last executing test programs: 2m25.549734294s ago: executing program 0 (id=2551): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r1, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfffffffa, 0x23}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) r2 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x80) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000001ac0)) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000001b40), r0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x30, r5, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @empty}, @GTPA_FAMILY={0x5, 0xd, 0x2c}]}, 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000001d80)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001c80)={0xb0, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x39}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}]}]}, 0xb0}}, 0x4000800) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001e00)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000001fc0)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x3c, r1, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0xfffffffb}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x1}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x773e}, @NL80211_ATTR_TXQ_QUANTUM={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1478}]}, 0x3c}}, 0x800) r6 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r4, 0x4018f50b, &(0x7f0000002180)={0x1, 0x8000, 0xffff}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000002480)={r6}) 2m25.092969527s ago: executing program 0 (id=2555): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xf8, r1, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x9}, {0x5}, {0x6, 0x11, 0x9}, {0x8, 0xb, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xb}, {0x6, 0x16, 0xc0}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x1}, {0x8, 0xb, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x6}, {0x8}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x40804) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r2, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x24}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@ipv6_getmulticast={0x14, 0x3a, 0x400, 0x70bd26, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4018845}, 0x1) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, r5, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x20, 0x17, {0x1a, 0x75, @l2={'eth', 0x3a, 'veth1_virt_wifi\x00'}}}}, ["", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4810}, 0x44015) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x90, r1, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x4}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x4c, 0xa9, @random="c2d6a4d6f7947635bc471e838a171d95955ee0f3b6851ae91c05527a0f32846703343ff05494f1ab3e8dc3a05ff1342111fa52d3622556a35ef4fd3fecb5790495ee48546b8f8933"}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000880}, 0x8808) (async) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000740), 0x4) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$ARPT_SO_GET_INFO(r6, 0x0, 0x60, 0xffffffffffffffff, &(0x7f0000000780)) readv(r6, &(0x7f0000002c00)=[{&(0x7f00000007c0)=""/98, 0x62}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/117, 0x75}, {&(0x7f00000018c0)=""/92, 0x5c}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000002940)=""/8, 0x8}, {&(0x7f0000002980)=""/224, 0xe0}, {&(0x7f0000002a80)=""/117, 0x75}, {&(0x7f0000002b00)=""/250, 0xfa}], 0x9) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) (async) r7 = socket$can_j1939(0x1d, 0x2, 0x7) (async) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000002cc0)={@loopback, 0x0}, &(0x7f0000002d00)=0x14) bind$can_j1939(r7, &(0x7f0000002d40)={0x1d, r8, 0x3, {0x2, 0xfe, 0x1}, 0x1}, 0x18) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000002e40)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002e00)={&(0x7f0000002dc0)={0x30, r5, 0x400, 0xffffffff, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x8004) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002ec0), r0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r9, &(0x7f0000002fc0)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002f80)={&(0x7f0000002f00)={0x54, r10, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x1ff}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x9}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x70}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xe35}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x19}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x685}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x3}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xffffff63}]}, 0x54}, 0x1, 0x0, 0x0, 0x8840}, 0x4000800) (async, rerun: 64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000030c0)={0xffffffffffffffff, 0x58, &(0x7f0000003040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (rerun: 64) sendmsg$ETHTOOL_MSG_EEE_SET(r9, &(0x7f00000031c0)={&(0x7f0000003000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003180)={&(0x7f0000003100)={0x50, r10, 0x300, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) (async) ioctl$AUTOFS_IOC_READY(r9, 0x9360, 0xe) (async) r12 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r12, 0x89f1, &(0x7f0000003280)={'syztnl1\x00', &(0x7f0000003200)={'ip6tnl0\x00', r11, 0x2f, 0xff, 0x7a, 0xfff, 0x12, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x7, 0x3, 0x101}}) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000032c0), 0x400800, 0x0) 2m25.079604694s ago: executing program 0 (id=2559): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func_proto={0x2, 0x0, 0x0, 0x13, 0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x28, 0x0, 0x0, 0x400}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1}, 0x10}, 0x94) 2m25.072133887s ago: executing program 0 (id=2562): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_macvtap\x00', 0x0}) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r0, r1, 0x25, 0x11, @val=@iter={0x0}}, 0x20) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r2, r0, 0x4}, 0x6) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_pressure(r4, &(0x7f0000000140)='cpu.pressure\x00', 0x2, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="14020000140001002dbd7000000000000a"], 0x214}], 0x1}, 0x0) (async) write$cgroup_pressure(r5, &(0x7f0000000040)={'some', 0x20, 0x1, 0x20, 0xffffffffffffff3c}, 0x2f) (async) r7 = socket(0x10, 0x3, 0x0) (async) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES8], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c000000020601000000000300000000000000000c000300686173683a69700005000400010000000900020073797a3000000000050001000700000005000500000000000500010006"], 0x4c}}, 0x0) (async) r10 = openat$cgroup_subtree(r4, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000280)={[{0x2b, 'devices'}]}, 0x9) (async) r11 = socket(0x1, 0x1, 0x1ff) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) r14 = socket$netlink(0x10, 0x3, 0x0) (async) r15 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@newqdisc={0x70, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r16, {}, {0xfff1, 0xc}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x40, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x216}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x10000}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x4}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x9}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x4}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x7}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) 2m24.855537668s ago: executing program 0 (id=2566): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x3, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r3, @ANYBLOB="0a0001000000648a63ff"], 0x48}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) (async) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x3, 0x4) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x200000000000011, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) (async) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r3, @ANYBLOB="0a0001000000648a63ff"], 0x48}}, 0x0) (async) 2m24.469691004s ago: executing program 0 (id=2572): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) sendto(r3, 0x0, 0xa00, 0x810, &(0x7f00000008c0)=@nl=@unspec={0x0, 0x700, 0x0, 0x80fe}, 0x80) sendmsg$netlink(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f00000002c0)="baccbc8d220f86c5525f5709e195e57ff5f0", 0x12}], 0x1, 0x4) write$cgroup_int(r5, &(0x7f0000000040), 0x12) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00068008"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 2m9.189728764s ago: executing program 32 (id=2572): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) sendto(r3, 0x0, 0xa00, 0x810, &(0x7f00000008c0)=@nl=@unspec={0x0, 0x700, 0x0, 0x80fe}, 0x80) sendmsg$netlink(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f00000002c0)="baccbc8d220f86c5525f5709e195e57ff5f0", 0x12}], 0x1, 0x4) write$cgroup_int(r5, &(0x7f0000000040), 0x12) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00068008"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 13.231869765s ago: executing program 4 (id=4058): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64, @ANYRESDEC], 0x0, 0x26, 0x0, 0x1}, 0x28) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56741, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xfffffffffffffd06}}]}, 0x30}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r5, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x3e, &(0x7f0000001600)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2f, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x89, 0x0, @private, @local}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000035c0), r8) sendmmsg$alg(r8, &(0x7f0000001c40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x895}], 0x1, 0x24002894) sendmsg$kcm(r8, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000480)="00e88a79f76008c77f19ee3a8a898217187ebc0aa050c397794998615839e716f8d25c5395c8156963ad36d87a63a54d23d4868e24a7ff2b491038482ee5c8795658243cea3072be48479232c7f76cedcb210e82519f6a885a9fe4a8", 0x5c}, {&(0x7f0000000500)="909dcb6b2ff63f57b07f672dd7a3ca8b94227a5c618d5a442da9c1e9a442c27321f5690de8053f3945c9ae744d1f385c3a6c65eaf1ca23a0da70e987b202e2de5dac48a8d6839fa5855b5aeb3473e85dd24db36da7695c187d21f4fa3f08324826ad75aa3f35876eab89b25ebc0c987d9fc7de06b8a712fc6643ffc6e1193a9c0653273f83a0832322f32ea812d1a5a97dc19fed1b38018a3bbca96d642f7b25fcaa872f01bb2d6756223aefe8dc84d30cb58461e67906e255cae3d12a6daba59ca4a7e78146c0737a2a35d202d51ee336d51bd4b2a8c00633c35ef6363ca3b4254e9ce8864727afb7", 0xe9}, {&(0x7f0000000600)="88a22f8ecda9f23526d39762eee1bb0086a5d54bea96a65c449935941023bde325bcd633d048b5c2a72be87108dc41c931a107940b0c6ba129cb1f2ea089c3ad6a6329faae8ec8088d925589a5cbdc893445dd254ea0ec0e14fe5bd81b2b13310bc4679539a6bbd816bb3aaa6c9dd4", 0x6f}, {&(0x7f0000000680)="ad5768f024e33b50048a9cdacedfaca0af29385f5674304f99f2ae9d42956a8a8371ed5b427af6f5a867b75ce75fa4d95b2b9b9de567f0ac25936c35b153ff6b1535d058adcea62e5502d5171e327d86acaae098213cbea0822bef709bb8be92b2ad526cba98caf02bafc4e7b6d9403c900388264ff0a3d2d7061ebd4412fb68ed784c4690a1b624b83eb3edf47a8b6b63700d13f3698d4156f35c0e472607e81c8b8eb6336c2d86db5ee108cff68b1028ed646853b0fd945dcd0d59bc1f3c5ea4ed2ba2a409576f4152d4b6131a43944754b8df93f9c5d0cb4b78", 0xdb}, {&(0x7f0000000780)="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", 0x171}], 0x5}, 0x20000000) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r9, &(0x7f0000000200), 0xe) setsockopt$bt_BT_DEFER_SETUP(r9, 0x112, 0x7, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r10 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r10, 0x8983, &(0x7f0000000000)={0x0, 'virt_wifi0\x00', {}, 0x4}) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000050) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r11, 0x0, 0x14, 0x0, &(0x7f0000000940)="18d26a3d9673399025aae4121e420e3eef774116", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r12 = accept4(r10, &(0x7f0000001440)=@pptp={0x18, 0x2, {0x0, @empty}}, &(0x7f0000000040)=0x80, 0x80000) setsockopt$MRT6_DEL_MIF(r12, 0x29, 0xcb, &(0x7f00000003c0)={0x0, 0x1, 0x1, 0x0, 0x5}, 0xc) 12.35135877s ago: executing program 4 (id=4073): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x691, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r3, 0x0, 0x4000, 0x4c, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x0, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22) 11.967045806s ago: executing program 5 (id=4080): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, 0x0) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x39}, @NFTA_SET_GC_INTERVAL={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x7c}}, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r3 = socket(0x10, 0x3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/19, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e00000000180002800600010034", @ANYRES32], 0x50}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) getsockname$unix(r4, &(0x7f0000000300), &(0x7f0000000180)=0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x26, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r7], 0x50}}, 0x2) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x6022c0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000006c0)={{0x0, 0x1, 0x2, 0x101, 0x7, 0x4, 0xbc, 0x1, 0x7, 0xf9d, 0x8, 0x4, 0x2, 0x79cc, 0x6}}) ioctl$BTRFS_IOC_INO_LOOKUP(r8, 0xd0009412, &(0x7f00000016c0)={r9, 0x10400}) 11.786465642s ago: executing program 4 (id=4082): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r2, 0x890c, &(0x7f0000001680)={@null, 0xf, 'ip6gre0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0xf17}]}}]}, 0x3c}}, 0x40000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384-ce\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r5 = accept4(r4, 0x0, 0x0, 0x800) writev(r5, 0x0, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x3e}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0x11, 0x34, @random="5633e5bde725f2b28b44e0b849"}]}, 0x40}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 11.624246208s ago: executing program 5 (id=4086): r0 = socket(0x10, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x14, 0x4, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) write(r0, &(0x7f0000000280)="2c0000001d005f80004000000000000005000000000000000000080008000100000000ff5b1844ad30c8ac46", 0x2c) 11.447222833s ago: executing program 2 (id=4088): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000190001090000000000100000021800000000fd000000000008000100ac141400080005000a01010208000b0060"], 0x34}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) 11.388250436s ago: executing program 5 (id=4089): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 11.384995426s ago: executing program 4 (id=4090): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x42, 0x4, 0x448, 0xffffffff, 0x2e0, 0x0, 0x2e0, 0xffffffff, 0xffffffff, 0x3b0, 0x3b0, 0x3b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'vlan0\x00', {0xff}, {0xff}, 0x84, 0x0, 0x2}, 0x0, 0x1e8, 0x210, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e21, 0x4e23], [0x4e21, 0x4e24], [0x7f, 0x8e, 0x7, 0x0, 0x8, 0x2d, 0x9, 0x7, 0x60e91136, 0x9, 0x1ff, 0xfffffffe, 0x9, 0x4, 0xa, 0x95, 0x20000, 0x2f3c0e1c, 0x3, 0x7, 0x4, 0x5, 0x200, 0xffffffff, 0xe, 0x7f, 0x2, 0x0, 0x1, 0x0, 0x2, 0x7, 0x6, 0x7, 0x3, 0x40, 0x9, 0x9, 0x7, 0x9, 0x9, 0x730, 0x5, 0x3, 0x10, 0x101, 0x1, 0x800, 0x80, 0x9, 0x7fffffff, 0x0, 0x3, 0x6, 0x1, 0x4, 0xffff, 0x6, 0x5, 0x3, 0xffffffb0, 0x9, 0x1, 0x3], 0x4, [{0x1, 0x4}, {0x1, 0x6, 0x9}, {0x4, 0x4, 0x1}, {0x40, 0xf9, 0x8}], 0x2, 0x3, 0x7fffffe}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2, 0x0, 0x4}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x3, 0x3, [0x2, 0x2c, 0x4, 0x2, 0x12, 0x22, 0x16, 0x10, 0x35, 0x1a, 0x0, 0x3e, 0x9, 0x0, 0x24, 0x39], 0x1, 0x6, 0x6}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xffffff00, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x2, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xd, 0x8, [0xa, 0x26, 0x2a, 0xa, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0x40, 0x20, 0x28, 0x18, 0x22, 0x1e], 0x1, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x2a, &(0x7f0000000100)=r3, 0x4) recvmsg$unix(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) sendmsg$inet(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000180)="08d3e5389fd5", 0x6}], 0x1}, 0x4004040) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000004c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x55}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x42, 0x4, 0x448, 0xffffffff, 0x2e0, 0x0, 0x2e0, 0xffffffff, 0xffffffff, 0x3b0, 0x3b0, 0x3b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'vlan0\x00', {0xff}, {0xff}, 0x84, 0x0, 0x2}, 0x0, 0x1e8, 0x210, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e21, 0x4e23], [0x4e21, 0x4e24], [0x7f, 0x8e, 0x7, 0x0, 0x8, 0x2d, 0x9, 0x7, 0x60e91136, 0x9, 0x1ff, 0xfffffffe, 0x9, 0x4, 0xa, 0x95, 0x20000, 0x2f3c0e1c, 0x3, 0x7, 0x4, 0x5, 0x200, 0xffffffff, 0xe, 0x7f, 0x2, 0x0, 0x1, 0x0, 0x2, 0x7, 0x6, 0x7, 0x3, 0x40, 0x9, 0x9, 0x7, 0x9, 0x9, 0x730, 0x5, 0x3, 0x10, 0x101, 0x1, 0x800, 0x80, 0x9, 0x7fffffff, 0x0, 0x3, 0x6, 0x1, 0x4, 0xffff, 0x6, 0x5, 0x3, 0xffffffb0, 0x9, 0x1, 0x3], 0x4, [{0x1, 0x4}, {0x1, 0x6, 0x9}, {0x4, 0x4, 0x1}, {0x40, 0xf9, 0x8}], 0x2, 0x3, 0x7fffffe}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2, 0x0, 0x4}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x3, 0x3, [0x2, 0x2c, 0x4, 0x2, 0x12, 0x22, 0x16, 0x10, 0x35, 0x1a, 0x0, 0x3e, 0x9, 0x0, 0x24, 0x39], 0x1, 0x6, 0x6}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xffffff00, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x2, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xd, 0x8, [0xa, 0x26, 0x2a, 0xa, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0x40, 0x20, 0x28, 0x18, 0x22, 0x1e], 0x1, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x2a, &(0x7f0000000100)=r3, 0x4) (async) recvmsg$unix(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) (async) sendmsg$inet(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000180)="08d3e5389fd5", 0x6}], 0x1}, 0x4004040) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000004c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x55}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) 11.237296s ago: executing program 2 (id=4092): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r1, &(0x7f0000005580)=[{{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x2}], 0x2, 0x10122, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES8], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) 11.187933464s ago: executing program 1 (id=4093): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000002000010000000000000000000a000000000000000000000008001a"], 0x2c}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000040)={'sit0\x00', r2, 0x1, 0x700, 0x5, 0x0, {{0xe, 0x4, 0x2, 0x3d, 0x38, 0x67, 0x0, 0x74, 0x4, 0x0, @loopback, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x24, 0x94, 0x1, 0xc, [{@remote, 0x79c8}, {@initdev={0xac, 0x1e, 0x6, 0x0}, 0x25}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff}, {@empty, 0x1}]}]}}}}}) 11.187724659s ago: executing program 5 (id=4094): socket$nl_netfilter(0x10, 0x3, 0xc) 11.167981124s ago: executing program 4 (id=4095): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x10000000}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) close(r3) (async) r4 = epoll_create1(0x0) (async, rerun: 32) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 32) listen(r5, 0xfffffffe) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000080)) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000140)={0x80000000}) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000000d0a010a00000000000000000a0000010900010073797a31000000000400038050305a54e5fb82de4ffa45bbed76b6a9bd630fe89e4b26473fe4d91d07baca3375c74ff0f5cb022cbbf68d9b4de041734a5a3e4483b5e4280b66497452f3679ba4bfd4f3d69548b655d91efe6ae2ea23ffe12ac6f23832a4d48c4436b332cfd4a16ff4f0ac36c05eae6ed30eadcb18cd5d8fe5be361c63c8e05761ea5d97589e04409afff56e7f6f870bacad46eccd92ef868e7eb724b6264b5aac4a2faa35b1ea08457f649939f847314c957afea819888ebfdec1d3105517560000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000000), 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) (async) setsockopt$inet6_buf(r9, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000000100000051000000", 0xfe60) (async, rerun: 32) setsockopt$inet6_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) (async, rerun: 32) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x304}, "dd15b09b966f32c9", "bf05e6e8115eef68ccc96689b89aef27", "3aa51da2", "f4d302a8f918d4d0"}, 0x28) (async, rerun: 64) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) (rerun: 64) write$cgroup_int(r10, &(0x7f0000000000), 0xffffff6a) sendfile(r8, r10, 0x0, 0x2) 11.059810586s ago: executing program 5 (id=4096): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f00000002c0), &(0x7f0000000240)=r1}, 0x20) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @remote, 'veth1_vlan\x00'}}, 0x1e) r2 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r2, &(0x7f0000000340)=[{{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000400)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}, {{&(0x7f0000000480)={0x2, 0x4e22, @local}, 0x10, 0x0}}], 0x2, 0x4000) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f00000000c0)={r4}) syz_emit_ethernet(0xbf, &(0x7f00000014c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @val={@void, {0x8100, 0x2, 0x1, 0x4}}, {@llc_tr={0x11, {@llc={0xbc, 0x7e, 'R', "e54defd9b8df2a62400c357e6f6931bd5edd25c16ebf7ec52e4b01d589087ad6e23e4ba57dacac690c334b679085ad3040104cabe558639b8ce849451f170842ecdbf4183c2f04d47d7e032e4c71e5f5f140bcc833ebac41c74168ed33d27e9a7f5d222a69060a82815ee2a8771151582c9fdc4d52ba5179962427c8fa0d0f11a3c63bbd3000403aa5829c26d5c7a0ae660ac42d48f06b47725ee15556ed15647eec1679f12c489f81cb"}}}}}, &(0x7f0000000300)={0x1, 0x2, [0x18b, 0x79, 0x9f8, 0xb14]}) read(r2, &(0x7f00000004c0)=""/4096, 0x1000) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1c0100002e000100000000000000000004001980080111800101cf80d478b585fcf4962925eb81095dd3d92e983e841d6ef7368187237f5e91a74d57e8aaee05ec63198f3bec68ef62803fe98daf2de4c76a713091d7d093f16995a391c42d5dfc312e9b67f3e831135df00a399b5234733f156436b0ed257216329750ece6458a5f9db07c36adc6ebcfe60b70e5a54a83041bc8e1c08dc0afd69868eddb1e9634f84ef01b3f9c31b8c76a0e2ac9dba5adc10a3c9a2360cb2fe6e11e9efcaff1b39dd49895a112f947e4923d9b5c428a37b673f33f3ed02d225807d47efe0a590665b49bf5eaa0890c512f2a01eb6713c6b3539790dca05a2632596c591745bbbf4953c0a783a881f8cf755e6c00"/284], 0x11c}], 0x1, 0x0, 0x0, 0x84}, 0x300) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000001700)=ANY=[@ANYBLOB="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"]) 10.907684172s ago: executing program 2 (id=4097): r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @private}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x93cc, 0x5, 0x6}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100)={r1, 0x9}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e20, 0xba, @local, 0xd}}, 0x2, 0xfff7, 0xf, 0x0, 0x1, 0xff, 0x81}, &(0x7f0000000240)=0x9c) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000280)={r2, @in6={{0xa, 0x4e23, 0xf, @private2={0xfc, 0x2, '\x00', 0x1}, 0x200}}}, &(0x7f0000000340)=0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000380)={r2, 0x2, 0x5}, &(0x7f00000003c0)=0x8) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000400)={'wpan3\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000440)={r3, @in={{0x2, 0x4e23, @private=0xa010102}}, 0x2, 0x2, 0x1, 0x8, 0x40, 0x5, 0x8}, &(0x7f0000000500)=0x9c) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000000bc0)={&(0x7f0000000580)=@name={0x1e, 0x2, 0x3, {{0x2, 0x4}, 0x1}}, 0x10, &(0x7f0000000a40)=[{&(0x7f00000005c0)="b76e4de46eb2b1e7770e24ec4033933c89118d0cf81d056f3a573a804ccbce657b7801fcf205bb008863c4d42a3b8468d39e35b948559add981a98ca9d0aea8abfe704d04168d443afe1559ae6933276a2b22817441a483b7785538701ffc5f5b62892780757d3252202976574cd15488ff1f1d6b81f28cdd19a0889dba8ba575737254ee55648dfc483f765e62223d6042ee6177627e244c72cfdca0cc30b52300d86d64d7a3229bf6c2930cfb15f53dbe4b36a12603a711198931b477f20b60eb346a9525ee81e4f5b2a04e6c8d1e78c6806224a17", 0xd6}, {&(0x7f00000006c0)="985c96ab400b54b7ebfb1b6d7f697105e2f15c58edc1586b4aa316665b3160ee4eca9d9a9691ce3ef3dd3508ace77c7a91faca4eeb18871fc51031f3ffe5d101b1e1111646a387c8ada00bca1778ec5678cb2930d6a803e5dfbf2e222f601c02ec322ca36b102b22b3a8c142e1b3952f4f7c1b8d7bf6a2cf6947794fde95fd3b50e39f95134a5c94dceb0494fae92d23fb10a2176a6d7762403bf1c856a4c082dc70360da4e13e319667fcec452e090f740c1c3eafa75384d007ca6e389c80185073b2f645ea9a2de896ed19258981cc32e517f2b4d0452299218733042a052b54d4990fbc985dae8d91fb9d451879", 0xef}, {&(0x7f00000007c0)="74bd07ad804f473c5cfa5123d1aca09accc4c39257af6ffc7f67eb6d7452318ef70dc5d391f0b6a78ea7def2e4a4d7c58bb04305bf956d568c3da5f472440f7947fee083dc75746105a5a968ae7c809621c864b81d8533eb7ec0505164a43bfa1056038c9ecfb05bfd2b08e667a7f8396c2cccb8ba45bfeaf4fb01e3db3bfa0c6c21a58f880da078b94907b87c28e8ddfc7a5b52ae111d4eb62b01c60c0b5f3d24d22850d36e22e8e3219a6924845e7c5d6ee5d0e9ef643c2df683562c2346b09b72920db4dd674fb0528622c623a83ea926", 0xd2}, {&(0x7f00000008c0)="3b88a14833427b4b616eeb594628bc8c4c5500da076161010620bae616b8a9876db51128de072a4c07c2ba48672405274e9f64491ac612e9149834ad1c785e04b7759622b24330e754a30681efe8999686958673a74a2f34a150fb9bba1918049f768cf509d907", 0x67}, {&(0x7f0000000940)="07943c0f97e1a449d868ed7817050bd82bc1c61e969190bc1db3638ec8b809a7857cea9a4b45858c553695731c40fc01d1a65162584489caccc97c9479ec4999559159ed252405e8d551502c61d2290698a702b373ce7bebd680653183320e22b22be892e37173224e41b611d3c7beec71536b76b018810e2eb3fa9a87bf9c5087ac3317e8b5c8af925e5d56a059185573530682bd306886299191051c51159fc3cb251dcc09d08201f127c940b79b450d806d90855169375a94d4f08e84fd17c3d151842f0cc7a8a6d97e83c7ad", 0xce}], 0x5, &(0x7f0000000ac0)="ed486336bdb69c508f48cf225d20b4725cc4cbe2d5be40045a4fc44937c755fcc6d982c77f1c82a09830ccfc678667ee4f8a5e3b9dc0fec0f933de330725681751d56c456f354476ad05f2a7afdd4ce8c8739fe6d9cc191804875f7558a4744a3f7cf1fbb5820cbd2103e76e728bf8df6b25f348fa315873a76f781ec30f2405d45fadba925b7512f7449fa6e2a34d9687858fe942ddf17c2acedf00b3a4447b8fa1b069a45fa00e9207757702b9fdc757f8147fc9dd0b5abbe1012eb8d5bdb478ecd22e74b2a4", 0xc7, 0x20000000}, 0x48001) r9 = accept(r0, 0x0, &(0x7f0000000c00)) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000c80), r5) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r9, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x30, r10, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x7, 0x6c501be1, 0x7fff, 0x9}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r11 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_linger(r11, 0x1, 0xd, &(0x7f0000000d80)={0x1, 0x7}, 0x8) getsockopt$inet_sctp_SCTP_INITMSG(r9, 0x84, 0x2, &(0x7f0000000dc0), &(0x7f0000000e00)=0x8) r12 = syz_genetlink_get_family_id$gtp(&(0x7f0000000e80), r5) sendmsg$GTP_CMD_DELPDP(r9, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x28, r12, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x0) socket$inet6(0xa, 0x8000c, 0x3) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000fc0), r7) sendmsg$NL80211_CMD_PROBE_CLIENT(r9, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x2c, r13, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x56, 0x68}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f00000010c0)={r6, @in6={{0xa, 0x4e20, 0x8, @mcast2, 0x74e82ced}}, 0x8, 0xfffd, 0x1, 0x7, 0x7, 0xfffffffd, 0x9}, &(0x7f0000001180)=0x9c) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000011c0)=0x210060, 0x4) ioctl$sock_ifreq(r8, 0x8911, &(0x7f0000001200)={'hsr0\x00', @ifru_map={0x2, 0xf, 0xfff, 0x3, 0x7, 0x80}}) r14 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001280), r9) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000001380)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x44, r14, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008804}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x4c, r14, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40084}, 0x800) 10.901671977s ago: executing program 1 (id=4098): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400000010000100000000080000000005000090886dc653eb0a0c0005500000000000000001090001007379140000001100010000000000000000000000000a0000000000001c5b8504bf7166546ef53663bc01aef15fc2f9f8b871157503ef93b873408859763d1ed484c734c19a3ed66856fe2cbc9830534e30ab01ba759fdbd4cdd275ffec891e45c7224aca95afcf5fd205d5043a42db44153c4bedde76695f4b5e61b14b132d1733d567263b390f18e778fb5ecdeab488dd905f57ab925927f1f5d191917355fd6fcc29de9e07954bef77398858cf8d0197197f184df45a930dd4"], 0x54}, 0x1, 0x0, 0x0, 0x4044}, 0x8010) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r1, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000140)=0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) (async) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) (async) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400000010000100000000080000000005000090886dc653eb0a0c0005500000000000000001090001007379140000001100010000000000000000000000000a0000000000001c5b8504bf7166546ef53663bc01aef15fc2f9f8b871157503ef93b873408859763d1ed484c734c19a3ed66856fe2cbc9830534e30ab01ba759fdbd4cdd275ffec891e45c7224aca95afcf5fd205d5043a42db44153c4bedde76695f4b5e61b14b132d1733d567263b390f18e778fb5ecdeab488dd905f57ab925927f1f5d191917355fd6fcc29de9e07954bef77398858cf8d0197197f184df45a930dd4"], 0x54}, 0x1, 0x0, 0x0, 0x4044}, 0x8010) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) (async) sendmmsg$unix(r1, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) (async) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000140)=0x9) (async) 10.870296666s ago: executing program 4 (id=4100): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000480)={0x24, @short={0x2, 0x2, 0xaaa3}}, 0x14) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1e, &(0x7f0000000c00)=0x80000001, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f00000003c0)={&(0x7f00000001c0), 0x6e, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/51, 0x33}, {&(0x7f0000000280)=""/118, 0x76}, {&(0x7f0000000300)=""/91, 0x5b}], 0x3, &(0x7f00000004c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}, 0x100) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) r11 = socket(0x2000000000000021, 0x2, 0x10000000000002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) accept4$bt_l2cap(r11, 0x0, 0x0, 0x80000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) 10.704012758s ago: executing program 2 (id=4101): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[], &(0x7f0000000100)=""/141, 0x46, 0x8d, 0x1, 0x7}, 0x28) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32=0xffffffffffffffff, @ANYRES32=r1], 0x68}}, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) setsockopt(0xffffffffffffffff, 0x84, 0x82, &(0x7f0000000480)="0900000002000000", 0x8) socket$igmp6(0xa, 0x3, 0x2) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x8, 0x0, 0x0, 0x100, {{0x5, 0x4, 0x0, 0x0, 0xfffffffffffffdc4, 0x0, 0x0, 0x8, 0x5e55b37311de6d89, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c9f4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75055df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b556381768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8dc0d472672286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8455029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a82a6ef09d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b420e74c6bcdf1ed0b306141a83bf1268e954ad069257fbfaa1a7ea582badc1a7f2a5b0965f3535872d85c0bc3a233a3ea85df6a8ed76f0f803d54b7bef77d8ea71621f8a78dd17c3b58c5c7476ed6191acbb949e77f7cac81c543f7751e5e1000"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r9 = socket(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r9, 0x8919, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000040)=0x4, 0x4) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vxcan1\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={0x1d, r10, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000700)={'gretap0\x00', r10, 0x20, 0x7800, 0x8664, 0x10001, {{0x1b, 0x4, 0x3, 0x2, 0x6c, 0x66, 0x0, 0x2, 0x29, 0x0, @loopback, @rand_addr=0x64010101, {[@timestamp={0x44, 0xc, 0x6e, 0x0, 0xe, [0x100, 0x9]}, @timestamp_addr={0x44, 0x34, 0x71, 0x1, 0x2, [{@loopback, 0x3}, {@remote, 0x5}, {@broadcast, 0x6}, {@multicast2, 0x5}, {@multicast2, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}]}, @end, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x8, 0x53, 0x0, 0xe, [0x3]}, @ssrr={0x89, 0x7, 0xec, [@loopback]}, @ra={0x94, 0x4}]}}}}}) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB='/\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00B', @ANYRESHEX=r2, @ANYRES16=r8, @ANYRES64=0x0], 0x20) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r9, 0x84, 0x21, &(0x7f0000000440), &(0x7f00000004c0)=0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r12 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=r11, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r12, r5, 0x0, r8}, 0x10) 10.620216946s ago: executing program 1 (id=4102): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r8, &(0x7f0000000140)="bad388a8", 0x4, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r7, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000d00)=""/197, 0xc5}, {&(0x7f0000000700)=""/215, 0xd7}, {&(0x7f0000000c00)=""/196, 0xc4}, {&(0x7f0000000a00)=""/196, 0xc4}, {&(0x7f0000002180)=""/100, 0x64}, {&(0x7f0000002200)=""/4066, 0xfe2}, {&(0x7f00000003c0)=""/234, 0xea}, {&(0x7f0000000300)=""/172, 0xac}, {&(0x7f0000000580)=""/150, 0x96}, {&(0x7f0000000240)=""/159, 0x9f}], 0xa}, 0x40002002) 10.616271685s ago: executing program 3 (id=4103): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x3) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) 10.527538458s ago: executing program 2 (id=4104): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) syz_init_net_socket$ax25(0x3, 0x5, 0xc4) (async) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f00000000c0)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) (async) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f00000000c0)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="1c00000022000106770000000000000005000000000001"], 0x1c}], 0x1}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x27, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xfffd}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3800000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000010001a800c002d80080001"], 0x38}}, 0x0) sendmmsg(r3, &(0x7f0000003ac0)=[{{&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @local, 0x8}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000380)='[', 0x1}], 0x1}}], 0x1, 0x0) (async) sendmmsg(r3, &(0x7f0000003ac0)=[{{&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @local, 0x8}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000380)='[', 0x1}], 0x1}}], 0x1, 0x0) accept$phonet_pipe(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)=0x10) (async) r5 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)=0x10) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r6, 0x1) (async) listen(r6, 0x1) connect$rose(r6, &(0x7f0000000e80)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, 0x1, @default}, 0x1c) ioctl$SIOCRSSCAUSE(r6, 0x89e1, &(0x7f00000002c0)=0x1) getsockopt$inet6_buf(r3, 0x29, 0x22, &(0x7f00000003c0)=""/174, &(0x7f0000000300)=0xae) setsockopt$PNPIPE_INITSTATE(r5, 0x113, 0x4, &(0x7f0000000280)=0x1, 0x4) 10.514394612s ago: executing program 3 (id=4105): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f00)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0xffe0}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24004000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x3, @broadcast, 'macvlan1\x00'}}, 0x1e) socket$netlink(0x10, 0x3, 0x14) sendmmsg(r4, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000540)={0xe4, r6, 0xe, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x20, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xf8f}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xb20}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x84, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7209}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xa14}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x7}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}]}, 0xe4}, 0x1, 0x0, 0x0, 0x44840}, 0x4841) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="0000100007793d34c38a7087e50d200000000000", @ANYRES32=0x0, @ANYBLOB="2e20020000000000080028002599000008001b0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) 10.344119813s ago: executing program 3 (id=4106): socket$inet6_sctp(0xa, 0x801, 0x84) r0 = socket(0x15, 0x5, 0x0) accept4$alg(r0, 0x0, 0x0, 0x800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) syz_emit_ethernet(0x33, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x11, 0x0, @gue={{0x2, 0x1, 0x1, 0xfd, 0x100, @val=0x80}, 'N'}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000180)='wg2\x00', 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[], 0x20) listen(r3, 0x7f3d) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x16, 0x6, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[@ANYBLOB="34000000090605000a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0) 10.343313764s ago: executing program 1 (id=4107): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'netdevsim0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)=ANY=[@ANYBLOB="240000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="0000000006000500"], 0x24}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=ANY=[@ANYRES64=r3, @ANYRES32=r0, @ANYRES16=0x0, @ANYRES8=r4], 0x54}}, 0x48c15) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x14, r5, 0x400, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x48081}, 0x24080080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000001740)={0x20, r7, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r8}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000800)=@newlink={0x44, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x201a0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e24}]}}}, @IFLA_LINK={0x8, 0x5, r10}]}, 0x44}}, 0x800) r12 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=ANY=[@ANYBLOB="300000001c00070c000000000000000002000000", @ANYRES32=r13, @ANYBLOB="d00000000a000100000000000000001008000f0001"], 0x30}, 0x1, 0x0, 0x0, 0x4000041}, 0x20024090) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', r1, 0x4, 0xa, 0x2, 0x6, 0x60, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x8, 0x10, 0x9, 0x3}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x4) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000e40)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f00000004c0)={0x908, r7, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8, 0x1, r1}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r10}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}]}}, {{0x8, 0x1, r1}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xa8a}}}]}}, {{0x8, 0x1, r1}, {0x150, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x83, 0x2e, 0xe, 0x4}, {0x7f, 0x9, 0xc3, 0x8}, {0x2, 0x80, 0x3, 0x3}, {0x0, 0x47, 0x10}, {0x2f, 0x59, 0x5, 0xfffffe01}, {0xffff, 0xff, 0xf9, 0x1}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r13}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x16c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r1}, {0x1a4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x98f}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}]}}, {{0x8, 0x1, r1}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r15}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x31}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}]}}]}, 0x908}, 0x1, 0x0, 0x0, 0x8000}, 0x408c0) 10.2762616s ago: executing program 3 (id=4108): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') ioctl$EXT4_IOC_SETFSUUID(r0, 0x8004b708, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x2, 0x146, [0x2000000025c0, 0x0, 0x0, 0x2000000025f0, 0x200000002620], 0x0, 0x0, &(0x7f00000025c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x9, 0x8, 0xc, 'batadv0\x00', 'netdevsim0\x00', 'ipvlan1\x00', 'veth1_to_bond\x00', @remote, [0x0, 0xff, 0x0, 0x0, 0xff, 0xff], @random="d685fc5d0114", [0x7f, 0x0, 0x101, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xb6, [], [], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x5a, 0x6, {0x6}}}}}]}]}, 0x1be) 10.172892228s ago: executing program 1 (id=4109): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4010}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0xf4, r2, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'caif0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9d}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x18}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x10}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x10}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x81}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4e}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r5, 0x0, 0x1, &(0x7f00000001c0), 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x18, r6, 0x1, 0x0, 0x0, {0x2}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x437, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r1, 0x40c89}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r7, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @loopback}}}], 0x20}}], 0x1, 0x4040880) socket(0x10, 0x803, 0x0) (async) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) (async) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4010}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0xf4, r2, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'caif0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9d}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x18}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x10}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x10}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x81}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4e}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$bt_hci_HCI_DATA_DIR(r5, 0x0, 0x1, &(0x7f00000001c0), 0x4) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x18, r6, 0x1, 0x0, 0x0, {0x2}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x437, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r1, 0x40c89}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44801}, 0x0) (async) socket$inet(0x2, 0x2, 0x0) (async) sendmmsg$inet(r7, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @loopback}}}], 0x20}}], 0x1, 0x4040880) (async) 10.079994092s ago: executing program 5 (id=4110): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r0) connect$unix(r0, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000000c0)=0x8, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000380)={0xa, 0x14e24, 0x0, @empty}, 0x2a) bind$vsock_stream(r2, &(0x7f00000005c0)={0x28, 0x0, 0x2710, @host}, 0x10) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000002640)=[{{0x0, 0x0, 0x0, 0xffffffffffffffe5}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000140)="9fd49c72cdfcdd0058e4905dbc8395d693a7", 0x12}, {&(0x7f0000000240)="ecda8fb871a9a60db4fc852ff5410a85e4ab23f58da765e11f633bcfb06aec566135472b6d3b35cb3975e0a6ccea86297d0612030129", 0x36}], 0x2, &(0x7f0000000b40)=ANY=[], 0x80}}], 0x2, 0xc8040) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) splice(r4, 0x0, r3, 0x0, 0x7ffff000, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x8, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000040), &(0x7f0000000140)=r6}, 0x20) r8 = socket(0x2b, 0x80801, 0x1) getsockopt$EBT_SO_GET_INFO(r8, 0x0, 0x80, &(0x7f0000000140)={'filter\x00', 0x0, 0x0, 0x0, [0x20008, 0x401, 0x7, 0x10000003, 0x7, 0x100000001]}, &(0x7f0000000080)=0x78) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000540)={0x44, r10, 0x101, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_ZERO(r8, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x78, r10, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18, 0x32}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xf77}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x27}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x20000010) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="e7f81eb5f6e3740bbd4d3621449106541d504e77b37992767265ac2b3b578300a0a98feb61f264ac38dfbbc8815ae8a5f7100e0fe1155c8c8c91aacb3c33c8a01af0bbe8f255f6022de488ccb2fb1c79e39b5645a6e2823e3710ce496bc5878d0c2af92c83e9062073623ef974e4864fd5d5ab9e3f2500763f05f65f9cb4078c497e5034bd1b47ac59a8f11d057664e1301172be13208e6ce37400596e3882758afd230a6fa8ece1d1d3ab1bf9723ac60c04cf1670982c91b2b2d52847b6d5edb68a7e07aad71ba2288cbc15", @ANYRES16=r7], 0x34}}, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000000)) 10.075884837s ago: executing program 3 (id=4111): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r0 = socket(0x2a, 0x2, 0x1e7) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=@gettfilter={0x2c, 0x2e, 0x800, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x2, 0xeca63e36b88ce14f}, {0xf, 0xfffe}, {0xc, 0xf}}, [{0x8, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSCAUSE(r3, 0x891d, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0xa, 0x2c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff9}, {}, {0x1, 0xfff1}}, [@TCA_RATE={0x0, 0x5, {0x6, 0x8}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x67}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6_udplite(0xa, 0x2, 0x88) r8 = socket$kcm(0x2, 0x1000000000000005, 0x0) syz_emit_ethernet(0x12, &(0x7f00000002c0)={@broadcast, @remote, @val={@void, {0x8100, 0x6, 0x1, 0x3}}, {@generic={0x86dd}}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r10 = openat$cgroup_devices(r9, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r11, &(0x7f0000000040)={0xa, 0x5e1e, 0x0, @mcast2, 0x1}, 0x1c) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0) getsockopt$sock_buf(r11, 0x1, 0x19, &(0x7f0000002f80)=""/217, &(0x7f0000003080)=0xd9) write$cgroup_devices(r10, &(0x7f0000000140)=ANY=[@ANYBLOB='c *:', @ANYRESOCT=r10], 0xa) ioctl$sock_SIOCGIFCONF(r8, 0x8912, &(0x7f0000000180)) sendmsg$inet(r8, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000c40)="56ae", 0x2}], 0x1, &(0x7f0000000b80)=[@ip_tos_u8={{0x11, 0x34000, 0x11}}, @ip_retopts={{0x10, 0x84}}], 0x28}, 0x4dc) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x60, 0x10, 0xf11, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1b, 0x1f}}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x60}}, 0x0) 10.067282871s ago: executing program 1 (id=4112): syz_emit_ethernet(0x46, &(0x7f0000000380)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @rand_addr=0x64010101, @multicast1}, "040022eb00000000"}}}}}, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) (async) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="05000000800800"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}}, 0x0) (async) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="05000000800800"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="07000000a008"], 0x80}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newtaction={0x48, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newtaction={0x48, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b02"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @private, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r2, &(0x7f0000001180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001140)={&(0x7f00000002c0)=@newchain={0xe6c, 0x64, 0x4, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xd, 0xffe0}, {0xe, 0xa}, {0xfff1, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x8a4, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x8}}, @TCA_U32_INDEV={0x14, 0x8, 'pim6reg1\x00'}, @TCA_U32_POLICE={0x85c, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x7, 0xfffffff5, 0x20000, 0x400, 0x2, 0x9a, 0x401, 0x1, 0x2d568194, 0x1, 0x1, 0x7, 0x9, 0x40, 0x0, 0x7, 0x4, 0x84, 0x8, 0x1, 0x6, 0x65c0, 0x140, 0x7ff, 0x8000, 0x5, 0x10001, 0x7, 0x1, 0x2, 0x0, 0x3, 0x5, 0x1000, 0x2, 0xa, 0x2, 0xcc0c, 0xcb00, 0x3, 0x1, 0xc, 0x8, 0x4, 0x8, 0x1, 0x200, 0x5, 0x5, 0xfffeffff, 0x8, 0x0, 0x9, 0x6, 0x3ff, 0x81, 0x2, 0x400, 0x3, 0x3, 0x7fff, 0x300, 0x3, 0x0, 0x9, 0x8, 0x3, 0x3ed, 0x9, 0x40, 0xa15, 0xf, 0x0, 0x7, 0x4, 0x5, 0x8, 0x4, 0xc08, 0x5, 0x2, 0x2, 0x6, 0x9, 0x7abf, 0x6, 0x2e0d465f, 0x1fffc000, 0x7, 0x2, 0x64ef94b8, 0x40, 0x100000, 0x7, 0xf8a, 0xf, 0x671, 0xfffffe01, 0x400, 0xcc1, 0x7, 0x9, 0x7, 0x4, 0x1f9617dc, 0x9, 0x80, 0x1ff, 0x0, 0xb, 0x9, 0x1, 0xfffffffa, 0xbe3c, 0x1, 0x7fff, 0xfff, 0x41, 0x7ff, 0x3e9d, 0x5, 0x9, 0xfffffffd, 0x41af, 0x3, 0x7a2757cb, 0x3ff, 0x1, 0x2, 0x6, 0x204, 0xfffffff8, 0xa0, 0x331, 0x6, 0xc, 0x5, 0x6, 0x0, 0x8, 0x3, 0x1, 0x0, 0x3, 0x6, 0x2, 0x3a7, 0x3, 0x0, 0x7, 0x0, 0x8, 0xa, 0x1, 0x7, 0x9, 0x5, 0x7f, 0x5, 0x6, 0x1b, 0x1ea, 0xb4d3, 0xbc, 0x2, 0x9, 0x7f, 0x9, 0x4, 0x79, 0x2, 0x914d, 0xffffffff, 0x2, 0x4e70d798, 0x8dca, 0x4, 0xcb7, 0x9, 0x1, 0x4, 0x0, 0x40, 0x6a4, 0x81, 0x7, 0xe, 0x6, 0x8, 0x10, 0xb3, 0x1, 0xdfe9, 0x7, 0x2, 0x5, 0x9, 0x7, 0xf7, 0x9, 0x1, 0x200, 0xfff, 0x7, 0x4, 0xfffffffe, 0x4, 0x0, 0xffffffff, 0x3, 0x5, 0xadf, 0x8, 0x5, 0x1, 0x101, 0x4, 0x2, 0x8, 0xe, 0xf9, 0x8, 0x1, 0x3, 0x8a2, 0x80000001, 0x5, 0x5, 0x1, 0x4, 0x7fff, 0x9, 0x3f6, 0x7, 0xdd, 0x0, 0x0, 0x40, 0x8496, 0x52, 0x7fffffff, 0x5, 0x401, 0x3, 0xc5, 0x22c00000, 0x7, 0x3, 0x4, 0xfffff800, 0x6, 0xb28, 0x0, 0x9, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9c, 0x4, 0xffffffff, 0x9d00, 0xf68b, {0x8, 0x1, 0x101, 0x217, 0x8, 0xfffffff7}, {0x35, 0x1, 0xfff, 0x4, 0x1, 0x1}, 0x4, 0x6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xc5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5ff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x400, 0x9, 0x3, 0x9, 0xfffffffb, 0x1, 0xffff, 0x8, 0x4, 0x80, 0x100, 0x40, 0x6, 0x5, 0x736, 0x2, 0x2, 0x4, 0x7, 0x80000001, 0x7, 0x80, 0x3, 0x4, 0x3, 0x3, 0x10, 0xffff8001, 0x1, 0x8, 0x80000001, 0x10000, 0x4, 0x6, 0x4, 0x5, 0x0, 0x6, 0x3f52, 0x10000, 0xfaa1, 0x4, 0x1000, 0x5, 0x0, 0xb7cd, 0x5, 0xf92, 0x6, 0x2, 0x3, 0x81, 0x7, 0x9, 0x1, 0x3, 0xffff, 0xd, 0x5, 0x8, 0x3, 0x4, 0x9, 0xfffffffe, 0x5625, 0x80000000, 0x200, 0x6, 0x9, 0x71af, 0x2, 0x6, 0x3fa, 0xfffffe01, 0xfffffff7, 0x2, 0x6, 0x9, 0x0, 0xf, 0x135, 0x9, 0xfffffffd, 0xc2, 0x0, 0x5, 0xe, 0x100, 0x9, 0x6, 0x100, 0x8, 0x2, 0x6, 0x8, 0xfffffff6, 0x3, 0x0, 0x40, 0x4, 0x9, 0x7465, 0x340e, 0x3, 0xffff0294, 0x7, 0x80000001, 0x80, 0x5, 0xfffffff5, 0x200, 0x8, 0xb, 0x800, 0x6, 0x4, 0x8001, 0x40, 0x9, 0x8, 0xe, 0x4, 0x8, 0x2, 0x4d2, 0x7, 0x8, 0x800, 0x9b800000, 0xffff5bbc, 0x1, 0x0, 0x9f2e, 0xe81c, 0xb, 0xfee, 0x7, 0x2800000, 0x3a5, 0x8, 0x4aaac675, 0x0, 0x2, 0xfffffff9, 0x5, 0x7, 0x7, 0x47860000, 0x7f, 0x2, 0x401, 0x6, 0x2, 0x0, 0x3, 0x4, 0xbfe, 0x7fff, 0xb1a, 0x0, 0x3, 0xb, 0x1, 0x2, 0x800, 0xfffff6ba, 0x4, 0x1, 0xbf86, 0x2, 0xfffffff7, 0x10001, 0x4fb0, 0x4, 0x2d44ce89, 0x77, 0x2, 0x2b, 0x4000, 0xd8, 0x7, 0x8ed, 0x0, 0x80000000, 0x200, 0x60000, 0x7c, 0x5, 0x6, 0xf9, 0x6, 0x7, 0x7, 0x3, 0x82, 0x658e6e9c, 0x7, 0xfffffeff, 0x5, 0x1, 0x5, 0xfffffffe, 0x4, 0xffffffff, 0x7, 0x6, 0x3, 0x4, 0x5, 0x0, 0x1, 0x5, 0x199, 0x7, 0x8000, 0xffffb598, 0x80000001, 0x80, 0xd500, 0x5, 0x8753, 0x609c, 0xfed, 0x1, 0x2, 0x7, 0xe032, 0x22c, 0x7ff, 0x98, 0xfb, 0x1, 0x3, 0x3, 0xed, 0xfffffffc, 0x8, 0x8, 0x4, 0x1f33ed76, 0x9, 0x1, 0x7, 0x100, 0x81, 0x8, 0x5, 0x1, 0x5, 0x90, 0x1, 0x3c5, 0xfff, 0xffffffff, 0xe1, 0x3]}]}, @TCA_U32_DIVISOR={0x8, 0x4, 0x7f}, @TCA_U32_CLASSID={0x8, 0x1, {0x9, 0xfff1}}, @TCA_U32_HASH={0x8, 0x2, 0x3}, @TCA_U32_CLASSID={0x8, 0x1, {0xfff3, 0xe}}]}}, @TCA_CHAIN={0x8, 0xb, 0x100}, @filter_kind_options=@f_route={{0xa}, {0x580, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x94}, @TCA_ROUTE4_ACT={0x114, 0x6, [@m_bpf={0x110, 0x5, 0x0, 0x0, {{0x8}, {0xd4, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x6, 0x8, 0x5, 0x80000000, 0x5410}}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x5, 0x3e, 0x2, 0x5}, {0xffff, 0xb, 0x6, 0x6}, {0x81, 0xb, 0x0, 0x8}, {0xc, 0x25, 0x3, 0x3}, {0x2, 0x2, 0x4, 0x3}, {0x3, 0x4, 0xde, 0x7ff}, {0x1000, 0x7, 0x10, 0xd6}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x101, 0x0, 0x4d}}, @TCA_ACT_BPF_OPS={0x44, 0x4, [{0xfff2, 0x1, 0x80}, {0x6, 0x3, 0x5, 0x3}, {0x1, 0x0, 0x2, 0x9}, {0x101, 0x1, 0xc, 0xd80}, {0x7, 0x7, 0x2, 0x10000}, {0x347d, 0x4, 0xff, 0x5}, {0x9, 0x2, 0x8, 0x1}, {0x5, 0xf, 0xfb, 0x795}]}]}, {0x15, 0x6, "a077e4b6ecc0e68ccc813dc693db3bc343"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xc}}, @TCA_ROUTE4_TO={0x8, 0x2, 0x48}, @TCA_ROUTE4_TO={0x8, 0x2, 0x9a}, @TCA_ROUTE4_POLICE={0x430, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x38, 0x1, 0xa000, 0x9, 0x2, 0x9, 0x2, 0x9, 0x2c, 0x2, 0x4, 0xfffffffc, 0x1, 0xc644, 0xb, 0x1, 0x2, 0x8, 0xfffffffe, 0x3, 0x5, 0x9, 0x4, 0x1, 0x1f, 0x7, 0xffff, 0x5525, 0x3, 0x3ff, 0x6, 0x8184, 0x8, 0x3, 0x8, 0x2, 0x844b, 0x6, 0xff, 0x0, 0xf, 0x7f, 0x7ff, 0xffff, 0x2bdc, 0xfffffff2, 0xd82, 0x3, 0xffff5e61, 0x9, 0x0, 0x9, 0x3, 0x6, 0x1ff, 0x8, 0x7f80445e, 0x2, 0x100, 0x3, 0x7ff, 0x0, 0xc2, 0x1, 0xffff68df, 0x7fff, 0x5ed93711, 0xffff6b56, 0x7, 0x76eac9f, 0x100, 0x1, 0x2, 0x2, 0x4, 0xfffffffe, 0x8, 0x0, 0x0, 0x40, 0x2e41, 0x69, 0x7, 0x101, 0x0, 0x3, 0x3, 0xffff8001, 0x8, 0xfffff800, 0x11a, 0x3, 0xd2f6, 0xf, 0x10000, 0x5, 0x6, 0x5b4fdecb, 0x8, 0x1d1c, 0xfffffff7, 0x4, 0x4, 0x9, 0x9, 0x57502000, 0x6, 0x10001, 0xffff, 0x100, 0x800, 0x4, 0x7f, 0x7, 0xff, 0x5, 0x1, 0x0, 0xffffffff, 0x4, 0x1, 0x5, 0xffff, 0x1, 0x2, 0x1000, 0x5, 0x8, 0x2, 0x8, 0x8, 0xffffffb9, 0xc, 0x2, 0x9, 0xffffffff, 0xff, 0x1, 0x1c67, 0x220, 0x1, 0x2, 0x1, 0x2, 0x3, 0x15, 0x9, 0x7, 0xfff, 0xd6, 0x8001, 0x461, 0x9, 0x4, 0x3a1a, 0x9ff, 0xfff, 0x3, 0x7, 0x3, 0xf, 0x8, 0x7, 0xaa, 0x1000000, 0xfffffffd, 0x6, 0x101, 0x2, 0x3ff, 0x3, 0x4, 0x0, 0xfff, 0x396, 0x4, 0x1, 0x0, 0xe52, 0x2, 0x5, 0x5, 0x80c, 0x28, 0x3ff, 0x2, 0xfb7, 0x1, 0x1, 0x7, 0x1, 0xc, 0x3, 0x10cf, 0x1, 0xffff, 0x8, 0x8, 0x7, 0x5, 0x4, 0x5, 0x0, 0x5, 0xfa37, 0x200, 0x1, 0x1f2c, 0x81, 0x8001, 0x1, 0x8, 0x2, 0x7, 0x3, 0xee39, 0x9, 0x25ed, 0x5, 0xdd, 0x4, 0x8000, 0x3, 0xfffffffb, 0x4, 0x72f, 0x8, 0x86, 0x6, 0x625, 0xffffffff, 0x7, 0x0, 0x7b9f, 0x7, 0x6, 0x2, 0xe, 0xfff, 0x1, 0x7ff, 0x3, 0x0, 0xfffffff8, 0x3, 0x0, 0x1, 0x7, 0x7f, 0x1, 0x8, 0x1, 0x8, 0x9, 0xe, 0x101]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x64da}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffffb}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0xd3}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xfd}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfff3, 0x4}}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x21}}]}, 0xe6c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) (async) sendmsg$nl_route_sched(r2, &(0x7f0000001180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001140)={&(0x7f00000002c0)=@newchain={0xe6c, 0x64, 0x4, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xd, 0xffe0}, {0xe, 0xa}, {0xfff1, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x8a4, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x8}}, @TCA_U32_INDEV={0x14, 0x8, 'pim6reg1\x00'}, @TCA_U32_POLICE={0x85c, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x7, 0xfffffff5, 0x20000, 0x400, 0x2, 0x9a, 0x401, 0x1, 0x2d568194, 0x1, 0x1, 0x7, 0x9, 0x40, 0x0, 0x7, 0x4, 0x84, 0x8, 0x1, 0x6, 0x65c0, 0x140, 0x7ff, 0x8000, 0x5, 0x10001, 0x7, 0x1, 0x2, 0x0, 0x3, 0x5, 0x1000, 0x2, 0xa, 0x2, 0xcc0c, 0xcb00, 0x3, 0x1, 0xc, 0x8, 0x4, 0x8, 0x1, 0x200, 0x5, 0x5, 0xfffeffff, 0x8, 0x0, 0x9, 0x6, 0x3ff, 0x81, 0x2, 0x400, 0x3, 0x3, 0x7fff, 0x300, 0x3, 0x0, 0x9, 0x8, 0x3, 0x3ed, 0x9, 0x40, 0xa15, 0xf, 0x0, 0x7, 0x4, 0x5, 0x8, 0x4, 0xc08, 0x5, 0x2, 0x2, 0x6, 0x9, 0x7abf, 0x6, 0x2e0d465f, 0x1fffc000, 0x7, 0x2, 0x64ef94b8, 0x40, 0x100000, 0x7, 0xf8a, 0xf, 0x671, 0xfffffe01, 0x400, 0xcc1, 0x7, 0x9, 0x7, 0x4, 0x1f9617dc, 0x9, 0x80, 0x1ff, 0x0, 0xb, 0x9, 0x1, 0xfffffffa, 0xbe3c, 0x1, 0x7fff, 0xfff, 0x41, 0x7ff, 0x3e9d, 0x5, 0x9, 0xfffffffd, 0x41af, 0x3, 0x7a2757cb, 0x3ff, 0x1, 0x2, 0x6, 0x204, 0xfffffff8, 0xa0, 0x331, 0x6, 0xc, 0x5, 0x6, 0x0, 0x8, 0x3, 0x1, 0x0, 0x3, 0x6, 0x2, 0x3a7, 0x3, 0x0, 0x7, 0x0, 0x8, 0xa, 0x1, 0x7, 0x9, 0x5, 0x7f, 0x5, 0x6, 0x1b, 0x1ea, 0xb4d3, 0xbc, 0x2, 0x9, 0x7f, 0x9, 0x4, 0x79, 0x2, 0x914d, 0xffffffff, 0x2, 0x4e70d798, 0x8dca, 0x4, 0xcb7, 0x9, 0x1, 0x4, 0x0, 0x40, 0x6a4, 0x81, 0x7, 0xe, 0x6, 0x8, 0x10, 0xb3, 0x1, 0xdfe9, 0x7, 0x2, 0x5, 0x9, 0x7, 0xf7, 0x9, 0x1, 0x200, 0xfff, 0x7, 0x4, 0xfffffffe, 0x4, 0x0, 0xffffffff, 0x3, 0x5, 0xadf, 0x8, 0x5, 0x1, 0x101, 0x4, 0x2, 0x8, 0xe, 0xf9, 0x8, 0x1, 0x3, 0x8a2, 0x80000001, 0x5, 0x5, 0x1, 0x4, 0x7fff, 0x9, 0x3f6, 0x7, 0xdd, 0x0, 0x0, 0x40, 0x8496, 0x52, 0x7fffffff, 0x5, 0x401, 0x3, 0xc5, 0x22c00000, 0x7, 0x3, 0x4, 0xfffff800, 0x6, 0xb28, 0x0, 0x9, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9c, 0x4, 0xffffffff, 0x9d00, 0xf68b, {0x8, 0x1, 0x101, 0x217, 0x8, 0xfffffff7}, {0x35, 0x1, 0xfff, 0x4, 0x1, 0x1}, 0x4, 0x6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xc5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5ff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x400, 0x9, 0x3, 0x9, 0xfffffffb, 0x1, 0xffff, 0x8, 0x4, 0x80, 0x100, 0x40, 0x6, 0x5, 0x736, 0x2, 0x2, 0x4, 0x7, 0x80000001, 0x7, 0x80, 0x3, 0x4, 0x3, 0x3, 0x10, 0xffff8001, 0x1, 0x8, 0x80000001, 0x10000, 0x4, 0x6, 0x4, 0x5, 0x0, 0x6, 0x3f52, 0x10000, 0xfaa1, 0x4, 0x1000, 0x5, 0x0, 0xb7cd, 0x5, 0xf92, 0x6, 0x2, 0x3, 0x81, 0x7, 0x9, 0x1, 0x3, 0xffff, 0xd, 0x5, 0x8, 0x3, 0x4, 0x9, 0xfffffffe, 0x5625, 0x80000000, 0x200, 0x6, 0x9, 0x71af, 0x2, 0x6, 0x3fa, 0xfffffe01, 0xfffffff7, 0x2, 0x6, 0x9, 0x0, 0xf, 0x135, 0x9, 0xfffffffd, 0xc2, 0x0, 0x5, 0xe, 0x100, 0x9, 0x6, 0x100, 0x8, 0x2, 0x6, 0x8, 0xfffffff6, 0x3, 0x0, 0x40, 0x4, 0x9, 0x7465, 0x340e, 0x3, 0xffff0294, 0x7, 0x80000001, 0x80, 0x5, 0xfffffff5, 0x200, 0x8, 0xb, 0x800, 0x6, 0x4, 0x8001, 0x40, 0x9, 0x8, 0xe, 0x4, 0x8, 0x2, 0x4d2, 0x7, 0x8, 0x800, 0x9b800000, 0xffff5bbc, 0x1, 0x0, 0x9f2e, 0xe81c, 0xb, 0xfee, 0x7, 0x2800000, 0x3a5, 0x8, 0x4aaac675, 0x0, 0x2, 0xfffffff9, 0x5, 0x7, 0x7, 0x47860000, 0x7f, 0x2, 0x401, 0x6, 0x2, 0x0, 0x3, 0x4, 0xbfe, 0x7fff, 0xb1a, 0x0, 0x3, 0xb, 0x1, 0x2, 0x800, 0xfffff6ba, 0x4, 0x1, 0xbf86, 0x2, 0xfffffff7, 0x10001, 0x4fb0, 0x4, 0x2d44ce89, 0x77, 0x2, 0x2b, 0x4000, 0xd8, 0x7, 0x8ed, 0x0, 0x80000000, 0x200, 0x60000, 0x7c, 0x5, 0x6, 0xf9, 0x6, 0x7, 0x7, 0x3, 0x82, 0x658e6e9c, 0x7, 0xfffffeff, 0x5, 0x1, 0x5, 0xfffffffe, 0x4, 0xffffffff, 0x7, 0x6, 0x3, 0x4, 0x5, 0x0, 0x1, 0x5, 0x199, 0x7, 0x8000, 0xffffb598, 0x80000001, 0x80, 0xd500, 0x5, 0x8753, 0x609c, 0xfed, 0x1, 0x2, 0x7, 0xe032, 0x22c, 0x7ff, 0x98, 0xfb, 0x1, 0x3, 0x3, 0xed, 0xfffffffc, 0x8, 0x8, 0x4, 0x1f33ed76, 0x9, 0x1, 0x7, 0x100, 0x81, 0x8, 0x5, 0x1, 0x5, 0x90, 0x1, 0x3c5, 0xfff, 0xffffffff, 0xe1, 0x3]}]}, @TCA_U32_DIVISOR={0x8, 0x4, 0x7f}, @TCA_U32_CLASSID={0x8, 0x1, {0x9, 0xfff1}}, @TCA_U32_HASH={0x8, 0x2, 0x3}, @TCA_U32_CLASSID={0x8, 0x1, {0xfff3, 0xe}}]}}, @TCA_CHAIN={0x8, 0xb, 0x100}, @filter_kind_options=@f_route={{0xa}, {0x580, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x94}, @TCA_ROUTE4_ACT={0x114, 0x6, [@m_bpf={0x110, 0x5, 0x0, 0x0, {{0x8}, {0xd4, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x6, 0x8, 0x5, 0x80000000, 0x5410}}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x5, 0x3e, 0x2, 0x5}, {0xffff, 0xb, 0x6, 0x6}, {0x81, 0xb, 0x0, 0x8}, {0xc, 0x25, 0x3, 0x3}, {0x2, 0x2, 0x4, 0x3}, {0x3, 0x4, 0xde, 0x7ff}, {0x1000, 0x7, 0x10, 0xd6}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x101, 0x0, 0x4d}}, @TCA_ACT_BPF_OPS={0x44, 0x4, [{0xfff2, 0x1, 0x80}, {0x6, 0x3, 0x5, 0x3}, {0x1, 0x0, 0x2, 0x9}, {0x101, 0x1, 0xc, 0xd80}, {0x7, 0x7, 0x2, 0x10000}, {0x347d, 0x4, 0xff, 0x5}, {0x9, 0x2, 0x8, 0x1}, {0x5, 0xf, 0xfb, 0x795}]}]}, {0x15, 0x6, "a077e4b6ecc0e68ccc813dc693db3bc343"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xc}}, @TCA_ROUTE4_TO={0x8, 0x2, 0x48}, @TCA_ROUTE4_TO={0x8, 0x2, 0x9a}, @TCA_ROUTE4_POLICE={0x430, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x38, 0x1, 0xa000, 0x9, 0x2, 0x9, 0x2, 0x9, 0x2c, 0x2, 0x4, 0xfffffffc, 0x1, 0xc644, 0xb, 0x1, 0x2, 0x8, 0xfffffffe, 0x3, 0x5, 0x9, 0x4, 0x1, 0x1f, 0x7, 0xffff, 0x5525, 0x3, 0x3ff, 0x6, 0x8184, 0x8, 0x3, 0x8, 0x2, 0x844b, 0x6, 0xff, 0x0, 0xf, 0x7f, 0x7ff, 0xffff, 0x2bdc, 0xfffffff2, 0xd82, 0x3, 0xffff5e61, 0x9, 0x0, 0x9, 0x3, 0x6, 0x1ff, 0x8, 0x7f80445e, 0x2, 0x100, 0x3, 0x7ff, 0x0, 0xc2, 0x1, 0xffff68df, 0x7fff, 0x5ed93711, 0xffff6b56, 0x7, 0x76eac9f, 0x100, 0x1, 0x2, 0x2, 0x4, 0xfffffffe, 0x8, 0x0, 0x0, 0x40, 0x2e41, 0x69, 0x7, 0x101, 0x0, 0x3, 0x3, 0xffff8001, 0x8, 0xfffff800, 0x11a, 0x3, 0xd2f6, 0xf, 0x10000, 0x5, 0x6, 0x5b4fdecb, 0x8, 0x1d1c, 0xfffffff7, 0x4, 0x4, 0x9, 0x9, 0x57502000, 0x6, 0x10001, 0xffff, 0x100, 0x800, 0x4, 0x7f, 0x7, 0xff, 0x5, 0x1, 0x0, 0xffffffff, 0x4, 0x1, 0x5, 0xffff, 0x1, 0x2, 0x1000, 0x5, 0x8, 0x2, 0x8, 0x8, 0xffffffb9, 0xc, 0x2, 0x9, 0xffffffff, 0xff, 0x1, 0x1c67, 0x220, 0x1, 0x2, 0x1, 0x2, 0x3, 0x15, 0x9, 0x7, 0xfff, 0xd6, 0x8001, 0x461, 0x9, 0x4, 0x3a1a, 0x9ff, 0xfff, 0x3, 0x7, 0x3, 0xf, 0x8, 0x7, 0xaa, 0x1000000, 0xfffffffd, 0x6, 0x101, 0x2, 0x3ff, 0x3, 0x4, 0x0, 0xfff, 0x396, 0x4, 0x1, 0x0, 0xe52, 0x2, 0x5, 0x5, 0x80c, 0x28, 0x3ff, 0x2, 0xfb7, 0x1, 0x1, 0x7, 0x1, 0xc, 0x3, 0x10cf, 0x1, 0xffff, 0x8, 0x8, 0x7, 0x5, 0x4, 0x5, 0x0, 0x5, 0xfa37, 0x200, 0x1, 0x1f2c, 0x81, 0x8001, 0x1, 0x8, 0x2, 0x7, 0x3, 0xee39, 0x9, 0x25ed, 0x5, 0xdd, 0x4, 0x8000, 0x3, 0xfffffffb, 0x4, 0x72f, 0x8, 0x86, 0x6, 0x625, 0xffffffff, 0x7, 0x0, 0x7b9f, 0x7, 0x6, 0x2, 0xe, 0xfff, 0x1, 0x7ff, 0x3, 0x0, 0xfffffff8, 0x3, 0x0, 0x1, 0x7, 0x7f, 0x1, 0x8, 0x1, 0x8, 0x9, 0xe, 0x101]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x64da}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffffb}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0xd3}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xfd}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfff3, 0x4}}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x21}}]}, 0xe6c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) unshare(0x20000400) (async) unshare(0x20000400) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000002a00)=ANY=[@ANYBLOB="180200000000000000000000000000008500000018000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000027c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000002700)="e0b9547ed387dbe9abc86f5b7de8", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000027c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000002700)="e0b9547ed387dbe9abc86f5b7de8", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001300), r5) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000001440)={&(0x7f00000012c0), 0xc, &(0x7f0000001400)={&(0x7f0000001340)={0x88, r7, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2da0ae93}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x10}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x20}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffffff}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x46}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) socket(0x2, 0x80805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) ioctl$FICLONE(r6, 0x40049409, r5) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000340)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x2e8, 0x50}], 0x1, 0x40800) syz_emit_ethernet(0x55, &(0x7f0000000200)={@broadcast, @local, @val={@void, {0x8100, 0x7, 0x0, 0x2}}, {@generic={0x6000, "ca99336ab6236f0eb9526eaec75b9baa5e6fe331efaa837fcb1dab95797cf14519b61655ef4843635a3cf3e0e1797f409270e0f3b4106700f9677608b80fa0d2f728a5"}}}, 0x0) (async) syz_emit_ethernet(0x55, &(0x7f0000000200)={@broadcast, @local, @val={@void, {0x8100, 0x7, 0x0, 0x2}}, {@generic={0x6000, "ca99336ab6236f0eb9526eaec75b9baa5e6fe331efaa837fcb1dab95797cf14519b61655ef4843635a3cf3e0e1797f409270e0f3b4106700f9677608b80fa0d2f728a5"}}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, &(0x7f00000011c0)=ANY=[@ANYBLOB="760a0000b546aeba6111720000000000180700fff600763400000000e0ffff0f000000000000000000cd509700845993f4e11d924e6f4753ff8c3618765330f2d5d5a5cdacfa97df5971e8557a6ca4652e9475b8e6c7c6232403428449905f3c0eeb4ea750eafb7956925ff95f8be013fd5f23f66e65b63d5f54d17c5295f520d1bae8b44bafb9f7ba855ce38063d0d957842a4b86d0f2d837c694f2feb5310d90caef677c5398ce0d4c8069b5c5013d05a5096342a8f695b0101342697b4b166ce72613a8e02fef1dc44a31183c2ac978bd39d8df469d97696bbaa08e"], &(0x7f0000000080)='syzkaller\x00'}, 0x90) 9.667841937s ago: executing program 3 (id=4113): r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) (async) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f00000000c0)=@ethtool_ringparam={0x11, 0x3, 0x8, 0x0, 0x5, 0x2, 0x1, 0x2, 0x6}}) (async) connect$rxrpc(r0, &(0x7f00000003c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) (async) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) (async) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000000)={0x3, 0x2, 0x3}) 0s ago: executing program 2 (id=4114): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) listen(0xffffffffffffffff, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@getchain={0x24, 0x65, 0xfcd66a900070b049, 0x0, 0x2, {0x0, 0x0, 0x0, r2, {}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x4008000) kernel console output (not intermixed with test programs): parsing attributes in process `syz.0.2478'. [ 262.244111][T14648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2478'. [ 262.337324][T14658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2493'. [ 262.378343][T14659] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2492'. [ 262.467801][T14662] netlink: 'syz.2.2494': attribute type 1 has an invalid length. [ 262.695972][T14671] team0: Device gtp2 is of different type [ 262.824173][T14674] netlink: 'syz.4.2497': attribute type 6 has an invalid length. [ 262.833010][T14674] netlink: 'syz.4.2497': attribute type 7 has an invalid length. [ 263.004886][T14692] netlink: 'syz.3.2502': attribute type 1 has an invalid length. [ 263.168059][T14694] 8021q: adding VLAN 0 to HW filter on device bond11 [ 263.182342][T14694] bond0: (slave bond11): Enslaving as an active interface with an up link [ 263.356480][T14712] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 263.535880][T14715] netlink: 'syz.2.2508': attribute type 1 has an invalid length. [ 263.854292][T14751] netlink: 'syz.0.2515': attribute type 1 has an invalid length. [ 264.169202][T14772] geneve3: entered promiscuous mode [ 264.176744][T14772] geneve3: entered allmulticast mode [ 264.185701][ T7193] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 264.201865][ T7193] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 264.220679][ T7193] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 264.257962][ T7193] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 264.289252][T14772] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 264.355821][T14772] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 264.459158][T14772] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 264.533226][T14772] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 264.650715][ T7233] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 264.686477][ T7233] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 264.721846][ T7233] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 264.746436][ T7233] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 265.587975][T14858] netlink: 'syz.1.2549': attribute type 5 has an invalid length. [ 265.743437][T14865] bond0: (slave gre0): Error: Device type is different from other slaves [ 266.037547][T14880] __nla_validate_parse: 22 callbacks suppressed [ 266.037567][T14880] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2560'. [ 266.042854][T14885] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2561'. [ 266.055545][T14880] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2560'. [ 266.076719][T14886] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2561'. [ 266.089230][T14884] netlink: 512 bytes leftover after parsing attributes in process `syz.0.2562'. [ 266.107363][T14885] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2561'. [ 266.118890][T14895] veth0_to_team: entered promiscuous mode [ 266.320419][T14906] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2567'. [ 266.382059][T14908] xt_CT: You must specify a L4 protocol and not use inversions on it [ 266.432385][T14905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2567'. [ 266.453135][T14905] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2567'. [ 266.485511][T14905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2567'. [ 266.664746][T14929] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 266.741813][ T7193] smc: removing ib device s [ 266.818305][T14936] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 266.851475][T14937] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 267.137576][T14956] tipc: Enabled bearer , priority 0 [ 267.157786][T14956] syzkaller0: entered promiscuous mode [ 267.163445][T14956] syzkaller0: entered allmulticast mode [ 267.545497][T14948] tipc: Resetting bearer [ 267.641129][T14978] unsupported nlmsg_type 40 [ 267.677806][T14948] tipc: Disabling bearer [ 268.209927][T15008] veth0: entered promiscuous mode [ 268.219895][T15005] veth0: left promiscuous mode [ 268.720651][T15040] netem: incorrect ge model size [ 268.726068][T15040] netem: change failed [ 268.878673][ T5830] Bluetooth: hci0: command tx timeout [ 269.848485][T15114] netlink: 'syz.3.2626': attribute type 1 has an invalid length. [ 269.904585][T15114] 8021q: adding VLAN 0 to HW filter on device bond3 [ 269.993908][T15114] 8021q: adding VLAN 0 to HW filter on device bond3 [ 270.018490][T15114] bond3: (slave vxcan5): The slave device specified does not support setting the MAC address [ 270.084231][T15114] bond3: (slave vxcan5): Error -95 calling set_mac_address [ 270.089857][T15117] netlink: 'syz.1.2628': attribute type 21 has an invalid length. [ 270.195059][T15125] veth9: entered promiscuous mode [ 270.204628][T15125] bond3: (slave veth9): Enslaving as an active interface with a down link [ 270.225887][T15133] 8021q: adding VLAN 0 to HW filter on device bond3 [ 270.431948][T15152] sctp: [Deprecated]: syz.4.2632 (pid 15152) Use of struct sctp_assoc_value in delayed_ack socket option. [ 270.431948][T15152] Use struct sctp_sack_info instead [ 270.475242][T15151] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 270.913223][T15182] netlink: 'syz.3.2643': attribute type 7 has an invalid length. [ 270.921336][T15182] netlink: 'syz.3.2643': attribute type 8 has an invalid length. [ 270.937333][T15182] erspan0: entered promiscuous mode [ 270.944008][T15182] batadv_slave_1: entered promiscuous mode [ 270.956429][T15182] batadv_slave_1: left promiscuous mode [ 270.970532][T15182] erspan0: left promiscuous mode [ 271.211828][T15200] __nla_validate_parse: 20 callbacks suppressed [ 271.211858][T15200] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2647'. [ 271.383092][T15209] netlink: 'syz.1.2650': attribute type 16 has an invalid length. [ 271.428123][T15209] netlink: 'syz.1.2650': attribute type 3 has an invalid length. [ 271.455865][T15209] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2650'. [ 271.535499][T15215] netlink: 'syz.4.2653': attribute type 1 has an invalid length. [ 271.609888][T15215] bond10: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 271.628631][T15215] bond10: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 271.657620][T15215] bond10: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 271.876450][T15228] can: request_module (can-proto-0) failed. [ 271.884789][T15228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2657'. [ 271.911775][T15228] smc: removing net device vcan0 with user defined pnetid SYZ1 [ 272.006667][T15234] veth0_to_bond: entered allmulticast mode [ 272.026201][T15235] netlink: 'syz.3.2659': attribute type 1 has an invalid length. [ 272.513084][T15270] ipt_ECN: cannot use operation on non-tcp rule [ 272.582504][T15275] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2670'. [ 272.806376][T15293] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2679'. [ 272.819048][T15293] IPVS: Unknown mcast interface: vcan0 [ 272.866296][T15288] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 272.956100][T15302] tc_dump_action: action bad kind [ 272.965260][T15303] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2681'. [ 273.018340][T15309] netlink: 'syz.1.2683': attribute type 64 has an invalid length. [ 273.039425][T15309] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2683'. [ 273.107941][T15311] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2684'. [ 273.244587][T15322] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2687'. [ 273.296513][T15322] tipc: Enabled bearer , priority 0 [ 273.304303][T15322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2687'. [ 273.326153][T15321] tipc: Disabling bearer [ 273.669014][T15341] bond11: option resend_igmp: invalid value (32767) [ 273.675989][T15341] bond11: option resend_igmp: allowed values 0 - 255 [ 273.685177][T15341] bond11 (unregistering): Released all slaves [ 273.920422][T15356] delete_channel: no stack [ 274.042446][T15368] xt_HMARK: proto mask must be zero with L3 mode [ 274.051911][T15370] batadv_slave_1: entered promiscuous mode [ 274.057924][T15370] batadv_slave_1: entered allmulticast mode [ 275.060697][T15429] 8021q: adding VLAN 0 to HW filter on device bond4 [ 275.111382][T15429] 8021q: adding VLAN 0 to HW filter on device bond4 [ 275.126521][T15429] bond4: (slave vxcan5): The slave device specified does not support setting the MAC address [ 275.139417][T15429] bond4: (slave vxcan5): Error -95 calling set_mac_address [ 275.341476][T15444] netlink: 'syz.4.2730': attribute type 142 has an invalid length. [ 275.484627][T15456] syzkaller1: entered promiscuous mode [ 275.490842][T15456] syzkaller1: entered allmulticast mode [ 275.721974][T15469] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 275.930200][T15478] tipc: Enabled bearer , priority 0 [ 275.938401][T15478] syzkaller0: entered promiscuous mode [ 275.944046][T15478] syzkaller0: entered allmulticast mode [ 276.359498][T15478] tipc: Resetting bearer [ 276.442089][T15478] tipc: Disabling bearer [ 276.474870][T15487] netlink: 'syz.4.2742': attribute type 29 has an invalid length. [ 276.521412][T15489] netlink: 'syz.4.2742': attribute type 29 has an invalid length. [ 276.588000][T15492] __nla_validate_parse: 12 callbacks suppressed [ 276.588023][T15492] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2743'. [ 276.686938][ T7177] batman_adv: batadv1: IGMP Querier appeared [ 276.693035][ T7177] batman_adv: batadv1: MLD Querier appeared [ 276.881887][T15503] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2747'. [ 276.965863][T15512] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2747'. [ 276.987584][T15507] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2749'. [ 277.348326][T15531] tipc: Enabling of bearer rejected, failed to enable media [ 277.479690][T15537] bridge16: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 277.492051][T15541] netlink: 'syz.2.2761': attribute type 3 has an invalid length. [ 277.500101][T15541] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2761'. [ 277.509452][T15537] netlink: 'syz.1.2760': attribute type 3 has an invalid length. [ 277.970482][T15572] sctp: [Deprecated]: syz.2.2770 (pid 15572) Use of int in maxseg socket option. [ 277.970482][T15572] Use struct sctp_assoc_value instead [ 277.980677][T15568] wg1 speed is unknown, defaulting to 1000 [ 278.139568][T15579] netlink: 'syz.4.2771': attribute type 10 has an invalid length. [ 278.169563][T15579] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2771'. [ 278.184393][T15579] dummy0: entered promiscuous mode [ 278.192322][T15579] bridge0: port 2(dummy0) entered blocking state [ 278.199202][T15579] bridge0: port 2(dummy0) entered disabled state [ 278.205969][T15579] dummy0: entered allmulticast mode [ 278.324059][T15585] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2773'. [ 278.450449][T15590] ip6tnl0: Caught tx_queue_len zero misconfig [ 278.504356][T15585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2773'. [ 278.701116][T15606] netlink: zone id is out of range [ 278.801149][T15611] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2780'. [ 278.838159][T15612] sctp: [Deprecated]: syz.3.2781 (pid 15612) Use of int in max_burst socket option. [ 278.838159][T15612] Use struct sctp_assoc_value instead [ 278.901616][T15617] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.109554][T15631] erspan0: entered allmulticast mode [ 279.244456][T15634] can: request_module (can-proto-0) failed. [ 279.432020][T15652] tipc: Enabled bearer , priority 0 [ 279.444244][T15653] syzkaller0: entered promiscuous mode [ 279.452340][T15653] syzkaller0: entered allmulticast mode [ 279.520120][T15653] tipc: Resetting bearer [ 279.604084][T15653] tipc: Disabling bearer [ 280.041884][T15692] netlink: 'syz.3.2802': attribute type 4 has an invalid length. [ 280.780200][T15709] netlink: 'syz.3.2807': attribute type 4 has an invalid length. [ 280.804198][T15709] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2807'. [ 280.814998][T15723] netlink: 'syz.2.2809': attribute type 3 has an invalid length. [ 280.845625][T15709] netlink: 'syz.3.2807': attribute type 4 has an invalid length. [ 281.061146][T15734] veth11: entered allmulticast mode [ 281.597130][ T56] block nbd0: Possible stuck request ffff88802501e000: control (read@0,1024B). Runtime 180 seconds [ 281.608351][ T56] block nbd0: Possible stuck request ffff88802501e1c0: control (read@1024,1024B). Runtime 180 seconds [ 281.620273][ T56] block nbd0: Possible stuck request ffff88802501e380: control (read@2048,1024B). Runtime 180 seconds [ 281.631537][ T56] block nbd0: Possible stuck request ffff88802501e540: control (read@3072,1024B). Runtime 180 seconds [ 281.909439][T15767] __nla_validate_parse: 3 callbacks suppressed [ 281.909460][T15767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2823'. [ 282.079857][T15777] openvswitch: netlink: Message has 1 unknown bytes. [ 282.091401][T15778] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 282.107183][T15777] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 282.116430][T15778] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 282.280881][T15784] C: renamed from team_slave_0 [ 282.307790][T15784] netlink: 'syz.1.2828': attribute type 1 has an invalid length. [ 282.337926][T15784] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 282.395411][T15793] IPVS: set_ctl: invalid protocol: 136 10.1.1.2:20001 [ 282.639074][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 282.656723][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 282.668618][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 282.678690][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 282.686472][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 282.855389][T15805] wg1 speed is unknown, defaulting to 1000 [ 283.377540][T15805] chnl_net:caif_netlink_parms(): no params data found [ 283.559585][T15847] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2842'. [ 283.580502][T15847] netlink: 'syz.1.2842': attribute type 7 has an invalid length. [ 283.609256][T15847] netlink: 'syz.1.2842': attribute type 8 has an invalid length. [ 283.611712][T15854] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2845'. [ 283.628832][T15847] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2842'. [ 283.707485][T15805] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.737125][T15805] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.744543][T15805] bridge_slave_0: entered allmulticast mode [ 283.759301][T15805] bridge_slave_0: entered promiscuous mode [ 283.786508][T15805] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.806650][T15805] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.824075][T15805] bridge_slave_1: entered allmulticast mode [ 283.840143][T15805] bridge_slave_1: entered promiscuous mode [ 283.858002][T15862] Bluetooth: MGMT ver 1.23 [ 283.866722][T15862] Bluetooth: hci1: too big key_count value 32778 [ 283.954241][T15805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.009990][T15805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.073791][T15872] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2849'. [ 284.212524][T15805] team0: Port device team_slave_0 added [ 284.246494][T15805] team0: Port device team_slave_1 added [ 284.380203][T15876] netlink: 666 bytes leftover after parsing attributes in process `syz.4.2850'. [ 284.404007][T15805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.447151][T15805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 284.573340][T15805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.606561][T15805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.620346][T15805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 284.658937][T15892] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2853'. [ 284.667973][T15805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.783440][T15902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2856'. [ 284.799794][ T52] Bluetooth: hci5: command tx timeout [ 284.856215][T15894] syzkaller0: entered promiscuous mode [ 284.862520][T15894] syzkaller0: entered allmulticast mode [ 284.883532][T15805] hsr_slave_0: entered promiscuous mode [ 284.899366][T15805] hsr_slave_1: entered promiscuous mode [ 284.906062][T15805] debugfs: 'hsr0' already exists in 'hsr' [ 284.912409][T15805] Cannot create hsr debugfs directory [ 284.918453][T15897] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 284.939473][T15904] netlink: 'syz.1.2857': attribute type 1 has an invalid length. [ 285.009461][T15904] netlink: 'syz.1.2857': attribute type 1 has an invalid length. [ 285.120384][T15914] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 285.345350][T15930] ip6gre0: Master is either lo or non-ether device [ 285.590975][T15805] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 285.629112][T15805] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 285.652562][T15805] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 285.695108][T15805] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 285.866576][T15805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.893060][T15957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2872'. [ 285.909744][T15805] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.925770][ T7222] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.933141][ T7222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.953152][ T7209] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.960422][ T7209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.023081][T15960] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2873'. [ 286.471348][T15805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.628021][T15987] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 286.877561][ T52] Bluetooth: hci5: command tx timeout [ 286.931855][T16010] syzkaller0: entered promiscuous mode [ 286.939387][T16010] syzkaller0: entered allmulticast mode [ 286.955601][T16009] tipc: Enabled bearer , priority 0 [ 287.051757][T16009] tipc: Resetting bearer [ 287.108840][T16009] tipc: Disabling bearer [ 287.155461][T16020] pim6reg1: entered promiscuous mode [ 287.164816][T16020] pim6reg1: entered allmulticast mode [ 287.278391][T16035] netlink: 'syz.3.2894': attribute type 9 has an invalid length. [ 287.371071][T16039] __nla_validate_parse: 2 callbacks suppressed [ 287.371092][T16039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2896'. [ 287.397879][T15805] veth0_vlan: entered promiscuous mode [ 287.433316][T16039] vlan0: entered allmulticast mode [ 287.439459][T16039] mac80211_hwsim hwsim19 wlan0: entered allmulticast mode [ 287.470310][T15805] veth1_vlan: entered promiscuous mode [ 287.551840][T15805] veth0_macvtap: entered promiscuous mode [ 287.576525][T15805] veth1_macvtap: entered promiscuous mode [ 287.606338][T16051] dummy0: left allmulticast mode [ 287.612568][T16051] bridge0: port 2(dummy0) entered disabled state [ 287.621133][T16049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2898'. [ 287.631770][T16049] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 287.648060][T16051] bridge_slave_0: left allmulticast mode [ 287.654601][T16051] bridge_slave_0: left promiscuous mode [ 287.665157][T16051] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.688403][T16051] team0: Port device team_slave_0 removed [ 287.699660][T16051] team0: Port device team_slave_1 removed [ 287.714319][T16051] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 287.770422][T16058] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2900'. [ 287.797096][T16058] netlink: 'syz.4.2900': attribute type 20 has an invalid length. [ 287.826124][T15805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.863343][T16058] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2900'. [ 287.863894][ T7233] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.883662][T16058] netlink: 'syz.4.2900': attribute type 20 has an invalid length. [ 287.912720][ T7233] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.928913][T15805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.976716][ T7233] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.002723][ T7233] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.021346][T16067] netlink: 'syz.3.2903': attribute type 5 has an invalid length. [ 288.051623][ T7209] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.093931][ T7209] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.105843][ T7209] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.127337][ T7209] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.322221][T16096] netlink: 'syz.3.2910': attribute type 30 has an invalid length. [ 288.463141][ T7209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.483339][T16101] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2912'. [ 288.507489][ T7209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.519948][T16101] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2912'. [ 288.585895][ T7222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.613114][ T7222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.875683][T16121] syz.4.2917: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 288.904085][T16123] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2821'. [ 288.914092][T16121] CPU: 0 UID: 0 PID: 16121 Comm: syz.4.2917 Not tainted syzkaller #0 PREEMPT(full) [ 288.914125][T16121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 288.914155][T16121] Call Trace: [ 288.914164][T16121] [ 288.914173][T16121] dump_stack_lvl+0x189/0x250 [ 288.914214][T16121] ? __pfx_dump_stack_lvl+0x10/0x10 [ 288.914250][T16121] ? __pfx__printk+0x10/0x10 [ 288.914278][T16121] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 288.914317][T16121] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 288.914356][T16121] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 288.914396][T16121] warn_alloc+0x214/0x310 [ 288.914434][T16121] ? stack_depot_save_flags+0x40/0x860 [ 288.914480][T16121] ? __pfx_warn_alloc+0x10/0x10 [ 288.914520][T16121] ? kasan_save_track+0x3e/0x80 [ 288.914555][T16121] ? __kasan_kmalloc+0x93/0xb0 [ 288.914616][T16121] ? xsk_setsockopt+0x4dc/0x8d0 [ 288.914643][T16121] ? do_sock_setsockopt+0x17c/0x1b0 [ 288.914665][T16121] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 288.914695][T16121] ? do_syscall_64+0xfa/0xfa0 [ 288.914726][T16121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.914766][T16121] __vmalloc_node_range_noprof+0x125/0x12d0 [ 288.914843][T16121] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 288.914886][T16121] ? __kasan_kmalloc+0x93/0xb0 [ 288.914932][T16121] vmalloc_user_noprof+0xad/0xf0 [ 288.914969][T16121] ? xskq_create+0xbf/0x170 [ 288.915000][T16121] xskq_create+0xbf/0x170 [ 288.915035][T16121] xsk_init_queue+0xb0/0x110 [ 288.915067][T16121] xsk_setsockopt+0x4dc/0x8d0 [ 288.915100][T16121] ? __pfx_xsk_setsockopt+0x10/0x10 [ 288.915132][T16121] ? __pfx_aa_sk_perm+0x10/0x10 [ 288.915170][T16121] ? aa_sock_opt_perm+0xff/0x1b0 [ 288.915213][T16121] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 288.915237][T16121] ? __pfx_xsk_setsockopt+0x10/0x10 [ 288.915268][T16121] do_sock_setsockopt+0x17c/0x1b0 [ 288.915298][T16121] __x64_sys_setsockopt+0x13f/0x1b0 [ 288.915329][T16121] do_syscall_64+0xfa/0xfa0 [ 288.915361][T16121] ? lockdep_hardirqs_on+0x9c/0x150 [ 288.915392][T16121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.915417][T16121] ? clear_bhb_loop+0x60/0xb0 [ 288.915459][T16121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.915479][T16121] RIP: 0033:0x7f2555f8efc9 [ 288.915500][T16121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.915522][T16121] RSP: 002b:00007f25541f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 288.915550][T16121] RAX: ffffffffffffffda RBX: 00007f25561e5fa0 RCX: 00007f2555f8efc9 [ 288.915570][T16121] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 288.915586][T16121] RBP: 00007f2556011f91 R08: 0000000000000004 R09: 0000000000000000 [ 288.915601][T16121] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 288.915618][T16121] R13: 00007f25561e6038 R14: 00007f25561e5fa0 R15: 00007fff73d8d538 [ 288.915661][T16121] [ 288.915699][T16121] Mem-Info: [ 288.959866][ T52] Bluetooth: hci5: command tx timeout [ 288.979866][T16121] active_anon:4771 inactive_anon:0 isolated_anon:0 [ 288.979866][T16121] active_file:2756 inactive_file:39955 isolated_file:0 [ 288.979866][T16121] unevictable:768 dirty:37 writeback:0 [ 288.979866][T16121] slab_reclaimable:12693 slab_unreclaimable:109073 [ 288.979866][T16121] mapped:34104 shmem:1358 pagetables:963 [ 288.979866][T16121] sec_pagetables:0 bounce:0 [ 288.979866][T16121] kernel_misc_reclaimable:0 [ 288.979866][T16121] free:1311639 free_pcp:12553 free_cma:0 [ 289.305822][T16121] Node 0 active_anon:19172kB inactive_anon:0kB active_file:11024kB inactive_file:159628kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120112kB dirty:196kB writeback:0kB shmem:3896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15176kB pagetables:3836kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 289.388241][T16140] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2922'. [ 289.406909][T16121] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 289.455840][T16140] xfrm1: entered promiscuous mode [ 289.463598][T16140] xfrm1: entered allmulticast mode [ 289.475972][T16121] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 289.508636][T16142] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2922'. [ 289.577629][T16121] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 289.583514][T16121] Node 0 DMA32 free:1325520kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18972kB inactive_anon:0kB active_file:11024kB inactive_file:159628kB unevictable:1536kB writepending:196kB zspages:0kB present:3129332kB managed:2565180kB mlocked:0kB bounce:0kB free_pcp:41348kB local_pcp:29372kB free_cma:0kB [ 289.691695][T16121] lowmem_reserve[]: 0 0 0 0 0 [ 289.739946][T16121] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 289.840251][T16121] lowmem_reserve[]: 0 0 0 0 0 [ 289.845082][T16121] Node 1 Normal free:3896420kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:14912kB local_pcp:6496kB free_cma:0kB [ 289.895498][T16121] lowmem_reserve[]: 0 0 0 0 0 [ 289.913755][T16121] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 289.966990][T16121] Node 0 DMA32: 241*4kB (UME) 42*8kB (UME) 113*16kB (UM) 141*32kB (UME) 85*64kB (UM) 32*128kB (UME) 48*256kB (UME) 18*512kB (UM) 6*1024kB (ME) 2*2048kB (UM) 311*4096kB (M) = 1322756kB [ 290.063856][T16121] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 290.101952][T16121] Node 1 Normal: 201*4kB (UME) 56*8kB (UME) 42*16kB (UME) 135*32kB (UME) 40*64kB (UME) 10*128kB (UME) 7*256kB (UME) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (E) 947*4096kB (M) = 3896420kB [ 290.124540][T16156] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2927'. [ 290.159010][ T5830] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 290.167547][T16121] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 290.177158][ T5830] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 290.195535][ T5830] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 290.218135][ T5830] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 290.229897][ T5830] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 290.242478][T16121] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 290.261092][T16121] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 290.271275][T16121] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 290.281380][T16121] 44070 total pagecache pages [ 290.286663][T16121] 0 pages in swap cache [ 290.290957][T16121] Free swap = 124996kB [ 290.295150][T16121] Total swap = 124996kB [ 290.299735][T16121] 2097051 pages RAM [ 290.303684][T16121] 0 pages HighMem/MovableOnly [ 290.309211][T16121] 424114 pages reserved [ 290.313410][T16121] 0 pages cma reserved [ 290.353166][T16159] wg1 speed is unknown, defaulting to 1000 [ 290.804076][T16159] chnl_net:caif_netlink_parms(): no params data found [ 290.852684][T16188] bond11: option xmit_hash_policy: invalid value (64) [ 290.891925][T16188] bond11 (unregistering): Released all slaves [ 291.038933][ T5830] Bluetooth: hci5: command tx timeout [ 291.177903][T16205] veth17: entered allmulticast mode [ 291.195374][T16210] x_tables: duplicate underflow at hook 1 [ 291.396559][T16159] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.411023][T16159] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.427637][T16159] bridge_slave_0: entered allmulticast mode [ 291.452191][T16159] bridge_slave_0: entered promiscuous mode [ 291.505284][T16159] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.537010][T16159] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.544462][T16159] bridge_slave_1: entered allmulticast mode [ 291.586175][T16159] bridge_slave_1: entered promiscuous mode [ 291.718928][T16159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.744035][T16159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.832643][T16159] team0: Port device team_slave_0 added [ 291.861751][T16249] netlink: 'syz.2.2953': attribute type 11 has an invalid length. [ 291.872487][T16247] netlink: 'syz.1.2952': attribute type 4 has an invalid length. [ 291.874766][T16159] team0: Port device team_slave_1 added [ 292.032760][T16159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.053336][T16159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.107879][T16159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.125831][T16159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.150509][T16159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.204394][T16159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.219524][T16260] tipc: Invalid UDP bearer configuration [ 292.219581][T16260] tipc: Enabling of bearer rejected, failed to enable media [ 292.317206][ T5830] Bluetooth: hci6: command tx timeout [ 292.428386][T16159] hsr_slave_0: entered promiscuous mode [ 292.436010][T16159] hsr_slave_1: entered promiscuous mode [ 292.443378][T16159] debugfs: 'hsr0' already exists in 'hsr' [ 292.464865][T16159] Cannot create hsr debugfs directory [ 293.014136][T16301] __nla_validate_parse: 6 callbacks suppressed [ 293.014156][T16301] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2968'. [ 293.025178][T16159] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 293.214090][T16159] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 293.274430][T16308] netlink: 'syz.1.2971': attribute type 1 has an invalid length. [ 293.295706][T16308] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 293.356654][T16308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2971'. [ 293.380957][T16159] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 293.395031][T16308] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 293.659194][T16334] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2979'. [ 293.675016][T16335] netlink: 'syz.1.2979': attribute type 28 has an invalid length. [ 293.772362][T16345] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2981'. [ 293.853704][T16159] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 293.899044][T16159] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 293.934146][T16159] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 294.030406][T16352] team0: Device ip6gre1 is of different type [ 294.078463][T16159] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 294.108500][T16362] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 294.166651][T16357] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2983'. [ 294.191423][T16357] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2983'. [ 294.218444][T16357] netlink: 'syz.5.2983': attribute type 3 has an invalid length. [ 294.242312][T16363] syzkaller1: entered promiscuous mode [ 294.257957][T16363] syzkaller1: entered allmulticast mode [ 294.335894][T16378] bond1: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 294.363199][T16378] bond1 (unregistering): Released all slaves [ 294.398079][ T5830] Bluetooth: hci6: command tx timeout [ 294.533052][T16389] netlink: 'syz.1.2990': attribute type 1 has an invalid length. [ 294.595554][T16159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.703650][T16159] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.740846][ T7177] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.748139][ T7177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.782042][ T7233] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.789326][ T7233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.863570][T16409] tipc: Enabled bearer , priority 0 [ 294.879920][T16409] syzkaller0: entered promiscuous mode [ 295.009392][T16397] tipc: Disabling bearer [ 295.144342][T16421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2999'. [ 295.370276][T16436] IPVS: set_ctl: invalid protocol: 33 255.255.255.255:20003 [ 295.393309][T16439] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3005'. [ 295.423882][T16159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.558608][T16159] veth0_vlan: entered promiscuous mode [ 295.596063][T16159] veth1_vlan: entered promiscuous mode [ 295.688418][T16159] veth0_macvtap: entered promiscuous mode [ 295.755862][T16461] netlink: 404 bytes leftover after parsing attributes in process `syz.1.3010'. [ 295.767141][T16461] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3010'. [ 295.781858][T16159] veth1_macvtap: entered promiscuous mode [ 295.813996][T16159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.838868][T16159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.883955][ T60] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.914902][ T60] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.938723][ T60] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.955010][ T60] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.960861][T16467] netlink: 'syz.2.3013': attribute type 5 has an invalid length. [ 296.110378][T16476] netlink: 'syz.5.3018': attribute type 7 has an invalid length. [ 296.217952][ T7222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.245389][ T7222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.348432][ T7222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.356392][ T7222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.443775][T16493] set match dimension is over the limit! [ 296.478484][ T5830] Bluetooth: hci6: command tx timeout [ 297.341731][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 297.354881][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 297.363860][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 297.375883][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 297.385298][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 297.500161][T16532] wg1 speed is unknown, defaulting to 1000 [ 297.542998][T16537] xt_NFQUEUE: number of total queues is 0 [ 297.631416][T16540] SET target dimension over the limit! [ 297.780244][T16552] bridge18: entered promiscuous mode [ 297.798291][T16552] bridge18: entered allmulticast mode [ 298.089930][T16532] chnl_net:caif_netlink_parms(): no params data found [ 298.151718][T16574] team_slave_0: entered promiscuous mode [ 298.157905][T16574] team_slave_1: entered promiscuous mode [ 298.170329][T16574] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 298.179702][T16574] team0: Device macvtap1 is already an upper device of the team interface [ 298.192617][T16574] team_slave_0: left promiscuous mode [ 298.198128][T16574] team_slave_1: left promiscuous mode [ 298.213045][T16579] netlink: 'syz.4.3045': attribute type 15 has an invalid length. [ 298.285946][T16575] vlan0: entered promiscuous mode [ 298.286603][T16579] netlink: 'syz.4.3045': attribute type 1 has an invalid length. [ 298.297422][T16575] vlan0: entered allmulticast mode [ 298.304354][T16575] veth0_vlan: entered allmulticast mode [ 298.365846][T16585] __nla_validate_parse: 12 callbacks suppressed [ 298.365866][T16585] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3046'. [ 298.368099][T16579] bond11 (unregistering): Released all slaves [ 298.375183][T16585] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3046'. [ 298.406152][T16586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3045'. [ 298.406864][T16585] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3046'. [ 298.420770][T16586] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3045'. [ 298.505928][T16532] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.513850][T16532] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.521697][T16532] bridge_slave_0: entered allmulticast mode [ 298.529835][T16532] bridge_slave_0: entered promiscuous mode [ 298.542265][T16532] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.550565][T16532] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.560016][T16532] bridge_slave_1: entered allmulticast mode [ 298.568005][ T52] Bluetooth: hci6: command tx timeout [ 298.568812][T16532] bridge_slave_1: entered promiscuous mode [ 298.659879][T16532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.675672][T16532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.726652][T16594] tipc: Enabling of bearer rejected, failed to enable media [ 298.739232][T16532] team0: Port device team_slave_0 added [ 298.758938][T16532] team0: Port device team_slave_1 added [ 298.845130][T16532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.861005][T16532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 298.899007][T16532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.934017][T16532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.944423][T16532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 298.972573][T16532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.987395][T16604] netlink: 'syz.4.3051': attribute type 30 has an invalid length. [ 299.007596][T16604] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3051'. [ 299.047223][T16605] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3052'. [ 299.283019][T16610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.301251][T16532] hsr_slave_0: entered promiscuous mode [ 299.308580][T16532] hsr_slave_1: entered promiscuous mode [ 299.315126][T16532] debugfs: 'hsr0' already exists in 'hsr' [ 299.321095][T16532] Cannot create hsr debugfs directory [ 299.439629][ T52] Bluetooth: hci2: command tx timeout [ 299.697267][ T30] audit: type=1800 audit(1761656791.004:3): pid=16627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3058" name="memory.events" dev="tmpfs" ino=3273 res=0 errno=0 [ 299.855985][T16532] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.878679][T16532] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 299.900385][T16532] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 299.916502][ T7310] IPVS: starting estimator thread 0... [ 299.922418][T16639] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3062'. [ 299.922527][T16636] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 299.932508][T16532] netdevsim netdevsim2 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 300.047698][T16532] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.058621][T16638] IPVS: using max 24 ests per chain, 57600 per kthread [ 300.089766][T16532] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 300.108418][T16532] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 300.127266][T16532] netdevsim netdevsim2 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 300.221698][T16532] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.257457][T16532] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 300.274691][T16532] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 300.291963][T16532] netdevsim netdevsim2 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 300.393799][T16532] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.424002][T16532] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 300.442878][T16532] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 300.458102][T16532] netdevsim netdevsim2 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 300.698471][T16670] netlink: 'syz.5.3071': attribute type 2 has an invalid length. [ 300.725282][T16670] xt_policy: output policy not valid in PREROUTING and INPUT [ 300.791962][T16670] netlink: 'syz.5.3071': attribute type 1 has an invalid length. [ 300.810173][T16670] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3071'. [ 300.829014][T16671] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3071'. [ 300.863911][T16532] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 300.905385][T16532] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 300.916013][T16682] delete_channel: no stack [ 300.964254][T16532] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 300.985007][T16532] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 301.001856][T16684] lo: entered promiscuous mode [ 301.014081][T16684] tunl0: entered promiscuous mode [ 301.022827][T16684] gre0: entered promiscuous mode [ 301.041499][T16684] gretap0: entered promiscuous mode [ 301.061465][T16684] erspan0: entered promiscuous mode [ 301.082981][T16684] ip_vti0: entered promiscuous mode [ 301.109028][T16684] ip6_vti0: entered promiscuous mode [ 301.131274][T16684] sit0: entered promiscuous mode [ 301.155834][T16684] ip6tnl0: entered promiscuous mode [ 301.171557][T16684] ip6gre0: entered promiscuous mode [ 301.182872][T16684] syz_tun: entered promiscuous mode [ 301.192614][T16684] ip6gretap0: entered promiscuous mode [ 301.238004][T16684] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.247153][T16684] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.271876][T16684] bridge0: entered promiscuous mode [ 301.355130][T16704] veth0: entered promiscuous mode [ 301.452677][T16694] veth0: left promiscuous mode [ 301.521506][ T52] Bluetooth: hci2: command tx timeout [ 301.713217][T16532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.750832][T16532] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.799569][ T4531] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.806825][ T4531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.841761][ T4531] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.849089][ T4531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.945254][ T60] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.989572][T16739] netlink: 'syz.3.3087': attribute type 1 has an invalid length. [ 301.993587][ T60] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.010447][ T60] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.033406][ T60] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.437798][T16769] xt_addrtype: ipv6 does not support BROADCAST matching [ 302.659057][T16532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.255870][T16802] netlink: 'syz.3.3101': attribute type 1 has an invalid length. [ 303.440908][T16800] __nla_validate_parse: 13 callbacks suppressed [ 303.440930][T16800] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3101'. [ 303.488274][T16802] bond1: entered promiscuous mode [ 303.495371][T16802] 8021q: adding VLAN 0 to HW filter on device bond1 [ 303.594133][T16532] veth0_vlan: entered promiscuous mode [ 303.600840][ T5830] Bluetooth: hci2: command tx timeout [ 303.649727][T16532] veth1_vlan: entered promiscuous mode [ 303.708722][T16812] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 303.762714][T16821] netlink: 'syz.4.3105': attribute type 24 has an invalid length. [ 303.788603][T16820] xt_CT: You must specify a L4 protocol and not use inversions on it [ 303.806307][T16532] veth0_macvtap: entered promiscuous mode [ 303.835409][T16532] veth1_macvtap: entered promiscuous mode [ 303.923289][T16532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.972333][T16532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.035245][ T60] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.057455][ T60] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.067700][ T60] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.097402][ T60] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.106927][T16831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3109'. [ 304.129094][T16831] IPVS: length: 48 != 8 [ 304.162721][T16833] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3110'. [ 304.219077][T16833] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3110'. [ 304.284693][T16842] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.295172][T16847] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3114'. [ 304.296367][T16842] batadv_slave_0: entered promiscuous mode [ 304.310468][T16842] batadv_slave_0: entered allmulticast mode [ 304.334069][T16847] netlink: zone id is out of range [ 304.339918][T16847] netlink: zone id is out of range [ 304.345465][T16847] netlink: zone id is out of range [ 304.351809][T16847] netlink: get zone limit has 4 unknown bytes [ 304.529214][ T4531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.553992][ T4531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.634556][ T7222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.650380][T16864] veth0_to_team: entered promiscuous mode [ 304.658068][ T7222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.699012][T16863] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.3117'. [ 304.708430][T16863] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.3117'. [ 304.849640][T16876] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3119'. [ 304.874059][T16878] Unsupported ieee802154 address type: 0 [ 304.915008][T16883] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3121'. [ 304.947105][T16883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3121'. [ 305.060569][T16883] bond11: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 305.102935][T16883] bond11 (unregistering): Released all slaves [ 305.574259][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 305.586443][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 305.603150][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 305.646208][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 305.654209][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 305.677111][ T5830] Bluetooth: hci2: command 0x0419 tx timeout [ 305.712566][T16908] wg1 speed is unknown, defaulting to 1000 [ 306.377716][T16948] netlink: 'syz.5.3139': attribute type 7 has an invalid length. [ 306.383733][T16908] chnl_net:caif_netlink_parms(): no params data found [ 306.397737][T16948] netlink: 'syz.5.3139': attribute type 8 has an invalid length. [ 306.918606][T16908] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.930320][T16908] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.938098][T16908] bridge_slave_0: entered allmulticast mode [ 306.962334][T16908] bridge_slave_0: entered promiscuous mode [ 306.985909][T16908] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.004123][T16908] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.015539][T16908] bridge_slave_1: entered allmulticast mode [ 307.025344][T16908] bridge_slave_1: entered promiscuous mode [ 307.098354][T16974] netlink: 'syz.4.3145': attribute type 7 has an invalid length. [ 307.122601][T16908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.138310][T16908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.149814][T16972] netlink: 'syz.2.3144': attribute type 30 has an invalid length. [ 307.177381][T16974] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 307.266416][T16972] bond1: option arp_missed_max: invalid value (0) [ 307.280296][T16972] bond1: option arp_missed_max: allowed values 1 - 255 [ 307.293008][T16972] bond1 (unregistering): Released all slaves [ 307.444231][T16908] team0: Port device team_slave_0 added [ 307.509537][T16908] team0: Port device team_slave_1 added [ 307.519367][T16985] netlink: 'syz.3.3147': attribute type 5 has an invalid length. [ 307.528958][T16985] netlink: 'syz.3.3147': attribute type 6 has an invalid length. [ 307.759606][ T5833] Bluetooth: hci2: command 0x0419 tx timeout [ 307.759612][ T52] Bluetooth: hci4: command tx timeout [ 307.785119][T16908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.794079][T16908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 307.821660][T16908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.834882][T16908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.845493][T16908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 307.898687][T16908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.208505][T16908] hsr_slave_0: entered promiscuous mode [ 308.220964][T16908] hsr_slave_1: entered promiscuous mode [ 308.231232][T16908] debugfs: 'hsr0' already exists in 'hsr' [ 308.240327][T16908] Cannot create hsr debugfs directory [ 308.314001][T17016] pim6reg: left allmulticast mode [ 308.376342][T17020] bridge_slave_1: left allmulticast mode [ 308.384173][T17020] bridge_slave_1: left promiscuous mode [ 308.394519][T17020] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.439880][T17020] bridge_slave_0: left allmulticast mode [ 308.446119][T17020] bridge_slave_0: left promiscuous mode [ 308.453986][T17020] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.578972][T17038] netlink: 'syz.2.3157': attribute type 1 has an invalid length. [ 308.926430][T17043] netlink: 'syz.2.3161': attribute type 11 has an invalid length. [ 308.947237][T17043] __nla_validate_parse: 10 callbacks suppressed [ 308.947259][T17043] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3161'. [ 308.991391][T17049] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3162'. [ 309.032838][T17049] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3162'. [ 309.093815][T17057] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3164'. [ 309.139540][T16908] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.162986][T16908] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 309.187473][T17059] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3166'. [ 309.245872][T17065] netlink: del zone limit has 4 unknown bytes [ 309.252134][T17068] netlink: 'syz.5.3169': attribute type 1 has an invalid length. [ 309.299090][T17069] bond1: (slave bridge0): making interface the new active one [ 309.308739][T17069] bond1: (slave bridge0): Enslaving as an active interface with an up link [ 309.362148][T16908] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.373391][T16908] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 309.420016][T17074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3170'. [ 309.456363][T16908] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.475324][T16908] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 309.588974][T16908] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.616110][T16908] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 309.645757][T17083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3176'. [ 309.838243][ T52] Bluetooth: hci4: command tx timeout [ 310.007290][T16908] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 310.049275][T16908] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 310.083709][T16908] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 310.145428][T16908] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 310.370098][T17129] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 310.429129][T17139] netlink: 'syz.4.3188': attribute type 23 has an invalid length. [ 310.538651][T16908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.589773][T16908] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.605923][ T7174] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.613333][ T7174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.654000][ T7213] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.661284][ T7213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.082954][T17170] netlink: 'syz.2.3197': attribute type 4 has an invalid length. [ 311.098264][T17170] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3197'. [ 311.430293][T17184] SET target dimension over the limit! [ 311.446036][T16908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.482588][T17192] tipc: Started in network mode [ 311.497398][T17192] tipc: Node identity 3ef01fbd8937, cluster identity 4711 [ 311.504768][T17192] tipc: Enabled bearer , priority 0 [ 311.553188][T17188] syzkaller0: entered promiscuous mode [ 311.563215][T17188] syzkaller0: entered allmulticast mode [ 311.594421][T17188] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 311.674125][T17188] tipc: Resetting bearer [ 311.682573][ T56] block nbd0: Possible stuck request ffff88802501e000: control (read@0,1024B). Runtime 210 seconds [ 311.694286][ T56] block nbd0: Possible stuck request ffff88802501e1c0: control (read@1024,1024B). Runtime 210 seconds [ 311.709700][ T56] block nbd0: Possible stuck request ffff88802501e380: control (read@2048,1024B). Runtime 210 seconds [ 311.721738][T17197] netlink: 'syz.4.3204': attribute type 12 has an invalid length. [ 311.724158][ T56] block nbd0: Possible stuck request ffff88802501e540: control (read@3072,1024B). Runtime 210 seconds [ 311.801690][T17197] bond11: option primary_reselect: invalid value (255) [ 311.813922][T17197] bond11 (unregistering): Released all slaves [ 311.826328][T17201] netlink: 'syz.4.3204': attribute type 16 has an invalid length. [ 311.851370][T17201] netlink: 'syz.4.3204': attribute type 17 has an invalid length. [ 311.862326][T17201] netlink: 'syz.4.3204': attribute type 27 has an invalid length. [ 311.872402][T17186] tipc: Resetting bearer [ 311.904953][T17186] tipc: Disabling bearer [ 311.922433][ T52] Bluetooth: hci4: command tx timeout [ 312.086352][T16908] veth0_vlan: entered promiscuous mode [ 312.134463][T16908] veth1_vlan: entered promiscuous mode [ 312.235146][T16908] veth0_macvtap: entered promiscuous mode [ 312.261837][T16908] veth1_macvtap: entered promiscuous mode [ 312.325297][T16908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.359755][T16908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.432666][ T7174] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.457183][ T7174] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.537734][ T7174] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.554749][ T7174] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.571072][T17236] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3216'. [ 312.582654][T17236] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3216'. [ 312.728597][ T7209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.744789][ T7209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.814699][ T7209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.825511][ T7209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.885425][T17248] ip6t_srh: unknown srh invflags 4000 [ 313.020738][T17252] gre0: entered promiscuous mode [ 313.577585][T17274] xt_l2tp: missing protocol rule (udp|l2tpip) [ 313.849561][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 313.859789][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 313.879552][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 313.889008][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 313.912971][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 313.925393][T17288] netlink: 'syz.2.3232': attribute type 10 has an invalid length. [ 313.972849][T17288] batman_adv: batadv0: Adding interface: netdevsim0 [ 313.988897][T17291] netlink: 'syz.1.3234': attribute type 10 has an invalid length. [ 313.993674][T17295] __nla_validate_parse: 5 callbacks suppressed [ 313.993699][T17295] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3235'. [ 314.003745][T17288] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 314.004775][ T52] Bluetooth: hci4: command tx timeout [ 314.017254][T17288] batman_adv: batadv0: Interface activated: netdevsim0 [ 314.049994][T17295] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 314.123445][T17293] bond2: entered allmulticast mode [ 314.137766][T17293] 8021q: adding VLAN 0 to HW filter on device bond2 [ 314.169720][T17291] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 314.262411][T17309] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3238'. [ 314.275389][T17309] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3238'. [ 314.277287][T17287] wg1 speed is unknown, defaulting to 1000 [ 314.478129][T17317] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 314.630915][T17325] netlink: 'syz.5.3243': attribute type 29 has an invalid length. [ 314.922555][T17287] chnl_net:caif_netlink_parms(): no params data found [ 315.446574][T17343] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3245'. [ 315.457212][T17343] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3245'. [ 315.532976][T17349] netlink: 'syz.3.3248': attribute type 10 has an invalid length. [ 315.541018][T17349] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3248'. [ 315.552806][T17287] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.560483][T17287] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.569110][T17287] bridge_slave_0: entered allmulticast mode [ 315.578281][T17287] bridge_slave_0: entered promiscuous mode [ 315.588485][T17287] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.595702][T17287] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.606180][T17347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3245'. [ 315.615957][T17287] bridge_slave_1: entered allmulticast mode [ 315.624605][T17287] bridge_slave_1: entered promiscuous mode [ 315.632388][T17350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3247'. [ 315.647014][T17349] batadv0: entered promiscuous mode [ 315.652361][T17349] batadv0: entered allmulticast mode [ 315.667963][T17349] bridge0: port 3(batadv0) entered blocking state [ 315.674579][T17349] bridge0: port 3(batadv0) entered disabled state [ 315.706116][T17349] bridge0: port 3(batadv0) entered blocking state [ 315.712816][T17349] bridge0: port 3(batadv0) entered forwarding state [ 315.786560][T17357] netlink: 'syz.5.3250': attribute type 21 has an invalid length. [ 315.832762][T17357] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3250'. [ 315.870912][T17287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.901198][T17287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.918040][T17359] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3251'. [ 315.924071][T17361] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 315.997227][ T52] Bluetooth: hci1: command tx timeout [ 316.007689][ T7209] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 316.017146][ T7209] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 316.031812][T17287] team0: Port device team_slave_0 added [ 316.054260][T17287] team0: Port device team_slave_1 added [ 316.182551][T17287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.189976][T17371] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 316.214983][T17287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 316.245971][T17287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.274807][T17287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.309791][T17287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 316.337989][T17287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.764654][T17387] team0 (unregistering): Port device team_slave_0 removed [ 316.779142][T17387] team0 (unregistering): Port device team_slave_1 removed [ 316.839305][T17402] netlink: 'syz.5.3265': attribute type 13 has an invalid length. [ 316.853998][T17391] bond2 (unregistering): Released all slaves [ 316.893398][T17287] hsr_slave_0: entered promiscuous mode [ 316.901204][T17287] hsr_slave_1: entered promiscuous mode [ 316.922957][T17287] debugfs: 'hsr0' already exists in 'hsr' [ 316.929573][T17287] Cannot create hsr debugfs directory [ 316.942605][T17402] gretap0: refused to change device tx_queue_len [ 316.950006][T17402] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 317.367822][T17414] syzkaller0: entered promiscuous mode [ 317.376906][T17414] syzkaller0: entered allmulticast mode [ 317.404972][T17429] netlink: 'syz.5.3274': attribute type 1 has an invalid length. [ 317.423720][T17414] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 317.474173][T17287] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.498582][T17287] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 317.552871][ T7177] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.562692][ T7177] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.588146][T17287] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.600124][T17287] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 317.666651][T17287] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.678506][T17287] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 317.758364][T17287] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.778633][T17287] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 318.082160][ T52] Bluetooth: hci1: command tx timeout [ 318.103057][T17287] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 318.122541][T17287] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 318.143744][T17287] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 318.162932][T17287] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 318.366263][T17464] hsr_slave_1 (unregistering): left promiscuous mode [ 318.578888][T17287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.634019][T17287] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.675327][T17481] netlink: zone id is out of range [ 318.686280][ T4531] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.693643][ T4531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.718430][ T7177] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.725687][ T7177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.918798][ T7222] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.928997][ T7222] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.945964][ T7222] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.995574][ T7222] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.061444][T17495] netlink: 'syz.1.3293': attribute type 1 has an invalid length. [ 319.070968][T17495] netlink: 'syz.1.3293': attribute type 4 has an invalid length. [ 319.081512][T17495] __nla_validate_parse: 11 callbacks suppressed [ 319.081533][T17495] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.3293'. [ 319.105167][T17491] netlink: 'syz.5.3292': attribute type 3 has an invalid length. [ 319.113809][T17491] netlink: 'syz.5.3292': attribute type 3 has an invalid length. [ 319.127021][T17491] netlink: 'syz.5.3292': attribute type 3 has an invalid length. [ 319.138759][T17499] batadv_slave_1: entered promiscuous mode [ 319.181160][T17494] batadv_slave_1: left promiscuous mode [ 319.196666][T17287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.521747][T17519] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3299'. [ 319.680144][T17521] validate_nla: 37 callbacks suppressed [ 319.680165][T17521] netlink: 'syz.2.3300': attribute type 10 has an invalid length. [ 319.702037][T17287] veth0_vlan: entered promiscuous mode [ 319.715821][T17287] veth1_vlan: entered promiscuous mode [ 319.733598][T17530] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 319.744074][T17521] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 319.791680][T17287] veth0_macvtap: entered promiscuous mode [ 319.820179][T17287] veth1_macvtap: entered promiscuous mode [ 319.823895][T17532] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3303'. [ 319.838234][ T52] Bluetooth: hci5: command 0x0c1a tx timeout [ 319.840996][T17432] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 319.859102][T17432] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 319.862684][T17287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.888864][T17287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.905405][ T7213] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.924657][ T7213] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.945394][T17536] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3304'. [ 319.981432][ T7213] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.003812][ T7213] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.017430][T17536] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3304'. [ 320.124427][T17542] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 320.134562][T17545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3307'. [ 320.146254][T17542] bond1 (unregistering): Released all slaves [ 320.150611][T17546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3306'. [ 320.162088][ T52] Bluetooth: hci1: command tx timeout [ 320.172488][T17546] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3306'. [ 320.203439][T17545] netlink: 'syz.2.3307': attribute type 1 has an invalid length. [ 320.211489][T17545] netlink: 'syz.2.3307': attribute type 2 has an invalid length. [ 320.296854][ T5910] IPVS: starting estimator thread 0... [ 320.388345][T17552] IPVS: using max 27 ests per chain, 64800 per kthread [ 320.454707][T17432] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 320.464840][T17551] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 320.481036][T17432] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 320.610223][T17432] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 320.627597][T17432] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 320.727195][T17567] netlink: 'syz.5.3312': attribute type 4 has an invalid length. [ 320.770080][T17432] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 320.798019][T17432] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 320.935803][T17432] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 320.959556][T17432] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 321.153291][ T7174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.197718][ T7174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.228789][T17586] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3321'. [ 321.298621][T17588] bond0: entered promiscuous mode [ 321.307500][T17588] bond_slave_0: entered promiscuous mode [ 321.313413][T17588] bond_slave_1: entered promiscuous mode [ 321.323409][T17588] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 321.339764][T17588] batadv0: entered promiscuous mode [ 321.348143][T17588] debugfs: 'hsr1' already exists in 'hsr' [ 321.354077][T17578] infiniband syz0: set active [ 321.359828][T17578] infiniband syz0: added bond_slave_0 [ 321.363679][T17588] Cannot create hsr debugfs directory [ 321.374295][T17588] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 321.410971][ T7177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.434327][ T7177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.512178][T17578] RDS/IB: syz0: added [ 321.516462][T17578] smc: adding ib device syz0 with port count 1 [ 321.545164][T17578] smc: ib device syz0 port 1 has no pnetid [ 321.575139][T17594] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 321.895785][T17623] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3326'. [ 322.169171][T17634] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.247188][ T30] audit: type=1800 audit(1761656813.574:4): pid=17637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3329" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=29 res=0 errno=0 [ 322.287904][T17634] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.358569][T17644] netlink: 'syz.1.3330': attribute type 1 has an invalid length. [ 322.563019][T17657] netlink: 'syz.3.3333': attribute type 10 has an invalid length. [ 322.583147][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.769597][T17669] netlink: 'syz.1.3340': attribute type 1 has an invalid length. [ 322.790447][T17669] netlink: 'syz.1.3340': attribute type 2 has an invalid length. [ 322.815597][T17669] netlink: 'syz.1.3340': attribute type 1 has an invalid length. [ 322.963716][T17675] bond3: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 322.976189][T17675] bond3: entered allmulticast mode [ 323.341840][T17697] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 323.403172][T17698] tipc: Started in network mode [ 323.417045][T17698] tipc: Node identity e0000002, cluster identity 4711 [ 323.434236][T17698] tipc: Enabling of bearer rejected, failed to enable media [ 324.059871][T17734] netlink: 'syz.5.3358': attribute type 14 has an invalid length. [ 324.374661][ T918] IPVS: starting estimator thread 0... [ 324.474912][T17754] IPVS: using max 28 ests per chain, 67200 per kthread [ 324.741048][T17772] __nla_validate_parse: 8 callbacks suppressed [ 324.741069][T17772] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3371'. [ 324.789965][T17770] validate_nla: 1 callbacks suppressed [ 324.789990][T17770] netlink: 'syz.5.3370': attribute type 21 has an invalid length. [ 325.003401][T17787] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3375'. [ 325.356843][T17806] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3381'. [ 325.568098][T17813] netlink: 216 bytes leftover after parsing attributes in process `syz.5.3383'. [ 325.592755][T17813] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3383'. [ 325.827964][T17824] netlink: 'syz.1.3386': attribute type 2 has an invalid length. [ 325.836141][T17824] netlink: 'syz.1.3386': attribute type 1 has an invalid length. [ 325.919964][T17828] syzkaller0: entered promiscuous mode [ 325.925601][T17828] syzkaller0: entered allmulticast mode [ 326.048205][T17838] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3390'. [ 327.620423][T17839] bridge2: entered promiscuous mode [ 327.625886][T17839] bridge2: entered allmulticast mode [ 327.825231][T17858] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3395'. [ 328.451361][T17884] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3405'. [ 328.495672][T17884] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3405'. [ 328.688965][T17898] xt_hashlimit: size too large, truncated to 1048576 [ 328.901574][T17907] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3409'. [ 329.397928][T17927] netlink: 'syz.2.3415': attribute type 4 has an invalid length. [ 329.794815][T17950] __nla_validate_parse: 6 callbacks suppressed [ 329.794836][T17950] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3423'. [ 329.832755][T17950] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3423'. [ 329.875577][T17959] netlink: 'syz.3.3425': attribute type 25 has an invalid length. [ 329.893809][T17959] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3425'. [ 330.309891][T17977] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3430'. [ 330.492552][T17987] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3434'. [ 330.595595][T17997] openvswitch: netlink: Flow actions attr not present in new flow. [ 330.637633][T17998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3438'. [ 330.654442][T17994] bond4: invalid ARP target 0.0.0.0 specified for addition [ 330.672682][T17994] bond4: option arp_ip_target: invalid value (0) [ 330.684982][T18000] Cannot find set identified by id 0 to match [ 330.700263][T17994] bond4 (unregistering): Released all slaves [ 330.801969][T17998] netlink: 'syz.2.3438': attribute type 33 has an invalid length. [ 330.810779][T17998] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3438'. [ 331.084694][T18022] netlink: 'syz.3.3445': attribute type 1 has an invalid length. [ 331.095184][T18022] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3445'. [ 331.217782][T18024] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 331.246592][T18024] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 331.265254][T18024] gretap1: entered promiscuous mode [ 331.274059][T18024] gretap1: entered allmulticast mode [ 331.461199][T18045] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3452'. [ 331.723029][T18064] netlink: 'syz.3.3456': attribute type 10 has an invalid length. [ 331.733004][T18064] veth0_virt_wifi: entered allmulticast mode [ 331.803379][T18064] team0: Port device veth0_virt_wifi added [ 331.844688][T18069] nbd: must specify a device to reconfigure [ 331.896503][T18064] vlan2: entered promiscuous mode [ 331.902357][T18064] bridge0: entered promiscuous mode [ 332.150512][T18085] block nbd5: not configured, cannot reconfigure [ 332.185912][T18089] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 332.613014][T18117] netlink: 'syz.1.3472': attribute type 3 has an invalid length. [ 332.643148][T18117] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3472'. [ 332.653404][T18129] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 332.828293][T18138] FAULT_INJECTION: forcing a failure. [ 332.828293][T18138] name failslab, interval 1, probability 0, space 0, times 1 [ 332.878199][T18138] CPU: 1 UID: 0 PID: 18138 Comm: syz.3.3477 Not tainted syzkaller #0 PREEMPT(full) [ 332.878232][T18138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 332.878245][T18138] Call Trace: [ 332.878254][T18138] [ 332.878264][T18138] dump_stack_lvl+0x189/0x250 [ 332.878300][T18138] ? __pfx____ratelimit+0x10/0x10 [ 332.878328][T18138] ? __pfx_dump_stack_lvl+0x10/0x10 [ 332.878358][T18138] ? __pfx__printk+0x10/0x10 [ 332.878387][T18138] ? __pfx___might_resched+0x10/0x10 [ 332.878416][T18138] should_fail_ex+0x414/0x560 [ 332.878455][T18138] should_failslab+0xa8/0x100 [ 332.878480][T18138] kmem_cache_alloc_node_noprof+0x77/0x710 [ 332.878511][T18138] ? __alloc_skb+0x112/0x2d0 [ 332.878550][T18138] __alloc_skb+0x112/0x2d0 [ 332.878587][T18138] netlink_ack+0x146/0xa50 [ 332.878616][T18138] ? __pfx_genl_rcv_msg+0x10/0x10 [ 332.878640][T18138] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 332.878663][T18138] ? __pfx_nl80211_post_doit+0x10/0x10 [ 332.878686][T18138] ? __asan_memcpy+0x40/0x70 [ 332.878713][T18138] ? __pfx_ref_tracker_free+0x10/0x10 [ 332.878742][T18138] netlink_rcv_skb+0x28c/0x470 [ 332.878773][T18138] ? __lock_acquire+0xab9/0xd20 [ 332.878794][T18138] ? __pfx_genl_rcv_msg+0x10/0x10 [ 332.878822][T18138] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 332.878876][T18138] ? down_read+0x1ad/0x2e0 [ 332.878911][T18138] genl_rcv+0x28/0x40 [ 332.878935][T18138] netlink_unicast+0x82f/0x9e0 [ 332.878975][T18138] ? __pfx_netlink_unicast+0x10/0x10 [ 332.879008][T18138] ? netlink_sendmsg+0x642/0xb30 [ 332.879034][T18138] netlink_sendmsg+0x805/0xb30 [ 332.879065][T18138] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.879102][T18138] ? __lock_acquire+0xab9/0xd20 [ 332.879129][T18138] ? aa_sock_msg_perm+0xf1/0x1d0 [ 332.879163][T18138] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 332.879184][T18138] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.879218][T18138] __sock_sendmsg+0x21c/0x270 [ 332.879250][T18138] ____sys_sendmsg+0x505/0x830 [ 332.879279][T18138] ? __pfx_____sys_sendmsg+0x10/0x10 [ 332.879313][T18138] ? import_iovec+0x74/0xa0 [ 332.879344][T18138] ___sys_sendmsg+0x21f/0x2a0 [ 332.879370][T18138] ? __pfx____sys_sendmsg+0x10/0x10 [ 332.879434][T18138] ? __fget_files+0x2a/0x420 [ 332.879454][T18138] ? __fget_files+0x3a0/0x420 [ 332.879487][T18138] __x64_sys_sendmsg+0x19b/0x260 [ 332.879513][T18138] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 332.879547][T18138] ? __pfx_ksys_write+0x10/0x10 [ 332.879582][T18138] ? do_syscall_64+0xbe/0xfa0 [ 332.879615][T18138] do_syscall_64+0xfa/0xfa0 [ 332.879641][T18138] ? lockdep_hardirqs_on+0x9c/0x150 [ 332.879668][T18138] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.879690][T18138] ? clear_bhb_loop+0x60/0xb0 [ 332.879717][T18138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.879737][T18138] RIP: 0033:0x7f9a2678efc9 [ 332.879758][T18138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.879776][T18138] RSP: 002b:00007f9a27711038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 332.879800][T18138] RAX: ffffffffffffffda RBX: 00007f9a269e5fa0 RCX: 00007f9a2678efc9 [ 332.879816][T18138] RDX: 0000000000000080 RSI: 0000200000000380 RDI: 0000000000000003 [ 332.879829][T18138] RBP: 00007f9a27711090 R08: 0000000000000000 R09: 0000000000000000 [ 332.879843][T18138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.879855][T18138] R13: 00007f9a269e6038 R14: 00007f9a269e5fa0 R15: 00007ffea2cd92a8 [ 332.879891][T18138] [ 333.312652][T18145] netlink: 'syz.5.3479': attribute type 1 has an invalid length. [ 333.400887][T18145] 8021q: adding VLAN 0 to HW filter on device bond4 [ 333.512836][T18159] bond4: (slave veth3): Enslaving as an active interface with a down link [ 333.589203][T18145] veth5: entered promiscuous mode [ 333.599236][T18145] bond4: (slave veth5): Enslaving as an active interface with a down link [ 333.638216][T18173] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 333.648494][T18166] xfrm1: entered promiscuous mode [ 333.653684][T18166] xfrm1: entered allmulticast mode [ 334.072243][T18195] º: renamed from veth1_vlan (while UP) [ 334.353404][T18217] netlink: 'syz.5.3502': attribute type 11 has an invalid length. [ 334.367251][T18219] netlink: 'syz.5.3502': attribute type 11 has an invalid length. [ 334.547997][T18225] syzkaller0: entered promiscuous mode [ 334.553707][T18225] syzkaller0: entered allmulticast mode [ 334.603520][T18230] netlink: 'syz.4.3504': attribute type 1 has an invalid length. [ 334.808138][T18238] __nla_validate_parse: 9 callbacks suppressed [ 334.808160][T18238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3509'. [ 334.830624][T18238] netlink: 'syz.1.3509': attribute type 27 has an invalid length. [ 334.848753][T18238] netlink: 'syz.1.3509': attribute type 4 has an invalid length. [ 334.867254][T18238] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3509'. [ 334.963948][T18245] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3513'. [ 335.220375][ T5832] IPVS: starting estimator thread 0... [ 335.328293][T18266] IPVS: using max 24 ests per chain, 57600 per kthread [ 335.492809][T18276] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3517'. [ 335.681634][ T52] Bluetooth: hci0: command tx timeout [ 335.703574][T18285] netlink: 'syz.4.3519': attribute type 1 has an invalid length. [ 335.721317][T18290] lo: left promiscuous mode [ 335.750291][T18290] tunl0: left promiscuous mode [ 335.755442][T18290] gre0: left promiscuous mode [ 335.768843][T18290] gretap0: left promiscuous mode [ 335.788315][T18290] erspan0: left promiscuous mode [ 335.800377][T18290] ip_vti0: left promiscuous mode [ 335.813161][T18290] ip6_vti0: left promiscuous mode [ 335.820400][T18290] sit0: left promiscuous mode [ 335.825791][T18290] ip6tnl0: left promiscuous mode [ 335.832175][T18290] ip6gre0: left promiscuous mode [ 335.842964][T18290] syz_tun: left promiscuous mode [ 335.849195][T18290] ip6gretap0: left promiscuous mode [ 336.125962][T18290] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 336.149298][T18289] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3521'. [ 336.165839][T18291] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3520'. [ 336.355605][T18306] xt_cgroup: xt_cgroup: no path or classid specified [ 336.937110][T18342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3536'. [ 337.053650][T18355] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3541'. [ 337.391690][T18369] tipc: Enabled bearer , priority 10 [ 337.527021][T18383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3551'. [ 337.564001][T18387] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20001 [ 337.805566][T18402] tipc: Started in network mode [ 337.815303][T18402] tipc: Node identity 050000000000000008, cluster identity 4711 [ 337.853199][T18405] syzkaller0: entered promiscuous mode [ 337.859274][T18405] syzkaller0: entered allmulticast mode [ 337.871590][T18405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3555'. [ 337.901817][T18405] xt_hashlimit: size too large, truncated to 1048576 [ 338.507055][ T918] tipc: Node number set to 3758096386 [ 338.629483][T18417] bond2: entered promiscuous mode [ 338.643412][T18417] bond2: entered allmulticast mode [ 338.650891][T18417] 8021q: adding VLAN 0 to HW filter on device bond2 [ 339.046880][T18449] netlink: 'syz.4.3565': attribute type 24 has an invalid length. [ 339.191763][T18458] netlink: 'syz.2.3569': attribute type 9 has an invalid length. [ 339.205800][T18458] netlink: 'syz.2.3569': attribute type 6 has an invalid length. [ 339.281383][T18461] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 339.422427][T18469] netlink: 'syz.3.3574': attribute type 1 has an invalid length. [ 339.431599][T18469] netlink: 'syz.3.3574': attribute type 4 has an invalid length. [ 339.553345][T18472] xt_bpf: check failed: parse error [ 339.707755][T18490] netlink: 'syz.4.3581': attribute type 4 has an invalid length. [ 339.747634][T18490] netlink: 'syz.4.3581': attribute type 10 has an invalid length. [ 339.751301][T18491] netlink: 'syz.4.3581': attribute type 10 has an invalid length. [ 339.802038][T18491] team0: Port device dummy0 added [ 339.957397][T18505] netlink: 'syz.4.3585': attribute type 21 has an invalid length. [ 339.981865][T18505] __nla_validate_parse: 3 callbacks suppressed [ 339.981885][T18505] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3585'. [ 340.031089][T18505] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3585'. [ 340.158854][T18515] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3588'. [ 340.532846][T18527] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3593'. [ 340.553425][T18527] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 340.857857][T18539] dvmrp0: entered allmulticast mode [ 341.015486][T18545] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3598'. [ 341.075378][T18550] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3599'. [ 341.115486][T18550] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 341.173864][T18557] netlink: 11 bytes leftover after parsing attributes in process `syz.4.3601'. [ 341.195937][T18559] netlink: 'syz.1.3602': attribute type 1 has an invalid length. [ 341.261536][T18560] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3602'. [ 341.270881][T18560] openvswitch: netlink: Key 32 has unexpected len 1026 expected 2 [ 341.289628][T18567] SET target dimension over the limit! [ 341.302786][T18571] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve1, syncid = 0, id = 0 [ 341.532286][T18583] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3610'. [ 341.562999][T18585] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 341.570416][T18585] IPv6: NLM_F_CREATE should be set when creating new route [ 341.577757][T18585] IPv6: NLM_F_CREATE should be set when creating new route [ 341.585132][T18585] IPv6: NLM_F_CREATE should be set when creating new route [ 341.611139][T18585] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 341.634761][T18581] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3609'. [ 341.759042][ T56] block nbd0: Possible stuck request ffff88802501e000: control (read@0,1024B). Runtime 240 seconds [ 341.770523][ T56] block nbd0: Possible stuck request ffff88802501e1c0: control (read@1024,1024B). Runtime 240 seconds [ 341.781746][ T56] block nbd0: Possible stuck request ffff88802501e380: control (read@2048,1024B). Runtime 240 seconds [ 341.793257][ T56] block nbd0: Possible stuck request ffff88802501e540: control (read@3072,1024B). Runtime 240 seconds [ 342.178473][T18620] netlink: 'syz.2.3621': attribute type 12 has an invalid length. [ 342.197730][T18608] netlink: 'syz.5.3616': attribute type 1 has an invalid length. [ 342.220805][T18608] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 342.939548][T18628] team0 (unregistering): Port device team_slave_0 removed [ 342.960964][T18628] team0 (unregistering): Port device team_slave_1 removed [ 342.970602][T18628] team0 (unregistering): Port device dummy0 removed [ 343.002985][T18632] vlan2: entered allmulticast mode [ 343.008824][T18632] gretap0: entered allmulticast mode [ 343.226601][T18652] xt_hashlimit: size too large, truncated to 1048576 [ 343.281849][T18654] IPVS: Unknown mcast interface: veth1_to_hsr [ 343.933833][T18686] bridge2: entered promiscuous mode [ 343.949100][T18686] bridge2: entered allmulticast mode [ 344.148894][T18691] syzkaller0: entered promiscuous mode [ 344.154449][T18691] syzkaller0: entered allmulticast mode [ 344.247680][T18698] syzkaller1: entered promiscuous mode [ 344.256386][T18698] syzkaller1: entered allmulticast mode [ 344.265651][T18691] tipc: Started in network mode [ 344.273482][T18695] sctp: [Deprecated]: syz.5.3643 (pid 18695) Use of int in maxseg socket option. [ 344.273482][T18695] Use struct sctp_assoc_value instead [ 344.292856][T18691] tipc: Node identity 92bc307b307a, cluster identity 4711 [ 344.301047][T18691] tipc: Enabled bearer , priority 0 [ 344.372498][T18690] tipc: Resetting bearer [ 344.423320][T18690] tipc: Disabling bearer [ 344.796560][T18734] xt_l2tp: v2 doesn't support IP mode [ 344.914002][T18742] xt_CT: No such helper "snmp_trap" [ 344.948747][T18742] sctp: [Deprecated]: syz.4.3655 (pid 18742) Use of int in maxseg socket option. [ 344.948747][T18742] Use struct sctp_assoc_value instead [ 344.975694][T18748] netlink: 'syz.1.3656': attribute type 6 has an invalid length. [ 345.463297][T18772] syzkaller0: entered promiscuous mode [ 345.469176][T18772] syzkaller0: entered allmulticast mode [ 345.470948][T18771] __nla_validate_parse: 5 callbacks suppressed [ 345.470968][T18771] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3664'. [ 345.772348][T18775] team0 (unregistering): Port device team_slave_0 removed [ 345.786218][T18775] team0 (unregistering): Port device team_slave_1 removed [ 346.093877][T18803] netlink: 'syz.4.3671': attribute type 3 has an invalid length. [ 346.184845][T18806] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3672'. [ 346.194735][T18806] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 346.202236][T18806] IPv6: NLM_F_CREATE should be set when creating new route [ 346.377435][T18813] geneve2: entered promiscuous mode [ 346.387431][T18813] geneve2: entered allmulticast mode [ 346.564624][T18827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3677'. [ 346.575335][T18826] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3678'. [ 346.606579][T18827] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3677'. [ 346.608221][T18826] netem: invalid attributes len -24 [ 346.655812][T18826] netem: change failed [ 346.655986][T18833] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3678'. [ 346.734381][T18833] vlan3: entered allmulticast mode [ 346.743511][T18833] erspan0: entered allmulticast mode [ 346.942054][T18847] tipc: Invalid UDP bearer configuration [ 346.942115][T18847] tipc: Enabling of bearer rejected, failed to enable media [ 347.012970][T18851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3685'. [ 347.111958][T18867] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.3688'. [ 347.310057][T18885] tipc: New replicast peer: 255.255.255.255 [ 347.342488][T18891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3695'. [ 347.399418][T18885] tipc: Enabled bearer , priority 10 [ 347.416407][T18892] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3692'. [ 348.231942][T18891] hsr_slave_1 (unregistering): left promiscuous mode [ 348.367055][T18900] bond2: Removing last arp target with arp_interval on [ 348.462899][T18904] bond3: Removing last arp target with arp_interval on [ 348.497314][ T7317] tipc: Node number set to 218103808 [ 348.519808][T18925] gre0: left promiscuous mode [ 348.936334][T18946] netlink: 'syz.4.3712': attribute type 1 has an invalid length. [ 349.045543][T18955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.168650][T18960] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 349.228276][T18962] smc: net device vcan0 applied user defined pnetid SYZ1 [ 349.322318][T18968] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 349.340855][T18968] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 349.360993][ T7174] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 349.383111][ T7174] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 349.412690][ T7174] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 349.442352][ T7174] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 349.503095][T18974] netlink: 'syz.3.3721': attribute type 1 has an invalid length. [ 349.550269][T18974] bond2: entered promiscuous mode [ 349.559292][T18974] 8021q: adding VLAN 0 to HW filter on device bond2 [ 349.633932][T18974] bond2: (slave bridge4): making interface the new active one [ 349.677307][T18974] bridge4: entered promiscuous mode [ 349.684781][T18974] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 349.719646][T18984] syzkaller0: entered promiscuous mode [ 349.725194][T18984] syzkaller0: entered allmulticast mode [ 349.915909][T18994] xt_hashlimit: max too large, truncated to 1048576 [ 350.003741][T18995] tipc: Enabling of bearer rejected, failed to enable media [ 350.015915][T18994] netlink: 'syz.2.3730': attribute type 1 has an invalid length. [ 350.061576][T19000] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.271742][T19000] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.323718][T18996] netlink: 'syz.1.3728': attribute type 12 has an invalid length. [ 350.633594][T19031] netlink: 'syz.1.3735': attribute type 6 has an invalid length. [ 350.783852][ T7177] tipc: Subscription rejected, illegal request [ 350.892189][T19052] __nla_validate_parse: 9 callbacks suppressed [ 350.892210][T19052] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3739'. [ 350.930298][T19051] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3741'. [ 350.942698][T19049] xt_hashlimit: max too large, truncated to 1048576 [ 350.970070][T19051] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.978593][T19051] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.191734][T19062] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3743'. [ 351.252122][T19062] 8021q: adding VLAN 0 to HW filter on device bond5 [ 351.532044][T19084] gre1: entered promiscuous mode [ 351.537939][T19084] gre1: entered allmulticast mode [ 351.596520][T19088] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3751'. [ 351.627904][T19088] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3751'. [ 351.798938][T19099] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3756'. [ 351.850953][T19105] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3757'. [ 351.893065][T19099] 8021q: adding VLAN 0 to HW filter on device bond3 [ 351.966676][T19114] netlink: 'syz.4.3759': attribute type 7 has an invalid length. [ 351.977900][T19114] netlink: 'syz.4.3759': attribute type 8 has an invalid length. [ 352.072664][T19099] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3756'. [ 352.162053][T19120] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3761'. [ 352.237660][T19120] netlink: 'syz.1.3761': attribute type 7 has an invalid length. [ 352.251557][T19120] netlink: 'syz.1.3761': attribute type 8 has an invalid length. [ 352.260572][T19120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3761'. [ 352.369321][T19141] netlink: 'syz.5.3762': attribute type 23 has an invalid length. [ 352.903431][T19174] syzkaller0: entered allmulticast mode [ 353.323760][T19196] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 353.387970][T19196] x_tables: duplicate underflow at hook 3 [ 353.499603][T19208] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 353.794389][T19220] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 354.019449][T19226] validate_nla: 1 callbacks suppressed [ 354.019468][T19226] netlink: 'syz.4.3789': attribute type 10 has an invalid length. [ 354.060542][T19226] bridge_slave_1: left allmulticast mode [ 354.077623][T19226] bridge_slave_1: left promiscuous mode [ 354.089380][T19226] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.104767][T19226] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 354.409414][T19255] xt_l2tp: v2 tid > 0xffff: 1114244 [ 354.552050][T19246] hsr_slave_1 (unregistering): left promiscuous mode [ 354.737869][T19267] netlink: 'syz.2.3798': attribute type 11 has an invalid length. [ 354.796027][T19268] netlink: 'syz.4.3799': attribute type 3 has an invalid length. [ 354.808686][T19268] netlink: 'syz.4.3799': attribute type 1 has an invalid length. [ 355.184643][T19293] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 355.213909][T19293] bond1 (unregistering): Released all slaves [ 355.580123][T19318] openvswitch: netlink: Missing valid actions attribute. [ 355.588902][T19318] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 355.782952][T19319] veth1_macvtap: left promiscuous mode [ 355.793372][T19319] macsec0: entered promiscuous mode [ 355.810513][T19319] macsec0: entered allmulticast mode [ 355.852186][T19320] veth1_macvtap: entered promiscuous mode [ 355.860713][T19320] veth1_macvtap: entered allmulticast mode [ 355.868412][T19320] macsec0: left promiscuous mode [ 355.873834][T19320] macsec0: left allmulticast mode [ 355.879192][T19320] veth1_macvtap: left allmulticast mode [ 355.923976][T19331] netlink: 'syz.2.3818': attribute type 18 has an invalid length. [ 355.946657][T19319] veth1_macvtap: left promiscuous mode [ 355.953143][T19319] macsec0: entered promiscuous mode [ 355.959284][T19319] macsec0: entered allmulticast mode [ 355.994463][T19320] veth1_macvtap: entered promiscuous mode [ 356.004517][T19320] veth1_macvtap: entered allmulticast mode [ 356.021857][T19320] macsec0: left promiscuous mode [ 356.039258][T19320] macsec0: left allmulticast mode [ 356.044453][T19320] veth1_macvtap: left allmulticast mode [ 356.075873][T19334] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 356.107797][T19334] __nla_validate_parse: 13 callbacks suppressed [ 356.107819][T19334] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3819'. [ 356.450502][T19355] netlink: 'syz.4.3826': attribute type 10 has an invalid length. [ 356.612719][T19367] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3825'. [ 356.710949][T19375] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3830'. [ 356.855835][T19382] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3833'. [ 356.855963][T19384] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3834'. [ 356.876255][T19382] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3833'. [ 356.897613][T19384] netlink: 'syz.2.3834': attribute type 11 has an invalid length. [ 356.930483][T19384] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3834'. [ 356.949323][T19387] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3835'. [ 356.951298][T19384] netlink: 'syz.2.3834': attribute type 11 has an invalid length. [ 356.999396][T19384] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3834'. [ 357.009017][T19384] netlink: 'syz.2.3834': attribute type 11 has an invalid length. [ 357.018962][T19384] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3834'. [ 357.028591][T19384] netlink: 'syz.2.3834': attribute type 11 has an invalid length. [ 357.038387][T19384] netlink: 'syz.2.3834': attribute type 11 has an invalid length. [ 357.867470][T19437] bond4: option lp_interval: invalid value (0) [ 357.888842][T19437] bond4: option lp_interval: allowed values 1 - 2147483647 [ 357.891638][T19449] batman_adv: batadv0: adding TT local entry 06:e1:05:00:07:00 to non-existent VLAN 1280 [ 357.914466][T19437] bond4 (unregistering): Released all slaves [ 357.965794][T19449] tipc: Enabled bearer , priority 0 [ 357.976105][T19449] syzkaller0: MTU too low for tipc bearer [ 357.986424][T19449] tipc: Disabling bearer [ 358.057131][T19449] macvlan1: entered promiscuous mode [ 358.062714][T19449] macvlan1: entered allmulticast mode [ 358.069772][T19449] º: entered allmulticast mode [ 358.259718][T19470] IPv6: NLM_F_CREATE should be specified when creating new route [ 358.289754][T19477] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 358.576149][T19499] bond6: option xmit_hash_policy: invalid value (64) [ 358.589549][T19499] bond6 (unregistering): Released all slaves [ 358.668889][T19505] tipc: Enabled bearer , priority 0 [ 358.707273][T19505] syzkaller0: entered promiscuous mode [ 358.720468][T19505] syzkaller0: entered allmulticast mode [ 358.760800][T19505] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 358.803002][T19505] tipc: Resetting bearer [ 358.884075][T19514] 8021q: adding VLAN 0 to HW filter on device bond3 [ 358.893717][T19504] tipc: Resetting bearer [ 358.933241][T19504] tipc: Disabling bearer [ 359.156111][T19531] ip6erspan0: entered promiscuous mode [ 359.163117][T19531] ip6erspan0: entered allmulticast mode [ 359.209235][T19533] set match dimension is over the limit! [ 359.278970][T19535] validate_nla: 61 callbacks suppressed [ 359.278991][T19535] netlink: 'syz.3.3878': attribute type 1 has an invalid length. [ 359.325762][T19537] IPVS: set_ctl: invalid protocol: 137 172.20.20.170:20001 [ 359.422826][T19550] xt_l2tp: wrong L2TP version: 0 [ 359.975354][T19589] netem: invalid attributes len -24 [ 359.982305][T19589] netem: change failed [ 359.989421][T19590] tipc: Enabled bearer , priority 0 [ 360.030208][T19590] tipc: Disabling bearer [ 360.522321][T19620] openvswitch: netlink: Message has 1 unknown bytes. [ 360.591605][T19620] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 360.976377][T19642] netlink: 'syz.4.3907': attribute type 1 has an invalid length. [ 361.127607][T19646] bond4: (slave gretap2): making interface the new active one [ 361.146534][T19646] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 361.235769][T19659] __nla_validate_parse: 76 callbacks suppressed [ 361.235791][T19659] netlink: 51 bytes leftover after parsing attributes in process `syz.3.3912'. [ 361.258707][T19659] netlink: 51 bytes leftover after parsing attributes in process `syz.3.3912'. [ 361.467795][T19677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3919'. [ 361.500926][T19677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3919'. [ 361.585523][T19684] bridge0: port 3(syz_tun) entered blocking state [ 361.607800][T19684] bridge0: port 3(syz_tun) entered disabled state [ 361.617550][T19684] syz_tun: entered allmulticast mode [ 361.659878][T19690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3921'. [ 361.660076][T19684] syz_tun: entered promiscuous mode [ 361.680431][T19684] bridge0: port 3(syz_tun) entered blocking state [ 361.687666][T19684] bridge0: port 3(syz_tun) entered forwarding state [ 361.717914][T19690] bridge0: port 3(batadv0) entered disabled state [ 361.740711][T19690] bridge_slave_1: left allmulticast mode [ 361.746663][T19690] bridge_slave_1: left promiscuous mode [ 361.753367][T19690] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.772226][T19690] bridge_slave_0: left allmulticast mode [ 361.786940][T19690] bridge_slave_0: left promiscuous mode [ 361.797242][T19690] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.869217][T19694] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 361.879684][T19700] netlink: 7 bytes leftover after parsing attributes in process `syz.4.3926'. [ 362.155201][T19694] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 362.228739][T19716] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3930'. [ 362.265792][T19714] tipc: Enabled bearer , priority 0 [ 362.283530][T19714] syzkaller0: entered promiscuous mode [ 362.293606][T19714] syzkaller0: entered allmulticast mode [ 362.301346][T19722] netlink: 'syz.1.3932': attribute type 2 has an invalid length. [ 362.316103][T19722] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 362.348688][T19714] tipc: Resetting bearer [ 362.360916][T19712] tipc: Resetting bearer [ 362.386100][T19712] tipc: Disabling bearer [ 362.756041][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 362.770937][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 363.555421][T19785] º: renamed from veth1_vlan (while UP) [ 363.775207][T19797] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3957'. [ 363.880511][T19802] bond0: (slave bond_slave_0): Releasing backup interface [ 363.979638][T19802] bond0: (slave bond_slave_1): Releasing backup interface [ 364.100753][T19802] team0: Port device team_slave_0 removed [ 364.125765][T19802] team0: Port device team_slave_1 removed [ 364.148116][T19802] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.188969][T19802] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.213898][T19802] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 364.313236][T19816] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3965'. [ 364.411822][T19821] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3968'. [ 364.450928][T19818] vlan2: entered promiscuous mode [ 364.456084][T19818] bridge0: entered promiscuous mode [ 364.466084][T19821] netlink: 'syz.4.3968': attribute type 7 has an invalid length. [ 364.493046][T19818] bond0: (slave bond_slave_1): Releasing backup interface [ 364.858245][T19833] syzkaller0: entered promiscuous mode [ 364.863965][T19833] syzkaller0: entered allmulticast mode [ 364.933001][T19850] netlink: 'syz.1.3976': attribute type 1 has an invalid length. [ 366.632557][T19850] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 366.831068][T19873] __nla_validate_parse: 2 callbacks suppressed [ 366.831090][T19873] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3980'. [ 367.034828][T19884] vlan0: entered allmulticast mode [ 367.043550][T19884] hsr0: entered allmulticast mode [ 367.048895][T19884] hsr_slave_0: entered allmulticast mode [ 367.681814][T19922] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3995'. [ 367.732484][T19924] º: renamed from veth1_vlan (while UP) [ 367.759436][T19922] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3995'. [ 367.841373][T19933] xt_hashlimit: size too large, truncated to 1048576 [ 367.995104][T19940] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4001'. [ 368.065739][T19940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4001'. [ 368.096816][T19940] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4001'. [ 368.125738][T19949] netlink: 'syz.4.4001': attribute type 1 has an invalid length. [ 368.166157][T19940] veth3: entered promiscuous mode [ 368.253698][T19949] veth3: entered promiscuous mode [ 368.553412][T19953] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.867635][T19953] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.522808][T19966] x_tables: unsorted entry at hook 2 [ 369.563846][T19953] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.637072][T19953] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.940493][T19953] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.969729][T19953] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.993619][T19994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4011'. [ 370.230625][T20003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4015'. [ 370.241453][T19998] tipc: Enabled bearer , priority 0 [ 370.259670][T20003] xfrm1: entered promiscuous mode [ 370.264979][T20003] xfrm1: entered allmulticast mode [ 370.272629][T19998] syzkaller0: entered promiscuous mode [ 370.296951][T19998] syzkaller0: entered allmulticast mode [ 370.347040][ T7209] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.375908][ T7209] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.460029][ T7209] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.476977][ T7209] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.486388][T20000] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 370.539874][ T60] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.548425][ T60] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.664377][ T60] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.676545][ T60] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.700288][T19997] tipc: Resetting bearer [ 370.720525][T19997] tipc: Disabling bearer [ 371.839156][ T56] block nbd0: Possible stuck request ffff88802501e000: control (read@0,1024B). Runtime 270 seconds [ 371.850236][ T56] block nbd0: Possible stuck request ffff88802501e1c0: control (read@1024,1024B). Runtime 270 seconds [ 371.861909][ T56] block nbd0: Possible stuck request ffff88802501e380: control (read@2048,1024B). Runtime 270 seconds [ 371.873134][ T56] block nbd0: Possible stuck request ffff88802501e540: control (read@3072,1024B). Runtime 270 seconds [ 384.000670][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 395.760396][T20023] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4023'. [ 395.775405][T20027] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4022'. [ 395.776263][T20028] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 395.957629][T20036] netlink: 'syz.2.4027': attribute type 10 has an invalid length. [ 395.965640][T20036] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4027'. [ 395.970535][T20039] netlink: 'syz.3.4028': attribute type 2 has an invalid length. [ 395.991569][T20036] dummy0: entered promiscuous mode [ 395.999635][T20042] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4029'. [ 396.009915][T20036] bridge0: port 3(dummy0) entered blocking state [ 396.016524][T20036] bridge0: port 3(dummy0) entered disabled state [ 396.024483][T20036] dummy0: entered allmulticast mode [ 396.035686][T20031] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4026'. [ 396.050918][T20039] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4028'. [ 396.067528][T20039] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4028'. [ 396.097585][T20033] wg1 speed is unknown, defaulting to 1000 [ 396.097800][T20039] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4028'. [ 396.117083][T20039] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4028'. [ 396.345861][T20053] syzkaller0: entered promiscuous mode [ 396.362342][T20053] syzkaller0: entered allmulticast mode [ 396.390670][T20054] xt_cgroup: invalid path, errno=-2 [ 396.421232][T20057] netlink: 'syz.5.4033': attribute type 5 has an invalid length. [ 396.449966][T20050] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4030'. [ 396.683563][T20068] netlink: 'syz.3.4034': attribute type 1 has an invalid length. [ 396.923064][T20075] wg1 speed is unknown, defaulting to 1000 [ 397.075516][T20095] netlink: 'syz.2.4043': attribute type 2 has an invalid length. [ 397.098420][T20095] netlink: 'syz.2.4043': attribute type 1 has an invalid length. [ 397.115778][T20097] 8021q: VLANs not supported on caif0 [ 397.146233][T20099] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 397.345418][T20103] netlink: 'syz.4.4046': attribute type 1 has an invalid length. [ 397.353880][T20103] netlink: 'syz.4.4046': attribute type 3 has an invalid length. [ 397.418014][T20103] NCSI netlink: No device for ifindex 813332851 [ 397.889308][T20142] bridge0: port 4(veth0_to_bridge) entered blocking state [ 397.898368][T20142] bridge0: port 4(veth0_to_bridge) entered disabled state [ 397.911350][T20142] veth0_to_bridge: entered allmulticast mode [ 397.919673][T20142] veth0_to_bridge: entered promiscuous mode [ 397.925901][T20142] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 397.963190][T20142] bridge0: port 4(veth0_to_bridge) entered blocking state [ 397.970573][T20142] bridge0: port 4(veth0_to_bridge) entered forwarding state [ 398.627898][T20198] netlink: 'syz.5.4072': attribute type 1 has an invalid length. [ 398.772272][T20202] netlink: 'syz.5.4075': attribute type 10 has an invalid length. [ 398.785778][T20202] veth1_macvtap: left promiscuous mode [ 399.146642][ T7213] tipc: Subscription rejected, illegal request [ 399.168951][T20210] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.176323][T20210] bridge0: port 1(bridge_slave_0) entered listening state [ 399.191632][T20210] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 399.221047][T20223] ipvlan0: entered promiscuous mode [ 399.872867][T20253] veth1_macvtap: left promiscuous mode [ 399.902878][T20253] macsec0: entered promiscuous mode [ 399.923143][T20253] macsec0: entered allmulticast mode [ 399.977879][T20260] veth1_macvtap: entered promiscuous mode [ 399.992213][T20260] veth1_macvtap: entered allmulticast mode [ 400.011689][T20260] macsec0: left promiscuous mode [ 400.028708][T20260] macsec0: left allmulticast mode [ 400.035776][T20260] veth1_macvtap: left allmulticast mode [ 400.263894][T20278] tipc: Enabled bearer , priority 10 [ 400.274478][T20276] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 400.319407][T20276] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 400.464787][T20289] syzkaller0: entered promiscuous mode [ 400.473053][T20289] syzkaller0: entered allmulticast mode [ 401.017975][T20317] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 401.043893][T20318] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 401.056244][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 401.057926][T20317] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 401.068484][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 401.080394][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 401.092014][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 401.103958][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 401.115932][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 401.208877][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 401.361009][ T5881] tipc: Node number set to 2730897531 [ 403.281083][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.288475][ C0] bridge0: topology change detected, propagating [ 404.196807][ C1] net_ratelimit: 30216 callbacks suppressed [ 404.196831][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 404.196858][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 404.203008][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 404.215034][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 404.227091][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 404.239077][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 404.250980][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 404.263077][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 404.275103][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 404.286964][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 406.335998][ C1] sched: DL replenish lagged too much [ 409.206820][ C1] net_ratelimit: 48279 callbacks suppressed [ 409.206847][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 409.206853][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 409.207070][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 409.213028][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 409.225051][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 409.237039][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 409.249017][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 409.261161][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 409.273110][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 409.285258][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 413.204157][T14930] unregister_netdevice: waiting for syz_tun to become free. Usage count = 2 [ 413.221341][T14930] ref_tracker: netdev@ffff8880496dc618 has 1/1 users at [ 413.221341][T14930] ib_device_set_netdev+0x31f/0x6d0 [ 413.221341][T14930] rxe_register_device+0x1c7/0x310 [ 413.221341][T14930] rxe_net_add+0x81/0x110 [ 413.221341][T14930] rxe_newlink+0xdd/0x190 [ 413.221341][T14930] nldev_newlink+0x4a5/0x5a0 [ 413.221341][T14930] rdma_nl_rcv+0x6ae/0x980 [ 413.221341][T14930] netlink_unicast+0x82f/0x9e0 [ 413.221341][T14930] netlink_sendmsg+0x805/0xb30 [ 413.221341][T14930] __sock_sendmsg+0x21c/0x270 [ 413.221341][T14930] ____sys_sendmsg+0x505/0x830 [ 413.221341][T14930] ___sys_sendmsg+0x21f/0x2a0 [ 413.221341][T14930] __x64_sys_sendmsg+0x19b/0x260 [ 413.221341][T14930] do_syscall_64+0xfa/0xfa0 [ 413.221341][T14930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.221341][T14930] [ 414.216738][ C0] net_ratelimit: 48459 callbacks suppressed [ 414.216761][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 414.216873][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 414.223022][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 414.235069][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 414.247822][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 414.259800][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 414.271611][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 414.283673][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 414.296682][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 414.307732][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 419.226766][ C1] net_ratelimit: 49331 callbacks suppressed [ 419.226790][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 419.226810][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 419.233012][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 419.244927][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 419.257127][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 419.269232][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 419.281173][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 419.293039][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 419.305065][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 419.321409][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 421.260945][ T56] block nbd0: Possible stuck request ffff88802501e000: control (read@0,1024B). Runtime 300 seconds [ 421.280433][ T56] block nbd0: Possible stuck request ffff88802501e1c0: control (read@1024,1024B). Runtime 300 seconds [ 421.299582][ T56] block nbd0: Possible stuck request ffff88802501e380: control (read@2048,1024B). Runtime 300 seconds [ 421.332573][ T56] block nbd0: Possible stuck request ffff88802501e540: control (read@3072,1024B). Runtime 300 seconds