0385869, &(0x7f0000001700)={0xffffffffffffffff, &(0x7f0000001600)='\':$+{\x12.\x00', 0x0, &(0x7f0000001640)={@_ha_fsid={[0x1d87, 0xfffffff0]}, {0x4, 0xcf, 0x101, 0x4}}, 0x6, &(0x7f0000001680)={@_ha_fsid}, &(0x7f00000016c0)=0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0x2b, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xd}, [@map_val={0x18, 0x0, 0x2, 0x0, r14}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff58bf, 0x0, 0x0, 0x0, 0x1}, @ringbuf_query, @tail_call={{0x18, 0x2, 0x1, 0x0, r15}}, @map_val={0x18, 0xb, 0x2, 0x0, r16, 0x0, 0x0, 0x0, 0x400}, @alu={0x7, 0x1, 0xd, 0x2, 0xb, 0xffffffffffffffe0, 0x1}, @map_val={0x18, 0xd, 0x2, 0x0, r17, 0x0, 0x0, 0x0, 0x400}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r18}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}]}, &(0x7f0000001200)='GPL\x00', 0x200, 0x13, &(0x7f0000001240)=""/19, 0x41100, 0x3, '\x00', r11, @fallback=0x22, r19, 0x8, &(0x7f0000001580)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000015c0)={0x1, 0xf, 0x5, 0xfffeffff}, 0x10, 0x0, r20, 0x7, 0x0, &(0x7f0000001740)=[{0x1, 0x3, 0x6, 0x3}, {0x2, 0x1, 0x7, 0x3}, {0x4, 0x5, 0x0, 0xc}, {0x2, 0x3, 0xc, 0x7}, {0x2, 0x5, 0xc, 0x4}, {0x2, 0x1, 0x8}, {0x3, 0x1, 0x9, 0x6}], 0x10, 0x3}, 0x94) sendmsg$NFT_BATCH(r19, &(0x7f0000001f00)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001ec0)={&(0x7f00000018c0)={{0x14}, [@NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x201, 0x0, 0x0, {0xb, 0x0, 0x2}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSET={0x17c, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFTA_SET_EXPR={0x54, 0x11, 0x0, 0x1, @redir={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_REDIR_FLAGS={0x8}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x18}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x51}]}}}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x37}, @NFTA_SET_USERDATA={0xde, 0xd, 0x1, 0x0, "8bc35087abb9cfdb67361d229a59187a33c408cec05df134ddbf725d1f82f6e0d215ad474531554afc63636f7f45cf2088df6a11213646b86a918b51c1d9b5b7443260b804ebee4413173deeaf7292591361171139b4cc0705843cae02ffa9b2503d9d3b53a328be939658c817bd942ea4b7c0a55716cd098c63c63f0e7179f4339c3ab914f9f98ee07d91c8d972024f8ea6e2ceefd65552edcf5dfcc700ee277167d68e40d5e225092e641bf771fb824c299156ef4a6f4a4b8e8fb6637adf0caa2a8d1285e0e29baee880b8593278add7a399243e9eeaf06da6"}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ID={0x8}]}, @NFT_MSG_DELCHAIN={0x1c, 0x5, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xe0a0}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x15}]}]}, @NFT_MSG_NEWRULE={0x384, 0x6, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x5e}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x892f}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2ec, 0x4, 0x0, 0x1, [{0x2cc, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x2bc, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_FROM_DATA={0x8c, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x5b, 0x1, "6ef31878917a9b0a1537a1b6006e77cbed815a4b4e4b52ffd2671b141b94513bbf503af3935c75f1a2c80f7e65f8247161c7727cbd30a0cb1ebb7f2c01216b079ae13359b9d560acff17ac9636bd68e4ba31c868be5cff"}]}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_TO_DATA={0x20c, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x71, 0x1, "e9d9430e8c119ae7e1d9316ee566e1f98d924c7ee36d8f8429f24c51ad1e4f6449be7e798273708fb997495e796436aa64e173a59c07ac6c536e37f2be4039237e7bc0a5bc2157b032d7e776602824eff86eacde018ecaa3702d5ea98aefd87d11c9f1a62165bb98a4ab9bfd83"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x48, 0x1, "f138b7b9b198449968f520d42d9bff7a88c32da6498ac69c2aaae223a406445254786dff34e6bdc41a77f6ce9e6322d15e95f82ab10a097d94967b1c1600d9873c884057"}, @NFTA_DATA_VALUE={0xd1, 0x1, "5488ec2f2cbfdc5cd677ec2b584f103bb4da26153a2fb4d5287e5541664eaf38b8568dacab522685287c5b847b0f63fa45f14a423f87aa37d46cca41f127f08dd21d95d439ad0206977f5230e9bc8c97463883d225b00a7a2094a6668066481e80e2a27e84b545bc2affd044bc927ff40fab8f06ad5ee801a961281827baa6dfbddb7b7325287848f5ba01b552bf4f47a9ed40477c026f6f4c9532d7b6bc460e8b3f5bb3e5f2d4cbb8cdbde907964cd480487388cb616eb0fde44219c2c4263d45db6f5ae6530b08135c7f99f0"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x4}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1a}]}}}]}, @NFTA_RULE_ID={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x8}}}, 0x5fc}, 0x1, 0x0, 0x0, 0x4000014}, 0x40041) r21 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002200)={0xffffffffffffffff, 0xe0, &(0x7f0000002100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001f40)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000001f80)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001fc0)=[0x0, 0x0, 0x0], 0x0, 0x3d, &(0x7f0000002000)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000002040), &(0x7f0000002080), 0x8, 0x3, 0x8, 0x8, &(0x7f00000020c0)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r21, 0x89f2, &(0x7f00000022c0)={'ip6tnl0\x00', &(0x7f0000002240)={'syztnl0\x00', r22, 0x4, 0x5e, 0x7f, 0x1, 0x11, @mcast1, @mcast1, 0x80, 0x7, 0x4, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r18, 0x89f3, &(0x7f0000002380)={'ip6gre0\x00', &(0x7f0000002300)={'syztnl1\x00', r1, 0x0, 0x4, 0x0, 0x400, 0x7b, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x7800, 0x9, 0xff}}) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000002400)=@o_path={&(0x7f00000023c0)='./file0\x00', r18, 0x4000, r15}, 0x18) sendmsg$FOU_CMD_ADD(r18, &(0x7f0000002580)={&(0x7f0000002440), 0xc, &(0x7f0000002540)={&(0x7f00000024c0)={0x60, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x40054) 395.183139ms ago: executing program 4 (id=9165): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x160, 0x1170, 0x1398, 0x160, 0x1170, 0x2a0, 0x1398, 0x1398, 0x2a0, 0x1398, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x13}, @loopback, [0x0, 0xff000000], [0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x18}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@unspec=@addrtype1={{0x28}, {0x94, 0x804, 0x9}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'geneve1\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="d57edec766fcaa9893237e2ebf5320724d418454799740f5fba998276bfb91943d28c1edbea97bf7dbc9c1034f0355b35b36384688f0f6dbef9fdf23c16e17bdb5dc09bd2d4e558ba743cab8efc3bf398f3cd5bf9f121f14dff6e6fe960d5b281a216a10c4eba858f899dd4e05d52118a7d5eb4c0148a6659e95d4e598e0d994e99d2472210681d3255a3ff4bccd5f32caa24021780936cf46abea5b6f7bcfacd704c43461d75a5e649df50021ad7f62c84f170d9a71", @ANYRES32=r0, @ANYRES32=r0, @ANYRES16, @ANYRES16], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x78, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}, @NFTA_SET_EXPR={0x3c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x20}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xffffffffffffffff}]}}}]}], {0x14, 0x10}}, 0xc0}, 0x1, 0x0, 0x0, 0x810}, 0xc4) 334.381103ms ago: executing program 5 (id=9166): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x81, 0x2, 0x9, 0x1, 0x0, 0x0, 0x0, 0x8, 0x1, 0x5, 0x1, 0x9, 0x0, 0x22}, 0xe) (async) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @local}]}, &(0x7f0000000440)=0x10) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xffff, 0xc}, {}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004004) (async) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000003c0)={r1, 0x60, "ffb28860edc67076f33125eded820d956198c60a1fcfe2fe5c6fc8d85cf5f56d305804c9aa4238b11bc95e569a3ab2045c0bf9b6671def9214e385b827a3aa9cdd7390ab918c1e2a636377e70b7a9515f0092f5f7f6ee60efe9a3ca74ecbb45f"}, &(0x7f0000000480)=0x68) (async) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001240)={0x20, 0x140e, 0x1, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x800) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r7 = socket(0x400000000010, 0x3, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x280, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x6}}, @qdisc_kind_options=@q_taprio={{0xb}, {0x118, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x5, [0x12, 0xa, 0x5, 0x6, 0x6, 0x2, 0x2, 0x0, 0x1, 0x4, 0x5, 0xe, 0xf, 0x0, 0xf, 0xd], 0x1, [0x9, 0xdd0, 0x4, 0x80, 0x0, 0xeff, 0x3ff, 0x1, 0x81, 0x5, 0x140, 0x0, 0x200, 0x2, 0xe47, 0x17], [0x6, 0x3ff, 0x0, 0x1, 0x7, 0xfffa, 0x8, 0x2, 0x100, 0xa8c1, 0xb, 0xe, 0x3, 0x2, 0x1, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x44, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8}]}, {0x4}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xf}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xa95c}]}]}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x3}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xed0d}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x0, [0x7, 0x10, 0x3, 0x4, 0x8, 0x0, 0x4, 0x2, 0xe, 0xd, 0x5, 0xd, 0x4, 0xd, 0xd, 0x5], 0x1, [0x7fff, 0x9, 0x6, 0x6, 0x7fff, 0x7, 0x8000, 0x2, 0x2e34, 0x1, 0x5, 0x3, 0x6b67, 0x7ff, 0x2, 0x7], [0x1, 0x9, 0x2, 0x7, 0x4, 0x800, 0xa2, 0x2, 0x0, 0xffff, 0x800, 0x9, 0x9, 0x7, 0x9, 0x8]}}]}}, @qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x9, 0x6, 0x7}}}}, @qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x80000001}}, @TCA_STAB={0xf4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x81, 0x3, 0x1, 0x2, 0x0, 0x5f07, 0x3, 0x5}}, {0xe, 0x2, [0x1, 0x361, 0x4, 0x2, 0x4]}}, {{0x1c, 0x1, {0x5, 0x3, 0x200, 0x4a, 0x1, 0x0, 0x6, 0x5}}, {0xe, 0x2, [0x1f3, 0x1, 0xff7f, 0x2, 0xd]}}, {{0x1c, 0x1, {0x40, 0x81, 0x5, 0x10001, 0x2, 0xfffffffb, 0x4, 0x8}}, {0x14, 0x2, [0x4, 0x9, 0x9, 0x4, 0xf238, 0x79e, 0x3, 0x0]}}, {{0x1c, 0x1, {0x6e, 0x6, 0xdc0, 0x7fff, 0x1, 0x9ea8, 0x6722, 0x1}}, {0x6, 0x2, [0x5]}}, {{0x1c, 0x1, {0x6, 0xc, 0x7, 0x97e, 0x1, 0x40, 0x8, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0x3, 0x6e, 0x1e, 0x9, 0x1, 0x1, 0x101}}, {0x4}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x280}}, 0x0) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000002400000200000000000000000c000000a050e350b161ef92b1187bfd8fa17889cd3acba704a7a6314cdfcf7397f43184a040a909a4c331946e3a1a4fb382cd9ae210ca85fee5e6aa64fc73e0656e45f6"], 0x14}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x800}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r11 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/pid_for_children\x00') ioctl$NS_GET_OWNER_UID(r11, 0xb704, 0x0) (async) socket$inet(0x2, 0x2, 0x1) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r12) 170.789039ms ago: executing program 4 (id=9167): syz_emit_ethernet(0x145, &(0x7f0000000200)={@multicast, @multicast, @void, {@ipv4={0x800, @dccp={{0x11, 0x4, 0x0, 0x0, 0x137, 0x65, 0x0, 0x2, 0x21, 0x0, @empty, @local, {[@generic={0x86, 0x5, "89e322"}, @cipso={0x86, 0xd, 0x0, [{0x2, 0x7, "6b262541d5"}]}, @cipso={0x86, 0x1e, 0x2, [{0x6, 0xf, "3d6dcfe977d46130569d1a04dd"}, {0x0, 0x5, "d68de7"}, {0x7, 0x4, "b7c5"}]}]}}, {{0x4e21, 0x4e21, 0x4, 0x1, 0x3, 0x0, 0x0, 0x8, 0x3, 'DT0', 0x6, "dbbf0c"}, "24515c5184bcf8f445ef72e28f15b5064da4f5833e513f5f1c8e3ac4aa3796fe47f08d7961bebee5370cfed79dbf13b64e21c9a32073dd5c6a52b186bfc05aa55938cb9be0fb7025c42efe5679a8b29a96d06d77884946aef161c0917f4b953c367fde87df0284f515068fe2c23b1812703f83a4e05d3c7b8146611310a6bbf95fbb08857eb00ba3602f0822411b8839791fb997cca32a43d80d410c867f4c5e5baf3b92f54e7cf78b0651d1af9ae7f90d3446201d8823caf2b52acff303322e8456dcdca4deda2e4aa33422025a2f44fae21ae0623b8997526f82e856ddb723ca94d6"}}}}}, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f00000000c0)=@data_frame={@a_msdu=@type10={{0x0, 0x2, 0x9, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x81}, @random="7642bd7f3b05", @device_a, @initial, {0xb, 0xa}, "", @value={0x9, 0x1, 0x0, 0x1, 0x8}}, @a_msdu=[{@broadcast, @device_a, 0x74, "c8ffecc27a38dfa814af2e58a461629fd54e727cd2e7f3712e1ccb4db852685a12ff88f64847e90df32c0978fef406191e2494154d41eafead8bada23d28babcadd274005d37bc6ced76ed9065e52e0ca692c74b289f4716b2fd62cd60798b20e4c7f4272c5b4865ce9009abb1ea9e9999a6c57a"}, {@device_b, @device_a, 0x90, "745f5e656d6b650761d080510cd6064d018c40ed1f3018b0492f1a064e8402349c0042002c59416f290be1deef3d50963b20b0841dd68cc59232936be6cd1bed4b6f58834c025d0b978ae08c9820404b34b384d6af12cd1e79323d963cee5dda1cf999fc2135a38b5ac44823e5c4fbff28e842144ebc7cad741555b03c76181285eca51dd2e7ce95a0c815ab4a8daa7c"}]}, 0x13e) 0s ago: executing program 5 (id=9168): syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004510005c0000000000119078000000000000000000004e22004890780300000002000000a0fcc73b5ef32a884b2033728e956f3f20d16734af14637c85eff9728117c4c62162a8a6a5340ad7eccbe4a1c68802028d6ef0a4df21f4a93f543d5cd331e00d8588ba3dd9e7defe947b96bb461d799eba89ad7af102752261e027af89ce445ff021a7a5457fc79c6078e4c4421c6417a4c299"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'dvmrp1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x1, 0x80, 0x5, 0x1c31, {{0x22, 0x4, 0x0, 0x21, 0x88, 0x67, 0x0, 0x8, 0x2f, 0x0, @multicast2, @local, {[@rr={0x7, 0xf, 0x45, [@private=0xa010102, @broadcast, @broadcast]}, @cipso={0x86, 0x62, 0x3, [{0x1, 0x6, "88bc1127"}, {0x6, 0xf, "4e4decce52a4dcca6a6ffed84e"}, {0x7, 0xc, "768aa55330159a0bd36b"}, {0x2, 0x11, "e8fc43825b8ea04aa78d9cfc1c2f32"}, {0x7, 0x10, "05566b4d96e0a9e73a2a593e0642"}, {0x0, 0xf, "02f0e05fa427fe3e925977ab80"}, {0x6, 0x7, "4dc8fddc35"}, {0x5, 0x4, "88ea"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000500)={'ip_vti0\x00', r2, 0x7800, 0x8, 0x3ff, 0xff, {{0xc, 0x4, 0x3, 0x1c, 0x30, 0x67, 0x0, 0x8, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}, @empty, {[@noop, @noop, @ssrr={0x89, 0xb, 0x94, [@empty, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0xc, 0x44, 0x1, 0x8, [{@multicast2, 0xe67}]}]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001ac0)=@newtaction={0x14dc, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}, {0x950, 0x1, [@m_mirred={0xd4, 0x15, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x85, 0x8, 0x0, 0x9, 0x9}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x80000000, 0x7, 0x90, 0x7a8d}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x4, 0x8, 0x3, 0x17}, 0x6, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xf, 0x9c8, 0x8, 0x7fff, 0x10000}, 0x4, r2}}]}, {0x26, 0x6, "ad6a651771711d51aff4427ad30ba48e89602b788a7a9260e21aa4ca6447622e1c82"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_csum={0x98, 0x6, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x6, 0xffffffffffffffff, 0x2, 0x500}, 0x26}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x81, 0x6, 0x0, 0x9, 0x4}, 0x52}}]}, {0x32, 0x6, "cee49843dbf39f771368c1a3c3e50b70de792912c98cfdcfc10121a1af453f3c7163a61b32bbf947cc94e64a401d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_skbedit={0x7c, 0xa, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x3, 0xfff3}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}]}, {0x30, 0x6, "a1fdacee20f07b0de08cb0d1a5feef962f7c746ce7b7380148187a75644f4c2d1e8d1fde36aed15137f26746"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_connmark={0x110, 0x11, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x1, 0x6, 0xd48, 0x4}, 0x6}}]}, {0xc3, 0x6, "bfea7e7f66204bfe3668ba09c7299df03722f7a792af5e12b3002bb7636bda61cac3031d95b210efd3fc2f786234593ecb8c306c84634c18a53bd846180f205a375439a0596f313834e3d19ed6a610d6743eb2a229c26bfc4ce5cbdc930f197a24a2a66f17c027cff489db4fa7269640c0214f7921e25ecc4e78543bf31833f47cba4deb133b3cb06ce3611c8518a82db2748bcbba84f3fd9aa2db25b2e4a2415e95e3c0ebfc1ca4757966e33326fd8d00e3193769a9638497036e43b2301d"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_tunnel_key={0x12c, 0x1e, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x3}]}, {0xf4, 0x6, "468083471bba98f048dd73a4653cd1d9fa2d64c916814728f073989cb67e511947885fe44f94ba98303fbadc8638b447cdb3dbf03b85867e8dfb93862d8e93b8d1fcecbef45650e4d6c1d04791be4abb3e146aa62bb052fb4dd7cc4d091a13f41d4054b018ffb9d962710d73a44b641b428b213c40392a4c361dea7304fe0b68ed4560999c41432552de58c6f7e8e3bed92b216583fecc7819939e0f3ad5e57a2edaa46d2188201264c7b1c49be1e8dc85f5db5b9ee262b74cd19075b671194aab154a83741c7bd145995b145c0b9e9dd2917e6ce40d87c585126264c7a68943b23c2b740e9561a0887684a46bf79031"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_nat={0x1dc, 0x12, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7ff, 0x10000, 0x8, 0x4, 0x500a}, @empty, @multicast2, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffffc, 0x8, 0xffffffffffffffff, 0x3, 0x9}, @local, @private=0xa010101, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0xd010, 0x20000000, 0x40, 0x8}, @local, @rand_addr=0x64010100, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x8001, 0x5, 0x10000, 0x1}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x401, 0x1, 0xe06, 0x3}, @broadcast, @dev={0xac, 0x14, 0x14, 0x2d}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x400, 0xa, 0xffffffffffffffff, 0xc04, 0x8000}, @private=0xa010102, @empty, 0xffffffff}}]}, {0xc4, 0x6, "872f7fd89230d2be7118bcd7f78923d8fbf89551bc6ab54c2449c027e2443c4fc0fdfd387a81ac298f968260857e690db0bf6e60d2bcbd99b0944e2030b6369fd8d84a2bcbf75e7e0a2e9929efa3c0690db9ccbfdb50dab2191eda56d082cadc9b73ff3f9d64589deac7a0a6db99a03d1392602b5ab2b0907acd0bc2065e890d26eb2220c1e28d12a8950593a5446644a640462d5335200133ed31ae1a4b5b0965da79b019368c4f70518f1b961ee1384a857e86cfcb81793aadc927dcc5d8dd"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0x17c, 0x19, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x2, 0x8, 0x6, 0x1}, 0x6}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x6, 0x2, 0x4}, 0x54}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xb, 0x4, 0x0, 0x8, 0x101}, 0x4c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x9, 0x7, 0x8, 0x7}, 0x7e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x80000000, 0x2, 0x2, 0x1}, 0x1}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x9, 0x3, 0x1, 0x8}, 0x4b}}]}, {0xa7, 0x6, "589fdc86474695ab99421a3d46a15fe4fe46fccbf31ed2b1ee7ab1a8c56fbe758d45d1e76e10ef023f45e5d446035e9205da8848130ccb86799abc538e67a5be97f250b6d5cc643d8d5b357f00defb8ebe882d0400c0c82cf6a1fedbf601d3aa85fa5d9bf9eb231524a8884a95d27c6cf1d02fd824de5a8681f827fb227ae6aaa28edbf417fcd9305725541a09e059296a508607fbe9054d4eb11399651bbb9e943797"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ctinfo={0xec, 0xe, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xfffffffc}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1000}, @TCA_CTINFO_ACT={0x18, 0x3, {0xfffffffc, 0xfffffeff, 0x5, 0x7, 0xfffffffd}}]}, {0x98, 0x6, "7031f50e0729f20384fa8f36d8c163b65c4878c754c84a061f07df5806c668b68120f50f0a15ffbbbb9806077043dc33ee6030305068380bb5f4bfd4637c1c169530da35c6b22b3d1dc11b374f061206b538fb57ddfe0dca39a9dc6cf950bc84ac26c6648d4e0ba7e5037ce0f0ce2c0764dc0eb26c0068df1218ca1e9356f2c303891901ddbae4d3460bf6cc9ec72051c2e3f3ed"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_simple={0x94, 0xf, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x7, 0x3, '\xb1$\x00'}, @TCA_DEF_DATA={0xb, 0x3, 'mirred\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x6, 0x6, 0x8, 0x4}}, @TCA_DEF_PARMS={0x18, 0x2, {0x10001, 0x1, 0x20000000, 0x0, 0xfffffff9}}]}, {0x22, 0x6, "2b22bd78687874654c4e45ae0b478e330af1cb4e00b89b63a91e6605aafe"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0x50, 0x16, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @empty}, @TCA_CT_LABELS_MASK={0x14, 0x8, "373555ec362303db5079cc728dcff30d"}]}, {0x9, 0x6, "43685a2cd6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x1}}}}]}, {0x6d4, 0x1, [@m_ife={0xa0, 0xa, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x5}]}, {0x70, 0x6, "ada605cc810a4eeb084dacc384f51ceb3643ed1035f365ad60696d23f05209ffd59f29d8bc271d426cf856eff9656096848a28356d239134e540b0f607978c50a09c700020bfa33fe89ae37d3a4adbdedfb3b6117bca284ffac0fc1e7b9c8eb9f2fa776b84db498ae28afc19"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_simple={0x160, 0x11, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x90, 0x4, 0x3, 0xff, 0x5}}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x8, 0x1000001a, 0x4, 0xe811}}, @TCA_DEF_DATA={0x6, 0x3, '}\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xfffffffa, 0xe, 0x20000001, 0xffffffff, 0x8}}]}, {0xe3, 0x6, "4b58b34a8450516f88d71ce0ea813029b4038a3e2bacfe206a9a5b1763583ef0f027771bd0134d4ac6ce61fa9a15db311804716eb29e869a2517ddb02034d01adc4f445b6d8cfd86864e142b5ef0c09b1577b04a045c9f751f647d2118dab51933b8f72de90c49bc6a533d50a635cb3d40069a072a2d9c71562f1963099a014f536f7405112e38b2500dcb67eeecd7cc982b1057e3005bf542259c937ec94ac7853d1b97771f1149e78ad3b75604e79a79a368b84b22493e9df313a2a2012b6a9802fd32205183ce4a58a68687119be8fb6d6ea911794d667d2722318fbb8c"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_vlan={0x158, 0x1, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xbec}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x115}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x60e, 0x4, 0xffffffffffffffff, 0xe, 0x8000}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x10, 0x7, 0x3, 0xd7f}, 0x1}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x8000000, 0x1, 0x0, 0x9, 0xffff}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x47b}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x1de}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0xa0, 0x6, "b60586544beba6ff052a49b8fba95398d3a05d9c0cfc66a8f5146067b2808d55534603bd6dface616d8222890792001747d26012c3dd9cd2d5c240c42427bc0a4690624e9b02cac6e98d5d9069183239a0ba11d20517ea11cd5d0051112daa9313e6b0696eb4948fae4179df10011e315a3799481d51a036a091c192c2eb20a3f5beb53f3284ea4460505fecb66cbc370988128b753e0f8929e86587"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_ife={0xa8, 0x1f, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x7fffffff, 0x2, 0x5, 0x3}, 0x1}}]}, {0x57, 0x6, "3a50fbd68adc2d1de3daeb2436a857d701e6e8c6a6868615864bdb3aaee53d38a558b60dedf101155127b9ab7bd3fb53de3199fa26bf5f28ecef9c24cd73574ca4f8ce86b8716abc02aafbb862691b9fafb7f0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_sample={0x11c, 0x1a, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0xfff, 0x7, 0x7, 0x7, 0x3}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x3, 0x4, 0x8, 0x9d}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8000}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4}]}, {0xae, 0x6, "fa55fcad3b5ed2f39a6c769f064a23ea06509503240a4289828273b892db58852bcf451e1607e17dcbb7fc10d9b011a852fe4e00f6e96964da17c13472c09babd0b381b296ca240044cf9fbe8d2cd54f4c068e003a1bec361a690f0e36e814e11f0294d0d35856d8a54ce9b6e0463ab85ffcb58de4ef17a9d2c36343540a2adc75e898143d0d1fb57573c814d36e1255ddc43b0ac91191c3dbf4b0ec5f1b3ff2ae7b97b424f0df6f5a7c"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_tunnel_key={0x120, 0x12, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x4, 0xd4d, 0xc, 0xa9, 0x4}, 0x1}}]}, {0xd4, 0x6, "ebe2ae1334cd9978570ddc4e1e63440dd8366a8ebeee505da2ee5c0a242aeccb8ff6a1ba6da99f03ead4d93c01a3f9dc5f59d9e41790563f66ad8ee695f7bd7cacafc877b9d7c41d4ca58cee8dcdb82ab6b85801b35c8e23ae704d14abb67da40500675116b5f817f843eb1ecaa016b956d8fc644a519115edcc71c032e991b8d24de09f7cac064baa8aea2e77fc95450db0fcef902adc8ba2bf6cde1a6be9aeb755c3d2733cbcc833db476c005f5d9cd628f8a0e298411f2a477e7492c73657c13b80803b9d47c2fe6f9b70ef46d113"}, {0xc}, {0xc}}}, @m_connmark={0x94, 0x1d, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x1402, 0x8, 0x6, 0xf8}, 0xffff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x60f, 0xffffffffdffffffb, 0x4, 0xa}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0xffffffff, 0xffffffffffffffff, 0x4, 0xa9}, 0x6}}]}, {0xd, 0x6, "a2df8a65856c7d4b08"}, {0xc, 0x7, {0xb43c3d1f8563a0a, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, {0x470, 0x1, [@m_nat={0xa0, 0x4, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x5, 0x0, 0x0, 0x1000}, @remote, @dev={0xac, 0x14, 0x14, 0x23}, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffffd, 0x81, 0x10000000, 0xfffffff7, 0x4}, @multicast2, @rand_addr=0x64010100, 0x0, 0x1}}]}, {0x27, 0x6, "8311bc5af1a2cd61135af3c501cdf8bdf8b0ecb2db304837b377667aec437456003e97"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_vlan={0xb8, 0xb, 0x0, 0x0, {{0x9}, {0x80, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x6, 0xfffffff8, 0x8, 0x4, 0x993}, 0x3}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x9, 0x10, 0x2, 0x80}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x6, 0x2, 0x1, 0x6, 0xb236}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xed4}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x159}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xd71}]}, {0xf, 0x6, "aa96e98e261b2e6e8fe5a6"}, {0xc}, {0xc, 0x8, {0x6, 0x3}}}}, @m_xt={0xdc, 0x7, 0x0, 0x0, {{0x7}, {0x64, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_TARG={0x32, 0x6, {0x4, 'raw\x00', 0x5, 0x7, "695e393ecc1f6757"}}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0x51, 0x6, "ffb66351c8db810091fce17e32f6a4707c8496c628797dbbf1ba0d9fd6d595d6eb9844a5139f7f84ca98cf8988f06cbc828c4734e698c3f47e3579b56be490f747f3f00f4161fb7ebd786b7938"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbmod={0x124, 0x6, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x40f199f, 0x1e027cd3, 0x0, 0x6, 0x3}, 0x5}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}]}, {0xaf, 0x6, "bb8c4268f9d413e7ba154eb1b3f10c3ca1964d621a5f7138f51fa7bebcd09823fd87cc974802af41750c4f4b4411001769e7ae21de5bec099b9643864c3020638d7fd0d926814175689599b393c2123de804e397cb063706c555e1ea6e24b1fceed3f8472579a4a9cb7a4d1e94397fc4e6e78ea14d21bb6aeda70e1cebb3f21c9a7fc8ec920a407b139ea246a7ce8d4699fb3e9a6c2e0bc307e28c9572da46ff98d64150d8a55a75e05f2b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x4}}}}, @m_mirred={0x114, 0x1b, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x7, 0x6, 0x5, 0x7}, 0x2, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x4, 0x10000000, 0xff, 0x3}, 0x1, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x100, 0x3, 0x8, 0x9, 0x6}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0xc9d7, 0x6, 0x101, 0xc37}, 0x4, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x70000000, 0x44, 0x0, 0x57}, 0x3, r3}}]}, {0x45, 0x6, "d7fee5156c644dbf21c58499a632db647fd9185708e1ad654888ad04a46fc5ee6fed0447ff65864f20c348cecdf14e40a36719cc9b08e339d6a5a39ef680181e3c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x14dc}}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f00000000c0)='\xb1$\x00', 0x400000, &(0x7f0000000100)={@align=0x9, {0x200, 0xff81, 0x2, 0xe870}}, 0x5, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x95}) write$tun(r4, &(0x7f0000000240)={@val={0x0, 0x8809}, @void, @ipv4=@tipc={{0x5, 0x4, 0x3, 0x9, 0x45, 0x68, 0x0, 0x7, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @payload_named={{{{{0x31, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, 0x2, 0x800, 0x0, 0x0, 0x8, 0x5, 0x2, 0xfffd, 0x3, 0x4, 0x4e24, 0x4e24}, 0x4, 0x4}, 0x1}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}, 0x49) kernel console output (not intermixed with test programs): [ T534] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 950.842531][ T547] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7371'. [ 951.038851][ T551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7372'. [ 951.066280][ T552] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7373'. [ 951.083668][ T551] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7372'. [ 951.403779][ T563] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7375'. [ 951.423891][ T563] netlink: 'syz.0.7375': attribute type 2 has an invalid length. [ 951.440246][ T563] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7375'. [ 951.892012][ T581] bond9: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 951.923902][ T581] bond9 (unregistering): Released all slaves [ 951.933845][ T588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7382'. [ 952.717210][ T617] netlink: 'syz.4.7393': attribute type 12 has an invalid length. [ 952.755966][ T617] netlink: 'syz.4.7393': attribute type 29 has an invalid length. [ 952.890998][ T627] : renamed from 00ªX¹¦Dö» (while UP) [ 952.993798][ T627] IPv6: NLM_F_CREATE should be specified when creating new route [ 954.828500][ T702] __nla_validate_parse: 9 callbacks suppressed [ 954.828525][ T702] netlink: 160 bytes leftover after parsing attributes in process `syz.3.7415'. [ 955.091523][ T714] syzkaller0: entered promiscuous mode [ 955.108467][ T714] syzkaller0: entered allmulticast mode [ 955.732011][T13424] IPVS: starting estimator thread 0... [ 955.835828][ T738] IPVS: using max 28 ests per chain, 67200 per kthread [ 956.027823][ T745] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7426'. [ 956.256759][ T749] bond9: (slave bridge4): Enslaving as an active interface with an up link [ 956.269155][ T751] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7426'. [ 956.332477][ T751] bond9: entered promiscuous mode [ 956.339377][ T751] bridge4: entered promiscuous mode [ 956.350105][ T751] bond9: entered allmulticast mode [ 956.357947][ T751] bridge4: entered allmulticast mode [ 956.367907][ T751] 8021q: adding VLAN 0 to HW filter on device bond9 [ 956.628304][ T768] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7434'. [ 956.841361][ T775] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7437'. [ 956.892280][ T775] netlink: 'syz.3.7437': attribute type 39 has an invalid length. [ 957.059112][ T781] netlink: 'syz.1.7438': attribute type 10 has an invalid length. [ 957.091243][ T781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 957.113456][ T781] batadv0: entered allmulticast mode [ 957.130930][ T781] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 957.472805][ T782] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 957.507563][ T782] bond_slave_0: left allmulticast mode [ 957.552097][ T782] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 957.570844][ T797] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7441'. [ 957.605629][ T782] bond_slave_1: left allmulticast mode [ 957.626237][ T782] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 957.650727][ T782] batadv0: left allmulticast mode [ 957.661550][ T782] bond0 (unregistering): Released all slaves [ 957.768903][ T796] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 958.001698][ T804] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7443'. [ 958.039376][ T804] netlink: 'syz.0.7443': attribute type 9 has an invalid length. [ 958.190521][ T808] SET target dimension over the limit! [ 958.456762][ T819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7446'. [ 958.508643][ T823] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 958.619180][ T819] netlink: 88 bytes leftover after parsing attributes in process `syz.1.7446'. [ 958.668513][ T820] netlink: 144 bytes leftover after parsing attributes in process `syz.3.7448'. [ 959.438259][ T858] syzkaller0: entered promiscuous mode [ 959.448796][ T858] syzkaller0: entered allmulticast mode [ 959.949687][ T882] netlink: 'syz.2.7463': attribute type 4 has an invalid length. [ 960.183156][ T892] __nla_validate_parse: 4 callbacks suppressed [ 960.183176][ T892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7467'. [ 960.470239][ T903] tc_dump_action: action bad kind [ 960.492337][ T900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7471'. [ 961.169899][ T926] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7477'. [ 961.201272][ T926] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 961.231840][ T926] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7477'. [ 961.389758][ T930] vlan3: entered allmulticast mode [ 961.412946][ T930] bridge2: entered allmulticast mode [ 961.422764][ T926] bridge2: port 1(erspan0) entered blocking state [ 961.446215][ T926] bridge2: port 1(erspan0) entered disabled state [ 961.456520][ T926] erspan0: entered allmulticast mode [ 961.478709][ T926] erspan0: entered promiscuous mode [ 961.494521][ T926] bridge2: port 1(erspan0) entered blocking state [ 961.501134][ T926] bridge2: port 1(erspan0) entered forwarding state [ 961.661386][ T946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7481'. [ 961.727557][ T946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7481'. [ 961.798434][ T946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7481'. [ 961.937666][ T963] netlink: 'syz.3.7484': attribute type 1 has an invalid length. [ 962.002425][ T963] 8021q: adding VLAN 0 to HW filter on device bond10 [ 962.103105][ T968] bond10: (slave gretap2): making interface the new active one [ 962.173875][ T968] bond10: (slave gretap2): Enslaving as an active interface with an up link [ 962.632746][ T988] netlink: 'syz.4.7492': attribute type 1 has an invalid length. [ 963.066033][ T1003] sctp: [Deprecated]: syz.1.7496 (pid 1003) Use of int in maxseg socket option. [ 963.066033][ T1003] Use struct sctp_assoc_value instead [ 963.441881][ T1013] netlink: 240 bytes leftover after parsing attributes in process `syz.1.7498'. [ 964.286112][ T1054] lo: entered allmulticast mode [ 964.302494][ T1052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7509'. [ 964.330889][ T1054] lo: left allmulticast mode [ 964.354078][ T1052] netlink: 252 bytes leftover after parsing attributes in process `syz.4.7509'. [ 964.512990][ T1061] netlink: 'syz.3.7512': attribute type 11 has an invalid length. [ 964.638592][ T1073] 8021q: VLANs not supported on ip6tnl0 [ 965.112714][ T1087] syzkaller1: entered promiscuous mode [ 965.126282][ T1087] syzkaller1: entered allmulticast mode [ 965.190166][ T1091] __nla_validate_parse: 3 callbacks suppressed [ 965.190190][ T1091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7519'. [ 965.510345][ T1094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7520'. [ 965.529109][ T1098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7522'. [ 965.618935][ T1104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7523'. [ 965.721899][ T1104] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 965.793651][ T1104] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 965.814682][ T1104] gretap2: entered promiscuous mode [ 965.835331][ T1104] gretap2: entered allmulticast mode [ 966.122843][ T1114] bond0: (slave gre0): refused to change device type [ 966.197951][ T1120] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 966.779296][ T1131] siw: device registration error -23 [ 967.052011][ T1144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7535'. [ 967.078955][ T1144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7535'. [ 967.313109][ T1154] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7538'. [ 967.404230][ T1154] block nbd3: NBD_DISCONNECT [ 967.425924][ T1154] block nbd3: Send disconnect failed -32 [ 967.460733][ T1158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7540'. [ 967.481016][ T1154] block nbd3: Send disconnect failed -32 [ 967.496576][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 967.547812][ T1162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7541'. [ 967.926247][ T1167] syzkaller0: entered promiscuous mode [ 967.975263][ T1167] syzkaller0: entered allmulticast mode [ 968.321179][ T1185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7548'. [ 968.335144][ T1183] netlink: 'syz.4.7547': attribute type 2 has an invalid length. [ 968.841016][ T1211] netlink: 'syz.3.7554': attribute type 2 has an invalid length. [ 969.194961][ T1221] nbd: must specify a device to reconfigure [ 969.318896][ T1226] tipc: Trying to set illegal importance in message [ 969.441025][ T1234] netlink: 'syz.3.7563': attribute type 2 has an invalid length. [ 969.704089][ T1241] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 969.851294][ T1241] bond0 (unregistering): Released all slaves [ 970.393980][ T1264] __nla_validate_parse: 8 callbacks suppressed [ 970.394000][ T1264] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7570'. [ 970.396781][ T1263] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7572'. [ 970.464606][ T1268] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7571'. [ 970.481463][ T1263] bond2: entered promiscuous mode [ 970.496086][ T1269] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7571'. [ 970.513231][ T1263] 8021q: adding VLAN 0 to HW filter on device bond2 [ 970.559838][ T1264] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7570'. [ 970.681103][ T1263] 8021q: adding VLAN 0 to HW filter on device bond2 [ 970.713472][ T1263] bond2: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 970.756900][ T1263] bond2: (slave ip6gre2): Error -95 calling set_mac_address [ 970.781276][ T1281] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7575'. [ 971.143292][ T1299] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7580'. [ 971.159822][ T1299] openvswitch: netlink: Flow key attr not present in new flow. [ 971.395980][ T1304] IPVS: set_ctl: invalid protocol: 59 172.20.20.38:20000 [ 971.409879][ T1313] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7582'. [ 971.642660][ T1319] netlink: 'syz.3.7585': attribute type 1 has an invalid length. [ 971.722253][ T1332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7585'. [ 971.776436][ T1319] bond11: entered promiscuous mode [ 971.782340][ T1319] 8021q: adding VLAN 0 to HW filter on device bond11 [ 971.800145][ T1319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7585'. [ 972.487777][ T1362] Cannot find add_set index 46338 as target [ 972.965107][ T1375] sock: sock_timestamping_bind_phc: sock not bind to device [ 973.103622][ T1384] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 973.290559][ T1387] netlink: 'syz.4.7601': attribute type 1 has an invalid length. [ 973.798660][ T1390] netlink: 'syz.3.7602': attribute type 12 has an invalid length. [ 975.327573][T28150] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 975.350488][T28150] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 975.363276][T28150] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 975.377111][T28150] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 975.387148][T28150] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 975.591419][ T1367] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 975.791985][ T1410] netlink: 'syz.3.7606': attribute type 28 has an invalid length. [ 975.829619][ T1410] netlink: 'syz.3.7606': attribute type 3 has an invalid length. [ 975.849747][ T1410] __nla_validate_parse: 6 callbacks suppressed [ 975.849768][ T1410] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7606'. [ 976.246728][ T1401] lo speed is unknown, defaulting to 1000 [ 976.279018][ T1401] xfrm0 speed is unknown, defaulting to 1000 [ 976.303156][ T1401] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 976.678729][ T1445] netlink: 'syz.3.7615': attribute type 1 has an invalid length. [ 977.029585][ T1454] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7618'. [ 977.353312][ T1464] netlink: 6548 bytes leftover after parsing attributes in process `syz.3.7620'. [ 977.415638][T28150] Bluetooth: hci4: command tx timeout [ 977.493581][ T1464] bond0: option miimon: invalid value (18446744071829782528) [ 977.513867][ T1464] bond0: option miimon: allowed values 0 - 2147483647 [ 977.526569][ T1470] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7622'. [ 977.581405][ T1470] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7622'. [ 977.668968][ T1401] bridge0: port 1(bridge_slave_0) entered blocking state [ 977.677063][ T1401] bridge0: port 1(bridge_slave_0) entered disabled state [ 977.686454][ T1401] bridge_slave_0: entered allmulticast mode [ 977.695763][ T1401] bridge_slave_0: entered promiscuous mode [ 977.706213][ T1401] bridge0: port 2(bridge_slave_1) entered blocking state [ 977.713546][ T1401] bridge0: port 2(bridge_slave_1) entered disabled state [ 977.722187][ T1401] bridge_slave_1: entered allmulticast mode [ 977.731720][ T1401] bridge_slave_1: entered promiscuous mode [ 977.813694][ T1479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7624'. [ 977.829144][ T1401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 977.910154][ T1401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 977.972921][ T1485] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7626'. [ 978.062721][ T1401] team0: Port device team_slave_0 added [ 978.086442][ T1477] lo speed is unknown, defaulting to 1000 [ 978.114461][ T1401] team0: Port device team_slave_1 added [ 978.161619][ T1496] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 978.180395][ T1497] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 978.197893][ T1496] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7628'. [ 978.199791][ T1499] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7628'. [ 978.209625][ T1477] xfrm0 speed is unknown, defaulting to 1000 [ 978.246253][ T1477] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 978.255001][ T1401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 978.263880][ T1401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 978.293285][ T1401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 978.318320][ T1498] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7627'. [ 978.358108][ T1401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 978.366472][ T1401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 978.406257][ T1401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 978.577055][ T1401] hsr_slave_0: entered promiscuous mode [ 978.586164][ T1401] hsr_slave_1: entered promiscuous mode [ 978.595104][ T1401] debugfs: 'hsr0' already exists in 'hsr' [ 978.601169][ T1401] Cannot create hsr debugfs directory [ 979.181198][ T1511] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 979.494338][T28150] Bluetooth: hci4: command tx timeout [ 981.018422][ T1491] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 981.033685][ T1516] __nla_validate_parse: 1 callbacks suppressed [ 981.033707][ T1516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7633'. [ 981.209620][ T1401] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 981.256659][ T1401] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 981.281157][ T1401] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 981.324059][ T1401] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 981.348483][ T1401] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 981.355817][ T1531] netdevsim netdevsim4: Firmware load for './file0/file0/..' refused, path contains '..' component [ 981.471396][ T1401] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 981.575167][T28150] Bluetooth: hci4: command tx timeout [ 981.587998][ T1401] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 981.645910][ T1401] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 981.753635][ T1544] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 982.103598][ T1568] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 982.118279][ T1401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 982.197193][ T1401] 8021q: adding VLAN 0 to HW filter on device team0 [ 982.232318][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 982.239647][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 982.386839][ T1573] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 982.426654][ T1581] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7648'. [ 982.464646][ T1581] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7648'. [ 982.504113][ T3371] bridge0: port 2(bridge_slave_1) entered blocking state [ 982.511400][ T3371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 982.581788][ T1573] netlink: 'syz.4.7648': attribute type 39 has an invalid length. [ 982.620396][ T1573] hsr_slave_0: left promiscuous mode [ 982.847062][ T1573] hsr_slave_1: left promiscuous mode [ 983.083446][ T1593] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 983.292810][ T1605] xt_addrtype: ipv6 does not support BROADCAST matching [ 983.628545][ T1624] netlink: 'syz.3.7661': attribute type 1 has an invalid length. [ 983.650916][ T1624] netlink: 'syz.3.7661': attribute type 3 has an invalid length. [ 983.659633][T28150] Bluetooth: hci4: command tx timeout [ 983.682753][ T1624] netlink: 172 bytes leftover after parsing attributes in process `syz.3.7661'. [ 983.693570][ T1624] NCSI netlink: No device for ifindex 813332851 [ 984.223371][ T1401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 984.697373][ T1668] dvmrp0: entered allmulticast mode [ 984.838210][ T1676] netlink: 'syz.1.7674': attribute type 2 has an invalid length. [ 984.889500][ T1676] netlink: 'syz.1.7674': attribute type 1 has an invalid length. [ 984.960568][ T1676] netlink: 'syz.1.7674': attribute type 2 has an invalid length. [ 985.006744][ T1676] netlink: 'syz.1.7674': attribute type 1 has an invalid length. [ 985.039040][ T1676] netlink: 'syz.1.7674': attribute type 2 has an invalid length. [ 985.070573][ T1676] netlink: 'syz.1.7674': attribute type 1 has an invalid length. [ 985.137102][ T1401] veth0_vlan: entered promiscuous mode [ 985.208683][ T1401] veth1_vlan: entered promiscuous mode [ 985.342844][ T1401] veth0_macvtap: entered promiscuous mode [ 985.377194][ T1401] veth1_macvtap: entered promiscuous mode [ 985.450594][ T1401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 985.491796][ T1401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 985.541486][ T3290] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.565853][ T3290] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.599569][ T3290] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.624100][ T3290] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.899745][ T1711] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7685'. [ 986.179821][ T1721] netlink: 'syz.2.7687': attribute type 2 has an invalid length. [ 986.213384][ T1721] netlink: 244 bytes leftover after parsing attributes in process `syz.2.7687'. [ 986.261850][ T3371] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 986.297744][ T3371] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 986.568519][T17205] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 986.593317][T17205] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 986.675899][ T1745] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7694'. [ 986.707623][ T1746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7693'. [ 986.717416][ T1745] bond0: ARP target 8.4.0.0 is already present [ 986.733963][ T1745] bond0: option arp_ip_target: invalid value (1032) [ 986.782907][ T1749] pimreg: entered allmulticast mode [ 987.083816][ T1747] bridge0: port 2(bridge_slave_1) entered disabled state [ 987.091664][ T1747] bridge0: port 1(bridge_slave_0) entered disabled state [ 987.381946][ T1776] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7699'. [ 987.531427][ T1747] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 987.550596][ T1747] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 987.732891][ T1747] bond1: left promiscuous mode [ 987.745497][ T1747] h: left promiscuous mode [ 987.751076][ T1747] bond4: left allmulticast mode [ 987.767481][ T1747] gretap1: left promiscuous mode [ 987.779705][ T1747] ip6erspan0: left allmulticast mode [ 987.821394][ T1747] sit1: left allmulticast mode [ 987.860780][ T1747] gtp0: left promiscuous mode [ 987.867143][ T1747] gtp0: left allmulticast mode [ 987.939556][ T1747] bond9: left promiscuous mode [ 987.945609][ T1747] bridge4: left promiscuous mode [ 987.950879][ T1747] bond9: left allmulticast mode [ 987.960076][ T1747] bridge4: left allmulticast mode [ 988.013149][ T1747] bond11: left promiscuous mode [ 988.122935][T13757] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 988.162378][T13757] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.235105][T13757] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 988.255613][T13757] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.279049][T13757] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 988.312221][T13757] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.327992][ T1778] validate_nla: 1 callbacks suppressed [ 988.328010][ T1778] netlink: 'syz.2.7700': attribute type 10 has an invalid length. [ 988.360867][T13757] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 988.390638][T13757] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.419804][ T1778] veth0_to_bond: left allmulticast mode [ 988.565472][ T1787] bond0: entered promiscuous mode [ 988.588560][ T1787] bond_slave_0: entered promiscuous mode [ 988.603505][ T1787] bond_slave_1: entered promiscuous mode [ 988.613111][ T1787] batadv0: entered promiscuous mode [ 988.671057][ T1798] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7705'. [ 989.396414][ T1826] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7714'. [ 989.419338][ T1820] syzkaller0: entered promiscuous mode [ 989.435343][ T1826] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7714'. [ 989.452826][ T1820] syzkaller0: entered allmulticast mode [ 994.436044][ T1847] netlink: 'syz.3.7720': attribute type 7 has an invalid length. [ 994.446525][ T1847] netlink: 'syz.3.7720': attribute type 8 has an invalid length. [ 994.500621][ T1852] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7722'. [ 994.641504][ T1854] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 994.671299][ T1854] bond0 (unregistering): Released all slaves [ 995.067253][ T1886] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7734'. [ 995.094573][ T1886] netlink: 92 bytes leftover after parsing attributes in process `syz.2.7734'. [ 995.261608][ T1896] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 995.289048][ T1896] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 995.456150][ T1907] netlink: 240 bytes leftover after parsing attributes in process `syz.4.7741'. [ 995.907487][ T1927] netlink: 'syz.4.7745': attribute type 1 has an invalid length. [ 995.995538][ T1927] ip6gretap1: entered promiscuous mode [ 996.005772][ T1927] ip6gretap1: entered allmulticast mode [ 996.027163][ T1927] bond4: (slave ip6gretap1): making interface the new active one [ 996.040919][ T1927] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 996.051875][ T1927] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 996.062301][ T1927] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 996.125636][ T1936] netlink: 256 bytes leftover after parsing attributes in process `syz.5.7748'. [ 996.193047][ T1936] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.200810][ T1936] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.279999][ T1940] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7749'. [ 996.320790][ T1940] netlink: 'syz.4.7749': attribute type 7 has an invalid length. [ 996.352166][ T1940] netlink: 'syz.4.7749': attribute type 8 has an invalid length. [ 996.393583][ T1940] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7749'. [ 996.839404][ T1963] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7756'. [ 996.919183][ T1965] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7757'. [ 996.973098][ T1965] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7757'. [ 997.187645][ T1976] Cannot find add_set index 0 as target [ 997.220581][ T1974] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 997.365518][ T1984] netlink: 'syz.1.7763': attribute type 49 has an invalid length. [ 997.435786][ T1988] IPVS: set_ctl: invalid protocol: 0 172.20.20.28:20002 [ 997.590760][ T1994] x_tables: duplicate underflow at hook 1 [ 997.846584][ T2008] mac80211_hwsim hwsim69 wlan0: entered promiscuous mode [ 998.318600][ T2036] block nbd3: Unsupported socket: should be TCP or UNIX. [ 998.349671][ T2037] netlink: 'syz.4.7782': attribute type 1 has an invalid length. [ 998.482283][ T2037] 8021q: adding VLAN 0 to HW filter on device bond5 [ 998.667723][ T2054] erspan0: entered promiscuous mode [ 999.566624][ T2096] bond12: option lp_interval: invalid value (0) [ 999.573157][ T2096] bond12: option lp_interval: allowed values 1 - 2147483647 [ 999.599396][ T2096] bond12 (unregistering): Released all slaves [ 999.851353][ T2111] __nla_validate_parse: 35 callbacks suppressed [ 999.851374][ T2111] netlink: 45 bytes leftover after parsing attributes in process `syz.1.7804'. [ 1000.057454][ T2119] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7807'. [ 1000.277010][ T2133] netlink: 'syz.1.7812': attribute type 12 has an invalid length. [ 1000.320752][ T2141] netlink: 17 bytes leftover after parsing attributes in process `syz.4.7810'. [ 1000.352352][ T2133] bond0: option primary_reselect: invalid value (255) [ 1000.374027][ T2133] bond0 (unregistering): Released all slaves [ 1000.659277][ T2155] veth0: entered promiscuous mode [ 1000.678607][ T2154] veth0: left promiscuous mode [ 1001.400683][ T2182] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7825'. [ 1001.456899][ T2182] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1001.501599][ T2182] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1001.928069][ T2210] IPv6: NLM_F_CREATE should be specified when creating new route [ 1002.225991][ T2230] netlink: 'syz.3.7835': attribute type 1 has an invalid length. [ 1002.516595][ T2238] ªªªªªª: renamed from bond_slave_0 (while UP) [ 1002.592052][ T2245] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7841'. [ 1002.611562][ T2245] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7841'. [ 1002.699822][ T2251] syzkaller0: entered promiscuous mode [ 1002.706419][ T2251] syzkaller0: entered allmulticast mode [ 1002.788917][ T2248] netlink: 'syz.2.7842': attribute type 1 has an invalid length. [ 1002.808965][ T2248] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7842'. [ 1002.975248][ T2227] pimreg: entered allmulticast mode [ 1003.133226][ T2262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7846'. [ 1003.326846][ T2266] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7848'. [ 1003.614210][ T2278] x_tables: unsorted underflow at hook 3 [ 1003.673114][ T2281] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7852'. [ 1003.728474][ T2279] lo speed is unknown, defaulting to 1000 [ 1003.850895][ T2279] xfrm0 speed is unknown, defaulting to 1000 [ 1003.908559][ T2279] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 1004.096813][ T2295] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 1005.087000][ T2334] pimreg: left allmulticast mode [ 1005.137690][ T2341] __nla_validate_parse: 2 callbacks suppressed [ 1005.137711][ T2341] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7866'. [ 1005.253992][ T2358] netlink: 'syz.4.7871': attribute type 11 has an invalid length. [ 1005.296643][ T2358] netlink: 'syz.4.7871': attribute type 11 has an invalid length. [ 1005.488057][ T2364] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7872'. [ 1005.841188][ T2379] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7877'. [ 1006.000083][ T2384] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7879'. [ 1006.116415][ T2397] netlink: 'syz.5.7883': attribute type 1 has an invalid length. [ 1006.488303][ T2414] netlink: 220 bytes leftover after parsing attributes in process `syz.2.7888'. [ 1006.586335][ T2416] veth0_to_batadv: entered allmulticast mode [ 1006.609671][ T2387] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7878'. [ 1006.771105][ T2433] netlink: 'syz.4.7892': attribute type 13 has an invalid length. [ 1006.789764][ T2433] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7892'. [ 1007.208935][ T2454] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7899'. [ 1007.328009][ T2460] x_tables: unsorted underflow at hook 1 [ 1007.447020][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888041b98800: rx timeout, send abort [ 1007.456384][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888041b98800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1007.482732][ T2474] mac80211_hwsim hwsim66 syzkaller0: entered promiscuous mode [ 1007.509593][ T2474] mac80211_hwsim hwsim66 syzkaller0: entered allmulticast mode [ 1007.926851][ T2503] netlink: 'syz.5.7906': attribute type 17 has an invalid length. [ 1007.943580][ T2505] netlink: 344 bytes leftover after parsing attributes in process `syz.1.7910'. [ 1007.949833][ T2504] netlink: 'syz.4.7907': attribute type 1 has an invalid length. [ 1007.974833][ T2503] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7906'. [ 1008.474957][ T2492] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 1008.590707][ T2538] netlink: 'syz.2.7917': attribute type 2 has an invalid length. [ 1008.722573][ T2538] : entered promiscuous mode [ 1009.372956][ T2567] bond0: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 1009.412108][ T2533] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 1009.413185][ T29] audit: type=1800 audit(1783476336.587:54): pid=2572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.7925" name="memory.events" dev="tmpfs" ino=247 res=0 errno=0 [ 1009.456628][ T2567] bond0 (unregistering): Released all slaves [ 1009.777038][ T2569] bond0: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 1009.815785][T28150] Bluetooth: hci2: command 0x0406 tx timeout [ 1009.847047][ T2569] bond0 (unregistering): Released all slaves [ 1009.986514][ T2576] pimreg: entered allmulticast mode [ 1010.389111][ T2603] xt_limit: Overflow, try lower: 604147548/4200216962 [ 1010.597475][ T2607] netlink: 'syz.1.7934': attribute type 10 has an invalid length. [ 1010.614594][T28150] Bluetooth: hci4: command 0x0401 tx timeout [ 1010.970173][ T2613] __nla_validate_parse: 4 callbacks suppressed [ 1010.970192][ T2613] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7935'. [ 1011.084993][ T2631] bridge0: port 2(bridge_slave_1) entered blocking state [ 1011.092384][ T2631] bridge0: port 2(bridge_slave_1) entered listening state [ 1011.099904][ T2631] bridge0: port 1(bridge_slave_0) entered blocking state [ 1011.107143][ T2631] bridge0: port 1(bridge_slave_0) entered listening state [ 1011.532319][ T2613] macvtap1: entered promiscuous mode [ 1011.571940][ T2613] vlan0: entered promiscuous mode [ 1011.607721][ T2667] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7940'. [ 1011.632078][ T2613] macvtap1: entered allmulticast mode [ 1011.670614][ T2613] vlan0: entered allmulticast mode [ 1011.691935][ T2613] veth0_vlan: entered allmulticast mode [ 1012.004122][ T2679] netlink: 'syz.3.7948': attribute type 8 has an invalid length. [ 1012.140969][ T2682] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 1012.167620][ T2680] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7948'. [ 1012.241917][ T2687] syzkaller1: entered promiscuous mode [ 1012.257100][ T2687] syzkaller1: entered allmulticast mode [ 1012.283626][ T2688] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7950'. [ 1012.339353][ T2688] block nbd3: Unsupported socket: should be TCP or UNIX. [ 1012.720623][ T2702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7953'. [ 1012.768666][ T2709] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7954'. [ 1012.827816][ T2716] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7957'. [ 1013.039676][ T2702] can: request_module (can-proto-0) failed. [ 1013.363310][ T2735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7960'. [ 1013.423741][ T2744] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7960'. [ 1013.566595][ T2748] netlink: 'syz.1.7962': attribute type 1 has an invalid length. [ 1013.645832][ T2759] netlink: 244 bytes leftover after parsing attributes in process `syz.3.7964'. [ 1014.633960][ T2806] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1015.106778][ T2812] syz_tun: entered allmulticast mode [ 1015.223486][ T2821] syz_tun (unregistering): left allmulticast mode [ 1015.808219][ T2867] macvlan1: entered promiscuous mode [ 1015.859166][ T2867] gretap0: entered promiscuous mode [ 1016.771543][ T2924] __nla_validate_parse: 6 callbacks suppressed [ 1016.771562][ T2924] netlink: 84 bytes leftover after parsing attributes in process `syz.3.7999'. [ 1016.999862][ T2943] netlink: 'syz.5.8004': attribute type 15 has an invalid length. [ 1017.009394][ T2943] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8004'. [ 1017.036527][ T1774] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 1017.040232][ T2943] netlink: 'syz.5.8004': attribute type 15 has an invalid length. [ 1017.060304][ T1774] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 1017.085694][ T2943] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8004'. [ 1017.095501][ T1774] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 1017.099497][ T2945] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8005'. [ 1017.133548][ T1774] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 1017.192645][ T2945] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 1017.872770][ T2962] syzkaller0: entered promiscuous mode [ 1017.879345][ T2962] syzkaller0: entered allmulticast mode [ 1018.668866][ T3003] netlink: 'syz.4.8021': attribute type 11 has an invalid length. [ 1018.677512][ T3003] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8021'. [ 1018.689771][ T3003] netlink: 'syz.4.8021': attribute type 5 has an invalid length. [ 1018.698269][ T3003] netlink: 140 bytes leftover after parsing attributes in process `syz.4.8021'. [ 1018.857849][ T3007] netlink: 'syz.4.8022': attribute type 1 has an invalid length. [ 1018.885433][ T3007] netlink: 'syz.4.8022': attribute type 1 has an invalid length. [ 1022.636451][ T3029] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8029'. [ 1022.730182][ T3027] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8027'. [ 1022.798812][ T3027] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8027'. [ 1023.297725][ T3060] netlink: 'syz.2.8038': attribute type 3 has an invalid length. [ 1023.308402][ T3060] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8038'. [ 1023.601939][ T3070] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8043'. [ 1023.996134][ T3089] syzkaller0: entered promiscuous mode [ 1024.013833][ T3089] syzkaller0: entered allmulticast mode [ 1024.102011][ T4949] block nbd3: Receive control failed (result -107) [ 1024.136139][ T3093] nbd3: detected capacity change from 0 to 63 [ 1024.148412][T28150] block nbd3: Receive control failed (result -32) [ 1024.157615][ T25] block nbd3: Dead connection, failed to find a fallback [ 1024.165198][ T25] block nbd3: shutting down sockets [ 1024.172539][ T25] blk_print_req_error: 117 callbacks suppressed [ 1024.172558][ T25] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1024.190232][ T25] buffer_io_error: 138 callbacks suppressed [ 1024.190279][ T25] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1024.209397][ T25] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1024.220823][ T25] Buffer I/O error on dev nbd3, logical block 1, async page read [ 1024.229524][ T25] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1024.239213][ T25] Buffer I/O error on dev nbd3, logical block 2, async page read [ 1024.249415][ T25] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1024.259729][ T25] Buffer I/O error on dev nbd3, logical block 3, async page read [ 1024.268576][ T25] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1024.280361][ T25] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1024.289086][ T25] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1024.298847][ T25] Buffer I/O error on dev nbd3, logical block 1, async page read [ 1024.309239][ T25] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1024.319308][ T25] Buffer I/O error on dev nbd3, logical block 2, async page read [ 1024.328979][ T25] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1024.340034][ T25] Buffer I/O error on dev nbd3, logical block 3, async page read [ 1024.348942][ T25] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1024.358511][ T25] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1024.368329][ T25] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1024.380247][ T25] Buffer I/O error on dev nbd3, logical block 1, async page read [ 1024.392959][ T3021] ldm_validate_partition_table(): Disk read failed. [ 1024.406462][ T3021] Dev nbd3: unable to read RDB block 0 [ 1024.415591][ T3021] nbd3: unable to read partition table [ 1024.436604][ T3021] ldm_validate_partition_table(): Disk read failed. [ 1024.446476][ T3021] Dev nbd3: unable to read RDB block 0 [ 1024.460105][ T3021] nbd3: unable to read partition table [ 1024.709778][ T3110] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8052'. [ 1024.852454][ T3116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8054'. [ 1024.892914][ T3116] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1024.932428][ T3116] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8054'. [ 1024.990315][ T3127] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 1025.000223][ T3128] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 1025.026667][ T3127] tipc: Enabled bearer , priority 0 [ 1025.239431][ T3138] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1025.307001][ T3144] netlink: 'syz.1.8064': attribute type 1 has an invalid length. [ 1025.331721][ T3144] netlink: 240 bytes leftover after parsing attributes in process `syz.1.8064'. [ 1025.352920][ T3144] netlink: 'syz.1.8064': attribute type 1 has an invalid length. [ 1025.435973][ T3153] netlink: 'syz.1.8067': attribute type 32 has an invalid length. [ 1025.721033][ T3163] geneve2: entered promiscuous mode [ 1025.740603][ T3163] geneve2: entered allmulticast mode [ 1025.936792][ T3170] bridge8: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1026.062160][ T3174] xt_hashlimit: max too large, truncated to 1048576 [ 1026.113655][ T3174] No such timeout policy "syz1" [ 1026.283579][ T3180] netlink: 'syz.2.8077': attribute type 1 has an invalid length. [ 1026.322899][ T3180] netdevsim netdevsim2: Direct firmware load for  failed with error -2 [ 1026.334025][ T3180] netdevsim netdevsim2: Falling back to sysfs fallback for:  [ 1026.436804][ T3193] netlink: 'syz.4.8081': attribute type 3 has an invalid length. [ 1026.618278][ T8391] IPVS: starting estimator thread 0... [ 1026.688239][ T3209] ip6t_REJECT: ECHOREPLY is not supported [ 1026.714141][ T3209] ip6t_REJECT: ECHOREPLY is not supported [ 1026.725261][ T3207] IPVS: using max 24 ests per chain, 57600 per kthread [ 1026.776322][ T3209] ip6t_REJECT: ECHOREPLY is not supported [ 1026.782434][ T3209] ip6t_REJECT: ECHOREPLY is not supported [ 1026.791266][ T3209] ip6t_REJECT: ECHOREPLY is not supported [ 1026.813862][ T3209] ip6t_REJECT: ECHOREPLY is not supported [ 1026.828843][ T3209] ip6t_REJECT: ECHOREPLY is not supported [ 1026.858473][ T3225] netlink: 'syz.1.8087': attribute type 32 has an invalid length. [ 1026.861089][ T3209] ip6t_REJECT: ECHOREPLY is not supported [ 1026.898882][ T3209] ip6t_REJECT: ECHOREPLY is not supported [ 1026.912244][ T3209] ip6t_REJECT: ECHOREPLY is not supported [ 1027.118138][ T3234] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8089'. [ 1027.232375][ T3244] ipip0: entered promiscuous mode [ 1027.257948][ T3244] ipip0: entered allmulticast mode [ 1027.451691][ T3248] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 1027.886523][ T3252] erspan0: left promiscuous mode [ 1028.010180][ T3252] 8021q: adding VLAN 0 to HW filter on device team0 [ 1028.082023][ T3252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1028.171746][ T3270] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 1028.175293][ T3252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1028.193276][ T3252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1028.213209][ T3252] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1028.229523][ T3252] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1028.252565][ T3252] veth1_vlan: left promiscuous mode [ 1028.260682][ T3252] veth0_vlan: left promiscuous mode [ 1028.270734][ T3252] veth0_vlan: entered promiscuous mode [ 1028.281501][ T3252] veth1_vlan: entered promiscuous mode [ 1028.302124][ T3252] veth1_macvtap: left promiscuous mode [ 1028.310465][ T3252] veth0_macvtap: left promiscuous mode [ 1028.318889][ T3252] veth0_macvtap: entered promiscuous mode [ 1028.327509][ T3252] veth1_macvtap: entered promiscuous mode [ 1028.357092][ T3252] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1028.367705][ T3252] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1028.378195][ T3252] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1028.389497][ T3252] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1028.407237][ T3252] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1028.421192][ T3252] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1028.433551][ T3252] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1028.449893][ T3252] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1028.473345][ T3252] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1028.598249][ T3252] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1028.660659][ T3252] erspan0: entered promiscuous mode [ 1028.673604][ T3252] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1028.688695][ T3252] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1028.705913][ T3252] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1028.718502][ T3252] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1028.728654][ T3252] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 1028.762996][ T3290] bridge0: port 1(bridge_slave_0) entered blocking state [ 1028.770429][ T3290] bridge0: port 1(bridge_slave_0) entered listening state [ 1028.790692][ T3290] bridge0: port 2(bridge_slave_1) entered blocking state [ 1028.797941][ T3290] bridge0: port 2(bridge_slave_1) entered listening state [ 1028.826961][ T3290] bridge3: port 2(veth0_to_bond) entered blocking state [ 1028.834147][ T3290] bridge3: port 2(veth0_to_bond) entered forwarding state [ 1028.908899][ T3290] bridge3: port 1(veth3) entered blocking state [ 1028.915309][ T3290] bridge3: port 1(veth3) entered forwarding state [ 1028.992742][ T3258] netlink: 'syz.1.8096': attribute type 22 has an invalid length. [ 1029.024363][ T3271] gretap1: entered promiscuous mode [ 1029.029859][ T3258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8096'. [ 1029.046098][ T3271] batman_adv: batadv0: Adding interface: gretap1 [ 1029.064895][ T3271] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 1029.106596][ T3271] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 1029.122424][T13760] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1029.157788][T13760] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1029.186359][T13760] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1029.215304][T13760] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1029.225118][ T3282] xt_nat: multiple ranges no longer supported [ 1029.252706][ T3258] netlink: 'syz.1.8096': attribute type 22 has an invalid length. [ 1029.262506][ T3258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8096'. [ 1029.298947][T13760] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1029.330644][T13760] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1029.371940][T13760] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1029.408471][T13760] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1029.459810][ T3292] netlink: 199784 bytes leftover after parsing attributes in process `syz.2.8102'. [ 1029.480452][ T3292] netlink: 'syz.2.8102': attribute type 1 has an invalid length. [ 1029.680525][ T3301] mac80211_hwsim hwsim66 syzkaller0: left promiscuous mode [ 1029.733795][ T3301] mac80211_hwsim hwsim66 syzkaller0: left allmulticast mode [ 1030.003404][ T3312] netlink: 'syz.1.8108': attribute type 1 has an invalid length. [ 1030.046608][ T3312] netlink: 'syz.1.8108': attribute type 1 has an invalid length. [ 1030.068740][ T3312] netlink: 'syz.1.8108': attribute type 1 has an invalid length. [ 1030.103342][ T3312] netlink: 'syz.1.8108': attribute type 2 has an invalid length. [ 1030.138594][ T3312] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8108'. [ 1030.219135][ T3316] netlink: 'syz.1.8108': attribute type 3 has an invalid length. [ 1030.296699][ T3316] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8108'. [ 1030.440898][ T3332] netlink: 'syz.2.8114': attribute type 1 has an invalid length. [ 1030.627914][ T3341] bond0: (slave bridge4): making interface the new active one [ 1030.668574][ T3341] bond0: (slave bridge4): Enslaving as an active interface with an up link [ 1030.901964][ T3357] IPv6: NLM_F_CREATE should be specified when creating new route [ 1030.933241][ T3357] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8120'. [ 1031.721143][ T3360] bridge0: port 2(bridge_slave_1) entered disabled state [ 1031.728616][ T3360] bridge0: port 1(bridge_slave_0) entered disabled state [ 1031.879981][ T3360] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1032.165648][ T3393] macsec0: entered promiscuous mode [ 1032.910353][ T3434] netlink: 'syz.1.8145': attribute type 1 has an invalid length. [ 1033.056195][ T3434] bond0: entered promiscuous mode [ 1033.063813][ T3434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1033.207880][ T3444] gretap0: entered promiscuous mode [ 1033.222385][ T3444] vlan3: entered promiscuous mode [ 1033.453143][ T3452] lo speed is unknown, defaulting to 1000 [ 1033.521121][ T3452] xfrm0 speed is unknown, defaulting to 1000 [ 1033.535277][ T3457] syzkaller1: entered promiscuous mode [ 1033.552197][ T3457] syzkaller1: entered allmulticast mode [ 1033.581878][ T3452] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 1033.636571][ T3469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8155'. [ 1033.647888][ T3469] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8155'. [ 1033.658458][ T3469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8155'. [ 1034.343615][ T3498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8163'. [ 1034.386432][ T3498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8163'. [ 1034.442142][ T3498] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8163'. [ 1034.793158][ T3520] netlink: 'syz.5.8168': attribute type 1 has an invalid length. [ 1034.798513][ T3519] netlink: 'syz.2.8167': attribute type 10 has an invalid length. [ 1034.831459][ T3510] syzkaller0: entered promiscuous mode [ 1034.834534][ T3519] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8167'. [ 1034.838367][ T3510] syzkaller0: entered allmulticast mode [ 1034.892081][ T3516] vlan4: entered promiscuous mode [ 1034.898674][ T3516] bridge0: entered promiscuous mode [ 1035.004190][ T3520] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1035.040702][ T3519] team0: entered allmulticast mode [ 1035.063651][ T3519] team_slave_0: entered allmulticast mode [ 1035.081675][ T3519] team_slave_1: entered allmulticast mode [ 1035.090124][ T3519] bridge0: port 3(team0) entered blocking state [ 1035.097863][ T3519] bridge0: port 3(team0) entered disabled state [ 1035.126288][ T3519] team0: entered promiscuous mode [ 1035.161109][ T3519] team_slave_0: entered promiscuous mode [ 1035.193993][ T3519] team_slave_1: entered promiscuous mode [ 1035.256259][ T3529] vlan2: entered allmulticast mode [ 1035.359149][ T3539] netlink: 256 bytes leftover after parsing attributes in process `syz.4.8174'. [ 1035.531555][ T3545] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8174'. [ 1035.557425][ T3545] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8174'. [ 1035.592955][ T3547] netlink: 'syz.5.8176': attribute type 5 has an invalid length. [ 1036.149294][ T3564] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1037.126558][ T3573] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1039.837686][ T3541] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8174'. [ 1039.857165][ T3566] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8179'. [ 1039.986537][ T3579] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 1040.069405][ T3582] IPVS: set_ctl: invalid protocol: 43 172.20.20.41:20000 [ 1040.203819][ T3585] veth1_to_bond: entered allmulticast mode [ 1040.229332][ T3585] veth1_to_bond: entered promiscuous mode [ 1040.242780][ T3585] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8185'. [ 1040.363280][ T3585] veth1_to_bond (unregistering): left allmulticast mode [ 1040.399720][ T3585] veth1_to_bond (unregistering): left promiscuous mode [ 1040.462988][ T3585] bond0: (slave bond_slave_1): Releasing backup interface [ 1040.483147][ T3602] netlink: 'syz.1.8189': attribute type 10 has an invalid length. [ 1040.761711][ T3620] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8193'. [ 1040.913295][ T3630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8196'. [ 1040.949119][ T3630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8196'. [ 1040.982369][ T3630] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8196'. [ 1041.011037][ T3630] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8196'. [ 1041.040211][ T3633] netlink: 'syz.3.8195': attribute type 4 has an invalid length. [ 1041.187743][ T3645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8199'. [ 1041.806850][ T3671] netlink: 'syz.3.8207': attribute type 14 has an invalid length. [ 1041.871942][ T3678] netlink: 'syz.4.8209': attribute type 1 has an invalid length. [ 1042.030863][ T3683] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8212'. [ 1042.153449][ T3687] team0: left promiscuous mode [ 1042.159263][ T3687] team_slave_0: left promiscuous mode [ 1042.165745][ T3687] team_slave_1: left promiscuous mode [ 1042.173725][ T3687] bridge0: port 3(team0) entered disabled state [ 1042.272646][ T3687] bridge_slave_1: left allmulticast mode [ 1042.283957][ T3687] bridge_slave_1: left promiscuous mode [ 1042.292323][ T3687] bridge0: port 2(bridge_slave_1) entered disabled state [ 1042.390960][ T3687] bridge_slave_0: left allmulticast mode [ 1042.416166][ T3687] bridge_slave_0: left promiscuous mode [ 1042.422098][ T3687] bridge0: port 1(bridge_slave_0) entered disabled state [ 1042.658801][ T3698] bond4: (slave bridge0): Enslaving as an active interface with an up link [ 1042.706794][ T3705] bond4: entered promiscuous mode [ 1042.733303][ T3705] bridge0: entered promiscuous mode [ 1042.761248][ T3705] bond4: entered allmulticast mode [ 1042.792331][ T3705] bridge0: entered allmulticast mode [ 1042.815808][ T3705] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1043.720396][ T3754] netlink: 'syz.4.8230': attribute type 15 has an invalid length. [ 1043.760115][T13760] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 1043.762381][ T3754] netlink: 'syz.4.8230': attribute type 15 has an invalid length. [ 1043.780759][T13760] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 1043.806501][ T3760] sctp: [Deprecated]: syz.5.8232 (pid 3760) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1043.806501][ T3760] Use struct sctp_sack_info instead [ 1043.866803][ T3756] team0 (unregistering): Port device team_slave_0 removed [ 1043.907278][ T3756] team0 (unregistering): Port device team_slave_1 removed [ 1043.933579][ T3756] team0 (unregistering): Port device geneve1 removed [ 1043.980907][ T3288] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 1044.015277][ T3288] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 1044.103453][ T3760] syzkaller0: entered promiscuous mode [ 1044.116430][ T3760] syzkaller0: entered allmulticast mode [ 1044.301811][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 1044.310761][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 1044.363799][ T3777] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 1044.495427][ T3777] only policy match revision 0 supported [ 1044.495450][ T3777] unable to load match [ 1046.280876][ T3747] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1046.536256][ T3820] __nla_validate_parse: 20 callbacks suppressed [ 1046.536277][ T3820] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8248'. [ 1047.259252][ T3867] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge_slave_1 [ 1047.501229][ T3875] netlink: 'syz.1.8262': attribute type 24 has an invalid length. [ 1047.543647][ T3875] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8262'. [ 1047.571293][ T3875] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8262'. [ 1047.697435][ T3875] mac80211_hwsim hwsim66 syzkaller0: entered promiscuous mode [ 1047.706877][ T3875] mac80211_hwsim hwsim66 syzkaller0: entered allmulticast mode [ 1047.772020][ T3886] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8265'. [ 1047.938525][ T3892] netlink: 'syz.1.8269': attribute type 11 has an invalid length. [ 1047.992155][ T5827] IPVS: starting estimator thread 0... [ 1047.998199][ T3891] tipc: Enabling of bearer rejected, failed to enable media [ 1048.095753][ T3895] IPVS: using max 27 ests per chain, 64800 per kthread [ 1048.226594][ T3907] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8273'. [ 1048.347987][ T3903] lo: entered promiscuous mode [ 1048.364033][ T3903] netlink: 'syz.4.8272': attribute type 2 has an invalid length. [ 1048.392820][ T3903] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1048.902986][ T3922] netlink: 'syz.3.8274': attribute type 14 has an invalid length. [ 1049.153521][ T3931] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8280'. [ 1049.217475][ T3939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8279'. [ 1049.277243][ T3939] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1049.284591][ T3939] IPv6: NLM_F_CREATE should be set when creating new route [ 1049.291844][ T3939] IPv6: NLM_F_CREATE should be set when creating new route [ 1049.556211][ T3955] netlink: 'syz.1.8285': attribute type 1 has an invalid length. [ 1049.584567][ T3955] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8285'. [ 1050.018227][ T3967] netlink: 220 bytes leftover after parsing attributes in process `syz.5.8287'. [ 1050.030626][ T3972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8288'. [ 1050.051702][ T3978] netlink: 'syz.3.8292': attribute type 1 has an invalid length. [ 1050.604043][ T4009] netlink: 'syz.1.8301': attribute type 9 has an invalid length. [ 1051.231859][ T4028] bond5 (unregistering): Released all slaves [ 1051.876856][ T4065] __nla_validate_parse: 3 callbacks suppressed [ 1051.876877][ T4065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8312'. [ 1052.217076][ T4087] netlink: 15 bytes leftover after parsing attributes in process `syz.4.8313'. [ 1052.591405][ T4098] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8322'. [ 1053.032025][ T4135] netlink: 'syz.1.8330': attribute type 1 has an invalid length. [ 1053.091529][ T4134] vlan3: entered promiscuous mode [ 1053.140625][ T4134] geneve1: entered promiscuous mode [ 1053.164725][ T4134] vlan3: entered allmulticast mode [ 1053.185027][ T4134] geneve1: entered allmulticast mode [ 1053.365675][ T4144] sctp: [Deprecated]: syz.3.8332 (pid 4144) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1053.365675][ T4144] Use struct sctp_sack_info instead [ 1054.273016][ T4183] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8339'. [ 1054.490647][ T4141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1054.599827][ T4141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1055.592866][ T4145] geneve2: entered promiscuous mode [ 1055.599144][ T4145] geneve2: entered allmulticast mode [ 1055.641376][ T3288] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 1055.682941][ T3288] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.706636][ T3288] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 1055.728652][ T3288] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 1055.757413][ T3288] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.777943][ T3288] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 1055.803932][ T4193] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8344'. [ 1055.821882][ T3274] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 1055.838458][ T3274] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.851962][ T3274] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 1055.909253][ T3274] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 1055.931340][ T3274] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.952622][ T3274] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 1056.007277][ T4202] netlink: 100 bytes leftover after parsing attributes in process `syz.1.8345'. [ 1056.033251][ T4202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8345'. [ 1056.049138][ T4199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8344'. [ 1056.080505][ T4199] netlink: 252 bytes leftover after parsing attributes in process `syz.2.8344'. [ 1056.424603][ T4217] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1056.499076][ T4223] netlink: 'syz.5.8352': attribute type 10 has an invalid length. [ 1056.572911][ T4231] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8353'. [ 1056.780986][ T4238] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1057.095578][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1057.172289][ T4265] __nla_validate_parse: 1 callbacks suppressed [ 1057.172311][ T4265] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8363'. [ 1057.277550][ T4268] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1057.293065][ T4268] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1057.312690][ T4268] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1057.333470][ T4268] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1057.687781][ T4280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8368'. [ 1057.750426][ T4280] bridge0: port 2(bridge_slave_1) entered disabled state [ 1057.751333][ T29] audit: type=1804 audit(1783476384.937:55): pid=4289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.8369" name="/newroot/132/cgroup.controllers" dev="tmpfs" ino=695 res=1 errno=0 [ 1057.786816][ T29] audit: type=1800 audit(1783476384.977:56): pid=4289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.8369" name="cgroup.controllers" dev="tmpfs" ino=695 res=0 errno=0 [ 1057.920278][ T4291] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8370'. [ 1057.982584][ T4298] netlink: 108 bytes leftover after parsing attributes in process `syz.5.8372'. [ 1058.366154][ T4293] bridge2: port 1(erspan0) entered disabled state [ 1058.497439][ T4293] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.505235][ T4293] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.770750][ T4293] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1058.981180][ T4293] vlan0: left allmulticast mode [ 1058.986359][ T4293] veth0_vlan: left allmulticast mode [ 1058.991914][ T4293] vlan0: left promiscuous mode [ 1058.997791][ T4293] veth0_vlan: left promiscuous mode [ 1059.019293][ T4318] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8376'. [ 1059.057134][ T4318] netlink: 'syz.1.8376': attribute type 7 has an invalid length. [ 1059.072738][ T4297] geneve2: entered promiscuous mode [ 1059.079701][ T4318] netlink: 'syz.1.8376': attribute type 8 has an invalid length. [ 1059.088259][ T4297] geneve2: entered allmulticast mode [ 1059.105079][ T4300] syzkaller0: entered promiscuous mode [ 1059.115411][ T4318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8376'. [ 1059.127259][ T4300] syzkaller0: entered allmulticast mode [ 1059.327595][T17209] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1059.358783][T17209] netdevsim netdevsim4 netdevsim0: unset [0, 1] type 1 family 0 port 256 - 0 [ 1059.390728][T17209] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.442590][T17209] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 1059.477212][T17206] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1059.497757][T17206] netdevsim netdevsim4 netdevsim1: unset [0, 1] type 1 family 0 port 256 - 0 [ 1059.528616][T17206] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.566876][T17206] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 1059.658326][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1059.665701][ C1] bridge0: topology change detected, propagating [ 1059.732688][T17206] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1059.762553][T17206] netdevsim netdevsim4 netdevsim2: unset [0, 1] type 1 family 0 port 256 - 0 [ 1059.789724][T17206] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.827249][T17206] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 1060.091128][T17206] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1060.124043][T17206] netdevsim netdevsim4 netdevsim3: unset [0, 1] type 1 family 0 port 256 - 0 [ 1060.156018][T17206] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.188162][T17206] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 1060.224021][ T4356] netdevsim netdevsim1 : renamed from netdevsim0 [ 1060.269065][ T4366] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8387'. [ 1060.473871][ T4383] netlink: 'syz.1.8390': attribute type 3 has an invalid length. [ 1060.510812][ T4377] netlink: 144 bytes leftover after parsing attributes in process `syz.2.8389'. [ 1060.558324][ T4386] netlink: 'syz.1.8390': attribute type 3 has an invalid length. [ 1060.843684][ T4395] netlink: 'syz.3.8392': attribute type 1 has an invalid length. [ 1060.962632][ T4406] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 1060.962632][ T4406] Please contact the netfilter-devel mailing list or update your nftables rules. [ 1060.982196][ T4395] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1061.077185][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1061.089597][ C0] IPv6: bridge0: IPv6 duplicate address fe80::a8aa:aaff:feaa:aa1b used by aa:aa:aa:aa:aa:1b detected! [ 1061.743505][ T4439] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8403'. [ 1061.910753][ T4445] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8405'. [ 1062.340869][ T3288] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1062.353031][ T4465] netlink: 'syz.1.8412': attribute type 1 has an invalid length. [ 1062.363114][ T3288] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1062.441201][ T4465] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1062.456002][ T3288] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1062.467369][ T3288] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1062.531517][ T4471] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1062.650002][ T4479] netlink: 'syz.4.8415': attribute type 1 has an invalid length. [ 1062.743571][ T4479] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1062.907248][ T4481] bond7: (slave veth9): Enslaving as an active interface with a down link [ 1062.933577][ T4486] lo: entered promiscuous mode [ 1062.947674][ T4486] tunl0: entered promiscuous mode [ 1062.979724][ T4500] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1063.000549][ T4486] gre0: entered promiscuous mode [ 1063.018628][ T4486] gretap0: entered promiscuous mode [ 1063.037157][ T4486] erspan0: entered promiscuous mode [ 1063.058644][ T4486] ip_vti0: entered promiscuous mode [ 1063.474785][ T4517] netlink: 816 bytes leftover after parsing attributes in process `syz.3.8423'. [ 1063.479277][ T4510] geneve3: entered promiscuous mode [ 1063.576681][ T4522] ip6gre0: Master is either lo or non-ether device [ 1063.800587][ T4529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8426'. [ 1063.845303][ T4534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8427'. [ 1063.985264][ T4539] netlink: 6024 bytes leftover after parsing attributes in process `syz.4.8429'. [ 1064.162997][ T4546] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8430'. [ 1064.197840][ T4547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8430'. [ 1064.302450][ T4559] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 1064.368394][ T4556] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8432'. [ 1064.438041][ T4556] netlink: 'syz.2.8432': attribute type 7 has an invalid length. [ 1064.487908][ T4556] netlink: 'syz.2.8432': attribute type 8 has an invalid length. [ 1064.539706][ T4556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8432'. [ 1064.612204][ T4571] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1065.422897][ T4607] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8443'. [ 1065.496573][ T4607] openvswitch: netlink: Flow key attribute not present in set flow. [ 1065.658223][ T4619] bridge9: entered promiscuous mode [ 1065.706949][ T4619] bridge9: entered allmulticast mode [ 1065.776789][ T4624] IPVS: ip_vs_edit_dest(): server weight less than zero [ 1066.322364][ T4645] netlink: 'syz.4.8452': attribute type 1 has an invalid length. [ 1066.630686][ T4659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8455'. [ 1066.746652][ T4652] bond8: (slave bridge4): making interface the new active one [ 1066.766843][ T4652] bond8: (slave bridge4): Enslaving as an active interface with an up link [ 1066.817600][ T874] bridge0: port 3(syz_tun) entered disabled state [ 1066.873797][ T874] syz_tun (unregistering): left allmulticast mode [ 1066.892594][ T874] syz_tun (unregistering): left promiscuous mode [ 1066.928227][ T874] bridge0: port 3(syz_tun) entered disabled state [ 1067.058233][ T4679] netlink: 'syz.4.8460': attribute type 4 has an invalid length. [ 1067.733975][ T4701] netlink: 'syz.2.8466': attribute type 61 has an invalid length. [ 1067.754149][T13760] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1067.792205][T13760] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.003377][ T4703] batadv_slave_0: entered promiscuous mode [ 1068.169938][T13760] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1068.201033][T13760] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.487004][T13760] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1068.541174][T13760] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.569950][ T4724] __nla_validate_parse: 36 callbacks suppressed [ 1068.569972][ T4724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8472'. [ 1068.701970][ T4727] syzkaller0: entered promiscuous mode [ 1068.723077][ T4727] syzkaller0: entered allmulticast mode [ 1068.823337][T13760] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1068.835001][T13760] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.996976][ T4733] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8474'. [ 1069.369306][ T4742] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 1069.702714][T13760] bridge_slave_1: left allmulticast mode [ 1069.755523][T13760] bridge_slave_1: left promiscuous mode [ 1069.788706][T13760] bridge0: port 2(bridge_slave_1) entered disabled state [ 1069.867761][T13760] bridge_slave_0: left allmulticast mode [ 1069.882716][T13760] bridge_slave_0: left promiscuous mode [ 1069.910210][T13760] bridge0: port 1(bridge_slave_0) entered disabled state [ 1069.931173][ T4760] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8481'. [ 1069.971736][ T4760] openvswitch: netlink: Flow actions attr not present in new flow. [ 1070.288017][ T4782] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8484'. [ 1070.318112][ T4782] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1070.701587][T13760] bond8 (unregistering): (slave gretap1): Releasing active interface [ 1070.804041][T13760] bond4 (unregistering): (slave bridge2): Releasing active interface [ 1070.857717][T13760]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 1070.867406][T13760] bond_slave_0: left promiscuous mode [ 1070.881336][T13760]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 1070.898209][T13760] bond_slave_1: left promiscuous mode [ 1070.906014][T13760]  (unregistering): Released all slaves [ 1070.921242][T13760] bond1 (unregistering): Released all slaves [ 1070.958142][T13760] bond2 (unregistering): Released all slaves [ 1070.999235][T13760] bond0 (unregistering): (slave batadv0): Releasing active interface [ 1071.011572][T13760] bond0 (unregistering): Released all slaves [ 1071.043616][T13760] bond3 (unregistering): (slave 26±ÿª¨úrBº“): Releasing backup interface [ 1071.054039][T13760] bond3 (unregistering): (slave 26±ÿª¨úrBº“): last VLAN challenged slave left bond - VLAN blocking is removed [ 1071.072766][T13760] bond3 (unregistering): Released all slaves [ 1071.100404][T13760] bond4 (unregistering): Released all slaves [ 1071.122688][T13760] bond5 (unregistering): Released all slaves [ 1071.153179][T13760] bond6 (unregistering): Released all slaves [ 1071.179629][T13760] bond7 (unregistering): Released all slaves [ 1071.204186][T13760] bond8 (unregistering): Released all slaves [ 1071.232852][ T4757] netlink: 'syz.3.8479': attribute type 7 has an invalid length. [ 1071.259394][ T4767] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 1071.259898][ T4768] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1071.353001][ T8378] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 1071.365390][T21660] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 1071.373627][ T8378] syú2: Port: 1 Link DOWN [ 1071.722569][ T4792] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1071.819581][ T4792] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.043671][ T4808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1072.848318][T13760] hsr_slave_0: left promiscuous mode [ 1072.896044][T13760] hsr_slave_1: left promiscuous mode [ 1072.922426][T13760] veth1_macvtap: left promiscuous mode [ 1072.948268][T13760] veth0_macvtap: left promiscuous mode [ 1074.113803][T17209] smbdirect: ib_dev[syú2] removed [ 1074.160092][ T5294] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1074.512375][ T4906] xt_bpf: check failed: parse error [ 1074.810335][T13760] IPVS: stop unused estimator thread 0... [ 1075.055234][ T4926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8517'. [ 1075.222672][ T4933] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8519'. [ 1075.320731][ T4936] netlink: 'syz.1.8519': attribute type 23 has an invalid length. [ 1075.780279][ T4953] gre3: entered promiscuous mode [ 1076.100078][ T4972] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8526'. [ 1076.124153][ T4975] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8526'. [ 1076.310114][ T5294] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1076.442988][ T4993] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8533'. [ 1076.466535][ T4992] syzkaller0: entered promiscuous mode [ 1076.482526][ T4992] syzkaller0: entered allmulticast mode [ 1076.541748][ T4993] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8533'. [ 1076.985932][ T5015] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8538'. [ 1077.218041][ T5015] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1077.289251][ T5039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8544'. [ 1077.365153][ T5039] netlink: 'syz.2.8544': attribute type 3 has an invalid length. [ 1077.923417][ T5069] bond14: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1077.967713][ T5069] bond14 (unregistering): Released all slaves [ 1078.223731][ T5089] netlink: 104 bytes leftover after parsing attributes in process `syz.5.8558'. [ 1078.373289][ T5101] netlink: 'syz.3.8557': attribute type 13 has an invalid length. [ 1078.412516][ T5103] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8561'. [ 1078.463752][ T5089] syzkaller0: entered promiscuous mode [ 1078.470868][ T5089] syzkaller0: entered allmulticast mode [ 1078.805618][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1078.971580][ T5105] mac80211_hwsim hwsim70 syzkaller0: Caught tx_queue_len zero misconfig [ 1078.991747][ T5119] netlink: 'syz.1.8563': attribute type 1 has an invalid length. [ 1079.024133][ T5119] netlink: 'syz.1.8563': attribute type 1 has an invalid length. [ 1079.295936][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1082.563008][ T5294] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1082.933632][ T5139] sctp: [Deprecated]: syz.3.8569 (pid 5139) Use of int in max_burst socket option. [ 1082.933632][ T5139] Use struct sctp_assoc_value instead [ 1083.030262][ T5144] __nla_validate_parse: 3 callbacks suppressed [ 1083.030292][ T5144] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8572'. [ 1083.067971][ T5144] xt_hashlimit: max too large, truncated to 1048576 [ 1083.102702][ T5144] No such timeout policy "syz1" [ 1083.143593][ T5147] netlink: 48 bytes leftover after parsing attributes in process `syz.5.8573'. [ 1083.232680][ T5154] Cannot find del_set index 4 as target [ 1083.319485][ T5154] macvtap0: entered allmulticast mode [ 1083.332934][ T5154] veth0_macvtap: entered allmulticast mode [ 1083.463758][ T5167] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8578'. [ 1083.495326][ T5167] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8578'. [ 1083.975846][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1084.053068][ T5198] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8585'. [ 1084.446101][ T5209] mac80211_hwsim hwsim70 syzkaller0: entered promiscuous mode [ 1084.476862][ T5209] mac80211_hwsim hwsim70 syzkaller0: entered allmulticast mode [ 1084.785418][ T5294] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1084.935916][ T5230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8595'. [ 1084.996112][ T5232] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1085.013791][ T5230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8595'. [ 1085.551086][ T5256] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8601'. [ 1085.569501][ T5260] netlink: 'syz.1.8602': attribute type 1 has an invalid length. [ 1085.627445][ T5256] netlink: 'syz.2.8601': attribute type 7 has an invalid length. [ 1085.670586][ T5256] netlink: 'syz.2.8601': attribute type 8 has an invalid length. [ 1085.725045][ T5256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8601'. [ 1085.788023][ T5260] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1085.868884][ T5260] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1085.889285][ T5260] bond6: (slave gre1): The slave device specified does not support setting the MAC address [ 1085.957544][ T5260] bond6: (slave gre1): Error -95 calling set_mac_address [ 1086.087214][ T5284] netlink: 'syz.5.8606': attribute type 1 has an invalid length. [ 1086.131064][ T5285] x_tables: duplicate underflow at hook 1 [ 1086.143242][ T5284] netlink: 224 bytes leftover after parsing attributes in process `syz.5.8606'. [ 1086.165069][ T5288] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1086.206143][ T5273] macvlan2: entered promiscuous mode [ 1086.232606][ T5273] macvlan2: entered allmulticast mode [ 1086.262801][ T5273] bond6: entered promiscuous mode [ 1086.308683][ T5273] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1086.383266][ T5273] bond6: left promiscuous mode [ 1086.483755][ T5298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1086.493984][ T5298] 8021q: adding VLAN 0 to HW filter on device team0 [ 1086.509419][ T5298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1086.561164][ T5298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1086.580324][ T5298] veth1_vlan: left promiscuous mode [ 1086.586723][ T5298] veth0_vlan: entered promiscuous mode [ 1086.594803][ T5298] veth1_vlan: entered promiscuous mode [ 1086.607959][ T5312] x_tables: duplicate underflow at hook 1 [ 1086.614128][ T5298] veth1_macvtap: left promiscuous mode [ 1086.621446][ T5298] veth0_macvtap: left promiscuous mode [ 1086.628817][ T5298] veth0_macvtap: entered promiscuous mode [ 1086.637770][ T5298] veth1_macvtap: entered promiscuous mode [ 1086.649488][ T5298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1086.658008][ T5298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1086.667191][ T5298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1086.675680][ T5298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1086.684910][ T5298] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1086.725494][ T5294] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1086.740466][ T5306] lo: entered promiscuous mode [ 1086.751264][ T5306] tunl0: entered promiscuous mode [ 1086.760578][ T5306] gre0: entered promiscuous mode [ 1086.779529][ T5306] tipc: Resetting bearer [ 1086.790515][ T5306] tipc: Resetting bearer [ 1086.818684][ T5306] ip_vti0: entered promiscuous mode [ 1086.833030][T17209] bridge0: port 1(bridge_slave_0) entered blocking state [ 1086.840305][T17209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1086.851930][T17209] bridge0: port 2(bridge_slave_1) entered blocking state [ 1086.859159][T17209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1086.911942][T13757] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.922577][T13757] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.959156][T13757] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.003648][T13757] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.113909][ T5321] ipt_rpfilter: unknown options [ 1087.767369][ T5359] netlink: zone id is out of range [ 1087.788713][ T5359] netlink: zone id is out of range [ 1087.796404][ T5359] netlink: zone id is out of range [ 1087.824916][ T5359] netlink: zone id is out of range [ 1087.841291][ T5359] netlink: zone id is out of range [ 1087.854802][ T5359] netlink: zone id is out of range [ 1087.861075][ T5359] netlink: zone id is out of range [ 1088.049534][ T5378] tipc: Enabling of bearer rejected, failed to enable media [ 1088.259492][ T5391] syzkaller1: entered promiscuous mode [ 1088.288504][ T5391] syzkaller1: entered allmulticast mode [ 1088.328033][ T5402] __nla_validate_parse: 35 callbacks suppressed [ 1088.328055][ T5402] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8639'. [ 1088.397337][ T5404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8640'. [ 1088.550866][ T5402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8639'. [ 1088.592854][ T5423] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 1088.611477][ T5402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8639'. [ 1088.728930][ T5432] netlink: 48 bytes leftover after parsing attributes in process `syz.5.8646'. [ 1088.853186][ T5445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8648'. [ 1088.922116][ T5450] netlink: 96 bytes leftover after parsing attributes in process `syz.3.8649'. [ 1088.992865][ T5450] vlan3: entered allmulticast mode [ 1089.006565][ T5450] erspan0: entered allmulticast mode [ 1089.270716][ T5461] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1089.300810][ T5471] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8653'. [ 1089.317926][ T5471] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8653'. [ 1089.547714][ T5477] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8656'. [ 1089.648950][ T5484] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1090.939841][ T5556] macsec1: entered promiscuous mode [ 1091.596595][ T5595] reject_tg6_check: 55 callbacks suppressed [ 1091.596614][ T5595] ip6t_REJECT: ECHOREPLY is not supported [ 1091.609677][ T5595] netlink: 'syz.2.8685': attribute type 10 has an invalid length. [ 1091.628553][ T5595] dummy0: entered allmulticast mode [ 1091.642176][ T5595] team0: Port device dummy0 added [ 1092.121825][ T5572] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1093.296012][ T5673] syzkaller0: entered promiscuous mode [ 1093.309667][ T5673] syzkaller0: entered allmulticast mode [ 1093.322824][ T5684] dvmrp0: left allmulticast mode [ 1094.866401][ T4949] Bluetooth: hci4: command 0x0401 tx timeout [ 1096.089738][ T5707] __nla_validate_parse: 6 callbacks suppressed [ 1096.089758][ T5707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8707'. [ 1096.272050][ T5724] netlink: 'syz.3.8710': attribute type 21 has an invalid length. [ 1096.284717][ T5721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8709'. [ 1096.301853][ T5724] netlink: 'syz.3.8710': attribute type 6 has an invalid length. [ 1096.315254][ T5724] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8710'. [ 1096.518817][ T5764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8716'. [ 1096.528163][ T5764] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8716'. [ 1096.763336][ T5777] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8721'. [ 1096.847947][ T5782] lo: left promiscuous mode [ 1096.857964][ T5782] net_ratelimit: 2 callbacks suppressed [ 1096.857983][ T5782] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1097.523521][ T5803] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8729'. [ 1097.867692][ T5811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8734'. [ 1097.902479][ T5811] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8734'. [ 1097.941556][ T5818] IPv6: NLM_F_CREATE should be specified when creating new route [ 1097.971180][ T5818] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1097.978509][ T5818] IPv6: NLM_F_CREATE should be set when creating new route [ 1098.238933][ T5835] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20004 [ 1098.600502][ T5848] mac80211_hwsim hwsim76 wlan0: entered promiscuous mode [ 1098.693366][ T5856] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8745'. [ 1098.898584][ T5854] syzkaller0: entered promiscuous mode [ 1098.920549][ T5854] syzkaller0: entered allmulticast mode [ 1099.180684][ T5877] netlink: 'syz.1.8749': attribute type 2 has an invalid length. [ 1099.633809][ T5888] netlink: 'syz.5.8751': attribute type 11 has an invalid length. [ 1100.312012][ T5901] netlink: 'syz.3.8755': attribute type 10 has an invalid length. [ 1102.386193][ T5901] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1102.574124][ T5907] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1102.597913][ T5910] __nla_validate_parse: 3 callbacks suppressed [ 1102.597932][ T5910] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8758'. [ 1102.640551][ T5910] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 1102.673687][ T5910] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1102.709995][ T5910] gretap2: entered promiscuous mode [ 1102.736965][ T5910] gretap2: entered allmulticast mode [ 1102.908760][ T5926] netlink: 'syz.3.8759': attribute type 1 has an invalid length. [ 1102.918166][ T5930] netlink: 'syz.4.8762': attribute type 1 has an invalid length. [ 1102.956258][ T5926] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8759'. [ 1102.986977][ T5930] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1103.206233][ T5934] bond9: (slave veth11): Enslaving as an active interface with a down link [ 1103.256612][ T5930] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1103.268850][ T5930] bond9: (slave batadv1): making interface the new active one [ 1103.291671][ T5930] batadv1: entered promiscuous mode [ 1103.311150][ T5930] bond9: (slave batadv1): Enslaving as an active interface with an up link [ 1103.432495][ T5938] bond9: (slave veth13): Enslaving as an active interface with a down link [ 1103.932155][ T5972] bond0: Caught tx_queue_len zero misconfig [ 1104.074623][ T5981] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8772'. [ 1104.160725][ T5986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8773'. [ 1104.288656][ T5993] netlink: 'syz.3.8773': attribute type 2 has an invalid length. [ 1104.571732][ T6007] netlink: 52 bytes leftover after parsing attributes in process `syz.5.8775'. [ 1104.752775][ T6016] syzkaller1: entered promiscuous mode [ 1104.783223][ T6016] syzkaller1: entered allmulticast mode [ 1107.136628][ T5986] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1107.146403][ T6018] netlink: 'syz.4.8777': attribute type 11 has an invalid length. [ 1107.165061][ T6018] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8777'. [ 1107.419386][ T6066] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8782'. [ 1107.440816][ T6059] netlink: 'syz.5.8779': attribute type 1 has an invalid length. [ 1107.459389][ T6059] netlink: 'syz.5.8779': attribute type 11 has an invalid length. [ 1107.468138][ T6059] netlink: 224 bytes leftover after parsing attributes in process `syz.5.8779'. [ 1107.540749][ T6062] syzkaller0: entered promiscuous mode [ 1107.546733][ T6062] syzkaller0: entered allmulticast mode [ 1107.564061][ T6066] veth0_macvtap: left promiscuous mode [ 1107.617902][ T6078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8783'. [ 1107.851504][ T6111] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8786'. [ 1107.863887][ T6111] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8786'. [ 1111.126831][ T6143] bridge0: port 1(bridge_slave_0) entered disabled state [ 1111.143178][ T6150] netlink: 'syz.4.8794': attribute type 1 has an invalid length. [ 1111.165865][ T6143] bridge0: port 2(bridge_slave_1) entered disabled state [ 1111.240427][ T6148] syzkaller0: entered promiscuous mode [ 1111.249600][ T6163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8795'. [ 1111.271968][ T6148] syzkaller0: entered allmulticast mode [ 1111.528764][ T6173] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8800'. [ 1111.540073][ T6172] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8799'. [ 1111.553015][ T6172] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8799'. [ 1111.830832][ T6185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8803'. [ 1111.933026][ T6192] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8803'. [ 1112.032202][ T6198] sctp: [Deprecated]: syz.1.8805 (pid 6198) Use of int in max_burst socket option deprecated. [ 1112.032202][ T6198] Use struct sctp_assoc_value instead [ 1112.683968][ T6224] vlan0: entered promiscuous mode [ 1113.139969][ T6246] netlink: 'syz.2.8817': attribute type 29 has an invalid length. [ 1113.158936][ T6247] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8818'. [ 1113.174579][ T6246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8817'. [ 1113.197760][ T6247] netlink: 'syz.4.8818': attribute type 10 has an invalid length. [ 1113.232226][ T6246] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1113.246028][ T6247] netlink: 'syz.4.8818': attribute type 2 has an invalid length. [ 1113.272134][ T6247] Cannot find del_set index 3 as target [ 1113.730881][ T6267] netlink: 'syz.2.8825': attribute type 2 has an invalid length. [ 1113.761448][ T6267] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8825'. [ 1114.030710][ T6287] nbd: nbd4 already in use [ 1114.139666][ T6290] netlink: 'syz.3.8832': attribute type 3 has an invalid length. [ 1114.231751][ T6292] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.8831'. [ 1114.281880][ T6292] openvswitch: netlink: Message has 4 unknown bytes. [ 1114.697629][ T6313] netlink: 108 bytes leftover after parsing attributes in process `syz.2.8839'. [ 1114.725326][ T6109] batadv1: left promiscuous mode [ 1114.786768][ T6316] lo: left promiscuous mode [ 1114.793415][ T6316] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1114.821460][ T6320] netlink: 666 bytes leftover after parsing attributes in process `syz.1.8842'. [ 1114.847758][ T6321] netlink: 284 bytes leftover after parsing attributes in process `syz.1.8842'. [ 1114.963914][ T6322] vlan3: entered promiscuous mode [ 1115.066964][ T6331] netlink: 'syz.3.8846': attribute type 64 has an invalid length. [ 1115.100895][ T6324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8843'. [ 1115.147259][ T6332] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1115.280545][ T6332] netlink: 156 bytes leftover after parsing attributes in process `syz.4.8845'. [ 1115.336152][ T6104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1115.991474][ T6106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1116.003755][ T3371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1116.195551][ T6374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8854'. [ 1116.330364][ T6380] netlink: 'syz.5.8857': attribute type 1 has an invalid length. [ 1116.455638][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1116.576190][ T6388] bond2: (slave geneve3): making interface the new active one [ 1116.592901][ T6388] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 1116.627676][ T6390] batadv2: entered allmulticast mode [ 1116.847014][ T3371] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1116.891340][ T6392] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1116.901760][ T6412] netlink: 'syz.3.8865': attribute type 7 has an invalid length. [ 1116.955610][ T6412] netlink: 'syz.3.8865': attribute type 8 has an invalid length. [ 1116.982501][ T6104] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1117.008494][ T6104] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1117.040217][ T6104] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1117.253579][ T6425] netlink: 'syz.2.8868': attribute type 10 has an invalid length. [ 1117.372131][ T6425] team0: left allmulticast mode [ 1117.389084][ T6425] team_slave_0: left allmulticast mode [ 1117.412999][ T6425] team_slave_1: left allmulticast mode [ 1117.439604][ T6425] dummy0: left allmulticast mode [ 1117.509771][ T6432] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1117.583006][ T6432] netlink: 'syz.3.8870': attribute type 4 has an invalid length. [ 1118.232585][ T6467] __nla_validate_parse: 7 callbacks suppressed [ 1118.232605][ T6467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8880'. [ 1118.252382][ T6467] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8880'. [ 1118.521228][ T6480] netlink: 312 bytes leftover after parsing attributes in process `syz.2.8883'. [ 1118.961000][ T6496] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8887'. [ 1119.000542][ T6496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8887'. [ 1119.039308][ T6496] team0: entered promiscuous mode [ 1119.054601][ T6496] team_slave_0: entered promiscuous mode [ 1119.067379][ T6496] team_slave_1: entered promiscuous mode [ 1119.088555][ T6496] team0: left promiscuous mode [ 1119.112089][ T6496] team_slave_0: left promiscuous mode [ 1119.129343][ T6496] team_slave_1: left promiscuous mode [ 1119.213404][ T6504] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 1119.485411][ T6515] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8892'. [ 1119.519555][ T6519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8894'. [ 1119.551424][ T6519] netlink: 176 bytes leftover after parsing attributes in process `syz.2.8894'. [ 1119.575857][ T6519] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8894'. [ 1119.676973][ T6526] vcan1: entered promiscuous mode [ 1119.691375][ T6526] vcan1: entered allmulticast mode [ 1120.337815][ T6561] netlink: 'syz.5.8902': attribute type 10 has an invalid length. [ 1120.360075][ T6561] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8902'. [ 1120.522455][ T6570] netlink: 'syz.5.8903': attribute type 75 has an invalid length. [ 1120.909726][ T6594] IPv6: NLM_F_CREATE should be specified when creating new route [ 1121.401177][ T6625] openvswitch: netlink: VXLAN extension message has 8 unknown bytes. [ 1121.496649][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1121.506671][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1121.587493][ T6104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1121.736045][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1121.748086][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1122.011917][ T6652] IPv6: Can't replace route, no match found [ 1122.097627][ T6654] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 1122.356413][ T6673] bond0: left promiscuous mode [ 1122.366659][ T6675] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 1122.378551][ T6106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1122.395179][ T5638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1122.423945][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1122.436245][ T6676] netlink: 'syz.5.8935': attribute type 4 has an invalid length. [ 1122.474112][ T6675] netlink: 'syz.5.8935': attribute type 4 has an invalid length. [ 1122.542946][ T6682] syzkaller1: entered promiscuous mode [ 1122.554477][ T6682] syzkaller1: entered allmulticast mode [ 1122.767734][ T6696] netlink: 'syz.5.8943': attribute type 1 has an invalid length. [ 1123.223247][ T6725] netlink: 'syz.5.8949': attribute type 1 has an invalid length. [ 1123.333575][ T6725] __nla_validate_parse: 14 callbacks suppressed [ 1123.333598][ T6725] netlink: 168 bytes leftover after parsing attributes in process `syz.5.8949'. [ 1123.482512][ T6728] bond3: (slave bridge1): making interface the new active one [ 1123.520055][ T6728] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 1124.050574][ T6762] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8960'. [ 1124.080014][ T6762] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8960'. [ 1124.109861][ T6762] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8960'. [ 1124.229582][ T6767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8961'. [ 1124.328744][ T6767] bond14: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 1124.356504][ T29] audit: type=1804 audit(1783476451.537:57): pid=6770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.8963" name="/newroot/479/cgroup.controllers" dev="tmpfs" ino=2471 res=1 errno=0 [ 1124.410200][ T6767] bond14 (unregistering): Released all slaves [ 1124.458263][ T29] audit: type=1800 audit(1783476451.537:58): pid=6770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8963" name="cgroup.controllers" dev="tmpfs" ino=2471 res=0 errno=0 [ 1124.889982][ T6789] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8969'. [ 1124.912351][ T6793] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 1125.003762][ T6796] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1125.014646][ T6796] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1125.030259][ T6796] xt_hashlimit: size too large, truncated to 1048576 [ 1125.126091][ T6802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8975'. [ 1125.243889][ T6807] netlink: 'syz.2.8977': attribute type 21 has an invalid length. [ 1125.263717][ T6807] netlink: 128 bytes leftover after parsing attributes in process `syz.2.8977'. [ 1125.291045][ T6807] netlink: 'syz.2.8977': attribute type 5 has an invalid length. [ 1125.311588][ T6807] netlink: 3 bytes leftover after parsing attributes in process `syz.2.8977'. [ 1125.509492][ T6820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8982'. [ 1125.703881][ T6831] tipc: Enabled bearer , priority 0 [ 1126.382939][ T6875] x_tables: duplicate underflow at hook 2 [ 1126.674838][ T4949] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1126.691539][ T4949] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1126.704155][ T4949] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1126.714887][ T4949] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1126.725351][ T4949] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1126.867016][ T3371] net_ratelimit: 11 callbacks suppressed [ 1126.867037][ T3371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1126.889898][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1126.932507][ T6891] SET target dimension over the limit! [ 1127.237002][ T6904] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1127.495359][ T3371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1127.504559][ T3371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1127.516220][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1127.532870][ T8377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1127.549536][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1127.950415][ T6943] netlink: 'syz.4.9020': attribute type 2 has an invalid length. [ 1127.976832][ T6880] lo speed is unknown, defaulting to 1000 [ 1128.009036][ T6950] netlink: 'syz.2.9022': attribute type 1 has an invalid length. [ 1128.093785][ T6880] xfrm0 speed is unknown, defaulting to 1000 [ 1128.100685][ T6952] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1128.117592][ T6952] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 1128.225778][ T6954] netlink: 'syz.5.9023': attribute type 1 has an invalid length. [ 1128.290471][ T6956] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1128.733687][ T6980] syzkaller1: entered promiscuous mode [ 1128.763083][ T6980] syzkaller1: entered allmulticast mode [ 1128.836895][ T6980] __nla_validate_parse: 4 callbacks suppressed [ 1128.836922][ T6980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9032'. [ 1128.855999][ T4949] Bluetooth: hci1: command tx timeout [ 1129.061290][ T7006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9040'. [ 1129.076973][ T7006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9040'. [ 1129.101379][ T7006] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1129.240791][ T7013] netlink: 'syz.3.9042': attribute type 1 has an invalid length. [ 1129.260001][ T6880] bridge0: port 1(bridge_slave_0) entered blocking state [ 1129.267530][ T6880] bridge0: port 1(bridge_slave_0) entered disabled state [ 1129.281171][ T6880] bridge_slave_0: entered allmulticast mode [ 1129.293780][ T6880] bridge_slave_0: entered promiscuous mode [ 1129.322275][ T7013] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1129.359454][ T7017] bond14: (slave veth5): Enslaving as an active interface with a down link [ 1129.369966][ T6880] bridge0: port 2(bridge_slave_1) entered blocking state [ 1129.377413][ T6880] bridge0: port 2(bridge_slave_1) entered disabled state [ 1129.384978][ T6880] bridge_slave_1: entered allmulticast mode [ 1129.393793][ T6880] bridge_slave_1: entered promiscuous mode [ 1129.439490][ T7013] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1129.446758][ T7013] bond14: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1129.520959][ T6880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1129.536435][ T6880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1129.579070][ T6880] team0: Port device team_slave_0 added [ 1129.590142][ T6880] team0: Port device team_slave_1 added [ 1129.632033][ T6880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1129.639290][ T6880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1129.668107][ T6880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1129.681321][ T6880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1129.688679][ T6880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1129.717459][ T6880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1129.872698][ T6880] hsr_slave_0: entered promiscuous mode [ 1129.897284][ T6880] hsr_slave_1: entered promiscuous mode [ 1129.923440][ T6880] debugfs: 'hsr0' already exists in 'hsr' [ 1129.933896][ T6880] Cannot create hsr debugfs directory [ 1129.973231][ T7032] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9047'. [ 1130.002531][ T7029] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9046'. [ 1130.015764][ T7032] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9047'. [ 1130.048003][ T7029] vlan4: entered promiscuous mode [ 1130.192853][ T7037] netlink: 48 bytes leftover after parsing attributes in process `syz.5.9048'. [ 1130.236020][ T7039] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9049'. [ 1130.290166][ T7039] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9049'. [ 1130.338159][ T7041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1130.353355][ T7042] netlink: 'syz.4.9049': attribute type 2 has an invalid length. [ 1130.366233][ T7042] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9049'. [ 1130.491080][ T7039] team0: Port device team_slave_0 removed [ 1130.541879][ T7046] syzkaller1: entered promiscuous mode [ 1130.559192][ T7046] syzkaller1: entered allmulticast mode [ 1130.739059][ T6880] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1130.753172][ T6880] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.934316][ T7062] sctp: [Deprecated]: syz.3.9055 (pid 7062) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1130.934316][ T7062] Use struct sctp_sack_info instead [ 1130.947528][ T4949] Bluetooth: hci1: command tx timeout [ 1131.225908][ T6880] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1131.278021][ T6880] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.481633][ T7081] netlink: 'syz.3.9060': attribute type 7 has an invalid length. [ 1131.511370][ T6880] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1131.523152][ T6880] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.573176][ T7083] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1131.587952][ T7083] bond5 (unregistering): Released all slaves [ 1131.661770][ T6880] netdevsim netdevsim1  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1131.677275][ T6880] netdevsim netdevsim1  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.940857][ T7097] lo speed is unknown, defaulting to 1000 [ 1131.995943][ T7097] xfrm0 speed is unknown, defaulting to 1000 [ 1132.218655][ T7109] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 1132.308162][ T6880] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1132.331524][ T6880] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1132.420481][ T6880] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1132.452631][ T6880] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1132.497699][ T6880] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1132.558392][ T6880] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1132.572211][ T7120] netlink: 'syz.2.9074': attribute type 1 has an invalid length. [ 1132.607905][ T6880] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1132.619843][ T6107] net_ratelimit: 13 callbacks suppressed [ 1132.619861][ T6107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1132.633824][ T6107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1132.656943][ T6880] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1132.963403][ T6880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1133.014556][ T4949] Bluetooth: hci1: command tx timeout [ 1133.033791][ T6880] 8021q: adding VLAN 0 to HW filter on device team0 [ 1133.058074][ T7146] netlink: 'syz.3.9079': attribute type 5 has an invalid length. [ 1133.072369][ T6106] bridge0: port 1(bridge_slave_0) entered blocking state [ 1133.079643][ T6106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1133.126764][ T6085] bridge0: port 2(bridge_slave_1) entered blocking state [ 1133.134007][ T6085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1133.255360][ T6105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1133.263722][ T6107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1133.636566][ T7174] set match dimension is over the limit! [ 1134.084020][ T6880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1134.147639][ T7153] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1134.162629][ T7190] netlink: 'syz.5.9090': attribute type 1 has an invalid length. [ 1134.175172][ T7190] __nla_validate_parse: 9 callbacks suppressed [ 1134.175193][ T7190] netlink: 240 bytes leftover after parsing attributes in process `syz.5.9090'. [ 1134.219074][ T6880] veth0_vlan: entered promiscuous mode [ 1134.239197][ T7190] netlink: 'syz.5.9090': attribute type 1 has an invalid length. [ 1134.289271][ T6880] veth1_vlan: entered promiscuous mode [ 1134.408935][ T7198] bond5: entered allmulticast mode [ 1134.454461][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1134.560233][ T6880] veth0_macvtap: entered promiscuous mode [ 1134.610402][ T6880] veth1_macvtap: entered promiscuous mode [ 1134.715990][ T6880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1134.765943][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1134.780793][ T6880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1134.835361][ T6107] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.866406][ T6107] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.891706][ T6107] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.942632][ T6107] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.095441][T28150] Bluetooth: hci1: command tx timeout [ 1135.308943][ T6085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1135.338763][ T6085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1135.487523][ T7251] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9106'. [ 1135.496909][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1135.519576][ T6085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1135.533898][ T6085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1136.057277][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1136.078817][ T7286] netlink: 88 bytes leftover after parsing attributes in process `syz.5.9112'. [ 1136.127447][ T7286] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9112'. [ 1136.674992][ T7317] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9120'. [ 1136.789995][ T4949] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1136.812448][ T7317] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1136.818588][ T4949] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1136.830804][ T4949] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1136.853342][ T4949] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1136.863841][ T4949] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1136.870552][ T7322] macvlan2: entered promiscuous mode [ 1136.892819][ T7322] macvlan2: entered allmulticast mode [ 1136.923340][ T7322] bond4: entered promiscuous mode [ 1136.938143][ T7322] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1136.949442][ T7327] netlink: 'syz.4.9122': attribute type 9 has an invalid length. [ 1136.972164][ T7322] bond4: left promiscuous mode [ 1137.097257][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1137.189834][ T6105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1137.581583][ T7323] lo speed is unknown, defaulting to 1000 [ 1137.604459][ T7323] xfrm0 speed is unknown, defaulting to 1000 [ 1137.706296][ T7360] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9129'. [ 1137.724376][ T7360] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9129'. [ 1137.735300][ T6105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1137.971616][ T7323] bridge0: port 1(bridge_slave_0) entered blocking state [ 1137.980251][ T7323] bridge0: port 1(bridge_slave_0) entered disabled state [ 1137.990749][ T7323] bridge_slave_0: entered allmulticast mode [ 1137.999246][ T7323] bridge_slave_0: entered promiscuous mode [ 1138.009348][ T7323] bridge0: port 2(bridge_slave_1) entered blocking state [ 1138.017493][ T7323] bridge0: port 2(bridge_slave_1) entered disabled state [ 1138.026578][ T7323] bridge_slave_1: entered allmulticast mode [ 1138.034622][ T7323] bridge_slave_1: entered promiscuous mode [ 1138.073024][ T7323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1138.089458][ T7323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1138.131338][ T7323] team0: Port device team_slave_0 added [ 1138.143152][ T7323] team0: Port device team_slave_1 added [ 1138.175055][ T7323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1138.182053][ T7323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1138.210114][ T7323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1138.228770][ T7323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1138.236696][ T7323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1138.263281][ T7323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1138.318123][ T7323] hsr_slave_0: entered promiscuous mode [ 1138.327508][ T7323] hsr_slave_1: entered promiscuous mode [ 1138.334007][ T7323] debugfs: 'hsr0' already exists in 'hsr' [ 1138.340706][ T7323] Cannot create hsr debugfs directory [ 1138.374703][ T6109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1138.386592][ T6106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1138.475477][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1138.640980][ T7323] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1138.656782][ T7323] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.771938][ T7323] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1138.783756][ T7323] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.874005][ T7323] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1138.890429][ T7323] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.945619][T28150] Bluetooth: hci5: command tx timeout [ 1139.019222][ T6109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1139.027455][ T6109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1139.193510][ T7294] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1139.214103][ T7323] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1139.263148][ T7323] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1139.285891][ T7323] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1139.330999][ T7323] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1139.362663][ T7323] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1139.413206][ T7323] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1139.439856][ T7323] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1139.482229][ T7323] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1139.494335][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1139.506105][ T6106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1139.751576][ T7323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1139.813881][ T7323] 8021q: adding VLAN 0 to HW filter on device team0 [ 1139.887835][ T6109] bridge0: port 1(bridge_slave_0) entered blocking state [ 1139.895069][ T6109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1139.929958][ T6109] bridge0: port 2(bridge_slave_1) entered blocking state [ 1139.937218][ T6109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1140.067455][ T7416] syzkaller0: entered promiscuous mode [ 1140.073273][ T7416] syzkaller0: entered allmulticast mode [ 1140.089214][ T7416] tipc: Enabled bearer , priority 0 [ 1140.106497][ T7415] tipc: Resetting bearer [ 1140.173300][ T7423] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9140'. [ 1140.200273][ T7415] tipc: Disabling bearer [ 1140.263258][ T7426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9140'. [ 1140.305655][ T7426] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9140'. [ 1140.534655][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1140.626670][ T6109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1140.786749][ T7439] tun0: tun_chr_ioctl cmd 1074025675 [ 1140.792999][ T7439] tun0: persist enabled [ 1141.026363][T28150] Bluetooth: hci5: command tx timeout [ 1141.080362][ T7454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9148'. [ 1141.083048][ T7451] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9151'. [ 1141.116639][ T7458] sctp: [Deprecated]: syz.4.9150 (pid 7458) Use of int in max_burst socket option deprecated. [ 1141.116639][ T7458] Use struct sctp_assoc_value instead [ 1141.149148][ T7454] netlink: 'syz.2.9148': attribute type 30 has an invalid length. [ 1141.220464][ T6085] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1141.237052][ T6085] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1141.257850][ T6105] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1141.296621][ T6105] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1141.379981][ T7468] xt_TCPMSS: Only works on TCP SYN packets [ 1141.390934][ T7467] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9153'. [ 1141.469121][ T7323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1141.648611][ T7323] veth0_vlan: entered promiscuous mode [ 1141.688759][ T7323] veth1_vlan: entered promiscuous mode [ 1141.731163][ T7484] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9157'. [ 1141.783293][ T7484] netlink: 176 bytes leftover after parsing attributes in process `syz.5.9157'. [ 1141.812056][ T7484] netlink: 'syz.5.9157': attribute type 5 has an invalid length. [ 1141.861330][ T7323] veth0_macvtap: entered promiscuous mode [ 1141.937042][ T7323] veth1_macvtap: entered promiscuous mode [ 1142.020923][ T7323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1142.072140][ T7491] tunl0: left promiscuous mode [ 1142.087238][ T7491] gre0: left promiscuous mode [ 1142.092958][ T7491] gretap0: left promiscuous mode [ 1142.117354][ T7491] erspan0: left promiscuous mode [ 1142.134416][ T7491] ip_vti0: left promiscuous mode [ 1142.162128][ T7491] mac80211_hwsim hwsim76 wlan0: left promiscuous mode [ 1142.173246][ T7491] gretap1: left promiscuous mode [ 1142.182901][ T7491] geneve2: left promiscuous mode [ 1142.188791][ T7491] geneve2: left allmulticast mode [ 1142.195989][ T7501] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9161'. [ 1142.212152][ T7491] gretap2: left promiscuous mode [ 1142.228939][ T7491] gretap2: left allmulticast mode [ 1142.332730][ T6085] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1142.346139][ T6085] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 1142.365233][ T6085] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1142.377115][ T6085] netdevsim netdevsim5 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 1142.432861][ T7323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1142.451619][ T6085] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1142.470506][ T6085] netdevsim netdevsim5 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 1142.483203][ T6085] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1142.493519][ T6085] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 1142.527125][ T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.553397][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.586423][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.618482][ T48] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.641220][ T7510] xt_ecn: cannot match TCP bits for non-tcp packets [ 1142.777321][ T3371] net_ratelimit: 6 callbacks suppressed [ 1142.777343][ T3371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1142.886694][ T6107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1142.898262][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1142.924123][ T6107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1142.951304][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1142.980218][ T7504] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1143.053068][ C1] ------------[ cut here ]------------ [ 1143.058657][ C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 1143.068620][ C1] WARNING: net/mac80211/rate.c:404 at __rate_control_send_low+0x60c/0x8a0, CPU#1: syz-executor/1401 [ 1143.079602][ C1] Modules linked in: [ 1143.083546][ C1] CPU: 1 UID: 0 PID: 1401 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1143.093108][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1143.103252][ C1] RIP: 0010:__rate_control_send_low+0x638/0x8a0 [ 1143.109588][ C1] Code: 7c 24 10 48 8b 44 24 28 42 0f b6 04 28 84 c0 0f 85 c4 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 24 44 8b 4c 24 0c <67> 48 0f b9 3a e9 46 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f [ 1143.129317][ C1] RSP: 0018:ffffc90000a088d8 EFLAGS: 00010246 [ 1143.135484][ C1] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 1143.143499][ C1] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff90699ae0 [ 1143.151566][ C1] RBP: ffff888051020f40 R08: 0000000000000000 R09: 0000000000000000 [ 1143.159641][ C1] R10: 0000000000000004 R11: 0000000000000100 R12: ffff8880adbdba28 [ 1143.167724][ C1] R13: dffffc0000000000 R14: ffffffff90699ae0 R15: ffff888051023258 [ 1143.175803][ C1] FS: 000055558b729500(0000) GS:ffff88812505a000(0000) knlGS:0000000000000000 [ 1143.184815][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1143.191434][ C1] CR2: 00007f33cbb556b8 CR3: 000000004682a000 CR4: 00000000003526f0 [ 1143.199539][ C1] Call Trace: [ 1143.202860][ C1] [ 1143.205806][ C1] rate_control_send_low+0x1a7/0x7b0 [ 1143.211156][ C1] rate_control_get_rate+0x20b/0x5d0 [ 1143.216550][ C1] ieee80211_beacon_get_finish+0x385/0x6c0 [ 1143.222518][ C1] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 1143.228704][ C1] ? local_lock_release+0x9c/0x160 [ 1143.233872][ C1] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 1143.240330][ C1] ? __ieee80211_beacon_get+0xdcc/0x1920 [ 1143.246169][ C1] ? __ieee80211_beacon_get+0x36/0x1920 [ 1143.251773][ C1] __ieee80211_beacon_get+0xe2b/0x1920 [ 1143.257394][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 1143.262908][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 1143.269096][ C1] ? __devm_mutex_init+0xa0/0x120 [ 1143.274226][ C1] mac80211_hwsim_beacon_tx+0x378/0x820 [ 1143.279905][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1143.287227][ C1] __iterate_interfaces+0x2af/0x5a0 [ 1143.292473][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1143.298652][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1143.305940][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1143.312079][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1143.319216][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1143.325198][ C1] mac80211_hwsim_beacon+0xaf/0x240 [ 1143.330463][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1143.336415][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 1143.341759][ C1] hrtimer_run_softirq+0x17a/0x240 [ 1143.347004][ C1] handle_softirqs+0x225/0x840 [ 1143.351848][ C1] ? __irq_exit_rcu+0xca/0x220 [ 1143.356741][ C1] __irq_exit_rcu+0xca/0x220 [ 1143.361375][ C1] irq_exit_rcu+0x9/0x30 [ 1143.364010][ T7520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1143.365705][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1143.365752][ C1] [ 1143.365762][ C1] [ 1143.365773][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1143.365799][ C1] RIP: 0010:copy_pmd_range+0xee7/0x5880 [ 1143.365853][ C1] Code: 83 e3 0c ff 84 1c 20 02 00 00 e9 5b 10 00 00 e8 4f 0a ab ff 4d 89 ef 49 c1 ef 03 48 b8 00 00 00 00 00 fc ff df 41 80 3c 07 00 <74> 08 4c 89 ef e8 bf 8e 18 00 49 8b 5d 00 48 b8 00 00 00 00 00 00 [ 1143.365873][ C1] RSP: 0018:ffffc90005677320 EFLAGS: 00000246 [ 1143.365896][ C1] RAX: dffffc0000000000 RBX: 0000000000000004 RCX: ffff8880319d1f00 [ 1143.365913][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 1143.365928][ C1] RBP: ffffc900056775b0 R08: ffff88807889a1a3 R09: 1ffff1100f113434 [ 1143.365946][ C1] R10: dffffc0000000000 R11: ffffed100f113435 R12: ffffea00010436c0 [ 1143.365964][ C1] R13: ffffea00010436c0 R14: ffff88807889a1a0 R15: 1ffffd40002086d8 [ 1143.366001][ C1] ? stack_depot_save_flags+0x33/0x800 [ 1143.366062][ C1] ? __lock_acquire+0x683/0x2cf0 [ 1143.366113][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 1143.366141][ C1] ? percpu_ref_get_many+0x19/0x140 [ 1143.366180][ C1] ? copy_page_range+0x2a0/0x1250 [ 1143.366232][ C1] copy_page_range+0xc26/0x1250 [ 1143.366289][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 1143.366329][ C1] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 1143.366365][ C1] dup_mmap+0xf21/0x1d90 [ 1143.366414][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 1143.366439][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1143.366480][ C1] ? copy_mm+0x10f/0x480 [ 1143.366519][ C1] ? copy_mm+0x10f/0x480 [ 1143.366562][ C1] copy_mm+0x11a/0x480 [ 1143.366592][ C1] ? copy_process+0xd3c/0x43f0 [ 1143.366617][ C1] copy_process+0x1e99/0x43f0 [ 1143.366655][ C1] ? copy_process+0xd3c/0x43f0 [ 1143.366711][ C1] ? __pfx_copy_process+0x10/0x10 [ 1143.366754][ C1] kernel_clone+0x2d7/0x940 [ 1143.366781][ C1] ? cgroup1_freezing+0x20/0x350 [ 1143.366817][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 1143.366867][ C1] __x64_sys_clone+0x1b6/0x230 [ 1143.366901][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 1143.366958][ C1] ? do_user_addr_fault+0xc4a/0x1340 [ 1143.366997][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1143.367022][ C1] do_syscall_64+0x174/0x580 [ 1143.367051][ C1] ? trace_irq_disable+0x3b/0x140 [ 1143.367079][ C1] ? clear_bhb_loop+0x40/0x90 [ 1143.367106][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1143.367128][ C1] RIP: 0033:0x7f33cadc68d2 [ 1143.367149][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 1143.367168][ C1] RSP: 002b:00007ffdddc5bf00 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1143.367192][ C1] RAX: ffffffffffffffda RBX: 00007ffdddc5bf00 RCX: 00007f33cadc68d2 [ 1143.367209][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1143.367224][ C1] RBP: 00007ffdddc5c08c R08: 0000000000000000 R09: 0000000000000001 [ 1143.367239][ C1] R10: 000055558b7297d0 R11: 0000000000000246 R12: 0000000000000001 [ 1143.367273][ C1] R13: 00000000000927c0 R14: 0000000000116fab R15: 00007ffdddc5c0e0 [ 1143.367310][ C1] [ 1143.432561][ T6085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1143.434111][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1143.434182][ C1] CPU: 1 UID: 0 PID: 1401 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1143.434277][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1143.434312][ C1] Call Trace: [ 1143.434342][ C1] [ 1143.434372][ C1] vpanic+0x56c/0xa60 [ 1143.434548][ C1] ? __pfx__printk+0x10/0x10 [ 1143.434621][ C1] ? __pfx_vpanic+0x10/0x10 [ 1143.434708][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 1143.434792][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 1143.434906][ C1] panic+0xc5/0xd0 [ 1143.434991][ C1] ? __pfx_panic+0x10/0x10 [ 1143.435128][ C1] __warn+0x315/0x4c0 [ 1143.435180][ C1] ? __rate_control_send_low+0x60c/0x8a0 [ 1143.435275][ C1] ? __rate_control_send_low+0x60c/0x8a0 [ 1143.435346][ C1] __report_bug+0x331/0x530 [ 1143.435515][ C1] ? __kernel_text_address+0xd/0x30 [ 1143.435638][ C1] ? __rate_control_send_low+0x60c/0x8a0 [ 1143.435730][ C1] ? __pfx___report_bug+0x10/0x10 [ 1143.435833][ C1] ? stack_trace_save+0xa9/0x100 [ 1143.435907][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1143.436006][ C1] report_bug_entry+0x19a/0x290 [ 1143.436091][ C1] ? __rate_control_send_low+0x638/0x8a0 [ 1143.436166][ C1] ? __rate_control_send_low+0x63d/0x8a0 [ 1143.436233][ C1] handle_bug+0xce/0x200 [ 1143.436323][ C1] exc_invalid_op+0x1a/0x50 [ 1143.436408][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1143.436470][ C1] RIP: 0010:__rate_control_send_low+0x638/0x8a0 [ 1143.436541][ C1] Code: 7c 24 10 48 8b 44 24 28 42 0f b6 04 28 84 c0 0f 85 c4 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 24 44 8b 4c 24 0c <67> 48 0f b9 3a e9 46 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f [ 1143.436592][ C1] RSP: 0018:ffffc90000a088d8 EFLAGS: 00010246 [ 1143.436650][ C1] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 1143.436699][ C1] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff90699ae0 [ 1143.436751][ C1] RBP: ffff888051020f40 R08: 0000000000000000 R09: 0000000000000000 [ 1143.436790][ C1] R10: 0000000000000004 R11: 0000000000000100 R12: ffff8880adbdba28 [ 1143.436829][ C1] R13: dffffc0000000000 R14: ffffffff90699ae0 R15: ffff888051023258 [ 1143.436924][ C1] ? __rate_control_send_low+0x600/0x8a0 [ 1143.437060][ C1] rate_control_send_low+0x1a7/0x7b0 [ 1143.437156][ C1] rate_control_get_rate+0x20b/0x5d0 [ 1143.437253][ C1] ieee80211_beacon_get_finish+0x385/0x6c0 [ 1143.437355][ C1] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 1143.437429][ C1] ? local_lock_release+0x9c/0x160 [ 1143.437517][ C1] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 1143.437640][ C1] ? __ieee80211_beacon_get+0xdcc/0x1920 [ 1143.437769][ C1] ? __ieee80211_beacon_get+0x36/0x1920 [ 1143.437858][ C1] __ieee80211_beacon_get+0xe2b/0x1920 [ 1143.437986][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 1143.438080][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 1143.438177][ C1] ? __devm_mutex_init+0xa0/0x120 [ 1143.438282][ C1] mac80211_hwsim_beacon_tx+0x378/0x820 [ 1143.438367][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1143.438496][ C1] __iterate_interfaces+0x2af/0x5a0 [ 1143.438577][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1143.438639][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1143.438721][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1143.438784][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1143.438864][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1143.438939][ C1] mac80211_hwsim_beacon+0xaf/0x240 [ 1143.439025][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1143.439107][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 1143.439212][ C1] hrtimer_run_softirq+0x17a/0x240 [ 1143.439288][ C1] handle_softirqs+0x225/0x840 [ 1143.439377][ C1] ? __irq_exit_rcu+0xca/0x220 [ 1143.439460][ C1] __irq_exit_rcu+0xca/0x220 [ 1143.439563][ C1] irq_exit_rcu+0x9/0x30 [ 1143.439626][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1143.439700][ C1] [ 1143.439734][ C1] [ 1143.439769][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1143.439856][ C1] RIP: 0010:copy_pmd_range+0xee7/0x5880 [ 1143.439920][ C1] Code: 83 e3 0c ff 84 1c 20 02 00 00 e9 5b 10 00 00 e8 4f 0a ab ff 4d 89 ef 49 c1 ef 03 48 b8 00 00 00 00 00 fc ff df 41 80 3c 07 00 <74> 08 4c 89 ef e8 bf 8e 18 00 49 8b 5d 00 48 b8 00 00 00 00 00 00 [ 1143.439970][ C1] RSP: 0018:ffffc90005677320 EFLAGS: 00000246 [ 1143.440020][ C1] RAX: dffffc0000000000 RBX: 0000000000000004 RCX: ffff8880319d1f00 [ 1143.440062][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 1143.440111][ C1] RBP: ffffc900056775b0 R08: ffff88807889a1a3 R09: 1ffff1100f113434 [ 1143.440153][ C1] R10: dffffc0000000000 R11: ffffed100f113435 R12: ffffea00010436c0 [ 1143.440196][ C1] R13: ffffea00010436c0 R14: ffff88807889a1a0 R15: 1ffffd40002086d8 [ 1143.440283][ C1] ? stack_depot_save_flags+0x33/0x800 [ 1143.440395][ C1] ? __lock_acquire+0x683/0x2cf0 [ 1143.440517][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 1143.440581][ C1] ? percpu_ref_get_many+0x19/0x140 [ 1143.440673][ C1] ? copy_page_range+0x2a0/0x1250 [ 1143.440814][ C1] copy_page_range+0xc26/0x1250 [ 1143.440967][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 1143.441081][ C1] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 1143.441208][ C1] dup_mmap+0xf21/0x1d90 [ 1143.441332][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 1143.441410][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1143.441525][ C1] ? copy_mm+0x10f/0x480 [ 1143.441598][ C1] ? copy_mm+0x10f/0x480 [ 1143.441720][ C1] copy_mm+0x11a/0x480 [ 1143.441795][ C1] ? copy_process+0xd3c/0x43f0 [ 1143.441864][ C1] copy_process+0x1e99/0x43f0 [ 1143.441961][ C1] ? copy_process+0xd3c/0x43f0 [ 1143.442075][ C1] ? __pfx_copy_process+0x10/0x10 [ 1143.442116][ C1] kernel_clone+0x2d7/0x940 [ 1144.249680][ C1] ? cgroup1_freezing+0x20/0x350 [ 1144.254656][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 1144.259724][ C1] __x64_sys_clone+0x1b6/0x230 [ 1144.264525][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 1144.269846][ C1] ? do_user_addr_fault+0xc4a/0x1340 [ 1144.275169][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1144.281260][ C1] do_syscall_64+0x174/0x580 [ 1144.285880][ C1] ? trace_irq_disable+0x3b/0x140 [ 1144.290949][ C1] ? clear_bhb_loop+0x40/0x90 [ 1144.295654][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1144.301568][ C1] RIP: 0033:0x7f33cadc68d2 [ 1144.306004][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 1144.325631][ C1] RSP: 002b:00007ffdddc5bf00 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1144.334062][ C1] RAX: ffffffffffffffda RBX: 00007ffdddc5bf00 RCX: 00007f33cadc68d2 [ 1144.342051][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1144.350039][ C1] RBP: 00007ffdddc5c08c R08: 0000000000000000 R09: 0000000000000001 [ 1144.358041][ C1] R10: 000055558b7297d0 R11: 0000000000000246 R12: 0000000000000001 [ 1144.366036][ C1] R13: 00000000000927c0 R14: 0000000000116fab R15: 00007ffdddc5c0e0 [ 1144.374051][ C1] [ 1144.377685][ C1] Kernel Offset: disabled [ 1144.382038][ C1] Rebooting in 86400 seconds..