last executing test programs: 4m14.421506145s ago: executing program 0 (id=1166): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r3, @in={{0x2, 0x4e21, @empty}}, 0x0, 0x0, 0x0, 0xba, 0xce02cd}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x81, 0xffffffff, 0x6940000, 0x80, 0x9, 0x77}, &(0x7f0000000940)=0x9c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000240)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r1, &(0x7f0000000200)={0x2c, 0x4, 0x0, 0x11}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x9, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="b400000000000000dd0a"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x19}, 0x94) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r6, 0x112, 0xd, &(0x7f0000000280)=0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m13.328295781s ago: executing program 0 (id=1173): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2000}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) read$alg(r1, &(0x7f0000000100)=""/68, 0x44) write(r3, &(0x7f0000000680)="4ede", 0x2) splice(r3, &(0x7f0000000040), r2, 0x0, 0x800000000ff, 0x0) socket$kcm(0x2, 0xa, 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x400100, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000080)={'sit0\x00', @local}) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000280)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f328db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052", 0x33}, {&(0x7f0000000680)="2a637c1b8b3894ec89aaef510a473f", 0xf}], 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2000}) (async) pipe(&(0x7f00000001c0)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) (async) read$alg(r1, &(0x7f0000000100)=""/68, 0x44) (async) write(r3, &(0x7f0000000680)="4ede", 0x2) (async) splice(r3, &(0x7f0000000040), r2, 0x0, 0x800000000ff, 0x0) (async) socket$kcm(0x2, 0xa, 0x2) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x400100, 0x0) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000080)={'sit0\x00', @local}) (async) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000280)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f328db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052", 0x33}, {&(0x7f0000000680)="2a637c1b8b3894ec89aaef510a473f", 0xf}], 0x2) (async) 4m11.8157302s ago: executing program 0 (id=1179): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0), 0x0, 0x1) write(r1, &(0x7f00000000c0)="c4df7b857f8d16c905ec08de61616e62ae906c33aaf20e23f245952e47f183709adc677b95aa8a8a3066e8e327d5f3dd07d9b191b20d8ea58c3408b0254fe85e4c19a7c7c3cd2c4f2945c9083651c5a9c8e79aa1c630015a58eb9d67e9f8f955e413e7c9fb7b0d620a2f44eed81533d2006721e24ae22486f6c77308077f0750e0216e1e31a94803ad50f03d46974f390bbdb0f6631d", 0x96) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) write(r3, &(0x7f00000001c0)="b4", 0x1) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r5 = accept4(r4, 0x0, 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x7, 0x12) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x18, 0x2b, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x838}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @alu={0x4, 0x1, 0xc, 0x9, 0x9, 0xffffffffffffffc0, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xffffffff}, @alu={0x4, 0x0, 0x57cbcdb13b268863, 0x0, 0x4, 0xfffffffffffffee0, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x3c}, @generic={0x3d, 0x5, 0x1, 0x7ff, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='GPL\x00', 0x80, 0x1000, &(0x7f00000003c0)=""/4096, 0x40f00, 0x21, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000013c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000001400)={0x2, 0x6, 0x2, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001440)=[r0, r0, r1, r1], &(0x7f0000001480)=[{0x2, 0x4, 0x4, 0x4}], 0x10, 0x80}, 0x94) splice(r0, 0x0, r3, 0x0, 0x25a5, 0x0) 4m10.716950659s ago: executing program 0 (id=1184): syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010010000000ffdbdf2500000000", @ANYRES32, @ANYBLOB="20000000280e0400280012800b0001006d61637365630000180002800500030008"], 0x48}, 0x1, 0x0, 0x0, 0x24008001}, 0x0) socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000400)=@newtfilter={0xfc, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc8, 0x2, [@TCA_MATCHALL_ACT={0xc4, 0x2, [@m_ctinfo={0xc0, 0xc, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x53}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x100}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x488d}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x9}]}, {0x69, 0x6, "e25f788b275f5da54adc2a7b26745f667e4a04136436c9322433284fe8da03578f92763a8b6b1c4c03a2906250f151c489bfe72450dd6386c1957b1810c853f78f6929cb7219d54cd3416f0373a293374aaf068a819bd12a3d2ef4fb4becc1e8a8b93031c2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x48001}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) socket$kcm(0x10, 0x2, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) r10 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r9, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r10, 0x1}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r11, r13, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000a00)={@local, @local, @void, {@mpls_mc={0x8848, {[], @ipv6=@dccp_packet={0xf, 0x6, "1bfae7", 0x10, 0x21, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}, {[], {{0x4e22, 0x4e21, 0x4, 0x1, 0x4, 0x0, 0x0, 0x4, 0x7, "ff8db3", 0x64, "9c404c"}}}}}}}}, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) 4m7.234372587s ago: executing program 0 (id=1206): r0 = socket(0x2b, 0x1, 0x0) listen(r0, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x20040014) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'pimreg0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0xb, 0x4, 0x11, 0x5392, 0xfb9d, 0x9, {0x0, @in={{0x2, 0x4e22, @multicast1}}, 0x81, 0x0, 0xc, 0x4b, 0x9}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f00000003c0)={0x6, {0x2, 0x6, 0x6, 0x8, 0xe01}}) bind$netlink(r1, &(0x7f0000000140)={0x10, 0x0, 0x6, 0x400000}, 0xc) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000004000070127bd7000f6dbdf25037c00000400c2800c00018008000300", @ANYRES32, @ANYBLOB="040008"], 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) write$tun(r2, &(0x7f0000000340)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x2, 0x0, 0x14}, @ipv4=@icmp={{0x12, 0x4, 0x0, 0x5, 0x50, 0x66, 0x0, 0x9, 0x1, 0x0, @remote, @multicast1, {[@noop, @lsrr={0x83, 0x1f, 0x2c, [@loopback, @rand_addr=0x64010101, @empty, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0xc}]}, @cipso={0x86, 0x10, 0x0, [{0x2, 0x6, "a7a66dba"}, {0x1, 0x4, "d064"}]}, @noop]}}, @info_reply={0x10, 0x0, 0x0, 0x553f, 0x4}}}, 0x5e) 3m51.857263761s ago: executing program 32 (id=1206): r0 = socket(0x2b, 0x1, 0x0) listen(r0, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x20040014) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'pimreg0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0xb, 0x4, 0x11, 0x5392, 0xfb9d, 0x9, {0x0, @in={{0x2, 0x4e22, @multicast1}}, 0x81, 0x0, 0xc, 0x4b, 0x9}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f00000003c0)={0x6, {0x2, 0x6, 0x6, 0x8, 0xe01}}) bind$netlink(r1, &(0x7f0000000140)={0x10, 0x0, 0x6, 0x400000}, 0xc) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000004000070127bd7000f6dbdf25037c00000400c2800c00018008000300", @ANYRES32, @ANYBLOB="040008"], 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) write$tun(r2, &(0x7f0000000340)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x2, 0x0, 0x14}, @ipv4=@icmp={{0x12, 0x4, 0x0, 0x5, 0x50, 0x66, 0x0, 0x9, 0x1, 0x0, @remote, @multicast1, {[@noop, @lsrr={0x83, 0x1f, 0x2c, [@loopback, @rand_addr=0x64010101, @empty, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0xc}]}, @cipso={0x86, 0x10, 0x0, [{0x2, 0x6, "a7a66dba"}, {0x1, 0x4, "d064"}]}, @noop]}}, @info_reply={0x10, 0x0, 0x0, 0x553f, 0x4}}}, 0x5e) 3m32.524116479s ago: executing program 5 (id=1282): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000040fc00000000008517000000390000009500000000000000"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0xa, 0x3, 0x87) r2 = accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000180)=0x1c) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000280), &(0x7f00000002c0)=0x8) sendmsg$kcm(r1, &(0x7f0000000580)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000840)="696f1bf7", 0x4}], 0x1}, 0x40050) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000002060500000000000014000780080008000000000008000640000000000505000006000000050005000200348dd9e8187a29cc00000900020073797a310000000015000300686173683a69702c706f72742c6e657400"/100], 0x64}}, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000380)="41f53a388c1e3fb998b1e438544e47debfbda3df8b7920514115b99e3efcc73eb79cb19c775463de80620500d4acd3030a21bbc4c142956ceefe7cfb5c4207020000006c9d5f724a57553873eb7a0951bbdf89d33422fd5362307e26ff0801f5c9a36efb1d7744a597a01252738948dc3b8033aeed03000000707f46d7eca4113e32681d2a028cf86b7a9536ed07aec08a678c85ea4395548477fd589bb27bf2feb3aa2c8e8fedf83844fb683a0e6c76a1c86c53510b8399a17e2f7109107fa986607bbf279ca035977c4f214767906399667688843849df56da741d120d27dd431a797600000000000000000000000000000000000100") ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001340)=@deltfilter={0x2c, 0x2d, 0x1, 0x78bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x10, 0x3}, {0xfff2, 0xffff}, {0x3, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c014}, 0x20044000) 3m31.92540789s ago: executing program 5 (id=1356): socket$netlink(0x10, 0x3, 0x10) (async) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000380)=@sack_info={0x0, 0x0, 0x7}, &(0x7f00000003c0)=0xc) (async) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000380)=@sack_info={0x0, 0x0, 0x7}, &(0x7f00000003c0)=0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) 3m16.912698236s ago: executing program 33 (id=1356): socket$netlink(0x10, 0x3, 0x10) (async) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000380)=@sack_info={0x0, 0x0, 0x7}, &(0x7f00000003c0)=0xc) (async) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000380)=@sack_info={0x0, 0x0, 0x7}, &(0x7f00000003c0)=0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) 3m10.990678294s ago: executing program 3 (id=1459): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8923, &(0x7f0000000000)={'macvtap0\x00', 0x6}) 3m10.987794346s ago: executing program 2 (id=1460): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x5}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000240)={{r0}, r1, 0x6, @inherit={0x68, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000004000000000000000300000000000000050000000000000030000000000000000200000000001900ff01000000000000ef66000000000000070000000000000006000000000000000300000000000000bb0f000000000000c700000000000000"]}, @subvolid=0x8}) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 3m10.987267297s ago: executing program 1 (id=1461): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = accept$inet(r0, &(0x7f0000000280)={0x2, 0x0, @remote}, &(0x7f0000000380)=0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETLINK(r2, 0x400454cd, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000300)=r4) (async) write$cgroup_int(r2, &(0x7f0000000240)=0x2, 0x12) (async) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e", 0x2}], 0x1}}], 0x1, 0x6081) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000fe8000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000003600)=""/4123, 0x101b, 0x0, 0x0}, &(0x7f0000000340)=0x2d) 3m10.507695334s ago: executing program 3 (id=1463): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3d}]}, 0x24}}, 0x20000) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000a80)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="02002bbd7000fcdbdf250f0000000500d5000100000008000c0000000100040016010500a3000000000008000d001a000000b3206b4c1609edf18917448f2bdbd61d0fee56390900fd55d18e383bb2fb903d6c72efd4796dc4e10ff39899b77981aeb87ef6e5d5533c6318bdd50a9ae6c18263fac7b0daeffe6f83e3a6baaaf865311c9ff53760514b849ccd1b95f027f381e1b9ab96585b155e30280149f372bb5d7afd29545cf63e6e60d481c0b953e33944"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="288d853d4b3c1e4d09010000", @ANYRES32=r0, @ANYRESOCT, @ANYRES32=r11, @ANYRESHEX=r6], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r12, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210057ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) (async) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r7, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x88, r8, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x80}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x80}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}]}, 0x88}, 0x1, 0x0, 0x0, 0x40041}, 0x8000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180), 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32, @ANYBLOB="0000000000000000690200000000000095"], &(0x7f0000000d40)='syzkaller\x00'}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x1b, 0x11, &(0x7f0000000740)=@raw=[@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8000}}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}], &(0x7f0000000800)='GPL\x00', 0x62, 0x0, 0x0, 0x40f00, 0x16, '\x00', r6, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x3, 0x5, 0x1, 0x8}, 0x10, 0xffffffffffffffff, r12, 0x7, &(0x7f0000000900)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000940)=[{0x0, 0x4, 0x7}, {0x4, 0x1, 0xa, 0x9}, {0x1, 0x3, 0x9, 0xa}, {0x5, 0x5, 0xe, 0xa}, {0x2, 0x3, 0x5, 0x7}, {0x1, 0x1, 0xb, 0xc}, {0x3, 0x2, 0xf, 0xc}], 0x10, 0x3}, 0x94) (async) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r13) (async) r15 = socket(0xa, 0x3, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r15, 0x29, 0x6, 0x0, &(0x7f0000000840)) sendmsg$rds(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/28, 0x1c}], 0x1, 0x0, 0x0, 0x20000820}, 0x1821) (async) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000001c0)={0x0, 0x0, 0x7ff, 0x4}) (async) sendmsg$IEEE802154_START_REQ(r13, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000d40)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010000000000000000000000000000050017000000000006000a00"/46], 0x34}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 3m9.790808487s ago: executing program 3 (id=1464): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x0}) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x190, 0x194, 0x194, 0x190, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x0, 0x42}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x10, 0x30, 0x5, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x0, 0x4, 0x3, 0x3, 0x2, 0x2], 0x0, 0x3}, {0x3, [0x1, 0x5, 0x4, 0x4, 0x3], 0x3, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x2, 0x25dfdbfa, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffd7f, 0x8002}}]}, 0x34}}, 0x20008000) r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000bc0)=0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={0x0, &(0x7f0000000200)=""/20, 0x0, 0x14, 0x1, 0x3}, 0x28) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0xfe, 0x0, 0x1b, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xfffd, 0x88000}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x4f, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r5}]}, 0x1c}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newae={0x128, 0x1e, 0x400, 0x70bd2a, 0x25dfdbfc, {{@in=@broadcast, 0x4d5, 0x2, 0xd4}, @in=@private=0xa010102}, [@user_kmaddress={0x2c, 0x13, {@in=@local, @in6=@loopback, 0x0, 0xa}}, @extra_flags={0x8, 0x18, 0x4}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}, @policy={0xac, 0x7, {{@in=@broadcast, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e22, 0x1, 0x4e22, 0x81, 0x2, 0x80, 0x86cc901c03e9dcfb, 0x32, r1, r5}, {0x2c02, 0xfffffffffffffff8, 0x4, 0x7, 0x7, 0x6, 0x3a, 0x8}, {0x7, 0x1, 0x0, 0x9}, 0x9, 0x0, 0x1, 0x0, 0x1, 0x3}}]}, 0x128}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000880)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)=@bridge_getneigh={0x64, 0x1e, 0x1, 0x70bd29, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x20002, 0x9848}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x80000001}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'ip6_vti0\x00'}, {0x14, 0x35, 'geneve1\x00'}]}, @IFLA_MTU={0x8, 0x4, 0xa00000}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x2f4f}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x20008010) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket(0x10, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000000000010000000a000000090002008d001f106f194eb3050001"], 0x30}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, 0x0, 0x28) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r12, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3264}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r13}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendto$inet6(r9, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006120a0000000d0085a168d0bf46d32345653600648d27000b000a00070849935ade4a460c89b6ec0cff3959547f509058ad86c902007a00004a32000407160012000a0000000000e000e21800003b6ed538f6523250", 0x78, 0x2251197285d76a80, 0x0, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e000000030100000000040000000000000008001f0001"], 0xd4}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 3m8.433052294s ago: executing program 1 (id=1466): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000001600010a0000000000000000dd93"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipmr_newroute={0x24, 0x18, 0x100, 0x70bd2a, 0x25dfdbfc, {0x80, 0x20, 0x80, 0x4, 0x0, 0x4, 0xc8, 0xb, 0x1000}, [@RTA_MARK={0x8, 0x10, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40448d5) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipmr_newroute={0x24, 0x18, 0x100, 0x70bd2a, 0x25dfdbfc, {0x80, 0x20, 0x80, 0x4, 0x0, 0x4, 0xc8, 0xb, 0x1000}, [@RTA_MARK={0x8, 0x10, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40448d5) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000001240)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001200)={&(0x7f0000000e40)={0x3b0, r2, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffe01, 0x74}}}}, [@NL80211_ATTR_TID_CONFIG={0x390, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x36c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2ec, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x48, 0x0, 0x6, 0x9, 0xf, 0x2, 0x12, 0x62, 0x0, 0x30, 0x63, 0x1b, 0x16, 0x1, 0x6, 0x24, 0x60, 0x30, 0xabc7ce4820a2a3c4, 0x4, 0xc, 0x30]}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x7, 0x6}, {0x0, 0x1}, {0x1, 0x8}, {0x3, 0xa}, {0x4, 0x2}, {0x2, 0x2}, {}, {0x3, 0x4}, {0x0, 0xa}, {0x0, 0x7}, {0x7, 0x2}, {0x2}, {0x0, 0x6}, {0x0, 0x2}, {0x2}, {0x5, 0x4}, {0x6}, {0x0, 0x3}, {0x6, 0xa}, {0x3, 0x3}, {0x1, 0x6}, {0x6, 0x6}, {0x5, 0x9}, {0x2, 0x5}, {0x2, 0xa}, {0x6, 0x5}, {0x2, 0x7}, {0x0, 0xa}, {0x3, 0x6}, {0x4, 0x9}, {0x4, 0x7}, {0x6, 0xa}, {0x4}, {0x4, 0x6}, {0x6, 0x4}, {0x1, 0x9}, {0x6, 0x8}, {0x2, 0x6}, {0x5, 0x3}, {0x0, 0x3}, {0x0, 0x1}, {0x6, 0x5}, {0x6, 0xa}, {0x1, 0xa}, {0x3, 0x8}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x6, 0x9}, {0x1, 0x7}, {0x4, 0x7}, {0x7, 0x9}, {0x1, 0x4}, {0x7}, {0x2, 0x5}, {0x3, 0x3}, {0x4}, {0x2, 0x6}, {0x1}, {0x5, 0x5}, {0x0, 0x4}, {0x0, 0x5}, {0x5, 0x2}, {0x6, 0x3}, {0x3, 0x6}, {0x7, 0x1}, {0x0, 0x4}, {0x7, 0x2}, {0x7, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x6e02, 0x0, 0x1c, 0x6, 0x2, 0x9, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xc, 0x16, 0x0, 0x16, 0x1b, 0x26, 0x12, 0x16, 0xebe7155af8644191, 0x16, 0x30, 0x60, 0x12, 0x36, 0x36, 0xb, 0x9, 0x3, 0x30, 0x16, 0x6, 0x4, 0x0, 0x16, 0x1b]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x5, 0x9, 0x9, 0x2, 0x80, 0x1ff, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8ce, 0x8, 0x0, 0x1, 0x8, 0x6, 0x4, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0xa0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x0, 0x5, 0x12, 0x7, 0x3d, 0x4, 0xa33]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x2, 0x401, 0xc, 0xb71d, 0x7f, 0x8, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x12, 0x5, 0x0, 0x0, 0x5, 0xd6f, 0x4, 0x81]}}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x1}, {0x6, 0x7}, {}, {0x3, 0x2}, {0x7, 0x6}, {0x5, 0x6}, {0x0, 0x4}, {0x5, 0x8}, {0x6, 0x5}, {0x1, 0x9}, {0x4, 0x5}, {0x3, 0x1}, {0x4}, {0x7, 0x9}, {0x3, 0x9}, {0x6, 0x3}, {0x7, 0x3}, {0x4, 0x9}, {0x0, 0x7}, {0x3, 0x9}, {0x2, 0x5}, {0x3}, {0x5, 0x6}, {0x7, 0x6}, {0x0, 0x7}, {0x2, 0x3}, {0x7, 0x3}, {0x0, 0xa}, {0x3, 0x6}, {0x6, 0x9}, {0x4, 0x6}, {0x5, 0x3}, {0x6, 0x3}, {0x0, 0x1}, {0x1, 0x2}, {0x5, 0x1}, {0x2, 0x4}, {0x4, 0x3}, {0x2, 0x5}, {0x6}, {0x5, 0x9}, {0x6}, {0x1, 0x3}, {0x2, 0x3}, {0x5, 0x6}, {0x1, 0x6}, {0x3, 0x5}, {0x3, 0xa}, {0x0, 0x8}, {0x1, 0xa}, {0x0, 0x9}, {0x0, 0x4}, {0x6, 0x6}, {0x2, 0x8}, {0x2, 0xd}, {0x0, 0x6}, {0x2, 0x4}, {0x0, 0x4}, {0x0, 0x2}, {0x7, 0x5}, {0x5}, {0x0, 0x3}, {0x2, 0x1}, {0x0, 0x5}, {0x6, 0x6}]}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x9, 0x16, 0x16, 0x3, 0x30, 0x2, 0x24, 0x16, 0x3, 0x12, 0x2]}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x5, 0x9}, {0x5, 0x7}, {0x0, 0x8}, {0x0, 0x7}, {0x5, 0x4}, {0x4, 0x7}, {0x1}, {0x1, 0x6}, {0x2, 0x3}, {0x0, 0x3}, {0x6, 0x8}, {0x6, 0x4}, {0x3, 0x4}, {0x7}, {0x1, 0x4}, {0x7, 0xa}, {0x6, 0x2}, {0x4, 0x4}, {0x5, 0x8}, {0x3, 0x8}, {0x0, 0x2}, {0x6, 0x2}, {0x6, 0x5}, {0x4, 0x3}, {0x6, 0x7}, {0x0, 0xa}, {0x3, 0x6}, {0x7, 0x5}, {0x3, 0x6}, {0x5, 0x7}, {0x7, 0xa}, {0x0, 0x7}, {0x6, 0x6}, {0x0, 0x2}, {0x0, 0xa}, {0x7, 0x1}, {0x3, 0x6}, {0x1, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x3, 0x8, 0x8, 0x6, 0xc469, 0x7, 0x4]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x25, 0x2, [{0x4}, {0x1}, {0x1, 0x2}, {0x3, 0x1}, {0x2, 0x6}, {0x7, 0x7}, {0x1}, {0x6, 0xa}, {0x7, 0x3}, {0x7, 0x9}, {0x2, 0x6}, {0x6, 0x2}, {0x1, 0x3}, {0x4, 0x8}, {0x7, 0x4}, {0x7}, {0x1, 0x9}, {0x3, 0x2}, {0x7, 0x3}, {0x7, 0x2}, {0x0, 0x2}, {0x7, 0x5}, {0x3, 0xa}, {0x6, 0x1}, {0x0, 0x6}, {0x0, 0x6}, {0x1, 0x7}, {0x7, 0x3}, {0x4}, {0x2, 0x6}, {0x5}, {0x7, 0x6}, {0x0, 0x8}]}]}, @NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x892bcb1144cbf94b}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x1, 0x3}, {0x1, 0x5}, {0x1, 0x6}, {0x7, 0x2}, {0x2, 0x9}, {0x5, 0x9}, {0x4, 0x9}, {0x3, 0x6}, {0x6, 0x7}, {0x6, 0x1}, {0x1, 0x5}, {0x2}, {0x0, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x2, 0x3}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0xfffc, 0x5, 0xa, 0x3, 0x2a71, 0x5, 0x6df0]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff8, 0x7bb, 0x4, 0xfffa, 0x8, 0x6, 0x2, 0x1]}}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x5, 0xa}, {0x4, 0x8}, {0x7, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xe6, 0xff, 0x40, 0x80, 0x2, 0x2, 0x1]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x70, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x22, 0x2, [{0x4, 0x1}, {0x5, 0x2}, {0x5, 0x9}, {0x0, 0x7}, {0x7, 0x5}, {0x4, 0x1}, {0x5, 0x9}, {0x6, 0xa}, {0x0, 0xa}, {0x5, 0x6}, {0x1, 0x1}, {0x6, 0x9}, {0x0, 0x2}, {0x6, 0x7}, {0x0, 0x8}, {0x5, 0x6}, {0x5, 0x3}, {0x4, 0x4}, {0x3, 0x2}, {0x7, 0x7}, {0x3, 0x6}, {0x6}, {0x1, 0x6}, {0x0, 0x4}, {0x1, 0x3}, {0x7}, {0x1, 0xa}, {0x3, 0x5}, {0x0, 0xa}, {0x2, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0x0, 0xfa10, 0x6, 0x9, 0x6, 0x2, 0xef3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x6, 0x5}, {0x0, 0x7}, {0x3, 0x4}, {0x0, 0x4}, {0x1, 0x2}, {0x5, 0x7}, {0x1, 0x6}, {0x1, 0x4}, {0x0, 0x8}, {0x6, 0x8}, {0x2, 0x5}, {0x0, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0xa}, {0x1}, {0x7, 0x7}, {0x1}, {0x2, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf1}]}]}]}, 0x3b0}, 0x1, 0x0, 0x0, 0x20000001}, 0x40090) 3m7.819568103s ago: executing program 2 (id=1467): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40401, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f00000000c0)=[{0x6, 0x9, 0xc, 0xb6}]}, 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000001ec0)={@val={0x8, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x16}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x61, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e20, 0x4e20, 0x4d, 0x0, @gue={{0x1, 0x1, 0x3, 0x7, 0x100, @void}, "e24f82d681079ea7a4e87616ec93ff3299ed88d29741d161f504c73dcab29b8c8bb6bd8ee37e9d73eacb24c20d9d92e5f83e219b0692a1a8fb9c1dea766ac3456d"}}}}, 0x6f) r4 = socket(0x10, 0x803, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r6, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) close(0x4) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x57) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r8, 0x504c3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_TOS={0x5, 0x9, 0xb7}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x4}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmmsg$inet(r0, &(0x7f0000001c40)=[{{&(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000780)=[{&(0x7f00000002c0)="a1797f6faffec94dfb826730fa7b6e810e5256ca91e46a29ca955a7c03a6d0efa60de365a47eb8eaf27cdbe508c8768f1a023913563aa03d171604d121f57c4eaee5025a95134981f16cdc4e7a7e58fa6d3465d95bcbb6a562c28a17fe07625d82659bc2fbf291df7b2b26b2506d725a816e9d3957c25d98dcfd11b9ac47ce4cfd90cd785d9460e122d35b4007aca5542028dbf779e898600d2d41f8b50e97b2cefbd2ba31921b94f69f13da0f668087855b7defcce70e19f03f64475727166f16134f72efcb2a79", 0xc8}, {&(0x7f00000003c0)="dd0e2d833373e4bcf34a9eb296e19c824988df2b917a25cebf89743c59ef907f11d42e34dadd71a5d55651df7d23625f5aad28c9e895dd8abdb92fc29244d0ca977f910a2c87b5f6232acd2bc224043587e53608207ff31df663ca83b31ae98f7a769cdab00578fbeb1c9fbe9b417680c494656f21402ead5c45cda18c9ae17761d98b026f66846aafd259bb623e894be334bff78ee9b71da093295f72501c", 0x9f}, {&(0x7f0000000540)="ca4164005da5173f83adb39e4b13b36205b4b2b2e19f37c30028892fb7c4e4cf0cd202b5e2eb4bb9f881425085faf41ffb517d81aee25516a09fabf8a8ba40aede883272c8d370d33cdca735c55f5a31bfd5865209ca914d782a3c49759eab6aaced41c0dd6d20efe9c83089a4762d6bab5dd00a50fb388c08781a2b52666f0f4a283e20ebff4362365949c8b07b821549a6d98a2199666f786b9848eaa0e8248f710840e499d4286810686d32de1f819922fb64a1ab61414657f03d9e2a6bbffdef489e17c1ecb079606cd6aa5556d97ffe93fb6ba7526ab2bd4c27d4b26e4c45d4f3b42456c729d2b4e989", 0xec}, {&(0x7f0000000640)="b14153a3e9e6f319ae9ca7b7e4a5ba465ea24105e03f81af84fe532907aa9849babdb9e771e3c34a95f76da03079301c7cd895cfb5ebf5f671643d3f9f3489e6d94b5b80e7b73d815e037972ae2cd4757277f6beb2e6883d20cd45", 0x5b}, {&(0x7f00000006c0)="c0b847113c0b980d8bcf63641b58d35c78afc7a31a56f4f0432254aa1107395b2f4af339f9ebd28e56cbb54fcbeb03e4e57eda10ff7df9e6477420246885476d4b1c7da6fcf73af3a530d57eca4fe9db8a8ae895d02c340710664e7d925cd8ad31f70f3bfe871b9056889f52e2659c0c10ec4c04cd95df2194f5fff3dd388dbfe7b34a", 0x83}], 0x5}}, {{&(0x7f0000000800)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000840)="850e5adc05a041fda3492fe1af872f6097162e6ad03ee110f7eb65f8b954fc33edbb6edb58e00a1ee7d9", 0x2a}], 0x1, &(0x7f00000008c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}], 0x18}}, {{&(0x7f0000000900)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000001b00)=[{&(0x7f0000000940)="cfdfea5393af17b03ec581ebf9d6fd62483ac313f0d82017956371dbbbc10551670fda1a65b8fcfa1008356a06df76cf871c667f3f951eb397ac8388753c683d24ca521118baa4e610dab57b55cd38942706227c3340befe3ffe57c53baecdbdd90fc336911b71fed805792b", 0x6c}, {&(0x7f00000009c0)="db3b5d15bfd0602e02aef9fa06d96ebf0e63796cb22600154936bb4abd1c2336ff995dde78badcd176589ca3", 0x2c}, {&(0x7f0000000a00)="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", 0x1000}, {&(0x7f0000001a00)="0262b82e1323578fa512d5fd0c0e64b174fa275f1885efa5e4207b9853642f2faec50cca345ce6c0f09751f2f571d4238f493a89acb834b3c31b1c052a5b3f8ab77530b5add7dbbf5232dd7ad8e22e9234e7e281e1a80c779cb45af146ed177ac18c4ace70ca89260bc154a8b1d9c0e014e8feb86675c6029af027436366e27f3c365c973e36c1e50a2864c96fcfe24fc077b437644c72ed7fdaac9305cef26ff6e249c069902e8d411aa86c415128da4e9d7ec4c4530d5e5f66869f79b290866f8ddd861e3c5b9f4c01", 0xca}], 0x4, &(0x7f0000001b40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x99d}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast2}}}, @ip_tos_int={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_retopts={{0x20, 0x0, 0x7, {[@noop, @timestamp_prespec={0x44, 0xc, 0x50, 0x3, 0x1, [{@remote, 0x400}]}]}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @ssrr={0x89, 0x1f, 0x17, [@empty, @private=0xa010101, @multicast1, @local, @loopback, @broadcast, @private=0xa010101]}]}}}], 0xd8}}], 0x3, 0x4) 3m7.431303254s ago: executing program 1 (id=1468): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup, 0x5, 0x0, 0x1, &(0x7f00000000c0), 0x31, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="f6470000", @ANYRES16=r3, @ANYBLOB="01002abd7000fcdbdf253d00000008000300", @ANYRES32=r4, @ANYBLOB="08005d0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f0000000fc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000ac0)={0x47c, r3, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x1f}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4a}, @NL80211_ATTR_IE={0x18b, 0x2a, [@prep={0x83, 0x25, {{0x0, 0x1}, 0x7, 0x1d, @device_a, 0x24590c64, @value=@device_b, 0xfffffffe, 0x2, @device_b, 0x1ff}}, @dsss={0x3, 0x1, 0xb6}, @gcr_ga={0xbd, 0x6, @device_b}, @fast_bss_trans={0x37, 0x68, {0x1, 0x1, "a60bf2410f41ba9b165fbd53c54d0a58", "bdffa21bb73c75b5bed00c5fc176c484fadf88c17077c2caecab63a2c8cdd945", "ca4c1cb7f4f46c2535751940398e1352f4d7b5d3eeb6b6c9a29e9d18d9ab2d06", [{0x1, 0x14, "d1f00dcbb455eb5c8b1134ba98434e21a0cc3a8d"}]}}, @measure_req={0x26, 0xc7, {0x6, 0x80, 0xc0, "989a80bc924a73ae3f8a7d52b25d7240d4dc4cd27fbb4cb0683c6e5a9d1f3facf70b2b7ab6b6f6a6b0eee2c173855382785f3224be368675f00c2877e859182794ce68d4f23d53eada9d2de296ce1d8ca357d3601f3cfa1971a2612391b2d6b67a6b51e67b42ead50ea305babeedd75cf3597f5fd1c2cf123c95e9a48f65cdf357c890bbd3e6a2079b40e04cdf1a2a63d0f10276aa49d1f880725c09289c78a6418c5cba2c5e62d5daa79c062570e80f2bc3a3c1b155bd199232e4ef8245bc8af629c098"}}, @link_id={0x65, 0x12, {@initial, @device_b, @device_b}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @cf={0x4, 0x6, {0x1c, 0xd, 0x2, 0x3d6d}}]}, @NL80211_ATTR_IE={0x2a0, 0x2a, [@fast_bss_trans={0x37, 0xf5, {0xc0, 0x6, "fa52625dcb6c1221089ac2dcd74aebe2", "aebf185d6e473ba553be7f6e532b629c7314e816ec19c502c08af4b7acb4c356", "57a4d92f7d3ac176b508907ae625f25c3fddd16194920a61ee39ac9fcc318c03", [{0x2, 0xf, "13970615db6622eb058bca9b515a41"}, {0x4, 0x11, "e2368771c56e6b0537b3cab4536af8d004"}, {0x4, 0x1c, "c5be80d75949a43ff17a52cb8b6d1a380e787e7e50449a6ae14e6a4a"}, {0x1, 0x22, "6aef19d5e9dada0aa30a3040318427ca126e033b976e3432bc160f15952c7feacbf1"}, {0x1, 0x20, "b6516c13cd9fd2d9af12d5cd55c693d8e575842a39b629eff0446a3bdec46d32"}, {0x4, 0x19, "8236b4c0a6b39c8705505f7bd6682a18d1046617192bb21e72"}]}}, @ibss={0x6, 0x2, 0x4}, @ht={0x2d, 0x1a, {0x300, 0x3, 0x1, 0x0, {0xffffffffffffffff, 0x750, 0x0, 0x2, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x800, 0xc, 0x2}}, @rann={0x7e, 0x15, {{0x0, 0x5a}, 0x4, 0x1, @device_b, 0x971b, 0x6, 0x101}}, @random_vendor={0xdd, 0xfa, "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"}, @dsss={0x3, 0x1, 0x3}, @sec_chan_ofs={0x3e, 0x1}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @preq={0x82, 0x67, {{0x1, 0x0, 0x1}, 0x4, 0x50, 0x3, @broadcast, 0xbb8, @void, 0x1, 0x1, 0x7, [{{}, @broadcast}, {{}, @device_a, 0x7fff}, {{0x1, 0x0, 0x1}, @broadcast, 0x1}, {{}, @device_a, 0x92e3}, {{0x1, 0x0, 0x1}, @device_b, 0x9}, {{0x1}, @broadcast, 0x6}, {{0x1}, @device_a, 0x8}]}}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x9}]}, 0x47c}, 0x1, 0x0, 0x0, 0xc800}, 0x864) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_newvlan={0x24, 0x76, 0x709, 0x0, 0x0, {0x7, 0x2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0xd, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x3}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000044000900000092000000000305000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x4000040) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x1c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ec0), r10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000001f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r10, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x38, r12, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3e}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0xf}]}, 0x38}, 0x1, 0x0, 0x0, 0x200440d5}, 0x0) r14 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r14, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x450, 0xffffffff, 0xffffffff, 0x450, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @empty, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3}}, [0x0, 0x0, 0xffffff00], [0xff, 0x0, 0x0, 0xffffff00], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x380, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'gre0\x00', {0x3, 0x0, 0x41, 0xd2c, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x5, 'system_u:object_r:getty_var_run_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x580) 3m6.00302275s ago: executing program 1 (id=1470): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002100010000000000000000000a0000000000000000000000050019"], 0x24}}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x6) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000004c0)="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", 0x139}], 0x1}}], 0x1, 0x81) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFSUUID(r2, 0x80111500, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000440)=@xdp={0x2c, 0x8, r4, 0x5}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="a9", 0x1}], 0x1}, 0x20008110) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={@rand_addr=' \x01\x00', 0x10, r4}) 3m5.73759835s ago: executing program 4 (id=1471): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket(0x2d, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000300)={0x2a, 0xffffffffffffffff, 0x4001}, 0xc) sendmmsg(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b40)=[{0x10, 0x1, 0x6}], 0x10}}], 0x2, 0x40840) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a06ffb80010000020977cb219"], &(0x7f00000001c0)='syzkaller\x00'}, 0x90) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000001000), r2) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000dc0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000f80)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000fc0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001100)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000005040)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000005000)={&(0x7f0000004fc0)={0x34, r3, 0x300, 0x9, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000}, 0x804) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r9 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r9, &(0x7f0000000180)={&(0x7f0000000400)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000940)="974501000000000001008cc5595c4a9b8f52ac8e5c7fe70a3326491f", 0x1c}], 0x1, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x38}, @rand_addr=0x64010101}}}], 0x20}, 0x400c804) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000480)) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) recvmmsg(r9, &(0x7f0000004e40)=[{{&(0x7f00000004c0)=@l2, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/144, 0x90}, {&(0x7f0000000600)=""/158, 0x9e}], 0x2, &(0x7f0000000700)=""/59, 0x3b}, 0x1000}, {{&(0x7f0000000740)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000800)=""/106, 0x6a}, {&(0x7f0000000880)=""/4, 0x4}, {&(0x7f0000000980)=""/73, 0x49}], 0x3, &(0x7f0000000a40)=""/97, 0x61}, 0x1}, {{&(0x7f0000000ac0)=@generic, 0x80, &(0x7f0000001180)=[{&(0x7f0000000b40)=""/166, 0xa6}, {&(0x7f0000000c00)=""/144, 0x90}, {&(0x7f0000000cc0)=""/153, 0x99}, {&(0x7f0000000d80)=""/41, 0x29}, {&(0x7f0000000dc0)}, {&(0x7f0000000e00)=""/213, 0xd5}, {&(0x7f0000000f00)=""/89, 0x59}, {&(0x7f0000001040)=""/138, 0x8a}], 0x8, &(0x7f0000001200)=""/227, 0xe3}, 0x3}, {{&(0x7f0000001300)=@xdp, 0x80, &(0x7f0000002800)=[{&(0x7f0000001380)=""/215, 0xd7}, {&(0x7f0000001480)=""/128, 0x80}, {&(0x7f0000001500)=""/83, 0x53}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/135, 0x87}, {&(0x7f0000002640)=""/98, 0x62}, {&(0x7f00000026c0)=""/117, 0x75}, {&(0x7f0000002740)=""/166, 0xa6}], 0x8, &(0x7f0000002880)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000003880)=@nfc_llcp, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000003900)=""/226, 0xe2}, {&(0x7f0000003a00)=""/28, 0x1c}, {&(0x7f0000003a40)=""/206, 0xce}, {&(0x7f0000003b40)=""/105, 0x69}, {&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/194, 0xc2}, {&(0x7f0000004cc0)=""/209, 0xd1}], 0x7}, 0x6}], 0x5, 0x2, &(0x7f0000004f80)={0x0, 0x989680}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x44}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB='\t\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="000029bd7000fddbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x2000c840}, 0x60048005) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r9, 0x0, 0x48a, &(0x7f0000000380)={0x0, 0x4, 0x229}, 0xc) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, 0x7, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x1800}, 0x4000080) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYRES8=r8, @ANYRES64=r13, @ANYRESOCT=r12, @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x8095}, 0x840) sendmsg$NFC_CMD_DISABLE_SE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)={0x24, r3, 0x1, 0x70bd29, 0x25dfdbf8, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044990}, 0x20000010) 3m5.425753619s ago: executing program 2 (id=1472): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x2, 0x7, [0x8, 0x4, 0x400, 0xf647, 0x1ff, 0x1, 0x3]}, &(0x7f0000000100)=0x16) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={r1, 0x7ff}, &(0x7f0000000180)=0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) listen(r3, 0x100001) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f000701ddffffff00000000037c00001800378013000300717472283414d6bb"], 0x2c}}, 0x0) 3m5.185703847s ago: executing program 3 (id=1473): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0xffad46ab5106f456}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x20, 0x32, 0x605, 0x70bd25, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x800, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 3m5.109382788s ago: executing program 2 (id=1474): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28000025e70c0000", @ANYRES32=0x0, @ANYBLOB="010000000004000008001c00", @ANYRES32, @ANYBLOB], 0x28}}, 0x4) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) syz_emit_ethernet(0x2b, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=r1, @ANYRESOCT=r1, @ANYRESOCT=r0, @ANYRES16=r0, @ANYRESDEC=r0], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004080)={0xab8, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xa9c, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0xa8f, 0x1c, 0x0, 0x0, @binary="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"}]}, @nested={0x4, 0x2}]}, 0xab8}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, 0x0, 0x0) getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f0000006c80), &(0x7f0000006cc0)=0x4) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x2, 0x0, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(aegis128-aesni,crc32)\x00'}, 0x58) 3m4.52970085s ago: executing program 1 (id=1475): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0100000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000000010380fc0000800c00018006000100ff"], 0x12c}, 0x1, 0x0, 0x0, 0x4008805}, 0x8000) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000400)={r0, r0, 0x6, 0x0, 0x0, 0x9, 0xfd, 0xc48, 0x1012, 0xc3, 0x1, 0x7, 'syz0\x00'}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_emit_ethernet(0x34e, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed00", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, [{0x0, 0xa, "a78c000005dc8080a2030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "00000500000000de25000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f005"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d180610027628cf9ef083611c9f68e2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) (async, rerun: 32) write$rfkill(r3, &(0x7f0000000140)={0x2, 0x0, 0x3}, 0x8) (async, rerun: 32) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000005c0)='cpu.stat\x00', 0x275a, 0x0) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) syz_emit_ethernet(0x9a, &(0x7f00000006c0)={@local, @local, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "331800", 0x64, 0x11, 0xff, @dev={0xfe, 0x80, '\x00', 0x24}, @mcast2, {[], {0x4e1d, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x2, "0967a45e91f4f8064c2ed229c3726ed5aae7f3dd599527003a9adb48a15498e1", "553bb93880d2c45d87ab9d836305d83f", {"7a2dd30efde83e3adb733f9a5719e1c9", "ef350297375fcf6596a865f4f4424259"}}}}}}}}, 0x0) (async) preadv(r5, &(0x7f0000001a00)=[{&(0x7f0000000280)=""/96, 0x60}], 0x1, 0x9, 0x6c8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYRES32=r4], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xd, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 3m4.16900876s ago: executing program 4 (id=1476): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sed\x00', 0x0, 0x60000000, 0x10}, {@rand_addr=0x64010102, 0x4e23, 0x2000, 0x8, 0x7}}, 0x44) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000000)=0x2800, 0x4) 3m4.158362265s ago: executing program 3 (id=1477): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) ioctl$PPPIOCSMRU(r1, 0x40047452, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'vlan0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 3m3.556134422s ago: executing program 1 (id=1478): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f00000001c0)) (async) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x2, 0x7}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x1c48}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) 3m3.539967529s ago: executing program 2 (id=1479): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendto$inet6(r2, &(0x7f0000000300), 0x1f, 0x3b00, 0x0, 0xfffffffffffffdfd) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'wlan1\x00', &(0x7f0000000180)=@ethtool_rxnfc={0x2d, 0x7, 0x5c, {0x2, @udp_ip4_spec={@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x4e32, 0x1}, {0x0, @broadcast, 0x200, 0x9a32, [0x3, 0x10]}, @usr_ip4_spec={@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0xa8b9289b, 0x9, 0x1, 0xd}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0x9ab, 0x4, [0x6, 0x8]}, 0x2, 0x2}}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001cc0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xb, 0x13, r4, 0xfffff000) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0x11, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, [0x0, 0x4000]}}) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r5 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000003780)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg$unix(r5, 0x0, 0x2041) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r5) 3m3.528448634s ago: executing program 4 (id=1480): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000440)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x0, 0x110, 0x110, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00', {}, {}, 0x0, 0x180}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @broadcast, 0x6, 0xfffffffe}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0xfd, {}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0xc}, 0xc0, 0x220}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @multicast1, @dev={0xac, 0x14, 0x14, 0x12}, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000008, 0x11, 0xffffffffffffffff, 0x80000000) 3m3.244019347s ago: executing program 4 (id=1481): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000100)={0x0, 0x3, 0x1, 'x'}, 0x9) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0xbec, @private2, 0x6}, @in={0x2, 0x4e20, @loopback}], 0x2c) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) sendmsg$rds(r1, &(0x7f0000001e40)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f00000014c0)=""/54, 0x36}, &(0x7f0000001540)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000001a00)=[{&(0x7f0000001680)=""/82, 0x52}], 0x1}}], 0x90}, 0x0) 3m3.169370547s ago: executing program 4 (id=1482): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x150, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x120, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x49}]}]}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0xd4, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xfffffffffffffe5a, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3000000}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xc00}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0xfffffffffffffd75, 0x1, 0xff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0xffffffc0, 0x1, 0x5ac}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x86}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x24, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x7fffffff}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xb5}]}]}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @local}]}}]}, 0x150}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000340)={0xff, 0x1e, '\x00', [@generic={0xaa, 0xda, "3067aa8ab5867ed84c61b6b9d9c0e2d63ba6b548188bec23eb5e987038385cc594f7c362a6fb282bd7f1c745719eee78901d3b6e41f0d70f89764fbc251e85116a4827559ddf8e7283ff53617f105ac1a646b3c4b897b007273a2584160607c9d48b81dd237804ca3ee6d1750765290b979ca8d33e5ed2958636e98e3d01de49b1347e524fee9f0b0801792a5c8445a5f0d852ed5fab651f21c6d21e6951f6a110aaf83c3084de302508b4a5c3724047d6a464428790c7afbd05a26e51efb3f4d1358cd0e214fe9ad4dab74caf2f3d03b7818c83e3de20dd8639"}, @jumbo={0xc2, 0x4, 0xdd}, @pad1, @jumbo, @jumbo={0xc2, 0x4, 0x4}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, 0x100) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000c30100000001000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x24}, 0x94) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000000)={'syzkaller0\x00'}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x4001, 0x3, 0x430, 0x300, 0xb, 0x148, 0x0, 0x148, 0x398, 0x230, 0x242, 0x398, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00', {}, {}, 0x73}, 0x0, 0x2d0, 0x300, 0x0, {0xff0f000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x8}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0xe, 0x0, 0x6, './file0\x00'}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x6}, 0x0, 0x1}}}, {{@uncond, 0xec010000, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x80000001}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) 3m1.053014136s ago: executing program 3 (id=1483): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8000, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, @multicast1, @private}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f3, &(0x7f0000001a80)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', r2, 0x20, 0x10, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x27, 0x0, 0x0, 0x0, 0x0, @multicast2, @empty}}}}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x16}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "09000000000000208f29d158039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c76000067af25166c2f0f85f36aa8867406119c010400002e31dea98204000000d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b5142ddf36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459ac3ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1008000"}, @TCA_RED_PARMS={0x14, 0x1, {0x8, 0x5, 0x2, 0x14, 0xf, 0x12, 0x4}}]}}]}, 0x148}}, 0x10000) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r2, 0x29, 0xb, 0x3, 0x11b, 0xc, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x40, 0x7f, 0x3}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x8c, r6, 0x20, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0400f9f407000904018000200000000000000000000800010000000000", 0x24) 2m58.638049673s ago: executing program 4 (id=1484): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000200)) sendto$inet6(r0, &(0x7f0000000200)="18", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0xb, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x6, 0xff5, &(0x7f00000003c0)=""/4085, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r5, 0x1, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r3, &(0x7f0000000140)={&(0x7f0000000440)={0x1d, r5, 0x2, {0x0, 0xf0, 0x4}, 0xff}, 0x18, &(0x7f0000000180)={0x0}, 0x4, 0x0, 0x0, 0x24004045}, 0x1) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000008c0)="d800000018007b29e00212ba0d8105040a3f1800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000100)) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000000c0)=@ipv6_getaddr={0x18, 0x16, 0x1, 0x0, 0xfffffffc, {0xa, 0x0, 0x0, 0xfe}}, 0x18}}, 0x0) syz_emit_ethernet(0x15, &(0x7f0000000540)={@random="fb57e76be621", @multicast, @val={@void, {0x8100, 0x1, 0x1, 0x3}}, {@x25={0x805, {0x3, 0x2, 0xf}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x79, 0x11, 0xc8}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a80200003e000701feffffff00000000017c0000040042808802018006000600800a00007b02018020ef82972c4a888fa13836e811c4cd03b722b4ceca8be06b765000fcffffffffffff7eb6b5009a881fd61885956a03d9a9dc8452516454a3d167abf84c778c4df8237c0c0860693c5060dfea16df72653289de5ae7f1f3a2746c7e0900000011b9b91ed5687f850c00c8007d25212b2b4a2d000800a500", @ANYRES32=r8, @ANYBLOB="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"], 0x2a8}, 0x1, 0x0, 0x0, 0x4048011}, 0x1000c801) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r8) 2m57.09490635s ago: executing program 2 (id=1485): socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'/20, @ANYRES32, @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32, @ANYRES32=r2], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) close(r0) (async) close(r0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080)={0xb, 0x48, 0x2, 0x5, 0x1, 0x8, 0xc, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf7}, 0xe) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000005c0)=[@in6={0xa, 0x4e23, 0x0, @remote, 0x3}], 0x1c) sendmmsg$inet6(r3, &(0x7f00000000c0)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x9, @private1, 0x9}, 0x1c, &(0x7f0000001c00)=[{&(0x7f0000001740)='p', 0x1}], 0x1}}], 0x1, 0x5dc) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x6}, 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r5 = socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000085000000a000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x2f, 0x2, 0x7, 0x30, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x40, 0x5e4, 0x1}}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000200)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x62, r8}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xffffffff, "2e86c197b6a2338a08f0cfb45f454b17"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @broadcast}}], 0x1c) 2m37.460371271s ago: executing program 34 (id=1478): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f00000001c0)) (async) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x2, 0x7}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x1c48}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) 2m29.984979784s ago: executing program 35 (id=1483): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8000, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, @multicast1, @private}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f3, &(0x7f0000001a80)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', r2, 0x20, 0x10, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x27, 0x0, 0x0, 0x0, 0x0, @multicast2, @empty}}}}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x16}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "09000000000000208f29d158039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c76000067af25166c2f0f85f36aa8867406119c010400002e31dea98204000000d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b5142ddf36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459ac3ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1008000"}, @TCA_RED_PARMS={0x14, 0x1, {0x8, 0x5, 0x2, 0x14, 0xf, 0x12, 0x4}}]}}]}, 0x148}}, 0x10000) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r2, 0x29, 0xb, 0x3, 0x11b, 0xc, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x40, 0x7f, 0x3}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x8c, r6, 0x20, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0400f9f407000904018000200000000000000000000800010000000000", 0x24) 2m1.650345624s ago: executing program 36 (id=1485): socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'/20, @ANYRES32, @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32, @ANYRES32=r2], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) close(r0) (async) close(r0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080)={0xb, 0x48, 0x2, 0x5, 0x1, 0x8, 0xc, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf7}, 0xe) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000005c0)=[@in6={0xa, 0x4e23, 0x0, @remote, 0x3}], 0x1c) sendmmsg$inet6(r3, &(0x7f00000000c0)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x9, @private1, 0x9}, 0x1c, &(0x7f0000001c00)=[{&(0x7f0000001740)='p', 0x1}], 0x1}}], 0x1, 0x5dc) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x6}, 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r5 = socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000085000000a000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x2f, 0x2, 0x7, 0x30, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x40, 0x5e4, 0x1}}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000200)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x62, r8}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xffffffff, "2e86c197b6a2338a08f0cfb45f454b17"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @broadcast}}], 0x1c) 1m39.223966873s ago: executing program 37 (id=1484): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000200)) sendto$inet6(r0, &(0x7f0000000200)="18", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0xb, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x6, 0xff5, &(0x7f00000003c0)=""/4085, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r5, 0x1, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r3, &(0x7f0000000140)={&(0x7f0000000440)={0x1d, r5, 0x2, {0x0, 0xf0, 0x4}, 0xff}, 0x18, &(0x7f0000000180)={0x0}, 0x4, 0x0, 0x0, 0x24004045}, 0x1) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000008c0)="d800000018007b29e00212ba0d8105040a3f1800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000100)) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000000c0)=@ipv6_getaddr={0x18, 0x16, 0x1, 0x0, 0xfffffffc, {0xa, 0x0, 0x0, 0xfe}}, 0x18}}, 0x0) syz_emit_ethernet(0x15, &(0x7f0000000540)={@random="fb57e76be621", @multicast, @val={@void, {0x8100, 0x1, 0x1, 0x3}}, {@x25={0x805, {0x3, 0x2, 0xf}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x79, 0x11, 0xc8}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a80200003e000701feffffff00000000017c0000040042808802018006000600800a00007b02018020ef82972c4a888fa13836e811c4cd03b722b4ceca8be06b765000fcffffffffffff7eb6b5009a881fd61885956a03d9a9dc8452516454a3d167abf84c778c4df8237c0c0860693c5060dfea16df72653289de5ae7f1f3a2746c7e0900000011b9b91ed5687f850c00c8007d25212b2b4a2d000800a500", @ANYRES32=r8, @ANYBLOB="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"], 0x2a8}, 0x1, 0x0, 0x0, 0x4048011}, 0x1000c801) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r8) 14.450663804s ago: executing program 0 (id=1489): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4000895) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = socket(0x8, 0x3, 0x298) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001800090400000001fedbdf250a000000000000000000008008001e0001000000080008"], 0x2c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), r0) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0x90, r3, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffff9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf2e}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}]}, 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6d4e9a1d78ad62ceef18843080078bb3fb7dbfcebd1f85fc171f748a7b5373a3126", 0x0, 0xffffffff, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="8c0000000001010400000000000000000a0000003c0001802c000180140003000000140000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe80000000000000580b0000000000aa0c00028005000100000000003abec70c8ce601b1f23133b8febc259ae3dcb25c062313d02ea821b645d1cc6db95d41cc9a4b5c042152277134320cad03a65479109a210bfb63b442867ff6dd91a63769cc666c094abcab2f5e1a32989894"], 0x8c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b0001006772657461700000", @ANYRES32, @ANYBLOB='\b\x00\r\x00\x00\x00\x00\x00\b\x00'], 0x4c}}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) accept4(r2, &(0x7f0000000740)=@nfc_llcp, &(0x7f00000007c0)=0x80, 0x81800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4000895) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) socket(0x8, 0x3, 0x298) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001800090400000001fedbdf250a000000000000000000008008001e0001000000080008"], 0x2c}}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), r0) (async) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0x90, r3, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffff9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf2e}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}]}, 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6d4e9a1d78ad62ceef18843080078bb3fb7dbfcebd1f85fc171f748a7b5373a3126", 0x0, 0xffffffff, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="8c0000000001010400000000000000000a0000003c0001802c000180140003000000140000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe80000000000000580b0000000000aa0c00028005000100000000003abec70c8ce601b1f23133b8febc259ae3dcb25c062313d02ea821b645d1cc6db95d41cc9a4b5c042152277134320cad03a65479109a210bfb63b442867ff6dd91a63769cc666c094abcab2f5e1a32989894"], 0x8c}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b0001006772657461700000", @ANYRES32, @ANYBLOB='\b\x00\r\x00\x00\x00\x00\x00\b\x00'], 0x4c}}, 0x0) (async) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) accept4(r2, &(0x7f0000000740)=@nfc_llcp, &(0x7f00000007c0)=0x80, 0x81800) (async) 0s ago: executing program 7 (id=1486): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x800, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000"], 0xb8}}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000003c0)={r4, 0x68}, &(0x7f0000000400)=0x8) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000340)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r2, 0x2000000, r5}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0x7ffffffe, 0x0, 0x1}, 0x48) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000000206050000000000000000000000000005000400000000000900020073797a32000000000c000780050015003e000000050005000200000005000100548426adfd795958686173683a6e65742c03666163650000"], 0x58}, 0x1, 0x0, 0x0, 0x2}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.1' (ED25519) to the list of known hosts. [ 78.613793][ T5623] cgroup: Unknown subsys name 'net' [ 78.741571][ T5623] cgroup: Unknown subsys name 'cpuset' [ 78.750746][ T5623] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.431734][ T5623] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.661982][ T5637] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.695452][ T5652] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.704250][ T5650] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.704343][ T5652] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.720448][ T5650] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.721261][ T5652] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.734139][ T5650] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.737626][ T5652] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.750640][ T5653] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.753523][ T5652] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.760439][ T5654] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.778509][ T5655] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.779453][ T5654] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.787653][ T5652] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.795388][ T5654] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.804164][ T5652] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.814907][ T5654] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.825976][ T5655] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.826073][ T5653] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.841955][ T5654] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.842295][ T5652] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.859928][ T5652] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.861054][ T4950] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.868803][ T5652] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.889258][ T4950] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.911639][ T5639] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.919359][ T5639] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.927154][ T5639] bridge_slave_0: entered allmulticast mode [ 84.935042][ T5639] bridge_slave_0: entered promiscuous mode [ 84.944269][ T5638] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.951745][ T5638] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.958683][ T5637] Bluetooth: hci1: command tx timeout [ 84.958981][ T5646] Bluetooth: hci0: command tx timeout [ 84.965113][ T4950] Bluetooth: hci4: command tx timeout [ 84.970798][ T5646] Bluetooth: hci2: command tx timeout [ 84.976649][ T5643] Bluetooth: hci3: command tx timeout [ 84.982741][ T5638] bridge_slave_0: entered allmulticast mode [ 84.995381][ T5638] bridge_slave_0: entered promiscuous mode [ 85.035304][ T5639] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.043113][ T5639] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.050511][ T5639] bridge_slave_1: entered allmulticast mode [ 85.058011][ T5639] bridge_slave_1: entered promiscuous mode [ 85.065411][ T5638] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.072695][ T5638] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.080405][ T5638] bridge_slave_1: entered allmulticast mode [ 85.088249][ T5638] bridge_slave_1: entered promiscuous mode [ 85.126018][ T5636] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.133396][ T5636] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.140947][ T5636] bridge_slave_0: entered allmulticast mode [ 85.148312][ T5636] bridge_slave_0: entered promiscuous mode [ 85.175632][ T5635] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.183213][ T5635] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.190527][ T5635] bridge_slave_0: entered allmulticast mode [ 85.198095][ T5635] bridge_slave_0: entered promiscuous mode [ 85.215473][ T5636] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.223170][ T5636] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.230868][ T5636] bridge_slave_1: entered allmulticast mode [ 85.238367][ T5636] bridge_slave_1: entered promiscuous mode [ 85.266003][ T5635] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.273375][ T5635] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.280700][ T5635] bridge_slave_1: entered allmulticast mode [ 85.288140][ T5635] bridge_slave_1: entered promiscuous mode [ 85.296220][ T5641] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.303792][ T5641] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.311051][ T5641] bridge_slave_0: entered allmulticast mode [ 85.318214][ T5641] bridge_slave_0: entered promiscuous mode [ 85.338442][ T5639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.351216][ T5638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.370959][ T5641] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.378317][ T5641] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.385718][ T5641] bridge_slave_1: entered allmulticast mode [ 85.393963][ T5641] bridge_slave_1: entered promiscuous mode [ 85.412434][ T5639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.426394][ T5638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.471304][ T5636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.517263][ T5635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.538820][ T5636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.550347][ T5639] team0: Port device team_slave_0 added [ 85.559090][ T5638] team0: Port device team_slave_0 added [ 85.567084][ T5635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.579464][ T5641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.600949][ T5639] team0: Port device team_slave_1 added [ 85.610374][ T5638] team0: Port device team_slave_1 added [ 85.628423][ T5641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.703525][ T5636] team0: Port device team_slave_0 added [ 85.731657][ T5635] team0: Port device team_slave_0 added [ 85.739933][ T5641] team0: Port device team_slave_0 added [ 85.748348][ T5636] team0: Port device team_slave_1 added [ 85.754961][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.762767][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.789253][ T5639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.801841][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.809061][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.835757][ T5638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.849443][ T5635] team0: Port device team_slave_1 added [ 85.857950][ T5641] team0: Port device team_slave_1 added [ 85.875350][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.882518][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.909165][ T5639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.921218][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.928606][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.955217][ T5638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.033775][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.041032][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.068003][ T5636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.080989][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.088430][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.114942][ T5636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.135892][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.143036][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.169739][ T5635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.181586][ T5641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.188753][ T5641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.215022][ T5641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.258832][ T5639] hsr_slave_0: entered promiscuous mode [ 86.265831][ T5639] hsr_slave_1: entered promiscuous mode [ 86.273661][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.280822][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.307451][ T5635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.319339][ T5641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.326330][ T5641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.352467][ T5641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.393455][ T5638] hsr_slave_0: entered promiscuous mode [ 86.399906][ T5638] hsr_slave_1: entered promiscuous mode [ 86.406025][ T5638] debugfs: 'hsr0' already exists in 'hsr' [ 86.412102][ T5638] Cannot create hsr debugfs directory [ 86.488507][ T5636] hsr_slave_0: entered promiscuous mode [ 86.495046][ T5636] hsr_slave_1: entered promiscuous mode [ 86.501776][ T5636] debugfs: 'hsr0' already exists in 'hsr' [ 86.507640][ T5636] Cannot create hsr debugfs directory [ 86.648382][ T5635] hsr_slave_0: entered promiscuous mode [ 86.654984][ T5635] hsr_slave_1: entered promiscuous mode [ 86.661411][ T5635] debugfs: 'hsr0' already exists in 'hsr' [ 86.667158][ T5635] Cannot create hsr debugfs directory [ 86.678889][ T5641] hsr_slave_0: entered promiscuous mode [ 86.685263][ T5641] hsr_slave_1: entered promiscuous mode [ 86.691940][ T5641] debugfs: 'hsr0' already exists in 'hsr' [ 86.697880][ T5641] Cannot create hsr debugfs directory [ 87.038783][ T5643] Bluetooth: hci2: command tx timeout [ 87.044581][ T4950] Bluetooth: hci0: command tx timeout [ 87.050673][ T5637] Bluetooth: hci3: command tx timeout [ 87.052439][ T5652] Bluetooth: hci1: command tx timeout [ 87.061627][ T5646] Bluetooth: hci4: command tx timeout [ 87.418509][ T5639] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.433708][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.441879][ T5639] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.452021][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.462672][ T5639] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.477463][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.501817][ T5639] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.514042][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.575897][ T5638] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.589033][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.598941][ T5638] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.610282][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.619113][ T5638] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.630140][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.638786][ T5638] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.649432][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.749816][ T5641] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.759733][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.775695][ T5641] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.788891][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.797118][ T5641] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.809394][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.834884][ T5641] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.851737][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.952858][ T5635] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.963469][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.974105][ T5635] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.986064][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.005308][ T5635] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.015633][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.042767][ T5635] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.053885][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.069021][ T5639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.148561][ T5636] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.159541][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.183512][ T5636] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.194801][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.203106][ T5636] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.212755][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.221435][ T5636] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.232120][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.245491][ T5639] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.260041][ T5638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.296211][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.304028][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.361591][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.368852][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.394548][ T5638] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.419226][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.426611][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.453318][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.460536][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.543427][ T5641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.647107][ T5641] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.685463][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.692734][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.726185][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.733649][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.793889][ T5635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.828216][ T5636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.891145][ T5635] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.947430][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.954717][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.982380][ T5636] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.018239][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.025734][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.053072][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.060705][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.071426][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.078802][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.119814][ T5646] Bluetooth: hci3: command tx timeout [ 89.119849][ T5652] Bluetooth: hci0: command tx timeout [ 89.125323][ T5637] Bluetooth: hci2: command tx timeout [ 89.131228][ T5652] Bluetooth: hci4: command tx timeout [ 89.136937][ T4950] Bluetooth: hci1: command tx timeout [ 89.806509][ T5638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.983745][ T5639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.003508][ T5638] veth0_vlan: entered promiscuous mode [ 90.069015][ T5638] veth1_vlan: entered promiscuous mode [ 90.258805][ T5638] veth0_macvtap: entered promiscuous mode [ 90.280489][ T5639] veth0_vlan: entered promiscuous mode [ 90.297741][ T5638] veth1_macvtap: entered promiscuous mode [ 90.362847][ T5639] veth1_vlan: entered promiscuous mode [ 90.394071][ T5641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.405947][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.424060][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.506064][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.516375][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.542315][ T1171] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.561036][ T1171] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.629630][ T5635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.675163][ T5636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.763635][ T5639] veth0_macvtap: entered promiscuous mode [ 90.811907][ T5641] veth0_vlan: entered promiscuous mode [ 90.840640][ T5639] veth1_macvtap: entered promiscuous mode [ 90.875510][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.896460][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.904210][ T5641] veth1_vlan: entered promiscuous mode [ 90.936705][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.981598][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.044857][ T1171] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.060716][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.075702][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.078984][ T1171] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.093095][ T1171] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.111944][ T1171] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.122031][ T5635] veth0_vlan: entered promiscuous mode [ 91.174759][ T5641] veth0_macvtap: entered promiscuous mode [ 91.190744][ T5635] veth1_vlan: entered promiscuous mode [ 91.200890][ T5637] Bluetooth: hci4: command tx timeout [ 91.205991][ T5638] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.206805][ T4950] Bluetooth: hci0: command tx timeout [ 91.221800][ T5643] Bluetooth: hci2: command tx timeout [ 91.227331][ T5646] Bluetooth: hci1: command tx timeout [ 91.227365][ T5646] Bluetooth: hci3: command tx timeout [ 91.264727][ T5641] veth1_macvtap: entered promiscuous mode [ 91.310689][ T5636] veth0_vlan: entered promiscuous mode [ 91.406848][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.435021][ T5636] veth1_vlan: entered promiscuous mode [ 91.482388][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.491779][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.501279][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.530557][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.543263][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.555616][ T5635] veth0_macvtap: entered promiscuous mode [ 91.571067][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.572122][ T5838] netlink: 260 bytes leftover after parsing attributes in process `syz.2.6'. [ 91.580485][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.619753][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.631621][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.634307][ T5635] veth1_macvtap: entered promiscuous mode [ 91.741681][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.782543][ T5636] veth0_macvtap: entered promiscuous mode [ 91.822528][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.835470][ T5636] veth1_macvtap: entered promiscuous mode [ 91.927194][ T5843] Zero length message leads to an empty skb [ 91.971583][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.980751][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.013255][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.034941][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.049226][ T153] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.079730][ T153] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.092442][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.134030][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.155873][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.165543][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.201755][ T996] cfg80211: failed to load regulatory.db [ 92.286621][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.310405][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.342990][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.386080][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.564616][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.581741][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.744372][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.777107][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.962591][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.994694][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.193376][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.214074][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.746245][ T5888] netlink: 'syz.3.19': attribute type 1 has an invalid length. [ 93.764469][ T5890] netlink: 28 bytes leftover after parsing attributes in process `syz.0.20'. [ 93.787795][ T5888] netlink: 96 bytes leftover after parsing attributes in process `syz.3.19'. [ 93.814343][ T5888] netlink: 'syz.3.19': attribute type 1 has an invalid length. [ 93.823126][ T5890] netlink: 'syz.0.20': attribute type 3 has an invalid length. [ 93.848464][ T5888] netlink: 'syz.3.19': attribute type 8 has an invalid length. [ 93.884915][ T5888] netlink: 606 bytes leftover after parsing attributes in process `syz.3.19'. [ 93.910198][ T5888] netlink: 1 bytes leftover after parsing attributes in process `syz.3.19'. [ 93.940876][ T5892] IPv6: sit1: Disabled Multicast RS [ 94.099282][ T5898] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 94.149066][ T5898] bond1 (unregistering): Released all slaves [ 94.236544][ T5908] netlink: 28 bytes leftover after parsing attributes in process `syz.4.24'. [ 94.556136][ T5925] netlink: 4 bytes leftover after parsing attributes in process `syz.4.31'. [ 94.720890][ T5925] macsec1: entered promiscuous mode [ 94.740599][ T5925] bridge0: entered promiscuous mode [ 94.766140][ T5925] macsec1: entered allmulticast mode [ 94.789833][ T5925] bridge0: entered allmulticast mode [ 94.830863][ T5925] bridge0: port 3(macsec1) entered blocking state [ 94.872995][ T5925] bridge0: port 3(macsec1) entered disabled state [ 94.884037][ T5940] netlink: 20 bytes leftover after parsing attributes in process `syz.2.33'. [ 94.951022][ T5925] bridge0: left allmulticast mode [ 94.981315][ T5944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.35'. [ 95.024787][ T5951] netlink: 12 bytes leftover after parsing attributes in process `syz.0.37'. [ 95.035033][ T5775] bridge0: left promiscuous mode [ 95.738371][ T5982] syz.3.47 uses obsolete (PF_INET,SOCK_PACKET) [ 96.097955][ T6001] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 96.097955][ T6001] Please contact the netfilter-devel mailing list or update your nftables rules. [ 96.117620][ T6002] netlink: 'syz.1.51': attribute type 29 has an invalid length. [ 96.134035][ T6004] netlink: 'syz.4.53': attribute type 1 has an invalid length. [ 96.591338][ T6025] __nla_validate_parse: 4 callbacks suppressed [ 96.591360][ T6025] netlink: 20 bytes leftover after parsing attributes in process `syz.2.58'. [ 96.678610][ T6031] netlink: 12 bytes leftover after parsing attributes in process `syz.1.61'. [ 96.730656][ T6017] bond1: entered promiscuous mode [ 96.756081][ T6017] bond1: entered allmulticast mode [ 96.780595][ T6017] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.169882][ T6049] warning: `syz.0.64' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 97.274269][ T6046] netlink: 12 bytes leftover after parsing attributes in process `syz.0.64'. [ 97.518857][ T5652] Bluetooth: hci3: command 0x0405 tx timeout [ 97.730991][ T6079] tunl0: entered promiscuous mode [ 97.750898][ T6079] netlink: 'syz.2.69': attribute type 3 has an invalid length. [ 97.768689][ T6079] netlink: 9 bytes leftover after parsing attributes in process `syz.2.69'. [ 98.008692][ T6085] netlink: 104 bytes leftover after parsing attributes in process `syz.1.71'. [ 98.076896][ T6089] netlink: 60 bytes leftover after parsing attributes in process `syz.2.73'. [ 98.101786][ T6094] netlink: 28 bytes leftover after parsing attributes in process `syz.0.72'. [ 98.117430][ T6089] Bluetooth: MGMT ver 1.23 [ 98.382789][ T6109] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.77'. [ 98.404606][ T6110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.78'. [ 98.428726][ T6109] netlink: ct family unspecified [ 98.447044][ T6115] netlink: 4 bytes leftover after parsing attributes in process `syz.4.80'. [ 98.460809][ T6109] netlink: ct family unspecified [ 98.590360][ T6114] syzkaller0: entered promiscuous mode [ 98.627516][ T6114] syzkaller0: entered allmulticast mode [ 98.676987][ T6126] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 98.755990][ T6131] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 98.843420][ T6132] team0: No ports can be present during mode change [ 98.905381][ T6134] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 98.973537][ T6134] netlink: 'syz.3.84': attribute type 1 has an invalid length. [ 99.057396][ T6144] tipc: Invalid UDP bearer configuration [ 99.057460][ T6144] tipc: Enabling of bearer rejected, failed to enable media [ 99.090607][ T6142] No such timeout policy "syz1" [ 99.190389][ T6150] netlink: 'syz.0.86': attribute type 1 has an invalid length. [ 99.389150][ T6160] netlink: 'syz.1.91': attribute type 1 has an invalid length. [ 99.404337][ T6144] hsr_slave_1 (unregistering): left promiscuous mode [ 99.514370][ T6150] team0: Port device team_slave_0 removed [ 99.524986][ T6168] netlink: 'syz.1.91': attribute type 1 has an invalid length. [ 99.549510][ T6168] netlink: 'syz.1.91': attribute type 2 has an invalid length. [ 100.364795][ T6203] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 100.473730][ T6208] rdma_op ffff8880681cd9f0 conn xmit_rdma 0000000000000000 [ 100.531571][ T6209] rdma_op ffff8880291d69f0 conn xmit_rdma 0000000000000000 [ 101.709523][ T6268] __nla_validate_parse: 7 callbacks suppressed [ 101.709542][ T6268] netlink: 68 bytes leftover after parsing attributes in process `syz.2.112'. [ 102.160804][ T6286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.115'. [ 103.676416][ T6213] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 103.910509][ T6317] IPv6: NLM_F_CREATE should be specified when creating new route [ 103.931115][ T6317] netlink: 'syz.0.122': attribute type 1 has an invalid length. [ 103.964126][ T6317] netlink: 12 bytes leftover after parsing attributes in process `syz.0.122'. [ 103.983823][ T6319] IPv6: NLM_F_CREATE should be specified when creating new route [ 104.009960][ T6319] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 104.051927][ T6319] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 104.101173][ T6325] ip6t_srh: unknown srh match flags 5F28 [ 104.394559][ T6332] netlink: 12 bytes leftover after parsing attributes in process `syz.2.125'. [ 104.414697][ T6325] netlink: 112 bytes leftover after parsing attributes in process `syz.1.123'. [ 104.661199][ T6339] netlink: 'syz.0.126': attribute type 3 has an invalid length. [ 104.701113][ T6339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.126'. [ 104.756524][ T6347] netlink: 12 bytes leftover after parsing attributes in process `syz.1.128'. [ 104.775271][ T6341] bond1: option fail_over_mac: invalid value (16) [ 104.786383][ T6341] bond1 (unregistering): Released all slaves [ 104.811849][ T6347] block nbd0: Unsupported socket: should be TCP or UNIX. [ 106.152659][ T6399] netlink: 71 bytes leftover after parsing attributes in process `syz.0.141'. [ 106.524680][ T6413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.148'. [ 106.620198][ T57] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.629650][ T6413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.148'. [ 106.656460][ T57] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.674557][ T57] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.709958][ T57] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.848927][ T6420] Driver unsupported XDP return value 0 on prog (id 26) dev N/A, expect packet loss! [ 106.888702][ T5652] Bluetooth: hci3: command 0x0405 tx timeout [ 107.816147][ T6444] Bluetooth: MGMT ver 1.23 [ 107.847263][ T6444] netlink: 'syz.4.155': attribute type 10 has an invalid length. [ 107.873115][ T6444] netlink: 228 bytes leftover after parsing attributes in process `syz.4.155'. [ 107.914254][ T6451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.158'. [ 108.154708][ T6471] netlink: 232 bytes leftover after parsing attributes in process `syz.1.161'. [ 108.184653][ T6474] netlink: 'syz.4.162': attribute type 1 has an invalid length. [ 108.285280][ T6474] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.370809][ T6474] bond1: (slave ip6gretap1): making interface the new active one [ 108.380718][ T6474] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 108.531433][ T6490] netlink: 12 bytes leftover after parsing attributes in process `syz.0.166'. [ 108.563145][ T6490] netlink: 'syz.0.166': attribute type 1 has an invalid length. [ 108.597290][ T6490] netlink: 'syz.0.166': attribute type 2 has an invalid length. [ 108.623954][ T6496] netlink: 12 bytes leftover after parsing attributes in process `syz.0.166'. [ 108.635759][ T6496] netlink: 'syz.0.166': attribute type 1 has an invalid length. [ 108.644223][ T6486] netlink: 'syz.1.165': attribute type 3 has an invalid length. [ 108.661566][ T6496] netlink: 'syz.0.166': attribute type 2 has an invalid length. [ 108.672809][ T6497] openvswitch: netlink: Tunnel attr 10 has unexpected len 0 expected 2 [ 108.820180][ T6502] netlink: 12 bytes leftover after parsing attributes in process `syz.0.169'. [ 108.837213][ T6505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.170'. [ 108.858801][ T6505] netlink: 2 bytes leftover after parsing attributes in process `syz.2.170'. [ 108.881025][ T6506] openvswitch: netlink: IP tunnel dst address not specified [ 108.993235][ T6502] can: request_module (can-proto-3) failed. [ 109.013644][ T6513] netdevsim netdevsim3: Direct firmware load for .. failed with error -2 [ 109.027275][ T6497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.167'. [ 109.043454][ T6513] netdevsim netdevsim3: Falling back to sysfs fallback for: .. [ 109.054312][ T6497] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.136188][ T6497] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.659907][ T6542] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.176'. [ 109.835168][ T996] IPVS: starting estimator thread 0... [ 109.947807][ T6550] IPVS: using max 29 ests per chain, 69600 per kthread [ 110.009582][ T6555] IPVS: set_ctl: invalid protocol: 0 10.1.1.1:20002 [ 110.842054][ T6593] netlink: 'syz.2.187': attribute type 12 has an invalid length. [ 110.872447][ T6593] netlink: 'syz.2.187': attribute type 29 has an invalid length. [ 110.903178][ T6593] netlink: 'syz.2.187': attribute type 1 has an invalid length. [ 110.919417][ T6593] netlink: 'syz.2.187': attribute type 2 has an invalid length. [ 111.413433][ T6621] netlink: 'syz.0.192': attribute type 16 has an invalid length. [ 111.467046][ T6621] netlink: 'syz.0.192': attribute type 17 has an invalid length. [ 111.599316][ T6621] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 111.756021][ T6639] TCP: TCP_TX_DELAY enabled [ 111.897386][ T6647] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.802319][ T6685] netlink: 'syz.3.204': attribute type 1 has an invalid length. [ 113.018890][ T6694] xt_hashlimit: size too large, truncated to 1048576 [ 113.074094][ T6697] __nla_validate_parse: 8 callbacks suppressed [ 113.074116][ T6697] netlink: 12 bytes leftover after parsing attributes in process `syz.1.207'. [ 113.093331][ T6697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.207'. [ 113.110840][ T6685] 8021q: adding VLAN 0 to HW filter on device bond2 [ 113.370300][ T6697] netlink: 12 bytes leftover after parsing attributes in process `syz.1.207'. [ 113.370414][ T57] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.409667][ T6707] netlink: 'syz.3.209': attribute type 10 has an invalid length. [ 113.412533][ T6697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.207'. [ 113.427908][ T57] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.447286][ T57] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.574660][ T6708] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.584233][ T6708] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.775858][ T6708] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.789988][ T6708] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.896216][ T6707] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.905437][ T6707] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.913893][ T6707] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.932231][ T6707] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.956171][ T57] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.967443][ T57] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.979716][ T57] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.046110][ T57] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.063571][ T57] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.084743][ T57] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.113944][ T57] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.154608][ T57] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.195378][ T57] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.255037][ T6728] ieee802154 phy0 wpan0: encryption failed: -22 [ 114.277171][ T6733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.215'. [ 114.313752][ T6732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.215'. [ 114.474285][ T6742] netlink: 56 bytes leftover after parsing attributes in process `syz.0.217'. [ 114.579847][ T6745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.218'. [ 114.696522][ T6753] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.218'. [ 115.027139][ T6766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.061655][ T6766] team0: Failed to send port change of device batadv0 via netlink (err -105) [ 115.087506][ T6766] team0: Failed to send options change via netlink (err -105) [ 115.113599][ T6766] team0: Port device batadv0 added [ 115.380656][ T6792] netlink: 52 bytes leftover after parsing attributes in process `syz.3.229'. [ 115.388596][ T57] tipc: Subscription rejected, illegal request [ 115.492262][ T6796] macvtap0: entered allmulticast mode [ 115.531271][ T6796] veth0_macvtap: entered allmulticast mode [ 115.555516][ T6786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.042395][ T6811] bond2 (unregistering): Released all slaves [ 116.305123][ T6836] tc_dump_action: action bad kind [ 116.412696][ T6844] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 116.919891][ T6875] netlink: 'syz.1.253': attribute type 1 has an invalid length. [ 117.327495][ T6891] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 117.547878][ T6899] netlink: 'syz.3.260': attribute type 13 has an invalid length. [ 117.574808][ T6899] veth1_macvtap: left promiscuous mode [ 117.584888][ T6899] macsec0: entered allmulticast mode [ 117.902841][ T6914] macsec0: entered promiscuous mode [ 117.911781][ T6914] veth1_macvtap: left promiscuous mode [ 117.962494][ T6914] macsec0 (unregistering): left promiscuous mode [ 118.093043][ T6926] openvswitch: netlink: Tunnel attr 10 has unexpected len 0 expected 2 [ 118.106519][ T6926] __nla_validate_parse: 39 callbacks suppressed [ 118.106572][ T6926] netlink: 44 bytes leftover after parsing attributes in process `syz.2.267'. [ 118.123421][ T6926] netlink: 24 bytes leftover after parsing attributes in process `syz.2.267'. [ 118.700898][ T6958] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.277'. [ 118.725727][ T6958] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.277'. [ 119.154801][ T6975] openvswitch: netlink: Missing key (keys=40, expected=80) [ 119.162661][ T6968] bond1: entered promiscuous mode [ 119.168928][ T6968] bond1: entered allmulticast mode [ 119.178731][ T6968] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.329858][ T6981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.282'. [ 119.380010][ T6981] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 119.712007][ T6991] netlink: 16 bytes leftover after parsing attributes in process `syz.2.285'. [ 120.035191][ T7006] sctp: [Deprecated]: syz.3.288 (pid 7006) Use of int in max_burst socket option deprecated. [ 120.035191][ T7006] Use struct sctp_assoc_value instead [ 120.932698][ T7022] netlink: 'syz.1.294': attribute type 39 has an invalid length. [ 121.764051][ T7058] netlink: 'syz.3.304': attribute type 3 has an invalid length. [ 121.952613][ T7061] bond3: Removing last ns target with arp_interval on [ 122.469656][ T7086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.314'. [ 122.488214][ T7086] openvswitch: netlink: IPv6 tunnel dst address is zero [ 122.549154][ T7089] netem: incorrect gi model size [ 122.566773][ T7089] netem: change failed [ 122.712515][ T7096] trusted_key: syz.1.317 sent an empty control message without MSG_MORE. [ 122.741411][ T7100] netlink: 12 bytes leftover after parsing attributes in process `syz.2.319'. [ 123.249979][ T7113] netlink: 32 bytes leftover after parsing attributes in process `syz.1.323'. [ 123.423961][ T7117] tipc: Enabling of bearer rejected, media not registered [ 123.462476][ T7118] netlink: 12 bytes leftover after parsing attributes in process `syz.3.325'. [ 123.477750][ T7126] netlink: 204 bytes leftover after parsing attributes in process `syz.2.327'. [ 123.499751][ T7123] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 123.624815][ T7130] macvlan0: entered promiscuous mode [ 124.025217][ T7151] sit2: entered allmulticast mode [ 124.281383][ T6952] Set syz1 is full, maxelem 65536 reached [ 124.671836][ T7140] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 124.946549][ T7199] x_tables: duplicate underflow at hook 2 [ 125.046400][ T7216] netlink: 224 bytes leftover after parsing attributes in process `syz.3.349'. [ 125.884374][ T7257] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 125.910733][ T7261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.364'. [ 125.926345][ T7261] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 125.962167][ T7261] netlink: 184 bytes leftover after parsing attributes in process `syz.4.364'. [ 126.154251][ T7269] netlink: 'syz.4.366': attribute type 1 has an invalid length. [ 126.188469][ T7269] netlink: 'syz.4.366': attribute type 4 has an invalid length. [ 126.208472][ T7269] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.366'. [ 126.427311][ T7282] erspan0: entered allmulticast mode [ 126.805842][ T7300] netlink: 12 bytes leftover after parsing attributes in process `syz.1.375'. [ 127.260552][ T7322] netlink: 'syz.1.382': attribute type 24 has an invalid length. [ 127.404829][ T7330] netlink: 12 bytes leftover after parsing attributes in process `syz.3.385'. [ 127.530772][ T7336] netlink: 20 bytes leftover after parsing attributes in process `syz.1.387'. [ 127.912919][ T7361] openvswitch: netlink: Key type 8198 is out of range max 32 [ 128.146065][ T7364] bridge_slave_0: left allmulticast mode [ 128.161974][ T7364] bridge_slave_0: left promiscuous mode [ 128.179975][ T7364] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.220626][ T7364] bridge_slave_1: left allmulticast mode [ 128.226621][ T7364] bridge_slave_1: left promiscuous mode [ 128.233205][ T7364] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.246939][ T7364] bond0: (slave bond_slave_0): Releasing backup interface [ 128.262579][ T7364] bond0: (slave bond_slave_1): Releasing backup interface [ 128.283797][ T7364] team0: Port device team_slave_0 removed [ 128.302274][ T7364] team0: Port device team_slave_1 removed [ 128.309589][ T7364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.317194][ T7364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.329836][ T7364] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.337321][ T7364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.350745][ T7364] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 128.572156][ T7385] __nla_validate_parse: 2 callbacks suppressed [ 128.572174][ T7385] netlink: 28 bytes leftover after parsing attributes in process `syz.1.400'. [ 128.598018][ T7385] netlink: 28 bytes leftover after parsing attributes in process `syz.1.400'. [ 128.649281][ T7389] netlink: 'syz.4.402': attribute type 3 has an invalid length. [ 128.671042][ T7390] netlink: 'syz.4.402': attribute type 3 has an invalid length. [ 128.696888][ T7389] netlink: 3 bytes leftover after parsing attributes in process `syz.4.402'. [ 128.699210][ T7390] netlink: 3 bytes leftover after parsing attributes in process `syz.4.402'. [ 129.118721][ T7410] netlink: 24 bytes leftover after parsing attributes in process `syz.1.408'. [ 129.392254][ T7414] syzkaller0: entered promiscuous mode [ 129.400737][ T7414] syzkaller0: entered allmulticast mode [ 129.440236][ T7383] netlink: 32 bytes leftover after parsing attributes in process `syz.2.399'. [ 129.471681][ T7433] netlink: 56 bytes leftover after parsing attributes in process `syz.4.413'. [ 129.481760][ T7427] geneve0: entered promiscuous mode [ 129.488405][ T7442] netlink: 'syz.0.414': attribute type 1 has an invalid length. [ 129.494939][ T7427] geneve0: entered allmulticast mode [ 129.498541][ T7442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.414'. [ 129.511584][ T7442] netlink: 12 bytes leftover after parsing attributes in process `syz.0.414'. [ 129.582406][ T7442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.414'. [ 129.599613][ T1171] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.613652][ T1171] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.770246][ T1171] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.806936][ T1171] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.247958][ T7469] netlink: 'syz.3.421': attribute type 1 has an invalid length. [ 130.912779][ T7472] netlink: 'syz.1.422': attribute type 5 has an invalid length. [ 132.818568][ T7508] syzkaller1: entered allmulticast mode [ 133.374010][ T7544] : renamed from gretap0 (while UP) [ 133.485359][ T7549] netlink: 'syz.3.443': attribute type 28 has an invalid length. [ 133.493912][ T7549] netlink: 'syz.3.443': attribute type 3 has an invalid length. [ 133.503610][ T7549] netlink: 'syz.3.443': attribute type 1 has an invalid length. [ 133.539251][ T7549] 8021q: adding VLAN 0 to HW filter on device bond3 [ 133.605065][ T7552] __nla_validate_parse: 10 callbacks suppressed [ 133.605084][ T7552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.444'. [ 133.656136][ T7557] bond4: entered promiscuous mode [ 133.793273][ T7561] netlink: 1 bytes leftover after parsing attributes in process `syz.2.446'. [ 133.884185][ T7565] netlink: 332 bytes leftover after parsing attributes in process `syz.2.448'. [ 133.900169][ T7565] ipt_REJECT: TCP_RESET invalid for non-tcp [ 134.063475][ T7578] netlink: 12 bytes leftover after parsing attributes in process `syz.1.452'. [ 134.114426][ T7578] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.137636][ T7578] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 134.247107][ T7588] netlink: 'syz.1.454': attribute type 1 has an invalid length. [ 134.257977][ T7588] netlink: 'syz.1.454': attribute type 2 has an invalid length. [ 134.369687][ T7592] netlink: 'syz.1.456': attribute type 33 has an invalid length. [ 134.381454][ T7592] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 135.836300][ T7521] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 136.188307][ T7620] netlink: 224 bytes leftover after parsing attributes in process `syz.1.463'. [ 136.225403][ T7620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.463'. [ 136.355603][ T7622] syzkaller0: entered promiscuous mode [ 136.376141][ T7622] syzkaller0: entered allmulticast mode [ 136.924435][ T7664] netlink: 32 bytes leftover after parsing attributes in process `syz.0.477'. [ 137.199898][ T7679] netlink: 48 bytes leftover after parsing attributes in process `syz.0.481'. [ 137.786436][ T7720] netlink: 12 bytes leftover after parsing attributes in process `syz.1.492'. [ 137.854049][ T7724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.492'. [ 137.887956][ T7718] netlink: 'syz.3.491': attribute type 1 has an invalid length. [ 137.930853][ T7720] xfrm1: entered promiscuous mode [ 137.943699][ T7720] xfrm1: entered allmulticast mode [ 138.111602][ T7718] 8021q: adding VLAN 0 to HW filter on device bond5 [ 138.735446][ T7747] bond2: entered promiscuous mode [ 138.777251][ T7747] bond2: entered allmulticast mode [ 138.786475][ T7747] 8021q: adding VLAN 0 to HW filter on device bond2 [ 138.860301][ T7769] sctp: [Deprecated]: syz.1.503 (pid 7769) Use of int in max_burst socket option. [ 138.860301][ T7769] Use struct sctp_assoc_value instead [ 139.036563][ T7774] netlink: 'syz.2.506': attribute type 10 has an invalid length. [ 139.070156][ T7774] syz_tun: entered promiscuous mode [ 139.103393][ T7780] netlink: 'syz.2.506': attribute type 1 has an invalid length. [ 139.129218][ T7785] __nla_validate_parse: 1 callbacks suppressed [ 139.129236][ T7785] netlink: 48 bytes leftover after parsing attributes in process `syz.0.508'. [ 139.146938][ T7774] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 139.184724][ T7779] netlink: 116 bytes leftover after parsing attributes in process `syz.1.510'. [ 139.486292][ T7800] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.513'. [ 139.662093][ T7808] x_tables: duplicate underflow at hook 1 [ 139.701109][ T7808] x_tables: duplicate underflow at hook 1 [ 139.735629][ T7808] x_tables: duplicate underflow at hook 1 [ 139.764824][ T7808] x_tables: duplicate underflow at hook 1 [ 139.790388][ T7808] x_tables: duplicate underflow at hook 1 [ 139.825772][ T7808] x_tables: duplicate underflow at hook 1 [ 139.833210][ T7817] netlink: 'syz.0.519': attribute type 13 has an invalid length. [ 139.840766][ T7808] x_tables: duplicate underflow at hook 1 [ 139.859469][ T7808] x_tables: duplicate underflow at hook 1 [ 139.877378][ T7808] x_tables: duplicate underflow at hook 1 [ 139.899728][ T7808] x_tables: duplicate underflow at hook 1 [ 139.943059][ T7819] netlink: 12 bytes leftover after parsing attributes in process `syz.1.520'. [ 140.270961][ T1171] ip6_tunnel:  xmit: Local address not yet configured! [ 140.286735][ T7841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.525'. [ 140.348362][ T7843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.526'. [ 140.393549][ T7843] netlink: 12 bytes leftover after parsing attributes in process `syz.3.526'. [ 140.854176][ T7871] netlink: 'syz.0.534': attribute type 21 has an invalid length. [ 140.877468][ T7872] netlink: 'syz.0.534': attribute type 75 has an invalid length. [ 140.911427][ T7873] netlink: 'syz.0.534': attribute type 75 has an invalid length. [ 141.668286][ T7915] netlink: 28 bytes leftover after parsing attributes in process `syz.4.547'. [ 141.875780][ T7928] netlink: 24 bytes leftover after parsing attributes in process `syz.2.552'. [ 142.032595][ T7935] netlink: 16 bytes leftover after parsing attributes in process `syz.1.554'. [ 142.108546][ T7933] tap0: tun_chr_ioctl cmd 1074025672 [ 142.114040][ T7933] tap0: ignored: set checksum disabled [ 143.001863][ T7985] sctp: [Deprecated]: syz.1.570 (pid 7985) Use of int in max_burst socket option deprecated. [ 143.001863][ T7985] Use struct sctp_assoc_value instead [ 143.185981][ T7992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.250788][ T7999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.279539][ T132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.289296][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.397007][ T7991] syzkaller0: entered promiscuous mode [ 143.412508][ T7991] syzkaller0: entered allmulticast mode [ 143.486663][ T7992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.528860][ T7992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.607208][ T7992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.624744][ T7992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.646799][ T7992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.681604][ T7990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.734851][ T3356] bond0: (slave bond_slave_0): interface is now down [ 143.748258][ T8011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.755108][ T3356] bond0: (slave bond_slave_1): interface is now down [ 143.764879][ T8011] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.772415][ T3356] bond0: (slave syz_tun): interface is now down [ 143.799832][ T3356] bond0: (slave bond_slave_0): interface is now down [ 143.816091][ T3356] bond0: (slave bond_slave_1): interface is now down [ 143.825419][ T8011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.839054][ T3356] bond0: (slave syz_tun): interface is now down [ 143.867840][ T13] bond0: (slave bond_slave_0): interface is now down [ 143.877809][ T13] bond0: (slave bond_slave_1): interface is now down [ 143.889741][ T13] bond0: (slave syz_tun): interface is now down [ 143.908125][ T8011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.917893][ T13] bond0: (slave bond_slave_0): interface is now down [ 143.918003][ T8011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.924964][ T13] bond0: (slave bond_slave_1): interface is now down [ 143.939676][ T13] bond0: (slave syz_tun): interface is now down [ 143.941005][ T8011] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 143.957087][ T8011] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 143.958739][ T1171] bond0: (slave bond_slave_0): interface is now down [ 143.976817][ T1171] bond0: (slave bond_slave_1): interface is now down [ 143.979119][ T8011] veth1_vlan: left promiscuous mode [ 143.984190][ T1171] bond0: (slave syz_tun): interface is now down [ 143.990868][ T8011] veth0_vlan: left promiscuous mode [ 144.001933][ T8011] veth0_vlan: entered promiscuous mode [ 144.008035][ T1171] bond0: (slave bond_slave_0): interface is now down [ 144.011004][ T8011] veth1_vlan: entered promiscuous mode [ 144.014939][ T1171] bond0: (slave bond_slave_1): interface is now down [ 144.028493][ T8011] veth1_macvtap: left promiscuous mode [ 144.029072][ T1171] bond0: (slave syz_tun): interface is now down [ 144.035910][ T8011] veth0_macvtap: left promiscuous mode [ 144.048376][ T8011] veth1_macvtap: entered promiscuous mode [ 144.058521][ T144] bond0: (slave bond_slave_0): interface is now down [ 144.061219][ T8011] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 144.065918][ T144] bond0: (slave bond_slave_1): interface is now down [ 144.074367][ T8011] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 144.088599][ T8011] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 144.095709][ T144] bond0: (slave syz_tun): interface is now down [ 144.096899][ T8011] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 144.118049][ T144] bond0: (slave bond_slave_0): interface is now down [ 144.131554][ T144] bond0: (slave bond_slave_1): interface is now down [ 144.139322][ T144] bond0: (slave syz_tun): interface is now down [ 144.156196][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.163592][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.167768][ T35] bond0: (slave bond_slave_0): interface is now down [ 144.174367][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.185187][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.186416][ T35] bond0: (slave bond_slave_1): interface is now down [ 144.216986][ T35] bond0: (slave syz_tun): interface is now down [ 144.240213][ T144] bond0: (slave bond_slave_0): interface is now down [ 144.247448][ T144] bond0: (slave bond_slave_1): interface is now down [ 144.255681][ T144] bond0: (slave syz_tun): interface is now down [ 144.278038][ T57] bond0: (slave bond_slave_0): interface is now down [ 144.304776][ T57] bond0: (slave bond_slave_1): interface is now down [ 144.322293][ T57] bond0: (slave syz_tun): interface is now down [ 144.349734][ T144] bond0: (slave bond_slave_0): interface is now down [ 144.377499][ T144] bond0: (slave bond_slave_1): interface is now down [ 144.400815][ T144] bond0: (slave syz_tun): interface is now down [ 144.437743][ T144] bond0: (slave bond_slave_0): interface is now down [ 144.458182][ T144] bond0: (slave bond_slave_1): interface is now down [ 144.476795][ T144] bond0: (slave syz_tun): interface is now down [ 144.497127][ T1171] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.516326][ T144] bond0: (slave bond_slave_0): interface is now down [ 144.530435][ T1171] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.542997][ T144] bond0: (slave bond_slave_1): interface is now down [ 144.551533][ T144] bond0: (slave syz_tun): interface is now down [ 144.558748][ T1171] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.568565][ T1171] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.587703][ T144] bond0: (slave bond_slave_0): interface is now down [ 144.595049][ T144] bond0: (slave bond_slave_1): interface is now down [ 144.614549][ T1171] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.626769][ T8038] __nla_validate_parse: 5 callbacks suppressed [ 144.626790][ T8038] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.583'. [ 144.643571][ T144] bond0: (slave syz_tun): interface is now down [ 144.653126][ T1171] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.662846][ T1171] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.673531][ T57] bond0: (slave bond_slave_0): interface is now down [ 144.690457][ T1171] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.702621][ T57] bond0: (slave bond_slave_1): interface is now down [ 144.717923][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 144.729173][ T57] bond0: (slave syz_tun): interface is now down [ 144.777715][ T57] bond0: (slave bond_slave_0): interface is now down [ 144.793012][ T57] bond0: (slave bond_slave_1): interface is now down [ 144.826938][ T57] bond0: (slave syz_tun): interface is now down [ 144.858989][ T1171] bond0: (slave bond_slave_0): interface is now down [ 144.876825][ T1171] bond0: (slave bond_slave_1): interface is now down [ 144.906829][ T1171] bond0: (slave syz_tun): interface is now down [ 144.948108][ T1171] bond0: (slave bond_slave_0): interface is now down [ 144.970841][ T1171] bond0: (slave bond_slave_1): interface is now down [ 144.985263][ T8057] netlink: 36 bytes leftover after parsing attributes in process `syz.2.589'. [ 144.985842][ T1171] bond0: (slave syz_tun): interface is now down [ 145.038314][ T13] bond0: (slave bond_slave_0): interface is now down [ 145.046468][ T13] bond0: (slave bond_slave_1): interface is now down [ 145.067075][ T13] bond0: (slave syz_tun): interface is now down [ 145.134854][ T13] bond0: now running without any active interface! [ 145.162842][ T8063] hsr0: entered promiscuous mode [ 145.180843][ T8063] bridge_slave_1: entered allmulticast mode [ 145.264206][ T8072] netlink: 64 bytes leftover after parsing attributes in process `syz.3.594'. [ 145.274863][ T8072] netlink: 64 bytes leftover after parsing attributes in process `syz.3.594'. [ 145.322754][ T8075] netlink: 'syz.3.594': attribute type 1 has an invalid length. [ 145.361639][ T8067] netlink: 76 bytes leftover after parsing attributes in process `syz.4.593'. [ 145.680835][ T8090] macvtap0: entered allmulticast mode [ 145.700720][ T8090] veth0_macvtap: entered allmulticast mode [ 145.800325][ T8090] : entered promiscuous mode [ 145.844882][ T8092] 8021q: VLANs not supported on ip6_vti0 [ 146.248757][ T8111] dvmrp0: entered allmulticast mode [ 146.327030][ T8087] netlink: 'syz.1.599': attribute type 16 has an invalid length. [ 146.372374][ T8087] netlink: 'syz.1.599': attribute type 17 has an invalid length. [ 146.703345][ T8132] netlink: 'syz.2.613': attribute type 27 has an invalid length. [ 146.711695][ T8132] netlink: 'syz.2.613': attribute type 4 has an invalid length. [ 146.722086][ T8132] netlink: 152 bytes leftover after parsing attributes in process `syz.2.613'. [ 146.785596][ T8139] netlink: 128 bytes leftover after parsing attributes in process `syz.3.615'. [ 146.811129][ T8139] netlink: 128 bytes leftover after parsing attributes in process `syz.3.615'. [ 146.822049][ T8140] netlink: 116 bytes leftover after parsing attributes in process `syz.3.615'. [ 147.596758][ T8187] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 147.661395][ T8193] netlink: 'syz.2.629': attribute type 30 has an invalid length. [ 147.687462][ T8195] batadv_slave_1: entered promiscuous mode [ 147.717018][ T8194] batadv_slave_1: left promiscuous mode [ 147.854190][ T8205] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.633'. [ 147.869570][ T29] audit: type=1107 audit(1780522763.746:2): pid=8204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='av`oVUՠS)͞b%+:_j8.舮E4"x Ys36 [ 147.869570][ T29] I}yC|f3*=-5|kqo^ zl-FVqiRBMqӚJ&uc˻‰ #Jܰ3ͦw]-(5LQaR! @o4x1R)@W' [ 148.023846][ T8212] netlink: 'syz.0.635': attribute type 21 has an invalid length. [ 148.508073][ T44] net_ratelimit: 27 callbacks suppressed [ 148.508096][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.522287][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.121350][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.131052][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.140488][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.520984][ T132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.529393][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.660045][ T8134] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 149.769858][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.779713][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.933409][ T8240] netlink: 'syz.3.644': attribute type 10 has an invalid length. [ 149.955796][ T8240] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.990960][ T8241] xt_hashlimit: size too large, truncated to 1048576 [ 150.010926][ T8240] bond0: (slave team0): Enslaving as an active interface with an up link [ 150.160227][ T8248] xt_hashlimit: overflow, try lower: 3/0 [ 150.407181][ T8255] syzkaller1: entered promiscuous mode [ 150.416344][ T8255] syzkaller1: entered allmulticast mode [ 150.567992][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.756696][ T8272] __nla_validate_parse: 2 callbacks suppressed [ 150.756727][ T8272] netlink: 52 bytes leftover after parsing attributes in process `syz.1.652'. [ 150.777276][ T8276] IPv6: NLM_F_CREATE should be specified when creating new route [ 150.805730][ T8276] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 150.814451][ T8276] IPv6: NLM_F_CREATE should be set when creating new route [ 151.099857][ T8292] netlink: 16 bytes leftover after parsing attributes in process `syz.3.658'. [ 151.147244][ T8293] bond2: option lp_interval: invalid value (0) [ 151.154073][ T8293] bond2: option lp_interval: allowed values 1 - 2147483647 [ 151.175889][ T8293] bond2 (unregistering): Released all slaves [ 151.506037][ T8309] netlink: 260 bytes leftover after parsing attributes in process `syz.3.664'. [ 151.577325][ T8313] netlink: 20 bytes leftover after parsing attributes in process `syz.4.665'. [ 151.984975][ T8327] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.667'. [ 152.455647][ T8349] netlink: 128 bytes leftover after parsing attributes in process `syz.1.674'. [ 152.466796][ T8349] netlink: 128 bytes leftover after parsing attributes in process `syz.1.674'. [ 152.632381][ T8355] netlink: 12 bytes leftover after parsing attributes in process `syz.2.675'. [ 152.689027][ T8360] netlink: 4 bytes leftover after parsing attributes in process `syz.4.676'. [ 152.700123][ T8366] netlink: 68 bytes leftover after parsing attributes in process `syz.2.675'. [ 152.956884][ T8371] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.058132][ T8377] netlink: 'syz.1.680': attribute type 1 has an invalid length. [ 153.766550][ T8404] tipc: Failed to remove unknown binding: 66,0,0/0:2079822300/2079822301 [ 153.797958][ T8404] tipc: Failed to remove unknown binding: 66,0,0/0:2079822300/2079822301 [ 154.237766][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 154.287786][ T8429] macsec0: entered promiscuous mode [ 154.691789][ T8444] netlink: 'syz.2.703': attribute type 3 has an invalid length. [ 154.933582][ T8454] netlink: 'syz.2.707': attribute type 1 has an invalid length. [ 155.034528][ T8454] 8021q: adding VLAN 0 to HW filter on device bond4 [ 155.103366][ T8454] netlink: 'syz.2.707': attribute type 10 has an invalid length. [ 155.130351][ T8460] bond0: entered promiscuous mode [ 155.135480][ T8460] bond_slave_0: entered promiscuous mode [ 155.143766][ T8460] bond_slave_1: entered promiscuous mode [ 155.150854][ T8460] team0: entered promiscuous mode [ 155.157811][ T8460] team_slave_0: entered promiscuous mode [ 155.164350][ T8460] team_slave_1: entered promiscuous mode [ 155.171682][ T8460] batadv0: entered promiscuous mode [ 155.182430][ T8460] bond0: left promiscuous mode [ 155.187225][ T8460] bond_slave_0: left promiscuous mode [ 155.192947][ T8460] bond_slave_1: left promiscuous mode [ 155.198786][ T8460] team0: left promiscuous mode [ 155.203706][ T8460] team_slave_0: left promiscuous mode [ 155.210734][ T8460] team_slave_1: left promiscuous mode [ 155.221646][ T8460] batadv0: left promiscuous mode [ 155.284631][ T8462] bond4: (slave dummy0): Enslaving as a backup interface with an up link [ 155.321209][ T8454] dummy0: entered promiscuous mode [ 155.345428][ T8454] bond4: (slave dummy0): Releasing backup interface [ 155.495197][ T8470] netlink: 'syz.0.711': attribute type 1 has an invalid length. [ 155.641651][ T8488] xt_check_table_hooks: 55 callbacks suppressed [ 155.641670][ T8488] x_tables: duplicate underflow at hook 1 [ 155.776704][ T8488] x_tables: duplicate underflow at hook 1 [ 155.999741][ T8511] vcan0: entered allmulticast mode [ 156.254300][ T8521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 156.261642][ T8521] IPv6: NLM_F_CREATE should be set when creating new route [ 156.269053][ T8521] IPv6: NLM_F_CREATE should be set when creating new route [ 156.320565][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.358037][ T8524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.368246][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.474416][ T8534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.568879][ T8540] __nla_validate_parse: 14 callbacks suppressed [ 156.568900][ T8540] netlink: 12 bytes leftover after parsing attributes in process `syz.3.731'. [ 156.745208][ T8546] netlink: 20 bytes leftover after parsing attributes in process `syz.0.733'. [ 156.770797][ T8542] netlink: 112 bytes leftover after parsing attributes in process `syz.0.733'. [ 156.781859][ T8551] netlink: 'syz.1.736': attribute type 1 has an invalid length. [ 156.789832][ T8551] netlink: 228 bytes leftover after parsing attributes in process `syz.1.736'. [ 156.790068][ T8548] geneve1: entered promiscuous mode [ 157.207785][ T8568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.741'. [ 157.332748][ T8574] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 157.632538][ T8581] netlink: 16 bytes leftover after parsing attributes in process `syz.2.743'. [ 157.916984][ T8586] net_ratelimit: 2 callbacks suppressed [ 157.917005][ T8586] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 157.931011][ T8586] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.831687][ T8628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.758'. [ 160.423791][ T8638] netlink: 'syz.4.759': attribute type 4 has an invalid length. [ 160.744563][ T8633] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.762679][ T8633] bridge_slave_0 (unregistering): left allmulticast mode [ 161.070836][ T8633] bridge_slave_0 (unregistering): left promiscuous mode [ 161.077938][ T8633] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.378651][ T8675] netlink: 38 bytes leftover after parsing attributes in process `syz.2.769'. [ 162.745166][ T5296] veth0_macvtap: left promiscuous mode [ 163.347072][ T8693] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 163.687026][ T8701] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 164.007071][ T8708] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 164.597231][ T8717] netlink: 68 bytes leftover after parsing attributes in process `syz.2.779'. [ 164.608139][ T8717] netlink: 28 bytes leftover after parsing attributes in process `syz.2.779'. [ 165.215811][ T8728] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.345228][ T5643] Bluetooth: hci3: link tx timeout [ 165.352042][ T5643] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 166.617116][ T8756] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 166.905082][ T8761] netlink: 24 bytes leftover after parsing attributes in process `syz.0.789'. [ 167.524345][ T5652] Bluetooth: hci3: command 0x0405 tx timeout [ 167.830042][ T8771] 8021q: adding VLAN 0 to HW filter on device bond4 [ 167.837725][ T8771] bridge0: port 3(bond4) entered blocking state [ 167.844296][ T8771] bridge0: port 3(bond4) entered disabled state [ 167.850809][ T8771] bond4: entered allmulticast mode [ 167.858774][ T8771] bond4: entered promiscuous mode [ 167.865524][ T8771] bridge0: port 3(bond4) entered blocking state [ 167.872136][ T8771] bridge0: port 3(bond4) entered forwarding state [ 167.882171][ T144] bridge0: port 3(bond4) entered disabled state [ 168.520673][ T8802] tipc: Started in network mode [ 168.539653][ T8802] tipc: Node identity ac14140f, cluster identity 4711 [ 168.781306][ T8802] tipc: New replicast peer: 255.255.255.255 [ 168.788193][ T8802] tipc: Enabled bearer , priority 10 [ 169.097038][ T8810] netlink: 288 bytes leftover after parsing attributes in process `syz.3.799'. [ 169.928659][ T44] tipc: Node number set to 2886997007 [ 170.761586][ T8859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.801'. [ 171.126360][ T8859] team1: entered promiscuous mode [ 171.141686][ T8859] team1: entered allmulticast mode [ 172.021935][ T8866] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ku crK:̥B| [ 172.388582][ T8888] netlink: 88 bytes leftover after parsing attributes in process `syz.1.811'. [ 173.440109][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 173.672086][ T8920] xt_l2tp: v2 sid > 0xffff: 1114112 [ 174.468762][ T8936] netlink: 12 bytes leftover after parsing attributes in process `syz.1.822'. [ 174.740216][ T8943] netlink: 12 bytes leftover after parsing attributes in process `syz.4.823'. [ 174.785472][ T8945] netlink: 60 bytes leftover after parsing attributes in process `syz.1.822'. [ 174.892364][ T8939] syzkaller1: entered promiscuous mode [ 174.898739][ T8939] syzkaller1: entered allmulticast mode [ 175.500484][ T8947] netlink: 24 bytes leftover after parsing attributes in process `syz.1.822'. [ 176.058913][ T8968] netlink: 24 bytes leftover after parsing attributes in process `syz.0.827'. [ 176.682241][ T8979] netlink: 128 bytes leftover after parsing attributes in process `syz.2.830'. [ 177.367085][ T8984] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 177.397669][ T8984] nftables ruleset with unbound set [ 177.405816][ T8987] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.834'. [ 177.685981][ T8992] tipc: Trying to set illegal importance in message [ 181.051778][ T9060] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 181.603952][ T9069] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 183.533333][ T9117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.862'. [ 184.166549][ T9126] xt_hashlimit: size too large, truncated to 1048576 [ 184.935470][ T9143] netlink: 100 bytes leftover after parsing attributes in process `syz.3.869'. [ 185.077074][ T9144] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.869'. [ 185.950890][ T9151] netlink: 20 bytes leftover after parsing attributes in process `syz.4.871'. [ 186.931165][ T9177] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.875'. [ 186.941215][ T9183] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.875'. [ 187.565551][ T9195] netlink: 'syz.0.879': attribute type 1 has an invalid length. [ 187.843566][ T9200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.883'. [ 187.855163][ T9200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.883'. [ 187.859758][ T9195] 8021q: adding VLAN 0 to HW filter on device bond5 [ 187.867876][ T9200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.883'. [ 188.157481][ T9201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.882'. [ 188.179740][ T9203] bond5: (slave veth0_to_bond): making interface the new active one [ 188.189429][ T9203] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 188.505330][ T9208] macvlan2: entered promiscuous mode [ 188.515518][ T9208] macvlan2: entered allmulticast mode [ 188.522792][ T9208] bond5: entered promiscuous mode [ 188.528583][ T9208] veth0_to_bond: entered promiscuous mode [ 188.538374][ T9208] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 188.548870][ T9208] bond5: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 188.768016][ T9208] bond5: left promiscuous mode [ 188.773307][ T9208] veth0_to_bond: left promiscuous mode [ 188.807459][ T9211] dvmrp0: entered allmulticast mode [ 189.050912][ T9200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.883'. [ 189.060808][ T9200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.883'. [ 189.128222][ T9200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.883'. [ 189.450406][ T9226] netlink: 'syz.3.888': attribute type 1 has an invalid length. [ 189.960310][ T9233] xt_connbytes: Forcing CT accounting to be enabled [ 189.968287][ T9233] xt_hashlimit: max too large, truncated to 1048576 [ 190.024781][ T9233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.890'. [ 190.517165][ T9244] bond0: (slave syz_tun): Releasing backup interface [ 190.860009][ T9244] bridge_slave_0: left allmulticast mode [ 190.917013][ T9244] bridge_slave_0: left promiscuous mode [ 191.179953][ T9244] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.547489][ T9244] bridge_slave_1: left allmulticast mode [ 191.553569][ T9244] bridge_slave_1: left promiscuous mode [ 191.559670][ T9244] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.814332][ T9274] netlink: 'syz.4.897': attribute type 1 has an invalid length. [ 191.823144][ T9275] netlink: 28 bytes leftover after parsing attributes in process `syz.4.897'. [ 191.826672][ T9244] bond0: (slave bond_slave_0): Releasing backup interface [ 191.846945][ T9244] bond0: (slave bond_slave_1): Releasing backup interface [ 191.859422][ T9244] team0: Port device team_slave_0 removed [ 191.869248][ T9244] team0: Port device team_slave_1 removed [ 191.875564][ T9244] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.883036][ T9244] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.892152][ T9244] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.094416][ T9244] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.106244][ T9244] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 192.141713][ T9248] team0: Port device xfrm0 added [ 192.166533][ T9261] vxcan1 speed is unknown, defaulting to 1000 [ 192.174556][ T9261] vxcan1 speed is unknown, defaulting to 1000 [ 192.182834][ T9261] vxcan1 speed is unknown, defaulting to 1000 [ 192.491201][ T9277] netlink: 288 bytes leftover after parsing attributes in process `syz.2.898'. [ 192.766034][ T9281] netlink: 24 bytes leftover after parsing attributes in process `syz.4.900'. [ 192.781382][ T9281] netlink: 28 bytes leftover after parsing attributes in process `syz.4.900'. [ 193.051508][ T9279] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 193.083978][ T5755] IPVS: starting estimator thread 0... [ 193.857717][ T9283] IPVS: using max 23 ests per chain, 55200 per kthread [ 194.083675][ T9304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.907'. [ 194.134653][ T9261] infiniband syz2: set active [ 194.364122][ T9261] infiniband syz2: added vxcan1 [ 194.374438][ T9261] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 194.378427][ T9261] infiniband syz2: Couldn't open port 1 [ 194.392992][ T9261] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 194.408050][ T9261] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 194.409590][ T5739] vxcan1 speed is unknown, defaulting to 1000 [ 194.425636][ T9261] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 194.446164][ T9307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.909'. [ 194.677531][ T9261] RDS/IB: syz2: added [ 194.681915][ T9261] smc: adding ib device syz2 with port count 1 [ 194.688309][ T9261] smc: ib device syz2 port 1 has pnetid SYZ2 (user defined) [ 194.700567][ T9261] vxcan1 speed is unknown, defaulting to 1000 [ 194.702458][ T9309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.909'. [ 195.020832][ T9307] netlink: 'syz.0.909': attribute type 1 has an invalid length. [ 195.030630][ T9307] netlink: 'syz.0.909': attribute type 2 has an invalid length. [ 195.060957][ T5738] vxcan1 speed is unknown, defaulting to 1000 [ 196.405648][ T9261] vxcan1 speed is unknown, defaulting to 1000 [ 196.613462][ T9340] netlink: 12 bytes leftover after parsing attributes in process `syz.0.919'. [ 197.390581][ T9350] netlink: 1196 bytes leftover after parsing attributes in process `syz.4.924'. [ 197.621340][ T9353] team0: Device gtp0 is up. Set it down before adding it as a team port [ 197.674579][ T9357] netlink: 24 bytes leftover after parsing attributes in process `syz.1.922'. [ 197.679812][ T9359] xt_hashlimit: size too large, truncated to 1048576 [ 198.312105][ T9261] vxcan1 speed is unknown, defaulting to 1000 [ 198.712312][ T9378] netlink: 4 bytes leftover after parsing attributes in process `syz.0.929'. [ 199.096821][ T9384] netlink: 12 bytes leftover after parsing attributes in process `syz.4.931'. [ 199.362289][ T9387] netlink: 28 bytes leftover after parsing attributes in process `syz.4.931'. [ 199.432946][ T9384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.931'. [ 199.452461][ T9384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.931'. [ 199.476570][ T9384] netlink: 'syz.4.931': attribute type 12 has an invalid length. [ 199.488092][ T9392] netlink: 'syz.2.933': attribute type 1 has an invalid length. [ 199.721903][ T9384] netlink: 'syz.4.931': attribute type 11 has an invalid length. [ 200.976409][ T9421] netlink: 28 bytes leftover after parsing attributes in process `syz.2.939'. [ 200.986264][ T9421] netlink: 28 bytes leftover after parsing attributes in process `syz.2.939'. [ 201.054015][ T9411] veth3: entered allmulticast mode [ 201.272586][ T9423] sctp: [Deprecated]: syz.4.942 (pid 9423) Use of int in maxseg socket option. [ 201.272586][ T9423] Use struct sctp_assoc_value instead [ 201.300208][ T9425] openvswitch: netlink: Missing valid actions attribute. [ 201.307432][ T9425] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.308341][ T9261] vxcan1 speed is unknown, defaulting to 1000 [ 201.346543][ T9411] netlink: 277 bytes leftover after parsing attributes in process `syz.2.939'. [ 202.070591][ T9261] vxcan1 speed is unknown, defaulting to 1000 [ 203.461291][ T9450] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 203.519165][ T9452] netlink: 12 bytes leftover after parsing attributes in process `syz.2.950'. [ 203.555888][ T9443] ip6gretap1: entered allmulticast mode [ 204.143588][ T9456] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.697505][ T9473] netlink: 81 bytes leftover after parsing attributes in process `syz.2.956'. [ 206.090680][ T9478] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 206.976441][ T5637] Bluetooth: hci4: command 0x0406 tx timeout [ 207.272727][ T5637] Bluetooth: hci1: command 0x0406 tx timeout [ 207.279380][ T5637] Bluetooth: hci2: command 0x0406 tx timeout [ 207.285585][ T5637] Bluetooth: hci0: command 0x0406 tx timeout [ 207.673719][ T9513] netlink: 'syz.2.971': attribute type 4 has an invalid length. [ 207.926707][ T9521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.973'. [ 207.927968][ T9520] netlink: 'syz.2.971': attribute type 4 has an invalid length. [ 209.034213][ T9549] netlink: 'syz.4.982': attribute type 12 has an invalid length. [ 209.184581][ T9554] syz_tun: refused to change device tx_queue_len [ 209.845916][ T9549] bond2: option primary_reselect: invalid value (255) [ 209.868952][ T9549] bond2 (unregistering): Released all slaves [ 210.158702][ T9575] netlink: 24 bytes leftover after parsing attributes in process `syz.4.982'. [ 210.176802][ T9577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.986'. [ 210.887280][ T9563] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.927232][ T9563] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.131419][ T9585] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.987'. [ 212.288731][ T9609] netlink: 44 bytes leftover after parsing attributes in process `syz.4.993'. [ 212.479461][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 212.514129][ T9611] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 212.521470][ T9611] IPv6: NLM_F_CREATE should be set when creating new route [ 212.528819][ T9611] IPv6: NLM_F_CREATE should be set when creating new route [ 212.884138][ T9563] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.894909][ T9563] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.916362][ T9603] tipc: Enabling of bearer rejected, failed to enable media [ 213.568990][ T9563] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.579395][ T9563] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.187870][ T9639] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 214.195959][ T9639] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 214.548484][ T9645] syz.3.1002 (9645) used greatest stack depth: 17944 bytes left [ 215.373123][ T9563] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.384077][ T9563] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.408575][ T9666] syzkaller0: entered promiscuous mode [ 215.414155][ T9666] syzkaller0: entered allmulticast mode [ 215.672058][ T9670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1009'. [ 216.286339][ T9676] netlink: 576 bytes leftover after parsing attributes in process `syz.1.1011'. [ 216.679801][ T9690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1016'. [ 216.951788][ T9692] ip_vti0: entered promiscuous mode [ 216.959759][ T9692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1013'. [ 216.993488][ T3356] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.004963][ T3356] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.236685][ T9696] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.1016'. [ 217.267461][ T9698] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1017'. [ 217.283152][ T35] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.291939][ T35] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.300194][ T35] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.308486][ T35] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.623516][ T35] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.863909][ T35] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.483128][ T9721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1023'. [ 218.512806][ T9720] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1020'. [ 218.521834][ T9720] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1020'. [ 218.537699][ T9720] gretap0: entered promiscuous mode [ 218.545025][ T9720] gretap0: left promiscuous mode [ 219.318853][ T9740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1026'. [ 219.573733][ T9742] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1027'. [ 220.236524][ T9755] IPVS: set_ctl: invalid protocol: 128 127.0.0.1:20004 [ 220.251763][ T9758] netlink: 'syz.4.1030': attribute type 21 has an invalid length. [ 220.273989][ T9758] team0: Device gtp0 is up. Set it down before adding it as a team port [ 220.522958][ T9761] batadv_slave_1: entered promiscuous mode [ 220.595314][ T9763] netlink: 'syz.2.1032': attribute type 8 has an invalid length. [ 220.635293][ T9763] veth1_to_team: entered promiscuous mode [ 220.642549][ T9763] gretap0: entered promiscuous mode [ 220.776439][ T9763] veth1_to_team: left promiscuous mode [ 220.786793][ T9763] gretap0: left promiscuous mode [ 222.277137][ T9798] __nla_validate_parse: 2 callbacks suppressed [ 222.277157][ T9798] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1042'. [ 222.301229][ T9798] ip6tnl0: entered promiscuous mode [ 222.306506][ T9798] ip6tnl0: entered allmulticast mode [ 222.323822][ T9804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1044'. [ 222.589704][ T9800] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1043'. [ 222.605443][ T9800] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1043'. [ 222.657428][ T9800] gretap0: entered promiscuous mode [ 222.951957][ T9800] gretap0: left promiscuous mode [ 223.132536][ T9824] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1046'. [ 223.155914][ T9824] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1046'. [ 224.190391][ T9841] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1052'. [ 224.577081][ T9853] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1057'. [ 224.582198][ T9851] netlink: 'syz.3.1056': attribute type 10 has an invalid length. [ 224.586327][ T9853] tipc: Invalid UDP bearer configuration [ 224.594312][ T9853] tipc: Enabling of bearer rejected, failed to enable media [ 226.315666][ T9881] bond7: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 226.327932][ T9881] bond7 (unregistering): Released all slaves [ 227.225246][ T9891] netlink: 'syz.3.1067': attribute type 1 has an invalid length. [ 227.248079][ T9891] 8021q: adding VLAN 0 to HW filter on device bond7 [ 227.257966][ T9891] raw_sendmsg: syz.3.1067 forgot to set AF_INET. Fix it! [ 227.430144][ T9891] bond7: (slave veth0_to_bond): making interface the new active one [ 227.440595][ T9891] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 227.453028][ T9893] bond7: entered promiscuous mode [ 227.458101][ T9893] veth0_to_bond: entered promiscuous mode [ 227.464055][ T9893] bond7: entered allmulticast mode [ 227.469227][ T9893] veth0_to_bond: entered allmulticast mode [ 227.485847][ T9891] macvlan2: entered promiscuous mode [ 227.491343][ T9891] macvlan2: entered allmulticast mode [ 227.499565][ T9891] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 227.508637][ T9891] bond7: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 227.566978][ T9853] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 228.301725][ T9910] netlink: 'syz.1.1072': attribute type 58 has an invalid length. [ 228.513637][ T9910] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1072'. [ 229.529708][ T9930] bond7: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 229.543401][ T9930] bond7 (unregistering): Released all slaves [ 230.592992][ T9952] sctp: [Deprecated]: syz.4.1080 (pid 9952) Use of int in max_burst socket option. [ 230.592992][ T9952] Use struct sctp_assoc_value instead [ 230.608119][ T9954] sctp: [Deprecated]: syz.4.1080 (pid 9954) Use of int in max_burst socket option. [ 230.608119][ T9954] Use struct sctp_assoc_value instead [ 231.137012][ T9958] xt_hashlimit: size too large, truncated to 1048576 [ 231.711516][ T9969] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.737687][ T9964] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1082'. [ 232.130409][ T9975] gtp0: entered allmulticast mode [ 232.142431][ T9975] team0: Port device gtp0 added [ 233.107861][T10000] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1092'. [ 233.437014][T10003] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.445762][T10003] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.022113][T10013] netlink: 'syz.3.1097': attribute type 1 has an invalid length. [ 234.109458][T10019] netlink: 'syz.0.1098': attribute type 16 has an invalid length. [ 234.136099][T10019] netlink: 'syz.0.1098': attribute type 3 has an invalid length. [ 234.147214][T10020] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1097'. [ 234.326554][T10019] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1098'. [ 234.372927][T10013] 8021q: adding VLAN 0 to HW filter on device bond8 [ 234.381921][T10022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1099'. [ 234.391427][T10022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1099'. [ 235.079509][T10037] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 235.326254][T10041] netlink: 'syz.3.1107': attribute type 7 has an invalid length. [ 235.328460][T10037] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1105'. [ 235.343097][T10037] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1105'. [ 235.602698][T10038] netlink: 'syz.2.1106': attribute type 1 has an invalid length. [ 235.611389][T10038] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1106'. [ 235.623888][T10038] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1106'. [ 235.642055][T10041] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1107'. [ 235.646042][T10038] netlink: 658 bytes leftover after parsing attributes in process `syz.2.1106'. [ 236.301902][T10058] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 236.748019][T10071] netlink: 'syz.2.1117': attribute type 2 has an invalid length. [ 236.756616][T10067] netlink: 'syz.0.1116': attribute type 1 has an invalid length. [ 238.019963][T10087] xfrm1: entered promiscuous mode [ 238.025167][T10087] xfrm1: entered allmulticast mode [ 238.361971][T10096] netlink: 'syz.2.1123': attribute type 1 has an invalid length. [ 241.248797][T10122] __nla_validate_parse: 11 callbacks suppressed [ 241.248818][T10122] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.1131'. [ 241.264679][T10122] openvswitch: netlink: Missing key (keys=40, expected=100) [ 241.321632][T10122] IPVS: Error connecting to the multicast addr [ 241.556355][T10122] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 241.565530][T10122] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 241.574802][T10122] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 241.583907][T10122] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 241.593004][T10122] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 241.602083][T10122] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 241.611164][T10122] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 241.620251][T10122] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 241.629338][T10122] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 241.638426][T10122] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 242.175250][T10125] syzkaller1: entered promiscuous mode [ 242.180862][T10125] syzkaller1: entered allmulticast mode [ 242.461466][T10135] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1135'. [ 242.495246][T10136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1135'. [ 242.501058][T10137] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1135'. [ 243.122287][T10149] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1139'. [ 243.399899][T10151] netlink: 'syz.0.1140': attribute type 1 has an invalid length. [ 243.429557][T10151] bond6: entered promiscuous mode [ 243.435290][T10151] 8021q: adding VLAN 0 to HW filter on device bond6 [ 243.457895][T10151] bond6: (slave bridge3): making interface the new active one [ 243.465515][T10151] bridge3: entered promiscuous mode [ 243.683087][T10151] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 244.090437][ T132] IPVS: starting estimator thread 0... [ 244.193504][T10164] IPVS: using max 23 ests per chain, 55200 per kthread [ 244.536966][T10175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1148'. [ 244.547091][T10167] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1144'. [ 245.454600][T10188] vlan2: entered allmulticast mode [ 245.455934][T10193] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1153'. [ 245.675637][T10188] veth1_virt_wifi: entered allmulticast mode [ 245.682285][T10195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1152'. [ 246.344737][T10191] erspan0: left allmulticast mode [ 246.711102][T10215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1161'. [ 246.734241][T10213] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1160'. [ 246.752343][T10219] netlink: 'syz.0.1158': attribute type 1 has an invalid length. [ 246.767047][T10220] netlink: 'syz.0.1158': attribute type 1 has an invalid length. [ 247.093658][T10219] 8021q: adding VLAN 0 to HW filter on device bond7 [ 247.332673][T10231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1163'. [ 247.721922][T10236] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1165'. [ 248.008217][T10236] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1165'. [ 248.060450][T10236] netlink: 'syz.3.1165': attribute type 1 has an invalid length. [ 248.086785][T10236] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1165'. [ 248.482243][T10233] atomic_op ffff88802b203198 conn xmit_atomic 0000000000000000 [ 249.046277][T10233] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 250.534775][T10282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1176'. [ 250.549822][T10282] macvlan0: left promiscuous mode [ 250.595882][T10282] netlink: 'syz.1.1176': attribute type 1 has an invalid length. [ 250.770269][T10282] netlink: 'syz.1.1176': attribute type 2 has an invalid length. [ 250.803825][T10299] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1181'. [ 251.059407][ T5646] Bluetooth: hci0: command 0x0406 tx timeout [ 251.122515][T10307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1183'. [ 251.357596][T10309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1183'. [ 251.659283][T10312] vxcan0: tx address claim with dest, not broadcast [ 251.751433][T10316] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1184'. [ 252.010913][T10318] netlink: 'syz.1.1186': attribute type 1 has an invalid length. [ 252.024109][T10318] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1186'. [ 252.041263][T10318] netlink: 'syz.1.1186': attribute type 1 has an invalid length. [ 252.060475][T10318] netlink: 'syz.1.1186': attribute type 8 has an invalid length. [ 252.068990][T10318] netlink: 582 bytes leftover after parsing attributes in process `syz.1.1186'. [ 252.078830][T10318] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1186'. [ 252.530976][T10331] IPVS: set_ctl: invalid protocol: 94 172.30.0.3:20002 [ 252.699419][T10328] netlink: 'syz.1.1189': attribute type 21 has an invalid length. [ 252.717676][T10328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1189'. [ 252.980154][T10328] netlink: 'syz.1.1189': attribute type 21 has an invalid length. [ 252.988669][T10328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1189'. [ 253.005629][T10337] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.1191'. [ 253.386615][T10348] lo: entered allmulticast mode [ 253.394623][T10348] lo: left allmulticast mode [ 253.638688][T10351] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1195'. [ 254.235669][T10363] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1199'. [ 254.252491][T10363] netlink: 'syz.2.1199': attribute type 2 has an invalid length. [ 254.580175][T10381] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1204'. [ 255.525522][T10397] net_ratelimit: 2999 callbacks suppressed [ 255.525545][T10397] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 256.177980][T10412] 8021q: VLANs not supported on gre0 [ 256.498206][T10403] syzkaller1: entered promiscuous mode [ 256.504406][T10403] syzkaller1: entered allmulticast mode [ 256.778569][T10421] __nla_validate_parse: 4 callbacks suppressed [ 256.778607][T10421] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1215'. [ 256.809635][T10423] mac80211_hwsim hwsim9 : renamed from wlan1 (while UP) [ 257.385293][T10439] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 257.402883][ T5646] block nbd0: Receive control failed (result -110) [ 257.953478][T10448] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1224'. [ 257.967760][T10448] sctp: [Deprecated]: syz.2.1224 (pid 10448) Use of struct sctp_assoc_value in delayed_ack socket option. [ 257.967760][T10448] Use struct sctp_sack_info instead [ 258.332924][T10457] syzkaller0: entered promiscuous mode [ 258.338466][T10457] syzkaller0: entered allmulticast mode [ 258.559240][T10461] --map-set only usable from mangle table [ 258.601861][T10457] netlink: 'syz.4.1227': attribute type 10 has an invalid length. [ 258.871284][T10459] bond9: entered promiscuous mode [ 258.913181][T10467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.942069][T10457] team0 (unregistering): Port device team_slave_0 removed [ 258.973198][T10457] team0 (unregistering): Port device team_slave_1 removed [ 260.712504][T10497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.749453][T10500] netlink: 'syz.2.1241': attribute type 3 has an invalid length. [ 261.525141][T10511] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1244'. [ 262.418490][T10517] syzkaller0: entered promiscuous mode [ 262.425353][T10517] syzkaller0: entered allmulticast mode [ 264.908869][T10564] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1256'. [ 264.920417][T10564] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1256'. [ 265.195500][T10566] netlink: 'syz.1.1257': attribute type 1 has an invalid length. [ 265.204122][T10566] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1257'. [ 265.268952][T10568] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1258'. [ 266.625556][T10597] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1266'. [ 266.954421][T10602] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 266.998570][T10593] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1263'. [ 268.208794][T10624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1273'. [ 269.125624][T10643] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1279'. [ 269.325468][T10644] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1279'. [ 269.338878][T10643] tipc: Started in network mode [ 269.344271][T10643] tipc: Node identity 0ecde0b6d8ba, cluster identity 4711 [ 269.352410][T10643] tipc: Enabled bearer , priority 0 [ 269.364276][T10643] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1279'. [ 270.256231][T10642] tipc: Disabling bearer [ 271.967565][ T5646] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 271.979507][ T5646] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 271.988114][ T5646] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 272.007142][ T5646] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 272.015525][ T5646] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 273.356986][T10686] netlink: 'syz.3.1291': attribute type 29 has an invalid length. [ 274.575827][T10715] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1296'. [ 274.593684][T10715] syzkaller1: entered promiscuous mode [ 274.599620][T10715] syzkaller1: entered allmulticast mode [ 274.651194][ T5646] Bluetooth: hci5: command tx timeout [ 274.955319][T10721] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1298'. [ 275.045666][T10719] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1297'. [ 275.725865][T10677] vxcan1 speed is unknown, defaulting to 1000 [ 275.977010][T10740] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1303'. [ 275.987163][T10740] openvswitch: netlink: Flow actions attr not present in new flow. [ 276.298369][T10749] netlink: 'syz.3.1304': attribute type 9 has an invalid length. [ 276.835708][ T5646] Bluetooth: hci5: command tx timeout [ 277.594314][T10770] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1310'. [ 278.093690][T10677] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.106282][T10677] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.114811][T10677] bridge_slave_0: entered allmulticast mode [ 278.123726][T10677] bridge_slave_0: entered promiscuous mode [ 278.133568][T10677] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.141663][T10677] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.149619][T10677] bridge_slave_1: entered allmulticast mode [ 278.164927][T10677] bridge_slave_1: entered promiscuous mode [ 278.218105][T10677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.232062][T10677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.300484][T10677] team0: Port device team_slave_0 added [ 278.310394][T10677] team0: Port device team_slave_1 added [ 278.356486][T10677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.363908][T10677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 278.626448][T10677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.640363][T10677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.647359][T10677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 278.674507][T10677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.745479][T10677] hsr_slave_0: entered promiscuous mode [ 278.752717][T10677] hsr_slave_1: entered promiscuous mode [ 278.760307][T10677] debugfs: 'hsr0' already exists in 'hsr' [ 278.767243][T10677] Cannot create hsr debugfs directory [ 279.054336][T10677] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 279.081093][T10677] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 279.092381][T10677] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 279.103762][T10677] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 279.112567][T10677] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 279.128147][T10677] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 279.136764][T10677] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 279.144966][ T5646] Bluetooth: hci5: command tx timeout [ 279.177065][T10677] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 279.895463][T10808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1318'. [ 280.430095][T10677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.474016][T10677] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.497000][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.504233][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.559289][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.566579][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.752043][T10819] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1321'. [ 281.094293][T10823] syzkaller0: entered promiscuous mode [ 281.100467][T10823] syzkaller0: entered allmulticast mode [ 281.378999][ T5646] Bluetooth: hci5: command tx timeout [ 281.396505][T10828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1324'. [ 282.534530][T10835] netlink: 'syz.1.1325': attribute type 29 has an invalid length. [ 282.585613][T10850] netlink: 'syz.1.1325': attribute type 29 has an invalid length. [ 282.778885][T10858] netlink: 'syz.3.1329': attribute type 13 has an invalid length. [ 283.164671][ T5755] vxcan1 speed is unknown, defaulting to 1000 [ 284.200774][T10873] netlink: 576 bytes leftover after parsing attributes in process `syz.2.1332'. [ 284.955666][T10677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.627723][T10919] netlink: 'syz.2.1343': attribute type 11 has an invalid length. [ 286.649730][T10919] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1343'. [ 286.717988][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 286.940198][T10918] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1342'. [ 287.263643][T10677] veth0_vlan: entered promiscuous mode [ 287.276895][T10677] veth1_vlan: entered promiscuous mode [ 287.324488][T10927] openvswitch: netlink: IPv4 tun info is not correct [ 287.326945][T10677] veth0_macvtap: entered promiscuous mode [ 287.593334][T10677] veth1_macvtap: entered promiscuous mode [ 287.618585][T10677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.633355][T10677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.963039][ T137] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.974503][ T137] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.043240][ T137] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.246103][ T1156] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.313647][T10944] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1349'. [ 288.590115][T10950] syzkaller1: entered promiscuous mode [ 288.599619][T10950] syzkaller1: entered allmulticast mode [ 288.885594][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.893923][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.938930][ T137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.947108][ T137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.876518][T10965] bond2 (unregistering): Released all slaves [ 289.913979][T10974] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1282'. [ 290.241267][T10978] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.444141][T10983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1355'. [ 290.501901][T10985] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1357'. [ 290.732929][T10990] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.1358'. [ 291.863310][T11004] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1361'. [ 292.241563][T11019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1368'. [ 293.957290][ T4950] Bluetooth: hci3: command 0x0405 tx timeout [ 294.565442][T11061] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 294.918871][T11068] IPv6: NLM_F_CREATE should be specified when creating new route [ 294.944071][T11068] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1376'. [ 295.155637][T11066] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1375'. [ 295.272690][T11074] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1377'. [ 295.530258][T11073] netlink: 'syz.4.1378': attribute type 11 has an invalid length. [ 296.124887][T11094] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1383'. [ 296.599996][T11105] netlink: 'syz.1.1385': attribute type 1 has an invalid length. [ 296.630089][ T12] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.641305][ T12] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.704808][T11143] netlink: 'syz.4.1397': attribute type 83 has an invalid length. [ 299.344301][T11152] xt_CT: No such helper "pptp" [ 299.350872][T11152] netlink: 'syz.3.1400': attribute type 1 has an invalid length. [ 299.358729][T11152] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1400'. [ 299.367871][T11152] netlink: 'syz.3.1400': attribute type 1 has an invalid length. [ 299.375715][T11152] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1400'. [ 299.643840][ T12] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.655191][ T12] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.689697][T11158] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 299.697214][T11158] IPv6: NLM_F_CREATE should be set when creating new route [ 299.704679][T11158] IPv6: NLM_F_CREATE should be set when creating new route [ 299.994613][T11165] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1405'. [ 300.569750][T11172] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1408'. [ 300.870215][ T12] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.885820][ T12] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.626984][T11204] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1416'. [ 301.885187][T11211] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1418'. [ 301.894216][T11211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1418'. [ 301.924608][T11210] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.961766][T11211] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1418'. [ 302.237772][T11211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1418'. [ 302.676024][T11218] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1422'. [ 302.976615][T11230] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 303.008098][T11230] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 303.333407][T10978] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.664530][ T12] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.686587][ T12] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.028459][T10978] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.283458][T11259] bond0: entered allmulticast mode [ 305.201404][T11282] __nla_validate_parse: 1 callbacks suppressed [ 305.201423][T11282] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1439'. [ 305.834565][ T4950] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 305.855529][T10978] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.862857][ T4950] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 306.120581][ T4950] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 306.150758][ T4950] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 306.163991][ T4950] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 307.458982][ T12] bond4: left allmulticast mode [ 307.465416][ T12] bond4: left promiscuous mode [ 307.472163][ T12] bridge0: port 3(bond4) entered disabled state [ 307.490434][ T12] bridge_slave_1: left promiscuous mode [ 307.500275][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.733688][T11328] netlink: 'syz.2.1450': attribute type 1 has an invalid length. [ 307.746205][T11328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1450'. [ 307.756281][ T12] bridge_slave_0: left allmulticast mode [ 307.762402][ T12] bridge_slave_0: left promiscuous mode [ 307.772785][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.481617][ T5646] Bluetooth: hci4: command tx timeout [ 309.079142][T11350] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1455'. [ 310.370299][ T12] bond6 (unregistering): (slave bridge3): Releasing backup interface [ 310.378868][ T12] bridge3 (unregistering): left promiscuous mode [ 310.580247][ T5646] Bluetooth: hci4: command tx timeout [ 310.592144][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 310.604780][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 310.615008][ T12] bond0 (unregistering): Released all slaves [ 310.627388][ T12] bond1 (unregistering): Released all slaves [ 310.643991][ T12] bond2 (unregistering): Released all slaves [ 310.658301][ T12] bond3 (unregistering): Released all slaves [ 310.673071][ T12] bond4 (unregistering): Released all slaves [ 310.864715][ T12] bond5 (unregistering): (slave veth0_to_bond): Releasing active interface [ 310.875061][ T12] bond5 (unregistering): Released all slaves [ 310.893353][ T12] bond6 (unregistering): Released all slaves [ 310.916236][ T12] bond7 (unregistering): Released all slaves [ 311.684111][T11383] IPVS: set_ctl: invalid protocol: 210 172.30.1.5:20001 [ 312.703564][T11396] tun0: tun_chr_ioctl cmd 1074025675 [ 312.934149][T11404] xt_ecn: cannot match TCP bits for non-tcp packets [ 312.947074][T11396] tun0: persist disabled [ 312.951597][ T5646] Bluetooth: hci4: command tx timeout [ 312.998144][T11408] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1465'. [ 313.340421][T11404] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1464'. [ 314.047635][ T137] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.056185][ T137] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.293220][T11404] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1464'. [ 314.371290][ T5296] 8021q: adding VLAN 0 to HW filter on device eth1 [ 314.653227][ T153] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.677319][ T3326] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.754191][T11294] vxcan1 speed is unknown, defaulting to 1000 [ 314.916395][T11436] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 315.008333][T11437] netlink: 'syz.2.1467': attribute type 4 has an invalid length. [ 315.063197][ T5646] Bluetooth: hci4: command tx timeout [ 315.092795][T11438] netlink: 'syz.2.1467': attribute type 4 has an invalid length. [ 316.135710][T11445] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1470'. [ 317.309093][T11466] openvswitch: netlink: nsh attr 13535 is out of range max 3 [ 317.917379][T11476] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1475'. [ 318.248108][T11484] Only authenc() type AEADs are supported by ESSIV [ 318.979497][T11482] vlan0: Caught tx_queue_len zero misconfig [ 322.083074][ T5296] 8021q: adding VLAN 0 to HW filter on device eth4 [ 323.458245][T11512] tunl0: Caught tx_queue_len zero misconfig [ 345.826565][ C1] sched: DL replenish lagged too much [ 357.405126][ T5646] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 366.296015][T11532] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 371.434454][ T5646] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 402.912496][ T4950] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 411.849095][T11545] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 416.809923][ T4950] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 432.624843][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 446.309310][T11548] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 446.323525][ T5643] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 448.598043][ T5646] Bluetooth: hci4: command tx timeout [ 464.843440][ T5646] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 464.850849][ T5643] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 464.858581][ T5653] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 464.867352][ T5653] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 464.876709][ T5637] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 464.885479][ T5646] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 464.894404][ T5643] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 464.903004][ T5637] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 467.829403][T11565] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 467.835767][T11560] Bluetooth: hci0: Opcode 0x1001 failed: -110 [ 467.850452][ T5652] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 473.840833][T11563] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 473.848109][ T5643] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 498.169495][ T5652] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 501.066659][T11568] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 543.916290][ T5652] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 546.929599][ T5646] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 546.939838][ T4950] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 546.946535][ T4950] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 549.617561][T11574] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 587.712894][ T4950] Bluetooth: hci3: command 0x1001 tx timeout [ 587.731718][ T5643] Bluetooth: hci3: Opcode 0x1001 failed: -110 [ 587.738334][ T5646] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 587.744740][ T5652] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 587.752739][ T5637] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 587.761069][ T5637] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 587.771163][ T5646] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 587.779512][ T5646] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 587.788050][ T5637] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 589.582890][T11578] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 590.538885][ T4950] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 590.545629][ T5652] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 590.554038][ T5652] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 590.562888][ T5652] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 590.570778][ T5652] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 590.579007][ T5652] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 590.586689][ T5652] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 593.493765][T11587] Bluetooth: hci5: Opcode 0x0c38 failed: -110 [ 593.502135][ T4950] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 593.510925][ T4950] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 593.519086][ T4950] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 593.527118][ T4950] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 593.534853][ T4950] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 593.576950][ T5653] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 593.584387][ T5653] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 596.734570][T11579] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 603.517051][T11588] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 609.903148][ T30] INFO: task syz-executor:5635 blocked for more than 151 seconds. [ 609.911190][ T30] Not tainted syzkaller #0 [ 609.916149][ T30] Blocked by coredump. [ 609.920760][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 609.929625][ T30] task:syz-executor state:D stack:22600 pid:5635 tgid:5635 ppid:1 task_flags:0x40054c flags:0x00080003 [ 609.941878][ T30] Call Trace: [ 609.945547][ T30] [ 609.948554][ T30] __schedule+0x1821/0x5740 [ 609.953100][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 609.959210][ T30] ? __pfx___schedule+0x10/0x10 [ 609.964196][ T30] ? schedule+0x90/0x360 [ 609.968561][ T30] schedule+0x164/0x360 [ 609.972751][ T30] schedule_preempt_disabled+0x13/0x30 [ 609.978357][ T30] __mutex_lock+0x7f7/0x1550 [ 609.982989][ T30] ? __pfx_locks_remove_file+0x10/0x10 [ 609.988525][ T30] ? __mutex_lock+0x608/0x1550 [ 609.993358][ T30] ? tun_chr_close+0x3e/0x1c0 [ 612.871421][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 612.876656][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 612.881797][ T30] tun_chr_close+0x3e/0x1c0 [ 612.886413][ T30] __fput+0x44f/0xa60 [ 612.890448][ T30] task_work_run+0x1d9/0x270 [ 612.895162][ T30] ? __pfx_task_work_run+0x10/0x10 [ 612.900327][ T30] ? do_exit+0x70a/0x22c0 [ 612.904754][ T30] ? kmem_cache_free+0x182/0x650 [ 612.909845][ T30] ? put_net+0x191/0x260 [ 612.914361][ T30] do_exit+0x70f/0x22c0 [ 612.919899][ T30] ? cgroup1_freezing+0x20/0x350 [ 612.925184][ T30] ? __pfx_do_exit+0x10/0x10 [ 612.929841][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 612.935184][ T30] do_group_exit+0x21b/0x2d0 [ 612.940272][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 612.945533][ T30] get_signal+0x1284/0x1330 [ 612.950204][ T30] arch_do_signal_or_restart+0xbc/0x840 [ 612.955995][ T30] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 612.961336][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 612.967559][ T30] ? __se_sys_clock_nanosleep+0x35b/0x3b0 [ 616.003757][ T30] exit_to_user_mode_loop+0xa9/0x680 [ 616.009128][ T30] ? rcu_is_watching+0x15/0xb0 [ 616.013927][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.020108][ T30] do_syscall_64+0x353/0x580 [ 616.024986][ T30] ? trace_irq_disable+0x3b/0x140 [ 616.030139][ T30] ? clear_bhb_loop+0x40/0x90 [ 616.035019][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.040932][ T30] RIP: 0033:0x7fc3f4f5d68e [ 616.045390][ T30] RSP: 002b:00007fffc208e8c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 616.053953][ T30] RAX: fffffffffffffdfc RBX: 00005555844e4500 RCX: 00007fc3f4f5d68e [ 616.062048][ T30] RDX: 00007fffc208e920 RSI: 0000000000000000 RDI: 0000000000000000 [ 616.070391][ T30] RBP: 00007fffc208e98c R08: 0000000000000000 R09: 0000000000000000 [ 616.078560][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000152 [ 616.086726][ T30] R13: 000000000000005d R14: 000000000004dd5d R15: 00007fffc208e9e0 [ 616.095100][ T30] [ 616.098242][ T30] [ 616.098242][ T30] Showing all locks held in the system: [ 619.112111][ T30] 4 locks held by kworker/u8:0/12: [ 619.117391][ T30] #0: ffff88801be86140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 619.128410][ T30] #1: ffffc90000117c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 619.139173][ T30] #2: ffffffff8fdb91a8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 619.148580][ T30] #3: ffffffff8fdc7e80 (rtnl_mutex){+.+.}-{4:4}, at: wiphy_unregister+0x26a/0xb00 [ 619.158419][ T30] 1 lock held by khungtaskd/30: [ 619.163478][ T30] #0: ffffffff8e95cca0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 619.173405][ T30] 2 locks held by kworker/u8:2/35: [ 619.178726][ T30] #0: ffff88801ae84940 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 619.191251][ T30] #1: ffffc90000ab7c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 619.203434][ T30] 5 locks held by kworker/u8:5/137: [ 619.208679][ T30] 3 locks held by kworker/u8:11/3356: