last executing test programs: 2m28.162054059s ago: executing program 1 (id=1163): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES64=r5, @ANYRES32=r4, @ANYRES8=r4, @ANYRES32, @ANYRES8=r2, @ANYBLOB="b4e36c8ae31901d26cd31e27e8601bb72717af3fe2b0c9b693f54fdd99ac4aa37eea57f9e8a09bac331a2bb2f6b4a272ee46fbca51e905b15efcdd7f8200421e5f1893c7f52b020e1f2bd8b9510c1d51ef431c658abc662bcf9fceb630a0a88726d1ad9d7ef0ffc9b6e5b0628d9bef75a3db9b51f6bd6b0649feb5d8"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{r3}, &(0x7f0000000c40), &(0x7f0000000c80)=r1}, 0x20) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0001000000020000000006000000080001007063690011000200303030303a30303a31302e3000000000080003000000000008009100000000000600160002000000050012000000000004004cfeacca3aece76b4c65cb0d35762a765508861dc28666150ef57d7ca34118c647dbfecb55d7f2fda136229ed887b46133ed3e6df17a9649a72e7298ceba123e2d2bc0a77128db33b9bb9ebc323f75ac7b46"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2m27.203888164s ago: executing program 1 (id=1172): r0 = socket$inet6(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10461afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000800)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000ac0)=[{&(0x7f0000000840)="14f9a34daf630395ab4075ddae83765df49ace83181cafd1720f45d349a7ff45f0762c95c2862b95afe7cea0a7181025690d3364836857b308a402384fe5be0e100c1f5e5d306aaae036e684c564c545fe7ae7cc17eb55c01ff75305a4c663df58682b134c60c975dbc8d158fb70775a4be48d75fa706e7929f21d8cddebbae3b12abfab3a126088c8401eee5b5d652f8872410e7db42226230ed5f9ba56ab7590c0a74cd21fed0fe89ae248598171a749d0466231e6bcf388ebb692608671c3e03582c05fc55f59758745c24c916884a5fcdfaa71fb47a1d47354728b534d678d95", 0xe2}, {&(0x7f0000000940)="e0f50d98b0025c336e0e983d0edf067f440889edde94b9f12869f4a8ffde88ce146759788429b1ecb5c4ca06b82caf1a021a", 0x32}, {&(0x7f0000000980)="e7ddf8765b698d629494336ea28e142f24bbda9569e005b869a9bcdfa72dce60912b4d5f44adb3dddaa807e2c16368214429eee368769d8b824614a676ed9a33f061ae9175ac180d89939d45f84ea62084f4", 0x52}, {&(0x7f0000000a00)="dd23576afbe1716ab02276318552108e8b3bd779da705da21ad930658f496668ff93b7465b16d571e501b237e3f944953f9476f53f1ed6306f0b224217c4513bcba6bfad6add00ec85e00af93bf4b4d8e859ecabeced6490dd200469757fc10ae39f105a57026e152d81bdbd437d232894419ace349978f060a20123e666ad285cc7438805c99babc09ce9ea494d7e79200e44c421b65f34b3cc56aa9160bae82e3b64914e6e6807f7ce7351fa3253d6a2316ea9e00367856de2", 0xba}], 0x4, &(0x7f0000000b00)=[@ip_retopts={{0x28, 0x0, 0x7, {[@generic={0x82, 0x5, "679bf0"}, @generic={0x82, 0x11, "3095f77708bc87fb6206e116741ea0"}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x40}, 0x20000090) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r6, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x24, r7, 0x407, 0x0, 0x0, {{}, {0x0, 0x4000}, {0x8}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x30, r7, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x1, 0x5, 0x9, 0x9}}}, ["", "", "", ""]}, 0x30}}, 0x4) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r4, 0x26, 0x7}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000000)=[{0x48, 0x0, 0x0, 0xffe00001}, {0x16}]}, 0x10) r8 = socket(0x2, 0x80805, 0x0) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r8, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) sendto$inet6(r0, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000040)=0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r4}, 0x20) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@rand_addr, @private, 0x0}, &(0x7f0000000200)=0xc) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_tracing={0x1a, 0x1b, &(0x7f0000000480)=@raw=[@jmp={0x5, 0x1, 0x0, 0x0, 0x0, 0xc, 0x800000000000003e}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xe}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @jmp={0x5, 0x0, 0xa, 0x6, 0x1977689298f74ba, 0xfffffffffffffff8, 0xffffffffffffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r10}}, @func={0x85, 0x0, 0x1, 0x0, 0xffefffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}], &(0x7f0000000180)='syzkaller\x00', 0x4, 0x8b, &(0x7f0000000580)=""/139, 0x41000, 0xa, '\x00', r11, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000006c0)={0x2, 0x2, 0xfff, 0xffff}, 0x10, 0xe18e, r4, 0x0, &(0x7f0000000700)=[r10], 0x0, 0x10, 0x2}, 0x94) 2m27.059235813s ago: executing program 1 (id=1175): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000000206010100000000000000000c0000000c00078008f71140000600000500010006000000050005000a00000005000400000000000900020073797a310000000011d93256756173683a6e65742c6e657400000000"], 0x58}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f0000000200000022bf000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r2, 0x0, 0xa002a0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={&(0x7f0000000080), &(0x7f0000000140)=""/184, &(0x7f0000000200), &(0x7f0000001540), 0x1, r2}, 0x38) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="90000000", @ANYRES32=0x0, @ANYRES8=r4], 0x90}}, 0x0) writev(r4, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1000000000000173) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x20, 0x1404, 0x1, 0x70bd2c, 0x800001, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x20004018) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0xac, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xff}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x81}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}]}]}, 0xac}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r6, 0x4008f510, &(0x7f0000000480)=0x2) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, r9, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r10) sendmsg$NLBL_CALIPSO_C_ADD(r10, &(0x7f0000000b80)={0x0, 0x11, &(0x7f0000000b40)={&(0x7f0000000000)={0x24, r11, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004810}, 0x20020000) sendmsg$NLBL_CALIPSO_C_REMOVE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r11, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) sendmsg$NLBL_CALIPSO_C_ADD(r7, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, r11, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002}, 0xc0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xb}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x4008014}, 0x20048800) 2m11.217271832s ago: executing program 32 (id=1175): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000000206010100000000000000000c0000000c00078008f71140000600000500010006000000050005000a00000005000400000000000900020073797a310000000011d93256756173683a6e65742c6e657400000000"], 0x58}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f0000000200000022bf000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r2, 0x0, 0xa002a0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={&(0x7f0000000080), &(0x7f0000000140)=""/184, &(0x7f0000000200), &(0x7f0000001540), 0x1, r2}, 0x38) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="90000000", @ANYRES32=0x0, @ANYRES8=r4], 0x90}}, 0x0) writev(r4, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1000000000000173) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x20, 0x1404, 0x1, 0x70bd2c, 0x800001, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x20004018) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0xac, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xff}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x81}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}]}]}, 0xac}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r6, 0x4008f510, &(0x7f0000000480)=0x2) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, r9, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r10) sendmsg$NLBL_CALIPSO_C_ADD(r10, &(0x7f0000000b80)={0x0, 0x11, &(0x7f0000000b40)={&(0x7f0000000000)={0x24, r11, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004810}, 0x20020000) sendmsg$NLBL_CALIPSO_C_REMOVE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r11, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) sendmsg$NLBL_CALIPSO_C_ADD(r7, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, r11, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002}, 0xc0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xb}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x4008014}, 0x20048800) 2m4.799716317s ago: executing program 3 (id=1443): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000001500000095000000000000008c91603e88545bc97f03e2289ac5a1d822"], &(0x7f0000000000)='GPL\x00'}, 0x90) r0 = socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{0x0}, {0x0}], 0x2}, 0x4000000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="a342de8fccf889c2ab1d76a0f172e0720bd8f9699f3743a136e83ce821739b22b7215630a55cacc5b9fd62ce544ba4460d47e50aaaffa0466a4646696a83cfe4b385738edd2b0a9651616da1049b49c9de03a482a85294fc0a56aa1035c5a5e42ad8d89f531853644d69bf1c78697f2cbd63", @ANYRES64=0x0], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB='/'], 0x20) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001800090400000000000000000a000000000000000000000008001e80"], 0x2c}}, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000580)={'syztnl0\x00', r2, 0x1, 0x20, 0x1, 0x5, {{0x14, 0x4, 0x3, 0x24, 0x50, 0x67, 0x0, 0x7f, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x7, 0x2}, @timestamp_addr={0x44, 0xc, 0x68, 0x1, 0x9, [{@multicast1, 0xf4}]}, @lsrr={0x83, 0xb, 0xe3, [@empty, @remote]}, @noop, @timestamp={0x44, 0x18, 0xf, 0x0, 0x9, [0x4, 0x3, 0x0, 0x8ad, 0x3]}, @generic={0x94, 0x3, 'T'}, @generic={0x7, 0x7, "167855cec1"}]}}}}}) r3 = socket$inet(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, @timestamp_reply={0xe, 0x0, 0x0, 0x7fff, 0x1ff, 0xfffffff3, 0xc, 0x8000}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000500)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r5, @ANYBLOB="14000100ff05000000000000dfce000000000001080008"], 0x34}}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0xc63d}]}}]}, 0x3c}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000006c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20c40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000800)={0x26c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x125}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffff000}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}, @TIPC_NLA_MEDIA={0x9c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1000}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xdd}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x7fff8, @mcast1, 0x3}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x388b2039}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0xd0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xb6, 0x3, "94aad2d993f5c52f1bb7af964d914fa8c5a8f6cfa8caa936572585431cc8f8e8e5ad495ae8f7f1b250e47abfd9597005aefc7fe5ff445fe8c10349577cbcadb8bca66bdc790aed59a7121837284faaa141d90038164338ebfb633e47dafd519b3629a5bdffa05e54f90a00051037a5f5f5d5fc9ac84cc70431d820ea6d6bda16f45608e2818fb47e4c364d6b351a2a124a488c5ebe6cf261ae596dec44947c88a4b11d73fdfe1d1ead430a3c191f7affd707"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}]}, 0x26c}, 0x1, 0x0, 0x0, 0x1}, 0x8002) socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000d6d560360ba34d97004b5af9f059a57208b4a7591c3817", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r12 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x5) sendmsg$nl_generic(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000002100090002000000ffdbdf250200000008000800", @ANYRES32=r11], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 2m4.463957708s ago: executing program 3 (id=1447): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000007c5e0000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffa}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000400)={'erspan0\x00', 0x0, 0x2500, 0x10, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0xfffffffffffffdba, 0x0, 0xfffd, 0x1, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x3a}}}}}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000002c0)={@broadcast, @dev, 0x0}, &(0x7f0000000300)=0xc) sendmsg$MPTCP_PM_CMD_REMOVE(r3, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x7c, r4, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x801) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m4.23890436s ago: executing program 3 (id=1450): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYBLOB="d44b897d0d11ba2cd8e523b35e47ee4e31245140b372be28076cccc879c92dfde9dafe6cb824357e6e440d45cf91d323524d33a9fd50d4f301ffa6c8608a958dbac7ed2077b9914e563907ac3290a77bd8a75c5d78161b6f12b6a67345830ddd6af8de7a0f444e5f1c67ff7922075fa29313a947bfa055ad55f29c56584c79835d4c"], 0x1b8}}, 0x4000810) 2m3.963878554s ago: executing program 3 (id=1456): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='page_pool_state_hold\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff00000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000002c0)="ae24a21f9a824666f9acf0e0163f", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x3}, 0x50) 2m3.728365708s ago: executing program 3 (id=1462): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x22}, 0x2}}, 0x0, 0x0, 0x37, 0x0, "aa730a1e741e774a9546453c7a353d234a8f9e850e1798f8f6b84c916e89210047898645423e989e46512282d8399d3fc78a51541078a99941687e65145f11f52ad028ac5ed2c377ab2a219e6578d895"}, 0xd8) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x1f237e9856d4b833, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 2m3.492266581s ago: executing program 3 (id=1465): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 1m48.31264346s ago: executing program 33 (id=1465): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 1m28.207685131s ago: executing program 6 (id=1911): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000400"/72], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r2}, &(0x7f00000007c0), &(0x7f0000000640)=r1}, 0x20) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r3, 0x89eb, &(0x7f0000000880)={0x8, 0x5, 0x7fff, 0x71, 0x0, 0x1a, 0x17, "d8f693ddf9dfd88b19b942e6941b79b871c43f0d", "4e310690029ffd2fd84c35833f8b062ab6ac9c46"}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r2, &(0x7f0000000580), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'gretap0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x10, 0x10, 0x8, 0x7, {{0x32, 0x4, 0x3, 0x2, 0xc8, 0x67, 0x0, 0x4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@end, @generic={0x83, 0x2}, @lsrr={0x83, 0x1b, 0x61, [@loopback, @private=0xa010101, @private=0xa010100, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @end, @cipso={0x86, 0x1f, 0x3, [{0x6, 0x4, "928f"}, {0x1, 0x6, "632fb70c"}, {0x7, 0xd, "2c41d444fcc408d7ce32f7"}, {0x5, 0x2}]}, @timestamp_addr={0x44, 0x24, 0xbe, 0x1, 0x3, [{@multicast1, 0x1}, {@dev={0xac, 0x14, 0x14, 0x14}, 0xbb6c}, {@loopback, 0x8}, {@multicast1, 0xa}]}, @ra={0x94, 0x4}, @generic={0x93, 0x3, "d8"}, @timestamp={0x44, 0x28, 0x89, 0x0, 0x5, [0x1, 0x80000000, 0x7, 0xfff, 0x3, 0x1, 0x6, 0x8000, 0x10000]}, @lsrr={0x83, 0x23, 0x70, [@multicast1, @multicast1, @rand_addr=0x64010101, @remote, @broadcast, @local, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getqdisc={0x30, 0x26, 0x4, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xfff2, 0xb}, {0xfff2, 0x2}, {0xd, 0x2}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x808) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000400"/72], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r2}, &(0x7f00000007c0), &(0x7f0000000640)=r1}, 0x20) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) ioctl$SIOCX25SDTEFACILITIES(r3, 0x89eb, &(0x7f0000000880)={0x8, 0x5, 0x7fff, 0x71, 0x0, 0x1a, 0x17, "d8f693ddf9dfd88b19b942e6941b79b871c43f0d", "4e310690029ffd2fd84c35833f8b062ab6ac9c46"}) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r2, &(0x7f0000000580), 0x0}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'gretap0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x10, 0x10, 0x8, 0x7, {{0x32, 0x4, 0x3, 0x2, 0xc8, 0x67, 0x0, 0x4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@end, @generic={0x83, 0x2}, @lsrr={0x83, 0x1b, 0x61, [@loopback, @private=0xa010101, @private=0xa010100, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @end, @cipso={0x86, 0x1f, 0x3, [{0x6, 0x4, "928f"}, {0x1, 0x6, "632fb70c"}, {0x7, 0xd, "2c41d444fcc408d7ce32f7"}, {0x5, 0x2}]}, @timestamp_addr={0x44, 0x24, 0xbe, 0x1, 0x3, [{@multicast1, 0x1}, {@dev={0xac, 0x14, 0x14, 0x14}, 0xbb6c}, {@loopback, 0x8}, {@multicast1, 0xa}]}, @ra={0x94, 0x4}, @generic={0x93, 0x3, "d8"}, @timestamp={0x44, 0x28, 0x89, 0x0, 0x5, [0x1, 0x80000000, 0x7, 0xfff, 0x3, 0x1, 0x6, 0x8000, 0x10000]}, @lsrr={0x83, 0x23, 0x70, [@multicast1, @multicast1, @rand_addr=0x64010101, @remote, @broadcast, @local, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getqdisc={0x30, 0x26, 0x4, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xfff2, 0xb}, {0xfff2, 0x2}, {0xd, 0x2}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x808) (async) 1m28.164906649s ago: executing program 6 (id=1912): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x88dd895beaa99965, 0x12, r1, 0xe352a000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async, rerun: 32) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async, rerun: 32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffff}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) (async, rerun: 32) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0xffffff04, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000ac0)="580000001400add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff00007edcff48d744", 0x58}], 0x1) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES8, @ANYBLOB="38a00606439e09272322634d8580fb38544a7497fd99d662c61ba6b7aa13c7f6d3903d15a9d4fd2f8976cf9d9a2366e4bb73a56c929c1bfa6a6337483f3dbe8dbb690bd374adf3"], 0x10}}, 0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r6, &(0x7f0000004100)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="169381", 0x3}], 0x1}}], 0x1, 0x48c4) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r7) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) 1m28.099807823s ago: executing program 6 (id=1913): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd61"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffda4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x353a, 0x1}}, 0x20) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)=0x60, 0x800) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) close(r3) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x9, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xda8}, @TCA_TBF_PARMS={0x28, 0x1, {{0x40, 0x2, 0xfff8, 0x7, 0x8, 0x200}, {0x22, 0x1, 0xb, 0x9, 0x9}, 0x3, 0xfffffffb, 0x67}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0x2, 0xb}, {0xa, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8}]}}]}, 0x3c}}, 0x4008000) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd61"], 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffda4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x353a, 0x1}}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)=0x60, 0x800) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)) (async) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) (async) close(r3) (async) socket$unix(0x1, 0x5, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x9, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xda8}, @TCA_TBF_PARMS={0x28, 0x1, {{0x40, 0x2, 0xfff8, 0x7, 0x8, 0x200}, {0x22, 0x1, 0xb, 0x9, 0x9}, 0x3, 0xfffffffb, 0x67}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0x2, 0xb}, {0xa, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8}]}}]}, 0x3c}}, 0x4008000) (async) 1m27.361870353s ago: executing program 6 (id=1925): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f0000000180)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r5, 0x0, 0x48f, &(0x7f0000000000)={0x75, @local, 0x4e20, 0x0, 'lblcr\x00', 0x5, 0x0, 0x42}, 0x2c) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r6, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) sendto$inet(r4, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) ioctl$sock_inet_SIOCSARP(r3, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000001340)={0x11, @multicast2, 0xffff, 0x0, 'wrr\x00'}, 0x2c) 1m27.176925234s ago: executing program 6 (id=1927): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442e05d9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) getsockopt$rose(r2, 0x104, 0x7, 0x0, &(0x7f00000001c0)=0xfffffffffffffe3e) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x26}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x15, &(0x7f0000000000)=@framed={{}, [@printk={@i, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfe00}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@x}]}, &(0x7f0000000100)='GPL\x00'}, 0x90) 1m26.89678286s ago: executing program 6 (id=1929): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r1, 0x2, 0x2000, 0x100002, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x85}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20085}, 0x2000c000) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_IP_PROTO={0x5, 0x1b, 0x1}]}, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r7], 0x50}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r9}, {}, {0x3, 0x3, 0x6, 0xa, 0x5, 0xfe00, 0xa1}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) unshare(0x62040200) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000010000104fdffffff0300000000000000", @ANYRES32=0x0, @ANYBLOB="5b10577cbcb5f31a24001280110001006272696467655f736c617665000000000c00058006001f0002000000140003006272696467655f736c6176655f300000ff9a9bbb2205f55f10ba5f1ee1fe2ccf417c8fbf02606a924160e98b31e773439db6be230aa0d26702c90b9f01098e1622a60be77fdf85f8c2955b5ee740bf7f2a99c114d1c233fdfbe908df643adbd2db764dc77db2a2ae31ef901c16b8b9dda919b542e91a9c99973dce8ed79820bc5ad484c178e177eb9919db01fe98274d13ca0a2934b3b0"], 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r14, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0xff3c}], 0x1}, 0x0) sendmsg$nl_route(r13, 0x0, 0x40040) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="6d0000001000210400000000fedbdf2500000000ea16ebb8e9c07f797ed3c3afbfdcf97fd6d838ff40ae7fba8d6d2f395cb17850", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES16=r10], 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0xc043) 1m11.960786431s ago: executing program 34 (id=1929): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r1, 0x2, 0x2000, 0x100002, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x85}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20085}, 0x2000c000) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_IP_PROTO={0x5, 0x1b, 0x1}]}, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r7], 0x50}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r9}, {}, {0x3, 0x3, 0x6, 0xa, 0x5, 0xfe00, 0xa1}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) unshare(0x62040200) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000010000104fdffffff0300000000000000", @ANYRES32=0x0, @ANYBLOB="5b10577cbcb5f31a24001280110001006272696467655f736c617665000000000c00058006001f0002000000140003006272696467655f736c6176655f300000ff9a9bbb2205f55f10ba5f1ee1fe2ccf417c8fbf02606a924160e98b31e773439db6be230aa0d26702c90b9f01098e1622a60be77fdf85f8c2955b5ee740bf7f2a99c114d1c233fdfbe908df643adbd2db764dc77db2a2ae31ef901c16b8b9dda919b542e91a9c99973dce8ed79820bc5ad484c178e177eb9919db01fe98274d13ca0a2934b3b0"], 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r14, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0xff3c}], 0x1}, 0x0) sendmsg$nl_route(r13, 0x0, 0x40040) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="6d0000001000210400000000fedbdf2500000000ea16ebb8e9c07f797ed3c3afbfdcf97fd6d838ff40ae7fba8d6d2f395cb17850", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES16=r10], 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0xc043) 31.162965372s ago: executing program 4 (id=2461): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="03009000"}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x9}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000090a010400000000000000000000000008000a400000000009d9e20073797a31000000000900010000007a3000000000080005400000000d08000640ffffff00080003400000003d0c000b400000000000000008140000001000010000000000000000000084000a"], 0x80}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xcd) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xffffffffffffff67) ioctl$sock_netdev_private(r0, 0x8924, &(0x7f0000000000)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40a03, 0x0) preadv(r4, 0x0, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r2}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000207000000000000001bbf92ed7f8e1ff6559a000000957fda84601cff6718f2be62de29d6cafb6ed4a3f7ee08592800c653f8e831862f889595d2b90c3fa51a77"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x44}, 0x10011, 0x2, 0x2, 0x5, 0xc}, 0x20) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r5, 0x8b32, &(0x7f0000000040)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="5400000002060108000f0000000000000000000004000780050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c4b6574000000"], 0x54}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=@gettfilter={0x0, 0x2e, 0x10, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0xe}, {0x1, 0xfff4}, {0x0, 0xf}}}, 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x48195) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x14, 0x40, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x48815}, 0x48000) socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000043000c00010069705f7674693000"], 0x20}}, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 30.611584265s ago: executing program 7 (id=2466): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000}, [@call={0x179, 0x11, 0x100000}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 30.315752896s ago: executing program 7 (id=2468): r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x22020400) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r2, 0xad7f585b85390de9) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@RTM_NEWMDB={0x18, 0x54, 0x1}, 0x18}}, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00000000000800001c0040"], 0x50}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x4, 0x12e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1a6) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x2, 0x3f4, [0x0, 0x200000000700, 0x200000000730, 0x200000000986], 0x0, &(0x7f0000000240), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x11, 0x6d, 0x86dd, 'geneve1\x00', 'geneve1\x00', 'veth0_to_bridge\x00', 'pimreg0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, [0x0, 0x0, 0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], 0xae, 0x1de, 0x226, [@quota={{'quota\x00', 0x0, 0x18}, {{0x0, 0x0, 0x4, {0x401}}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x2800, 'system_u:object_r:systemd_logind_sessions_t:s0\x00'}}}], @common=@ERROR={'ERROR\x00', 0x20, {"2891f5c83305b73f58a97e8e5ac67410a9518a0f296a05d1fe877912518c"}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{0x9, 0x10, 0x9100, 'nr0\x00', 'bond0\x00', 'vxcan1\x00', 'team_slave_1\x00', @broadcast, [0xff], @random="e08365d6ee56", [0xff, 0xff, 0x0, 0xff, 0x1fe, 0xff], 0xde, 0xde, 0x10e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x4, {0x6, 0x23, 0x917, @empty, [0xff, 0x0, 0x0, 0xff], 0x9, 0x80000000, 0x760, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x4e22, 0x4e22, 0x4, 0x4, 0xffb8, 0x9, 0xa2, 0x6, 0x5, 0x3}}}}], [], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x4}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}]}, 0x46c) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x1410, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x10}]}, 0x18}}, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) listen(r3, 0x4) 30.058603747s ago: executing program 0 (id=2471): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2000d00, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4440b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 29.714346626s ago: executing program 0 (id=2474): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) (async) recvfrom(r1, 0x0, 0x0, 0x40000020, &(0x7f00000002c0)=@l2={0x1f, 0x7bd, @none, 0xeb6}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x24000490) 29.394348189s ago: executing program 7 (id=2476): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x80}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xfffffffffffffff8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xfffffffffffffff8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) pselect6(0x40, &(0x7f0000000080)={0x3292, 0xb, 0x7, 0x9, 0x3, 0xc139, 0x3, 0xc669}, &(0x7f00000000c0)={0x8, 0x7fff, 0x2, 0x9, 0x7, 0x2, 0x4, 0x8}, &(0x7f0000000100)={0x6, 0x1, 0x9, 0x80, 0x8000000000000000, 0x401, 0x0, 0x101}, &(0x7f0000000140), &(0x7f00000001c0)={&(0x7f0000000180), 0x8}) socket$nl_netfilter(0x10, 0x3, 0xc) 29.251842532s ago: executing program 4 (id=2478): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x40000c0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x24, r2, 0x1, 0xfffffffe, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0xfd}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000004400050020010000000000000000000000000000000000022b0000000a000000fc010100000000000000000000000000000000000400000000f700"/180], 0xfc}}, 0x0) r4 = socket(0x2, 0x3, 0x6) bind$inet(r4, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@dev, @in=@loopback}}, {{@in6}, 0x0, @in=@remote}}, &(0x7f0000000040)=0xe8) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r4, 0x0, 0x0, 0x48812, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socket$inet6(0xa, 0x5, 0x80000001) 28.880468726s ago: executing program 4 (id=2480): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x9, 0xfffffffffffffffd, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="6453ceb48ff8731dab0000000000000000000000050001000073797a3000000000100003006269746d61703a706f7274001c00078006002140000000000600044000000000080008000500050005000000000000000000ec19e32bb8ae945c88b1a132ca075740c75d9ae82cf9a4773f00b46c7e641619f285d890db9501e3aeabbf4f57a20ae15319b3b7d34cda9ca61e9fd37c9abdb8a2bbf455778680db18efa64d33b4a3b9c95c613eb02ab8eb0b620b076911bf6a6f1feb7bde7ae5bad87b8abf777cfa410b04382566"], 0x64}}, 0x24040081) r2 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000180)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000280)=0xe8) 28.823296902s ago: executing program 7 (id=2482): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f00000001c0)={'wg2\x00', @local}) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500000000000000000000000200000000000000000008"], 0x1c}}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) accept(r3, 0x0, &(0x7f0000000100)) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000180)={0x1, 0x1, 0x5, 0x0, 0x401}, 0x55) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x20010, r2, 0x9ae8f000) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'team_slave_0\x00'}) socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_buf(r4, 0x29, 0x1f, 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60040, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@deltaction={0x7c, 0x31, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x38, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x17}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0x7c}}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) 28.434926457s ago: executing program 0 (id=2484): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x100, @loopback}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0) 28.434435606s ago: executing program 4 (id=2485): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xfd, 0x3, 0x0, @loopback}, 0x1c) (async) r2 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000500)={'broute\x00', 0x0, 0x4, 0x0, [0x3f, 0x1, 0x7, 0x32c2, 0x1000, 0x1], 0x0, 0x0, 0x0}, &(0x7f0000000200)=0x78) (async) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000004c0)={0x67, @broadcast, 0x4e21, 0x0, 'lc\x00', 0x32, 0x6, 0x3}, 0x2c) (async) syz_emit_ethernet(0x46, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000380000000000019078ac1e0001ac1414aa03009078030000004500000000000000002f00000000000000000000040088beffff0200db2309b962cb83d15ef89011dbfc5ecab32fd597fb02476cdfc43b99cedd379aa2b63a7dcdc5928b3525f89e6d154b4547f6f1f77db11f8a3f9c2de3b7396699be28"], 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="20000000000701010000000000000000030000030c00034000000000000080009a9d61d3face82c86ec9916e935d1012619911f511f5c06d8929840bc1266c43a4a0e929f7fdeed2467f070a9f8b96d251d1f5119bcb70add7d488d948da4072296bedfef3775ad5fd66dcc61ab2633d3fb52b005349475d0d91cd2cf4002d756f0a6eb84d08f219cd4019cd52303d88784e14177665c9d559756884a923ff0d42528c24699944e7e9e1e4aaddb8a0f9363fc9f7bad09c1f465938c50000"], 0x20}, 0x1, 0x0, 0x0, 0x20}, 0x40000) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f00000002c0)={{}, 0x0, 0x0, @inherit={0x48, &(0x7f0000019400)=ANY=[]}, @devid}) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) setsockopt$inet_int(r2, 0x0, 0xc, &(0x7f00000001c0)=0x4, 0x4) (async) sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f00000012c0)=ANY=[@ANYBLOB="84010000", @ANYRES16=r5, @ANYBLOB="00022bbd7000fcdbdf250e00000008000300", @ANYRES32=r6, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x800}, 0x5) 28.34013079s ago: executing program 0 (id=2486): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000040)={0x24, r2, 0x401, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14a0}]]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x80) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_pressure(r3, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000080)={'full', 0x20, 0x0, 0x20, 0x1}, 0x2f) r5 = openat$cgroup_ro(r3, &(0x7f0000000380)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000140)=[{&(0x7f0000000280)=""/241, 0xf1}], 0x1, 0x0, 0x0) r6 = accept$ax25(r5, &(0x7f0000000180)={{0x3, @null}, [@rose, @bcast, @remote, @rose, @remote, @bcast, @netrom]}, &(0x7f00000000c0)=0x48) ioctl$sock_inet_SIOCGIFDSTADDR(r6, 0x8917, &(0x7f0000000200)={'ipvlan0\x00', {0x2, 0x0, @multicast1}}) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r7, 0x0, 0xcb, &(0x7f0000000240)={0x0, 0x8, 0x34, 0x9, @vifc_lcl_addr=@remote, @local}, 0x10) 28.208019125s ago: executing program 4 (id=2487): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r1, 0x8919, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x3}) (async) ioctl$sock_ifreq(r1, 0x8919, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x3}) ioctl$sock_netdev_private(r0, 0x89f5, &(0x7f0000000000)) (async) ioctl$sock_netdev_private(r0, 0x89f5, &(0x7f0000000000)) 28.087995838s ago: executing program 0 (id=2488): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000300)='M', &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r0, &(0x7f00000001c0)='M', 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x24}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 27.900860424s ago: executing program 7 (id=2489): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket(0x23, 0x5, 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb0}, 0x9c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYRES64=r0, @ANYRES16=0x0, @ANYBLOB="00000013b73e419752bfc000de2908000100", @ANYRES32=0x0, @ANYRES32=r1], 0x104}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="8400000010000305000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000000000006400128009000100626f6e64000000005400028008001f"], 0x84}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x2000}, 0x90) sendmmsg$inet(r2, &(0x7f0000001c40)=[{{&(0x7f0000000280)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000480)="d1", 0x1}], 0x1}}], 0x1, 0x20048040) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, &(0x7f0000000440)=0x8, 0x4) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003a00010325bd7000fcffffff08cf00"], 0x5a}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r9, 0x800448d3, &(0x7f0000000340)={@any, 0x4000, 0x38, 0x2, 0x0, 0x12, "78eb4bc3c14b8cfbc6af46174103dc877a2ef2c74f3cd2c159b6f057d81e347a487a3e719d9dceb5af4d380f396a7199a8e0128eb3a8a6400d6500b8e697c8e1bc4a9eec45d4bc99e68af195a3cc39b8df4753c013478b849dd9f82a66926d62ad2cb0dc80d691619527559762c5bc13fb1bb8a90b55e529763bf069127590af"}) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001600010000000000000000000a0400000000000014000100ff010000000000000000000000000001150002"], 0x44}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="660a0000000000206111600000d900000095000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x90) sendmsg$inet(r6, &(0x7f0000002440)={0x0, 0x0, 0x0}, 0x40001) sendmsg$can_raw(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r5}, 0x10, &(0x7f00000005c0)={&(0x7f0000000100)=@can={{}, 0x80, 0x3, 0x4, 0x2, "07000000008000"}, 0x210}}, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r10, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) r11 = socket(0x2, 0x80805, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, &(0x7f0000000280), &(0x7f00000002c0)=0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) 27.2932061s ago: executing program 0 (id=2492): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x5e) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="10100012100108000b000000a9e7c19cee2f1e6ac1d2edde4372355534e3f10a6d4835f8ddfef28c5f192dadf4911766d7d6fc5b0a8e2033f5504038adc7b7be99d08adba3e53c7aad6f76f5ec70133c9b7f5be4f8f3fbd21e58dc48fce082c493b01532b5b444ea"], 0x10}, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18}], 0x1, 0x40800) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r1) 26.429811777s ago: executing program 35 (id=2492): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x5e) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="10100012100108000b000000a9e7c19cee2f1e6ac1d2edde4372355534e3f10a6d4835f8ddfef28c5f192dadf4911766d7d6fc5b0a8e2033f5504038adc7b7be99d08adba3e53c7aad6f76f5ec70133c9b7f5be4f8f3fbd21e58dc48fce082c493b01532b5b444ea"], 0x10}, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18}], 0x1, 0x40800) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r1) 26.286771402s ago: executing program 7 (id=2496): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}]}}]}, 0x3c}}, 0x800) (async) write$tun(r1, &(0x7f0000000000)={@val={0x0, 0x88a2}, @void, @llc={@llc={0x1, 0x8e, "be52", "ac8d2408c0488e644be7cd518081b0085ab0437591d678cd3f01d8539abf6420ed5bfe"}}}, 0x2b) 26.141260082s ago: executing program 36 (id=2496): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}]}}]}, 0x3c}}, 0x800) (async) write$tun(r1, &(0x7f0000000000)={@val={0x0, 0x88a2}, @void, @llc={@llc={0x1, 0x8e, "be52", "ac8d2408c0488e644be7cd518081b0085ab0437591d678cd3f01d8539abf6420ed5bfe"}}}, 0x2b) 26.09991944s ago: executing program 4 (id=2497): r0 = socket$netlink(0x10, 0x3, 0x0) listen(r0, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x802, 0x0) sendmsg$inet(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_tos_u8={{0x11}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x7, 0x0, 0x0, [0x0, 0x0]}]}}}], 0x38}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) recvfrom$inet6(r2, &(0x7f0000000480)=""/4096, 0x1000, 0x40, &(0x7f0000000040)={0xa, 0x4e24, 0x95f, @mcast1, 0x7}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010010000000ffdbdf2500000000", @ANYRES32=r3, @ANYBLOB="20000000280e0400280012800b0001006d61637365630000180002800500030008"], 0x48}, 0x1, 0x0, 0x0, 0x24008001}, 0x0) 26.098001624s ago: executing program 37 (id=2497): r0 = socket$netlink(0x10, 0x3, 0x0) listen(r0, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x802, 0x0) sendmsg$inet(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_tos_u8={{0x11}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x7, 0x0, 0x0, [0x0, 0x0]}]}}}], 0x38}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) recvfrom$inet6(r2, &(0x7f0000000480)=""/4096, 0x1000, 0x40, &(0x7f0000000040)={0xa, 0x4e24, 0x95f, @mcast1, 0x7}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010010000000ffdbdf2500000000", @ANYRES32=r3, @ANYBLOB="20000000280e0400280012800b0001006d61637365630000180002800500030008"], 0x48}, 0x1, 0x0, 0x0, 0x24008001}, 0x0) 3.70830374s ago: executing program 5 (id=2577): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x8, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r6, &(0x7f00000002c0), &(0x7f0000000300)=@tcp6=r3, 0x1}, 0x20) r7 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000040), 0x4) r8 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32=r9, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}}, 0x0) r11 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x9f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4060040}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 3.551944743s ago: executing program 2 (id=2578): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ec4ff00000000711028000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10) syz_emit_ethernet(0x66, &(0x7f0000000200)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f000000f480), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f000000f780)={0x0, 0x0, &(0x7f000000f740)={&(0x7f0000000240)={0x20, r3, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x44040) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x11) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 3.241354766s ago: executing program 2 (id=2579): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='@\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000008a9e05ff10000000"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000040), &(0x7f00000000c0)='%-010d \x00'}, 0x20) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000480)={'pimreg1\x00', 0x1000}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000ff0500000000000000000000b7080000000000007b8af8ff00000000b7080000ff0100007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bridge_slave_1\x00', 0x2000}) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000440)={'vxcan1\x00'}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01060000000000000000090000003c0004801300010062726f6164636173742d6c696e6b000024000780080005000000000008000300ff"], 0x50}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='@\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000008a9e05ff10000000"], 0x50) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000040), &(0x7f00000000c0)='%-010d \x00'}, 0x20) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000480)={'pimreg1\x00', 0x1000}) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000ff0500000000000000000000b7080000000000007b8af8ff00000000b7080000ff0100007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bridge_slave_1\x00', 0x2000}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000440)={'vxcan1\x00'}) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01060000000000000000090000003c0004801300010062726f6164636173742d6c696e6b000024000780080005000000000008000300ff"], 0x50}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) 3.143865374s ago: executing program 5 (id=2580): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newrule={0x28, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xad}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@gettfilter={0x24, 0x2e, 0x1, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, {0x10, 0x7}, {0x0, 0xffff}, {0x0, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000811}, 0x40000d0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000080)={r3, @in6={{0xa, 0x4e21, 0xff, @remote, 0xe32c}}}, &(0x7f0000000140)=0x84) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r0, 0x0) 2.725916803s ago: executing program 8 (id=2581): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2, 0x5, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x5, 0x6, 0x3c, 0x0, 0x0, @in6={0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4000}}]}, 0x60}, 0x1, 0x7}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@ipv4_newroute={0x12, 0x1a, 0x1, 0x0, 0x200000, {0x2, 0x20, 0x20, 0x0, 0xfc, 0x0, 0x0, 0x4}}, 0x1c}}, 0x20000000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.time\x00', 0x275a, 0x0) poll(&(0x7f00000044c0)=[{r2, 0x209}], 0x1, 0x8000) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e21, 0xb58, @private1, 0x8}}}, &(0x7f0000000000)=0x84) socketpair(0x28, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000002c0)={0x0, 0x5, 0x4, [0x3, 0x2, 0x283c, 0xa]}, 0x10) 2.619654359s ago: executing program 2 (id=2582): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000003f0007010000000000000000037c0000180037801300030071722834"], 0x2c}}, 0xc0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@can_delroute={0x24, 0x19, 0x103, 0x70bd2d, 0x25dfdbff, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r3}, @CGW_DST_IF={0x8, 0xa, r3}]}, 0x24}}, 0x4040000) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000003f0007010000000000000000037c0000180037801300030071722834"], 0x2c}}, 0xc0) (async) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@can_delroute={0x24, 0x19, 0x103, 0x70bd2d, 0x25dfdbff, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r3}, @CGW_DST_IF={0x8, 0xa, r3}]}, 0x24}}, 0x4040000) (async) 2.389650159s ago: executing program 5 (id=2583): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000060000007201080000009c5b044bdd1f0466c47ef2add9f99700009500"/47], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) (async, rerun: 64) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) (rerun: 64) ioctl$int_in(r0, 0x5452, &(0x7f00000002c0)=0x100000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000002020101000000000000000002000000240002800c000280040001ff00000000140001800800010000000000080002"], 0x38}}, 0x0) 2.248932907s ago: executing program 2 (id=2584): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x9006000, &(0x7f00000030c0)=[{&(0x7f0000000180)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x70}}, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x7, 0x48}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, 0x0, 0x0}, 0x1c) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r7}, 0x18) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@getqdisc={0x34, 0x26, 0x200, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xfff2, 0x5}, {0xfff2, 0xf}, {0xfff1, 0x59df859d265721b3}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}}, 0x0) 2.016910478s ago: executing program 8 (id=2585): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000000000007111ab00000000008510000002000000850000002a00000095000000000000009500a505000000008d8d72a4d2b0e866647a5563580154525990a711faae6b5efa82c515c097c645d4a49869490531e6fc004371de6a0e2aeb39db28a841fee433ca770c6799b28945ba973ff15b71d81a48f65b229efa31eb19c4d6945c8db59bf97ce0d74761c6ededcdebebfcd90759bd2cfe8b4253a9468fe5b0759b99a37a189ddd91f7bf447837"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x800}}, 0xb8}}, 0x2c000010) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0xa, &(0x7f0000000180)=@raw=[@map_fd={0x18, 0xb, 0x1, 0x0, r0}, @alu={0x7, 0x1, 0x1, 0x3, 0x7, 0x1, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_val={0x18, 0x8, 0x2, 0x0, r0}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 1.738040652s ago: executing program 8 (id=2586): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8800) ioctl$SIOCSIFMTU(r0, 0x89b1, &(0x7f0000000040)={'bond0\x00', 0x7fff}) 1.719852775s ago: executing program 5 (id=2587): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r2 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r2, r1, 0x0, 0x5, &(0x7f0000000140)='&#\'*\x00'}, 0x30) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0xad, 0x3, 0xb, 0x0, r4, 0x4f54, '\x00', 0x0, r4, 0x0, 0x1, 0x2, 0xd}, 0x50) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xc, 0xffff}, {0x9}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x4040800) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x2, 0x0, r5, 0x80000001, '\x00', r8, 0xffffffffffffffff, 0x5, 0x4}, 0x50) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x30, r11, 0xb97534d5fe9704cf, 0x70bd24, 0x25dfdbfd, {{0x12}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_OPMODE_NOTIF={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x8005}, 0x8008) sendto$inet6(r4, &(0x7f0000000080)='J', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e20, @broadcast}}, [0x2, 0xfff, 0x8000000000000001, 0x4, 0x8, 0xb7be, 0x3, 0x4, 0x5, 0x1, 0x100, 0x3, 0x7, 0x5, 0x1d79c6ed]}, &(0x7f0000000000)=0x100) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) ioctl$sock_qrtr_SIOCGIFADDR(r6, 0x8915, &(0x7f0000000040)={'nr0\x00'}) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r13, &(0x7f0000000000)=ANY=[], 0x38) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x7, 0x0, 0x0, 0x3, 0x42000}, 0x50) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r13, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) 1.68470206s ago: executing program 2 (id=2588): r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0x2, &(0x7f0000001100)=""/4109, &(0x7f00000000c0)=0x100d) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="017917000000000020020c00000008000400000000bb"], 0x1c}}, 0x0) (async) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) (async) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3}, 0x10) (async) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x45}, 0x10) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r7 = socket(0x400000000010, 0x3, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) (async) r11 = socket$unix(0x1, 0x1, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) r13 = socket$netlink(0x10, 0x3, 0x0) (async) r14 = socket$unix(0x1, 0x1, 0x0) r15 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r15, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4}, 0xe) (async) connect$bt_l2cap(r15, &(0x7f0000000040)={0x1f, 0x0, @none, 0x2, 0x1}, 0xe) (async) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x3c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r16, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x7d, 0x5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) (async) recvmmsg(r3, &(0x7f0000001840), 0x0, 0x21, &(0x7f00000018c0)={0x0, 0x3938700}) 1.640635801s ago: executing program 1 (id=2498): r0 = socket$igmp(0x2, 0x3, 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100"], 0x54}, 0x1, 0x0, 0x0, 0x20048004}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}}, 0x0) (async) syz_emit_ethernet(0x132, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd31800fc06ff00000000000000000000ffff64010100fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYBLOB="50020009907800"], 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000440)={0x0, 0x1, 0x1, 0x5, @vifc_lcl_addr=@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="29020000", @ANYRES16=r3, @ANYBLOB="000426bd7000ffdbdf2512000000200001801400028008000200010000000800040004000000080003000a000000b00005800700010069620000140002800800040007000000080001000a000000140002800800010012000000080003000300000024000280080001001c00000008000400ff0100000800020009000000080001001100000024000280080001001f0000000800030009000000080003003d040000080001001a0000000800010075647000240002800800030009000000080004008100000008000400060000000800040001040000080001006574680044000980080002000000000008000100040000000800020004000000080001000000000008000100d5000000080001000700000008000100ba040000080002000e000000140001800d0001007564703a73797a30000000004c0003800800030000feffff08000300080000000800020008000000080003000700000008000200fcffffff08000200518f0000080001003cde0000080001000a0000000800010009000000400005803400028008000300f1940000080004000000000008000300040000000800030003000000080004000500000008000400070000000800010065746800300001802c0004001400010002004e23ac1414aa00000000000000001400020002004e237f0000010000000000000000300007800c000400050000000000000008000200ffff00000c00040001000000000000800c0004000200000000000000"], 0x228}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 1.215729145s ago: executing program 8 (id=2589): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x22, 0x0, "43cad7b04bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xffff0000}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}]}}}]}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x48046}, 0x0) 899.005511ms ago: executing program 5 (id=2590): r0 = socket(0x25, 0x1, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x400000a3, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000062200100000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000182a0000", @ANYRES32=0x1, @ANYBLOB="00001a7c6e7ecdb5333e1e4600000100000095a710939df60000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) 878.420848ms ago: executing program 8 (id=2591): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket(0x10, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@gettfilter={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff3}, {0x0, 0x3}}}, 0x24}}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'dh\x00', 0x1, 0x4, 0x72}, 0x2c) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@remote, 0x4e20, 0x10001, 0xc, 0x2}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r7 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0x2, 0x15, 0xe0000000, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 811.84872ms ago: executing program 1 (id=2592): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) (async, rerun: 32) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r7 = socket$unix(0x1, 0x5, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000027c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x2}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r3) (async, rerun: 32) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000140)) (async, rerun: 32) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async, rerun: 64) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0) (rerun: 64) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r10, &(0x7f0000007300)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x0, @private0}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000000)="7f21547c", 0x4}], 0x1}}], 0x1, 0x0) listen(r10, 0xfff) (async) accept(r10, 0xfffffffffffffffd, &(0x7f0000000440)) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) 536.688902ms ago: executing program 2 (id=2593): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="011b26b67000fddbdf2507"], 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x404c044) syz_genetlink_get_family_id$net_dm(&(0x7f0000000200), r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xe, 0xffe0}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r11 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r6, &(0x7f0000000b80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0) r13 = socket$packet(0x11, 0x3, 0x300) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r13, 0x660c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071109800000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007313000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a83469620c6e74e1f46132559c4f8700a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62c49d15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 486.783063ms ago: executing program 5 (id=2594): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) (async) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)) (async) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) (async) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="00214717a78d70e8a36f7fa8543c2d9a43a4356d27e0", 0x16}], 0x1, 0x20000002, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x2, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}}, 0x2000400c) 269.785295ms ago: executing program 8 (id=2595): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=@newqdisc={0x54, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x24, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x8000000000000000}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x7fff}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x8}]}}]}, 0x54}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xf1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0x1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001800)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="1000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000000000000000000000003000000a500000000000000e1e02ee9d64800"], 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000004010000000900010073797a30000000003c000000000a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30"], 0xfc}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000700)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@generic={&(0x7f0000000440)='./file0\x00', 0x0, 0x8}, 0x18) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="09fdffffff000000000000000000430f00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000010400000200"/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x1, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000800)=""/4096, 0x41100, 0x1, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0xfffffffffffffffe, 0x0, 0x10, &(0x7f0000000200)={0x0, 0xb, 0x3e, 0xfffffffe}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000580)=[r2, r3, r4, r5, r7, r8, r9, r10], &(0x7f00000005c0)=[{0x3, 0x5, 0xc, 0x3}, {0x0, 0x4, 0xe, 0x1}, {0x5, 0x4, 0x2, 0x8}, {0x4, 0x1, 0x1, 0xa}, {0x1, 0x3, 0x5, 0x8}], 0x10, 0xab3}, 0x94) ioctl$FS_IOC_GETFSLABEL(r0, 0x89a3, &(0x7f0000000100)) 0s ago: executing program 1 (id=2596): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tick_stop\x00', r0, 0x0, 0x5}, 0x18) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x10, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) bind$phonet(r3, &(0x7f0000000080)={0x23, 0x0, 0x10, 0x7}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x160, 0x1170, 0x1398, 0x160, 0x1170, 0x2a0, 0x1398, 0x1398, 0x2a0, 0x1398, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x13}, @loopback, [0x0, 0xff000000], [0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x18}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@unspec=@addrtype1={{0x28}, {0x94, 0x804, 0x9}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'geneve1\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) kernel console output (not intermixed with test programs): le media [ 152.675118][ T9316] xt_policy: output policy not valid in PREROUTING and INPUT [ 152.831320][ T9316] bond6: invalid ARP target 0.0.0.0 specified for addition [ 152.859135][ T9330] netlink: 'syz.3.999': attribute type 2 has an invalid length. [ 152.884619][ T9316] bond6: option arp_ip_target: invalid value (0) [ 152.892861][ T9330] netlink: 'syz.3.999': attribute type 1 has an invalid length. [ 152.913962][ T9316] bond6 (unregistering): Released all slaves [ 153.063557][ T9324] bond4: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 153.090047][ T9324] bond4 (unregistering): Released all slaves [ 153.542573][ T9368] nbd: socks must be embedded in a SOCK_ITEM attr [ 153.897446][ T9373] bond6: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 153.933327][ T9373] bond6 (unregistering): Released all slaves [ 154.081282][ T9400] __nla_validate_parse: 10 callbacks suppressed [ 154.081299][ T9400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1022'. [ 154.089399][ T9395] macvlan2: entered allmulticast mode [ 154.105725][ T9395] bond4: entered promiscuous mode [ 154.116602][ T9395] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 154.185133][ T9395] bond4: left promiscuous mode [ 154.529031][ T9416] netlink: 165 bytes leftover after parsing attributes in process `syz.4.1029'. [ 154.799496][ T9430] tipc: Enabled bearer , priority 0 [ 154.830555][ T9430] syzkaller0: entered promiscuous mode [ 154.850855][ T9430] syzkaller0: entered allmulticast mode [ 154.943980][ T9435] tipc: Resetting bearer [ 154.993896][ T9429] tipc: Resetting bearer [ 155.019383][ T9429] tipc: Disabling bearer [ 155.181075][ T9450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1037'. [ 155.264133][ T9450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1037'. [ 155.277154][ T9451] ieee802154 phy0 wpan0: encryption failed: -22 [ 155.362014][ T9460] tipc: Enabled bearer , priority 10 [ 155.432508][ T9465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1040'. [ 155.566585][ T9474] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1044'. [ 156.356891][ T5939] tipc: Node number set to 3404252665 [ 156.597316][ T9515] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1053'. [ 156.612339][ T9515] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1053'. [ 156.734593][ T9525] netlink: zone id is out of range [ 156.737622][ T9524] syzkaller0: entered promiscuous mode [ 156.751177][ T9525] netlink: zone id is out of range [ 156.766516][ T9524] syzkaller0: entered allmulticast mode [ 156.792151][ T9525] netlink: zone id is out of range [ 156.816921][ T9525] netlink: zone id is out of range [ 156.827579][ T9525] netlink: zone id is out of range [ 156.838442][ T9525] netlink: zone id is out of range [ 156.853208][ T9531] bond3: option resend_igmp: invalid value (32767) [ 156.857023][ T9525] netlink: zone id is out of range [ 156.861454][ T9531] bond3: option resend_igmp: allowed values 0 - 255 [ 156.881430][ T9525] netlink: zone id is out of range [ 156.887140][ T9525] netlink: zone id is out of range [ 156.892281][ T9525] netlink: zone id is out of range [ 156.900417][ T9531] bond3 (unregistering): Released all slaves [ 156.958327][ T9540] validate_nla: 4 callbacks suppressed [ 156.958346][ T9540] netlink: 'syz.2.1058': attribute type 7 has an invalid length. [ 156.972896][ T9540] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1058'. [ 157.231119][ T9552] IPVS: set_ctl: invalid protocol: 103 172.20.20.36:20004 [ 157.300324][ T9560] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1064'. [ 157.320590][ T5905] syzkaller1: tun_net_xmit 90 [ 157.326734][ T9552] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 157.336255][ T9552] syzkaller1: Linktype set failed because interface is up [ 157.343737][ T5905] syzkaller1: tun_net_xmit 90 [ 157.384900][ T9559] netlink: 'syz.3.1063': attribute type 1 has an invalid length. [ 157.417434][ T9559] netlink: 'syz.3.1063': attribute type 7 has an invalid length. [ 157.429388][ T9559] netlink: 'syz.3.1063': attribute type 8 has an invalid length. [ 157.456450][ T9571] netlink: 'syz.4.1067': attribute type 4 has an invalid length. [ 157.472306][ T9571] netlink: 'syz.4.1067': attribute type 9 has an invalid length. [ 157.702505][ T9584] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 157.826556][ T9587] syzkaller0: entered promiscuous mode [ 157.832216][ T9587] syzkaller0: entered allmulticast mode [ 158.004898][ T9591] netlink: 'syz.3.1074': attribute type 1 has an invalid length. [ 158.461653][ T9624] x_tables: duplicate underflow at hook 2 [ 159.089265][ T9637] __nla_validate_parse: 6 callbacks suppressed [ 159.089283][ T9637] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1089'. [ 159.121771][ T9641] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1090'. [ 159.136550][ T9639] FAULT_INJECTION: forcing a failure. [ 159.136550][ T9639] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 159.158082][ T9639] CPU: 0 UID: 0 PID: 9639 Comm: syz.2.1088 Not tainted syzkaller #0 PREEMPT(full) [ 159.158106][ T9639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 159.158122][ T9639] Call Trace: [ 159.158130][ T9639] [ 159.158138][ T9639] dump_stack_lvl+0x189/0x250 [ 159.158165][ T9639] ? __pfx____ratelimit+0x10/0x10 [ 159.158188][ T9639] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.158209][ T9639] ? __pfx__printk+0x10/0x10 [ 159.158227][ T9639] ? __might_fault+0xb0/0x130 [ 159.158261][ T9639] should_fail_ex+0x414/0x560 [ 159.158291][ T9639] _copy_from_user+0x2d/0xb0 [ 159.158313][ T9639] ___sys_sendmsg+0x158/0x2a0 [ 159.158334][ T9639] ? __pfx____sys_sendmsg+0x10/0x10 [ 159.158389][ T9639] ? __fget_files+0x2a/0x420 [ 159.158404][ T9639] ? __fget_files+0x3a0/0x420 [ 159.158431][ T9639] __x64_sys_sendmsg+0x19b/0x260 [ 159.158452][ T9639] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 159.158479][ T9639] ? __pfx_ksys_write+0x10/0x10 [ 159.158505][ T9639] ? do_syscall_64+0xbe/0xfa0 [ 159.158530][ T9639] do_syscall_64+0xfa/0xfa0 [ 159.158550][ T9639] ? lockdep_hardirqs_on+0x9c/0x150 [ 159.158572][ T9639] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.158588][ T9639] ? clear_bhb_loop+0x60/0xb0 [ 159.158608][ T9639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.158624][ T9639] RIP: 0033:0x7f2f0278f6c9 [ 159.158646][ T9639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.158660][ T9639] RSP: 002b:00007f2f03690038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.158678][ T9639] RAX: ffffffffffffffda RBX: 00007f2f029e5fa0 RCX: 00007f2f0278f6c9 [ 159.158691][ T9639] RDX: 0000000000004000 RSI: 0000200000000580 RDI: 0000000000000006 [ 159.158701][ T9639] RBP: 00007f2f03690090 R08: 0000000000000000 R09: 0000000000000000 [ 159.158712][ T9639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.158721][ T9639] R13: 00007f2f029e6038 R14: 00007f2f029e5fa0 R15: 00007ffc65f26018 [ 159.158752][ T9639] [ 160.040409][ T9681] syzkaller0: entered promiscuous mode [ 160.051082][ T9681] syzkaller0: entered allmulticast mode [ 160.078946][ T9686] netlink: 'syz.4.1102': attribute type 6 has an invalid length. [ 160.089485][ T9686] netlink: 'syz.4.1102': attribute type 6 has an invalid length. [ 160.101419][ T9688] netlink: 'syz.2.1099': attribute type 4 has an invalid length. [ 160.128430][ T5941] lo speed is unknown, defaulting to 1000 [ 160.134219][ T5941] sz1: Port: 1 Link ACTIVE [ 160.152641][ T5941] lo speed is unknown, defaulting to 1000 [ 160.325970][ T9698] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1104'. [ 160.351298][ T9700] bridge16: entered allmulticast mode [ 160.848654][ T9717] xt_TPROXY: Can be used only with -p tcp or -p udp [ 160.885735][ T9716] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1109'. [ 161.172382][ T9741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1118'. [ 161.289380][ T9750] syzkaller0: entered promiscuous mode [ 161.294887][ T9750] syzkaller0: entered allmulticast mode [ 161.355757][ T9752] geneve2: entered promiscuous mode [ 161.360967][ T9756] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1124'. [ 161.372329][ T9752] geneve2: entered allmulticast mode [ 161.379876][ T750] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 161.398321][ T750] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 161.434872][ T750] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 161.453420][ T750] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 162.170882][ T9776] validate_nla: 3 callbacks suppressed [ 162.170898][ T9776] netlink: 'syz.4.1131': attribute type 1 has an invalid length. [ 162.179295][ T9774] tipc: Enabled bearer , priority 0 [ 162.229287][ T9782] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1131'. [ 162.234328][ T9781] netlink: 'syz.1.1129': attribute type 2 has an invalid length. [ 162.267735][ T9783] syzkaller0: entered promiscuous mode [ 162.273839][ T9783] syzkaller0: entered allmulticast mode [ 162.281564][ T9776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1131'. [ 162.297670][ T9778] tipc: Enabling of bearer rejected, already enabled [ 162.361029][ T9778] tipc: Resetting bearer [ 162.488141][ T9778] tipc: Disabling bearer [ 162.598974][ T9800] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1136'. [ 162.617014][ T9803] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1134'. [ 162.735658][ T9821] netlink: 'syz.1.1134': attribute type 4 has an invalid length. [ 163.071698][ T9841] syzkaller0: entered promiscuous mode [ 163.080831][ T9841] syzkaller0: entered allmulticast mode [ 163.263711][ T9850] unsupported nlmsg_type 40 [ 164.071595][ T9890] netlink: 'syz.2.1156': attribute type 2 has an invalid length. [ 164.080394][ T9890] netlink: 'syz.2.1156': attribute type 8 has an invalid length. [ 164.279757][ T9902] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 164.557636][ T9928] syzkaller0: entered promiscuous mode [ 164.563139][ T9928] syzkaller0: entered allmulticast mode [ 164.598067][ T1159] nci: nci_ntf_packet: unknown ntf opcode 0x104 [ 164.691346][ T9932] xt_l2tp: wrong L2TP version: 0 [ 165.205586][ T9940] __nla_validate_parse: 6 callbacks suppressed [ 165.205603][ T9940] netlink: 512 bytes leftover after parsing attributes in process `syz.2.1170'. [ 165.472889][ T9950] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1175'. [ 165.527478][ T9950] smc: removing ib device sz1 [ 165.638774][ T9961] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1175'. [ 165.788346][ T9973] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1180'. [ 165.808850][ T9973] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1180'. [ 166.077599][ T9989] syzkaller0: entered promiscuous mode [ 166.088006][ T9989] syzkaller0: entered allmulticast mode [ 166.109499][ T13] nci: nci_ntf_packet: unknown ntf opcode 0x104 [ 166.146838][ T9996] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1186'. [ 166.157653][ T9996] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1186'. [ 166.169391][ T9996] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1186'. [ 166.181411][ T9996] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1186'. [ 166.193225][ T9996] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1186'. [ 166.303294][ T9999] syzkaller0: entered promiscuous mode [ 166.308816][ T9999] syzkaller0: entered allmulticast mode [ 167.526296][T10010] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:20002 [ 167.544497][T10010] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20004 [ 167.757221][T10028] veth1_to_bond: entered allmulticast mode [ 167.881684][T10027] veth1_to_bond: left allmulticast mode [ 167.982067][T10042] netlink: 'syz.4.1200': attribute type 1 has an invalid length. [ 168.136838][T10042] 8021q: adding VLAN 0 to HW filter on device bond5 [ 168.189884][T10061] netem: change failed [ 168.202369][T10064] syzkaller0: entered promiscuous mode [ 168.210727][T10064] syzkaller0: entered allmulticast mode [ 168.232607][ T13] nci: nci_ntf_packet: unknown ntf opcode 0x104 [ 169.043967][T10084] sctp: [Deprecated]: syz.3.1211 (pid 10084) Use of int in maxseg socket option. [ 169.043967][T10084] Use struct sctp_assoc_value instead [ 169.509478][T10115] netlink: 'syz.3.1223': attribute type 3 has an invalid length. [ 169.704100][T10131] syzkaller0: entered promiscuous mode [ 169.716461][T10131] syzkaller0: entered allmulticast mode [ 169.725095][ T62] nci: nci_ntf_packet: unknown ntf opcode 0x104 [ 170.700727][T10152] netlink: 'syz.3.1230': attribute type 2 has an invalid length. [ 171.012106][T10173] __nla_validate_parse: 67 callbacks suppressed [ 171.012124][T10173] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1236'. [ 171.020416][T10179] syzkaller0: entered promiscuous mode [ 171.034077][T10173] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1236'. [ 171.106032][T10179] syzkaller0: entered allmulticast mode [ 171.346873][T10205] syzkaller0: entered promiscuous mode [ 171.352468][T10205] syzkaller0: entered allmulticast mode [ 171.391915][ T36] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.401150][ T1159] nci: nci_ntf_packet: unknown ntf opcode 0x104 [ 171.442253][ T36] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.467646][ T36] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.488564][T10210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1247'. [ 171.490726][ T36] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.640684][T10221] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 171.651641][T10221] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1251'. [ 171.848980][T10229] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 172.231800][T10245] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 172.252018][T10244] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1255'. [ 172.622389][T10264] tipc: Enabling of bearer rejected, failed to enable media [ 172.818897][T10276] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1266'. [ 173.115022][T10289] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1269'. [ 173.128393][T10289] xt_TCPMSS: Only works on TCP SYN packets [ 173.292449][T10305] syzkaller0: entered promiscuous mode [ 173.298361][T10305] syzkaller0: entered allmulticast mode [ 173.308064][ T62] nci: nci_ntf_packet: unknown ntf opcode 0x104 [ 173.586524][T10315] veth3: entered promiscuous mode [ 173.689069][T10321] bond6: Unable to set down delay as MII monitoring is disabled [ 173.698547][T10321] bond6 (unregistering): Released all slaves [ 173.732172][T10323] bond6: Unable to set down delay as MII monitoring is disabled [ 173.741713][T10323] bond6 (unregistering): Released all slaves [ 174.139203][T10332] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1280'. [ 174.158964][T10332] team_slave_0: entered promiscuous mode [ 174.164858][T10332] team_slave_1: entered promiscuous mode [ 174.175415][T10332] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 174.416836][T10347] netlink: 'syz.0.1282': attribute type 1 has an invalid length. [ 174.435615][T10347] netlink: 'syz.0.1282': attribute type 4 has an invalid length. [ 174.478719][T10347] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1282'. [ 174.521938][T10342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1282'. [ 174.743212][T10365] batman_adv: batadv0: Adding interface: macsec2 [ 174.750144][T10365] batman_adv: batadv0: The MTU of interface macsec2 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.812766][T10365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.815473][T10372] net_ratelimit: 19 callbacks suppressed [ 174.815488][T10372] openvswitch: netlink: Message has -2 unknown bytes. [ 174.823850][T10365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.854505][T10365] batman_adv: batadv0: Interface activated: macsec2 [ 174.885126][T10372] smc: net device gre0 applied user defined pnetid SYZ1 [ 175.002166][T10384] syzkaller0: entered promiscuous mode [ 175.009124][T10384] syzkaller0: entered allmulticast mode [ 175.016942][ T36] nci: nci_ntf_packet: unknown ntf opcode 0x104 [ 175.674344][T10365] smc: net device gre0 erased user defined pnetid SYZ1 [ 175.914014][T10395] syzkaller0: refused to change device tx_queue_len [ 176.004013][T10405] openvswitch: netlink: Flow key attr not present in new flow. [ 176.151463][T10408] __nla_validate_parse: 9 callbacks suppressed [ 176.151481][T10408] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1302'. [ 176.166338][T10409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1300'. [ 176.205773][T10409] vlan2: entered promiscuous mode [ 176.573056][ T750] nci: nci_ntf_packet: unknown ntf opcode 0x104 [ 176.626196][T10449] bond0: entered promiscuous mode [ 176.632550][T10449] bond_slave_0: entered promiscuous mode [ 176.640675][T10449] bond_slave_1: entered promiscuous mode [ 176.648812][T10449] batadv0: entered promiscuous mode [ 176.656910][T10449] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 178.010254][T10473] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1318'. [ 178.038403][T10476] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1319'. [ 178.066917][T10478] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1320'. [ 178.090197][T10487] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1319'. [ 178.105335][T10487] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1319'. [ 178.162099][T10494] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1318'. [ 178.179790][T10473] bond6 (unregistering): Released all slaves [ 178.360805][T10502] bridge13: entered promiscuous mode [ 178.367100][T10502] bridge13: entered allmulticast mode [ 178.371460][T10503] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1323'. [ 178.726407][T10521] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1330'. [ 178.769432][T10527] nftables ruleset with unbound set [ 178.884116][ T1159] nci: nci_ntf_packet: unknown ntf opcode 0x104 [ 179.024089][T10547] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 179.032066][T10547] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 179.803717][T10554] xt_CT: You must specify a L4 protocol and not use inversions on it [ 181.261252][T10564] __nla_validate_parse: 2 callbacks suppressed [ 181.261272][T10564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1340'. [ 181.444470][T10595] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1348'. [ 181.482239][T10595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1348'. [ 181.526360][T10601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1349'. [ 181.548677][T10595] gretap1: entered promiscuous mode [ 181.580379][T10601] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1349'. [ 181.667014][T10611] netlink: 'syz.2.1352': attribute type 16 has an invalid length. [ 181.680525][T10611] netlink: 'syz.2.1352': attribute type 17 has an invalid length. [ 181.714370][T10611] gre0: left promiscuous mode [ 181.865010][T10611] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 181.877521][ T5833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 181.890374][ T5833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 181.895776][T10612] team0: No ports can be present during mode change [ 181.899241][ T5833] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 181.912636][ T5833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 181.920423][ T5833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 181.928161][T10614] netlink: 408 bytes leftover after parsing attributes in process `syz.4.1353'. [ 181.960095][T10624] syzkaller0: entered promiscuous mode [ 181.966863][T10624] syzkaller0: entered allmulticast mode [ 182.220328][T10637] netlink: 'syz.2.1359': attribute type 4 has an invalid length. [ 182.260436][ T5905] lo speed is unknown, defaulting to 1000 [ 182.269779][ T5905] sz1: Port: 1 Link DOWN [ 182.381928][ T36] nci: nci_ntf_packet: unknown ntf opcode 0x104 [ 182.494805][T10621] wg1 speed is unknown, defaulting to 1000 [ 182.572164][T10654] netlink: 'syz.2.1363': attribute type 13 has an invalid length. [ 182.581007][T10654] netlink: 'syz.2.1363': attribute type 27 has an invalid length. [ 182.663475][T10662] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1365'. [ 183.004403][T10621] chnl_net:caif_netlink_parms(): no params data found [ 183.202739][T10692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1371'. [ 183.296115][T10692] macsec3: entered promiscuous mode [ 183.307477][T10692] macsec3: entered allmulticast mode [ 183.325266][T10692] bridge0: entered allmulticast mode [ 183.334028][T10692] bridge0: port 1(macsec3) entered blocking state [ 183.340849][T10692] bridge0: port 1(macsec3) entered disabled state [ 183.352875][T10692] bridge0: left allmulticast mode [ 183.557080][T10621] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.564783][T10621] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.572807][T10621] bridge_slave_0: entered allmulticast mode [ 183.675433][T10621] bridge_slave_0: entered promiscuous mode [ 183.689270][T10621] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.696989][T10621] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.704228][T10621] bridge_slave_1: entered allmulticast mode [ 183.712124][T10621] bridge_slave_1: entered promiscuous mode [ 183.739440][T10726] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1381'. [ 183.746251][T10728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1380'. [ 183.752663][T10723] netlink: 'syz.2.1378': attribute type 13 has an invalid length. [ 183.899198][T10621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.920180][T10621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.966097][ T5833] Bluetooth: hci5: command tx timeout [ 184.073606][T10741] netlink: 'syz.4.1384': attribute type 1 has an invalid length. [ 184.177602][T10741] 8021q: adding VLAN 0 to HW filter on device bond6 [ 184.192176][T10621] team0: Port device team_slave_0 added [ 184.205264][T10621] team0: Port device team_slave_1 added [ 184.259498][T10747] veth7: entered promiscuous mode [ 184.269683][T10747] bond6: (slave veth7): Enslaving as an active interface with an up link [ 184.294696][T10759] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.309745][T10752] lo: Caught tx_queue_len zero misconfig [ 184.370676][T10621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.378849][T10621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 184.471194][T10621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.507987][T10621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.515093][T10621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 184.550056][T10621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.650688][T10769] tipc: Enabled bearer , priority 0 [ 184.668842][T10621] hsr_slave_0: entered promiscuous mode [ 184.677260][T10621] hsr_slave_1: entered promiscuous mode [ 184.683772][T10621] debugfs: 'hsr0' already exists in 'hsr' [ 184.690917][T10621] Cannot create hsr debugfs directory [ 184.697142][T10769] syzkaller0: entered promiscuous mode [ 184.702631][T10769] syzkaller0: entered allmulticast mode [ 184.718535][T10775] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.821490][T10782] openvswitch: netlink: EtherType 50a is less than min 600 [ 184.951135][T10787] sock: sock_timestamping_bind_phc: sock not bind to device [ 185.075051][T10621] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 185.117847][T10621] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 185.172766][T10621] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 185.225477][T10621] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 185.466097][T10762] tipc: Resetting bearer [ 185.502233][T10762] tipc: Disabling bearer [ 185.541529][T10826] netlink: 'syz.3.1409': attribute type 1 has an invalid length. [ 185.699431][T10833] netlink: 'syz.0.1411': attribute type 83 has an invalid length. [ 185.732487][T10621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.798299][T10621] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.832620][ T750] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.839809][ T750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.874613][ T750] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.881817][ T750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.048206][ T5833] Bluetooth: hci5: command tx timeout [ 186.137449][T10853] x_tables: unsorted entry at hook 2 [ 186.207499][T10859] sctp: [Deprecated]: syz.4.1419 (pid 10859) Use of int in maxseg socket option. [ 186.207499][T10859] Use struct sctp_assoc_value instead [ 186.208454][T10861] netlink: 'syz.0.1420': attribute type 13 has an invalid length. [ 186.275084][T10861] veth0_macvtap: left promiscuous mode [ 186.301958][T10861] macvtap0: entered allmulticast mode [ 186.347607][T10861] macvtap0: refused to change device tx_queue_len [ 186.464756][T10875] x_tables: duplicate underflow at hook 1 [ 186.484903][T10877] __nla_validate_parse: 8 callbacks suppressed [ 186.484921][T10877] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1424'. [ 186.553960][T10621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.641656][T10882] ipt_REJECT: TCP_RESET invalid for non-tcp [ 186.978263][T10901] xfrm1: entered allmulticast mode [ 187.027301][T10902] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1433'. [ 187.048251][T10902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1433'. [ 187.209480][T10916] bond0: Caught tx_queue_len zero misconfig [ 187.375175][T10621] veth0_vlan: entered promiscuous mode [ 187.418615][T10621] veth1_vlan: entered promiscuous mode [ 187.533011][T10621] veth0_macvtap: entered promiscuous mode [ 187.562660][T10621] veth1_macvtap: entered promiscuous mode [ 187.592378][T10931] IPVS: set_ctl: invalid protocol: 115 0.0.0.0:20002 [ 187.607953][T10621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.625784][T10621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.655533][ T8041] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.688113][ T8041] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.705991][ T8041] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.746605][ T8041] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.872312][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.900040][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.996607][ T750] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.013660][ T750] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.126207][ T5833] Bluetooth: hci5: command tx timeout [ 188.158421][T10960] validate_nla: 1 callbacks suppressed [ 188.158438][T10960] netlink: 'syz.2.1448': attribute type 1 has an invalid length. [ 188.193412][T10963] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1347'. [ 188.204620][T10960] netlink: 'syz.2.1448': attribute type 2 has an invalid length. [ 188.233514][T10960] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1448'. [ 188.296119][ T5939] IPVS: starting estimator thread 0... [ 188.360450][T10969] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1450'. [ 188.386278][T10965] IPVS: using max 36 ests per chain, 86400 per kthread [ 188.566382][T10977] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1454'. [ 188.605699][T10985] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1454'. [ 188.651461][T10989] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1458'. [ 188.708333][T10989] macvtap1: entered promiscuous mode [ 188.735329][T10989] vlan0: entered promiscuous mode [ 188.767391][T10994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1458'. [ 188.796473][T10989] macvtap1: entered allmulticast mode [ 188.814190][T10989] vlan0: entered allmulticast mode [ 188.830314][T10989] veth0_vlan: entered allmulticast mode [ 188.885088][T10994] macvtap2: entered promiscuous mode [ 188.890772][T10994] macvtap2: entered allmulticast mode [ 188.904568][T11000] netlink: 'syz.3.1462': attribute type 4 has an invalid length. [ 188.989517][T11006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.231541][T11019] bridge18: entered promiscuous mode [ 189.265365][T11019] bridge18: entered allmulticast mode [ 189.402894][T11028] netlink: 'syz.2.1470': attribute type 1 has an invalid length. [ 189.995515][T11012] wg1 speed is unknown, defaulting to 1000 [ 190.206202][ T5833] Bluetooth: hci5: command tx timeout [ 190.281874][T11047] erspan0: entered allmulticast mode [ 190.332342][T11048] tipc: Enabled bearer , priority 0 [ 190.353345][T11048] syzkaller0: entered promiscuous mode [ 190.360555][T11048] syzkaller0: entered allmulticast mode [ 190.395973][T11048] netlink: 'syz.2.1478': attribute type 3 has an invalid length. [ 190.417978][T11048] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 190.486685][T11048] tipc: Resetting bearer [ 190.527710][T11046] tipc: Resetting bearer [ 190.599777][T11046] tipc: Disabling bearer [ 190.653305][T11068] x_tables: unsorted entry at hook 1 [ 190.942056][T11083] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 190.951406][T11083] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.962428][T11081] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 190.971545][T11081] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 191.589057][T11124] tipc: Enabled bearer , priority 0 [ 191.654225][T11126] syz.5.1503 uses old SIOCAX25GETINFO [ 191.674212][T11124] syzkaller0: entered promiscuous mode [ 191.684535][T11124] syzkaller0: entered allmulticast mode [ 191.684761][T11126] __nla_validate_parse: 8 callbacks suppressed [ 191.684774][T11126] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1503'. [ 191.691017][T11124] tipc: Resetting bearer [ 191.708428][T11126] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1503'. [ 191.754821][T11123] tipc: Resetting bearer [ 192.054285][T11155] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1510'. [ 193.222359][T11123] tipc: Disabling bearer [ 193.462629][T11168] ksmbd: Unknown IPC event: 3, ignore. [ 193.468699][T11168] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.1513'. [ 193.681313][T11190] netlink: 'syz.4.1519': attribute type 1 has an invalid length. [ 193.884861][T11197] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1522'. [ 193.916537][T11197] xt_TPROXY: Can be used only with -p tcp or -p udp [ 194.299598][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.316094][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.525164][T11232] netlink: 'syz.2.1533': attribute type 1 has an invalid length. [ 194.675588][T11232] 8021q: adding VLAN 0 to HW filter on device bond5 [ 194.731556][T11238] bond5: (slave geneve3): making interface the new active one [ 194.742609][T11238] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 194.827790][T11251] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1538'. [ 194.904069][T11256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1540'. [ 195.065711][T11263] netlink: 'syz.2.1542': attribute type 4 has an invalid length. [ 195.407350][T11275] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1546'. [ 195.420244][T11275] syzkaller0: entered allmulticast mode [ 195.601787][T11275] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.781250][T11299] netlink: 'syz.4.1549': attribute type 3 has an invalid length. [ 195.852770][T11275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.125544][T11275] gretap1: left promiscuous mode [ 196.133085][T11275] gretap1: left allmulticast mode [ 196.192066][T11275] ipvlan2: left promiscuous mode [ 196.208909][T11275] geneve2: left promiscuous mode [ 196.213884][T11275] geneve2: left allmulticast mode [ 196.239083][T11275] macvtap1: left promiscuous mode [ 196.251896][T11275] macvtap1: left allmulticast mode [ 196.268367][T11275] vlan0: left allmulticast mode [ 196.273367][T11275] veth0_vlan: left allmulticast mode [ 196.279531][T11275] vlan0: left promiscuous mode [ 196.284851][T11275] macvtap2: left promiscuous mode [ 196.291099][T11275] macvtap2: left allmulticast mode [ 196.330163][T11275] syzkaller0: left allmulticast mode [ 196.363371][ T8333] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 196.372139][ T5845] Bluetooth: hci0: command 0x0401 tx timeout [ 196.372164][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 196.378184][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 196.378222][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 196.399783][ T8333] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 196.421829][ T8333] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 19999 - 0 [ 196.433759][ T8333] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 196.485008][T11301] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1550'. [ 196.533471][ T8333] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 19999 - 0 [ 196.545431][ T8333] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 196.556840][ T8333] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 19999 - 0 [ 196.580850][ T8333] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 196.977679][T11328] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1558'. [ 197.008465][T11329] vlan3: entered promiscuous mode [ 197.013939][T11329] bond0: entered promiscuous mode [ 197.019636][T11329] bond_slave_0: entered promiscuous mode [ 197.025597][T11329] bond_slave_1: entered promiscuous mode [ 197.051099][T11329] bond0: (slave vlan3): Opening slave failed [ 197.347403][T11351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1566'. [ 197.489266][T11355] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 197.497486][T11355] syzkaller1: Refused to change device type [ 197.764377][T11375] bond1: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 197.787929][T11379] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1573'. [ 198.177552][T11405] netlink: 'syz.4.1576': attribute type 10 has an invalid length. [ 198.185521][T11405] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 198.196447][T11405] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 198.204204][T11405] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 198.411672][T11409] netlink: 'syz.4.1577': attribute type 1 has an invalid length. [ 198.420407][T11409] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1577'. [ 198.678355][T11413] netlink: 'syz.0.1578': attribute type 1 has an invalid length. [ 198.728586][T11413] 8021q: adding VLAN 0 to HW filter on device bond7 [ 198.762405][T11420] bond7: (slave veth5): Enslaving as an active interface with a down link [ 198.781927][T11413] bond7: (slave veth0_to_bond): making interface the new active one [ 198.794930][T11413] veth0_to_bond: entered promiscuous mode [ 198.802728][T11413] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 198.844602][T11413] bond7: (slave veth7): Enslaving as an active interface with a down link [ 199.030511][T11426] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1581'. [ 199.048982][T11427] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1581'. [ 199.086288][T11407] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 199.139494][T11432] nbd: illegal input index 2958377 [ 199.158535][T11431] x_tables: duplicate underflow at hook 1 [ 199.663305][T11460] netlink: 'syz.0.1593': attribute type 10 has an invalid length. [ 199.750744][T11460] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 199.767783][T11466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1595'. [ 199.791158][T11462] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1590'. [ 199.805415][T11453] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1590'. [ 199.826955][T11453] netlink: 'syz.2.1590': attribute type 7 has an invalid length. [ 199.849512][T11453] netlink: 'syz.2.1590': attribute type 8 has an invalid length. [ 199.866121][T11453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1590'. [ 200.154299][T11481] 8021q: adding VLAN 0 to HW filter on device bond8 [ 200.181053][T11490] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 200.330612][T11495] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 200.344449][T11495] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 200.721625][T11517] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 200.730210][T11517] block nbd2: Unsupported socket: should be TCP or UNIX. [ 202.002485][T11595] sctp: [Deprecated]: syz.4.1634 (pid 11595) Use of struct sctp_assoc_value in delayed_ack socket option. [ 202.002485][T11595] Use struct sctp_sack_info instead [ 202.090765][T11597] __nla_validate_parse: 4 callbacks suppressed [ 202.090830][T11597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1635'. [ 202.116521][T11597] netlink: 'syz.4.1635': attribute type 5 has an invalid length. [ 202.124392][T11597] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1635'. [ 202.151156][T11597] geneve4: entered promiscuous mode [ 202.157544][T11597] geneve4: entered allmulticast mode [ 202.166881][ T1159] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 256 - 0 [ 202.194126][ T1159] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 256 - 0 [ 202.214880][ T1159] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 256 - 0 [ 202.236866][ T1159] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 256 - 0 [ 202.427903][T11606] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1638'. [ 202.455984][T11606] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1638'. [ 202.515619][T11616] netlink: 'syz.2.1640': attribute type 3 has an invalid length. [ 202.629126][T11622] netlink: 'syz.0.1642': attribute type 58 has an invalid length. [ 202.641307][T11622] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1642'. [ 202.748703][T11628] netlink: 'syz.2.1646': attribute type 1 has an invalid length. [ 202.779662][T11628] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1646'. [ 202.848023][T11633] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1648'. [ 202.866463][T11633] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1648'. [ 202.927294][T11636] tipc: Enabled bearer , priority 0 [ 202.936916][T11636] syzkaller0: entered promiscuous mode [ 202.942405][T11636] syzkaller0: entered allmulticast mode [ 203.091602][T11637] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1648'. [ 203.110472][T11639] tipc: Resetting bearer [ 203.223765][T11635] tipc: Resetting bearer [ 203.278180][T11635] tipc: Disabling bearer [ 203.358322][T11651] netlink: 'syz.5.1654': attribute type 7 has an invalid length. [ 203.386592][T11651] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1654'. [ 203.387075][T11653] sctp: [Deprecated]: syz.4.1653 (pid 11653) Use of struct sctp_assoc_value in delayed_ack socket option. [ 203.387075][T11653] Use struct sctp_sack_info instead [ 203.466510][T11657] vlan2: entered promiscuous mode [ 203.471590][T11657] bridge0: entered promiscuous mode [ 203.576656][T11665] netlink: 'syz.4.1657': attribute type 13 has an invalid length. [ 203.773754][T11675] bridge_slave_0: left allmulticast mode [ 203.794646][T11675] bridge_slave_0: left promiscuous mode [ 203.819972][T11675] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.879800][T11675] bridge_slave_1: left allmulticast mode [ 203.887461][T11675] bridge_slave_1: left promiscuous mode [ 203.896303][T11675] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.912708][T11675] bond0: (slave bond_slave_0): Releasing backup interface [ 203.940705][T11675] bond0: (slave bond_slave_1): Releasing backup interface [ 203.959295][T11675] team0: Port device team_slave_0 removed [ 203.974376][T11675] team0: Port device team_slave_1 removed [ 203.981825][T11675] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.990405][T11675] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.002526][T11675] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.037274][T11675] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.069570][T11675] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 204.275481][T11697] gtp1: entered promiscuous mode [ 204.298217][T11697] gtp1: entered allmulticast mode [ 204.471308][T11707] netlink: 'syz.4.1671': attribute type 2 has an invalid length. [ 204.978623][ T5847] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 204.989033][ T5847] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 204.997721][ T5847] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 205.006773][ T5847] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 205.018865][ T5847] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 205.327722][ T5847] Bluetooth: hci5: command 0x0405 tx timeout [ 205.452929][T11740] syzkaller1: entered promiscuous mode [ 205.468850][T11740] syzkaller1: entered allmulticast mode [ 205.712520][T11751] syzkaller0: entered promiscuous mode [ 205.742289][T11751] syzkaller0: entered allmulticast mode [ 205.916985][T11726] wg1 speed is unknown, defaulting to 1000 [ 206.049834][T11775] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.149925][T11777] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.417149][T11726] chnl_net:caif_netlink_parms(): no params data found [ 206.502126][T11797] bridge14: entered promiscuous mode [ 206.518098][T11797] bridge14: entered allmulticast mode [ 206.657503][T11800] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.913538][T11827] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 206.925048][T11726] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.937875][T11827] validate_nla: 1 callbacks suppressed [ 206.937891][T11827] netlink: 'syz.0.1705': attribute type 10 has an invalid length. [ 206.944049][T11726] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.963502][T11726] bridge_slave_0: entered allmulticast mode [ 206.972381][T11726] bridge_slave_0: entered promiscuous mode [ 207.012774][T11827] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.023478][T11827] bond0: (slave team0): Enslaving as an active interface with an up link [ 207.042330][T11726] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.062138][T11726] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.076349][T11726] bridge_slave_1: entered allmulticast mode [ 207.087281][ T5148] Bluetooth: hci6: command tx timeout [ 207.104435][T11726] bridge_slave_1: entered promiscuous mode [ 207.192942][T11726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.285431][T11726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.530298][T11726] team0: Port device team_slave_0 added [ 207.591265][T11726] team0: Port device team_slave_1 added [ 207.663580][T11867] lo: entered allmulticast mode [ 207.672488][T11871] __nla_validate_parse: 16 callbacks suppressed [ 207.672504][T11871] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1716'. [ 207.895490][T11857] syzkaller0: entered promiscuous mode [ 207.903271][T11857] syzkaller0: entered allmulticast mode [ 207.913577][T11726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.921731][T11726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.950534][T11874] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1719'. [ 207.956277][T11726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.029498][T11726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.036672][T11726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.122798][T11893] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1724'. [ 208.132092][T11726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.176044][ T5148] Bluetooth: hci6: command tx timeout [ 209.619638][T11915] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1730'. [ 209.703176][T11726] hsr_slave_0: entered promiscuous mode [ 209.705570][T11925] netlink: 'syz.0.1733': attribute type 1 has an invalid length. [ 209.735000][T11726] hsr_slave_1: entered promiscuous mode [ 209.750057][T11726] debugfs: 'hsr0' already exists in 'hsr' [ 209.767792][T11726] Cannot create hsr debugfs directory [ 210.189402][T11951] netlink: 'syz.4.1739': attribute type 1 has an invalid length. [ 210.297013][ T12] veth0_to_bond: left promiscuous mode [ 210.376321][T11958] netlink: 'syz.2.1742': attribute type 39 has an invalid length. [ 210.474839][T11726] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 210.494128][T11726] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 210.560624][T11726] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 210.581819][T11965] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1745'. [ 210.609917][T11726] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 210.714093][T11972] netlink: 'syz.4.1749': attribute type 10 has an invalid length. [ 210.801545][T11965] bond0 (unregistering): Released all slaves [ 210.913532][T11972] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.938424][T11972] bridge_slave_1: left allmulticast mode [ 210.971055][T11972] bridge_slave_1: left promiscuous mode [ 210.986491][T11972] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.029496][T11972] bridge_slave_1: entered promiscuous mode [ 211.051495][T11972] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 211.085625][T11981] syzkaller0: entered promiscuous mode [ 211.093391][T11981] syzkaller0: entered allmulticast mode [ 211.174192][T11997] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1751'. [ 211.201729][T11997] sctp: [Deprecated]: syz.0.1751 (pid 11997) Use of int in max_burst socket option. [ 211.201729][T11997] Use struct sctp_assoc_value instead [ 211.246592][ T5148] Bluetooth: hci6: command tx timeout [ 211.301449][T12007] xt_l2tp: unknown flags: 10 [ 211.328043][T11726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.351241][T11726] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.372297][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.379524][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.449766][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.456973][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.563388][T12018] netlink: 'syz.2.1756': attribute type 4 has an invalid length. [ 211.586999][T12018] netlink: 'syz.2.1756': attribute type 4 has an invalid length. [ 211.631879][T11278] lo speed is unknown, defaulting to 1000 [ 211.644564][T11278] sz1: Port: 1 Link ACTIVE [ 211.994791][T11726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.354748][T12024] wg1 speed is unknown, defaulting to 1000 [ 212.452207][T12023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.603731][T12065] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1766'. [ 212.631858][T11726] veth0_vlan: entered promiscuous mode [ 212.664592][T11726] veth1_vlan: entered promiscuous mode [ 212.716522][T11726] veth0_macvtap: entered promiscuous mode [ 212.749885][T11726] veth1_macvtap: entered promiscuous mode [ 212.825183][T11726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.833346][T12074] xt_ecn: cannot match TCP bits for non-tcp packets [ 212.854353][T11726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.873748][ T1159] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.888566][ T1159] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.930927][ T1159] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.004787][ T1159] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.072608][ T8041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.097515][ T8041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.328789][ T5148] Bluetooth: hci6: command tx timeout [ 213.527821][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.552232][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.699634][T12117] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1781'. [ 213.791097][T12123] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 213.822483][T12125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1782'. [ 213.875092][T12127] ieee802154 phy0 wpan0: encryption failed: -22 [ 214.126286][T12141] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1784'. [ 214.191513][T12142] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1784'. [ 214.256566][T12143] TCP: TCP_TX_DELAY enabled [ 215.425382][T12150] netlink: 13 bytes leftover after parsing attributes in process `syz.5.1789'. [ 215.442615][T12152] xt_CT: You must specify a L4 protocol and not use inversions on it [ 215.450077][T12150] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.664150][T12162] smc: net device gre0 applied user defined pnetid SYZ1 [ 215.683212][T12162] smc: net device gre0 erased user defined pnetid SYZ1 [ 215.812627][T12165] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1795'. [ 215.886792][T12174] netlink: 'syz.5.1799': attribute type 27 has an invalid length. [ 215.900320][T12174] netlink: 'syz.5.1799': attribute type 27 has an invalid length. [ 216.077553][T12184] syzkaller0: entered promiscuous mode [ 216.086176][T12184] syzkaller0: entered allmulticast mode [ 216.113025][T12187] syz.5.1803 (12187) used obsolete PPPIOCDETACH ioctl [ 216.642348][T12219] syzkaller0: entered promiscuous mode [ 216.665122][T12219] syzkaller0: entered allmulticast mode [ 216.749172][T12225] syzkaller0: entered allmulticast mode [ 217.558023][T12261] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1822'. [ 218.019723][T12273] syzkaller0: entered promiscuous mode [ 218.025530][T12273] syzkaller0: entered allmulticast mode [ 218.034012][T12283] netlink: 'syz.4.1827': attribute type 4 has an invalid length. [ 218.061418][T12279] netlink: 'syz.4.1827': attribute type 4 has an invalid length. [ 218.106516][T12286] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1829'. [ 218.880398][T12315] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1834'. [ 218.890299][T12318] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1834'. [ 219.766476][T12327] ieee802154 phy0 wpan0: encryption failed: -90 [ 219.873841][T12323] netlink: 'syz.0.1836': attribute type 10 has an invalid length. [ 219.890907][T12323] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1836'. [ 219.904244][T12323] vet0_virt_wifi: entered promiscuous mode [ 219.911204][T12323] bridge0: port 3(vet0_virt_wifi) entered blocking state [ 219.926113][T12323] bridge0: port 3(vet0_virt_wifi) entered disabled state [ 219.940667][T12323] vet0_virt_wifi: entered allmulticast mode [ 220.082656][T12344] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1844'. [ 220.098429][T12344] xt_hashlimit: invalid interval [ 220.105678][T12345] xt_hashlimit: invalid interval [ 220.112648][T12344] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1844'. [ 220.194714][T12349] RDS: rds_bind could not find a transport for ::ffff:172.30.1.6, load rds_tcp or rds_rdma? [ 220.544178][T12372] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.695777][T12388] netlink: 'syz.4.1855': attribute type 4 has an invalid length. [ 220.764979][T12392] netlink: 'syz.6.1857': attribute type 7 has an invalid length. [ 220.799816][ T8339] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.810993][T12392] netlink: 'syz.6.1857': attribute type 7 has an invalid length. [ 220.818971][ T8339] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.846364][ T8339] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.862044][ T8339] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.979641][T12403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1861'. [ 221.008401][ C0] vcan0: j1939_tp_rxtimer: 0xffff888076878800: rx timeout, send abort [ 221.018432][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888076878800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 221.040923][T12405] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1862'. [ 221.050797][T12405] ksmbd: Unknown IPC event: 3, ignore. [ 221.057438][T12406] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1862'. [ 221.067176][T12406] ksmbd: Unknown IPC event: 3, ignore. [ 221.101126][T12408] ip6tnl0: Caught tx_queue_len zero misconfig [ 221.107911][T12408] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 221.172896][T12408] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1863'. [ 221.189331][T12408] tipc: Enabled bearer , priority 0 [ 221.198223][T12408] syzkaller0: entered promiscuous mode [ 221.204317][T12408] syzkaller0: entered allmulticast mode [ 221.233269][T12407] tipc: Resetting bearer [ 221.280884][T12407] tipc: Disabling bearer [ 221.686947][T12438] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1871'. [ 222.497470][T12479] netlink: 'syz.6.1884': attribute type 1 has an invalid length. [ 222.574704][T12479] 8021q: adding VLAN 0 to HW filter on device bond1 [ 223.525222][T12505] bond7: option min_links: invalid value (18446744073709551614) [ 223.535519][T12505] bond7: option min_links: allowed values 0 - 2147483647 [ 223.578930][T12505] bond7 (unregistering): Released all slaves [ 223.869671][T12535] syzkaller0: entered promiscuous mode [ 223.879665][T12535] syzkaller0: entered allmulticast mode [ 223.902205][T12535] tipc: Enabled bearer , priority 0 [ 223.911861][T12533] tipc: Resetting bearer [ 223.952617][T12533] tipc: Disabling bearer [ 223.980703][T12539] tipc: Started in network mode [ 223.985590][T12539] tipc: Node identity 12ab2002c23b, cluster identity 4711 [ 223.993576][T12539] tipc: Enabled bearer , priority 0 [ 224.002125][T12539] syzkaller0: entered promiscuous mode [ 224.008276][T12539] syzkaller0: entered allmulticast mode [ 224.020930][T12538] tipc: Resetting bearer [ 224.045007][T12538] tipc: Disabling bearer [ 224.079226][T12541] __nla_validate_parse: 7 callbacks suppressed [ 224.079241][T12541] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1906'. [ 224.169563][T12545] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.293200][T12550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1910'. [ 224.313965][T12550] xt_CT: You must specify a L4 protocol and not use inversions on it [ 224.455538][T12564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1914'. [ 224.505434][T12566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1914'. [ 224.920249][T12593] netlink: ct family unspecified [ 224.923165][T12562] team0 (unregistering): Port device team_slave_0 removed [ 224.925411][T12593] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.950488][T12562] team0 (unregistering): Port device team_slave_1 removed [ 224.973115][T12569] macvtap3: entered allmulticast mode [ 224.978979][T12569] veth0_macvtap: entered allmulticast mode [ 224.985661][T12571] macvtap0: entered promiscuous mode [ 224.994517][T12594] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1922'. [ 225.005284][T12567] macvtap0: left promiscuous mode [ 225.192642][T12607] netlink: 'syz.6.1925': attribute type 12 has an invalid length. [ 225.214421][T12607] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 225.242360][T11278] IPVS: starting estimator thread 0... [ 225.335989][T12610] IPVS: using max 30 ests per chain, 72000 per kthread [ 225.493870][T12625] netlink: 'syz.2.1928': attribute type 25 has an invalid length. [ 225.526774][T12624] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1929'. [ 225.651843][T12633] netlink: 'syz.6.1929': attribute type 39 has an invalid length. [ 226.336472][T12624] wg1 speed is unknown, defaulting to 1000 [ 226.532789][T12645] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1933'. [ 227.039240][T12678] syz_tun: default FDB implementation only supports local addresses [ 227.142155][T12683] x_tables: duplicate underflow at hook 1 [ 227.159235][T12683] netlink: 'syz.2.1943': attribute type 3 has an invalid length. [ 227.185155][T12688] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1945'. [ 227.232825][T12689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1944'. [ 227.274479][T12691] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1946'. [ 227.706745][T12719] bond_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 227.996410][T12742] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.116995][T12746] netlink: 'syz.4.1965': attribute type 1 has an invalid length. [ 228.609948][T12778] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 229.041941][T12799] x_tables: duplicate underflow at hook 1 [ 229.154965][T12801] syzkaller0: entered promiscuous mode [ 229.161921][T12801] syzkaller0: entered allmulticast mode [ 229.496089][T12820] netlink: 'syz.4.1987': attribute type 32 has an invalid length. [ 229.503945][T12820] __nla_validate_parse: 9 callbacks suppressed [ 229.503963][T12820] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1987'. [ 229.595468][T12825] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1989'. [ 229.655551][T12827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1990'. [ 229.672832][T12820] bond7: Setting coupled_control to off (0) [ 229.788382][T12835] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1991'. [ 229.804591][T12835] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1991'. [ 229.959724][T12852] openvswitch: netlink: Unknown nsh attribute 0 [ 229.969219][T12852] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.631257][T12862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1998'. [ 230.838051][T12869] tipc: Enabled bearer , priority 0 [ 230.866870][T12869] syzkaller0: MTU too low for tipc bearer [ 230.872623][T12869] tipc: Disabling bearer [ 230.924356][T12876] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.935116][T12876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2002'. [ 230.946788][T12876] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.477946][T12904] siw: device registration error -23 [ 232.467571][T12948] netlink: 81 bytes leftover after parsing attributes in process `syz.0.2023'. [ 232.481801][T12948] netlink: 'syz.0.2023': attribute type 2 has an invalid length. [ 232.500051][T12948] netlink: 119 bytes leftover after parsing attributes in process `syz.0.2023'. [ 232.642385][T12960] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.2027'. [ 232.978468][T12981] netlink: 'syz.5.2033': attribute type 3 has an invalid length. [ 233.195377][T12996] tipc: Started in network mode [ 233.212713][T12996] tipc: Node identity ac14140f, cluster identity 4711 [ 233.240085][T12996] tipc: New replicast peer: 255.255.255.255 [ 233.266219][T12996] tipc: Enabled bearer , priority 10 [ 233.424222][T13013] netlink: 'syz.5.2045': attribute type 1 has an invalid length. [ 233.559119][T13013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.086846][T13051] netlink: 'syz.2.2055': attribute type 1 has an invalid length. [ 234.131667][T13051] netlink: 'syz.2.2055': attribute type 2 has an invalid length. [ 234.224764][T13051] bond7: option all_slaves_active: invalid value (222) [ 234.244551][T13051] bond7 (unregistering): Released all slaves [ 234.247443][T13064] set match dimension is over the limit! [ 234.376201][ T24] tipc: Node number set to 2886997007 [ 234.487965][T13079] openvswitch: netlink: Flow key attr not present in new flow. [ 234.855509][T13072] wg1 speed is unknown, defaulting to 1000 [ 234.881146][T13099] IPVS: length: 238 != 8 [ 235.296235][T13128] IPv6: NLM_F_CREATE should be specified when creating new route [ 235.328435][T13128] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 235.336034][T13128] IPv6: NLM_F_CREATE should be set when creating new route [ 235.358096][T13132] __nla_validate_parse: 7 callbacks suppressed [ 235.358114][T13132] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2074'. [ 235.424336][T13135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2075'. [ 235.523491][T13140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2078'. [ 235.564321][T13140] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2078'. [ 235.611259][T13140] netlink: 'syz.4.2078': attribute type 6 has an invalid length. [ 235.641990][T13149] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2078'. [ 235.652933][T13147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2080'. [ 235.672175][T13140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2078'. [ 235.682996][T13140] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2078'. [ 235.696840][T13140] netlink: 'syz.4.2078': attribute type 6 has an invalid length. [ 235.743495][T13154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2082'. [ 235.771968][T13154] vet0_virt_wifi: left allmulticast mode [ 235.781915][T13154] bridge0: port 3(vet0_virt_wifi) entered disabled state [ 235.831880][T13154] bridge_slave_1: left allmulticast mode [ 235.857856][T13154] bridge_slave_1: left promiscuous mode [ 235.863676][T13154] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.918041][T13154] bridge_slave_0: left promiscuous mode [ 235.934456][T13154] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.054051][T13174] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2087'. [ 236.586229][T13206] netlink: 'syz.2.2094': attribute type 5 has an invalid length. [ 236.631590][T13199] can: request_module (can-proto-5) failed. [ 237.578487][ T5891] IPVS: starting estimator thread 0... [ 237.676044][T13271] IPVS: using max 30 ests per chain, 72000 per kthread [ 237.769049][T13284] netlink: 'syz.2.2112': attribute type 21 has an invalid length. [ 238.353813][T13316] netlink: 'syz.2.2123': attribute type 8 has an invalid length. [ 238.830252][T13353] netlink: 'syz.4.2134': attribute type 24 has an invalid length. [ 238.970661][T13361] syzkaller0: entered promiscuous mode [ 238.982053][T13361] syzkaller0: entered allmulticast mode [ 239.172400][T13371] netlink: 'syz.2.2140': attribute type 29 has an invalid length. [ 239.203974][T13371] netlink: 'syz.2.2140': attribute type 29 has an invalid length. [ 239.719458][T13401] tipc: Enabled bearer , priority 0 [ 239.768532][T13400] tipc: Disabling bearer [ 239.978460][T13419] netlink: 'syz.2.2156': attribute type 1 has an invalid length. [ 240.009654][T13421] netlink: 'syz.0.2158': attribute type 11 has an invalid length. [ 240.028600][T13421] netlink: 'syz.0.2158': attribute type 11 has an invalid length. [ 240.214436][T13430] netlink: 'syz.5.2161': attribute type 7 has an invalid length. [ 240.567419][T13449] __nla_validate_parse: 18 callbacks suppressed [ 240.567439][T13449] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2168'. [ 240.623005][T13450] tap0: tun_chr_ioctl cmd 1074025672 [ 240.646250][T13450] tap0: ignored: set checksum disabled [ 240.672531][T13449] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2168'. [ 240.964455][T13470] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 241.274859][T13486] 8021q: adding VLAN 0 to HW filter on device bond8 [ 241.384255][ T5847] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 241.397733][ T5847] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 241.440853][ T5847] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 241.449830][ T5847] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 241.457614][ T5847] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 241.460161][T13499] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2179'. [ 241.493522][T13496] veth0: entered promiscuous mode [ 242.209659][T13488] veth0: left promiscuous mode [ 242.217938][T13531] netlink: 'syz.4.2186': attribute type 3 has an invalid length. [ 242.246379][T13531] netlink: 'syz.4.2186': attribute type 3 has an invalid length. [ 242.446716][T13539] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2187'. [ 242.463254][T13540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2189'. [ 242.494287][T13539] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2187'. [ 242.547024][T13544] openvswitch: netlink: Duplicate or invalid key (type 0). [ 242.586403][T13544] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.642982][T13495] wg1 speed is unknown, defaulting to 1000 [ 242.720678][T13550] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2191'. [ 242.776094][T13553] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2192'. [ 242.833771][T13554] tipc: Enabled bearer , priority 0 [ 242.874908][T13554] syzkaller0: entered promiscuous mode [ 242.896295][T13554] syzkaller0: entered allmulticast mode [ 242.931101][T13563] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2194'. [ 242.946100][T13563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2194'. [ 243.005056][T13556] tipc: Resetting bearer [ 243.047694][T13551] tipc: Resetting bearer [ 243.135810][T13551] tipc: Disabling bearer [ 243.227328][T13574] pim6reg: entered allmulticast mode [ 243.237122][T13577] pim6reg: left allmulticast mode [ 243.555093][T13592] netlink: 'syz.5.2203': attribute type 30 has an invalid length. [ 243.571272][ T5148] Bluetooth: hci7: command tx timeout [ 243.607669][T13593] netlink: 'syz.5.2203': attribute type 30 has an invalid length. [ 243.922185][T13617] IPv6: sit2: Disabled Multicast RS [ 243.943291][T13617] sit2: entered allmulticast mode [ 244.042055][T13495] chnl_net:caif_netlink_parms(): no params data found [ 244.539641][T13495] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.548250][T13495] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.557243][T13495] bridge_slave_0: entered allmulticast mode [ 244.571548][T13495] bridge_slave_0: entered promiscuous mode [ 244.582442][T13649] netlink: 'syz.4.2217': attribute type 21 has an invalid length. [ 244.618456][T13649] netlink: 'syz.4.2217': attribute type 22 has an invalid length. [ 244.628368][T13649] netlink: 'syz.4.2217': attribute type 23 has an invalid length. [ 244.637928][T13649] netlink: 'syz.4.2217': attribute type 25 has an invalid length. [ 244.675464][T13495] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.691899][T13495] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.702757][T13495] bridge_slave_1: entered allmulticast mode [ 244.711266][T13495] bridge_slave_1: entered promiscuous mode [ 244.728428][T13668] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 2, id = 0 [ 244.879802][T13664] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 244.902558][T13495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.917189][T13495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.100224][T13495] team0: Port device team_slave_0 added [ 245.124481][T13495] team0: Port device team_slave_1 added [ 245.262378][T13495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.279228][T13495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 245.343325][T13495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.399141][T13495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.440392][T13495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 245.495950][T13495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.644389][T13706] netlink: 'syz.4.2234': attribute type 14 has an invalid length. [ 245.656678][ T5847] Bluetooth: hci7: command tx timeout [ 245.747751][T13495] hsr_slave_0: entered promiscuous mode [ 245.754802][T13495] hsr_slave_1: entered promiscuous mode [ 245.765148][T13495] debugfs: 'hsr0' already exists in 'hsr' [ 245.771426][T13495] Cannot create hsr debugfs directory [ 245.890270][T13725] __nla_validate_parse: 10 callbacks suppressed [ 245.890287][T13725] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2239'. [ 246.094346][T13730] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2241'. [ 246.318257][T13738] netlink: 'syz.5.2243': attribute type 11 has an invalid length. [ 246.370429][T13742] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2244'. [ 246.400623][T13495] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 246.477743][T13747] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 246.482672][T13746] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2247'. [ 246.484544][T13747] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 246.503536][T13742] bridge_slave_0: Caught tx_queue_len zero misconfig [ 246.529827][T13495] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 246.553345][T13495] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 246.573098][T13495] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 246.588465][T13750] netlink: 'syz.0.2248': attribute type 13 has an invalid length. [ 246.622096][T13750] netlink: 'syz.0.2248': attribute type 27 has an invalid length. [ 246.663781][T13756] netlink: 'syz.5.2249': attribute type 10 has an invalid length. [ 246.701304][T13756] team0: Device ipvlan1 failed to register rx_handler [ 247.039526][T13495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.050470][T13774] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 247.114172][T13495] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.129792][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.136998][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.255170][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.262407][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.340383][T13794] xt_ecn: cannot match TCP bits for non-tcp packets [ 247.737916][ T5847] Bluetooth: hci7: command tx timeout [ 247.860653][T13826] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 247.906219][T13828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2264'. [ 247.930467][T13828] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2264'. [ 247.933928][T13495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.001959][T13833] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2265'. [ 248.011182][T13833] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2265'. [ 248.357710][T13495] veth0_vlan: entered promiscuous mode [ 248.380424][T13495] veth1_vlan: entered promiscuous mode [ 248.433834][T13495] veth0_macvtap: entered promiscuous mode [ 248.466690][T13495] veth1_macvtap: entered promiscuous mode [ 248.501058][T13853] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2270'. [ 248.518022][T13495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.533911][T13495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.572709][ T1159] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.602580][ T1159] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.641746][ T49] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.675219][ T49] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.801282][T13865] netlink: 'syz.5.2275': attribute type 1 has an invalid length. [ 248.882987][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.911578][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.919456][T13870] netlink: 388 bytes leftover after parsing attributes in process `syz.0.2276'. [ 249.002984][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.022992][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.807837][ T5847] Bluetooth: hci7: command tx timeout [ 249.898832][T13925] block nbd2: Unsupported socket: should be TCP or UNIX. [ 249.963945][T13930] sctp: [Deprecated]: syz.0.2291 (pid 13930) Use of int in max_burst socket option deprecated. [ 249.963945][T13930] Use struct sctp_assoc_value instead [ 250.375093][T13947] netlink: 'syz.5.2292': attribute type 58 has an invalid length. [ 250.393963][T13943] netlink: 'syz.7.2293': attribute type 29 has an invalid length. [ 250.406662][T13943] netlink: 'syz.7.2293': attribute type 29 has an invalid length. [ 250.930275][T13980] team0: Caught tx_queue_len zero misconfig [ 250.951588][T13979] lo: entered promiscuous mode [ 250.982775][T13979] tunl0: entered promiscuous mode [ 251.013582][T13979] gre0: entered promiscuous mode [ 251.080267][T13979] gretap0: entered promiscuous mode [ 251.090901][T13979] erspan0: entered promiscuous mode [ 251.097442][T13979] erspan0: left allmulticast mode [ 251.103704][T13979] ip_vti0: entered promiscuous mode [ 251.133344][T13993] __nla_validate_parse: 8 callbacks suppressed [ 251.133361][T13993] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2308'. [ 251.284693][T13998] netlink: 'syz.0.2310': attribute type 8 has an invalid length. [ 251.290887][T14000] sctp: [Deprecated]: syz.4.2309 (pid 14000) Use of struct sctp_assoc_value in delayed_ack socket option. [ 251.290887][T14000] Use struct sctp_sack_info instead [ 251.325784][T14001] netlink: 'syz.2.2312': attribute type 10 has an invalid length. [ 251.334461][T14001] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 251.382940][T14005] netlink: 2 bytes leftover after parsing attributes in process `syz.7.2313'. [ 251.405372][T14008] sctp: [Deprecated]: syz.4.2309 (pid 14008) Use of int in maxseg socket option. [ 251.405372][T14008] Use struct sctp_assoc_value instead [ 251.808921][T14028] bridge0: port 3(veth0_to_bridge) entered blocking state [ 251.840230][T14028] bridge0: port 3(veth0_to_bridge) entered disabled state [ 251.874910][T14028] veth0_to_bridge: entered allmulticast mode [ 251.918382][T14028] veth0_to_bridge: entered promiscuous mode [ 251.974967][T14028] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 251.981617][T14035] netlink: 'syz.2.2321': attribute type 4 has an invalid length. [ 252.026848][T14028] bridge0: port 3(veth0_to_bridge) entered blocking state [ 252.034461][T14028] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 252.047346][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 252.059749][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 252.072210][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 252.084590][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 252.096958][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 252.109347][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 252.121785][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 252.134150][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 252.146554][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 252.221087][T14044] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2323'. [ 252.231343][T14044] ksmbd: Unknown IPC event: 3, ignore. [ 252.246375][T14044] gre3: entered promiscuous mode [ 252.255661][T14044] gre3: entered allmulticast mode [ 252.279362][T14041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2321'. [ 252.525769][T14052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2326'. [ 252.857093][ C0] net_ratelimit: 2009 callbacks suppressed [ 252.857112][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.875424][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 252.881973][T14039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2321'. [ 252.887793][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.909796][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.916135][T14045] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 252.922217][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 252.949388][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.962775][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.975248][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 252.987774][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.021610][T14052] hsr_slave_0: left promiscuous mode [ 253.081611][T14052] hsr_slave_1: left promiscuous mode [ 253.170480][T14056] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2328'. [ 253.612492][ T5939] lo speed is unknown, defaulting to 1000 [ 253.641684][ T5939] sz1: Port: 1 Link DOWN [ 253.753673][T14056] team0: Device gtp0 is of different type [ 254.109982][T14064] tipc: Started in network mode [ 254.138142][T14064] tipc: Node identity 2e623dc3e688, cluster identity 4711 [ 254.170430][T14064] tipc: Enabled bearer , priority 0 [ 254.187462][T14065] syzkaller0: entered promiscuous mode [ 254.203512][T14065] syzkaller0: entered allmulticast mode [ 254.460757][T14074] tipc: Resetting bearer [ 254.631028][T14074] tipc: Disabling bearer [ 254.665272][T14095] IPVS: length: 90 != 24 [ 254.694696][T14091] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2335'. [ 255.034036][T14099] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2337'. [ 255.378938][T14115] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2340'. [ 255.739593][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.747588][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.977207][T14114] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 256.041821][T14114] syzkaller0: Linktype set failed because interface is up [ 256.595206][T14153] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2347'. [ 257.066043][T14158] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2347'. [ 257.573938][T14175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.868281][ C0] net_ratelimit: 8395 callbacks suppressed [ 257.868301][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:9b:0b:20:26:39, vlan:0) [ 257.886559][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.899835][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.912180][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 257.924430][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:9b:0b:20:26:39, vlan:0) [ 257.936806][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.949553][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.961912][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 257.974139][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:9b:0b:20:26:39, vlan:0) [ 257.986509][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.234525][T14182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2353'. [ 258.252364][T14182] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2353'. [ 258.294895][T14182] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2353'. [ 260.566211][T14184] netlink: 'syz.4.2354': attribute type 12 has an invalid length. [ 260.574057][T14184] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2354'. [ 260.876886][T14193] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2357'. [ 260.956252][T14198] Bluetooth: MGMT ver 1.23 [ 260.997012][T14193] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2357'. [ 261.007699][ T62] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.076051][ T62] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.084789][ T62] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.096830][T14197] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 261.175153][ T62] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.537118][T14212] IPVS: Error connecting to the multicast addr [ 261.587274][T14217] sctp: [Deprecated]: syz.2.2364 (pid 14217) Use of int in max_burst socket option deprecated. [ 261.587274][T14217] Use struct sctp_assoc_value instead [ 262.007569][T14237] netlink: 'syz.5.2367': attribute type 10 has an invalid length. [ 262.269390][T14242] netlink: 'syz.7.2370': attribute type 1 has an invalid length. [ 262.876118][ C0] net_ratelimit: 9979 callbacks suppressed [ 262.876140][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 262.894392][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:9b:0b:20:26:39, vlan:0) [ 262.906778][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.920799][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.934228][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:9b:0b:20:26:39, vlan:0) [ 262.946664][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.959070][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.971487][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 262.983862][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 262.996326][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:9b:0b:20:26:39, vlan:0) [ 263.323777][T14274] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2376'. [ 263.404576][T14274] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2376'. [ 263.973614][T14288] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2380'. [ 264.108815][T14288] netlink: 'syz.2.2380': attribute type 11 has an invalid length. [ 264.257295][T14294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2382'. [ 264.357202][T14302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2382'. [ 264.409113][T14301] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2384'. [ 264.454469][T14294] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2382'. [ 264.494410][T14301] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2384'. [ 264.585081][T14306] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2385'. [ 264.693493][T14306] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 266.719606][T14352] netlink: 'syz.5.2397': attribute type 2 has an invalid length. [ 266.826359][T14352] netlink: 'syz.5.2397': attribute type 2 has an invalid length. [ 266.914760][T14352] netlink: 'syz.5.2397': attribute type 1 has an invalid length. [ 266.987125][T14352] netlink: 'syz.5.2397': attribute type 2 has an invalid length. [ 267.055332][T14352] netlink: 'syz.5.2397': attribute type 2 has an invalid length. [ 267.104914][T14352] netlink: 'syz.5.2397': attribute type 1 has an invalid length. [ 267.472344][T14336] bond0: (slave team0): Releasing backup interface [ 267.571225][T14336] team0 (unregistering): Port device team_slave_0 removed [ 267.720756][T14336] team0 (unregistering): Port device team_slave_1 removed [ 267.886520][ C0] net_ratelimit: 8753 callbacks suppressed [ 267.886541][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.905700][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:9b:0b:20:26:39, vlan:0) [ 267.918095][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.930516][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.942937][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 267.955282][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 267.967729][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:9b:0b:20:26:39, vlan:0) [ 267.980139][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.993447][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.006776][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:9b:0b:20:26:39, vlan:0) [ 268.512136][T14383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2405'. [ 268.636748][T14383] veth0_macvtap: entered promiscuous mode [ 268.663346][T14383] macvtap1: entered allmulticast mode [ 268.697921][T14383] veth0_macvtap: entered allmulticast mode [ 269.322844][T14400] xt_CT: You must specify a L4 protocol and not use inversions on it [ 269.727038][T14412] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2412'. [ 269.766926][T14413] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2414'. [ 269.856826][T14414] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2414'. [ 269.927787][T14414] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2414'. [ 269.986066][T14414] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2414'. [ 270.864904][T14437] netlink: 212356 bytes leftover after parsing attributes in process `syz.0.2422'. [ 271.355019][T14454] x_tables: unsorted entry at hook 3 [ 271.362786][T14453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2427'. [ 271.711586][T14460] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2429'. [ 271.823411][T14462] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2429'. [ 271.849570][T14458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.960049][T14466] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 272.896167][ C0] net_ratelimit: 8353 callbacks suppressed [ 272.896187][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:9b:0b:20:26:39, vlan:0) [ 272.914466][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.926947][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.939418][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 272.951757][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 272.964159][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:9b:0b:20:26:39, vlan:0) [ 272.976459][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.989438][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.002708][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:9b:0b:20:26:39, vlan:0) [ 273.016278][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.315851][ C0] sched: DL replenish lagged too much [ 277.386273][T14463] __nla_validate_parse: 3 callbacks suppressed [ 277.386292][T14463] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2430'. [ 277.760247][T14480] bond2: option resend_igmp: invalid value (32767) [ 277.795343][T14480] bond2: option resend_igmp: allowed values 0 - 255 [ 277.844260][T14497] netlink: 'syz.7.2436': attribute type 1 has an invalid length. [ 277.887050][T14480] bond2 (unregistering): Released all slaves [ 277.906056][ C0] net_ratelimit: 14916 callbacks suppressed [ 277.906073][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 277.924354][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 277.936999][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:9b:0b:20:26:39, vlan:0) [ 277.939417][T14502] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2436'. [ 277.949391][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 277.970413][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.983685][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.997069][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:9b:0b:20:26:39, vlan:0) [ 278.009483][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.021945][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.034227][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.062457][T14483] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 278.389804][T14511] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2441'. [ 278.411451][T14504] veth3: entered promiscuous mode [ 278.643966][T14517] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2441'. [ 279.126331][T14529] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 279.548327][T14535] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2445'. [ 279.728965][T14540] syzkaller0: entered promiscuous mode [ 279.816207][T14540] syzkaller0: entered allmulticast mode [ 280.210090][T14559] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2451'. [ 280.677385][T14576] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2455'. [ 281.100479][T14593] xt_TPROXY: Can be used only with -p tcp or -p udp [ 281.591209][T14598] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2461'. [ 281.737176][T14598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2461'. [ 281.847446][T14598] : entered promiscuous mode [ 282.385979][T14619] netlink: 'syz.7.2468': attribute type 64 has an invalid length. [ 282.429141][T14619] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2468'. [ 282.916088][ C0] net_ratelimit: 8061 callbacks suppressed [ 282.916109][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.935671][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.948577][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:9b:0b:20:26:39, vlan:0) [ 282.960955][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.973429][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:9b:0b:20:26:39, vlan:0) [ 282.985940][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.998407][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.010915][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.023349][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 283.037072][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 283.928247][T14660] : renamed from wg2 (while UP) [ 284.072941][T14662] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2483'. [ 284.170737][T14669] IPVS: set_ctl: invalid protocol: 103 255.255.255.255:20001 [ 287.655609][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 287.675553][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 287.695518][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 287.703740][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 287.712333][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 287.926120][ C0] net_ratelimit: 8236 callbacks suppressed [ 287.926137][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:9b:0b:20:26:39, vlan:0) [ 287.944387][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.956822][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:9b:0b:20:26:39, vlan:0) [ 287.969303][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.981738][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.994518][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.006953][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 288.020390][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 288.032889][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:9b:0b:20:26:39, vlan:0) [ 288.045343][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 288.396436][ T5148] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 288.415371][ T5148] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 288.423841][ T5148] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 288.434366][ T5148] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 288.442515][ T5148] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 288.601701][T14726] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2501'. [ 288.687158][ T5838] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 288.702191][ T5838] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 288.710702][ T5838] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 288.726847][ T5838] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 288.734919][ T5838] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 288.846938][T14726] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.856426][T14726] team0: Cannot enslave team device to itself [ 288.887972][T14730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2501'. [ 289.246156][ T5838] Bluetooth: hci6: command 0x0405 tx timeout [ 289.268946][T14737] xt_CT: You must specify a L4 protocol and not use inversions on it [ 289.303187][T14709] wg1 speed is unknown, defaulting to 1000 [ 289.553421][T14742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2507'. [ 289.603790][T14742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2507'. [ 289.713018][T14742] syzkaller0: entered promiscuous mode [ 289.726354][T14742] syzkaller0: entered allmulticast mode [ 289.806303][ T5847] Bluetooth: hci1: command tx timeout [ 290.433486][T14722] wg1 speed is unknown, defaulting to 1000 [ 290.526772][ T5847] Bluetooth: hci2: command tx timeout [ 290.656289][T14763] xt_CT: You must specify a L4 protocol and not use inversions on it [ 290.669540][T14709] chnl_net:caif_netlink_parms(): no params data found [ 290.766454][ T5847] Bluetooth: hci7: command tx timeout [ 291.047876][T14728] wg1 speed is unknown, defaulting to 1000 [ 291.340757][T14709] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.389074][T14709] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.416373][T14709] bridge_slave_0: entered allmulticast mode [ 291.446732][T14709] bridge_slave_0: entered promiscuous mode [ 291.503028][T14709] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.520848][T14709] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.538160][T14709] bridge_slave_1: entered allmulticast mode [ 291.570070][T14709] bridge_slave_1: entered promiscuous mode [ 291.886133][ T5847] Bluetooth: hci1: command tx timeout [ 292.606418][ T5847] Bluetooth: hci2: command tx timeout [ 292.850804][ T5838] Bluetooth: hci7: command tx timeout [ 292.936613][ C0] net_ratelimit: 9961 callbacks suppressed [ 292.936632][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.955351][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:9b:0b:20:26:39, vlan:0) [ 292.967763][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.980102][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:9b:0b:20:26:39, vlan:0) [ 292.992372][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.004715][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.016905][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.029211][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 293.041943][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 293.054294][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:9b:0b:20:26:39, vlan:0) [ 293.119564][T14709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.229287][T14709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.261977][T14780] netlink: 'syz.2.2516': attribute type 2 has an invalid length. [ 293.293590][T14780] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2516'. [ 293.607836][T14709] team0: Port device team_slave_0 added [ 293.634635][T14722] chnl_net:caif_netlink_parms(): no params data found [ 293.658051][T14784] tipc: Enabled bearer , priority 0 [ 293.668973][T14709] team0: Port device team_slave_1 added [ 293.740262][T14784] syzkaller0: entered promiscuous mode [ 293.756361][T14784] syzkaller0: entered allmulticast mode [ 293.926717][T14709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.938383][T14709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.967482][ T5847] Bluetooth: hci1: command tx timeout [ 293.975051][T14790] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2519'. [ 293.988789][T14709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.121692][T14783] tipc: Resetting bearer [ 294.686074][ T5847] Bluetooth: hci2: command tx timeout [ 294.926048][ T5847] Bluetooth: hci7: command tx timeout [ 295.522870][T14783] tipc: Disabling bearer [ 295.558071][T14709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.565193][T14709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.595435][T14709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.817211][T14728] chnl_net:caif_netlink_parms(): no params data found [ 296.030503][T14709] hsr_slave_0: entered promiscuous mode [ 296.038975][T14709] hsr_slave_1: entered promiscuous mode [ 296.045496][T14709] debugfs: 'hsr0' already exists in 'hsr' [ 296.052587][ T5847] Bluetooth: hci1: command tx timeout [ 296.065345][T14709] Cannot create hsr debugfs directory [ 296.129087][T14722] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.140480][T14722] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.148697][T14722] bridge_slave_0: entered allmulticast mode [ 296.157493][T14722] bridge_slave_0: entered promiscuous mode [ 296.337042][T14722] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.344528][T14722] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.352518][T14722] bridge_slave_1: entered allmulticast mode [ 296.362721][T14722] bridge_slave_1: entered promiscuous mode [ 296.429026][T14811] netlink: 'syz.2.2523': attribute type 1 has an invalid length. [ 296.650429][T14722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.766400][ T5847] Bluetooth: hci2: command tx timeout [ 296.788430][T14722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.955599][T14728] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.974926][T14728] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.998943][T14728] bridge_slave_0: entered allmulticast mode [ 297.006539][ T5847] Bluetooth: hci7: command tx timeout [ 297.023511][T14728] bridge_slave_0: entered promiscuous mode [ 297.119871][T14722] team0: Port device team_slave_0 added [ 297.194711][T14728] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.214449][T14728] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.243992][T14728] bridge_slave_1: entered allmulticast mode [ 297.284076][T14728] bridge_slave_1: entered promiscuous mode [ 297.365443][T14722] team0: Port device team_slave_1 added [ 297.441048][T14830] sctp: [Deprecated]: syz.5.2528 (pid 14830) Use of int in max_burst socket option. [ 297.441048][T14830] Use struct sctp_assoc_value instead [ 297.613054][T14728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.739485][T14722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.748636][T14833] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2530'. [ 297.766062][T14722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 297.874302][T14722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.946122][ C0] net_ratelimit: 10915 callbacks suppressed [ 297.946137][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.964428][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.976831][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 297.990111][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 298.002514][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:9b:0b:20:26:39, vlan:0) [ 298.014914][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 298.027313][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.040626][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.053924][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:9b:0b:20:26:39, vlan:0) [ 298.066294][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.120224][T14728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.163273][T14842] can: request_module (can-proto-0) failed. [ 298.185059][T14722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.200005][T14722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 298.238413][T14722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.524062][T14728] team0: Port device team_slave_0 added [ 298.645301][T14850] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2534'. [ 298.702405][T14728] team0: Port device team_slave_1 added [ 298.768075][ T5847] Bluetooth: hci4: command 0x0406 tx timeout [ 298.913208][T14722] hsr_slave_0: entered promiscuous mode [ 298.948844][T14722] hsr_slave_1: entered promiscuous mode [ 298.960931][T14722] debugfs: 'hsr0' already exists in 'hsr' [ 298.969146][T14722] Cannot create hsr debugfs directory [ 299.021166][T14728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.028948][T14728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.061148][T14728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.112379][T14855] bridge18: the hash_elasticity option has been deprecated and is always 16 [ 299.144857][T14728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.183610][T14728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.241456][T14728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.467441][T14863] netlink: 'syz.2.2539': attribute type 8 has an invalid length. [ 299.832910][T14728] hsr_slave_0: entered promiscuous mode [ 299.859445][T14728] hsr_slave_1: entered promiscuous mode [ 299.892074][T14728] debugfs: 'hsr0' already exists in 'hsr' [ 299.907182][T14728] Cannot create hsr debugfs directory [ 300.121135][T14875] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2542'. [ 300.135139][T14709] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 300.274288][T14709] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 300.308463][T14709] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 300.347198][T14709] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 300.774105][T14722] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.789874][T14722] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.830737][T14886] batman_adv: batadv0: Adding interface: dummy0 [ 300.839553][T14886] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.869014][T14886] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 301.019333][T14722] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.039972][T14722] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.422895][T14722] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.473445][T14722] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.894814][T14913] netlink: 'syz.5.2548': attribute type 5 has an invalid length. [ 301.931646][T14722] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.960860][T14722] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.071378][T14709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.199714][T14709] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.275748][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.282987][ T4266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.404541][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.411766][ T4266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.669098][T14709] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 302.919456][T14932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2553'. [ 302.956061][ C0] net_ratelimit: 9001 callbacks suppressed [ 302.956078][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.974291][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.984194][T14932] netlink: 'syz.2.2553': attribute type 22 has an invalid length. [ 302.986857][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.006837][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 303.019910][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 303.032315][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:9b:0b:20:26:39, vlan:0) [ 303.044716][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 303.057108][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.064045][T14932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2553'. [ 303.070291][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.091213][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:9b:0b:20:26:39, vlan:0) [ 303.097593][T14722] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 303.219471][T14722] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 303.279867][ T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.303402][T14722] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 303.389442][ T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.431066][T14722] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 303.497676][ T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.534434][ T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.723415][T14728] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 303.841575][T14709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.918757][T14728] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 303.936871][T14951] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2556'. [ 304.009517][T14728] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 304.067300][T14728] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 304.625517][T14722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.760451][T14722] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.844676][T14974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2561'. [ 304.899944][T11383] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.907184][T11383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.060492][T14974] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 305.097968][T14974] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 305.117451][T14974] gretap2: entered promiscuous mode [ 305.136359][T14974] gretap2: entered allmulticast mode [ 305.149048][T11383] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.156275][T11383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.225776][T14977] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2562'. [ 305.525782][T14709] veth0_vlan: entered promiscuous mode [ 305.593558][T14728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.962117][T14709] veth1_vlan: entered promiscuous mode [ 306.063227][T14728] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.200824][T11382] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.208031][T11382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.336459][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.343624][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.419387][T15005] netlink: 516 bytes leftover after parsing attributes in process `syz.2.2568'. [ 306.514028][T14709] veth0_macvtap: entered promiscuous mode [ 306.558713][T15005] x_tables: duplicate underflow at hook 1 [ 306.579079][T14709] veth1_macvtap: entered promiscuous mode [ 306.589866][T15005] xt_NFQUEUE: number of total queues is 0 [ 306.782510][T14709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.830457][T14709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.889694][T14722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.901644][ T1159] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.915328][ T1159] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.072652][ T1159] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.112316][ T1159] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.237215][T15013] netlink: 'syz.5.2571': attribute type 10 has an invalid length. [ 307.622957][T14722] veth0_vlan: entered promiscuous mode [ 307.688605][T15016] lo: Master is either lo or non-ether device [ 307.798182][ T8339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.890635][ T8339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.924350][T14722] veth1_vlan: entered promiscuous mode [ 307.966528][ C0] net_ratelimit: 9241 callbacks suppressed [ 307.966548][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.984780][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.997194][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 308.009609][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:9b:0b:20:26:39, vlan:0) [ 308.022194][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 308.025373][ T4266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.034550][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.035293][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 308.067244][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.080515][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:9b:0b:20:26:39, vlan:0) [ 308.092920][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.114108][ T4266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.158298][T14728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.865449][T14722] veth0_macvtap: entered promiscuous mode [ 308.973309][T14722] veth1_macvtap: entered promiscuous mode [ 309.007561][ T5847] Bluetooth: hci5: command 0x0405 tx timeout [ 309.102364][T15040] netlink: 7 bytes leftover after parsing attributes in process `syz.5.2577'. [ 309.144276][T14722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.223939][T14722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.403418][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.473835][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.541719][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.615349][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.651992][T15054] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2579'. [ 310.084933][ T8041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.162277][ T8041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.375493][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.441041][T15068] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2583'. [ 310.486501][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.630472][T14728] veth0_vlan: entered promiscuous mode [ 310.739022][T14728] veth1_vlan: entered promiscuous mode [ 310.988256][T14728] veth0_macvtap: entered promiscuous mode [ 311.231493][T14728] veth1_macvtap: entered promiscuous mode [ 311.412352][T15084] dvmrp0: entered allmulticast mode [ 311.609195][T14728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.902350][T11285] IPVS: starting estimator thread 0... [ 311.949059][T14728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.030672][ T8041] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.051771][T15105] IPVS: using max 27 ests per chain, 64800 per kthread [ 312.100747][ T8041] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.258452][ T8041] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.309550][ T8041] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.553683][T15115] netlink: 'syz.8.2595': attribute type 2 has an invalid length. [ 312.630027][T15115] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2595'. [ 312.688290][ T31] INFO: task syz.1.1175:9950 blocked for more than 143 seconds. [ 312.699321][ T31] Not tainted syzkaller #0 [ 312.704289][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 312.724953][T15124] xt_ecn: cannot match TCP bits for non-tcp packets SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 312.780106][ T31] task:syz.1.1175 state:D stack:23608 pid:9950 tgid:9949 ppid:5841 task_flags:0x400140 flags:0x00080003 [ 312.858869][ T31] Call Trace: [ 312.884585][ T31] [ 312.972421][ T31] __schedule+0x1798/0x4cc0 [ 312.977477][ C0] net_ratelimit: 8829 callbacks suppressed [ 312.977496][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.977810][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.978287][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:9b:0b:20:26:39, vlan:0) [ 313.020163][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.032618][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 313.039108][ T31] ? validate_chain+0x897/0x2140 [ 313.046000][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.061895][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.074329][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 313.086749][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:9b:0b:20:26:39, vlan:0) [ 313.099154][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 313.198389][ T31] ? __lock_acquire+0xab9/0xd20 [ 313.203297][ T31] ? __pfx___schedule+0x10/0x10 [ 313.298203][ T31] ? schedule+0x91/0x360 [ 313.302506][ T31] schedule+0x165/0x360 [ 313.340043][ T31] schedule_timeout+0x9a/0x270 [ 313.344895][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 313.386346][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 313.391611][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 313.436399][ T31] ? wait_for_completion+0x267/0x5d0 [ 313.441743][ T31] wait_for_completion+0x2bf/0x5d0 [ 313.453838][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 313.460147][ T31] ? remove_client_context+0x19c/0x1e0 [ 313.465637][ T31] disable_device+0x1c6/0x320 [ 313.473765][ T31] ? __pfx_disable_device+0x10/0x10 [ 313.479352][ T31] __ib_unregister_device+0x2cb/0x3f0 [ 313.484750][ T31] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 313.495688][ T31] ib_unregister_device_and_put+0xb8/0xf0 [ 313.502039][ T31] nldev_dellink+0x2d1/0x320 [ 313.510563][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 313.515808][ T31] ? apparmor_capable+0x137/0x1b0 [ 313.521603][ T31] ? bpf_lsm_capable+0x9/0x20 [ 313.526893][ T31] ? security_capable+0x7e/0x2e0 [ 313.531859][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 313.540508][ T31] rdma_nl_rcv+0x6ae/0x980 [ 313.544988][ T31] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 313.550787][ T31] ? __lock_acquire+0xab9/0xd20 [ 313.555688][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 313.562138][ T31] netlink_unicast+0x82f/0x9e0 [ 313.568610][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 313.574878][ T31] ? netlink_sendmsg+0x642/0xb30 [ 313.582372][ T31] ? skb_put+0x11b/0x210 [ 313.587119][ T31] netlink_sendmsg+0x805/0xb30 [ 313.591913][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 313.603971][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 313.610197][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 313.615162][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 313.624475][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 313.630214][ T31] __sock_sendmsg+0x21c/0x270 [ 313.634913][ T31] ____sys_sendmsg+0x505/0x830 [ 313.642996][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 313.651108][ T31] ? import_iovec+0x74/0xa0 [ 313.655728][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 313.660902][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 313.667750][ T31] ? __fget_files+0x2a/0x420 [ 313.672358][ T31] ? __fget_files+0x3a0/0x420 [ 313.677544][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 313.682506][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 313.690625][ T31] ? do_syscall_64+0xbe/0xfa0 [ 313.695337][ T31] do_syscall_64+0xfa/0xfa0 [ 313.700727][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 313.709201][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.715374][ T31] ? clear_bhb_loop+0x60/0xb0 [ 313.720788][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.731522][ T31] RIP: 0033:0x7f4dc6f8f6c9 [ 313.736460][ T31] RSP: 002b:00007f4dc7dd4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 313.748708][ T31] RAX: ffffffffffffffda RBX: 00007f4dc71e5fa0 RCX: 00007f4dc6f8f6c9 [ 313.757590][ T31] RDX: 0000000020004018 RSI: 00002000000005c0 RDI: 0000000000000006 [ 313.765691][ T31] RBP: 00007f4dc7011f91 R08: 0000000000000000 R09: 0000000000000000 [ 313.775053][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 313.783396][ T31] R13: 00007f4dc71e6038 R14: 00007f4dc71e5fa0 R15: 00007fff3f7c4a58 [ 313.792200][ T31] [ 313.836385][ T31] [ 313.836385][ T31] Showing all locks held in the system: [ 313.946402][ T31] 4 locks held by kworker/0:0/9: [ 313.951375][ T31] 3 locks held by kworker/0:1/10: [ 313.986914][ T31] 4 locks held by kworker/u8:1/13: [ 313.992064][ T31] #0: ffff88801aedf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 314.038283][ T31] #1: ffffc90000127ba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 314.067263][ T31] #2: ffffffff8f2be970 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 314.086570][ T31] #3: ffff8880769ac700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 314.119479][ T31] 1 lock held by khungtaskd/31: [ 314.124379][ T31] #0: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 314.156057][ T31] 2 locks held by kworker/0:2/1211: [ 314.161298][ T31] 2 locks held by getty/5589: [ 314.175549][ T31] #0: ffff888033bc80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 314.209453][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 314.229315][ T31] 2 locks held by kworker/0:5/5891: [ 314.234550][ T31] 2 locks held by syz.1.1175/9950: [ 314.254671][ T31] #0: ffffffff99b658f8 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980 [ 314.276555][ T31] #1: ffff8880769ac700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 314.326275][ T31] 2 locks held by syz.3.1465/11012: [ 314.331514][ T31] #0: ffffffff8f2be970 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 314.386264][ T31] #1: ffff8880769ac700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 314.416864][ T31] 3 locks held by kworker/0:8/11278: [ 314.422189][ T31] 4 locks held by kworker/0:14/11294: [ 314.436308][ T31] 3 locks held by kworker/u8:13/11382: [ 314.441790][ T31] #0: ffff88814c82d148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 314.475254][ T31] #1: ffffc9001bf47ba0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 314.493118][ T31] #2: ffffffff8f2cb808 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 [ 314.503059][ T31] 2 locks held by syz.6.1929/12624: [ 314.508768][ T31] #0: ffffffff8f2be970 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 314.519249][ T31] #1: ffff8880769ac700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 314.535170][ T31] 3 locks held by syz-executor/14728: [ 314.541001][ T31] #0: ffffffff8f331690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 314.551600][ T31] #1: ffffffff8f3314a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 314.563369][ T31] #2: ffffffff8f2cb808 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_register_hw+0x3037/0x40d0 [ 314.573866][ T31] 2 locks held by syz.5.2594/15110: [ 314.587634][ T31] #0: ffffffff8f2cb808 (rtnl_mutex){+.+.}-{4:4}, at: ppp_release+0x87/0x1f0 [ 314.599679][ T31] #1: ffffffff8df43138 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 314.614494][ T31] 1 lock held by syz.2.2593/15117: [ 314.620139][ T31] #0: ffffffff8f2cb808 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x37a/0x1df0 [ 314.630348][ T31] 1 lock held by syz.2.2593/15120: [ 314.635466][ T31] #0: ffffffff8f2cb808 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 314.645646][ T31] 1 lock held by syz.2.2593/15126: [ 314.651143][ T31] #0: ffffffff8f2cb808 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 314.660570][ T31] 1 lock held by syz.2.2593/15128: [ 314.668708][ T31] #0: ffffffff8f2cb808 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 314.678122][ T31] 1 lock held by syz.1.2596/15122: [ 314.683331][ T31] #0: ffffffff8df43138 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 314.722365][ T31] [ 314.724729][ T31] ============================================= [ 314.724729][ T31] [ 314.789544][ T31] NMI backtrace for cpu 1 [ 314.789568][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 314.789588][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 314.789598][ T31] Call Trace: [ 314.789605][ T31] [ 314.789613][ T31] dump_stack_lvl+0x189/0x250 [ 314.789642][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 314.789665][ T31] ? __pfx__printk+0x10/0x10 [ 314.789694][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 314.789717][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 314.789739][ T31] ? __pfx__printk+0x10/0x10 [ 314.789761][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 314.789788][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 314.789810][ T31] watchdog+0xf60/0xfa0 [ 314.789832][ T31] ? watchdog+0x1e2/0xfa0 [ 314.789855][ T31] kthread+0x711/0x8a0 [ 314.789880][ T31] ? __pfx_watchdog+0x10/0x10 [ 314.789896][ T31] ? __pfx_kthread+0x10/0x10 [ 314.789918][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 314.789939][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 314.789959][ T31] ? __pfx_kthread+0x10/0x10 [ 314.789980][ T31] ret_from_fork+0x4bc/0x870 [ 314.790001][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 314.790026][ T31] ? __switch_to_asm+0x39/0x70 [ 314.790039][ T31] ? __switch_to_asm+0x33/0x70 [ 314.790052][ T31] ? __pfx_kthread+0x10/0x10 [ 314.790074][ T31] ret_from_fork_asm+0x1a/0x30 [ 314.790106][ T31] [ 314.790112][ T31] Sending NMI from CPU 1 to CPUs 0: [ 314.940543][ C0] NMI backtrace for cpu 0 [ 314.940571][ C0] CPU: 0 UID: 0 PID: 11278 Comm: kworker/0:8 Not tainted syzkaller #0 PREEMPT(full) [ 314.940589][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 314.940599][ C0] Workqueue: wg-kex-wg0 wg_packet_handshake_receive_worker [ 314.940622][ C0] RIP: 0010:__kasan_check_byte+0x7/0x40 [ 314.940639][ C0] Code: da fe ff ff 48 ff c8 49 89 c4 e9 cf fe ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 41 56 53 <48> 89 f3 49 89 fe e8 2e 15 00 00 84 c0 75 16 be 01 00 00 00 4c 89 [ 314.940652][ C0] RSP: 0018:ffffc90000006bc0 EFLAGS: 00000202 [ 314.940664][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: fcc02c91324d3800 [ 314.940674][ C0] RDX: 0000000000000000 RSI: ffffffff81738c62 RDI: ffffffff8df3d6a0 [ 314.940684][ C0] RBP: ffffffff81738c45 R08: 0000000000000000 R09: 0000000000000000 [ 314.940694][ C0] R10: ffffc90000006d98 R11: ffffffff81ac2ea0 R12: 0000000000000002 [ 314.940704][ C0] R13: ffffffff8df3d6a0 R14: 0000000000000000 R15: 0000000000000000 [ 314.940713][ C0] FS: 0000000000000000(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000 [ 314.940725][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 314.940735][ C0] CR2: 00007fbf897e7dac CR3: 000000000dd38000 CR4: 00000000003526f0 [ 314.940748][ C0] Call Trace: [ 314.940754][ C0] [ 314.940761][ C0] lock_acquire+0x8d/0x360 [ 314.940780][ C0] ? unwind_next_frame+0xa5/0x2390 [ 314.940796][ C0] ? wg_packet_handshake_receive_worker+0x629/0xfd0 [ 314.940812][ C0] ? unwind_next_frame+0xa5/0x2390 [ 314.940827][ C0] unwind_next_frame+0xc2/0x2390 [ 314.940842][ C0] ? unwind_next_frame+0xa5/0x2390 [ 314.940859][ C0] ? unwind_next_frame+0xa5/0x2390 [ 314.940875][ C0] ? wg_packet_send_handshake_response+0xf6/0x2d0 [ 314.940892][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 314.940911][ C0] arch_stack_walk+0x11c/0x150 [ 314.940930][ C0] ? wg_packet_handshake_receive_worker+0x629/0xfd0 [ 314.940948][ C0] stack_trace_save+0x9c/0xe0 [ 314.940965][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 314.940985][ C0] ? ip6_rcv_finish+0x29e/0x2e0 [ 314.941005][ C0] kasan_save_track+0x3e/0x80 [ 314.941023][ C0] ? kasan_save_track+0x3e/0x80 [ 314.941040][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 314.941057][ C0] ? kmem_cache_alloc_noprof+0x367/0x6e0 [ 314.941074][ C0] ? skb_clone+0x212/0x3a0 [ 314.941089][ C0] ? maybe_deliver+0x98/0x160 [ 314.941104][ C0] ? br_flood+0x31a/0x6a0 [ 314.941118][ C0] ? br_handle_frame_finish+0x15a3/0x1c90 [ 314.941134][ C0] ? br_nf_hook_thresh+0x3c6/0x4a0 [ 314.941151][ C0] ? br_nf_pre_routing_finish_ipv6+0x999/0xd60 [ 314.941169][ C0] ? br_nf_pre_routing_ipv6+0x37e/0x6b0 [ 314.941187][ C0] ? br_handle_frame+0x96e/0x14f0 [ 314.941203][ C0] ? __netif_receive_skb_core+0x10b9/0x4380 [ 314.941220][ C0] ? __netif_receive_skb+0x72/0x380 [ 314.941236][ C0] ? process_backlog+0x60e/0x14f0 [ 314.941254][ C0] ? __napi_poll+0xc7/0x360 [ 314.941269][ C0] ? net_rx_action+0x5f7/0xdf0 [ 314.941286][ C0] ? handle_softirqs+0x286/0x870 [ 314.941300][ C0] ? do_softirq+0xec/0x180 [ 314.941313][ C0] ? __local_bh_enable_ip+0x17d/0x1c0 [ 314.941327][ C0] ? kernel_fpu_end+0xd2/0x120 [ 314.941342][ C0] ? blake2s_compress+0xe9/0x1b80 [ 314.941359][ C0] ? blake2s_update+0x14b/0x450 [ 314.941374][ C0] ? hmac+0x288/0x330 [ 314.941390][ C0] ? wg_noise_handshake_create_response+0x2cd/0x8f0 [ 314.941409][ C0] ? wg_packet_send_handshake_response+0xf6/0x2d0 [ 314.941430][ C0] ? wg_packet_handshake_receive_worker+0x629/0xfd0 [ 314.941462][ C0] __kasan_slab_alloc+0x6c/0x80 [ 314.941482][ C0] kmem_cache_alloc_noprof+0x367/0x6e0 [ 314.941500][ C0] ? skb_clone+0x212/0x3a0 [ 314.941513][ C0] ? nbp_switchdev_allowed_egress+0xdb/0x1d0 [ 314.941536][ C0] skb_clone+0x212/0x3a0 [ 314.941552][ C0] maybe_deliver+0x98/0x160 [ 314.941570][ C0] br_flood+0x31a/0x6a0 [ 314.941590][ C0] br_handle_frame_finish+0x15a3/0x1c90 [ 314.941614][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 314.941637][ C0] ? ip6t_do_table+0x1db/0x1560 [ 314.941658][ C0] ? nf_hook_slow+0x176/0x220 [ 314.941674][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 314.941691][ C0] br_nf_hook_thresh+0x3c6/0x4a0 [ 314.941713][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 314.941732][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 314.941749][ C0] ? nf_nat_ipv6_in+0x1fc/0x2b0 [ 314.941772][ C0] br_nf_pre_routing_finish_ipv6+0x999/0xd60 [ 314.941791][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 314.941813][ C0] ? br_nf_pre_routing_ipv6+0x42f/0x6b0 [ 314.941831][ C0] br_nf_pre_routing_ipv6+0x37e/0x6b0 [ 314.941851][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 314.941871][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 314.941890][ C0] ? br_nf_pre_routing+0x720/0x1470 [ 314.941910][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 314.941927][ C0] br_handle_frame+0x96e/0x14f0 [ 314.941949][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 314.941965][ C0] ? rcu_lockdep_current_cpu_online+0x37/0x120 [ 314.941985][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 314.942002][ C0] ? __pfx_rcu_read_lock_bh_held+0x10/0x10 [ 314.942021][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 314.942039][ C0] __netif_receive_skb_core+0x10b9/0x4380 [ 314.942058][ C0] ? kmem_cache_free+0x19b/0x690 [ 314.942080][ C0] ? ip6_mc_input+0x8de/0xb70 [ 314.942096][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 314.942111][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 314.942128][ C0] ? ip6_rcv_finish+0x29e/0x2e0 [ 314.942149][ C0] ? NF_HOOK+0x30c/0x3a0 [ 314.942159][ C0] ? skb_orphan+0xaf/0xd0 [ 314.942179][ C0] ? process_backlog+0x2d5/0x14f0 [ 314.942198][ C0] ? process_backlog+0x2d5/0x14f0 [ 314.942217][ C0] __netif_receive_skb+0x72/0x380 [ 314.942236][ C0] ? process_backlog+0x2d5/0x14f0 [ 314.942256][ C0] process_backlog+0x60e/0x14f0 [ 314.942281][ C0] ? __pfx_process_backlog+0x10/0x10 [ 314.942300][ C0] ? __lock_acquire+0xab9/0xd20 [ 314.942316][ C0] __napi_poll+0xc7/0x360 [ 314.942332][ C0] ? skb_defer_free_flush+0x229/0x250 [ 314.942351][ C0] net_rx_action+0x5f7/0xdf0 [ 314.942377][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 314.942412][ C0] handle_softirqs+0x286/0x870 [ 314.942433][ C0] ? do_softirq+0xec/0x180 [ 314.942450][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 314.942467][ C0] ? kernel_fpu_end+0xc8/0x120 [ 314.942484][ C0] do_softirq+0xec/0x180 [ 314.942497][ C0] [ 314.942503][ C0] [ 314.942508][ C0] ? __pfx_do_softirq+0x10/0x10 [ 314.942523][ C0] ? __pfx_do_softirq+0x10/0x10 [ 314.942535][ C0] ? blake2s_compress+0x1b00/0x1b80 [ 314.942555][ C0] ? lockdep_softirqs_on+0x13b/0x1c0 [ 314.942569][ C0] __local_bh_enable_ip+0x17d/0x1c0 [ 314.942584][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 314.942598][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 314.942614][ C0] ? kernel_fpu_begin_mask+0x2c8/0x3a0 [ 314.942633][ C0] kernel_fpu_end+0xd2/0x120 [ 314.942650][ C0] ? __pfx_kernel_fpu_end+0x10/0x10 [ 314.942665][ C0] ? kernel_fpu_end+0xd2/0x120 [ 314.942682][ C0] ? __pfx_kernel_fpu_end+0x10/0x10 [ 314.942702][ C0] blake2s_compress+0xe9/0x1b80 [ 314.942719][ C0] ? blake2s_compress+0x1b00/0x1b80 [ 314.942738][ C0] ? blake2s_update+0x255/0x450 [ 314.942761][ C0] ? hmac+0x2c3/0x330 [ 314.942778][ C0] ? __crypto_memneq+0x2fe/0x470 [ 314.942795][ C0] ? __pfx_blake2s_compress+0x10/0x10 [ 314.942811][ C0] ? curve25519+0x50a2/0x5140 [ 314.942828][ C0] ? __pfx_blake2s_compress+0x10/0x10 [ 314.942849][ C0] ? __pfx_curve25519+0x10/0x10 [ 314.942869][ C0] ? blake2s_update+0x134/0x450 [ 314.942888][ C0] blake2s_update+0x14b/0x450 [ 314.942907][ C0] hmac+0x288/0x330 [ 314.942925][ C0] ? __pfx_hmac+0x10/0x10 [ 314.942960][ C0] wg_noise_handshake_create_response+0x2cd/0x8f0 [ 314.942984][ C0] ? __pfx_wg_noise_handshake_create_response+0x10/0x10 [ 314.943003][ C0] ? seqcount_lockdep_reader_access+0x122/0x1c0 [ 314.943021][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 314.943058][ C0] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 314.943081][ C0] ? down_write_trylock+0x2f0/0x370 [ 314.943104][ C0] ? wg_noise_handshake_consume_initiation+0x7b4/0x900 [ 314.943126][ C0] ? __lock_acquire+0xab9/0xd20 [ 314.943149][ C0] ? seqcount_lockdep_reader_access+0x122/0x1c0 [ 314.943166][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 314.943185][ C0] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 314.943201][ C0] ? seqcount_lockdep_reader_access+0x174/0x1c0 [ 314.943218][ C0] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 314.943235][ C0] ? do_raw_write_lock+0x11d/0x260 [ 314.943254][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 314.943273][ C0] ? ktime_get_coarse_with_offset+0x102/0x150 [ 314.943292][ C0] wg_packet_send_handshake_response+0xf6/0x2d0 [ 314.943307][ C0] ? wg_socket_set_peer_endpoint_from_skb+0xc8/0x120 [ 314.943325][ C0] ? __pfx_wg_packet_send_handshake_response+0x10/0x10 [ 314.943339][ C0] ? wg_socket_set_peer_endpoint_from_skb+0xc8/0x120 [ 314.943364][ C0] wg_packet_handshake_receive_worker+0x629/0xfd0 [ 314.943381][ C0] ? validate_chain+0x897/0x2140 [ 314.943402][ C0] ? __pfx_wg_packet_handshake_receive_worker+0x10/0x10 [ 314.943427][ C0] ? __lock_acquire+0xab9/0xd20 [ 314.943446][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 314.943465][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 314.943481][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 314.943495][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 314.943511][ C0] process_scheduled_works+0xae1/0x17b0 [ 314.943539][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 314.943562][ C0] worker_thread+0x8a0/0xda0 [ 314.943589][ C0] kthread+0x711/0x8a0 [ 314.943608][ C0] ? __pfx_worker_thread+0x10/0x10 [ 314.943622][ C0] ? __pfx_kthread+0x10/0x10 [ 314.943639][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 314.943656][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 314.943672][ C0] ? __pfx_kthread+0x10/0x10 [ 314.943689][ C0] ret_from_fork+0x4bc/0x870 [ 314.943720][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 314.943738][ C0] ? __switch_to_asm+0x39/0x70 [ 314.943750][ C0] ? __switch_to_asm+0x33/0x70 [ 314.943761][ C0] ? __pfx_kthread+0x10/0x10 [ 314.943778][ C0] ret_from_fork_asm+0x1a/0x30 [ 314.943798][ C0] [ 317.190203][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.199490][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.985943][ C0] net_ratelimit: 8046 callbacks suppressed [ 317.985963][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:9b:0b:20:26:39, vlan:0) [ 318.004255][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 318.016855][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.029416][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 318.042414][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.055279][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:9b:0b:20:26:39, vlan:0) [ 318.067630][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.079981][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:9b:0b:20:26:39, vlan:0) [ 318.092421][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.104761][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)