last executing test programs: 8m20.824887152s ago: executing program 2 (id=605): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0xe, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x890}, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@delqdisc={0x100, 0x25, 0x800, 0x70bd2d, 0x25dfdafe, {0x0, 0x0, 0x0, 0x0, {0xd, 0x3}, {0x7, 0x9}, {0x1, 0xffe0}}, [@q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x30}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xff}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9d}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}]}}, @q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x14}]}}]}, 0x100}, 0x1, 0x0, 0x0, 0x4008044}, 0x0) recvmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/223, 0xdf}, {&(0x7f0000000840)=""/127, 0x7f}], 0x2}, 0x101}], 0x1, 0x60, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) 8m20.684281287s ago: executing program 2 (id=609): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800001900000000020000000000000018400000020000000000000000000000950000000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600), 0x10}, 0x90) 8m20.460452069s ago: executing program 2 (id=613): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {0x3, 0x0}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x4, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0xb7}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$tipc(r1, &(0x7f0000001b40)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10, 0x0}, 0x0) 8m20.41233136s ago: executing program 2 (id=615): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x9, 0x2f67, 0x7dc47048}) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @remote}}}}, 0x0) read(r0, &(0x7f0000000200)=""/185, 0xb9) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xd, 0x9, 0x0, 0xc, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe00, 0xa1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 8m20.231507812s ago: executing program 2 (id=617): r0 = socket$nl_rdma(0x10, 0x3, 0x14) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00f0ff0f14c3e4000000280000000900450000f6ff000800010000000000080003000100000000fc7e2216d8d603d77f7941ccd6ef0cee37f11f57b75bfe04b5b5700b42962ceacccc42aba0bad30df0f4a81d7f1357108386ce6721445d5895c653ccef553dcd804da88d0b2300001164023d50e03411c90f27fe80bcb0739695f84fefae3116"], 0x2c}}, 0x0) 8m20.088322582s ago: executing program 2 (id=619): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r2, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000040)="2a000000010000", 0x7) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r9, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x3c, r10, 0x13, 0x0, 0x0, {0x8}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x3c}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002"], 0x44}}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x404080d}, 0x20048000) 7m8.761895264s ago: executing program 32 (id=619): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r2, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000040)="2a000000010000", 0x7) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r9, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x3c, r10, 0x13, 0x0, 0x0, {0x8}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x3c}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002"], 0x44}}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x404080d}, 0x20048000) 2m48.520426099s ago: executing program 4 (id=2563): socket$netlink(0x10, 0x3, 0x15) (async) r0 = socket$netlink(0x10, 0x3, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0xd7, 0x0, 0x0, 0x0, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xed27c9fa5277b9b7}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ALPHA={0x8, 0x5, 0xd}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xfffffff8}]}}]}, 0x44}}, 0x20008000) getsockname$netlink(r0, &(0x7f0000000040), &(0x7f0000000080)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x9b, &(0x7f0000000300)=""/155}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x9b, &(0x7f0000000300)=""/155}, 0x94) 2m48.36668203s ago: executing program 4 (id=2566): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$OSF_MSG_ADD(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x4bc, 0x0, 0x5, 0x101, 0x0, 0x0, {0xf, 0x0, 0x7}, [{{0x254, 0x1, {{0x1, 0x5}, 0x4d, 0x42, 0x2, 0x4, 0x24, 'syz1\x00', "d2d633bb84ff9437e3e08eb772461a1911070377b75a5c53b484267f68d39269", "e2f4445e624f5087de0c76a24130457900213df9b2691edbb29908e67adaa68f", [{0x9, 0xf00, {0x2, 0xfffffffd}}, {0x9, 0x80, {0x0, 0x9}}, {0xff, 0x40, {0x0, 0xfffffffe}}, {0x6, 0x3, {0x3, 0x9}}, {0x8, 0x6, {0x2, 0x2}}, {0xfffd, 0x3ff, {0x1, 0x1}}, {0x6, 0xd8, {0x1, 0x1ff}}, {0x8000, 0xcc6, {0x2, 0x3}}, {0x559, 0x2, {0x3, 0x5}}, {0x7, 0x8, {0x3, 0xfffffe00}}, {0x7fff, 0xfe94, {0x1, 0x80000001}}, {0x10, 0xfff9, {0x3, 0x6}}, {0x401, 0x56, {0x3, 0x8}}, {0x0, 0x4, {0x3, 0x4}}, {0x5, 0xff, {0x3, 0x4}}, {0x5, 0xbe2d, {0x1, 0xe5be}}, {0x0, 0x0, {0x3, 0x6}}, {0x401, 0x8a80, {0x2, 0x393d}}, {0x3, 0x2}, {0x100, 0x9, {0x0, 0x1}}, {0xf9cc, 0x8, {0x1, 0x408}}, {0x3, 0x7, {0x2, 0xffffffff}}, {0x0, 0xffff, {0x3, 0x4}}, {0x1, 0x9, {0x2, 0x8001}}, {0x49, 0x0, {0x1}}, {0x0, 0x78, {0x0, 0x7}}, {0x3, 0xfff8, {0x0, 0x4}}, {0x9, 0xfffd, {0x0, 0x2}}, {0x4, 0x80, {0x2, 0x6}}, {0xfff9, 0x7, {0x2, 0x2}}, {0x9, 0x9, {0x1, 0xb}}, {0xd1a, 0x8, {0x0, 0x1}}, {0x8, 0x2, {0x0, 0xfffffffc}}, {0x4, 0x76e9, {0x0, 0x201}}, {0x99, 0x4, {0x1, 0xd705}}, {0xf5, 0x4, {0x0, 0x8}}, {0x6, 0x6, {0x3}}, {0x0, 0x10, {0x1, 0x80000001}}, {0x9, 0xe7d, {0x3, 0x81}}, {0x5, 0x6a4, {0x1, 0x5}}]}}}, {{0x254, 0x1, {{0x3, 0x1}, 0xe, 0x1, 0x0, 0xfffc, 0x1, 'syz0\x00', "1587f1f246303ade68fb1a83134862c104cd1a0b4915b2e08761743ede6c7f47", "8de3e857edf72c9fb894e926d6da0933b20ceabc9a20694e260a37c3f8cdf517", [{0x5, 0x6, {0x1, 0xb2a5}}, {0x7, 0x2, {0x0, 0x2}}, {0x1, 0xa, {0x3, 0xf00000}}, {0x8000, 0x15, {0x0, 0x4d06}}, {0x80, 0x1, {0x2}}, {0x40, 0x40, {0x2, 0xfff}}, {0x3, 0x12e5, {0x1, 0x7fff}}, {0x0, 0xfe00, {0x1, 0x9a5}}, {0x80, 0x9161, {0x1, 0x4}}, {0x3000, 0x2, {0x2, 0x7}}, {0x5, 0x0, {0x3}}, {0x0, 0x4, {0x1, 0x9}}, {0x7fff, 0x5f6c, {0x0, 0xf2}}, {0x4, 0x8, {0x1, 0xe7}}, {0xffff, 0x9, {0x3, 0x1}}, {0x7fff, 0x4, {0x3, 0x7fffffff}}, {0x8, 0xc1, {0x0, 0x7}}, {0x9, 0x4, {0x2, 0x2}}, {0x200, 0x2, {0x2, 0xbd9}}, {0x6, 0xe, {0x3, 0x5}}, {0x3, 0x8, {0x2, 0x3}}, {0x9, 0x1, {0x3, 0x3}}, {0x3, 0x5, {0x1, 0x9}}, {0x843d, 0xcdc, {0x0, 0x4}}, {0x1ff, 0xffff, {0x3, 0xa5b}}, {0x1, 0x4, {0x1, 0x7}}, {0xe, 0x0, {0x3, 0x101}}, {0xfffe, 0x0, {0x1, 0x6}}, {0x43f, 0x5, {0x3, 0x7}}, {0x9, 0x400, {0x0, 0x5}}, {0x7fff, 0xa5, {0x1, 0x5}}, {0x43, 0x2, {0x3, 0x4}}, {0x8e, 0x8, {0x3}}, {0x74, 0x7f6, {0x0, 0x9}}, {0x8, 0x1ff, {0x2, 0x7ff}}, {0x0, 0x6, {0x2, 0xfffffff0}}, {0xad, 0xb117, {0x0, 0x3}}, {0xfff7, 0x1ff, {0x3, 0x551}}, {0x101, 0xd, {0x0, 0x4}}, {0xfffc, 0x3, {0x1, 0x6}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x322ed7d6c556f77d}, 0x4000) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_newaddrlabel={0x38, 0x48, 0x3, 0x0, 0x0, {}, [@IFAL_ADDRESS={0x14, 0x1, @empty}, @IFAL_LABEL={0x8, 0x2, 0xffffffff}]}, 0x38}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0xa, 0x200008, 0x5, 0x1ffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r2], 0x4c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004090}, 0x4040) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a010100000000000000000100000009000300040000000000000014000480080002400000000008000140000000000900010073797a300000000060000000060a010400000000000000000100000038000480240001800b00010072656a65637400001400028008000140000000000500020000000000100001800a000100726564697200000008000b40000000000900010073797a300000000014000000110001"], 0xe8}}, 0x0) 2m48.058470985s ago: executing program 4 (id=2572): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) (async) r1 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) (async) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000085000000a000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) ioctl$SIOCAX25ADDUID(r2, 0x89e1, &(0x7f0000000240)={0x3, @bcast}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@var={0x3, 0x0, 0x0, 0xe, 0x2}, @union={0x5, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x80000, 0x1}]}]}, {0x0, [0x0, 0x0, 0x5f]}}, 0x0, 0x45, 0x0, 0x101}, 0x28) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) (async) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000100)=0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r6) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="f50401", @ANYRES16], 0x4) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) (async) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_getaddr={0x2c, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {}, [@IFA_CACHEINFO={0x14}]}, 0x2c}}, 0x0) 2m47.906109904s ago: executing program 4 (id=2573): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) (async) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'lo\x00'}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000007000000280001801400040000000000000000000000ffffac1414aa060001000a"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000007000000280001801400040000000000000000000000ffffac1414aa060001000a"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 2m47.685862468s ago: executing program 4 (id=2577): sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$netlink(0x10, 0x3, 0x15) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xts-twofish-avx,camellia-asm,cbcmac(aes))\x00'}, 0x58) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00D$'], 0x38}}], 0x1, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100090e000000000000000000000005000600000000000a00000000000000fc000000000000000000000000000000000000000000000005000500000000000a00000000000000060100000000000000000000000000aa0100000000000000020013"], 0x70}}, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000400)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in=@private, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@private2}}, &(0x7f0000000000)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@remote, 0x4e21, 0x81, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, r3}, {0x101, 0x2, 0x2, 0x1, 0xf62, 0x2, 0x40, 0xfffffffffffffffc}, {0x5, 0x5, 0x9, 0x8872}, 0x6, 0x6e6bb9, 0x1, 0x0, 0x2, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d2}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3501, 0x3, 0x2, 0xd, 0x8, 0xe3c, 0x365}}, 0xe8) sendmmsg(r0, &(0x7f0000000180), 0x393, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="940000000002010400000000000000000200000020000280140001a00800010000000000080002007f00000106000340000200003c0003802c00018014000300000000000000000000000000000000001400040000000000000000000000ffffe00000010c00010000000000240001801400018008000100ac1e000108000200ac1414020c000280050001"], 0x94}}, 0x0) 2m47.408177224s ago: executing program 4 (id=2581): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x480, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x2f, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) 2m32.295103691s ago: executing program 33 (id=2581): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x480, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x2f, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) 2m24.818002171s ago: executing program 0 (id=2831): r0 = socket$netlink(0x10, 0x3, 0x8000000004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3f}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) writev(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f0000000040)="abd9", 0x2}], 0x2) 2m24.730641914s ago: executing program 0 (id=2832): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x5}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100)={r1, 0x1}, &(0x7f0000000140)=0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xa}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$cgroup_procs(r2, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_procs(r6, &(0x7f0000000280)='cgroup.threads\x00', 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$kcm(0x2, 0xa, 0x2) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'ipvlan0\x00'}) write$cgroup_subtree(r9, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) accept(r0, &(0x7f00000002c0)=@un=@abs, &(0x7f0000000340)=0x80) sendto(r8, 0x0, 0x0, 0x20000000, &(0x7f00000004c0)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x80) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r10}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r7}, 0x10) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r11, &(0x7f0000000180), 0x40010) write$cgroup_pid(r4, 0x0, 0x0) 2m24.571461292s ago: executing program 0 (id=2834): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x1, 0x4) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff3f}, 0xc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x50, r2, 0x2981c000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="0503162ed3fc140820204788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r5, 0x890c, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) openat$cgroup_ro(r0, &(0x7f0000000180)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x1, 0x4) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff3f}, 0xc) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x50, r2, 0x2981c000) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) (async) sendto$packet(r3, &(0x7f00000002c0)="0503162ed3fc140820204788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) ioctl$sock_netrom_SIOCDELRT(r5, 0x890c, 0x0) (async) 2m24.428211475s ago: executing program 0 (id=2836): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') socket$igmp(0x2, 0x3, 0x2) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x1103, 0x4, @private0, 0x2}}}, &(0x7f0000000040)=0x84) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000140)="0200000009800089", 0x8) sendmmsg$inet6(r1, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400dc05) close(0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = getpid() sendmsg$unix(r6, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000004600)=[{&(0x7f0000003140)="fa", 0x1}], 0x1, &(0x7f00000046c0)=[@cred={{0x1c, 0x1, 0x2, {r7, 0xee00, 0xee01}}}, @rights={{0x10}}], 0x30}, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r5, 0x80049363, &(0x7f0000000000)) setsockopt$sock_int(r5, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) 2m24.264159147s ago: executing program 0 (id=2838): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="480000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00001a67d31920d67539ed62c149c28abb53000000000000280012800b00010062726964675d000007e01745405525362abc1800028005000700"], 0x48}}, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0xffffd000) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000140)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @loopback, 0xffff}}, 0x24) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x16, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4a, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000180)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x2, 0x56}) 2m24.090279313s ago: executing program 0 (id=2840): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000ffdbdf25050000000800022105000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20040011}, 0x20004080) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x401}]}, 0x24}, 0x1, 0x0, 0x0, 0x6000c040}, 0xc000) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x14, 0x26, 0x301, 0x70bd2b, 0xffbffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) 1m44.716272622s ago: executing program 34 (id=2840): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000ffdbdf25050000000800022105000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20040011}, 0x20004080) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x401}]}, 0x24}, 0x1, 0x0, 0x0, 0x6000c040}, 0xc000) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x14, 0x26, 0x301, 0x70bd2b, 0xffbffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) 3.194040148s ago: executing program 5 (id=4225): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0xc3072, 0xffffffffffffffff, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0xfe, 0x5}}, 0x1c}}, 0x0) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) 2.949597105s ago: executing program 5 (id=4229): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0x103, 0x229, &(0x7f0000000980)="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", &(0x7f00000006c0)="4c87fe555ceb79157b1e507ff4d3cc053321e42ae89f596427188b4877ab8f1776c0685784f1174c6401ecc1dd6e2a77bc79238f87ad9215a92ff203a30099e77c543e702b4a4438d358616381745f24f74e585498af129c4b173b242f445b08135f7fa40eb7ba78160ff4f0c80e1b324d0c234cb7f43a3ff9e9535dc16000c797113a039f4508a09144090000009f38a90a24f173b3e68377e4272950a80cfcd3aa6850e917bc7e57370060f5e6db941d67fc98a1e98103830b821657438325578d2af822dd4fc13ea7a7eef8d9be4e715aec8fd6cadc41c8da5ce9da2b9e1559d92a1936fc2b3a00000000000000000072200e10ba6269b634f10f7098c65ba67ba65c0e2687637e131fb8d5ba6c12c09c8356853c434a44ff0878e496dcf9a4f5ca02c293279948f37ebb28843f92c87c057a3b410e04418557d5deda7ddd3bd1d384d64ec980187e8b64a0696571a49e847db79349c9b3c3fab5f1f977bde4d802d9026ae0c11744eb1525c5195fd215d7a432497f35c2f2cfcd2b6336b26dfef0cb968c910ea2af5cdd4d58cc08535d5514348224cb3c4f2c9fcbb50431d1ff2b46e58711c4e5373c5e988409d6e2ee623fd5d688dc07a01435f88526fc52105ad46ecf87f4f037fb542c156648e1b2603f841ec25df405ca97eb1bf42397abf2e5feee8bb15b11d0d7dfaee904822764b30e62dfaa419d46ed36ba2879ab26bb84d0b890d5bf446b8dd9aae81e6aa87446f4340e0c839854ca0102dbe1242fd5bb9066678758", 0x2, 0x0, 0x100}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@ifindex, 0x33, 0x1, 0x6, &(0x7f00000001c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], 0x0}, 0x40) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000340)={r0, 0x711a, 0x3, 0x6}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@cgroup, r0, 0x16, 0x2008, 0x0, @value=r2, @void, @void, @void, r1}, 0x20) 2.834190398s ago: executing program 5 (id=4230): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x38}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_FAMILY, @IPSET_ATTR_FAMILY={0xfffffffffffffcea, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004009}, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000000400), 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x6c}}, &(0x7f0000000000)='GPL\x00'}, 0x94) 2.552309948s ago: executing program 5 (id=4235): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) (async, rerun: 32) syz_emit_ethernet(0x52, &(0x7f0000000440)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x1c, 0xa, 0x1, 0x0, [{}, {@dev}, {@dev}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) (rerun: 32) 2.0025896s ago: executing program 7 (id=4244): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000004380)=@newtaction={0x310, 0x30, 0xc96f2b0dc02612b1, 0x71bd2b, 0x25dfdbff, {}, [{0x2fc, 0x1, [@m_xt={0x9c, 0xa, 0x0, 0x0, {{0x7}, {0x74, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x1000}, @TCA_IPT_INDEX={0x8, 0x3, 0x89}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0xd4, 0xa, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x10000, 0x1, 0x80000001, 0x800}}]}, {0x8d, 0x6, "827cfc3c97533b7fd85b8f8fc505a863ca8f9e20a40133a88637f87f05b88171edad7365a25c16de383004673eee493e6bc8e65e14cb7c4c40505904e9bd738809a5de6875a609fc4d328a141abfce4fb1dd738c84aada34cdaf4b8cf6379acc343533215412508b1faa1da28903c894dc3b2828e6ddb221934961a0c35e67cc611dcd10cb3d9e85e6"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbmod={0x10c, 0x1, 0x0, 0x0, {{0xb}, {0x18, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}]}, {0xc9, 0x6, "6924a3156352d4cb671a82481f27291343a36577586e5138f9b60a47ff29c9048eb534a11a1a6e4068a3f14dbbb6f779cad02630f9c416662a272922c0177770deb39f4690d4395dd3771d99f9aae01ac5b8b77c9ea5267b51cceebad4126c6b018ccd2424755e23161a50ec4588a35b167651bd8e886d43c7b0f2105fe0bbf48e50295c1b6016c72500582f399eea553274e9ce77781e0bd18c6dd6dfed7fc2ce76e1b76fcd7a3c44f38f1f3f7b49477ea4bce06e49ae2024ef8fae1604236b87fa523248"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_bpf={0x7c, 0x0, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0x2, 0x4, 0x6, 0x4}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x18, 0x6, "12df59202984a7d58c1b88abb797475ada8903aa"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x310}, 0x1, 0x0, 0x0, 0x4004000}, 0x50) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r2, {0xb, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_MARK_MASK={0x8, 0x60, 0x80}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x31cf}]}}]}, 0x44}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=@RTM_DELMDB={0x38, 0x55, 0x701, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x3, 0x0, {@in6_addr=@loopback}}}]}, 0x38}}, 0x0) 1.950575867s ago: executing program 5 (id=4245): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="410000000000000001000603000014000300060afc04090300f006e8ffff00000001080007003a3a0909140002"], 0x44}, 0x1, 0x1000000}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r3}) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000040)=0xffffffff, 0xb) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000180)={0x1d, r7, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) sendmsg$can_j1939(r6, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x15, {0x0, 0x4a285d23bc3c3985}, 0xfe}, 0x18, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x4000040) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000500)=0x8001, 0x4) r8 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000600)={'bond_slave_0\x00', &(0x7f00000005c0)=@ethtool_link_settings={0x4c, 0x3, 0xfe, 0xe, 0x40, 0x6, 0x4, 0x4, 0x59, 0x4, [0x8, 0x3, 0x20ef, 0x8, 0xf, 0x5, 0x9]}}) listen(r3, 0x5) r9 = socket$netlink(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r10, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xff, [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6], 0x0, [0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7fff, 0x100], [0x2, 0x9543, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x4]}}]}}]}, 0x8c}}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r5) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r11, @ANYBLOB="100026bd7000fddbdf254c0000000c0058003f000000000000000c0058007700000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x10) getsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000540), &(0x7f0000000580)=0x4) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r5, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r12, 0xd00, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xc94, 0x31}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x8000) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0xe0, &(0x7f0000000680)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.880150522s ago: executing program 6 (id=4246): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYRES32=r1], 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r2, 0xffffffffffffffff, 0x0, 0x7feff000) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) socket(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r5, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r7, &(0x7f0000000400)='\x00', &(0x7f0000000480)=@udp}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) setsockopt$sock_linger(r4, 0x1, 0x3d, &(0x7f00000002c0)={0x1}, 0x8) bind$alg(r3, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) accept$alg(r3, 0x0, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) r8 = socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002006dfa0000000000000004000000000000828b71cba1455a80e868a4c63b7604a222bf87c119d98ca23574566082883c33289e5078725f76dcac62c1bcdde2621cfb8d6a923ffd6d20066ce9e200"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000640)=ANY=[@ANYRESOCT=r6], 0x0}, 0x94) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r10, &(0x7f0000000cc0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) getsockopt$inet6_mptcp_buf(r10, 0x11c, 0x3, &(0x7f00000001c0)=""/207, &(0x7f0000000000)=0xcf) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002d80)={0x6, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="180000003e0e0000000000000100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70a000014010000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70000457ba8d1a9ff891ca1910000000000950000000000000099cec6e6240a006b39d7fc4803c06f8ad15ca627b5ea1119ab6c4e3382f739f243121d94bc6a54b790470a2607c1c905ab66e6c2fec286e198e004f7504245d318f3eecfd61441df7a9bff28"], &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0xfffffffc}, 0x10}, 0x90) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590241c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="fe112162c63e6da8bc8432294ef18af53cc330a62a2c7035246635093ba4d30fcf19a90804f04a10939db8f4e13069cda6d167bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a519b7555c3b73f2681d49442d9647ff5ea64110cc5020fdeafe53a7d8be70f3260816bc376bcdc5352771fa55d9733e27730ec7103520e8359c78edd21ee6c68feb3685a55722f5da09ffe8ba9f05081a8d214156376f99906245f2f390ad717979d98f0574f8c5b52dcc2fa494f461be6c2560ddbaafb80c5b4583cbe56d24f14ab78fd718947077ea736251c7b8eee267267534c84daa6f095e94bfb85986a03ddea362cc7e6682884e710727c1163cd4f336c13b844605b7a815fe39e43bd0d2e414410a82958455b8a6bd9194c631d66295675fed64c04107a595c421111a3af6e9fadab5c9", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.767003778s ago: executing program 7 (id=4247): r0 = socket$inet_udp(0x2, 0x2, 0x0) close(0x3) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x4}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x50}}, 0x0) recvmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x2021, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=@newtaction={0x48, 0x30, 0xeaa3ef926154e70d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) ioctl$sock_ax25_SIOCDELRT(r6, 0x890c, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) sendmsg$IPVS_CMD_DEL_DAEMON(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e8000000", @ANYRES16=0x0, @ANYBLOB="010027bd7000fbdbdf250a0000005000028006000b0000000000140001007f000001000000000000000000000000080003000200000008000500ff01000008000700fb0500000800050000000000080008000600000008000500030000006400038014000600fe8000000000000000000000000000bb1400060000000000000000000000008000fcff01140006000000000000000000000000000000000014000600fc010000001200000000000000000000080001002000000006000400ff030000200001800c000700360000000300000008001b3239b9ffff0604010002000000f0ed4e0998fb021c82e7cd00730b2c36e454310d101d7816d9ce21682b21e5161bffbe2e"], 0xe8}}, 0x10) syz_emit_ethernet(0x14, &(0x7f0000002e00)=ANY=[@ANYBLOB="25f0504a4e97aaaaaaaaaaaac7bba938ef003bb1"], 0x0) 1.471232853s ago: executing program 5 (id=4248): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000000)=0x6, 0x4) sendto$inet(r0, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf37, 0x0) vmsplice(r3, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r1, r3, 0x8f5, 0x100000000000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x9b, 0x63, &(0x7f0000000080)="66baef09494232627299d96ee260c42ac3614ffa09da1b4ab868a1e55fe139427b0effcb801b502fd745d2514d923e44b664600f18ae34cd336adedd95fc3223117e385e510dec1af995143388322b1af4878e06f086cbfeac5244e165b6e5dd452da8f347208aee1b82ef407cc5b7e2a9832401d9b413bfea68049c6e5daeea12acdef14f46251ec6edc1edd1aca64b8baf0c20a9ca1670a51d42", &(0x7f0000000140)=""/99, 0x3, 0x0, 0x66, 0x51, &(0x7f00000001c0)="8782c62607d8a57da74474b98d94121287c79d641935de31159cef3b9d1794a7c8445d5778d9601185ad896d2bc14ec81ff8e2e14bf5dc82014c59e5ff1919cf07107314a482694b4c6b7472dfdeeca486acd4df9cd71e8ab04d8ddb8ee83cfc341b34605ac5", &(0x7f0000000240)="ce8b40cb05c467d0a8af1aaa255ec0ecd298abc52455bba086971bc3b669f544e4aabb16ebb3ed2da0794ff1226e6bffcc4dd49c2d5276f64c92b85219267403346a053b1b7c10bdc3e15eca9e191c674a", 0x5, 0x0, 0x2}, 0x50) 1.380326442s ago: executing program 7 (id=4249): syz_emit_ethernet(0xe7, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000d900000000fd019078ac1e0001ac1414aa03059078000500014f2406860067fff9072f1000e0000001640101024460fbec5ba954b26c480d6186a8c447d204c7c34414f221ac1e000100000000ffffffff0000000689235fe0000001ac1414bb64010102ac1e0001ac1414aae0000001ac1414bbac1414aa831bf7ac1414bbe00000020a010102e0000002e0000001ac1414354420b3d0000000020000000d0000000880000001ffffffff00000005000009e0000002ac1432e0000002ac141415"], 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000), 0x3) r0 = accept(0xffffffffffffffff, &(0x7f0000000040)=@can, &(0x7f00000000c0)=0x80) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xe, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, [@tail_call, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}, @map_fd, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @alu={0x7, 0x0, 0x7, 0x6, 0xb, 0x18e, 0xfffffffffffffffc}]}, &(0x7f0000000180)='GPL\x00', 0x4ab, 0x7, &(0x7f00000001c0)=""/7, 0x41000, 0x46, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x1, 0xcbf, 0x7}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000380)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f00000003c0)=[{0x4, 0x4, 0xc, 0x5}, {0x1, 0x3, 0x9, 0x6}, {0x3, 0x5, 0x5, 0xc}, {0x3, 0x2, 0x5, 0xd}, {0x2, 0x4, 0xa, 0x5}, {0x5, 0x1, 0xf, 0xa}], 0x10, 0x100}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuset.memory_pressure\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x4, 0x4, 0x12, 0x18d6, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc, 0x2}, 0x48) ppoll(&(0x7f0000000540)=[{r0, 0x80}, {r1}, {r2, 0x1000}], 0x3, &(0x7f00000005c0)={r3, r4+60000000}, &(0x7f0000000600)={[0xffffffffffffffe3]}, 0x8) 1.379830791s ago: executing program 6 (id=4250): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000400)=0x3, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000900)='.U/]', 0x4, 0x12, 0x0, 0x0) recvfrom$inet(r2, 0x0, 0x0, 0xc9100120, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x48000) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05002ebd7000000000000800000008000300", @ANYRES32=r3], 0x2c}, 0x1, 0x0, 0x0, 0x44840}, 0x0) 1.120129253s ago: executing program 6 (id=4252): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)="b2", 0x1}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="14"], 0x18, 0x8800}}], 0x1, 0x40001) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00a8bc", 0x18, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x0, 0x2}]}}}}}}}}, 0x0) 1.000348779s ago: executing program 6 (id=4253): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000068000000060a01040000000000000000010000004000048020000180070001007274000014000280080002400000000108000140000000031c0001800b00010072656a65637400000c000280080001400000000108000b40000000000900010073797a30000000001400000011000100"], 0xf0}}, 0x0) r1 = socket(0x10, 0x3, 0x6) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd], 0x40, [0x4, 0x807, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 968.746892ms ago: executing program 3 (id=4255): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001400030400000000000000542d"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) socket$packet(0x11, 0x2, 0x300) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0xff663235b218012f, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100}, 0x95) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x12, 0x1, {0x2, 0x100, 0x0, 0x401, 0x9, 0x80, 0xef, 0x2, 0x9}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @qdisc_kind_options=@q_qfg={0x8}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000085c0)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x3, 0x67e6}, {0x9, 0x3, 0x5, 0x9}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x24}, {0x7d, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}]}, 0x70}}, 0x0) 916.687788ms ago: executing program 6 (id=4256): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={0x0, 0x144}}, 0x20000000) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x6, 0xebe8, 0xa2c, 0x866, 0x0, 0x3ff, 0x7}, 0x1c) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002a80)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32, @ANYBLOB="0010000000e153f5f9e200"/35, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000280), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000008008"], 0x80}}, 0x0) close(r5) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xa}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0xccea7a0d5ced4d05}, 0x4000800) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003600)=@newtfilter={0x3558, 0x2c, 0x10, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x9, 0xffe0}, {0xfff1, 0xd}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x50, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x3a}}, @TCA_FLOWER_KEY_CVLAN_ETH_TYPE={0x6, 0x4f, 0x88a8}, @TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e23}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @empty}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8, 0x1e, 0xffffff00}, @TCA_FLOWER_KEY_SCTP_DST={0x6}, @TCA_FLOWER_KEY_PORT_DST_MAX={0x6, 0x5a, 0x4e20}]}}, @TCA_RATE={0x6, 0x5, {0xdc, 0xf7}}, @TCA_CHAIN={0x8, 0xb, 0x7fffffff}, @filter_kind_options=@f_matchall={{0xd}, {0x108c, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0xfff2}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff2, 0xffe0}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x6, 0xffe0}}, @TCA_MATCHALL_ACT={0x1058, 0x2, [@m_gact={0x1054, 0xa, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1266, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0xde60, 0xffffffffffffffff, 0x5}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x2, 0xfff3}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff1, 0xfff1}}]}}, @TCA_CHAIN={0x8, 0xb, 0xffffffff}, @TCA_RATE={0x6, 0x5, {0x4, 0x3}}, @filter_kind_options=@f_u32={{0x8}, {0x1370, 0x2, [@TCA_U32_ACT={0x131c, 0x7, [@m_sample={0x8c, 0x16, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7}]}, {0x58, 0x6, "58a0d4bf9333a06281db0e980549a21b644877172939ce4a1e2b4f7e840a68e7a4b78fc5264e25e01be43c0115374648795f93703a8bdb2336250ada9244b17252fc6c1a249c6f6bfaf921f1c5fa40b778a45027"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_mpls={0x4c, 0x1f, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x17, 0x6, "f0bed03f067f63fd7f7aec030ab1c4e0bf83eb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mirred={0x10b0, 0x11, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x1ff, 0x1, 0x9, 0xfffffffa}, 0x3, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0xa, 0x6, 0x1, 0xffffff10}, 0x0, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x100, 0xfffffffe, 0xffffffffffffffff, 0x1, 0xf}, 0x3, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x2, 0x6, 0x3, 0x80}, 0x4, r7}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_nat={0x190, 0x1f, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x80000001, 0x82, 0x5, 0x6, 0x1}, @multicast1, @private=0xa010102, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8000, 0x2, 0x20000000, 0x2, 0x2}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, 0x28a590f056f8a10a, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x0, 0x2, 0x100, 0xe}, @empty, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x1c, 0x8, 0x5, 0x9876}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x3ff, 0x1, 0x9, 0x3}, @dev={0xac, 0x14, 0x14, 0x3b}, @private=0xa010102, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x800, 0x8, 0x534, 0x6}, @remote, @remote, 0xff, 0x1}}]}, {0x78, 0x6, "2e469fdaeea517d71f00cab8b0af40e2e2606df9a665e492096699b69cc6b2de9e8ffb26bb3bcd9e936925e3a9d4994b816cde5bcdc168fd56cb8801457b8b73f7365639110ae0680f7dde0834ae0748f3a8e90f0bf30f1136bdced5062bd329f7dbda52d54bda773e12258d7dfd8399361a1527"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_U32_HASH={0x8, 0x2, 0x2}, @TCA_U32_CLASSID={0x8, 0x1, {0x9, 0x3}}, @TCA_U32_MARK={0x10, 0xa, {0x9}}, @TCA_U32_INDEV={0x14, 0x8, 'wlan1\x00'}, @TCA_U32_INDEV={0x14, 0x8, 'xfrm0\x00'}, @TCA_U32_FLAGS={0x8, 0xb, 0x5}]}}, @filter_kind_options=@f_fw={{0x7}, {0x109c, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x1}, @TCA_FW_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc}]}, @TCA_FW_POLICE={0x105c, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x8, 0xffff, 0x5, 0x9, 0xfffffff8, 0x8, 0x4, 0xb, 0xa, 0x6, 0xffffffff, 0x0, 0x4, 0x8, 0x3, 0xfffff001, 0x80000000, 0x81, 0x6, 0x1, 0x8, 0x3, 0xaef, 0x0, 0x9, 0x8001, 0x8, 0x10000, 0x4, 0x1, 0x0, 0x8, 0x2, 0x8, 0x9, 0x9, 0x42, 0x6, 0x7, 0x6, 0xd, 0xffffffff, 0xb, 0xb, 0x6, 0x0, 0xa7, 0x8, 0x2, 0x2, 0x7fff, 0x5, 0x4, 0x7, 0x76, 0x8, 0x957, 0xfff, 0x6, 0xf98f, 0x8, 0xe099, 0xfff, 0xfffffffc, 0x5, 0x9, 0xb9a, 0x7, 0xc209, 0xfffffffa, 0x1000, 0x1, 0x5, 0x786, 0x5d68, 0x0, 0x85f, 0x2, 0x4, 0x2, 0x9, 0x8000, 0x4, 0x2, 0x964, 0x8000, 0x0, 0x2, 0x232, 0x7, 0x0, 0x62d9350f, 0x1010001, 0x5, 0x2, 0x101, 0x6, 0x23790377, 0x7, 0xb, 0xdfde, 0x5, 0x8000, 0x31, 0xff, 0x1, 0x3, 0xfffffff7, 0xdd, 0x7, 0x3, 0x3, 0x81, 0x80, 0x6, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x7ff, 0x2, 0xff, 0x10001, 0x80000000, 0x0, 0x1, 0x0, 0x7, 0x5, 0x6, 0x3, 0x5, 0x4, 0x9, 0xd1f2, 0x9, 0x9, 0x1, 0xfffffffd, 0x9, 0x70, 0x1, 0x6ff4, 0x4, 0x6, 0x3, 0x7, 0x2, 0x5, 0x10001, 0x9, 0x800, 0x9, 0x1, 0x7, 0x1, 0x1, 0x3, 0x67cb, 0xe, 0x7, 0x9, 0x8, 0x2, 0x1, 0x7, 0x7fffffff, 0x6, 0xd110, 0x1000, 0x4, 0x40, 0x7, 0x8, 0x0, 0xfffffff5, 0x80000000, 0xff, 0x4, 0x101, 0x2, 0x7, 0x72, 0x7, 0x1, 0x1, 0x70, 0x5162, 0xe98, 0x4, 0x4, 0x800, 0x5, 0xfffffff9, 0x9, 0xffff7fff, 0xf79, 0x4, 0x2, 0x1d72, 0x4, 0x5, 0x1, 0x4657, 0x90000000, 0x3c2, 0x86, 0x2468, 0x8, 0x10001, 0xfffffff9, 0x9208, 0xf, 0x2, 0x2, 0xd, 0xc, 0x0, 0x100, 0x7fffffff, 0x6, 0x800, 0x7, 0x81, 0x3, 0x7ff, 0x5, 0x5, 0x1, 0x9, 0x7f, 0x3b, 0xf, 0x5, 0x3, 0x5, 0x3, 0x7, 0x6, 0x8, 0x7, 0xa5a, 0x5, 0x2, 0xfffff706, 0x1, 0xffffffff, 0x7, 0xf7, 0x1ff, 0xfffffff9, 0xcb8, 0x7, 0xa0]}, @TCA_POLICE_RATE={0x404, 0x2, [0x401, 0x200, 0x1, 0x1, 0xa, 0xd000000, 0x3ff, 0x81, 0x0, 0x1, 0x3, 0x5, 0x7d, 0xfffffffc, 0x80000000, 0xdbe, 0x80000001, 0x0, 0x9, 0x101, 0x6, 0x1, 0x3, 0x7fff, 0x4, 0x96f, 0x3, 0xffff, 0xc60, 0x9, 0x8000, 0x3, 0x3, 0x2, 0x1, 0xfffffffc, 0x1de, 0x1, 0x1a8, 0x4, 0x8, 0xf, 0xffffffff, 0x8, 0xffffffff, 0xfffffffb, 0x6, 0xfffffff7, 0x7fffffff, 0x9, 0xf, 0x1, 0x9, 0x1e, 0x0, 0x10, 0xffff, 0x1ff, 0xffffffff, 0xffffffff, 0x4, 0x0, 0x101, 0x7, 0x5, 0x800, 0x80000000, 0x9, 0x5, 0x7fffffff, 0xfffffff9, 0x47d6445b, 0x8, 0xff, 0xc3, 0x3ff, 0x2, 0x1ff, 0x1ff, 0xb, 0xd, 0x7, 0x8, 0x4, 0x5, 0x6, 0x1, 0x6, 0x1, 0x100, 0x5, 0x7fffffff, 0x0, 0x9, 0x8, 0x5, 0x7, 0xfffffff9, 0xb, 0x4, 0x3, 0x1ff, 0xfffffffc, 0x7, 0x9, 0x40, 0x6, 0x2, 0x3, 0x2000000, 0x1, 0x9a7d, 0xffffff80, 0x9, 0x40, 0x599, 0x101, 0x3ff, 0x5, 0x200, 0x18ef, 0xe5, 0x8, 0x57, 0x6, 0x0, 0x94, 0x5, 0x0, 0x10000, 0x5, 0x0, 0x3, 0x8, 0xff, 0x5, 0xc, 0x3, 0x2f3, 0x7, 0x3, 0x100, 0x6, 0x4, 0xe, 0x0, 0x0, 0x2, 0x6, 0x6, 0x3, 0x7, 0x40000, 0x6, 0x5, 0x3, 0x4, 0x6, 0xfffffffc, 0x8, 0x73, 0x0, 0x4, 0x400000, 0xfffffffe, 0x3ff, 0x5, 0x3, 0x0, 0x4, 0xfffffb29, 0x5, 0x467, 0x5, 0x5, 0x7, 0x10001, 0x7f, 0x100, 0x8, 0x6, 0x4, 0x5, 0xd613, 0x4, 0xff, 0x4, 0xa, 0x7fff, 0x85a2, 0x6b8, 0x3, 0x7, 0x5, 0x8, 0x9, 0xe, 0x9, 0x3, 0x9, 0x4, 0x0, 0x100, 0x5, 0x0, 0x2, 0x10001, 0x5, 0x1ff, 0x2, 0x8, 0xf3f, 0x0, 0x97, 0x5, 0x1, 0x1, 0x7fffffff, 0x2, 0x0, 0x0, 0x443, 0x9, 0x6, 0x3, 0x7, 0x6, 0x0, 0xff, 0xd, 0x5d8, 0x0, 0x8000, 0x0, 0x5, 0x31, 0xe, 0x2800000, 0x3, 0x0, 0xd, 0x6, 0x3, 0x5, 0x2, 0x6c, 0x8, 0x7ff, 0x213, 0x4, 0x400, 0x1, 0x1, 0x200, 0x0, 0x3ff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xdc, 0x3, 0x8, 0xd, 0x9, 0x8, 0x2, 0xfffffff9, 0x100000, 0x8, 0x1, 0x7, 0x9, 0x0, 0x3, 0x4, 0x5, 0x8, 0x5f1, 0x9, 0x10000, 0x4, 0x5, 0x1000, 0x0, 0xa, 0x9, 0x6, 0x8, 0xffff8001, 0x1, 0x454, 0x4, 0x0, 0x1, 0x7, 0x9, 0x5, 0x8, 0x7, 0xe, 0x51e, 0xfff, 0x9, 0x5, 0x2, 0x4, 0x7, 0x1ff, 0x0, 0x81, 0x7, 0x101, 0x5, 0x7, 0x3, 0x6, 0x9, 0x8000, 0x1ff, 0x7, 0x5, 0x5, 0x8, 0x0, 0x10, 0x1e145529, 0x7, 0x879, 0x9, 0x800, 0xffffffff, 0x7f, 0x0, 0x40, 0x5, 0x3, 0x3, 0x1, 0x8, 0x2, 0x3, 0x4, 0x180, 0x8, 0x7, 0x5ca, 0xa8cfd33, 0xfffffffe, 0xfffffff9, 0x8, 0xffffffff, 0x4, 0x2, 0x7fffffff, 0x5, 0xf17, 0x9, 0x21, 0x80000001, 0xe, 0x9, 0x7, 0xfffffff7, 0xffff, 0x6, 0x3, 0x5, 0x7, 0x8779, 0x8001, 0x1, 0x4, 0x1, 0x9, 0x3, 0x7ff, 0x9, 0x7, 0x3, 0x3, 0x6, 0x7, 0xb1, 0xffff, 0x8, 0x4, 0x47, 0x2, 0x7, 0x3, 0x8, 0x45f, 0x8, 0xfff, 0x8, 0x4, 0x6, 0x9, 0x2, 0x4058, 0x7, 0x4c2, 0x9b4, 0xffffff80, 0x4, 0x1, 0x3, 0x4, 0x6, 0x2, 0x7, 0x6b6, 0x7, 0x10, 0x7, 0x0, 0x7, 0x3, 0xd33, 0x8, 0x81, 0xf, 0x2, 0x7, 0x6, 0x3, 0x2, 0x40, 0x2, 0x2, 0x8, 0x7ff, 0x7, 0x3, 0x7fff, 0x8001, 0x6, 0x200, 0x4, 0x1, 0x74c, 0xc, 0x5, 0x9e56c24, 0xf7e2, 0x7, 0xdb, 0x0, 0x89, 0x80, 0xfffffffd, 0xf, 0x6, 0x9, 0x401, 0x4, 0x7fff, 0x1000, 0xe, 0x5, 0x2, 0x4, 0xa8b2, 0x5b4161ec, 0x0, 0x5, 0x0, 0xffffffff, 0x1, 0x400, 0x1ff, 0x884, 0x5, 0x200, 0x7, 0x12, 0x101, 0x2e, 0xbf2, 0x6, 0x8, 0x4b4, 0x6, 0x4, 0xfffffff7, 0x101, 0x2, 0x2, 0xfa, 0x3276, 0x1000, 0xff, 0x3, 0x8, 0x4, 0xd8f, 0x6, 0x2d2a, 0xfff, 0xa, 0x5, 0x0, 0x68, 0x5, 0x7, 0xf, 0xffff, 0xff, 0x4, 0x1, 0x5, 0x6f2, 0xec3, 0xff, 0x40]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x20000000, 0x4, 0x0, 0x80000000, {0x51, 0x0, 0x0, 0x9, 0x100, 0x6}, {0xc, 0x0, 0xe63f, 0x4, 0x2, 0x1}, 0x2, 0x200, 0x400}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1ca, 0x0, 0x2, 0x5, 0x200, 0x7, 0x1ff, 0x1, 0x9, 0x10001, 0x3, 0x7, 0x1, 0x3, 0x8, 0x259, 0x9, 0x3, 0xfffffff5, 0x90cd, 0x9, 0x872, 0x6, 0x6, 0x6, 0x7, 0x6, 0x6, 0x0, 0x3, 0xffff, 0x66a0, 0x6, 0x3, 0x6, 0x4, 0x7, 0x833, 0x3, 0x1, 0xe, 0x1ff, 0x0, 0x3, 0x680, 0x10, 0x10000, 0x5, 0xfffffffb, 0x3, 0x1, 0x7, 0x3, 0x7, 0x9, 0xac, 0xffffffff, 0xbbb9, 0x0, 0x6, 0xe, 0x0, 0x5b, 0x400, 0x7, 0x3, 0x1000, 0x4, 0x6, 0x0, 0xea, 0x1, 0xa, 0x8, 0x0, 0x3, 0x7, 0x5, 0x7fff, 0x6, 0x61, 0x3, 0x1, 0x2, 0x339, 0x200, 0x6, 0x3, 0x4, 0x8, 0x2, 0x240, 0x90, 0xe54, 0xff, 0x22bc, 0x9ada, 0x5, 0x7, 0x5, 0x0, 0x1dd, 0xa, 0x4, 0x9, 0x29, 0x1fa1cdc2, 0x2, 0x0, 0x10001, 0xffffffff, 0xef5, 0x3, 0x2, 0x7, 0x6, 0x40, 0x1, 0x1, 0x4, 0x8, 0x40, 0x5, 0x80, 0x8, 0x200, 0x1, 0x80000000, 0x10000, 0x2, 0xb, 0x6143, 0xa, 0x8b11, 0x0, 0x8001, 0x80000000, 0x4, 0x3266, 0x6, 0x9, 0xc, 0x0, 0x5, 0x3, 0x6, 0x3, 0x5, 0x6, 0xfffffff8, 0x100, 0x8001, 0x40000000, 0x1, 0xa8, 0x2, 0x9de, 0x2, 0x6, 0x400, 0x2, 0x897, 0x3, 0x3, 0x8, 0x5, 0x5, 0x0, 0x9, 0x6, 0x8000, 0x5, 0x0, 0x2, 0x1, 0x2, 0x8, 0x3ff, 0x7, 0xf3c9, 0x1, 0x9, 0x3, 0x40, 0x1, 0xfffffffe, 0x7fffffff, 0xfffffffb, 0x40, 0x3, 0x80, 0x3, 0x80000000, 0xfffffff7, 0x4, 0x2, 0x8, 0x8, 0x8001, 0x2, 0x7, 0x3ff, 0x0, 0xf4000000, 0xffffffff, 0x10001, 0x0, 0xffffffff, 0x6, 0xf2, 0x1, 0xf, 0x4, 0x79866241, 0x16, 0x0, 0x81, 0x100, 0x6, 0x80000000, 0x7fff, 0x0, 0x9, 0x4, 0xf42, 0x7f, 0x4, 0x80, 0xcdb, 0x8001, 0x1, 0x80000000, 0x1, 0x10000, 0x800, 0x9, 0x3, 0x4, 0x9, 0x4, 0x6fb649fb, 0x9, 0xdde, 0xfe9324d3, 0x6, 0x2ac, 0x0, 0xc2f, 0x0, 0x1, 0xffffffff, 0x2, 0x10, 0xc2, 0xa]}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x5, 0x7}}, @TCA_FW_MASK={0x8, 0x5, 0x7}, @TCA_FW_INDEV={0x14, 0x3, 'veth1_to_hsr\x00'}]}}]}, 0x3558}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg$inet(r1, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="c8a4f46d3868080ae8b5c2305146d4f92c58acdaf142a291b5998678d31562632237144b8d5bc65aa0cb36af6f643df88fd582f103ded42eb8cecfbfff4c7df2a5bd0af6b215e634cf4d43e5b442f84003c35a1c72251b639d83fc767fb6171f4784488e452e9df74d6041412e8b3aa6c21f36209262c99f8d26ccfb0e8d2e3fdecd683cfc6477698df5df0d79f4de0d88eba2696f01cea1dddcc77b5956a8b5", 0xa0}, {&(0x7f00000001c0)="c2872d1f1406e34fc9daafbe50859ae47211fb1d107303f40ef0cda1ffe35a5907fabc35772394cd677e6b0ee1272d7de886c739c66a96c0184955fd756399192d0c93555bcb97bb72e4ea39318d9d044ec924470a2a80c7ab6826b028b7da4992cc876cdfc71be7c5ee8daad6030b36991861b68e637ab52f2f1be32ff6dcb6c1ac0b743641c0adbff5937f74e47697c9394782fabfce390e6655b056a76e7ecf1341faf52575bb8499630b5568a1fd9922bbdee89aeb3f7e0eabcac064399d7e9b9d6444a40642651e46fccfe3c2785fdac1ba7c5feecb9f1f3378f3ce50bd07a947bebcc0dade1bc182a6a027c27b2d34ec50c0a39f92c8", 0xf9}, {&(0x7f00000002c0)="cc717a9e54966ea986a6601a2bf1349ca73cb410916e82fde3d485d75efedff5204628453e83740be7da7cfe18a510d9ab782af0b011d4f0804a27b762f3e4293427202ff83ca991694fdf64f360c8b06b520202d7a560eca8017884442e5d9ab05df5fe9b20f9c309b76ae9f49cc75e2a245535862d179e08ef", 0x7a}, {&(0x7f0000000340)="56c7cf36f6fc23d1bc70de572a1c959c968a09172de506a07ad78e58d297e3286ebcc2f1c345c256a92f8755eb6b1805d2a32d641cf005162a6a66cbe056e1db470303d4f95c0e36022ac5c79e5c1c91c5e2a4f61810148fc03e2f1ade2a7e157b80aa1f07f80e06bba11c5a48969e3a035d2c08c95142c1e57e75768b8f9ade673f754b5e32b82d421a211f0ee7", 0x8e}], 0x4}}, {{&(0x7f0000001480)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000001980)=[{&(0x7f00000014c0)="a2d699e20854e42b84", 0x9}, {&(0x7f0000001500)="0b794a4316c705e93986b7407d48d8a04c14990ea6770da6d450b878e066ec15883d7d752a353056d2f2b220ca8a9ef90a4b6f45175abe49087dd0ab4cc58a04c575f38c51425ef4edae1f4b426710973e09360dac79d9c13ec742857d5c2f43638ec19dbc29e4f965a9f66473e4aa99f63748edea35dff194006cb146121234cf3259f08e09c813a8ed508ec8938b7bf13ab1d6b217812b83cbe43e6682d19d964a2de6c81cd068f2da07df2ff52697b8b92941538c4baca8129ad3cfd2c0", 0xbf}, {&(0x7f0000001640)="70db8ce973a9fbf48f959ec1474d3e9bdb2981a5048fb4b4d47747205502e0739bec461334417294ddec5cccdae82103bb0a4d6692f2d52ccfb72d4a32aedef5754d4b08f5e0ded838a7a4e41d177a88d9390fb5e739612c5508fd84f21f5f08d473ecc2398f4c74777af30d9ad96549e11c08f2", 0x74}, {&(0x7f00000016c0)="9e632cbf1e200da390f1cf5f434bf2e6b0ba84bcdd330c01a94a7963af403eea0df4489181ea84a326e3b30cc51eea9be93f6c752e6e0434e3d9e9541e1dc9229ad017936b21532a5f862751dd95a7a1ff526eb41db872217733d274d33825ae584b468d64b4843efaf21cbfa6b3488aaef03a74edb0e83b9f39ef4d5672973829d0030200b297750fe346d7f022d6b5c03f7fd96f4c98288e4608beb457306becb8d457f46a77d5938746428677a8bc18d0c47c5d4bc069ab54f2ce215b3745468e3afb93ce05aee8a11827de2b7596cb", 0xd1}, {&(0x7f00000017c0)="bd0b71def9d3a0cc6183758bfddf30b5aaa0be34d5d070d849b945656af5a64bbf697195d693630ecb29780497d3a9322150b5fa8458c8a04ffc14c54e2e2ec3d198d1deea9994a6f8255346cadc3ec7129d3e854ced6040699879c4a24e7190692237983c348a2b196bf23a53621fd36143f741b159031e8575efbbd5ba9aa132652b9f9aa49e8110279e2572ab9f333e227ee814048414d3c825d4cea48ead9dfbf28e75089f959868f20fcc336e96a4301377fd3cf619324fd7412e8d43e8ac9aa9cebefdce7bb6e1b6d7", 0xcc}, {&(0x7f00000018c0)="92eba31bca827ed51186c8ff1ebc7b8068e26f5cb28669395dc3b2fb73a15736464efbe20b96921c0e9e8a4d114c25be30212b87bfd729f5a4728bd387309e13b28d5741e54ed45f89400a7f6a1a937df1fdf8de5a0ffe5115ddd86ef93ae13cc7a1c149e530c3da77420d9b0de2842f750d0971b8b58fa52e3341d24194065c79f67f76c754", 0x86}], 0x6, &(0x7f00000015c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5b}}], 0x18}}, {{&(0x7f0000001a00)={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f0000001cc0)=[{&(0x7f0000001a40)="b0214c64a8b767b1ce552d6d3aa84022ce61f6c7e0468d1f017ab9c23f09bb916a04e2cd020e4fdff6677c674a2327328e67345511b233c816350f98219e1872281464b38204db4f39a99c05a864f751e6911436fb7271114621af0900c40855e54fac115d83b52a9126a44a5e", 0x6d}, {&(0x7f0000001ac0)="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", 0xfd}, {&(0x7f0000001bc0)="f3675fd3b083f560c9c464c6c946d9978269c5706f8044fcf7b0a5e00ff5235f4438c149031c09dcd27270540aaf34bf3aa011c25877f1042638d4598b885f947199b7c77d2063064d4363261aef024d016819dce18f32e6a358cde2b82754dc1bb4048b88f936de0145ac95f56dc18655303087208c9f075a4ca1eeccd28f834f72290f2e30093c98275f71c54dac44fa7e45509f7b7f95899f2523a2fd6eebe9e43c1e3e664345d88797cda8", 0xad}, {&(0x7f0000001c80)}], 0x4}}, {{&(0x7f0000001d00)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000001d40)="c7bbcac85b732c3ac2abd60c4dc74bab41a2a5326c2ff611", 0x18}, {&(0x7f0000001d80)="c775efffcd302a27b410278b6d49b8d6870d6e26939c7945883c0ce4b24bcbf7d0b3d64aa665aa931def30c9b1d63561e2ff62ecc8462cafeaf07967ffb6bed722a2495a310748c77f27674c73a8eb444ddf6b43866f7719b902001b504fd60d35ca893726d542d41e94dd45e41dab154a324af4", 0x74}, {&(0x7f0000001e00)="c2ebaeed5740a9b2c55239f835ee877534900fccf705fcc610c8315d12ab253de4cd77b14866c8b16749976eef2f1a2f5b8f6374ad8434397350c2f7bab41b2584f1947903d70f60b6c60b9e6e80fbfc9af114dfc52dc271c1b3c53042a3739af9f89d1270acab1a7c4cf386ac542d1621384835b974c2734bcb62a2af6e314b232938f7683280e3bc3b0e587572", 0x8e}, {&(0x7f0000001ec0)="041f04fd55567a627c2c11aff5d88f1e450ce5f84a5abf9583d747ca270a1a9c7bb5d5f754633ea89d666f240ff1b63fb2114456d9aedd56aabb2a81a94260d1805a050c36", 0xa8}], 0x4, &(0x7f0000001f80)=[@ip_ttl={{0x14, 0x0, 0x2, 0xffff0000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}], 0x48}}, {{&(0x7f0000002000)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000002280)=[{&(0x7f0000002040)="207aea76747d42d1ad43f15b98409313b991b95708c5456fc0061a22469735f0e59467842ab46e112fc646ca2dd20e30841b794794", 0x35}, {&(0x7f0000002080)="e8778a0adf3b9c94280373bbe3eef8e5473bfcb694b3c845fd18424073f4e27a6cf0eb4145f9f141c64dddb4c245f1fa79314df9bae9a4318850098f66ba2467a1dd323a08ecfae1f9f61be2f3c7cc842b9dd2a27bd49f3bd6cda31170d57cf1e778d08337baa3e11597faa842720beee19175b8c8c072ea368ca637f7932794404c54d08013abb19b368a097766721411f65703c5d70188ebcbbc7f9b253e7e198485eaa37106d6c34be7923eaf5017b62c444b029c76f1b32bf7ed29a9e5e2ae5877009e6fcbb077c9d6d7b010b405a1eb5fabb09ac79d9bcb0e0766a546f3a7e2a5d35bfb2c5b5ae541a3", 0xec}, {&(0x7f0000002180)="45267edd3dc58ff167f72e5be6ac9200e2b91b0a93a99815949ffc35334a951c873cbf85c0d56872c3696ad891", 0x2d}, {&(0x7f00000021c0)="dc03f25047e9dea8f5388bda2eee604b23241eb63e7a3e2ee0c93b826ec38f3cf6f73f42162b18fb4f56c535d60717028a2f5344", 0x34}, {&(0x7f0000002200)="dc2afb2851aa46687550b965112364738f5457fc5294a6e9d95401472e978ed52923dd1232ebbd213838b05352287ef802165dd0859ed50904d43f5ac8a1c406bf00deb258c352ac1fe6d785422366688770ba36eee5b7928e71fffd41c0f8fce778aec891ebb143ada56e308ec178144b6bca42493c", 0x76}], 0x5, &(0x7f0000002300)=ANY=[@ANYBLOB="34000000000000000000000007000000830fd37f00000164010100ac1414bb0144144b030a01010000000004ffffffff00000007000000001100000000000000000000000100000022000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYRESDEC=r0], 0x88}}, {{&(0x7f00000023c0)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f00000024c0)=[{&(0x7f0000002400)="f44ee8877cf26186f1e2e3f333d00c293f41fdd5b02f147531c0ac2232a06c", 0x1f}, {&(0x7f0000002440)="6fe93948806bd00dca", 0x9}, {&(0x7f0000002480)="eb02ba5d", 0x4}], 0x3}}, {{&(0x7f0000002500)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000002880)=[{&(0x7f0000002540)="d62db98c6d9a3cc68988644545ec8874908017ef71bac6f531ae1cb169fe4c0d12232a8a676660eb58f971a6b17295d08dbfe7b9f7fa944c8b1e314b84aa27bdf806a35d3e5d485fbb338475e9cf80797b9cdefd10a871d35ebc318e37e3e95681eafe82f7707a41d021a2e17d913e6e0f8398d529459bddb8009b1900c0e359d413a8aaa24bd0a5e6582a16a4276fdcc1945d3f22854cf6704f65448f5bf60e272bdbc71e", 0xa5}, {&(0x7f0000002600)="862702a5fafb324c7b0576ea2ffcc62049b8a18b284ec16ce4066a395e4c5c48f2558639c4c4c7aae4b4d84c47c7952a652079f78a077c068dc7182743d0176c3e23155a87c8d1b308ffcee87ca104575ff4c540ab877b338c2a32756f070034f6cd1b52afdbfc04847f23f11747c82a27", 0x71}, {&(0x7f0000002680)="64fb2b03b3bf61e02bf3288a846ea514f1ac1578260e7381509d3d67035b83a1f9f6ee67476ae9e2e249a4dbb4006eeab096cd8c31875afb5a90f2ee48958785bd18670e4ea4c0bb0f43942ef596f4e1e28a0b674f84015c527d0e4f4ad4f6e23c45320375cf8377878108ee8ad7e6729e42e34ac15b8362e19131883775c92913e5e868d8a80d0b08", 0x89}, {&(0x7f0000002740)="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", 0xfe}], 0x4}}], 0x7, 0x40000) recvmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[@ANYBLOB="e10931d8640a00000000000086dd600141000010880020010000000000000000000000000000fe8000000000000000000000000000aa00000000000790"], 0x0) socket(0x1e, 0x4, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r11, @ANYBLOB="24005a8020000180140003000000200000000000edff"], 0x40}}, 0x0) 791.409848ms ago: executing program 1 (id=4257): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x2a, 0x0, 0x1}, 0x20) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000300)=0xa, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x440, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB="d2e6725d5a"]) r3 = socket$netlink(0x10, 0x3, 0xb) write(r3, &(0x7f0000005c00)="2700000014", 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 722.166104ms ago: executing program 6 (id=4258): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x4, 0x0, &(0x7f0000000000)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmmsg(r1, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}, 0xa}], 0x1, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000000)=0x6, 0x4) sendto$inet(r1, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000005"], 0x114}], 0x1, 0x0, 0x0, 0x20004054}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"/320], 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000000), 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4008840, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40000, 0x0, 0x0) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x1d, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffff00, 0x0, 0x0, 0x0, 0xf88}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_query, @printk={@lli}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x3, 0x6, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='netfs_sreq_ref\x00', r4, 0x0, 0x34f}, 0x18) 674.05274ms ago: executing program 1 (id=4259): r0 = socket$rds(0x15, 0x5, 0x0) recvmmsg(r0, &(0x7f0000006c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10001, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x39}]}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x31}, 0x90) 236.434179ms ago: executing program 3 (id=4260): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg1\x00', 0x0}) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000000a00)={{r1}, "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"}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x17}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x80}}]}, 0x40}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x20, 0x1412, 0x20, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x40000) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1401000020000101000000000000000003"], 0x114}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[], 0x0, 0x5b}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000071120a000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x24}, 0x94) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000080)={'wg0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f00000000c0)={r8}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r9, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r9], 0x40}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001900)={0x6, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000d2225ad02100850000006e0000009500000000000000"], &(0x7f0000001600)='syzkaller\x00'}, 0x90) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=@bridge_getvlan={0x20, 0x72, 0x333, 0x6, 0x4, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}}, 0x20000010) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r13, 0x29, 0x8, &(0x7f0000000080)=0xffff7b6e, 0x4) getsockopt$inet6_buf(r13, 0x29, 0x23, &(0x7f0000000600), &(0x7f0000000580)) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)={{0x14}, [], {0xffffffffffffff5e}}, 0x7c}}, 0x0) 235.397479ms ago: executing program 1 (id=4261): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffffffb}, 0x11) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000006, 0x40010, 0xffffffffffffffff, 0x3000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000180)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000200)=0x20) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000120002fc00"/28], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) close(r7) syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), r4) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0xa}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x40}, 0x1, 0x2000000000000000}, 0x0) 232.115303ms ago: executing program 3 (id=4262): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x14, r1, 0x601, 0x70bd25}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x26c, r2, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x26c}, 0x1, 0x0, 0x0, 0x40000}, 0x40018) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, r5, 0x25, 0x2, @void}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)=""/48, 0x30}], 0x1}, 0x400060df) r6 = accept4$unix(0xffffffffffffffff, &(0x7f00000002c0)=@abs, &(0x7f0000000240)=0x6e, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) r8 = socket(0xa, 0x3, 0x2) socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000000640)={0x0, 0x4, 0x3, 0x8, @vifc_lcl_addr=@local, @broadcast}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000004bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) bind$unix(r6, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) 231.198229ms ago: executing program 7 (id=4263): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xf0}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc8701, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="000086dd03000a0000008d0000006809c2b4006806ff00000000000000000000000000000000ff020000c009da8e7798375864e20000000000000000000000012e002c1867000000040604038f1000100000000000000000000000000000000100000000000000000000ffff64010101fe8800000000000000000000000000010000000000000000000000000000000000004e2300004e20000000430f7cfaf1b7d601000000000000000400000004"], 0x9e) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r5, 0x400454c9, 0xba98575a95aeb70d) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="840000000a0601010000000000000000010000000900020073797a310000000005000100070000000800094000000008540008"], 0x84}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x40) (async) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x40) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x30a) (async) ioctl$TUNSETLINK(r4, 0x400454cd, 0x30a) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="df482abd7020000000000c000000200003801c000380140001c0080001000200000005000200000000000400017418000180140002007369743000"], 0x4c}}, 0x0) r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r11, 0x0) (async) listen(r11, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r11, 0x89e7, 0x0) (async) ioctl$SIOCX25SCUDMATCHLEN(r11, 0x89e7, 0x0) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="000206010300000000000000000000000005000500000000000900020073797a3200000000050004000000000005000100070000000400078011000300686173683a69702c706f727400000000000000"], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="840000001000f5a400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000006400128009000100626f6e640000000054000280050001000500000005000d000200000008000200", @ANYRES32=0x0, @ANYBLOB="060018"], 0x84}}, 0x0) 230.778308ms ago: executing program 1 (id=4264): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000000015000000080003006ac2c8bbaccea930fab922619ae9ac7631c09b18d0405e0a7582ddfb5f71131b678a194484c469d5d9127ebe2b0555f49a557cf3dfe2682fb3a6c23e0664bab11658d3b1f17af8ca21ab44f622d07a0ac8db5917b4da2abeaa963df3061b2f520e0445c069335f5718be7490e9360ea8ed0bbd9a659af747e1db4c1eb946ee05027b66c45224f92cb8991f3bf86349e9ef7c8fcd6b243b08a329", @ANYRES32=r2, @ANYBLOB="0a00e8000802110000010000"], 0x28}}, 0x0) (async) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x27, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x49, '\x00', 0x0, @fallback=0x35, r3, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f00000000c0)={0x2, 0xd}, 0x10}, 0x94) 229.901083ms ago: executing program 3 (id=4265): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @loopback}, 0xae, 0x0, 0x0, &(0x7f0000000140)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0xc000) (async) sendmsg$sock(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) (async) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000300), &(0x7f0000000380)=0x10) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x30, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) r9 = socket$unix(0x1, 0x5, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0) (async) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80000, {0x0, 0x0, 0x0, r11, {}, {0x2, 0xb}, {0xa, 0xfff3}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x4008000) 228.238784ms ago: executing program 1 (id=4266): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r2, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r1, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000280), &(0x7f0000000100)=@tcp=r2, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xec37}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MTU={0x8, 0x4, 0x1ff}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0xc000802) 168.222709ms ago: executing program 7 (id=4267): r0 = socket(0x40000000015, 0x5, 0x0) close(r0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7108bfaffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r2], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) 167.370773ms ago: executing program 1 (id=4268): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500070100000008000000b70300000000000085000000a000000495000000000000009c2fe001c57e5ea979b1d1dbf8438499c9bb7a63966cda2e97c51edccaef00000000000000000000fbcd3bb30000000000008660222e73c591a172e5cf091b05fbd354507567bb65a3598ea6b24ed9d5fa0713549aeb8c68ba6770c97a7d3462f8bd9f6e6e00"/174], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x4, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(r4, 0x0, 0x20040004) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="cf042dbd7000fedbdf251200000008000300", @ANYRES32=r9, @ANYBLOB="0a00060008021100000100000c004300f8ff"], 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r8, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x8}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x75}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40480d0) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x8000, 0x7800, 0x9, 0x1, {{0x6, 0x4, 0x0, 0x3e, 0x18, 0x64, 0x0, 0x7, 0x29, 0x0, @loopback, @loopback, {[@ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$NL80211_CMD_LEAVE_OCB(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r5, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x4000) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x80, r5, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x80}}, 0x26008181) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x12}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 160.019433ms ago: executing program 3 (id=4269): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@struct={0x6, 0x2, 0x0, 0x4, 0x0, 0x0, [{0x4, 0x3}, {}]}]}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x0, 0x61]}}, &(0x7f00000000c0)=""/2, 0x44, 0x2, 0x1}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)=0x7fdffffc) r3 = socket$pppoe(0x18, 0x1, 0x0) accept$alg(r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) openat$cgroup_ro(r1, &(0x7f0000000240)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1001, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000100)={{0x0, 0x401, 0x4, 0x6, 0xa156, 0x8, 0x9, 0x200, 0x30, 0x59aa, 0x100, 0xfffffffffffffffc, 0x6, 0xe34b, 0x1000}, 0x20, [0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f00000001c0)={{r4, 0xf, 0xfffffffffffffff8, 0x6, 0x10001, 0xd6, 0x40, 0x0, 0xa1b, 0xb9, 0x0, 0x5, 0x8, 0x356, 0x10000}, 0x8, [0x0]}) ppoll(&(0x7f0000000040)=[{r0, 0x20}], 0x1, &(0x7f0000000080), 0x0, 0x0) 103.213378ms ago: executing program 7 (id=4270): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x5, {{0x2, 0x4e23, @multicast1}}}, 0x88) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000611074000000000063012c00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) socket$vsock_stream(0x28, 0x1, 0x0) 0s ago: executing program 3 (id=4271): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000040)=[{&(0x7f00000001c0)="580000001400192340834b80044d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000b0c10000000224e00000000", 0x58}], 0x1) r5 = socket$unix(0x1, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x81}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000c00)=@newtfilter={0x60c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0x0, 0x7}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x5dc, 0x2, [@TCA_FLOWER_ACT={0x5c8, 0x3, [@m_nat={0xd4, 0x5, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0xfffff800, 0x20000000, 0x7c2, 0xc45}, @remote, @multicast2, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffff87f8, 0x10, 0x6, 0x79d, 0x8}, @multicast2, @broadcast}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffffc, 0xffff8001, 0xfffffffffffffff9, 0x3, 0x4c33}, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff, 0x1}}]}, {0x33, 0x6, "c82a0c797a254afd7523675d9f543048ddac05a210433a82290beb96f792cd2262201021b91a327c24356f0983fab8"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_xt={0x50, 0x14, 0x0, 0x0, {{0x7}, {0x4}, {0x26, 0x6, "d57983b3ba8d2536b5c2e3b10bc8bb4625188ab5d14723fc15307f14ff28c3d71c30"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_gact={0xc8, 0xf, 0x0, 0x0, {{0x9}, {0x70, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x67, 0x1, 0x1, 0x101}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0xf8, 0x2, 0x9, 0xd4}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x17d, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x80, 0x40, 0x20000000, 0x80000000, 0x10}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x18e8}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x9f1, 0x20000000}}]}, {0x2e, 0x6, "fe2a10a48868b5d33548b0d59e4817c5f436fcfc22783b7e2b5afd25390a1333faf38bc95f230d1d388d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x1ac, 0x17, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x86}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x9f}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x200, 0x2, 0x7, 0x7, 0x7}, 0xe}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x2, 0x5, 0xffffffffffffffff, 0x9, 0xfd7}, 0x6}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xba2}]}, {0xff, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbedit={0x12c, 0x11, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x3, 0x2}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x4}]}, {0xee, 0x6, "c67bb88cc8fd367d6c5623e6cea00ebac46407029f17ca4a6b7bc489504955ad68b1aabdb9660400bbf48650fcc2fa94f53fd7da5cf0a5216e0a4b641da6119db1508e113e5d8887643d1d6478a12f0d2a9343eefb0568a223e978c613c179c6719ac6bcfcfc592afec5d42e0352158174292e9d2779407efbd04733afa0107dfe7bf63832eb9f0fa12618ed6f6430ba249cdb6abfe8a93fdde64ee422ee6b0c560372775626822147da934c7926cfaf9aaf4a68c2136e9a5ae7728ca5a985b72d67d58db6ded1f479d1c53e015499200579cc0fb085d9dabcdbcf945723711541bd975879a3974679d6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_skbedit={0x100, 0x20, 0x0, 0x0, {{0xc}, {0x7c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2294f4aa, 0xfffffffa, 0x6, 0x9, 0x6}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0x8, 0x10000001, 0x3, 0x3ef}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x800, 0x1, 0x6, 0x6, 0x6d7}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x23d9}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xfffff001, 0x8, 0x7, 0x7c0, 0x5}}]}, {0x5a, 0x6, "a2578958c701f11ea55337b195926aeffc2aef6b7a09b3dc60b34797aa3db0456af2db524b0e7eacf326ccd4f0bba1b081711350dadf8a6de3792be90afa412e2f6a10888524d503885d2214391686f3db64678efc34"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}]}]}}]}, 0x60c}, 0x1, 0x0, 0x0, 0x22044028}, 0x40040) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005b80)=@delchain={0x24, 0x26, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0x9}}}, 0x24}}, 0x0) recvmmsg(r7, &(0x7f0000004f00)=[{{0x0, 0x0, 0x0}, 0xfffffffa}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000280)=0xa1, 0x4) syz_genetlink_get_family_id$team(&(0x7f0000000380), r4) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r2) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0x88, r8, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0xc94}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8f1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7dcb}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x401}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x81}]}]}, 0x88}}, 0x20048804) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt(r0, 0x84, 0x14, &(0x7f00000001c0)="020000000980ffff", 0x8) kernel console output (not intermixed with test programs): 7][T15419] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2704'. [ 538.889543][T15428] tipc: Enabled bearer , priority 0 [ 538.901971][T15428] syzkaller0: entered promiscuous mode [ 538.908042][T15428] syzkaller0: entered allmulticast mode [ 538.940393][T15428] tipc: Resetting bearer [ 538.948839][T15427] tipc: Resetting bearer [ 538.965389][T15427] tipc: Disabling bearer [ 539.108617][T15435] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2710'. [ 539.498660][T15462] tipc: New replicast peer: 255.255.255.255 [ 539.516008][T15462] tipc: Enabled bearer , priority 10 [ 539.548273][T15464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2718'. [ 539.566412][T15464] bond0: entered promiscuous mode [ 539.577092][T15464] bond0: left promiscuous mode [ 539.615008][T15471] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 539.882739][T15486] netlink: 236 bytes leftover after parsing attributes in process `syz.1.2722'. [ 540.119870][T15493] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 540.127426][T15495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2725'. [ 540.177439][T15496] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 540.293605][T15506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2730'. [ 540.437715][T15517] netlink: 'syz.0.2730': attribute type 1 has an invalid length. [ 540.478410][T15518] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2733'. [ 540.552738][T15517] 8021q: adding VLAN 0 to HW filter on device bond9 [ 540.593552][T15506] bond9: (slave geneve4): making interface the new active one [ 540.604659][T15506] bond9: (slave geneve4): Enslaving as an active interface with an up link [ 540.616949][T14090] tipc: Node number set to 1076253719 [ 540.628885][T15525] netlink: 'syz.1.2734': attribute type 23 has an invalid length. [ 540.631058][T12059] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0 [ 540.679167][T12059] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0 [ 540.715248][T12059] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0 [ 540.733268][T12059] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0 [ 541.090693][T15553] bridge0: port 1(batadv0) entered blocking state [ 541.109225][T15553] bridge0: port 1(batadv0) entered disabled state [ 541.127792][T15553] batadv0: entered allmulticast mode [ 541.145240][T15553] batadv0: entered promiscuous mode [ 541.280964][T15564] xt_hashlimit: overflow, try lower: 3/0 [ 541.575612][T12065] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 541.584990][T12065] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 541.620185][T15582] netlink: 'syz.5.2754': attribute type 2 has an invalid length. [ 541.733775][T15587] Bluetooth: hci1: too big key_count value 32778 [ 542.169204][T15608] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20004 [ 542.274344][T15621] --map-set only usable from mangle table [ 542.353948][T15625] x_tables: duplicate underflow at hook 2 [ 542.375397][T15630] netlink: 'syz.5.2768': attribute type 11 has an invalid length. [ 542.749060][T15651] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:20001 [ 542.757466][T15651] xt_cgroup: path and classid specified [ 542.764695][T15651] netlink: 'syz.3.2776': attribute type 30 has an invalid length. [ 542.836240][T15657] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 542.868626][T15651] bond4: option arp_missed_max: invalid value (0) [ 542.875121][T15651] bond4: option arp_missed_max: allowed values 1 - 255 [ 542.962979][T15651] bond4 (unregistering): Released all slaves [ 543.118569][T15665] __nla_validate_parse: 2 callbacks suppressed [ 543.118589][T15665] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2781'. [ 543.146394][T15665] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2781'. [ 543.172373][T15665] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2781'. [ 543.221395][T15670] netlink: 'syz.0.2782': attribute type 33 has an invalid length. [ 543.266355][T15670] bond10: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 543.304240][T15670] bond10 (unregistering): Released all slaves [ 543.610907][T12059] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 543.674672][T15689] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2786'. [ 543.694698][T15689] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2786'. [ 543.753149][T12059] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 543.844013][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 543.853603][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 543.862875][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 543.871602][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 543.881388][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 543.891967][T15692] tipc: Enabled bearer , priority 0 [ 543.905289][T15692] syzkaller0: entered promiscuous mode [ 543.917936][T15692] syzkaller0: entered allmulticast mode [ 543.924100][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 543.942249][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 543.948719][T12059] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 543.966583][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 543.998322][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 544.012537][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 544.053661][T15692] tipc: Resetting bearer [ 544.090247][T12059] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 544.180863][T15691] tipc: Resetting bearer [ 544.213197][T15705] netlink: 'syz.5.2793': attribute type 21 has an invalid length. [ 544.236713][T15705] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2793'. [ 544.253586][T15691] tipc: Disabling bearer [ 544.271705][T15705] netlink: 7064 bytes leftover after parsing attributes in process `syz.5.2793'. [ 544.290441][T15708] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2794'. [ 544.300751][T15709] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2794'. [ 544.310375][T15694] vxcan1 speed is unknown, defaulting to 1000 [ 544.310372][T15708] netlink: 'syz.3.2794': attribute type 1 has an invalid length. [ 544.331683][T15705] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 544.343784][T15708] netlink: 'syz.3.2794': attribute type 1 has an invalid length. [ 544.425972][T15708] netlink: 'syz.3.2794': attribute type 2 has an invalid length. [ 544.433981][T15708] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2794'. [ 544.463305][T15709] netlink: 'syz.3.2794': attribute type 1 has an invalid length. [ 544.488117][T15709] netlink: 'syz.3.2794': attribute type 1 has an invalid length. [ 544.510719][T15714] ipt_REJECT: TCP_RESET invalid for non-tcp [ 544.527631][T15709] netlink: 'syz.3.2794': attribute type 2 has an invalid length. [ 544.587142][T15715] wireguard: wg1: Could not create IPv4 socket [ 544.618862][ T5834] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 544.633555][ T5834] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 544.646175][ T5834] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 544.654563][ T5834] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 544.664204][ T5834] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 545.136712][T15739] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 546.076303][ T5842] Bluetooth: hci2: command tx timeout [ 546.433385][T12059] bond6 (unregistering): (slave ip6erspan0): Releasing active interface [ 546.580630][T12059] bond3 (unregistering): (slave gretap1): Releasing active interface [ 546.716009][ T5842] Bluetooth: hci6: command tx timeout [ 547.004864][T12059] bond0 (unregistering): Released all slaves [ 547.019234][T12059] bond1 (unregistering): Released all slaves [ 547.127424][T12059] bond2 (unregistering): (slave veth5): Releasing active interface [ 547.136515][T12059] bond2 (unregistering): Released all slaves [ 547.149694][T12059] bond3 (unregistering): Released all slaves [ 547.163592][T12059] bond4 (unregistering): Released all slaves [ 547.177995][T12059] bond5 (unregistering): Released all slaves [ 547.295289][T12059] bond6 (unregistering): Released all slaves [ 547.407370][T12059] bond7 (unregistering): (slave veth13): Releasing active interface [ 547.418557][T12059] bond7 (unregistering): Released all slaves [ 547.445240][T15723] batadv0: entered promiscuous mode [ 547.452285][T15723] bond0: entered promiscuous mode [ 547.459498][T15723] debugfs: 'hsr1' already exists in 'hsr' [ 547.465232][T15723] Cannot create hsr debugfs directory [ 547.471383][T15723] hsr1: Slave A (batadv0) is not up; please bring it up to get a fully working HSR network [ 547.483154][T15723] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 547.496840][T15723] hsr1: entered allmulticast mode [ 547.502140][T15723] batadv0: entered allmulticast mode [ 547.508474][T15723] bond0: entered allmulticast mode [ 547.516069][T15723] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 547.532909][T15694] hsr0 speed is unknown, defaulting to 1000 [ 547.547732][T15749] tipc: Enabled bearer , priority 0 [ 547.559553][T12059] : left promiscuous mode [ 547.620023][T15750] syzkaller0: entered promiscuous mode [ 547.626377][T15750] syzkaller0: entered allmulticast mode [ 547.649816][T15759] tipc: Resetting bearer [ 547.663287][T12059] tipc: Left network mode [ 547.811841][T15716] vxcan1 speed is unknown, defaulting to 1000 [ 547.868496][T15776] Cannot find del_set index 3 as target [ 547.903506][T15759] tipc: Resetting bearer [ 547.952447][T15759] tipc: Disabling bearer [ 548.147265][T15776] hsr_slave_0 (unregistering): left promiscuous mode [ 548.156758][ T5842] Bluetooth: hci2: command tx timeout [ 548.284312][T15716] hsr0 speed is unknown, defaulting to 1000 [ 548.350300][T15786] __nla_validate_parse: 2 callbacks suppressed [ 548.350320][T15786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2810'. [ 548.538184][T15694] chnl_net:caif_netlink_parms(): no params data found [ 548.643624][T15798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2814'. [ 548.678580][T15802] tipc: Enabling of bearer rejected, failed to enable media [ 548.687297][T15805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2816'. [ 548.707605][T15805] batadv1: left allmulticast mode [ 548.712707][T15805] batadv1: left promiscuous mode [ 548.736510][T15805] bridge0: port 4(batadv1) entered disabled state [ 548.772727][T15805] dummy0: left allmulticast mode [ 548.801563][ T5842] Bluetooth: hci6: command tx timeout [ 548.808844][T15805] dummy0: left promiscuous mode [ 548.828155][T15805] bridge0: port 3(dummy0) entered disabled state [ 548.863626][T15805] bridge_slave_1: left allmulticast mode [ 548.900418][T15805] bridge_slave_1: left promiscuous mode [ 548.925951][T15805] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.970082][T15805] bridge_slave_0: left allmulticast mode [ 548.976342][T15805] bridge_slave_0: left promiscuous mode [ 548.982256][T15805] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.207390][T12059] hsr_slave_0: left promiscuous mode [ 549.214574][T12059] hsr_slave_1: left promiscuous mode [ 549.222716][T12059] veth0_macvtap: left allmulticast mode [ 549.423340][T15835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2819'. [ 549.539475][T12059] vlan1 (unregistering): left allmulticast mode [ 549.546041][T12059] veth0_vlan (unregistering): left allmulticast mode [ 550.235977][ T5842] Bluetooth: hci2: command tx timeout [ 550.245168][T15694] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.256624][T15694] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.264368][T15694] bridge_slave_0: entered allmulticast mode [ 550.273472][T15694] bridge_slave_0: entered promiscuous mode [ 550.287277][T15694] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.295044][T15694] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.303066][T15694] bridge_slave_1: entered allmulticast mode [ 550.312695][T15694] bridge_slave_1: entered promiscuous mode [ 550.450315][T15694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 550.478957][T15694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 550.572203][T15694] team0: Port device team_slave_0 added [ 550.582357][T15694] team0: Port device team_slave_1 added [ 550.594545][T12059] IPVS: stop unused estimator thread 0... [ 550.599238][T15716] chnl_net:caif_netlink_parms(): no params data found [ 550.648809][T15694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 550.656377][T15694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.683427][T15694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 550.718935][T15694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 550.726313][T15694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.754938][T15694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 550.872162][T15694] hsr_slave_0: entered promiscuous mode [ 550.879674][T15694] hsr_slave_1: entered promiscuous mode [ 550.885557][ T5842] Bluetooth: hci6: command tx timeout [ 550.892766][T15716] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.901414][T15716] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.909071][T15716] bridge_slave_0: entered allmulticast mode [ 550.916967][T15716] bridge_slave_0: entered promiscuous mode [ 550.926155][T15716] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.933921][T15716] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.941429][T15716] bridge_slave_1: entered allmulticast mode [ 550.949929][T15716] bridge_slave_1: entered promiscuous mode [ 551.033918][T15716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 551.122717][T15716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.230956][T15716] team0: Port device team_slave_0 added [ 551.281731][T15716] team0: Port device team_slave_1 added [ 551.327366][T15877] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2829'. [ 551.414694][T15879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2830'. [ 551.470964][T15877] hsr_slave_1 (unregistering): left promiscuous mode [ 551.630029][T15716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 551.646205][T15716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.686385][T15716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 551.734574][T15716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 551.748436][T15716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.776777][T15716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 551.816077][T15895] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2835'. [ 552.010171][T15716] hsr_slave_0: entered promiscuous mode [ 552.023786][T15716] hsr_slave_1: entered promiscuous mode [ 552.031395][T15716] debugfs: 'hsr0' already exists in 'hsr' [ 552.037720][T15716] Cannot create hsr debugfs directory [ 552.049398][T15908] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2838'. [ 552.317102][ T5842] Bluetooth: hci2: command tx timeout [ 552.572583][T15930] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2846'. [ 552.628564][T15694] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 552.678742][T15694] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 552.782445][T15694] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 552.823685][T15694] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 552.911689][T15944] bond6: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 552.928295][T15944] bond6 (unregistering): Released all slaves [ 552.958639][ T5842] Bluetooth: hci6: command tx timeout [ 552.981333][T15946] bond6: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 552.993676][T15946] bond6 (unregistering): Released all slaves [ 553.014142][T15955] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2849'. [ 553.023638][T15955] netlink: 'syz.3.2849': attribute type 5 has an invalid length. [ 553.078904][T15716] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 553.121239][T15716] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 553.150110][T15716] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 553.179944][T15716] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 553.373117][T15694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 553.435248][T15694] 8021q: adding VLAN 0 to HW filter on device team0 [ 553.451603][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.459110][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.470983][T15970] __nla_validate_parse: 2 callbacks suppressed [ 553.471006][T15970] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2852'. [ 553.505631][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.513069][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 553.548739][T15716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 553.618309][T15716] 8021q: adding VLAN 0 to HW filter on device team0 [ 553.644541][T12059] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.651805][T12059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.693665][T12059] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.700922][T12059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 554.027034][T15990] ieee802154 phy1 wpan1: encryption failed: -22 [ 554.086741][T15993] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 554.213967][T15716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 554.278598][T16002] lo: entered allmulticast mode [ 554.317092][T15694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 554.500356][T15694] veth0_vlan: entered promiscuous mode [ 554.528583][T15694] veth1_vlan: entered promiscuous mode [ 554.617702][T15694] veth0_macvtap: entered promiscuous mode [ 554.652373][T15694] veth1_macvtap: entered promiscuous mode [ 554.703989][T15694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 554.753083][T15694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 554.792576][T12058] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.827251][T12058] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.855735][T12058] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.900709][T12058] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.075318][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.086745][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.206253][T12059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.214342][T12059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.325321][T15716] veth0_vlan: entered promiscuous mode [ 555.356802][T15716] veth1_vlan: entered promiscuous mode [ 555.416240][T15716] veth0_macvtap: entered promiscuous mode [ 555.436714][T15716] veth1_macvtap: entered promiscuous mode [ 555.487758][T15716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 555.511485][T15716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 555.537562][T16033] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2869'. [ 555.571632][T12059] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.580657][T12059] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.593306][T16033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 555.668056][T16033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 555.710478][T12059] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.723073][T16048] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 555.764777][T12058] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.926973][T16052] tipc: Started in network mode [ 555.932146][T16052] tipc: Node identity 8e2e606f6a39, cluster identity 4711 [ 555.940601][T16052] tipc: Enabled bearer , priority 0 [ 555.949290][T16053] netlink: 'syz.3.2871': attribute type 10 has an invalid length. [ 555.957710][T16052] syzkaller0: entered promiscuous mode [ 555.964403][T16052] syzkaller0: entered allmulticast mode [ 555.965843][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.994533][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.042936][T16060] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 556.081288][T16052] lo: entered allmulticast mode [ 556.092815][T12058] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.102579][T12058] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.103209][T16052] tipc: Resetting bearer [ 556.131526][T16051] lo: left allmulticast mode [ 556.141145][T16051] tipc: Resetting bearer [ 556.164622][T16051] tipc: Disabling bearer [ 556.202035][T16063] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2792'. [ 556.212418][T16063] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2792'. [ 556.239386][T16063] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 556.253373][T16063] bond1 (unregistering): Released all slaves [ 556.483485][T16074] bond1: option packets_per_slave: invalid value (18446744073709551608) [ 556.492916][T16074] bond1: option packets_per_slave: allowed values 0 - 65535 [ 556.504292][T16074] bond1 (unregistering): Released all slaves [ 556.775899][T16078] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2880'. [ 557.397245][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 557.415114][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 557.425162][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 557.439994][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 557.456966][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 557.526649][T16099] vxcan1 speed is unknown, defaulting to 1000 [ 557.945220][T16099] hsr0 speed is unknown, defaulting to 1000 [ 558.190549][T16128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2892'. [ 558.375310][T16139] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2895'. [ 558.403188][T16099] chnl_net:caif_netlink_parms(): no params data found [ 558.723115][T16099] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.746988][T16099] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.757190][T16099] bridge_slave_0: entered allmulticast mode [ 558.774693][T16099] bridge_slave_0: entered promiscuous mode [ 558.789943][T16099] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.803529][T16099] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.813268][T16099] bridge_slave_1: entered allmulticast mode [ 558.842928][T16099] bridge_slave_1: entered promiscuous mode [ 558.919797][T16144] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2898'. [ 558.924600][T16099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 558.979475][T16099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 559.051768][T16164] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 559.093141][T16099] team0: Port device team_slave_0 added [ 559.113302][T16099] team0: Port device team_slave_1 added [ 559.209100][T16099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 559.217333][T16099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 559.255137][T16099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 559.292814][T16099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 559.309131][T16099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 559.337951][T16099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 559.349069][T16176] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2906'. [ 559.453927][T16099] hsr_slave_0: entered promiscuous mode [ 559.464820][T16099] hsr_slave_1: entered promiscuous mode [ 559.472671][T16099] debugfs: 'hsr0' already exists in 'hsr' [ 559.479883][T16099] Cannot create hsr debugfs directory [ 559.516317][ T5842] Bluetooth: hci1: command tx timeout [ 559.595171][T16184] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2910'. [ 559.766691][T16192] netlink: get zone limit has 4 unknown bytes [ 559.777523][T16192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 559.788849][T16190] netlink: 'syz.1.2912': attribute type 11 has an invalid length. [ 559.834037][T16099] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.883947][T16190] tipc: Enabled bearer , priority 0 [ 559.928422][T16190] syzkaller0: entered promiscuous mode [ 559.934195][T16190] syzkaller0: entered allmulticast mode [ 559.962562][T16099] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.998115][T16190] tipc: Resetting bearer [ 560.012793][T16189] tipc: Resetting bearer [ 560.035062][T16189] tipc: Disabling bearer [ 560.064643][T16099] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.177415][T16099] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.218637][T16204] tipc: Enabling of bearer rejected, failed to enable media [ 560.602135][T16208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 560.624406][T16208] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 560.702834][T16208] bond3: left promiscuous mode [ 560.713881][T16208] geneve2: left promiscuous mode [ 560.751465][T16208] bond5: left promiscuous mode [ 560.764087][T16208] geneve3: left promiscuous mode [ 560.800528][T16208] bond0: left promiscuous mode [ 560.827667][ T60] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 560.842547][ T60] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.852192][ T60] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 560.861251][ T60] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 560.870388][ T60] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.880546][ T60] netdevsim netdevsim5 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 560.900285][ T60] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 560.909774][ T60] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.919531][ T60] netdevsim netdevsim5 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 560.929709][ T60] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 560.940232][ T60] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.950624][ T60] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 561.062519][T16099] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 561.082592][T16099] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 561.104459][T16099] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 561.133632][T16099] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 561.364442][T16099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 561.382895][T16241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2925'. [ 561.419889][T16099] 8021q: adding VLAN 0 to HW filter on device team0 [ 561.458412][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.465680][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 561.487619][T16246] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 561.512286][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.519540][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 561.596545][ T5842] Bluetooth: hci1: command tx timeout [ 561.788436][T16261] sctp: [Deprecated]: syz.1.2931 (pid 16261) Use of int in max_burst socket option deprecated. [ 561.788436][T16261] Use struct sctp_assoc_value instead [ 561.820194][T16265] xt_l2tp: missing protocol rule (udp|l2tpip) [ 561.850101][T16261] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2931'. [ 561.868234][T16261] netlink: 'syz.1.2931': attribute type 30 has an invalid length. [ 561.934896][T16261] bond1: option arp_missed_max: invalid value (0) [ 561.942593][T16261] bond1: option arp_missed_max: allowed values 1 - 255 [ 561.967358][T16261] bond1 (unregistering): Released all slaves [ 562.022801][T16263] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 562.065023][T16099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 562.207537][T16099] veth0_vlan: entered promiscuous mode [ 562.225216][T16099] veth1_vlan: entered promiscuous mode [ 562.298628][T16099] veth0_macvtap: entered promiscuous mode [ 562.321315][T16099] veth1_macvtap: entered promiscuous mode [ 562.346100][T16099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 562.389250][T16099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 562.432435][T12059] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.446652][T12059] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.474740][T12065] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.489819][T12065] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.502179][T16291] tipc: Enabled bearer , priority 0 [ 562.508741][T16293] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2940'. [ 562.601872][T16291] syzkaller0: entered promiscuous mode [ 562.607925][T16291] syzkaller0: entered allmulticast mode [ 562.614298][T16291] tipc: Resetting bearer [ 562.688637][T16290] tipc: Resetting bearer [ 563.121532][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.529270][T14090] tipc: Node number set to 2535699850 [ 563.680987][ T5842] Bluetooth: hci1: command tx timeout [ 564.559635][T16290] tipc: Disabling bearer [ 564.687545][T12058] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.716013][T12058] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.785084][T12059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.788239][T16316] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2947'. [ 564.794448][T12059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.877308][T16316] dvmrp1: entered allmulticast mode [ 565.125306][T16335] netlink: 'syz.3.2951': attribute type 12 has an invalid length. [ 565.186872][T16335] bond1: option primary_reselect: invalid value (255) [ 565.198620][T16335] bond1 (unregistering): Released all slaves [ 565.258329][T16339] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2953'. [ 565.712650][T16371] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2960'. [ 565.756966][ T5842] Bluetooth: hci1: command tx timeout [ 565.907225][T16378] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2965'. [ 565.934057][T16379] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2961'. [ 565.971547][T16382] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2964'. [ 566.136701][T16390] vxcan1 speed is unknown, defaulting to 1000 [ 566.162491][T16399] xt_bpf: check failed: parse error [ 566.190326][T16392] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 566.520050][T16409] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2973'. [ 566.667300][T16390] hsr0 speed is unknown, defaulting to 1000 [ 566.960776][T16432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2981'. [ 568.766810][T13259] bridge_slave_1: left allmulticast mode [ 568.772573][T13259] bridge_slave_1: left promiscuous mode [ 568.783805][T13259] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.794444][T13259] bridge_slave_0: left allmulticast mode [ 568.801099][T13259] bridge_slave_0: left promiscuous mode [ 568.807744][T13259] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.891676][T13259] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 569.140368][T13259] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 569.151858][T13259] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 569.162824][T13259] bond0 (unregistering): Released all slaves [ 569.280269][T13259] bond1 (unregistering): Released all slaves [ 569.401800][T13259] bond2 (unregistering): Released all slaves [ 569.415061][T13259] bond3 (unregistering): Released all slaves [ 569.430333][T13259] bond4 (unregistering): Released all slaves [ 569.443769][T13259] bond5 (unregistering): Released all slaves [ 569.588454][T13259] tipc: Left network mode [ 569.886786][T13259] hsr_slave_0: left promiscuous mode [ 569.893530][T13259] hsr_slave_1: left promiscuous mode [ 569.899701][T13259] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 569.908407][T13259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 570.339915][T13259] team0 (unregistering): Port device team_slave_1 removed [ 570.386923][T13259] team0 (unregistering): Port device team_slave_0 removed [ 571.106829][T13259] IPVS: stop unused estimator thread 0... [ 591.672493][T16446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2983'. [ 591.699864][T16442] openvswitch: netlink: Missing valid actions attribute. [ 591.718254][T16442] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 591.744644][T16447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2983'. [ 591.761364][T16447] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2983'. [ 592.346250][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 592.356855][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 592.368756][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 592.377582][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 592.385809][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 594.476778][ T5834] Bluetooth: hci0: command tx timeout [ 594.993715][T16456] vxcan1 speed is unknown, defaulting to 1000 [ 595.134000][T16468] netlink: 'syz.6.2993': attribute type 1 has an invalid length. [ 595.237643][T16468] 8021q: adding VLAN 0 to HW filter on device bond1 [ 595.337690][T16456] hsr0 speed is unknown, defaulting to 1000 [ 595.589554][T16486] veth1_to_bond: entered allmulticast mode [ 595.619023][T16479] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2995'. [ 595.674430][T16477] veth1_to_bond: left allmulticast mode [ 595.758072][T16456] chnl_net:caif_netlink_parms(): no params data found [ 595.797302][T16502] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3001'. [ 595.832368][T16503] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3001'. [ 595.957096][T16506] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3003'. [ 595.970878][T16506] netlink: 'syz.5.3003': attribute type 1 has an invalid length. [ 596.021504][T16507] openvswitch: netlink: Missing valid actions attribute. [ 596.035720][T16507] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 596.181577][T16525] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 596.248068][T16530] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3009'. [ 596.275364][T16533] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3010'. [ 596.298526][T16531] netlink: 'syz.6.3008': attribute type 3 has an invalid length. [ 596.337444][T16541] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3010'. [ 596.413497][T16456] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.455720][T16456] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.464289][T16456] bridge_slave_0: entered allmulticast mode [ 596.513230][T16456] bridge_slave_0: entered promiscuous mode [ 596.573688][ T5834] Bluetooth: hci0: command tx timeout [ 596.582881][T16456] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.606155][T16456] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.614113][T16456] bridge_slave_1: entered allmulticast mode [ 596.623234][T16456] bridge_slave_1: entered promiscuous mode [ 596.693813][T16550] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»– [ 596.790658][T16544] syzkaller0: entered promiscuous mode [ 596.798242][T16544] syzkaller0: entered allmulticast mode [ 596.814637][T16456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 596.883347][T16561] ipvlan3: entered promiscuous mode [ 596.910413][T16456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 597.076086][T16570] netlink: 'syz.3.3020': attribute type 11 has an invalid length. [ 597.116293][T16572] netlink: 596 bytes leftover after parsing attributes in process `syz.1.3021'. [ 597.465289][T16590] openvswitch: netlink: Missing valid actions attribute. [ 597.474401][T16590] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 598.639113][ T5842] Bluetooth: hci0: command tx timeout [ 598.888125][T16456] team0: Port device team_slave_0 added [ 598.899398][T16456] team0: Port device team_slave_1 added [ 599.030266][T16456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 599.044258][T16456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 599.076349][T16456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 599.104493][T16602] tipc: Enabling of bearer rejected, failed to enable media [ 599.116076][T16456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 599.129169][T16456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 599.178479][T16456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 599.279616][T16615] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3033'. [ 599.337998][T16456] hsr_slave_0: entered promiscuous mode [ 599.347634][T16456] hsr_slave_1: entered promiscuous mode [ 599.362936][T16456] debugfs: 'hsr0' already exists in 'hsr' [ 599.366403][T16617] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3034'. [ 599.385185][T16456] Cannot create hsr debugfs directory [ 599.392506][T16619] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3034'. [ 599.451534][T16623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3036'. [ 599.471193][T16623] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3036'. [ 599.530180][T16625] openvswitch: netlink: EtherType 53b is less than min 600 [ 599.531674][T16623] geneve2: entered promiscuous mode [ 599.544644][T16623] geneve2: entered allmulticast mode [ 599.738985][T16636] tipc: Enabled bearer , priority 0 [ 599.793194][T16636] syzkaller0: entered promiscuous mode [ 599.798927][T16636] syzkaller0: entered allmulticast mode [ 599.806116][T16639] ieee802154 phy1 wpan1: encryption failed: -22 [ 599.848153][T16639] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3040'. [ 599.894462][T16636] tipc: Resetting bearer [ 599.924789][T16634] tipc: Resetting bearer [ 599.987292][T16634] tipc: Disabling bearer [ 600.095656][T16650] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 600.147928][T16652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3042'. [ 600.279710][T16456] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 600.300943][T16456] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 600.328586][T16456] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 600.353721][T16456] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 600.488273][T16661] netlink: 'syz.1.3047': attribute type 13 has an invalid length. [ 600.666373][T16456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.716633][ T5842] Bluetooth: hci0: command 0x0419 tx timeout [ 600.746541][T16681] netlink: 176 bytes leftover after parsing attributes in process `syz.6.3052'. [ 600.758650][T16681] ip6gretap0: entered promiscuous mode [ 600.767483][T16681] netlink: 176 bytes leftover after parsing attributes in process `syz.6.3052'. [ 600.780262][T16456] 8021q: adding VLAN 0 to HW filter on device team0 [ 600.817864][T12065] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.825225][T12065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 600.864640][T12065] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.871948][T12065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 600.995048][T16690] netlink: 'syz.1.3055': attribute type 1 has an invalid length. [ 601.021356][T16690] netlink: 'syz.1.3055': attribute type 2 has an invalid length. [ 601.071353][T16456] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 602.796011][ T5834] Bluetooth: hci0: command 0x0419 tx timeout [ 603.494361][T16725] __nla_validate_parse: 5 callbacks suppressed [ 603.494382][T16725] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3066'. [ 603.557377][T16725] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3066'. [ 603.591466][T16456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 604.257209][T16757] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3073'. [ 604.467532][T16456] veth0_vlan: entered promiscuous mode [ 604.480179][T16777] netlink: 'syz.5.3079': attribute type 2 has an invalid length. [ 604.519907][T16777] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3079'. [ 604.531407][T16456] veth1_vlan: entered promiscuous mode [ 604.683153][T16456] veth0_macvtap: entered promiscuous mode [ 604.698059][T16781] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3081'. [ 604.760736][T16456] veth1_macvtap: entered promiscuous mode [ 604.799046][T16456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 604.825280][T16456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 604.885504][T13259] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.894605][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.941820][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.981192][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.130244][T16796] syz.3.3087 uses old SIOCAX25GETINFO [ 605.220527][T12068] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 605.261206][T12068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.337782][T16799] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 605.348922][T16799] bond2 (unregistering): Released all slaves [ 605.387347][T12068] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 605.399440][T12068] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.566265][T16814] netlink: 'syz.3.3091': attribute type 3 has an invalid length. [ 605.579731][T16813] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3093'. [ 605.722316][T16829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3094'. [ 605.848185][T16829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3094'. [ 606.222952][T16856] netlink: 'syz.5.3099': attribute type 4 has an invalid length. [ 606.631363][T16881] netlink: 11 bytes leftover after parsing attributes in process `syz.7.3107'. [ 606.834196][T16887] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3110'. [ 606.834664][T16890] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 606.961743][T16897] netlink: 'syz.3.3114': attribute type 1 has an invalid length. [ 607.054455][T16899] tipc: Started in network mode [ 607.063804][T16899] tipc: Node identity 6e4f0a39a7c9, cluster identity 4711 [ 607.071745][T16899] tipc: Enabled bearer , priority 0 [ 607.092799][T16899] syzkaller0: entered promiscuous mode [ 607.101206][T16899] syzkaller0: entered allmulticast mode [ 607.114671][T16908] netlink: 'syz.1.3118': attribute type 2 has an invalid length. [ 607.123767][T16898] tipc: Resetting bearer [ 607.163165][T16898] tipc: Disabling bearer [ 607.187495][T16909] tipc: Started in network mode [ 607.192988][T16909] tipc: Node identity a2f8ec9bc974, cluster identity 4711 [ 607.201508][T16909] tipc: Enabled bearer , priority 0 [ 607.219022][T16903] tipc: Resetting bearer [ 607.248055][T16900] tipc: Disabling bearer [ 607.514561][T16928] 8021q: adding VLAN 0 to HW filter on device bond2 [ 607.630664][T16935] netlink: 'syz.6.3126': attribute type 10 has an invalid length. [ 607.638915][T16933] netlink: 'syz.6.3126': attribute type 10 has an invalid length. [ 607.671653][T16939] netlink: 'syz.7.3125': attribute type 2 has an invalid length. [ 607.758808][T16944] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:20003 [ 607.919378][T16951] tunl0: entered promiscuous mode [ 607.942286][T16951] netlink: 'syz.1.3132': attribute type 3 has an invalid length. [ 607.958130][T16955] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 607.981091][T16953] tipc: Enabled bearer , priority 0 [ 607.995104][T16953] tipc: Resetting bearer [ 608.016343][T16950] tipc: Disabling bearer [ 608.446546][T16980] bridge_slave_0: invalid flags given to default FDB implementation [ 608.776096][T16995] __nla_validate_parse: 3 callbacks suppressed [ 608.776119][T16995] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3146'. [ 608.917308][T16999] netlink: 'syz.3.3148': attribute type 1 has an invalid length. [ 609.066233][T16999] 8021q: adding VLAN 0 to HW filter on device bond2 [ 609.111551][T17007] tipc: Enabled bearer , priority 0 [ 609.146684][T17009] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 609.172487][T17007] tipc: Resetting bearer [ 609.267878][T17006] tipc: Disabling bearer [ 609.420152][T17026] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3157'. [ 609.470235][T17029] wg1: entered promiscuous mode [ 609.483097][T17029] wg1: entered allmulticast mode [ 609.510119][T17031] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3159'. [ 609.549438][T17033] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 609.571292][T17033] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 610.422438][T17093] x_tables: duplicate underflow at hook 2 [ 610.497178][T17094] syzkaller0: entered promiscuous mode [ 610.515800][T17094] syzkaller0: entered allmulticast mode [ 610.535850][T17093] xt_ecn: cannot match TCP bits for non-tcp packets [ 610.655785][T17105] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3178'. [ 610.726083][T17105] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 610.791910][T17112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3179'. [ 610.812016][T17094] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 610.821420][T17094] gretap1: entered promiscuous mode [ 610.830868][T17094] gretap1: entered allmulticast mode [ 611.284703][T17122] pim6reg1: entered promiscuous mode [ 611.290553][T17122] pim6reg1: entered allmulticast mode [ 611.506809][T17141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 611.558685][T17143] block nbd2: Unsupported socket: should be TCP or UNIX. [ 611.586342][T17145] netlink: 'syz.7.3190': attribute type 1 has an invalid length. [ 611.592505][T17143] IPv6: sit1: Disabled Multicast RS [ 611.610789][T17143] sit1: entered allmulticast mode [ 611.641347][T17148] netlink: 'syz.3.3192': attribute type 1 has an invalid length. [ 611.646740][T17153] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3193'. [ 611.768339][T17146] veth3: entered promiscuous mode [ 611.799791][T17161] netlink: 'syz.5.3194': attribute type 83 has an invalid length. [ 611.978610][T17183] netlink: 'syz.3.3199': attribute type 10 has an invalid length. [ 612.034265][T17185] netlink: 'syz.3.3199': attribute type 10 has an invalid length. [ 612.074285][T17183] team0: Port device dummy0 added [ 612.099067][T17185] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 612.113754][T17187] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3200'. [ 612.150015][T17185] team0: Failed to send options change via netlink (err -105) [ 612.154664][T17189] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3201'. [ 612.175245][T17185] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 612.186104][T17185] team0: Port device dummy0 removed [ 612.208865][T17185] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 612.213064][T17194] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3202'. [ 612.299708][T17196] xt_time: unknown flags 0xf4 [ 612.470092][T17205] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3207'. [ 612.562620][T17208] netlink: 'syz.7.3208': attribute type 83 has an invalid length. [ 613.114913][T17245] netlink: 'syz.7.3217': attribute type 4 has an invalid length. [ 613.161688][T17245] netlink: 'syz.7.3217': attribute type 4 has an invalid length. [ 613.349048][T17259] 8021q: VLANs not supported on ip6_vti0 [ 613.603065][T17271] ip6gre1: entered allmulticast mode [ 613.902150][T17294] 8021q: VLANs not supported on wg0 [ 613.916549][T17287] syzkaller0: entered promiscuous mode [ 613.922358][T17287] syzkaller0: entered allmulticast mode [ 613.946917][T17287] sch_fq: defrate 0 ignored. [ 614.039371][T17307] syzkaller0: entered promiscuous mode [ 614.045604][T17307] syzkaller0: entered allmulticast mode [ 614.362465][T17321] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 614.372125][T17330] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 614.546248][T17333] bond3: entered promiscuous mode [ 614.556360][T17332] __nla_validate_parse: 38 callbacks suppressed [ 614.556383][T17332] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3245'. [ 614.573746][T17337] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 614.586527][T17337] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 614.631222][T17332] netlink: 'syz.6.3245': attribute type 10 has an invalid length. [ 614.640065][T17333] netlink: 'syz.6.3245': attribute type 10 has an invalid length. [ 614.668849][T17339] netlink: 236 bytes leftover after parsing attributes in process `syz.5.3244'. [ 614.681660][T17332] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.689499][T17332] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.727846][T17332] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.735360][T17332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 614.743171][T17332] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.750550][T17332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.792615][T17332] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 614.803567][T17333] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.810925][T17333] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.855196][T17354] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3250'. [ 614.881051][T17352] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 614.941771][T17357] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3251'. [ 615.150675][T17369] syzkaller0: entered promiscuous mode [ 615.161130][T17369] syzkaller0: entered allmulticast mode [ 615.252470][T17383] xt_cluster: node mask cannot exceed total number of nodes [ 616.083257][T17403] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3264'. [ 616.203320][T17414] netlink: 'syz.5.3268': attribute type 11 has an invalid length. [ 616.212609][T17414] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3268'. [ 616.456191][T17427] bond0: Caught tx_queue_len zero misconfig [ 616.738548][T17437] tipc: Enabled bearer , priority 0 [ 616.791121][T17438] tipc: Enabled bearer , priority 0 [ 616.801115][T17438] syzkaller0: entered promiscuous mode [ 616.807304][T17438] syzkaller0: entered allmulticast mode [ 616.819488][T17429] tipc: Resetting bearer [ 616.898724][T17438] tipc: Resetting bearer [ 616.908581][T17441] syzkaller0: entered promiscuous mode [ 616.917972][T17441] syzkaller0: entered allmulticast mode [ 616.925130][T17436] tipc: Resetting bearer [ 616.966236][T17436] tipc: Disabling bearer [ 616.985112][T17428] tipc: Resetting bearer [ 617.002213][T17428] tipc: Disabling bearer [ 617.430977][T17486] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3285'. [ 617.567747][T17498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3284'. [ 617.588784][T17499] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3286'. [ 617.615070][T17499] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3286'. [ 617.637330][T17495] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 617.655269][T17495] bond5 (unregistering): Released all slaves [ 617.914318][T17512] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 617.997267][T17509] bond4: entered promiscuous mode [ 618.008754][T17509] bond4: entered allmulticast mode [ 618.017906][T17509] 8021q: adding VLAN 0 to HW filter on device bond4 [ 618.027996][T17518] tipc: Enabling of bearer rejected, failed to enable media [ 618.184752][T17518] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 618.223739][T17518] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 618.266400][T17518] bond0 (unregistering): Released all slaves [ 618.364949][T17525] sch_fq: defrate 8 ignored. [ 618.641533][T17544] netlink: 'syz.6.3299': attribute type 1 has an invalid length. [ 618.681145][T17544] netlink: 'syz.6.3299': attribute type 7 has an invalid length. [ 618.714127][T17547] netlink: 'syz.6.3299': attribute type 6 has an invalid length. [ 618.715470][T17544] netlink: 'syz.6.3299': attribute type 8 has an invalid length. [ 618.774762][T17547] netlink: 'syz.6.3299': attribute type 5 has an invalid length. [ 618.791337][T17545] netlink: 'syz.6.3299': attribute type 6 has an invalid length. [ 618.803354][T17545] netlink: 'syz.6.3299': attribute type 5 has an invalid length. [ 619.135291][T17568] netlink: 'syz.6.3308': attribute type 1 has an invalid length. [ 619.303927][T17574] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 619.345263][T17574] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 619.462128][T17584] can: request_module (can-proto-0) failed. [ 619.474925][T17576] bond5: (slave gretap1): making interface the new active one [ 619.509121][T17576] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 619.607493][T17568] macvlan2: entered promiscuous mode [ 619.630785][T17568] macvlan2: entered allmulticast mode [ 619.653379][T17568] bond5: entered promiscuous mode [ 619.666769][T17568] gretap1: entered promiscuous mode [ 619.675006][T17568] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 619.687010][T17568] bond5: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 619.699810][T17568] bond5: left promiscuous mode [ 619.705613][T17568] gretap1: left promiscuous mode [ 619.738664][T17596] ip6gre2: entered promiscuous mode [ 619.770724][T17598] wg1: left promiscuous mode [ 619.844417][T17598] gretap1: left promiscuous mode [ 619.884188][T17597] syzkaller0: entered promiscuous mode [ 619.893611][T17597] syzkaller0: entered allmulticast mode [ 619.910101][T17602] netlink: 'syz.3.3318': attribute type 1 has an invalid length. [ 620.148045][T17615] __nla_validate_parse: 13 callbacks suppressed [ 620.148069][T17615] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3323'. [ 620.233505][T17621] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3325'. [ 620.253967][T17619] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3324'. [ 620.284279][T17621] 8021q: VLANs not supported on ipvlan0 [ 620.554487][T17628] syzkaller0: entered promiscuous mode [ 620.601932][T17628] syzkaller0: entered allmulticast mode [ 621.107588][T17637] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3330'. [ 621.158076][T17636] netlink: 'syz.5.3330': attribute type 8 has an invalid length. [ 621.501049][T17646] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3333'. [ 621.709177][T17655] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 621.732601][T17652] ipip0: entered promiscuous mode [ 621.743653][T17652] ipip0: entered allmulticast mode [ 621.781112][T17650] vxcan1 speed is unknown, defaulting to 1000 [ 622.051742][T17673] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 622.185141][T17682] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3342'. [ 622.225721][T17673] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 622.240774][T17673] gretap1: entered promiscuous mode [ 622.246804][T17673] gretap1: entered allmulticast mode [ 622.258079][T17675] veth0: entered promiscuous mode [ 622.265558][T17683] tipc: Enabled bearer , priority 0 [ 622.275247][T17674] veth0: left promiscuous mode [ 622.281439][T17650] hsr0 speed is unknown, defaulting to 1000 [ 622.289342][T17678] mac80211_hwsim hwsim31 syzkaller0: entered promiscuous mode [ 622.315886][T17678] mac80211_hwsim hwsim31 syzkaller0: entered allmulticast mode [ 622.358994][T17678] tipc: Resetting bearer [ 622.399855][T17678] geneve2: entered promiscuous mode [ 622.405197][T17678] geneve2: entered allmulticast mode [ 622.428702][T12062] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 622.438129][T12062] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 622.448236][T12062] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 622.467095][T12062] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 622.508441][T17692] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 622.554806][T17695] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3349'. [ 622.723650][T17700] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3350'. [ 622.912865][T17709] x_tables: duplicate underflow at hook 3 [ 623.181021][T17720] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3356'. [ 623.201307][T17721] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3357'. [ 623.244549][T17720] NCSI netlink: No device for ifindex 0 [ 623.345770][T14090] tipc: Node number set to 3381004857 [ 623.760511][T17742] tipc: Enabled bearer , priority 0 [ 623.809176][T17741] tipc: Disabling bearer [ 623.857342][T17753] mac80211_hwsim hwsim31 syzkaller0: Caught tx_queue_len zero misconfig [ 624.277168][T17775] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 624.415208][T17786] syz_tun: entered allmulticast mode [ 624.463288][T17785] syz_tun: left allmulticast mode [ 624.562187][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.624503][T17805] netlink: zone id is out of range [ 625.124631][T17828] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 625.208412][T17833] __nla_validate_parse: 6 callbacks suppressed [ 625.208432][T17833] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3391'. [ 625.226301][T17832] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3390'. [ 625.226676][T17836] validate_nla: 7 callbacks suppressed [ 625.226692][T17836] netlink: 'syz.6.3392': attribute type 4 has an invalid length. [ 625.252899][T17834] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3391'. [ 625.502127][T17848] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3397'. [ 625.545116][T17852] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 625.569675][T17853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3398'. [ 625.640683][T17857] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3400'. [ 626.021480][T17876] netlink: 'syz.3.3407': attribute type 83 has an invalid length. [ 626.061883][T17878] IPVS: set_ctl: invalid protocol: 41 172.20.20.187:20003 [ 626.163901][T17889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3411'. [ 626.189489][T17889] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3411'. [ 626.192386][ T5834] block nbd3: Receive control failed (result -32) [ 626.210961][T17889] netlink: 'syz.3.3411': attribute type 12 has an invalid length. [ 626.235556][T17889] netlink: 'syz.3.3411': attribute type 11 has an invalid length. [ 626.547159][T17905] netlink: 232 bytes leftover after parsing attributes in process `syz.6.3415'. [ 626.547159][T17906] netlink: 232 bytes leftover after parsing attributes in process `syz.6.3415'. [ 626.996259][T17934] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.004172][T17934] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.360642][T17961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 627.372053][T17961] batadv_slave_1: entered promiscuous mode [ 627.383018][T17961] batadv_slave_1: entered allmulticast mode [ 627.397169][T17961] netlink: 'syz.6.3431': attribute type 10 has an invalid length. [ 627.434895][T17961] team0: Port device geneve0 added [ 627.602885][T17974] tipc: Enabled bearer , priority 0 [ 627.616834][T17974] tipc: Resetting bearer [ 627.636514][T17973] tipc: Disabling bearer [ 627.835593][T17983] netlink: 'syz.7.3439': attribute type 1 has an invalid length. [ 627.849692][T17985] tipc: Enabled bearer , priority 0 [ 627.881229][T17983] bond2: entered promiscuous mode [ 627.887530][T17983] 8021q: adding VLAN 0 to HW filter on device bond2 [ 627.895896][T17985] syzkaller0: entered promiscuous mode [ 627.901375][T17985] syzkaller0: entered allmulticast mode [ 627.929767][T17990] bond2: (slave bridge3): making interface the new active one [ 627.937561][T17990] bridge3: entered promiscuous mode [ 627.943538][T17990] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 627.999702][T17986] tipc: Resetting bearer [ 628.056767][T17984] tipc: Resetting bearer [ 628.083516][T17984] tipc: Disabling bearer [ 628.109304][T17997] Bluetooth: MGMT ver 1.23 [ 628.633792][T18027] netlink: 'syz.3.3454': attribute type 10 has an invalid length. [ 628.723198][T18027] batadv0: entered promiscuous mode [ 628.740673][T18027] batadv0: entered allmulticast mode [ 628.748276][T18027] bridge0: port 3(batadv0) entered blocking state [ 628.755053][T18027] bridge0: port 3(batadv0) entered disabled state [ 628.791688][T18033] bridge4: entered promiscuous mode [ 628.816490][T18033] bridge4: entered allmulticast mode [ 629.025954][ T36] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 629.035334][ T36] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 629.212558][T18065] bridge4: entered promiscuous mode [ 629.221262][T18065] bridge4: entered allmulticast mode [ 629.360821][T18074] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 629.566092][T18087] sock: sock_set_timeout: `syz.5.3471' (pid 18087) tries to set negative timeout [ 630.282215][T18120] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 630.343530][T18120] bond0 (unregistering): Released all slaves [ 630.417294][T18129] netlink: 'syz.6.3482': attribute type 23 has an invalid length. [ 631.344195][T18180] __nla_validate_parse: 16 callbacks suppressed [ 631.344218][T18180] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3489'. [ 633.643918][T18177] tipc: Enabling of bearer rejected, media not registered [ 633.994583][T18232] syzkaller0: entered promiscuous mode [ 634.003327][T18234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3496'. [ 634.016491][T18232] syzkaller0: entered allmulticast mode [ 634.481130][T18270] mac80211_hwsim hwsim31 syzkaller0: left promiscuous mode [ 634.499732][T18270] mac80211_hwsim hwsim31 syzkaller0: left allmulticast mode [ 634.532251][T18270] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3503'. [ 634.633613][T18274] netlink: 'syz.6.3505': attribute type 21 has an invalid length. [ 634.640864][T18278] tipc: Enabled bearer , priority 0 [ 634.713614][T18274] netlink: 'syz.6.3505': attribute type 1 has an invalid length. [ 634.880044][T18287] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3507'. [ 634.901546][T18278] tipc: Disabling bearer [ 635.149420][T18301] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3510'. [ 635.346962][T18322] netlink: 'syz.5.3514': attribute type 4 has an invalid length. [ 635.619139][T18331] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3516'. [ 636.348379][T18353] tipc: Started in network mode [ 636.353329][T18353] tipc: Node identity cab30954a719, cluster identity 4711 [ 636.385246][T18353] tipc: Enabled bearer , priority 0 [ 636.459041][T18357] syzkaller0: entered promiscuous mode [ 636.495813][T18357] syzkaller0: entered allmulticast mode [ 636.523477][T18349] vxcan1 speed is unknown, defaulting to 1000 [ 636.576342][T18381] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:20001 [ 636.594952][T18381] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3525'. [ 636.687163][T18357] tipc: Resetting bearer [ 636.738556][T18357] tipc: Disabling bearer [ 636.907106][T18354] netlink: 'syz.7.3522': attribute type 16 has an invalid length. [ 637.030603][T18404] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3529'. [ 637.118935][T18406] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3532'. [ 637.180134][T18349] hsr0 speed is unknown, defaulting to 1000 [ 637.662745][T18429] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 637.701078][T18431] netlink: 'syz.6.3541': attribute type 4 has an invalid length. [ 637.915616][ T5842] Bluetooth: hci0: command 0x0419 tx timeout [ 637.936359][T18449] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3546'. [ 637.952297][T18449] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3546'. [ 638.156804][T18454] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 638.210927][T18454] IPVS: length: 206 != 8 [ 638.230187][T18454] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3548'. [ 638.457692][T18470] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3554'. [ 638.499963][T18465] syzkaller0: entered promiscuous mode [ 638.506737][T18465] syzkaller0: entered allmulticast mode [ 640.876488][T18509] netlink: 'syz.6.3560': attribute type 7 has an invalid length. [ 640.949038][T18512] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3561'. [ 641.173296][T18523] netlink: 300 bytes leftover after parsing attributes in process `syz.3.3566'. [ 641.593044][T18548] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.3571'. [ 641.713857][T18551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3573'. [ 641.765442][T18551] veth0_macvtap: left promiscuous mode [ 641.829626][T18555] xt_TCPMSS: Only works on TCP SYN packets [ 641.945993][T18559] netlink: 592 bytes leftover after parsing attributes in process `syz.1.3577'. [ 642.659585][ T5834] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 642.669813][ T5834] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 642.682391][ T5834] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 642.686263][T18564] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 642.706927][ T5834] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 642.715011][ T5834] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 642.729142][T18564] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 642.739768][T18579] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3583'. [ 642.878041][T18571] sit0: Caught tx_queue_len zero misconfig [ 642.995575][T12067] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.007699][T12067] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.050427][T18586] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3586'. [ 643.142994][T18589] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3586'. [ 643.184132][T12067] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.199036][T12067] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.219974][T18586] xfrm1: entered promiscuous mode [ 643.220613][T18587] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3585'. [ 643.225203][T18586] xfrm1: entered allmulticast mode [ 643.307350][T18592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3588'. [ 643.318634][T18575] vxcan1 speed is unknown, defaulting to 1000 [ 643.409585][T18587] bond3 (unregistering): Released all slaves [ 643.499140][T18592] veth5: entered promiscuous mode [ 643.504286][T18592] veth5: entered allmulticast mode [ 643.683781][T18605] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3591'. [ 643.729637][T18605] netlink: 'syz.3.3591': attribute type 11 has an invalid length. [ 643.795881][T18607] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 643.808821][T18607] bond3 (unregistering): Released all slaves [ 643.834058][T18575] hsr0 speed is unknown, defaulting to 1000 [ 643.842431][T18610] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3593'. [ 644.060081][T18617] tipc: Enabling of bearer rejected, already enabled [ 644.398697][T18637] netlink: 'syz.6.3601': attribute type 1 has an invalid length. [ 644.410969][T18637] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3601'. [ 644.440620][T12064] erspan0 (unregistering): left promiscuous mode [ 644.597146][T12064] dvmrp1 (unregistering): left allmulticast mode [ 644.798367][ T5834] Bluetooth: hci7: command tx timeout [ 645.039833][T12064] bond1 (unregistering): Released all slaves [ 645.062043][T12064] bond2 (unregistering): Released all slaves [ 645.183826][T12064] bond3 (unregistering): Released all slaves [ 645.200074][T12064] bond4 (unregistering): Released all slaves [ 645.214451][T12064] bond5 (unregistering): Released all slaves [ 645.230807][T12064] bond0 (unregistering): Released all slaves [ 645.280080][T18641] C: renamed from team_slave_0 (while UP) [ 645.324978][T18641] netlink: 'syz.1.3600': attribute type 1 has an invalid length. [ 645.334787][T18641] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 645.472801][T12064] : left promiscuous mode [ 645.576410][T18652] netlink: 'syz.1.3605': attribute type 3 has an invalid length. [ 645.775146][T12064] : left promiscuous mode [ 645.894300][T18666] syzkaller1: entered promiscuous mode [ 645.905815][T18666] syzkaller1: entered allmulticast mode [ 645.991984][T12064] tipc: Left network mode [ 645.996778][T18665] lo: Caught tx_queue_len zero misconfig [ 646.016828][T12064] IPVS: stopping backup sync thread 15471 ... [ 646.036777][T18675] netlink: 'syz.6.3611': attribute type 11 has an invalid length. [ 646.099414][T18671] tipc: Enabling of bearer rejected, already enabled [ 646.158718][T18671] mac80211_hwsim hwsim31 syzkaller0: entered promiscuous mode [ 646.178663][T18671] mac80211_hwsim hwsim31 syzkaller0: entered allmulticast mode [ 646.292536][T18684] netlink: 'syz.1.3616': attribute type 1 has an invalid length. [ 646.328044][T18575] chnl_net:caif_netlink_parms(): no params data found [ 646.376157][T18684] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 646.744729][ T6623] IPVS: starting estimator thread 0... [ 646.793966][T18575] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.808686][T18575] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.817267][T18575] bridge_slave_0: entered allmulticast mode [ 646.828386][T18720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 646.843052][T18575] bridge_slave_0: entered promiscuous mode [ 646.849740][T18716] IPVS: using max 26 ests per chain, 62400 per kthread [ 646.853530][T18724] __nla_validate_parse: 4 callbacks suppressed [ 646.853549][T18724] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3624'. [ 646.862313][T18575] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.883187][T18575] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.889191][ T5834] Bluetooth: hci7: command tx timeout [ 646.891584][T18575] bridge_slave_1: entered allmulticast mode [ 646.906042][T18575] bridge_slave_1: entered promiscuous mode [ 647.219862][T18575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 647.249052][T18575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 647.344345][T12064] team0: left promiscuous mode [ 647.350389][T12064] team_slave_0: left promiscuous mode [ 647.358415][T12064] team_slave_1: left promiscuous mode [ 647.372020][T12064] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 647.404046][T12064] pim6reg527 (unregistering): left allmulticast mode [ 647.619514][T18756] rdma_op ffff8880255f19f0 conn xmit_rdma 0000000000000000 [ 647.639040][T18757] netlink: 'syz.7.3633': attribute type 11 has an invalid length. [ 647.762447][T18766] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3633'. [ 648.054939][T12064] team0 (unregistering): Port device team_slave_1 removed [ 648.099921][T12064] team0 (unregistering): Port device team_slave_0 removed [ 648.572778][T12064] lo (unregistering): left allmulticast mode [ 648.587154][T18575] team0: Port device team_slave_0 added [ 648.600812][T18737] dvmrp0: entered allmulticast mode [ 648.616970][T18742] dvmrp0: entered allmulticast mode [ 648.673490][T18764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3634'. [ 648.689482][T18762] syzkaller0: entered promiscuous mode [ 648.699083][T18773] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3635'. [ 648.708406][T18762] syzkaller0: entered allmulticast mode [ 648.750308][T18575] team0: Port device team_slave_1 added [ 648.838936][T18776] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 648.872661][T18575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 648.900058][T18575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 648.929825][T18575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 648.955692][ T5834] Bluetooth: hci7: command tx timeout [ 648.976027][T18785] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3639'. [ 649.009011][T18786] netlink: 'syz.6.3637': attribute type 1 has an invalid length. [ 649.012914][T18575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 649.024925][T18575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 649.070894][T18575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 649.244038][T18786] vxcan1 speed is unknown, defaulting to 1000 [ 649.268256][T18575] hsr_slave_0: entered promiscuous mode [ 649.284703][T18794] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3637'. [ 649.306992][T18575] hsr_slave_1: entered promiscuous mode [ 649.330137][T18575] debugfs: 'hsr0' already exists in 'hsr' [ 649.345773][T18575] Cannot create hsr debugfs directory [ 649.350351][T18798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3642'. [ 649.382578][T18792] can: request_module (can-proto-0) failed. [ 649.398529][T18789] netlink: 'syz.3.3640': attribute type 9 has an invalid length. [ 649.436967][T18798] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 649.514932][T18803] netlink: 'syz.7.3643': attribute type 1 has an invalid length. [ 649.651809][T18802] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 649.718542][T18802] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 649.784088][T18786] hsr0 speed is unknown, defaulting to 1000 [ 649.800170][T18810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3646'. [ 649.948296][T18815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3647'. [ 650.114252][T18818] tipc: Enabled bearer , priority 0 [ 650.137126][T18818] syzkaller0: entered promiscuous mode [ 650.142667][T18818] syzkaller0: entered allmulticast mode [ 650.166336][T18818] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 650.199232][T18829] netlink: 'syz.3.3651': attribute type 1 has an invalid length. [ 650.474479][T18829] 8021q: adding VLAN 0 to HW filter on device bond6 [ 650.485087][T18842] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3649'. [ 650.546741][T18832] bond6: (slave veth7): Enslaving as an active interface with a down link [ 650.563632][T18834] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 650.594165][T18817] tipc: Resetting bearer [ 650.666138][T18817] tipc: Disabling bearer [ 651.014731][T18853] netem: change failed [ 651.036367][ T5834] Bluetooth: hci7: command tx timeout [ 651.232640][T18575] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 651.253832][T18575] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 651.267584][T18575] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 651.284422][T18575] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 651.641708][T18575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 651.669484][T14090] IPVS: starting estimator thread 0... [ 651.679421][T18898] IPVS: ip_vs_edit_dest(): server weight less than zero [ 651.697234][T18575] 8021q: adding VLAN 0 to HW filter on device team0 [ 651.717707][T12062] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.725145][T12062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 651.767783][T18899] IPVS: using max 25 ests per chain, 60000 per kthread [ 651.792032][T12062] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.799324][T12062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 651.850262][T18903] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 651.922227][T18908] __nla_validate_parse: 3 callbacks suppressed [ 651.922337][T18908] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3672'. [ 651.970810][T18908] macvtap1: entered promiscuous mode [ 651.978743][T18908] vlan0: entered promiscuous mode [ 651.991619][T18908] macvtap1: entered allmulticast mode [ 651.998220][T18908] vlan0: entered allmulticast mode [ 652.005209][T18908] veth0_vlan: entered allmulticast mode [ 652.401484][T18934] netlink: 'syz.3.3679': attribute type 15 has an invalid length. [ 652.411190][T18932] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3677'. [ 652.419455][T18934] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3679'. [ 652.516533][T18575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 652.661510][T18948] netlink: 'syz.3.3682': attribute type 1 has an invalid length. [ 653.261141][T18575] veth0_vlan: entered promiscuous mode [ 653.315036][T18575] veth1_vlan: entered promiscuous mode [ 653.357053][T18985] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3692'. [ 653.374858][T18985] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3692'. [ 653.393593][T18985] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3692'. [ 653.409311][T18575] veth0_macvtap: entered promiscuous mode [ 653.413686][T18985] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3692'. [ 653.424071][T18575] veth1_macvtap: entered promiscuous mode [ 653.494529][T18575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 653.540769][T18575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 653.580011][ T60] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.600480][ T60] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.628354][ T60] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.650644][ T60] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.664111][T18996] netlink: 'syz.6.3695': attribute type 2 has an invalid length. [ 653.791117][T19005] veth0: entered promiscuous mode [ 653.837290][T19002] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3698'. [ 654.033894][T19018] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 654.069381][T19024] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3704'. [ 654.069675][T19020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 654.080579][T19024] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3704'. [ 654.120609][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.137852][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.219652][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.233041][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.333054][T19033] vxcan1 speed is unknown, defaulting to 1000 [ 654.451988][T19042] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 654.494653][T19042] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 654.528980][T19042] gretap1: entered promiscuous mode [ 654.543999][T19042] gretap1: entered allmulticast mode [ 655.186507][T19069] netlink: 'syz.3.3714': attribute type 8 has an invalid length. [ 655.198445][T19071] IPVS: ip_vs_add_dest(): server weight less than zero [ 655.206246][T14097] IPVS: starting estimator thread 0... [ 655.305620][T19076] IPVS: using max 23 ests per chain, 55200 per kthread [ 655.449983][T19033] hsr0 speed is unknown, defaulting to 1000 [ 655.679618][T19035] tipc: Enabled bearer , priority 0 [ 655.726249][T19035] netlink: 'syz.6.3707': attribute type 16 has an invalid length. [ 655.735540][T19035] netlink: 'syz.6.3707': attribute type 17 has an invalid length. [ 655.783983][T19035] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.791304][T19035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 655.799134][T19035] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.806457][T19035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 655.867132][T19035] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 655.904045][T19104] netlink: 'syz.1.3725': attribute type 12 has an invalid length. [ 655.936459][T19032] tipc: Disabling bearer [ 656.424785][T19129] bridge0: port 3(ipvlan2) entered blocking state [ 656.442573][T19129] bridge0: port 3(ipvlan2) entered disabled state [ 656.449694][T19129] ipvlan2: entered allmulticast mode [ 656.456065][T19129] bridge0: entered allmulticast mode [ 656.464742][T19129] ipvlan2: left allmulticast mode [ 656.471377][T19129] bridge0: left allmulticast mode [ 657.027959][T14097] IPVS: starting estimator thread 0... [ 657.149302][T19166] IPVS: using max 31 ests per chain, 74400 per kthread [ 657.559945][T19194] __nla_validate_parse: 42 callbacks suppressed [ 657.559967][T19194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3754'. [ 657.673114][T19192] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3753'. [ 657.703491][T19195] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3753'. [ 657.943707][T19217] netlink: 'syz.3.3761': attribute type 1 has an invalid length. [ 658.001574][T19217] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3761'. [ 658.047852][T19217] macvlan3: entered promiscuous mode [ 658.053467][T19217] macvlan3: entered allmulticast mode [ 658.060817][T19217] bond8: entered promiscuous mode [ 658.067398][T19217] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 658.085247][T19217] bond8: left promiscuous mode [ 658.494526][T19248] netlink: 'syz.5.3772': attribute type 21 has an invalid length. [ 658.495119][T19244] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 658.536430][T19249] tipc: Enabling of bearer rejected, already enabled [ 658.586099][T19244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3770'. [ 658.752239][T19253] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3775'. [ 658.764976][T19265] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3776'. [ 658.877483][T19271] netlink: 'syz.6.3780': attribute type 1 has an invalid length. [ 658.902999][T19271] batadv0: entered promiscuous mode [ 658.910448][T19271] bond0: entered promiscuous mode [ 658.916219][T19271] bond_slave_0: entered promiscuous mode [ 658.924083][T19271] bond_slave_1: entered promiscuous mode [ 658.968684][T19271] bridge0: entered promiscuous mode [ 658.988949][T19271] bond0: left promiscuous mode [ 658.993925][T19271] bond_slave_0: left promiscuous mode [ 659.000407][T19271] bond_slave_1: left promiscuous mode [ 659.011648][T19271] bridge0: left promiscuous mode [ 659.020460][T19271] batadv0: left promiscuous mode [ 659.028479][T19279] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3782'. [ 659.236625][T19281] syzkaller1: entered promiscuous mode [ 659.252086][T19281] syzkaller1: entered allmulticast mode [ 660.296530][T19329] netlink: 88 bytes leftover after parsing attributes in process `syz.5.3795'. [ 660.704145][T19343] xt_TPROXY: Can be used only with -p tcp or -p udp [ 660.715146][T19343] netlink: 'syz.5.3799': attribute type 1 has an invalid length. [ 660.777432][T19325] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3793'. [ 661.089414][T19353] syzkaller0: entered promiscuous mode [ 661.095041][T19353] syzkaller0: entered allmulticast mode [ 661.113371][T19352] netlink: 'syz.5.3802': attribute type 1 has an invalid length. [ 661.122141][T19352] netlink: 'syz.5.3802': attribute type 7 has an invalid length. [ 661.131923][T19352] netlink: 'syz.5.3802': attribute type 8 has an invalid length. [ 661.976963][T19402] syzkaller0: entered promiscuous mode [ 661.982692][T19402] syzkaller0: entered allmulticast mode [ 662.514611][T19415] tipc: Enabling of bearer rejected, failed to enable media [ 662.596616][T19415] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 662.839391][T19429] geneve2: entered promiscuous mode [ 662.844679][T19429] geneve2: entered allmulticast mode [ 662.905840][ T36] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 662.935640][ T36] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 662.966131][T19438] __nla_validate_parse: 3 callbacks suppressed [ 662.966149][T19438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3826'. [ 663.001795][ T36] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 663.033883][ T36] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 663.657839][T19475] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3834'. [ 663.932892][T19492] netlink: 'syz.5.3839': attribute type 4 has an invalid length. [ 663.964108][T19492] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3839'. [ 664.009733][T19492] `: renamed from bond0 (while UP) [ 664.010759][T19497] nbd: device at index 5 is going down [ 664.038686][T19500] netlink: 408 bytes leftover after parsing attributes in process `syz.7.3842'. [ 664.049893][T19494] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 664.061527][T19494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3840'. [ 664.426474][T19519] netlink: 'syz.1.3847': attribute type 1 has an invalid length. [ 664.439142][T19519] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3847'. [ 664.580224][T19525] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3850'. [ 664.589944][T19525] bridge_slave_1: left allmulticast mode [ 664.599654][T19525] bridge_slave_1: left promiscuous mode [ 664.606377][T19528] netlink: 'syz.6.3851': attribute type 1 has an invalid length. [ 664.614557][T19525] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.627707][T19525] bridge_slave_0: left allmulticast mode [ 664.633533][T19525] bridge_slave_0: left promiscuous mode [ 664.640526][T19525] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.652890][T19532] netlink: 'syz.5.3849': attribute type 3 has an invalid length. [ 664.720502][T19535] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3851'. [ 664.790795][T19525] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3850'. [ 664.947773][T19533] bond6: (slave bridge5): making interface the new active one [ 664.969732][T19544] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3856'. [ 664.981034][T19533] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 664.997192][T19535] vlan2: entered allmulticast mode [ 665.002454][T19535] bond6: entered allmulticast mode [ 665.008152][T19535] bridge5: entered allmulticast mode [ 665.018505][T19546] netlink: 'syz.1.3855': attribute type 18 has an invalid length. [ 665.060388][T17242] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 665.077313][T19546] netlink: 'syz.1.3855': attribute type 18 has an invalid length. [ 665.094983][T17242] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 665.107877][T17242] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 665.139183][T17242] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 665.184159][T19548] bond0: entered promiscuous mode [ 665.190296][T19548] bond0: entered allmulticast mode [ 665.197156][T19548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 665.760580][T19582] netlink: 'syz.1.3869': attribute type 11 has an invalid length. [ 666.469921][T19592] wg1: left allmulticast mode [ 666.623822][T19592] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 666.734044][T19592] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 667.031797][T19592] gretap1: left allmulticast mode [ 667.043990][T19592] mac80211_hwsim hwsim31 syzkaller0: left allmulticast mode [ 667.054373][T19592] geneve2: left allmulticast mode [ 667.084787][T19592] bridge4: left allmulticast mode [ 667.094582][T19592] vlan0: left allmulticast mode [ 667.100787][T19592] veth0_vlan: left allmulticast mode [ 667.106440][T19592] vlan0: left promiscuous mode [ 667.112980][T19592] macvtap1: left allmulticast mode [ 667.294091][T17241] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.322082][T17241] netdevsim netdevsim7 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 667.363877][T17241] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.396300][T17241] netdevsim netdevsim7 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 667.478341][T17241] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.498205][T17241] netdevsim netdevsim7 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 667.540041][T17241] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.581191][T17241] netdevsim netdevsim7 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 667.595649][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 667.830386][T19656] block nbd4: Unsupported socket: should be TCP or UNIX. [ 667.846809][T19656] block nbd4: Unsupported socket: should be TCP or UNIX. [ 667.874702][T19656] block nbd4: Unsupported socket: should be TCP or UNIX. [ 667.935583][T19656] block nbd4: Unsupported socket: should be TCP or UNIX. [ 667.963666][T19656] block nbd4: Unsupported socket: should be TCP or UNIX. [ 668.017800][T19656] block nbd4: Unsupported socket: should be TCP or UNIX. [ 668.055974][T19656] block nbd4: Unsupported socket: should be TCP or UNIX. [ 668.073613][T19656] block nbd4: Unsupported socket: should be TCP or UNIX. [ 668.088559][T19671] syzkaller0: entered promiscuous mode [ 668.096634][T19671] syzkaller0: entered allmulticast mode [ 668.106470][T19656] block nbd4: Unsupported socket: should be TCP or UNIX. [ 668.114329][T19656] block nbd4: Unsupported socket: should be TCP or UNIX. [ 668.189862][T19673] bond4: Removing last ns target with arp_interval on [ 668.200494][T19656] block nbd4: Unsupported socket: should be TCP or UNIX. [ 668.246239][T19656] block nbd4: Unsupported socket: should be TCP or UNIX. [ 668.279903][T19656] block nbd4: Unsupported socket: should be TCP or UNIX. [ 668.337445][T19680] bond0: (slave bridge0): Releasing backup interface [ 668.359111][T19656] block nbd4: Unsupported socket: should be TCP or UNIX. [ 668.369572][T19656] block nbd4: Unsupported socket: should be TCP or UNIX. [ 668.382517][T19680] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.389898][T19680] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.402175][T19656] block nbd4: Unsupported socket: should be TCP or UNIX. [ 668.411285][T19688] __nla_validate_parse: 69 callbacks suppressed [ 668.411306][T19688] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3891'. [ 668.441667][T19680] bridge_slave_0: left allmulticast mode [ 668.456238][T19656] block nbd4: Unsupported socket: should be TCP or UNIX. [ 668.476848][T19656] block nbd4: Unsupported socket: should be TCP or UNIX. [ 668.498979][T19680] bridge_slave_0: left promiscuous mode [ 668.508598][T19656] block nbd4: Unsupported socket: should be TCP or UNIX. [ 668.521184][T19680] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.532312][T19656] block nbd4: Unsupported socket: should be TCP or UNIX. [ 668.557333][T19656] block nbd4: Unsupported socket: should be TCP or UNIX. [ 668.581645][T19680] bridge_slave_1: left allmulticast mode [ 668.596137][T19656] block nbd4: Unsupported socket: should be TCP or UNIX. [ 668.626679][T19656] block nbd4: Unsupported socket: should be TCP or UNIX. [ 668.646875][T19680] bridge_slave_1: left promiscuous mode [ 668.649639][T19694] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3893'. [ 668.652786][T19680] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.711288][T19680] bond0: (slave bond_slave_0): Releasing backup interface [ 668.750308][T19680] bond0: (slave bond_slave_1): Releasing backup interface [ 668.769990][T19680] team0: Port device team_slave_0 removed [ 668.780218][T19680] team0: Port device team_slave_1 removed [ 668.787619][T19680] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 668.797149][T19680] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 668.809466][T19680] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 668.819607][T19680] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 668.860177][T19692] vcan0: entered allmulticast mode [ 668.873166][T19699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3893'. [ 669.237934][T19712] xt_l2tp: v2 doesn't support IP mode [ 669.382376][T19722] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3902'. [ 669.422052][T19725] netlink: 'syz.1.3903': attribute type 1 has an invalid length. [ 669.519692][T19725] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3903'. [ 669.687485][T19735] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 669.733923][T19728] siw: device registration error -23 [ 669.802942][T19729] syzkaller1: entered promiscuous mode [ 669.808705][T19729] syzkaller1: entered allmulticast mode [ 669.969590][T19742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3907'. [ 670.061296][T19745] tipc: Enabled bearer , priority 0 [ 670.148678][T19752] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3913'. [ 670.157243][T19755] xt_TPROXY: Can be used only with -p tcp or -p udp [ 670.159422][T19749] netlink: 'syz.6.3909': attribute type 2 has an invalid length. [ 670.198257][T19745] tipc: Resetting bearer [ 670.277094][T19744] tipc: Disabling bearer [ 670.369941][T19768] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3916'. [ 670.411501][T19770] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3916'. [ 670.431728][T19766] syzkaller0: entered promiscuous mode [ 670.446583][T19766] syzkaller0: entered allmulticast mode [ 670.622003][T19774] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3917'. [ 670.924280][T19800] sctp: [Deprecated]: syz.3.3923 (pid 19800) Use of int in max_burst socket option. [ 670.924280][T19800] Use struct sctp_assoc_value instead [ 671.393487][T19825] netlink: 'syz.7.3932': attribute type 11 has an invalid length. [ 671.414725][T19830] tipc: Started in network mode [ 671.424931][T19830] tipc: Node identity 8209d84be3e8, cluster identity 4711 [ 671.433482][T19830] tipc: Enabled bearer , priority 0 [ 671.444478][T19828] syzkaller0: entered promiscuous mode [ 671.456019][T19828] syzkaller0: entered allmulticast mode [ 671.559420][T19828] vcan0: mtu less than device minimum [ 671.563459][T19839] netlink: 'syz.1.3936': attribute type 21 has an invalid length. [ 671.622380][T19826] tipc: Resetting bearer [ 671.648575][T19826] tipc: Disabling bearer [ 672.668831][T19855] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 672.876523][ T5842] Bluetooth: hci7: command 0x0405 tx timeout [ 672.930265][ T60] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 672.967061][ T60] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 672.997714][T19896] netlink: 'syz.3.3950': attribute type 11 has an invalid length. [ 673.021782][ T60] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 673.054901][ T60] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 673.702485][T19939] netlink: 7 bytes leftover after parsing attributes in process `syz.7.3962'. [ 673.702485][T19936] __nla_validate_parse: 15 callbacks suppressed [ 673.702507][T19936] netlink: 7 bytes leftover after parsing attributes in process `syz.7.3962'. [ 673.950173][T19951] netlink: 9 bytes leftover after parsing attributes in process `syz.7.3969'. [ 673.978392][T19956] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3970'. [ 673.989655][T19956] IPVS: Unknown mcast interface: vcan0 [ 674.137667][T19960] batadv0: entered promiscuous mode [ 674.157689][T19964] netlink: 'syz.5.3972': attribute type 6 has an invalid length. [ 674.169993][T19960] bond0: entered promiscuous mode [ 674.183420][T19960] bond_slave_0: entered promiscuous mode [ 674.200081][T19960] bond_slave_1: entered promiscuous mode [ 674.218904][T19960] hsr1: Slave A (batadv0) is not up; please bring it up to get a fully working HSR network [ 674.231617][T19960] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 674.242788][T19960] hsr1: entered allmulticast mode [ 674.248820][T19960] batadv0: entered allmulticast mode [ 674.254921][T19960] bond0: entered allmulticast mode [ 674.261887][T19960] bond_slave_0: entered allmulticast mode [ 674.268167][T19960] bond_slave_1: entered allmulticast mode [ 674.277133][T19960] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 674.355198][T19970] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3975'. [ 674.811256][T19994] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3981'. [ 674.839835][T19997] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3981'. [ 675.141442][T20010] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3984'. [ 675.254126][T20016] openvswitch: netlink: Duplicate or invalid key (type 0). [ 675.268444][T20016] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 675.298502][T20022] openvswitch: netlink: Duplicate or invalid key (type 0). [ 675.307271][T20019] SET target dimension over the limit! [ 675.325110][T20023] tipc: Enabled bearer , priority 0 [ 675.328592][T20022] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 675.352139][T20023] syzkaller0: entered promiscuous mode [ 675.367110][T20023] syzkaller0: entered allmulticast mode [ 675.450514][T20023] tipc: Resetting bearer [ 675.464713][T20018] tipc: Resetting bearer [ 675.488448][T20018] tipc: Disabling bearer [ 675.606137][T20043] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3993'. [ 675.751640][T20043] macvtap2: entered promiscuous mode [ 675.759951][T20043] vlan0: entered promiscuous mode [ 675.766855][T20043] macvtap2: entered allmulticast mode [ 675.775092][T20043] vlan0: entered allmulticast mode [ 675.781175][T20043] veth0_vlan: entered allmulticast mode [ 675.803239][T20049] netlink: 'syz.6.3997': attribute type 7 has an invalid length. [ 675.811824][T20049] netlink: 140 bytes leftover after parsing attributes in process `syz.6.3997'. [ 675.842148][T20036] syzkaller1: entered promiscuous mode [ 675.850954][T20036] syzkaller1: entered allmulticast mode [ 675.964880][T20056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 675.972976][T20056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 676.023100][T20056] bridge0: port 3(batadv0) entered disabled state [ 676.163395][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 676.309978][T20072] netlink: 'syz.3.4004': attribute type 15 has an invalid length. [ 676.791165][T20105] netdevsim netdevsim3: Direct firmware load for ..€ failed with error -2 [ 676.808494][T20108] netlink: 'syz.6.4015': attribute type 1 has an invalid length. [ 676.816892][T20105] netdevsim netdevsim3: Falling back to sysfs fallback for: ..€ [ 676.824569][T20113] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 676.911846][T20108] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 676.963394][T20115] bridge0: port 1(bond6) entered blocking state [ 676.978970][T20115] bridge0: port 1(bond6) entered disabled state [ 676.986193][T20115] bond6: entered allmulticast mode [ 676.995589][T20115] bond6: entered promiscuous mode [ 677.249331][T20131] xt_TCPMSS: Only works on TCP SYN packets [ 677.689569][T20146] syzkaller0: entered promiscuous mode [ 677.706412][T20146] syzkaller0: entered allmulticast mode [ 677.842286][ T5834] Bluetooth: hci6: command 0x0406 tx timeout [ 678.035892][T20159] syzkaller0: entered promiscuous mode [ 678.058989][T20159] syzkaller0: entered allmulticast mode [ 680.400507][T20205] netlink: 'syz.7.4035': attribute type 4 has an invalid length. [ 680.456880][T20208] netlink: 'syz.5.4036': attribute type 24 has an invalid length. [ 680.537193][T20208] netlink: 'syz.5.4036': attribute type 1 has an invalid length. [ 680.551562][T20208] netlink: 'syz.5.4036': attribute type 24 has an invalid length. [ 680.687391][T20216] __nla_validate_parse: 11 callbacks suppressed [ 680.687413][T20216] netlink: 14 bytes leftover after parsing attributes in process `syz.7.4039'. [ 680.792070][T20229] tipc: Enabled bearer , priority 0 [ 680.810629][T20224] vlan1: entered allmulticast mode [ 680.821107][T20224] veth0_vlan: entered allmulticast mode [ 680.833468][T20233] bridge0: port 3(syz_tun) entered blocking state [ 680.841134][T20233] bridge0: port 3(syz_tun) entered disabled state [ 680.849113][T20233] syz_tun: entered allmulticast mode [ 680.859079][T20233] syz_tun: entered promiscuous mode [ 680.865229][T20233] bridge0: port 3(syz_tun) entered blocking state [ 680.872296][T20233] bridge0: port 3(syz_tun) entered forwarding state [ 681.047621][T20240] mac80211_hwsim hwsim31 syzkaller0: left promiscuous mode [ 681.059479][T20241] netlink: 72 bytes leftover after parsing attributes in process `syz.7.4046'. [ 681.069477][T20242] netlink: 72 bytes leftover after parsing attributes in process `syz.7.4046'. [ 681.079719][T20243] netlink: 'syz.5.4045': attribute type 3 has an invalid length. [ 681.089686][T20241] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4046'. [ 681.090001][T20243] netlink: 666 bytes leftover after parsing attributes in process `syz.5.4045'. [ 681.103156][T20241] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4046'. [ 681.121845][T20242] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4046'. [ 681.138047][T20242] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4046'. [ 681.234602][T20248] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 681.331447][T20250] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4049'. [ 681.381495][T20252] xt_hashlimit: size too large, truncated to 1048576 [ 681.389810][T20254] netlink: 'syz.5.4051': attribute type 10 has an invalid length. [ 681.404252][T20254] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.413217][T20254] bridge_slave_1: left allmulticast mode [ 681.421327][T20254] bridge_slave_1: left promiscuous mode [ 681.428009][T20254] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.455232][T20254] `: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 681.633430][T20223] tipc: Disabling bearer [ 681.659389][T20260] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4052'. [ 681.689025][T20260] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 682.154199][T20282] bond0: entered promiscuous mode [ 682.161153][T20282] bond0: entered allmulticast mode [ 682.169528][T20282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 683.409742][T20356] bond1: ARP target 1.0.0.0 is already present [ 683.416598][T20356] bond1: option arp_ip_target: invalid value (1) [ 683.431614][T20356] bond1 (unregistering): Released all slaves [ 683.673706][T20371] dvmrp0: entered allmulticast mode [ 683.684483][T20371] dvmrp0: left allmulticast mode [ 684.283599][T20408] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 684.441260][T20414] siw: device registration error -23 [ 684.478403][T20414] policy can only be matched on NF_INET_PRE_ROUTING [ 684.478426][T20414] unable to load match [ 684.541228][T20419] netlink: 'syz.5.4102': attribute type 2 has an invalid length. [ 684.560115][T20421] netlink: 'syz.5.4102': attribute type 2 has an invalid length. [ 684.637866][T20424] bond10: option xmit_hash_policy: invalid value (64) [ 684.659619][T20424] bond10 (unregistering): Released all slaves [ 685.487111][T20484] xt_l2tp: wrong L2TP version: 0 [ 685.603936][ T6620] IPVS: starting estimator thread 0... [ 685.611886][T20491] openvswitch: netlink: Missing key (keys=40, expected=100) [ 685.715565][T20493] IPVS: using max 25 ests per chain, 60000 per kthread [ 685.783475][T20500] tipc: Enabling of bearer rejected, failed to enable media [ 685.813573][T20500] syzkaller0: entered promiscuous mode [ 685.832318][T20500] syzkaller0: entered allmulticast mode [ 685.909085][T20516] netlink: 'syz.1.4129': attribute type 4 has an invalid length. [ 686.009386][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.102956][T20524] netlink: 'syz.3.4132': attribute type 21 has an invalid length. [ 686.111551][T20524] netlink: 'syz.3.4132': attribute type 22 has an invalid length. [ 686.121250][T20524] netlink: 'syz.3.4132': attribute type 23 has an invalid length. [ 686.133553][T20524] netlink: 'syz.3.4132': attribute type 25 has an invalid length. [ 686.141944][T20524] netlink: 'syz.3.4132': attribute type 26 has an invalid length. [ 686.151129][T20524] __nla_validate_parse: 13 callbacks suppressed [ 686.151147][T20524] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4132'. [ 686.171286][T20529] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4132'. [ 686.262345][T20531] netlink: 'syz.6.4135': attribute type 16 has an invalid length. [ 686.270758][T20531] netlink: 'syz.6.4135': attribute type 17 has an invalid length. [ 686.314876][T20531] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 686.549637][T20548] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:20001 [ 686.576722][T20548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4140'. [ 686.686177][T20555] tipc: Enabling of bearer rejected, failed to enable media [ 686.755036][T20561] syzkaller0: create flow: hash 2043727190 index 2 [ 686.789070][T20555] syzkaller0: entered promiscuous mode [ 686.801090][T20555] syzkaller0: entered allmulticast mode [ 686.920017][ T60] syzkaller0: tun_net_xmit 76 [ 686.931892][ T60] syzkaller0: tun_net_xmit 48 [ 686.956208][ T6620] syzkaller0: tun_net_xmit 76 [ 687.038548][T20553] syzkaller0: delete flow: hash 2043727190 index 2 [ 687.072194][T20574] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4146'. [ 687.085670][ T6620] syzkaller0: tun_net_xmit 76 [ 687.139061][T20565] bond1 (unregistering): Released all slaves [ 687.687020][T20522] Bluetooth: hci7: command 0x0405 tx timeout [ 688.076005][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 689.085810][T20594] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4149'. [ 689.172306][T20593] block nbd4: Unsupported socket: should be TCP or UNIX. [ 689.187092][T20598] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4149'. [ 689.945546][T20642] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4166'. [ 690.014874][T20642] syzkaller1: entered promiscuous mode [ 690.028109][T20642] syzkaller1: entered allmulticast mode [ 690.271082][T20655] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4171'. [ 690.514343][T20677] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4175'. [ 691.011526][T20705] ip6tnl0: Caught tx_queue_len zero misconfig [ 691.039113][T20703] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4185'. [ 691.211382][T20712] netlink: 'syz.7.4189': attribute type 29 has an invalid length. [ 691.311879][T20712] netlink: 'syz.7.4189': attribute type 29 has an invalid length. [ 691.363738][T20726] __nla_validate_parse: 2 callbacks suppressed [ 691.363762][T20726] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4192'. [ 691.556842][T20738] netlink: zone id is out of range [ 691.575651][T20738] netlink: zone id is out of range [ 691.580860][T20738] netlink: get zone limit has 8 unknown bytes [ 691.820421][T20752] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4200'. [ 691.873555][T20744] mac80211_hwsim hwsim31 syzkaller0: entered promiscuous mode [ 691.879051][T20756] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4200'. [ 691.890235][T20744] mac80211_hwsim hwsim31 syzkaller0: entered allmulticast mode [ 692.016590][T20752] bridge7: port 1(bond7) entered blocking state [ 692.023241][T20752] bridge7: port 1(bond7) entered disabled state [ 692.034726][T20764] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4202'. [ 692.047295][T20752] bond7: entered allmulticast mode [ 692.057305][T20752] bond7: entered promiscuous mode [ 692.322782][T20773] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4208'. [ 692.362209][T20773] Unsupported xt match [ 692.362230][T20773] unable to load match [ 692.382660][T20775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4209'. [ 692.422575][T20781] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4211'. [ 692.461578][T20781] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4211'. [ 692.513839][T20783] netlink: 'syz.6.4212': attribute type 5 has an invalid length. [ 692.535907][T20783] netlink: 140 bytes leftover after parsing attributes in process `syz.6.4212'. [ 692.723367][T20798] syzkaller0: entered promiscuous mode [ 692.755588][T20798] syzkaller0: entered allmulticast mode [ 692.827517][T20805] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4219'. [ 693.144194][T20823] xt_cgroup: invalid path, errno=-2 [ 693.231462][T20826] syzkaller1: entered promiscuous mode [ 693.249088][T20826] syzkaller1: entered allmulticast mode [ 693.569884][T20843] lo: entered promiscuous mode [ 693.575601][T20843] tunl0: entered promiscuous mode [ 693.581278][T20843] gre0: entered promiscuous mode [ 693.597292][T20843] gretap0: entered promiscuous mode [ 693.607546][T20843] erspan0: entered promiscuous mode [ 693.627829][T20843] ip_vti0: entered promiscuous mode [ 693.660134][T20845] netlink: 'syz.3.4233': attribute type 1 has an invalid length. [ 693.981398][T20864] 8021q: adding VLAN 0 to HW filter on device team0 [ 693.994848][T20864] team0: Cannot enslave team device to itself [ 694.049759][T20870] netlink: 'syz.3.4238': attribute type 4 has an invalid length. [ 694.268118][T20881] netlink: 'syz.1.4241': attribute type 21 has an invalid length. [ 694.326096][T20882] syz.3.4243: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 694.347430][T20882] CPU: 0 UID: 0 PID: 20882 Comm: syz.3.4243 Not tainted syzkaller #0 PREEMPT(full) [ 694.347459][T20882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 694.347472][T20882] Call Trace: [ 694.347481][T20882] [ 694.347496][T20882] dump_stack_lvl+0x189/0x250 [ 694.347536][T20882] ? __pfx_dump_stack_lvl+0x10/0x10 [ 694.347566][T20882] ? __pfx__printk+0x10/0x10 [ 694.347589][T20882] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 694.347617][T20882] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 694.347647][T20882] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 694.347678][T20882] warn_alloc+0x214/0x310 [ 694.347708][T20882] ? stack_depot_save_flags+0x40/0x860 [ 694.347744][T20882] ? __pfx_warn_alloc+0x10/0x10 [ 694.347776][T20882] ? kasan_save_track+0x3e/0x80 [ 694.347802][T20882] ? __kasan_kmalloc+0x93/0xb0 [ 694.347834][T20882] ? xsk_setsockopt+0x4dc/0x8d0 [ 694.347855][T20882] ? do_sock_setsockopt+0x17c/0x1b0 [ 694.347885][T20882] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 694.347914][T20882] ? do_syscall_64+0xfa/0xfa0 [ 694.347937][T20882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.347969][T20882] __vmalloc_node_range_noprof+0x125/0x12d0 [ 694.348034][T20882] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 694.348079][T20882] ? __kasan_kmalloc+0x93/0xb0 [ 694.348116][T20882] vmalloc_user_noprof+0xad/0xf0 [ 694.348147][T20882] ? xskq_create+0xbf/0x170 [ 694.348170][T20882] xskq_create+0xbf/0x170 [ 694.348197][T20882] xsk_init_queue+0xb0/0x110 [ 694.348223][T20882] xsk_setsockopt+0x4dc/0x8d0 [ 694.348245][T20882] ? __pfx_xsk_setsockopt+0x10/0x10 [ 694.348272][T20882] ? __pfx_aa_sk_perm+0x10/0x10 [ 694.348301][T20882] ? aa_sock_opt_perm+0xff/0x1b0 [ 694.348336][T20882] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 694.348356][T20882] ? __pfx_xsk_setsockopt+0x10/0x10 [ 694.348379][T20882] do_sock_setsockopt+0x17c/0x1b0 [ 694.348417][T20882] __x64_sys_setsockopt+0x13f/0x1b0 [ 694.348456][T20882] do_syscall_64+0xfa/0xfa0 [ 694.348479][T20882] ? lockdep_hardirqs_on+0x9c/0x150 [ 694.348504][T20882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.348526][T20882] ? clear_bhb_loop+0x60/0xb0 [ 694.348552][T20882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.348573][T20882] RIP: 0033:0x7fb1a098efc9 [ 694.348593][T20882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 694.348612][T20882] RSP: 002b:00007fb1a17db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 694.348637][T20882] RAX: ffffffffffffffda RBX: 00007fb1a0be6180 RCX: 00007fb1a098efc9 [ 694.348653][T20882] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 694.348665][T20882] RBP: 00007fb1a0a11f91 R08: 0000000000000004 R09: 0000000000000000 [ 694.348678][T20882] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 694.348691][T20882] R13: 00007fb1a0be6218 R14: 00007fb1a0be6180 R15: 00007ffc1f30d828 [ 694.348730][T20882] [ 694.348864][T20882] Mem-Info: [ 694.433983][T20886] vcan0: tx drop: invalid da for name 0x0000000000000015 [ 694.498795][T20882] active_anon:5362 inactive_anon:0 isolated_anon:0 [ 694.498795][T20882] active_file:3077 inactive_file:40071 isolated_file:0 [ 694.498795][T20882] unevictable:768 dirty:55 writeback:0 [ 694.498795][T20882] slab_reclaimable:12601 slab_unreclaimable:123437 [ 694.498795][T20882] mapped:40488 shmem:1397 pagetables:1243 [ 694.498795][T20882] sec_pagetables:0 bounce:0 [ 694.498795][T20882] kernel_misc_reclaimable:0 [ 694.498795][T20882] free:1275692 free_pcp:13993 free_cma:0 [ 694.712788][T20882] Node 0 active_anon:23548kB inactive_anon:0kB active_file:12308kB inactive_file:160080kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:161952kB dirty:216kB writeback:0kB shmem:4052kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15848kB pagetables:4960kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 694.754411][T20882] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 694.867214][T20882] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 694.917839][T20882] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 694.923741][T20882] Node 0 DMA32 free:1187028kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21448kB inactive_anon:0kB active_file:12308kB inactive_file:160080kB unevictable:1536kB writepending:216kB zspages:0kB present:3129332kB managed:2565208kB mlocked:0kB bounce:0kB free_pcp:49592kB local_pcp:25636kB free_cma:0kB [ 694.962361][T20882] lowmem_reserve[]: 0 0 0 0 0 [ 694.969822][T20882] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 695.000109][T20882] lowmem_reserve[]: 0 0 0 0 0 [ 695.004920][T20882] Node 1 Normal free:3900012kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:6656kB local_pcp:2880kB free_cma:0kB [ 695.060341][T20882] lowmem_reserve[]: 0 0 0 0 0 [ 695.071838][T20882] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 695.090688][T20882] Node 0 DMA32: 1481*4kB (UME) 881*8kB (UME) 325*16kB (UME) 182*32kB (UME) 29*64kB (UME) 71*128kB (UE) 50*256kB (UME) 18*512kB (U) 6*1024kB (UME) 4*2048kB (UM) 273*4096kB (UM) = 1189500kB [ 695.110313][T20882] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 695.128491][T20882] Node 1 Normal: 207*4kB (UME) 46*8kB (UME) 64*16kB (UME) 246*32kB (UME) 76*64kB (UME) 24*128kB (UME) 2*256kB (M) 3*512kB (UM) 1*1024kB (M) 2*2048kB (UE) 946*4096kB (M) = 3900012kB [ 695.149928][T20882] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 695.161135][T20882] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 695.174428][T20882] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 695.196386][T20882] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 695.215682][T20882] 44501 total pagecache pages [ 695.220538][T20882] 0 pages in swap cache [ 695.224804][T20882] Free swap = 124996kB [ 695.231795][T20882] Total swap = 124996kB [ 695.236744][T20882] 2097051 pages RAM [ 695.240830][T20882] 0 pages HighMem/MovableOnly [ 695.246140][T20882] 424107 pages reserved [ 695.250339][T20882] 0 pages cma reserved [ 695.713501][T20930] tipc: Enabled bearer , priority 0 [ 695.722665][T20930] syzkaller0: entered promiscuous mode [ 695.729699][T20930] syzkaller0: entered allmulticast mode [ 695.762941][T20930] tipc: Resetting bearer [ 695.790146][T20929] tipc: Resetting bearer [ 695.814503][T20929] tipc: Disabling bearer [ 695.843604][T20932] bond0: (slave dummy0): Releasing backup interface [ 695.864071][T20934] mac80211_hwsim hwsim31 syzkaller0: left promiscuous mode [ 695.872671][T20934] mac80211_hwsim hwsim31 syzkaller0: left allmulticast mode [ 696.237012][ T31] INFO: task syz.0.2840:15915 blocked for more than 143 seconds. [ 696.248121][ T31] Not tainted syzkaller #0 [ 696.253124][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 696.275403][ T31] task:syz.0.2840 state:D stack:26200 pid:15915 tgid:15914 ppid:5832 task_flags:0x400140 flags:0x00080002 [ 696.309718][ T31] Call Trace: [ 696.317339][ T31] [ 696.327825][ T31] __schedule+0x1798/0x4cc0 [ 696.337359][ T31] ? __lock_acquire+0xab9/0xd20 [ 696.348590][ T31] ? __lock_acquire+0xab9/0xd20 [ 696.359483][ T31] ? __pfx___schedule+0x10/0x10 [ 696.364495][ T31] ? schedule+0x91/0x360 [ 696.369462][ T31] schedule+0x165/0x360 [ 696.373747][ T31] schedule_preempt_disabled+0x13/0x30 [ 696.380754][ T31] __mutex_lock+0x7e6/0x1350 [ 696.385880][ T31] ? __mutex_lock+0x5bb/0x1350 [ 696.396894][ T31] ? nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290 [ 696.419009][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 696.424424][ T31] ? stack_trace_save+0x9c/0xe0 [ 696.430374][ T31] ? stack_depot_save_flags+0x40/0x860 [ 696.436572][ T31] nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290 [ 696.442952][ T31] ? __alloc_skb+0x142/0x2d0 [ 696.448172][ T31] ? netlink_dump+0x1b7/0xe90 [ 696.453227][ T31] ? __netlink_dump_start+0x5cb/0x7e0 [ 696.458691][ T31] ? genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 696.464616][ T31] ? genl_rcv_msg+0x5da/0x790 [ 696.469671][ T31] ? netlink_rcv_skb+0x208/0x470 [ 696.474738][ T31] ? genl_rcv+0x28/0x40 [ 696.479199][ T31] ? netlink_unicast+0x82f/0x9e0 [ 696.484216][ T31] ? netlink_sendmsg+0x805/0xb30 [ 696.489539][ T31] ? __sock_sendmsg+0x21c/0x270 [ 696.494495][ T31] ? ____sys_sendmsg+0x505/0x830 [ 696.499615][ T31] ? ___sys_sendmsg+0x21f/0x2a0 [ 696.504744][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 696.510461][ T31] ? do_syscall_64+0xfa/0xfa0 [ 696.515187][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.521397][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 696.528475][ T31] ? rcu_is_watching+0x15/0xb0 [ 696.533628][ T31] ? trace_kmalloc+0x1f/0xd0 [ 696.538514][ T31] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 696.545142][ T31] ? __alloc_skb+0x142/0x2d0 [ 696.550044][ T31] ? __build_skb_around+0x262/0x3f0 [ 696.556138][ T31] genl_dumpit+0x10b/0x1b0 [ 696.560737][ T31] netlink_dump+0x6e4/0xe90 [ 696.566043][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 696.571379][ T31] ? genl_start+0x499/0x6c0 [ 696.576202][ T31] __netlink_dump_start+0x5cb/0x7e0 [ 696.581438][ T31] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 696.587455][ T31] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 696.593843][ T31] ? genl_get_cmd+0x496/0x910 [ 696.599120][ T31] ? __pfx_genl_start+0x10/0x10 [ 696.604870][ T31] ? __pfx_genl_dumpit+0x10/0x10 [ 696.610130][ T31] ? __pfx_genl_done+0x10/0x10 [ 696.614970][ T31] ? stack_trace_save+0x9c/0xe0 [ 696.620842][ T31] genl_rcv_msg+0x5da/0x790 [ 696.626045][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 696.631099][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 696.638329][ T31] netlink_rcv_skb+0x208/0x470 [ 696.643121][ T31] ? __lock_acquire+0xab9/0xd20 [ 696.648370][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 696.653515][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 696.659893][ T31] ? down_read+0x1ad/0x2e0 [ 696.664429][ T31] genl_rcv+0x28/0x40 [ 696.668895][ T31] netlink_unicast+0x82f/0x9e0 [ 696.673758][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 696.679239][ T31] ? netlink_sendmsg+0x642/0xb30 [ 696.684318][ T31] ? skb_put+0x11b/0x210 [ 696.689160][ T31] netlink_sendmsg+0x805/0xb30 [ 696.694284][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 696.699905][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 696.704893][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 696.711115][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 696.717274][ T31] __sock_sendmsg+0x21c/0x270 [ 696.722029][ T31] ____sys_sendmsg+0x505/0x830 [ 696.727217][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 696.732600][ T31] ? import_iovec+0x74/0xa0 [ 696.737999][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 696.742720][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 696.748306][ T31] ? __fget_files+0x2a/0x420 [ 696.753006][ T31] ? __fget_files+0x3a0/0x420 [ 696.758047][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 696.763024][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 696.768765][ T31] ? do_syscall_64+0xbe/0xfa0 [ 696.773552][ T31] do_syscall_64+0xfa/0xfa0 [ 696.778487][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 696.783807][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.790021][ T31] ? clear_bhb_loop+0x60/0xb0 [ 696.794741][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.801181][ T31] RIP: 0033:0x7f86eb58efc9 [ 696.805737][ T31] RSP: 002b:00007f86e97ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 696.814840][ T31] RAX: ffffffffffffffda RBX: 00007f86eb7e5fa0 RCX: 00007f86eb58efc9 [ 696.823256][ T31] RDX: 0000000000000800 RSI: 0000200000000180 RDI: 0000000000000003 [ 696.831398][ T31] RBP: 00007f86eb611f91 R08: 0000000000000000 R09: 0000000000000000 [ 696.839681][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 696.847907][ T31] R13: 00007f86eb7e6038 R14: 00007f86eb7e5fa0 R15: 00007ffcb11264f8 [ 696.856215][ T31] [ 696.859405][ T31] [ 696.859405][ T31] Showing all locks held in the system: [ 696.868796][ T31] 1 lock held by ksoftirqd/1/23: [ 696.874562][ T31] #0: ffff8880b893a058 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 696.892981][ T31] 1 lock held by khungtaskd/31: [ 696.898692][ T31] #0: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 696.908842][ T31] 2 locks held by kworker/u8:4/60: [ 696.914545][ T31] #0: ffff8880b893a058 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 696.924828][ T31] #1: ffff8880b8824048 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 696.934449][ T31] 1 lock held by klogd/5187: [ 696.939267][ T31] #0: ffff8880b883a058 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 696.949432][ T31] 2 locks held by getty/5586: [ 696.954193][ T31] #0: ffff88803344b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 696.964112][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 696.974509][ T31] 4 locks held by kworker/u8:16/12064: [ 696.980070][ T31] #0: ffff88801aedf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 696.991217][ T31] #1: ffffc900035f7ba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 697.002115][ T31] #2: ffffffff8f2bf970 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 697.011694][ T31] #3: ffffffff8f2cc808 (rtnl_mutex){+.+.}-{4:4}, at: netdev_run_todo+0x79b/0xea0 [ 697.021150][ T31] 2 locks held by syz.4.2581/15012: [ 697.026542][ T31] #0: ffffffff8f332490 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 697.034892][ T31] #1: ffffffff8e226b68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 697.047222][ T31] 3 locks held by syz.0.2840/15915: [ 697.052489][ T31] #0: ffffffff8f332490 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 697.061399][ T31] #1: ffff88804d0386e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 697.072399][ T31] #2: ffffffff8e226b68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290 [ 697.083578][ T31] 1 lock held by syz.5.4248/20895: [ 697.088955][ T31] #0: ffff8880304bb068 (&pipe->mutex){+.+.}-{4:4}, at: pipe_release+0x48/0x330 [ 697.098337][ T31] 1 lock held by syz.5.4248/20896: [ 697.103516][ T31] #0: ffff8880304bb068 (&pipe->mutex){+.+.}-{4:4}, at: splice_file_to_pipe+0x2e/0x440 [ 697.113831][ T31] 1 lock held by syz.5.4248/20899: [ 697.119214][ T31] #0: ffff8880304bb068 (&pipe->mutex){+.+.}-{4:4}, at: __se_sys_vmsplice+0x3c9/0x10d0 [ 697.129036][ T31] 2 locks held by syz.3.4271/20962: [ 697.134247][ T31] #0: ffffffff8f2cc808 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 697.143354][ T31] #1: ffffffff8df42d78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 697.154425][ T31] [ 697.158398][ T31] ============================================= [ 697.158398][ T31] [ 697.167021][ T31] NMI backtrace for cpu 1 [ 697.167041][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 697.167063][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 697.167074][ T31] Call Trace: [ 697.167082][ T31] [ 697.167090][ T31] dump_stack_lvl+0x189/0x250 [ 697.167125][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 697.167151][ T31] ? __pfx__printk+0x10/0x10 [ 697.167185][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 697.167228][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 697.167262][ T31] ? __pfx__printk+0x10/0x10 [ 697.167288][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 697.167321][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 697.167354][ T31] watchdog+0xf60/0xfa0 [ 697.167381][ T31] ? watchdog+0x1e2/0xfa0 [ 697.167408][ T31] kthread+0x711/0x8a0 [ 697.167438][ T31] ? __pfx_watchdog+0x10/0x10 [ 697.167458][ T31] ? __pfx_kthread+0x10/0x10 [ 697.167486][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 697.167509][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 697.167531][ T31] ? __pfx_kthread+0x10/0x10 [ 697.167558][ T31] ret_from_fork+0x4bc/0x870 [ 697.167582][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 697.167611][ T31] ? __switch_to_asm+0x39/0x70 [ 697.167628][ T31] ? __switch_to_asm+0x33/0x70 [ 697.167644][ T31] ? __pfx_kthread+0x10/0x10 [ 697.167671][ T31] ret_from_fork_asm+0x1a/0x30 [ 697.167707][ T31] [ 697.167715][ T31] Sending NMI from CPU 1 to CPUs 0: [ 697.316031][ C0] NMI backtrace for cpu 0 [ 697.316051][ C0] CPU: 0 UID: 0 PID: 5816 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 697.316070][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 697.316080][ C0] RIP: 0010:__pick_next_task+0x18d/0x450 [ 697.316108][ C0] Code: 48 b9 00 00 00 00 00 fc ff df 48 8b 04 24 49 39 45 00 0f 85 7d 02 00 00 4c 8d a8 a0 02 00 00 4c 89 e8 48 c1 e8 03 80 3c 08 00 <74> 12 4c 89 ef e8 29 8e 93 00 48 b9 00 00 00 00 00 fc ff df 49 c7 [ 697.316121][ C0] RSP: 0018:ffffc90003fef950 EFLAGS: 00000046 [ 697.316137][ C0] RAX: 1ffff1100eab77e4 RBX: ffff8880b883ab48 RCX: dffffc0000000000 [ 697.316149][ C0] RDX: ffff8880b883ab70 RSI: ffffffff8d8f2da7 RDI: ffff8880b883a040 [ 697.316161][ C0] RBP: 1ffff11017107569 R08: 0000000000000003 R09: 0000000000000004 [ 697.316172][ C0] R10: dffffc0000000000 R11: fffff520007fdee8 R12: 1ffff1100eab77e5 [ 697.316183][ C0] R13: ffff8880755bbf20 R14: ffff8880755bbf28 R15: ffffffff8dc95200 [ 697.316195][ C0] FS: 0000555570344500(0000) GS:ffff88812613f000(0000) knlGS:0000000000000000 [ 697.316208][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 697.316219][ C0] CR2: 00007f57ef3b3ad8 CR3: 0000000074dc8000 CR4: 00000000003526f0 [ 697.316235][ C0] Call Trace: [ 697.316244][ C0] [ 697.316255][ C0] __schedule+0x7a4/0x4cc0 [ 697.316281][ C0] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 697.316306][ C0] ? __lock_acquire+0xab9/0xd20 [ 697.316331][ C0] ? __pfx___schedule+0x10/0x10 [ 697.316356][ C0] ? schedule+0x91/0x360 [ 697.316374][ C0] schedule+0x165/0x360 [ 697.316391][ C0] do_nanosleep+0x1c5/0x610 [ 697.316408][ C0] ? do_nanosleep+0x7f/0x610 [ 697.316423][ C0] ? __pfx_do_nanosleep+0x10/0x10 [ 697.316439][ C0] ? __hrtimer_setup+0x187/0x210 [ 697.316455][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 697.316474][ C0] hrtimer_nanosleep+0x169/0x360 [ 697.316492][ C0] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 697.316510][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 697.316528][ C0] ? __pfx_get_timespec64+0x10/0x10 [ 697.316548][ C0] __se_sys_clock_nanosleep+0x339/0x390 [ 697.316566][ C0] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 697.316584][ C0] ? do_syscall_64+0xbe/0xfa0 [ 697.316604][ C0] do_syscall_64+0xfa/0xfa0 [ 697.316623][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.316638][ C0] ? asm_common_interrupt+0x26/0x40 [ 697.316652][ C0] ? clear_bhb_loop+0x60/0xb0 [ 697.316669][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.316684][ C0] RIP: 0033:0x7fd6935c1843 [ 697.316697][ C0] Code: 1f 84 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 1e 6d 1f 00 00 74 14 b8 e6 00 00 00 0f 05 d8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 [ 697.316711][ C0] RSP: 002b:00007ffe395e13a8 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 697.316727][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd6935c1843 [ 697.316738][ C0] RDX: 00007ffe395e13c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 697.316748][ C0] RBP: 0000000000000000 R08: 7fffffffffffffff R09: 3fffffffffffffff [ 697.316759][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffe395e1810 [ 697.316769][ C0] R13: 0000000000000004 R14: 00007ffe395e13fc R15: 00007ffe395e1490 [ 697.316789][ C0]