last executing test programs: 4.543619361s ago: executing program 2 (id=664): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000000)=@ethtool_channels={0x1, 0x4, 0x4, 0x1ff, 0x3, 0x7fffffff, 0x80, 0x101, 0x8}}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f00000016c0)={'batadv_slave_0\x00'}) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8}, 0x94) getsockname$tipc(r2, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000000)=@ethtool_channels={0x1, 0x4, 0x4, 0x1ff, 0x3, 0x7fffffff, 0x80, 0x101, 0x8}}) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f00000016c0)={'batadv_slave_0\x00'}) (async) socket(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00'}) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8}, 0x94) (async) getsockname$tipc(r2, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10) (async) 4.30305811s ago: executing program 1 (id=667): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000001500)=@raw={'raw\x00', 0x8, 0x3, 0xb20, 0x0, 0x43, 0xa0, 0x0, 0x98, 0xa88, 0x178, 0x178, 0xa88, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@owner={{0x38}, {0xee01, 0x0, 0x0, 0x0, 0x1}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x888, 0x8c8, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x9}, {0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0xb1d}, {0x3}, {0x8}, {0x2, 0x3}, {0x3}, {0x103}], [{0xe8f3, 0x5}, {0x1d, 0x6}, {0x4, 0x8}, {0x0, 0x4}, {0x4, 0xc3e}, {0x1, 0x100}, {0x6, 0x7}, {0x3, 0x3}, {0xf2, 0x3}, {0x3ff, 0x8}, {0x10, 0x3}], 0x6, 0x6}, {[{0x80, 0x3}, {0x2}, {0x6, 0x1}, {0x355cbac3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x7}, {0xe7, 0x2}, {0x3, 0x3}, {0x5598e8fe, 0x2}, {0x6, 0x1}], [{0x9, 0x9097}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x20080, 0x5}, {0x13, 0xc0000000}, {0x40, 0xb}, {0x9, 0x6}, {0x4, 0x2}, {0x6, 0x7fffffff}, {0x7fffffff, 0x400}], 0x7}, {[{0x84, 0x2}, {}, {0x0, 0x2}, {0xffffffff, 0x1}, {}, {0x5, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x2, 0x3}, {0x8, 0x1}, {0x7}], [{0x9, 0x5}, {0x80, 0x32}, {0x0, 0xfffffff7}, {0xff, 0x1}, {0x7, 0x6}, {0xdb9, 0xff4}, {0x6, 0x3ff}, {0x3, 0x6}, {0x5, 0x10}, {0x9, 0x6}, {0x10000, 0x2}], 0x4, 0x2a}, {[{0x3, 0x2}, {0xa, 0x1}, {0x6, 0x1}, {0x10, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x3, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x2}, {0x477d, 0x1}], [{0x4, 0xffffffff}, {0x200, 0x6}, {0x4be1, 0x4044}, {0x1}, {0x5, 0xc}, {0x3, 0x4}, {0x2, 0x4}, {0x800, 0x8000}, {0x8, 0x800}, {0x3, 0x2}, {0xe, 0x8000}], 0x4, 0xb}, {[{0x7, 0x1}, {0xd, 0x3}, {0x5}, {0x61}, {0x9}, {}, {0x2}, {0x1}, {0x0, 0x2}, {0x9, 0x3}, {0x5, 0x3}], [{0x58d, 0x3ff}, {0x0, 0x7f}, {0x6}, {0xfc9b, 0x80000001}, {0x101, 0x7}, {0x7, 0x1}, {0x7, 0x8001}, {0x2, 0x1}, {0x2, 0x2}, {0x9, 0x4cf}, {0x7, 0x10000}], 0x1}, {[{0x2}, {0x9}, {0x8, 0x1}, {0x2, 0x3}, {0x71, 0x3}, {0x0, 0x2}, {0xe, 0x2}, {0x6, 0x2}, {0x5}, {0x3000000, 0x3}, {0x6, 0x1}], [{0x9, 0x3}, {0x5, 0x7fffffff}, {0xffff, 0x4}, {0x0, 0x7}, {0x8, 0xb502}, {0x1ff, 0x86}, {0x6, 0xffffffff}, {0x3, 0x4}, {0x5, 0x6}, {0xf, 0xf93}, {0x5, 0x4}], 0x3, 0x3}, {[{0x7, 0x1}, {0x3, 0x1}, {0x45d7}, {0xfff, 0x3}, {0xc4f, 0x3}, {0x0, 0x2}, {0x400, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xfffffffd}, {0x2}], [{0x3, 0x6}, {0xed, 0xd}, {0x80, 0xb81d}, {0x2ca, 0x80000000}, {0x8, 0xff}, {0x7, 0x45a8}, {0x8, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0xfc, 0x6}, {0xd, 0x138c}], 0x6}, {[{0x4, 0x1}, {0x800}, {0x9, 0x2}, {0xf0000000, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x8, 0x2}, {}, {0x9}, {0x400, 0x2}, {0x8, 0x3}], [{0x7, 0xfffffffd}, {0x2}, {0x2, 0x2}, {0x8f, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0xb, 0x82c6}, {0xb1b}, {0xbd5c, 0xffff}, {0x1, 0x9b8d}, {0xec, 0x5}], 0x2, 0x6}, {[{0x8}, {0x0, 0x1}, {0xac000000}, {0x6, 0x2}, {0x2d8, 0x3}, {0x7e3ea4bc}, {0x8, 0x1}, {0x4f, 0x3}, {0x4, 0x2}, {0xfffffff7}, {0x3, 0x2}], [{0x5, 0x42}, {0x76a74689, 0x4}, {0x1}, {0x8000, 0x7}, {0x400, 0xdd}, {0xfff, 0x8}, {0x76b, 0xfffffffe}, {0xa6d00, 0xfffffff7}, {0x10001, 0xfc8d}, {0x0, 0x10001}, {0x4, 0x3}], 0x1, 0x9}, {[{0x8, 0x1}, {0x3, 0x3}, {0x18, 0x3}, {0x3ff, 0x3}, {0x7fffffff}, {0x8}, {0x1, 0x3}, {0x8, 0x3}, {0xf1b6}, {0x80, 0x3}, {0x4, 0x2}], [{0x2, 0x4}, {0x3, 0xf}, {0x9, 0x6}, {0x7f, 0x8}, {0x7, 0x273e1899}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0xb7}, {0x8, 0x3}, {0x3, 0x1}, {0x7ff, 0x63}], 0xb, 0x3}, {[{0x1, 0x2}, {0x6, 0x3}, {0xffff, 0x1}, {0x1}, {0x4, 0x3}, {0x4, 0x3}, {0xaa7}, {0x100, 0x3}, {0x2}, {0xfffffff7, 0xb90af65875a5dc08}, {0x4, 0x3}], [{0x3}, {0x8001, 0x7}, {0x10000, 0x7524}, {0x73d, 0x4}, {0x0, 0x280000}, {0x3, 0x3af}, {0x5, 0x2}, {0x101, 0xbf}, {0x10000, 0x6}, {0x3, 0x800}], 0x8, 0x5}], 0x3}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xb80) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) 4.227186638s ago: executing program 2 (id=668): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x4, @loopback, 0x3, 0x2}, 0x80, &(0x7f00000015c0)}, 0x10) socket(0x10, 0x3, 0xfffffffc) r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0104000000000000000002000000400004803c0001800b00010065787468647200002c000280050002000000000008000340000001010800044000000000080006400000000108000740000000000900010073"], 0x94}}, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r2, 0x215eb000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x14, 0x2, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000240)="41d09292b4f9babe89cd637b86", 0xd, 0x40000, &(0x7f0000000200)={0x11, 0x17, r3, 0x1, 0x4, 0x6, @link_local}, 0x14) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xa}, {}, {0xb, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004844) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x4, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 4.015246088s ago: executing program 0 (id=670): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f00000003c0)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @ldst={0x2, 0x3, 0x3, 0xa, 0x0, 0xffffffffffffffc0, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) syz_emit_ethernet(0x87a2f, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vlan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="02030e00d3fc02000000ab5d71b9edd7c9560385dcb188a8", 0x18, 0x1d75ace51f32de09, &(0x7f00000001c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'tunl0\x00', r3, 0x8, 0x10, 0x8000, 0x2, {{0x16, 0x4, 0x3, 0x4, 0x58, 0x68, 0x0, 0x99, 0x4, 0x0, @local, @broadcast, {[@lsrr={0x83, 0xf, 0x73, [@broadcast, @private=0xa010102, @loopback]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x13, 0x99, [@local, @remote, @dev={0xac, 0x14, 0x14, 0x31}, @dev={0xac, 0x14, 0x14, 0x25}]}, @ssrr={0x89, 0xf, 0x1a, [@local, @local, @dev={0xac, 0x14, 0x14, 0x21}]}, @timestamp_addr={0x44, 0xc, 0xd0, 0x1, 0x7, [{@empty, 0x8}]}, @noop]}}}}}) 3.848376203s ago: executing program 1 (id=671): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000810}, 0x40000) 3.668474396s ago: executing program 0 (id=673): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c000000170a01040000000000000000010000040c00054000000000000000010c0005400000006c256b94040900020073797a32000000000900020073797a31000000000c000540010000000000000108000740000000000900010073797a30"], 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x20008020) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c58b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x6, 0x2, @TCA_ETF_PARMS={0x8, 0x1, {0x0, 0x0, 0x2}}}}]}, 0x40}}, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000180)={0x1d, r8, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'gretap0\x00', &(0x7f0000000340)={'gretap0\x00', 0x0, 0x8, 0x1, 0x40, 0x509, {{0xe, 0x4, 0x2, 0x2, 0x38, 0x68, 0x0, 0x5, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x29, 0x3, 0x2, [{@private=0xa010101, 0x3}, {@multicast2, 0x6}, {@rand_addr=0x64010100}, {@multicast2, 0xfd}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="8000000010000305000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="0088000050080100580012800c0001006d6163766c616e004800028008000100100000001c0005800a000400aaaaaaaaaa3b00000a000400aaaaaaaaaabb0000080003000300000008000300020000000800030002000000080007000500000008000500", @ANYRES32=r13], 0x80}}, 0x4) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000480)={@local, 0x0}, &(0x7f00000004c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000500)={'vcan0\x00', 0x0}) r16 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$nl_route(r16, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="f5b1020000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r17, @ANYBLOB="08001f0002"], 0x44}}, 0x800) r18 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r18, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r18, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r19, @ANYBLOB="003000000000000014001a8010000580"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x8000) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000540)=0x0, &(0x7f0000000580)=0x4) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000040), 0xc, &(0x7f0000001180)={&(0x7f0000001200)=ANY=[@ANYBLOB="c8060000", @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="2801028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400070000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r2, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400ff07000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004007203000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r20, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000100000008000100", @ANYRES32=r17, @ANYBLOB="f00002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000100040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r2, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004001309000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000100000008000100", @ANYRES32=r3, @ANYBLOB="33ff02803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r6, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="3c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400520500004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="ac01028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000100008008000700000000003c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d00003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r13, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000900000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000200000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040003000000080007000000000008000100", @ANYRES32=r14, @ANYBLOB="4400028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000600000008000600", @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=r17, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f636f756e7400000000007aec370dc5469f16cd7f17000000000000000000050003000300000095", @ANYRES32=r19, @ANYBLOB="4400028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB='\b\x00\a\x00\x00\x00\x00\x00'], 0x6c8}, 0x1, 0x0, 0x0, 0x80}, 0x0) 3.598205459s ago: executing program 1 (id=675): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000030000000900010073797a310000000014000000020a010400000000000000000000000020000000000a010800000000000000000a0000000900010073797a31fe00000034000000140a030000000000000000000300000008000340000000000900010073797a3100000000090002"], 0xb0}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000002c00000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f00000001c0)={0x1d, r3}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=@can={{0x2, 0x0, 0x0, 0x1}, 0x4, 0x3, 0x0, 0x0, "985300"}, 0x10}}, 0xd209f6d814827b17) read(r2, &(0x7f0000002fc0)=""/52, 0x34) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_CLIENT(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4edc94ab94e31605}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0004adbd7000fbdbdf25540000000a0006000802110000010000"], 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000023c0)={r1, 0x58, &(0x7f00000014c0)}, 0x10) 3.158289544s ago: executing program 0 (id=679): r0 = socket$nl_route(0x10, 0x3, 0x0) getpid() getpid() sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@RTM_NEWNSID={0x14, 0x58, 0x100, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000090) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@RTM_NEWNSID={0x14, 0x58, 0x100, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000090) 2.967098019s ago: executing program 0 (id=681): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4001000010000100fefffffffddbdf25fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000803c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0200000000000000ffffffffffffffff2a000000000000001f00000000000000b80700000000000002000000fcffffffbcffffff2abd700400000000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0002"], 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendto$inet(r1, 0x0, 0x0, 0x440c0, &(0x7f0000000440)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket(0x2a, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r3, @ANYRES16], 0x14}}, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000005c0)=0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x6}]}}}]}, 0x58}}, 0x0) r9 = getgid() sendmsg$unix(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000003c0)="4553f5fd1c832576233ceece7f163842e4d77df97c5e67597ba5e69879d2b97f174bd65ae5afcd8a2b129c008360102c6427112d45e52737ea16477a2b7eb6b73164d0e5fe5726c05084d1e69d4310df9825adfc2e624e7e02c936fd7f8275c5ffbf500a48cb340ff04ce37f9123daa1a452a1645974af621000911c25343b768b5590df5f6557c64abbe9d9bb49c208c7b77bec94efa2d65a2c07b79854c934148935aae3056b25c3a80c9ceca3950ba3d5c4fa514aca35c806dd97030366deaca45ac088c10f101b3ec0246d66558562ce391436898f793f82b0271b3ac04a69aa876436fff786a732e1d5", 0xec}, {&(0x7f00000004c0)="a267be7bf1791cf62d4bb0a61f0bdd899df57022f2af15c7be3d6f3364b5f8aa6795049d801a07589878", 0x2a}, {&(0x7f0000000500)="13c8b87792d6237a0c97b0748bb341c90ce7fcd55bd9ac7934b246ce440e2e91e267fc1e403e02af0a5b03bc690aa41da27f40760a8483d3e8ae298fcb3cc24717bb2a13d8894309b6efd306d492c697e22dfd560507f7758fe647e9c6c16c49badb90c6e4dff0bac062d30b01b3f337e543c0cc", 0x74}], 0x3, &(0x7f0000000600)=[@cred={{0x1c, 0x1, 0x2, {r5, 0xee01, r9}}}], 0xfffffffffffffe2d, 0x4000806}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24058040}, 0x20044850) socket$netlink(0x10, 0x3, 0x0) r10 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r10, 0x65, 0x7, &(0x7f0000000100)=0x6, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) sendmsg$can_raw(r10, &(0x7f00000000c0)={&(0x7f0000000140)={0x1d, r11}, 0x10, &(0x7f0000000080)={&(0x7f0000000000)=@can={{0x0, 0x0, 0x0, 0x1}, 0xfe, 0x1, 0x4, 0x0, "36e932c486d275cc"}, 0x10}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0xffffffff, [{0x0, 0x3, 0x9}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x4a, 0x0, 0x2}, 0x28) r12 = socket(0x2a, 0x2, 0x0) getsockname$packet(r12, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000005", 0x14, 0x6, 0x0, @private0, @mcast1={0xff, 0x10}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x1, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x1, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) 2.561741863s ago: executing program 2 (id=684): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0b062dbd7000000000003000000008000200", @ANYRES32=r3, @ANYBLOB="05fd3400030000000500360001000000"], 0x34}}, 0x0) r4 = socket$inet_sctp(0x2, 0x400000000001, 0x84) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000005, 0x42073, 0xffffffffffffffff, 0x400000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00'], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r5 = socket$netlink(0x10, 0x3, 0x8) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r6) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="340000006d730100000000002000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140035006d6163766c616e300000000000000000"], 0x34}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000100)=@newlink={0x6c, 0x10, 0x40d, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x600a4, 0x40}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x28, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa, 0x4, @local}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8840}, 0x8000) sendmsg$NL802154_CMD_SET_PAN_ID(r6, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0007004d49c89bd8f4e9160471192de85a5fde40cecccf5466896617adf502d4d8c4c2884a6820b2f85472c5b8565a633fbfae0900593611821d6a6d6bd4c7e1c8fdb6ffda7484cb92825db875f42e5845727300a29569f333bea1491082c2f685762f92a614c764331a40c8dd842e30c4c3e0051b1e9c7453d7ec86cc583ee56893ec0886328822f2be5bf16b70aeccea338588c6f0b25dcb8cdaf1f11f5853fbf86e517e7ebedddc6022cac6614c9ab5db8613daf7cdc3bff7e3e778bc0a2efc13c2848c4446", @ANYRES16=r9, @ANYBLOB="00042bbd7000fbdbdf250a00000008000300", @ANYRES32=r3, @ANYBLOB="0c00060001000000010000000c00060003000000000000000500090000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x80000) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x5, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x4, 0x2, 0x4, 0x6}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8a}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYRES64=r0, @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000080001000000000014000480050003000000000005000300000000000800020001000000d00008800c000780080006000000000024"], 0x108}}, 0x0) sendto$inet(r4, &(0x7f0000000800)='u', 0x1, 0x801, &(0x7f0000000040)={0x2, 0x4e23, @private=0xa010100}, 0x10) listen(r4, 0xda8c) 2.508038703s ago: executing program 1 (id=685): r0 = socket$kcm(0x1e, 0x4, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x1e4, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_xfrm(r2, &(0x7f00000017c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001780)={&(0x7f00000015c0)=@delsa={0x1c0, 0x11, 0x100, 0x70bd2d, 0x25dfdbfb, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2, 0x32}, [@migrate={0x180, 0x11, [{@in6=@local, @in6=@private1, @in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x3c, 0x2, 0x0, 0x3502, 0x2, 0x2}, {@in=@remote, @in6=@private0, @in6=@remote, @in6=@remote, 0x3c, 0x2, 0x0, 0x34ff, 0x2, 0x2}, {@in=@private=0xa010100, @in=@dev={0xac, 0x14, 0x14, 0x23}, @in=@loopback, @in=@multicast1, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@rand_addr=0x64010100, @in6=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@empty, 0x32, 0x3, 0x0, 0x0, 0x2, 0x2}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@rand_addr=0x64010102, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in=@loopback, 0x2b, 0x0, 0x0, 0x0, 0xa, 0x2}]}, @replay_val={0x10, 0xa, {0x70bd29, 0x70bd25, 0x474a}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x5}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x40}, 0x4000810) (async) sendmsg$nl_xfrm(r2, &(0x7f00000017c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001780)={&(0x7f00000015c0)=@delsa={0x1c0, 0x11, 0x100, 0x70bd2d, 0x25dfdbfb, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2, 0x32}, [@migrate={0x180, 0x11, [{@in6=@local, @in6=@private1, @in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x3c, 0x2, 0x0, 0x3502, 0x2, 0x2}, {@in=@remote, @in6=@private0, @in6=@remote, @in6=@remote, 0x3c, 0x2, 0x0, 0x34ff, 0x2, 0x2}, {@in=@private=0xa010100, @in=@dev={0xac, 0x14, 0x14, 0x23}, @in=@loopback, @in=@multicast1, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@rand_addr=0x64010100, @in6=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@empty, 0x32, 0x3, 0x0, 0x0, 0x2, 0x2}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@rand_addr=0x64010102, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in=@loopback, 0x2b, 0x0, 0x0, 0x0, 0xa, 0x2}]}, @replay_val={0x10, 0xa, {0x70bd29, 0x70bd25, 0x474a}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x5}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x40}, 0x4000810) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) recvmmsg$unix(r2, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f0000001800)=""/181, 0xb5}, {&(0x7f00000018c0)=""/223, 0xdf}], 0x3}}], 0x2, 0x40, 0x0) (async) recvmmsg$unix(r2, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f0000001800)=""/181, 0xb5}, {&(0x7f00000018c0)=""/223, 0xdf}], 0x3}}], 0x2, 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYRES32=r1, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYBLOB="5be1dde92654e985effb51dc2f7733381e8677225539c7f98aa8a41cf3f3ef5ce437318b24f03fcadbdf4366ed51a21e65c0c17027e7a69395b9bd04a3f020340e0fbb0f5a3b672ce323351d7517386bdac40bcd3e31e056f39c1eb66179ce2010618d1970c09de07b6a6eef57b08bc4de686c47889ca04b36dda60160f76c3df65d98bd34"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 2.507835775s ago: executing program 4 (id=686): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000800000fffffffffffffff600000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1c, 0x1c, &(0x7f00000006c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x40, 0xfffffffffffffd77, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x16}}, &(0x7f0000000480)='GPL\x00'}, 0x80) 2.413983005s ago: executing program 0 (id=687): syz_emit_ethernet(0x3a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa6c000000a3069078ac362bcab71414aa4e224001", @ANYRES32, @ANYRES32=0x41424344, @ANYBLOB="50eb856d948272f9899425c597ffffffff3cae987ebf798a079dee2642687720e220e5453236a4d810255a5dd8877af03bab54730bc6e4ac7091330c66ffcf446f"], 0x0) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000680)="9211e7bf7c925561a80c481500c82e907d396ec5fbb6f3b363eea05a2262d379939e430cbe1674570e520e9cd01bfcd3199a8016943afd031ee7b2a7e2346cb36d1668ca351d5a8af2c607ecebe2a1cb9031bfb2a5f44df2c6be707a35620b480bca19c1da9e932677907ae3ec439e204cb07d764849411f083286b7bb66b015b5e0f76732097f", 0x87) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000840)={@in={{0x2, 0x4e24, @empty}}, 0x0, 0x0, 0x26, 0x0, "43cad7b04bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7b4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c010105fb7000"}, 0xd8) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f00000005c0)="093e4476b7cfd4bb7227bbd9df12b9ed8a3699390362b8b3f427743d33a347ae", 0x0}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "3f60eb8f2777c39a", "5985e81ad0d9585bc175cbecd3f55eb699e3070cc206f3ba527c85bde06fbf19", "bc5ec28f", "b200"}, 0x38) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='rdma.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x4, &(0x7f00000003c0)=@gcm_128={{0x304}, "657f81b2cf9d8b34", "59850b6385452461f0d61740bfe9ebd2", "ff67ef00", "439c1d863a8d8813"}, 0x28) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000000)=0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r3, 0x215eb000) sendto$packet(r2, &(0x7f0000000740)="9bf977df1ea6181d14b8b57eb8dfb65c16499a4d5182f91f0ab516def6934db3a85bbdb71a7e6bb3f335a796bc83796d126505b718b2cf7cd97ad673fa194270455de5b55bfa6fe87c65ff6659a469801b34fd9a902a1074d0fc5ec9cb8192557f3a6dd119a54cd0ffb1fd27963cd5aa5242ecc919c3cf8d94a0e21cb3aa10ec876fe5cfe535eb616e47a11c5c942d36678c9252dd15892ed7bffad5f753b17b95efe2af", 0xa4, 0x4040081, &(0x7f0000000800)={0x11, 0x5, 0x0, 0x1, 0x6, 0x6, @link_local}, 0x14) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$netlink(0x10, 0x3, 0xb) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000080)='dctcp\x00', 0x6) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x821}, 0x20008888) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000600)={0x8}, 0x10) ioctl$OCFS2_IOC_GROUP_ADD64(r0, 0x40186f03, &(0x7f0000000300)={0x8, 0x37fa, 0x9, 0x10}) 2.265880767s ago: executing program 1 (id=688): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710425000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x36, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20040050) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000080)={@void, @void, @eth={@empty, @random="8bc6002500", @val={@val, {0x8100, 0x0, 0x0, 0x1}}, {@mpls_mc={0x8848, {[], @llc={@llc={0xd4, 0x8, "d3"}}}}}}}, 0x19) 2.188643001s ago: executing program 4 (id=689): r0 = socket(0x10, 0x803, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x4) recvmsg(r0, &(0x7f0000000780)={&(0x7f0000000100)=@generic, 0x80, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/153, 0x99}, {&(0x7f00000002c0)=""/232, 0xe8}, {&(0x7f00000003c0)=""/87, 0x57}, {&(0x7f0000000440)}, {&(0x7f0000000480)=""/37, 0x25}, {&(0x7f00000004c0)=""/96, 0x60}, {&(0x7f0000000540)=""/192, 0xc0}], 0x7, &(0x7f0000000680)=""/252, 0xfc}, 0x10001) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x40000, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10061}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_rxfh={0x1}}) 2.1738472s ago: executing program 3 (id=690): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000100)={0x2}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)) epoll_pwait(r1, &(0x7f0000000180)=[{}], 0x1, 0xc, 0x0, 0x0) 1.751568251s ago: executing program 3 (id=691): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="660a00000000000061119d0000000000850000006300000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r1 = socket(0x10, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x10, 0x7800, 0xfffffff8, 0xff, {{0x17, 0x4, 0x0, 0x9, 0x5c, 0x67, 0x0, 0x0, 0x2f, 0x0, @broadcast, @local, {[@timestamp_addr={0x44, 0xc, 0x80, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x11}, 0x1}]}, @generic={0x86, 0x7, "777bc76150"}, @timestamp_addr={0x44, 0x34, 0xa0, 0x1, 0x7, [{@loopback, 0x1}, {@empty, 0x26}, {@multicast2, 0x4c}, {@broadcast, 0x7}, {@broadcast, 0x10000}, {@multicast1, 0x6}]}]}}}}}) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@can_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}, @CGW_MOD_UID={0x8, 0xe, r4}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x1, 0x1}, 0xa, 0x1, 0x0, 0x0, "0325175362eb4cf2"}, 0x4}}]}, 0x44}}, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x4e20, 0x6, 0x4e24, 0x0, 0xa, 0xa0, 0x0, 0x1, r2, r4}, {0x100, 0x6, 0x80000000, 0x8, 0x8, 0x7090000000000, 0x200, 0x4}, {0x1, 0xd, 0x7, 0x5}, 0x101, 0x6e6bc0, 0x1, 0x0, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xa}, 0x4d4, 0x2b}, 0x2, @in=@local, 0x3505, 0x4, 0x3, 0xf8, 0x8000, 0x7, 0x1}}, 0xe8) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0xff23, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x24, r7, 0xd1bd17c4b9ef5e5b, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x17}}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x90) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000540), &(0x7f0000000580)=0x8) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r7, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2405c000}, 0x4000000) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r7, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000ac0)={0x0, @in6={{0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xd88}}, 0x8001, 0x5, 0x2, 0x96, 0x65, 0xd88, 0xc}, &(0x7f0000000b80)=0x9c) 1.559563266s ago: executing program 4 (id=692): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)={0x14, 0x4, 0x6, 0x201}, 0x14}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080007"], 0x104}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0xfffffffd) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000300)=0x40) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) syz_emit_ethernet(0x32, &(0x7f0000000500)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, {0x3200, 0x88be, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0x80}}}}}}}, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@remote, r6}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd24, 0x2000, {0x0, 0x0, 0x74, r6, {0x5, 0x10}, {0x1, 0xb}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 1.027720373s ago: executing program 3 (id=693): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @typedef={0x0, 0x0, 0x0, 0x5}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001000020000000000000000007a000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\t\x00\x00\b\x00(\x00=\r\x00\x00'], 0x28}, 0x1, 0x0, 0x0, 0x34049873}, 0x4004000) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xbc}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000010425bbe5000000000000000100ce8a9a3e22e0c3cafa65f78d048b83f4c9ba74e4d7943c653e9fcdbe2db6217176a22256e01c", @ANYRES32=r1, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$tipc(0x1e, 0x2, 0x0) 1.011807001s ago: executing program 0 (id=694): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x4, @loopback, 0x3, 0x2}, 0x80, &(0x7f00000015c0)}, 0x10) socket(0x10, 0x3, 0xfffffffc) r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0104000000000000000002000000400004803c0001800b00010065787468647200002c000280050002000000000008000340000001010800044000000000080006400000000108000740000000000900010073"], 0x94}}, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r2, 0x215eb000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x14, 0x2, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000240)="41d09292b4f9babe89cd637b86", 0xd, 0x40000, &(0x7f0000000200)={0x11, 0x17, r3, 0x1, 0x4, 0x6, @link_local}, 0x14) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xa}, {}, {0xb, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004844) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x4, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 795.677941ms ago: executing program 4 (id=695): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="bb2a66fc1161b190009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 736.70711ms ago: executing program 2 (id=696): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="9db02489e38a08000000000074ec787c8af329000073ef8d00000074b37b15a5ba4b118535dba8cf51bd83614a97cb2809b3c5989648ad6af3724c1996272bcd2158b70cd89530cdc76e920376e6000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xbe, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x19, &(0x7f0000000000)={0xfffffffe}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 584.659942ms ago: executing program 2 (id=697): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000001600)=ANY=[@ANYBLOB="850000001900000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x90) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r2}) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000280), 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x28, 0x1, 0x7, 0xd03, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffffff0}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x920e}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xa053}, 0x20880) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r4, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'veth0_to_bond\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0x200000) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000780), r7) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000080)=ANY=[@ANYBLOB="07c6d93f49ee062c8aa5e34e87edca7f1b0f821c7a6bdcc74d6cd37968300cc2c00159b41fc1aab94e039aeb7e83b4841f416c432568ab892a87a942b21000c6cbb0b29291be6d4958eb6ad2d44fe9bb483b936fbdbe9b3a961b", @ANYRES16=r8, @ANYBLOB="01002dbd7000fedbdf251e000000080004000100000008000100", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x4044084) socket$inet6_mptcp(0xa, 0x1, 0x106) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r10, 0x84, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000540)={@remote, @local, @rand_addr=' \x01\x00', 0x2, 0x0, 0xa5, 0x400, 0x0, 0x81200016, r6}) 582.148433ms ago: executing program 4 (id=698): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg(r1, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4082, 0xff2}], 0x1}, 0x10100) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYRESHEX=r1], 0x158}, 0x1, 0x0, 0x0, 0x14815}, 0xc000) 564.997425ms ago: executing program 3 (id=699): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0x9, &(0x7f0000000200)=@raw=[@generic={0x9, 0x5, 0x9, 0x200, 0x1}, @call={0x85, 0x0, 0x0, 0xcd}, @call={0x85, 0x0, 0x0, 0x2b}, @call={0x85, 0x0, 0x0, 0xa7}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffff9}, @alu={0x4, 0x0, 0x2, 0x9, 0xa, 0x100, 0xffffffffffffffff}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}], &(0x7f0000000280)='syzkaller\x00', 0x6, 0xc8, &(0x7f00000002c0)=""/200, 0x40f00, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x2, 0x4, 0x7, 0x2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000440)=[0x1], &(0x7f0000000640)=[{0x5, 0x4, 0x8, 0x8}, {0x3, 0x4, 0xb, 0xc}], 0x10, 0x6}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x16, &(0x7f0000000500)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x1f00, 0x3ff, 0x24, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x29, 0x3, 0x1, 0x9, 0x2b, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000, 0x7}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f00000006c0)={'tunl0\x00', &(0x7f00000008c0)={'sit0\x00', r3, 0x8000, 0x40, 0x800, 0x5, {{0xc, 0x4, 0x0, 0x8, 0x30, 0x64, 0x0, 0x1, 0x29, 0x0, @private=0xa010100, @rand_addr=0x64010101, {[@rr={0x7, 0xf, 0x12, [@remote, @multicast1, @local]}, @generic={0x94, 0xb, "a29780c91b1c19359d"}]}}}}}) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r4, 0x4) (async) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r4, 0x4) (async) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r4, 0x4) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x8, 0x0, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000007c0)={@cgroup, 0x37, 0x1, 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000700)=[0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0], 0x0}, 0x40) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000800)={@cgroup=r7, r1, 0x38, 0x0, 0x0, @void, @value=r0, @void, @void, r6}, 0x20) 496.513726ms ago: executing program 1 (id=700): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000006c0)={0x14, r1, 0x1, 0x70bd28}, 0x14}}, 0x4000080) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff, 0x2b, 0x0, @val=@netkit}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@deltfilter={0x34, 0x2d, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x2, 0x5}, {0xfff2, 0xb}, {0xb, 0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8890}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$kcm(0x21, 0x2, 0x2) r6 = socket$alg(0x26, 0x5, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r7, 0x29, 0x1, 0x0, &(0x7f0000000140)) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-aesni\x00'}, 0x58) sendto$l2tp6(r7, &(0x7f0000000380)="704060b01d34725d8a3c1779537ab2ac944f1708a4199789af8d5196758132d934dce43559d76faacf3e847a886fbb68de5abafe3c7f29ddbb2393cbf3458e5869d4da92868afe589555f274518cedc2137fb69d742a91cd69b779291f536b527a", 0x61, 0x24000854, &(0x7f0000000400)={0xa, 0x0, 0x8, @remote, 0x3b, 0x2}, 0x20) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x8, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0x48, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0x11}, {0x4}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0x48}}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r9, &(0x7f0000000040)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x7, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x0, 0x4, 0x0, 0x1c}}}}}, 0x36) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r10 = accept4(r6, 0x0, 0x0, 0x0) write$nbd(r10, &(0x7f0000000080)={0x67446698, 0x0, 0x1, 0x2, 0x4}, 0x10) recvmmsg(r10, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000008c0)=""/36, 0x24}], 0x1}, 0x8}], 0x1, 0x10000, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, '\x00', 0x28, 0x3a, 0xff, @local, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private1, @mcast2}}}}}}, 0x0) recvmsg$can_raw(r10, &(0x7f0000001c40)={0x0, 0x0, 0x0}, 0x40) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x0, 0xf, 0x8003, 0xefd9358, 0xd418, 0x1, 0x9, 0x3, 0x0}, &(0x7f0000000040)=0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000540)={'vxcan0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r10, 0x29, 0x32, &(0x7f0000000580)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}, r12}, 0x14) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r10, 0x84, 0x71, &(0x7f0000000080)={r11, 0x10000}, &(0x7f00000000c0)=0x8) 326.104865ms ago: executing program 3 (id=701): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0xa}, {0x3}, {0x3}, {0x2}]}]}, {0x0, [0x5f, 0x61, 0x61]}}, &(0x7f0000000180)=""/220, 0x51, 0xdc, 0x1}, 0x20) socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x50) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000011c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7ff, '\x00', 0x0, r0, 0x5, 0x2, 0x2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000013c0)={0xffffffffffffffff, 0x58, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001400), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{0x1, 0xffffffffffffffff}, &(0x7f00000014c0), &(0x7f0000001500)=r1}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000015c0)=@generic={&(0x7f0000001580)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001680)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001600), &(0x7f0000001640)='%pK \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001740)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000016c0), &(0x7f0000001700)='%pB \x00'}, 0x20) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001780)={0xffffffffffffffff, 0x4, 0x18}, 0xc) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000230001000900000001"], 0x48) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x21, 0x9, 0x2, 0x25dfdbff, {0x3}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r13}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0xa, 0xd, &(0x7f0000001240)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @exit, @jmp={0x5, 0x1, 0x4, 0x8, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x34}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}], &(0x7f00000012c0)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0xc, '\x00', r4, @fallback=0x26, r5, 0x8, &(0x7f0000001440)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000001480)={0x3, 0x5, 0x9, 0x7}, 0x10, 0xffffffffffffffff, r1, 0x1, &(0x7f00000017c0)=[r6, r7, r9, r10, r11, r12, 0xffffffffffffffff, r13], &(0x7f0000001800)=[{0x2, 0x2, 0xf, 0x6}], 0x10, 0x9}, 0x94) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r15 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) socket$rds(0x15, 0x5, 0x0) 292.375221ms ago: executing program 2 (id=702): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newtfilter={0xa4, 0x2c, 0xd27, 0x70bd28, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xc}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x78, 0x2, [@TCA_FW_ACT={0x74, 0x4, [@m_vlan={0x70, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x43, 0x6, "b1f33fde91661a0fc495c545ba204d3f03b887036cfd54b1127d371ef3e7d31c784253a3887337c820038c1a2c503ebd0a06d9c685c330c1fc261bf1e0786c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x24048014}, 0x20048804) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 244.047363ms ago: executing program 4 (id=703): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608", 0xc1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, 0x0, &(0x7f00000000c0)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x7a4, 0x2c, 0xd27, 0xf0bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xc, 0x1}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x774, 0x2, [@TCA_FLOW_ACT={0x740, 0x9, 0x0, 0x1, [@m_xt={0x88, 0xd, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x8}]}, {0x57, 0x6, "96507c52326de93e794846d26b6a8b2c721bb0dea861c6e0d09e44874243f87ac2e6edc5b192cbb9c2b84a3d0dcb8733e16c13358623558bf9f22b3cb2ad21ba596c0e907e297221ee159ad0ab45e006a43f02"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_csum={0x150, 0x11, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x10, 0x4, 0x9, 0x2}, 0x30}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x4, 0x4, 0x8d6, 0x400}, 0x5d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xd162, 0x7, 0xf21, 0x9}, 0x6a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x7, 0x20000000, 0xcb, 0x8}, 0x6e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xab1, 0x2, 0x0, 0x2, 0x80}, 0x3c}}]}, {0x95, 0x6, "7a0ea6939ba86470073afd8e3124ccfab26b5f39c5da3edf512de415a3349b36c3a6ce1960051b10b2d9f59be869870579e20284b09d406329f9b6c5bc2fcb80b0f3c4ba71e54e3e17277260dc79883c67b0ca4b937033b3dbf33f15891a066a78d7eff8096e28a1a106eee2e76ab0a65b7f6e1d9bd883c549eed2984c0e9cc870a9a1bb9b4ddc474c6f56fcdb757e213f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_csum={0x104, 0x7, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffc00, 0x1, 0x2, 0xfffffffd, 0x40}, 0x1f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x15c8, 0x0, 0x8ae8, 0xfffffffc}, 0x1b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x4, 0x4, 0xfffffff6, 0x5}, 0x19}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x5589, 0x3, 0x400, 0x4}, 0x3b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0xfffffffb, 0x4, 0x0, 0x7fff}, 0xb}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x3, 0x8, 0x40, 0x8}, 0x2c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3ff, 0xfd0, 0x7, 0x3, 0x4}, 0x3c}}]}, {0x14, 0x6, "e5f6f60907bc027f16b95d27538891b1"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mirred={0x100, 0x12, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x322b, 0x0, 0x4, 0x5, 0x401}, 0x4, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4a, 0xfffffffe, 0x6, 0xb, 0x40}, 0x2, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x96, 0x4, 0x1, 0xd00, 0x93}, 0x4, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x1000, 0x10000000, 0x4, 0x8}, 0x3, r4}}]}, {0x52, 0x6, "13a1510262123324b55300e869bc40f7da554e8db381cdd1f4442dfe73e5854a8746d30192aa3b581da5d0ecbc355a8bbfad3ac6b13579fa98a8e3df26d87308643ce79240f2f553befe70def331"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_vlan={0x80, 0xe, 0x0, 0x0, {{0x9}, {0x54, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x9, 0x10000, 0xffffffffffffffff, 0x7, 0x2c}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x100, 0x7, 0x1, 0xb, 0x6}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x273587f3d34e6b81}}}}, @m_pedit={0x1c4, 0xe, 0x0, 0x0, {{0xa}, {0x15c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x158, 0x5, 0x0, 0x1, [{0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x13192cc48e67a9d8}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x2}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x3f, 0x6, "dff7dcac560eabb0fdf79735397d462cd598eb56689f4a4a6545173f08e16edac4ba652e9628c47409da8dc50565712801afd49fc482df137f8c07"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_simple={0x11c, 0x15, 0x0, 0x0, {{0xb}, {0x78, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xe, 0x9, 0x20000000, 0x4, 0x401}}, @TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x2, 0xfffffffa}}, @TCA_DEF_DATA={0x6, 0x3, '{\x00'}, @TCA_DEF_DATA={0xf, 0x3, 'syzkaller0\x00'}, @TCA_DEF_DATA={0x11, 0x3, '/dev/net/tun\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x4, 0x1, 0x9, 0xfffffff9}}]}, {0x7b, 0x6, "f7b2755a76780776cd8e16c433b571c28d5d6be2989087e9574302169e4b213c4a92d9f92e73c7e701b4dcfbd9e2938312d18e6dd3c02b4611119ffe0adc6a12c26e23e9e43b737891e427ff978310be2e2c2b84b6ae200cc0d772821126a4385ac4f7945373f12f0a15f71ca8430016a2d358b09327ba"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0x353b}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x5}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x61750000}, @TCA_FLOW_MODE={0x8}]}}]}, 0x7a4}, 0x1, 0x0, 0x0, 0x80}, 0x0) 0s ago: executing program 3 (id=704): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x30, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0xffffffff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x1c, 0x0}}], 0x1, 0x4000040) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={r2, 0x4, 0x100, 0x3}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100b0d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x400805c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="8b", 0x1}], 0x1}, 0x20048811) recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)=""/225, 0xe1}], 0x1}, 0x40020123) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.96' (ED25519) to the list of known hosts. [ 80.771855][ T5619] cgroup: Unknown subsys name 'net' [ 80.887175][ T5619] cgroup: Unknown subsys name 'cpuset' [ 80.896671][ T5619] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.572227][ T5619] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.995126][ T5632] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.006386][ T5632] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.015675][ T5632] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.026832][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.044665][ T5644] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.053952][ T5644] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.069961][ T5644] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.083113][ T5646] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.087634][ T5644] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.096535][ T5646] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.104818][ T5646] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.107073][ T5644] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.119850][ T5649] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.122107][ T5644] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.134497][ T5650] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.142627][ T5646] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.164515][ T5646] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.169042][ T5651] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.177392][ T5649] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.186328][ T5651] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.198765][ T5652] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.206640][ T5652] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.217180][ T5632] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.227662][ T5632] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.238976][ T5632] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.235056][ T5635] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.264005][ T5635] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.272146][ T5635] bridge_slave_0: entered allmulticast mode [ 87.280108][ T5639] Bluetooth: hci2: command tx timeout [ 87.280114][ T5644] Bluetooth: hci0: command tx timeout [ 87.281268][ T5644] Bluetooth: hci1: command tx timeout [ 87.295173][ T5639] Bluetooth: hci3: command tx timeout [ 87.298404][ T5652] Bluetooth: hci4: command tx timeout [ 87.311075][ T5635] bridge_slave_0: entered promiscuous mode [ 87.352243][ T5635] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.360052][ T5635] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.367519][ T5635] bridge_slave_1: entered allmulticast mode [ 87.374908][ T5635] bridge_slave_1: entered promiscuous mode [ 87.455041][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.462440][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.469745][ T5634] bridge_slave_0: entered allmulticast mode [ 87.477618][ T5634] bridge_slave_0: entered promiscuous mode [ 87.524153][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.531437][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.538906][ T5634] bridge_slave_1: entered allmulticast mode [ 87.546421][ T5634] bridge_slave_1: entered promiscuous mode [ 87.586106][ T5635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.651766][ T5635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.687122][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.703457][ T5638] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.710843][ T5638] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.718351][ T5638] bridge_slave_0: entered allmulticast mode [ 87.726114][ T5638] bridge_slave_0: entered promiscuous mode [ 87.754430][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.772810][ T5638] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.780447][ T5638] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.788547][ T5638] bridge_slave_1: entered allmulticast mode [ 87.797725][ T5638] bridge_slave_1: entered promiscuous mode [ 87.821163][ T5635] team0: Port device team_slave_0 added [ 87.872724][ T5635] team0: Port device team_slave_1 added [ 87.910000][ T5638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.927950][ T5638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.960652][ T5634] team0: Port device team_slave_0 added [ 87.966834][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.974344][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.981725][ T5631] bridge_slave_0: entered allmulticast mode [ 87.989277][ T5631] bridge_slave_0: entered promiscuous mode [ 88.032243][ T5634] team0: Port device team_slave_1 added [ 88.038208][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.045892][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.053185][ T5631] bridge_slave_1: entered allmulticast mode [ 88.060626][ T5631] bridge_slave_1: entered promiscuous mode [ 88.080455][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.087685][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.113865][ T5635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.126572][ T5636] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.133841][ T5636] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.141013][ T5636] bridge_slave_0: entered allmulticast mode [ 88.149440][ T5636] bridge_slave_0: entered promiscuous mode [ 88.188179][ T5638] team0: Port device team_slave_0 added [ 88.194961][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.202156][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.228529][ T5635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.240967][ T5636] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.248797][ T5636] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.256238][ T5636] bridge_slave_1: entered allmulticast mode [ 88.263801][ T5636] bridge_slave_1: entered promiscuous mode [ 88.293366][ T5638] team0: Port device team_slave_1 added [ 88.318301][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.325909][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.352662][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.367450][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.411620][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.419104][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.445409][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.459656][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.487922][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.495200][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.523116][ T5638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.537135][ T5636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.576847][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.584334][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.610448][ T5638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.624290][ T5636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.663606][ T5635] hsr_slave_0: entered promiscuous mode [ 88.670517][ T5635] hsr_slave_1: entered promiscuous mode [ 88.699002][ T5631] team0: Port device team_slave_0 added [ 88.707936][ T5631] team0: Port device team_slave_1 added [ 88.728145][ T5636] team0: Port device team_slave_0 added [ 88.806260][ T5636] team0: Port device team_slave_1 added [ 88.812843][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.819876][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.846571][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.875008][ T5634] hsr_slave_0: entered promiscuous mode [ 88.881520][ T5634] hsr_slave_1: entered promiscuous mode [ 88.887978][ T5634] debugfs: 'hsr0' already exists in 'hsr' [ 88.894022][ T5634] Cannot create hsr debugfs directory [ 88.919847][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.927197][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.954454][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.981592][ T5638] hsr_slave_0: entered promiscuous mode [ 88.988135][ T5638] hsr_slave_1: entered promiscuous mode [ 88.995075][ T5638] debugfs: 'hsr0' already exists in 'hsr' [ 89.000826][ T5638] Cannot create hsr debugfs directory [ 89.031002][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.038214][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.064846][ T5636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.077374][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.084556][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.110708][ T5636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.285880][ T5631] hsr_slave_0: entered promiscuous mode [ 89.292347][ T5631] hsr_slave_1: entered promiscuous mode [ 89.299564][ T5631] debugfs: 'hsr0' already exists in 'hsr' [ 89.305430][ T5631] Cannot create hsr debugfs directory [ 89.353090][ T5644] Bluetooth: hci3: command tx timeout [ 89.358949][ T5652] Bluetooth: hci2: command tx timeout [ 89.360519][ T5639] Bluetooth: hci0: command tx timeout [ 89.365382][ T5644] Bluetooth: hci1: command tx timeout [ 89.370374][ T5641] Bluetooth: hci4: command tx timeout [ 89.409735][ T5636] hsr_slave_0: entered promiscuous mode [ 89.416555][ T5636] hsr_slave_1: entered promiscuous mode [ 89.423088][ T5636] debugfs: 'hsr0' already exists in 'hsr' [ 89.428851][ T5636] Cannot create hsr debugfs directory [ 89.878683][ T5635] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.894953][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.912457][ T5635] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.925933][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.934003][ T5635] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.945946][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.957412][ T5635] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.968641][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.043398][ T5634] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.057919][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.076359][ T5634] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.087294][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.100058][ T5634] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.111312][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.120692][ T5634] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.131801][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.239084][ T5638] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.254985][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.270131][ T5638] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.283140][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.299843][ T5638] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.310208][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.319416][ T5638] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.330082][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.449233][ T5631] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.459961][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.468469][ T5631] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.480070][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.498637][ T5631] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.509559][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.518341][ T5631] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.528819][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.591560][ T5635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.649424][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.690522][ T5636] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.701050][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.709592][ T5636] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.720706][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.736715][ T5635] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.748247][ T5636] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.758977][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.767122][ T5636] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.778831][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.814990][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.834594][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.842270][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.868312][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.875493][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.899305][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.906681][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.934557][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.942188][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.968393][ T5638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.038217][ T5638] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.058380][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.065717][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.106460][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.113784][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.228014][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.307259][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.347184][ T5636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.359822][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.367177][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.407637][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.414967][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.443018][ T5644] Bluetooth: hci1: command tx timeout [ 91.448540][ T5652] Bluetooth: hci2: command tx timeout [ 91.449530][ T5632] Bluetooth: hci4: command tx timeout [ 91.454035][ T5652] Bluetooth: hci3: command tx timeout [ 91.467865][ T5639] Bluetooth: hci0: command tx timeout [ 91.489574][ T5636] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.519589][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.526858][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.559277][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.566650][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.937747][ T10] cfg80211: failed to load regulatory.db [ 92.508436][ T5635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.616226][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.838530][ T5634] veth0_vlan: entered promiscuous mode [ 92.870395][ T5638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.925386][ T5634] veth1_vlan: entered promiscuous mode [ 93.079811][ T5634] veth0_macvtap: entered promiscuous mode [ 93.130616][ T5634] veth1_macvtap: entered promiscuous mode [ 93.160684][ T5638] veth0_vlan: entered promiscuous mode [ 93.184113][ T5636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.216448][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.231941][ T5638] veth1_vlan: entered promiscuous mode [ 93.246088][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.271001][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.304181][ T62] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.315263][ T62] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.343825][ T62] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.360416][ T47] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.456501][ T5638] veth0_macvtap: entered promiscuous mode [ 93.484932][ T5636] veth0_vlan: entered promiscuous mode [ 93.498758][ T5635] veth0_vlan: entered promiscuous mode [ 93.512884][ T5641] Bluetooth: hci2: command tx timeout [ 93.518683][ T5639] Bluetooth: hci3: command tx timeout [ 93.524709][ T5638] veth1_macvtap: entered promiscuous mode [ 93.531549][ T5641] Bluetooth: hci4: command tx timeout [ 93.532345][ T5644] Bluetooth: hci0: command tx timeout [ 93.538164][ T5632] Bluetooth: hci1: command tx timeout [ 93.584677][ T5636] veth1_vlan: entered promiscuous mode [ 93.610741][ T5635] veth1_vlan: entered promiscuous mode [ 93.625849][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.634312][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.655383][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.679593][ T5631] veth0_vlan: entered promiscuous mode [ 93.707150][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.739762][ T157] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.749308][ T157] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.765003][ T5631] veth1_vlan: entered promiscuous mode [ 93.775488][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.783955][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.793656][ T157] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.804667][ T47] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.853739][ T5636] veth0_macvtap: entered promiscuous mode [ 93.894503][ T5636] veth1_macvtap: entered promiscuous mode [ 93.906148][ T5635] veth0_macvtap: entered promiscuous mode [ 93.964071][ T5635] veth1_macvtap: entered promiscuous mode [ 93.973993][ T5634] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.010977][ T5631] veth0_macvtap: entered promiscuous mode [ 94.032036][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.050954][ T5631] veth1_macvtap: entered promiscuous mode [ 94.129720][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.141736][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.161769][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.167721][ T5832] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1'. [ 94.199982][ T157] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.209243][ T157] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.230860][ T62] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.254127][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.287509][ T62] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.310670][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.320194][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.336972][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.348764][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.411481][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.484403][ T47] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.497418][ T112] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.534855][ T112] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.546452][ T112] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.558302][ T5838] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6'. [ 94.560985][ T112] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.677036][ T112] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.695830][ T112] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.733747][ T112] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.735422][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.774872][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.975241][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.996130][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.190883][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.208861][ T157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.238242][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.247796][ T157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.430641][ T112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.455039][ T112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.610937][ T112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.627559][ T5864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11'. [ 95.628970][ T112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.739300][ T5871] Zero length message leads to an empty skb [ 96.331778][ T5893] netlink: 40 bytes leftover after parsing attributes in process `syz.3.18'. [ 96.388061][ T5893] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 96.410402][ T5896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19'. [ 96.909776][ T5912] warning: `syz.0.27' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 96.969164][ T5912] netlink: 'syz.0.27': attribute type 30 has an invalid length. [ 96.988054][ T5914] geneve2: entered promiscuous mode [ 96.994805][ T5914] geneve2: entered allmulticast mode [ 97.081632][ T36] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 97.091004][ T5920] netlink: 12 bytes leftover after parsing attributes in process `syz.4.28'. [ 97.093248][ T36] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 97.102312][ T36] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 97.135925][ T5922] netlink: 'syz.1.29': attribute type 1 has an invalid length. [ 97.174912][ T36] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 97.250353][ T5922] bridge0: port 3(geneve2) entered blocking state [ 97.281107][ T5922] bridge0: port 3(geneve2) entered disabled state [ 97.296453][ T5922] geneve2: entered allmulticast mode [ 97.325477][ T5922] geneve2: entered promiscuous mode [ 97.359882][ T5925] syz.2.30 uses obsolete (PF_INET,SOCK_PACKET) [ 97.420805][ T5932] netlink: 'syz.4.33': attribute type 21 has an invalid length. [ 97.445019][ T5932] netlink: 'syz.4.33': attribute type 6 has an invalid length. [ 97.462344][ T5932] netlink: 132 bytes leftover after parsing attributes in process `syz.4.33'. [ 97.796151][ T5936] bond1: option min_links: invalid value (18446744073709551614) [ 97.836449][ T5936] bond1: option min_links: allowed values 0 - 2147483647 [ 97.912476][ T5936] bond1 (unregistering): Released all slaves [ 97.981321][ T5957] netlink: 165 bytes leftover after parsing attributes in process `syz.0.40'. [ 98.208272][ T5942] No such timeout policy "syz0" [ 98.530044][ T24] IPVS: starting estimator thread 0... [ 98.540916][ T5973] netlink: 20 bytes leftover after parsing attributes in process `syz.0.43'. [ 98.649181][ T5976] netlink: 24 bytes leftover after parsing attributes in process `syz.1.44'. [ 98.660572][ T5974] IPVS: using max 28 ests per chain, 67200 per kthread [ 98.794974][ T5979] netlink: zone id is out of range [ 98.835634][ T5979] netlink: zone id is out of range [ 98.869491][ T5979] netlink: zone id is out of range [ 98.914598][ T5979] netlink: zone id is out of range [ 98.933604][ T5979] netlink: zone id is out of range [ 98.951951][ T5979] netlink: zone id is out of range [ 98.973752][ T5979] netlink: zone id is out of range [ 98.988222][ T5979] netlink: set zone limit has 4 unknown bytes [ 99.437466][ T6011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.493354][ T6014] netlink: 212336 bytes leftover after parsing attributes in process `syz.4.56'. [ 100.456118][ T6051] sctp: [Deprecated]: syz.4.66 (pid 6051) Use of struct sctp_assoc_value in delayed_ack socket option. [ 100.456118][ T6051] Use struct sctp_sack_info instead [ 100.655907][ T6058] xt_ipcomp: unknown flags 1D [ 100.660724][ T6057] xt_ipcomp: unknown flags 1D [ 100.881166][ T6066] xt_hashlimit: max too large, truncated to 1048576 [ 101.649432][ T6064] syz.4.69 (6064) used greatest stack depth: 18168 bytes left [ 101.698947][ T30] audit: type=1800 audit(1780089563.049:2): pid=6065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.69" name="regulatory.db.p7s" dev="sda1" ino=449 res=0 errno=0 [ 101.720860][ T6065] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 101.765950][ T6065] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 101.797397][ T6065] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 101.876239][ T6078] netlink: 56 bytes leftover after parsing attributes in process `syz.0.73'. [ 101.910704][ T6078] netlink: 24 bytes leftover after parsing attributes in process `syz.0.73'. [ 101.938697][ T6072] netlink: 40 bytes leftover after parsing attributes in process `syz.2.71'. [ 101.966258][ T6072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.71'. [ 102.198572][ T6086] vlan2: entered allmulticast mode [ 102.212300][ T6086] bond0: entered allmulticast mode [ 102.229680][ T6086] bond_slave_0: entered allmulticast mode [ 102.247874][ T6086] bond_slave_1: entered allmulticast mode [ 102.526994][ T6094] netlink: 156 bytes leftover after parsing attributes in process `syz.4.78'. [ 102.925697][ T6105] tipc: Started in network mode [ 102.951173][ T6109] Cannot find add_set index 0 as target [ 102.953665][ T6105] tipc: Node identity 6e096aa62cad, cluster identity 4711 [ 102.984385][ T6105] tipc: Enabled bearer , priority 0 [ 103.140548][ T6107] syzkaller0: entered promiscuous mode [ 103.146641][ T6107] syzkaller0: entered allmulticast mode [ 103.155123][ T6107] tipc: Resetting bearer [ 103.175964][ T6114] netlink: 20 bytes leftover after parsing attributes in process `syz.4.86'. [ 103.219882][ T6104] tipc: Resetting bearer [ 103.271527][ T6119] netlink: 40 bytes leftover after parsing attributes in process `syz.1.88'. [ 103.422251][ T6126] netlink: 4 bytes leftover after parsing attributes in process `syz.3.89'. [ 104.650793][ T6104] tipc: Disabling bearer [ 104.666200][ T6121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.89'. [ 104.677267][ T6126] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 104.683898][ T5830] tipc: Node number set to 1118071462 [ 105.102212][ T6158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.96'. [ 105.272015][ T6163] netlink: 12 bytes leftover after parsing attributes in process `syz.2.100'. [ 105.738034][ T6180] netlink: 68 bytes leftover after parsing attributes in process `syz.1.105'. [ 106.208554][ T6195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.108'. [ 106.278808][ T6197] tipc: Enabling of bearer rejected, failed to enable media [ 106.889407][ T6220] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 106.917807][ T6224] netlink: 12 bytes leftover after parsing attributes in process `syz.0.113'. [ 107.317137][ T6243] SET target dimension over the limit! [ 107.395443][ T6247] sctp: [Deprecated]: syz.3.118 (pid 6247) Use of int in max_burst socket option. [ 107.395443][ T6247] Use struct sctp_assoc_value instead [ 107.752351][ T6262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.120'. [ 107.833722][ T6262] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 107.985481][ T6265] netlink: 24 bytes leftover after parsing attributes in process `syz.1.121'. [ 108.141871][ T6275] tipc: Started in network mode [ 108.153199][ T6275] tipc: Node identity ac14140f, cluster identity 4711 [ 108.168291][ T6275] tipc: New replicast peer: 255.255.255.255 [ 108.210882][ T6275] tipc: Enabled bearer , priority 10 [ 108.235366][ T6279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.124'. [ 108.277016][ T6285] netlink: 'syz.1.126': attribute type 4 has an invalid length. [ 108.317942][ T6285] netlink: 17 bytes leftover after parsing attributes in process `syz.1.126'. [ 108.541705][ T6297] 8021q: VLANs not supported on ip_vti0 [ 108.625573][ T6290] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.865663][ T6320] sctp: [Deprecated]: syz.2.135 (pid 6320) Use of int in maxseg socket option. [ 108.865663][ T6320] Use struct sctp_assoc_value instead [ 109.304226][ T10] tipc: Node number set to 2886997007 [ 109.333418][ T6338] netlink: 'syz.4.139': attribute type 7 has an invalid length. [ 109.420531][ T62] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.467929][ T62] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.504808][ T62] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.535389][ T62] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.576865][ T6345] netlink: 'syz.0.142': attribute type 4 has an invalid length. [ 109.598820][ T6344] netlink: 'syz.0.142': attribute type 4 has an invalid length. [ 109.922426][ T6356] pim6reg1: entered promiscuous mode [ 109.932670][ T6356] pim6reg1: entered allmulticast mode [ 110.049246][ T6366] __nla_validate_parse: 9 callbacks suppressed [ 110.049264][ T6366] netlink: 28 bytes leftover after parsing attributes in process `syz.0.147'. [ 110.150717][ T6368] Driver unsupported XDP return value 0 on prog (id 31) dev N/A, expect packet loss! [ 110.220145][ T6365] netlink: 16 bytes leftover after parsing attributes in process `syz.3.148'. [ 110.270940][ T6370] tipc: Started in network mode [ 110.280801][ T6370] tipc: Node identity daa69f73364c, cluster identity 4711 [ 110.300522][ T6370] tipc: Enabled bearer , priority 0 [ 110.326141][ T6380] syzkaller0: entered promiscuous mode [ 110.330717][ T6376] netlink: 32 bytes leftover after parsing attributes in process `syz.0.151'. [ 110.348670][ T6378] netlink: 32 bytes leftover after parsing attributes in process `syz.0.151'. [ 110.355800][ T6380] syzkaller0: entered allmulticast mode [ 110.415385][ T6370] tipc: Resetting bearer [ 110.539339][ T5632] block nbd0: Receive control failed (result -32) [ 110.550966][ T6369] tipc: Resetting bearer [ 110.648017][ T6369] tipc: Disabling bearer [ 110.770208][ T6397] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 111.624582][ T6440] netlink: 12 bytes leftover after parsing attributes in process `syz.1.168'. [ 111.954297][ T6445] bond1: entered promiscuous mode [ 111.960571][ T6445] bond1: entered allmulticast mode [ 111.974810][ T6445] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.096740][ T6466] xt_hashlimit: size too large, truncated to 1048576 [ 112.218331][ T6472] netlink: 149 bytes leftover after parsing attributes in process `syz.3.178'. [ 112.279959][ T6472] openvswitch: netlink: IP tunnel dst address not specified [ 112.764719][ T6490] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved [ 112.778031][ T6490] netlink: 'syz.0.185': attribute type 3 has an invalid length. [ 113.078900][ T6494] netlink: 232 bytes leftover after parsing attributes in process `syz.1.184'. [ 113.117873][ T6501] xfrm1: entered allmulticast mode [ 113.127917][ T6509] netlink: 12 bytes leftover after parsing attributes in process `syz.0.190'. [ 113.164565][ T6509] block nbd1: Unsupported socket: should be TCP or UNIX. [ 113.309221][ T6516] netlink: 12 bytes leftover after parsing attributes in process `syz.2.192'. [ 113.348865][ T6516] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 113.578190][ T6525] netlink: 'syz.2.196': attribute type 2 has an invalid length. [ 113.689865][ T6527] netlink: 774 bytes leftover after parsing attributes in process `syz.0.197'. [ 113.918776][ T6536] bridge1: entered promiscuous mode [ 113.926423][ T6536] bridge1: entered allmulticast mode [ 113.939389][ T6529] batadv_slave_1: entered promiscuous mode [ 113.964158][ T6529] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.057554][ T6529] batadv_slave_1 (unregistering): left promiscuous mode [ 114.096980][ T6529] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.757394][ T6575] bond1: Unable to set up delay as MII monitoring is disabled [ 114.785750][ T6575] bond1 (unregistering): Released all slaves [ 115.063540][ T6605] __nla_validate_parse: 8 callbacks suppressed [ 115.063562][ T6605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.213'. [ 115.168602][ T6609] netlink: 'syz.3.213': attribute type 1 has an invalid length. [ 115.611353][ T6625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.217'. [ 115.809010][ T6625] netlink: 24 bytes leftover after parsing attributes in process `syz.0.217'. [ 115.873503][ T6632] vlan2: entered promiscuous mode [ 116.165162][ T6636] netlink: 'syz.0.222': attribute type 13 has an invalid length. [ 116.803849][ T6659] Bluetooth: MGMT ver 1.23 [ 117.049801][ T6672] netlink: 12 bytes leftover after parsing attributes in process `syz.0.234'. [ 117.059619][ T6666] netlink: 40 bytes leftover after parsing attributes in process `syz.1.233'. [ 117.338534][ T6687] IPVS: set_ctl: invalid protocol: 222 255.255.255.255:20001 [ 117.363811][ T6689] netlink: 'syz.1.238': attribute type 83 has an invalid length. [ 117.582500][ T6692] syzkaller0: entered promiscuous mode [ 117.601483][ T6692] syzkaller0: entered allmulticast mode [ 117.706292][ T6695] netlink: 256 bytes leftover after parsing attributes in process `syz.4.241'. [ 117.772505][ T6700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.242'. [ 117.905233][ T6700] veth0_macvtap: left promiscuous mode [ 118.197045][ T6704] syzkaller0: entered promiscuous mode [ 118.212777][ T6704] syzkaller0: entered allmulticast mode [ 118.249249][ T6704] netlink: 32 bytes leftover after parsing attributes in process `syz.2.243'. [ 118.288718][ T6704] netlink: 32 bytes leftover after parsing attributes in process `syz.2.243'. [ 118.435569][ T6724] netlink: 'syz.4.247': attribute type 1 has an invalid length. [ 118.453043][ T6724] netlink: 96 bytes leftover after parsing attributes in process `syz.4.247'. [ 118.469942][ T6724] netlink: 'syz.4.247': attribute type 1 has an invalid length. [ 118.486450][ T6724] netlink: 'syz.4.247': attribute type 8 has an invalid length. [ 118.731471][ T6733] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 118.775849][ T6735] sock: sock_set_timeout: `syz.4.250' (pid 6735) tries to set negative timeout [ 118.883174][ T6745] IPv6: NLM_F_CREATE should be specified when creating new route [ 119.021405][ T6751] netlink: 'syz.4.255': attribute type 1 has an invalid length. [ 119.220225][ T6762] netlink: 'syz.3.258': attribute type 8 has an invalid length. [ 119.240669][ T6762] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.250465][ T6762] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.356134][ T6763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.580609][ T6763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.530113][ T6821] x_tables: duplicate underflow at hook 2 [ 120.951038][ T6819] bond1 (unregistering): Released all slaves [ 121.032863][ T5632] Bluetooth: hci0: command tx timeout [ 121.231561][ T6850] can: request_module (can-proto-3) failed. [ 121.440063][ T6868] __nla_validate_parse: 14 callbacks suppressed [ 121.440089][ T6868] netlink: 24 bytes leftover after parsing attributes in process `syz.1.284'. [ 121.460219][ T6868] netlink: 12 bytes leftover after parsing attributes in process `syz.1.284'. [ 121.526910][ T6872] openvswitch: netlink: IP tunnel dst address not specified [ 121.575181][ T6873] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 121.827269][ T6885] netlink: 24 bytes leftover after parsing attributes in process `syz.2.286'. [ 121.979403][ T6891] ip6tnl1: entered promiscuous mode [ 123.396693][ T6813] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 123.408005][ T6835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.271'. [ 123.676581][ T6917] netlink: 14 bytes leftover after parsing attributes in process `syz.4.293'. [ 123.795316][ T6917] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.818101][ T6917] bond_slave_0: left allmulticast mode [ 123.871184][ T6917] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.882446][ T6917] bond_slave_1: left allmulticast mode [ 123.898436][ T6917] bond0 (unregistering): Released all slaves [ 123.908704][ T6924] netlink: 'syz.1.297': attribute type 32 has an invalid length. [ 123.911379][ T6926] netlink: 32 bytes leftover after parsing attributes in process `syz.3.295'. [ 123.935853][ T6924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.297'. [ 124.131090][ T6924] bond1: Setting coupled_control to off (0) [ 124.143277][ T6927] bond0: Caught tx_queue_len zero misconfig [ 124.323175][ T6942] netlink: 12 bytes leftover after parsing attributes in process `syz.4.303'. [ 124.345605][ T6940] ieee802154 phy0 wpan0: encryption failed: -22 [ 124.809246][ T6966] netlink: 20 bytes leftover after parsing attributes in process `syz.1.310'. [ 124.846830][ T6968] netlink: 'syz.4.312': attribute type 1 has an invalid length. [ 124.868589][ T6970] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 124.904629][ T6972] vcan0: tx address claim with dest, not broadcast [ 124.939771][ T6975] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 124.939771][ T6975] Please contact the netfilter-devel mailing list or update your nftables rules. [ 125.036469][ T6975] netlink: 4372 bytes leftover after parsing attributes in process `syz.3.313'. [ 125.162955][ T6970] nbd: device at index 64 is going down [ 125.695514][ T5888] udevd[5888]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 125.740999][ T5888] udevd[5888]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 125.784287][ T7005] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 126.153128][ T5639] Bluetooth: hci3: command 0x0405 tx timeout [ 126.223588][ T7029] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.552385][ T7045] veth0_to_team: entered promiscuous mode [ 126.612783][ T7054] __nla_validate_parse: 4 callbacks suppressed [ 126.612802][ T7054] netlink: 24 bytes leftover after parsing attributes in process `syz.4.336'. [ 126.828909][ T7063] netlink: 'syz.4.339': attribute type 1 has an invalid length. [ 126.946767][ T7063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.993617][ T7076] netlink: 12 bytes leftover after parsing attributes in process `syz.2.342'. [ 127.033669][ T7072] bond0: (slave veth3): Enslaving as an active interface with a down link [ 127.037938][ T7073] netlink: 'syz.4.339': attribute type 1 has an invalid length. [ 127.068630][ T7073] netlink: 96 bytes leftover after parsing attributes in process `syz.4.339'. [ 127.077873][ T7073] netlink: 'syz.4.339': attribute type 1 has an invalid length. [ 127.101829][ T7073] netlink: 'syz.4.339': attribute type 8 has an invalid length. [ 127.125109][ T7063] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 127.132324][ T7073] netlink: 606 bytes leftover after parsing attributes in process `syz.4.339'. [ 127.143338][ T7063] bond0: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 127.163936][ T7073] netlink: 1 bytes leftover after parsing attributes in process `syz.4.339'. [ 127.204511][ T7072] Dead loop on virtual device ip6_vti0 (net 36), fix it urgently! [ 127.247914][ T7072] netlink: 'syz.4.339': attribute type 1 has an invalid length. [ 127.276561][ T7065] ip6tnl0: Caught tx_queue_len zero misconfig [ 127.695505][ T7090] netlink: 112 bytes leftover after parsing attributes in process `syz.0.346'. [ 127.998093][ T7103] netlink: 'syz.0.349': attribute type 2 has an invalid length. [ 128.025087][ T7103] netlink: 'syz.0.349': attribute type 2 has an invalid length. [ 128.045517][ T7104] netlink: 4 bytes leftover after parsing attributes in process `syz.4.348'. [ 128.214790][ T7101] netlink: 8 bytes leftover after parsing attributes in process `syz.4.348'. [ 128.234553][ C0] Dead loop on virtual device ip6_vti0 (net 36), fix it urgently! [ 128.439999][ T7120] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.352'. [ 128.667763][ T7135] netlink: 72 bytes leftover after parsing attributes in process `syz.3.354'. [ 128.715916][ T7143] netlink: 'syz.2.356': attribute type 39 has an invalid length. [ 128.797593][ T7143] hsr_slave_0: left promiscuous mode [ 128.840508][ T7143] hsr_slave_1: left promiscuous mode [ 129.289131][ T7170] veth0: entered promiscuous mode [ 129.548390][ T7169] veth0: left promiscuous mode [ 129.556161][ T7182] syzkaller0: entered promiscuous mode [ 129.561887][ T7182] syzkaller0: entered allmulticast mode [ 129.736422][ T7186] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 129.829448][ T7188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.900888][ T7188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.171991][ T7195] pim6reg: entered allmulticast mode [ 130.312985][ C0] Dead loop on virtual device ip6_vti0 (net 36), fix it urgently! [ 130.598474][ T7224] netlink: 'syz.0.376': attribute type 1 has an invalid length. [ 130.730391][ T7224] 8021q: adding VLAN 0 to HW filter on device bond2 [ 131.017052][ T7244] netlink: 'syz.1.382': attribute type 2 has an invalid length. [ 131.070256][ T7244] openvswitch: netlink: IPv4 tun info is not correct [ 131.253245][ T7250] lo: Caught tx_queue_len zero misconfig [ 131.287465][ T7250] xt_cgroup: path and classid specified [ 131.501799][ T7262] sock: sock_timestamping_bind_phc: sock not bind to device [ 131.694711][ T7263] veth0: Caught tx_queue_len zero misconfig [ 132.028318][ T7284] netlink: 'syz.2.396': attribute type 1 has an invalid length. [ 132.425318][ T7311] __nla_validate_parse: 9 callbacks suppressed [ 132.425338][ T7311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.401'. [ 132.447022][ T7311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.401'. [ 132.747241][ T7325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.404'. [ 132.875841][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.883565][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.902257][ T7325] 8021q: adding VLAN 0 to HW filter on device bond3 [ 132.932798][ T7325] bond3 (unregistering): Released all slaves [ 134.393213][ C0] Dead loop on virtual device ip6_vti0 (net 36), fix it urgently! [ 134.988077][ T7293] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 135.029121][ T7347] netlink: 'syz.1.406': attribute type 2 has an invalid length. [ 135.040301][ T7347] netlink: 'syz.1.406': attribute type 2 has an invalid length. [ 135.588747][ T7381] netlink: 'syz.2.416': attribute type 20 has an invalid length. [ 135.611035][ T7381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.416'. [ 135.671439][ T7381] netlink: 'syz.2.416': attribute type 20 has an invalid length. [ 135.681405][ T62] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.688202][ T7381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.416'. [ 135.703511][ T62] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.705234][ T7383] netlink: 'syz.1.417': attribute type 25 has an invalid length. [ 135.727725][ T62] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.767943][ T62] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.039607][ T7399] bond0: option ad_select: unable to set because the bond device is up [ 136.260145][ T7409] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 136.280891][ T7419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.427'. [ 136.303424][ T7419] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 136.353368][ T7409] xt_hashlimit: size too large, truncated to 1048576 [ 136.481797][ T7424] netlink: 'syz.3.428': attribute type 1 has an invalid length. [ 136.528846][ T7424] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 136.805949][ T7444] openvswitch: netlink: Key type 179 is out of range max 32 [ 137.100854][ T7450] netlink: 'syz.1.435': attribute type 4 has an invalid length. [ 137.119022][ T7450] netlink: 28 bytes leftover after parsing attributes in process `syz.1.435'. [ 137.224574][ T7450] netlink: 40 bytes leftover after parsing attributes in process `syz.1.435'. [ 137.236850][ T7459] netlink: 12 bytes leftover after parsing attributes in process `syz.0.438'. [ 137.269173][ T7455] netlink: 'syz.3.437': attribute type 3 has an invalid length. [ 137.316180][ T7463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.439'. [ 137.834936][ T7477] netlink: 20 bytes leftover after parsing attributes in process `syz.2.443'. [ 137.848589][ T7483] netlink: 640 bytes leftover after parsing attributes in process `syz.0.445'. [ 137.861251][ T7483] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 138.037777][ T7490] netlink: 12 bytes leftover after parsing attributes in process `syz.3.448'. [ 138.186912][ T7501] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 138.364946][ T7511] netlink: 16 bytes leftover after parsing attributes in process `syz.3.452'. [ 138.630973][ T7525] xt_CT: You must specify a L4 protocol and not use inversions on it [ 138.678080][ T7529] netlink: 256 bytes leftover after parsing attributes in process `syz.3.457'. [ 138.937719][ T7534] netlink: 132 bytes leftover after parsing attributes in process `syz.1.459'. [ 139.079515][ T7545] netlink: 100 bytes leftover after parsing attributes in process `syz.3.465'. [ 139.216493][ T7558] IPv4: Oversized IP packet from 127.202.26.0 [ 139.355382][ T7564] netlink: 32 bytes leftover after parsing attributes in process `syz.3.469'. [ 139.788229][ T7578] netlink: 'syz.4.475': attribute type 1 has an invalid length. [ 139.867119][ T7589] IPVS: length: 112 != 24 [ 139.979208][ T7595] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.479'. [ 140.067210][ T7599] netlink: 24 bytes leftover after parsing attributes in process `syz.4.480'. [ 140.436303][ T7612] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.568201][ T7631] netlink: 'syz.2.491': attribute type 21 has an invalid length. [ 141.120571][ T7664] trusted_key: syz.3.496 sent an empty control message without MSG_MORE. [ 141.364218][ T7675] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.620275][ T7684] openvswitch: netlink: Flow actions attr not present in new flow. [ 141.747595][ T7686] IPv6: sit2: Disabled Multicast RS [ 141.754255][ T7686] sit2: entered allmulticast mode [ 142.152711][ T7701] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 142.240315][ T62] af_packet: tpacket_rcv: packet too big, clamped from 52 to 4294967272. macoff=96 [ 142.476056][ C0] Dead loop on virtual device ip6_vti0 (net 36), fix it urgently! [ 142.710574][ T7713] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.710286][ T7643] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 144.249718][ T7739] __nla_validate_parse: 11 callbacks suppressed [ 144.249739][ T7739] netlink: 64 bytes leftover after parsing attributes in process `syz.3.519'. [ 144.337373][ T7738] syzkaller1: entered promiscuous mode [ 144.345087][ T7738] syzkaller1: entered allmulticast mode [ 144.354615][ T7743] netlink: 'syz.4.520': attribute type 1 has an invalid length. [ 144.363201][ T7745] netlink: 'syz.2.522': attribute type 29 has an invalid length. [ 144.369345][ T7743] netlink: 'syz.4.520': attribute type 2 has an invalid length. [ 144.388416][ T7745] netlink: 'syz.2.522': attribute type 29 has an invalid length. [ 144.521756][ T7748] netlink: 'syz.1.523': attribute type 3 has an invalid length. [ 144.561432][ T7752] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 144.901759][ T7774] netlink: 'syz.1.528': attribute type 1 has an invalid length. [ 144.941247][ T7774] netlink: 224 bytes leftover after parsing attributes in process `syz.1.528'. [ 145.317904][ T7794] netlink: 'syz.0.531': attribute type 1 has an invalid length. [ 145.339784][ T7794] netlink: 224 bytes leftover after parsing attributes in process `syz.0.531'. [ 145.364268][ T7794] netlink: 'syz.0.531': attribute type 1 has an invalid length. [ 145.372188][ T7794] netlink: 'syz.0.531': attribute type 3 has an invalid length. [ 145.390050][ T7794] netlink: 224 bytes leftover after parsing attributes in process `syz.0.531'. [ 145.554563][ T7807] netlink: 'syz.1.535': attribute type 26 has an invalid length. [ 145.589949][ T7807] syzkaller1: entered promiscuous mode [ 145.600004][ T7807] syzkaller1: entered allmulticast mode [ 145.618085][ T7809] netlink: 212336 bytes leftover after parsing attributes in process `syz.0.534'. [ 145.662076][ T7815] netlink: 96 bytes leftover after parsing attributes in process `syz.2.536'. [ 145.728279][ T7815] vlan2: entered allmulticast mode [ 145.734138][ T7815] erspan0: entered allmulticast mode [ 146.119256][ T7832] : renamed from bond0 (while UP) [ 146.166660][ T7832] netlink: 96 bytes leftover after parsing attributes in process `syz.1.542'. [ 146.208271][ T7832] netlink: 1 bytes leftover after parsing attributes in process `syz.1.542'. [ 146.244070][ T7832] netlink: 582 bytes leftover after parsing attributes in process `syz.1.542'. [ 146.280189][ T7837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.545'. [ 146.654841][ T7850] bridge_slave_0: Caught tx_queue_len zero misconfig [ 146.693286][ T7850] netem: change failed [ 146.760736][ T7855] policy can only be matched on NF_INET_PRE_ROUTING [ 146.760768][ T7855] unable to load match [ 147.163194][ T30] audit: type=1800 audit(1780089608.519:3): pid=7874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.557" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=469 res=0 errno=0 [ 147.238951][ T7875] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 147.912108][ T7892] bond0: entered promiscuous mode Stopping sshd: [ 147.964493][ T7892] bond0: entered allmulticast mode [ 147.980756][ T7892] 8021q: adding VLAN 0 to HW filter on device bond0 stopped /usr/sbin/sshd (pid 5387) OK Stopping crond: stopped /usr/sbin/crond (pid 5371) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 5292) [ 150.005319][ T8003] syzkaller0: entered promiscuous mode [ 150.027557][ T8003] syzkaller0: entered allmulticast mode [ 150.060856][ T8003] __nla_validate_parse: 6 callbacks suppressed [ 150.060877][ T8003] netlink: 148 bytes leftover after parsing attributes in process `syz.1.589'. Stopping network: [ 150.233635][ T8012] validate_nla: 5 callbacks suppressed [ 150.233656][ T8012] netlink: 'syz.4.590': attribute type 21 has an invalid length. [ 150.282804][ T8012] netlink: 128 bytes leftover after parsing attributes in process `syz.4.590'. [ 150.373220][ T8012] netlink: 3 bytes leftover after parsing attributes in process `syz.4.590'. [ 150.468103][ T8012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.590'. [ 150.667441][ T8037] openvswitch: netlink: VXLAN extension 1 has unexpected len 8 expected 4 [ 150.697457][ T8039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.595'. [ 150.859403][ T8039] 8021q: adding VLAN 0 to HW filter on device bond4 [ 151.371685][ T8064] syzkaller1: entered promiscuous mode [ 151.389798][ T8064] syzkaller1: entered allmulticast mode [ 151.457626][ T8064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.602'. [ 151.591137][ T8069] netlink: 12 bytes leftover after parsing attributes in process `syz.1.604'. [ 151.815232][ T8086] netlink: 'syz.3.607': attribute type 1 has an invalid length. OK [ 151.931015][ T8086] 8021q: adding VLAN 0 to HW filter on device bond2 [ 151.949030][ T8097] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.982141][ T8090] netlink: 12 bytes leftover after parsing attributes in process `syz.1.609'. [ 152.129219][ T8086] bond2: (slave gretap1): making interface the new active one [ 152.155339][ T8086] bond2: (slave gretap1): Enslaving as an active interface with an up link Stopping iptables: [ 152.194534][ T8101] C: renamed from lo [ 152.201899][ T8101] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. OK [ 152.437139][ T8114] IPv6: NLM_F_REPLACE set, but no existing node found! Stopping system message bus: [ 152.551798][ T8105] bond6 (unregistering): Released all slaves [ 152.846073][ T8129] netlink: 36 bytes leftover after parsing attributes in process `syz.4.617'. [ 153.262058][ T8145] netlink: 'syz.1.622': attribute type 1 has an invalid length. [ 153.300372][ T8146] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.621'. done [ 153.649410][ T8167] netlink: 'syz.4.624': attribute type 2 has an invalid length. Stopping klogd: [ 155.736967][ T8229] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.745197][ T8229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.753850][ T8229] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.761266][ T8229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.159175][ T10] gretap1: entered promiscuous mode OK [ 156.195456][ T8247] netlink: 'syz.4.644': attribute type 1 has an invalid length. [ 156.282038][ T8247] bond2: (slave geneve3): making interface the new active one [ 156.294003][ T8247] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 156.303239][ T144] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 156.312455][ T144] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 156.331786][ T8247] __nla_validate_parse: 4 callbacks suppressed [ 156.331805][ T8247] netlink: 28 bytes leftover after parsing attributes in process `syz.4.644'. Stopping acpid: [ 156.468982][ T144] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 156.494095][ T144] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 156.598557][ T8257] xt_hashlimit: size too large, truncated to 1048576 [ 156.652126][ T8263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.647'. [ 156.714360][ T8260] syzkaller0: entered promiscuous mode [ 156.763563][ T8260] syzkaller0: entered allmulticast mode [ 156.790256][ T8264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.645'. [ 156.806592][ T8267] veth1_macvtap: left promiscuous mode [ 156.822682][ T8264] netlink: 'syz.1.645': attribute type 30 has an invalid length. [ 156.855193][ T8264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.645'. [ 156.946942][ T8272] sit0: entered promiscuous mode [ 156.997273][ T8272] netlink: 8 bytes leftover after parsing attributes in process `syz.3.649'. [ 157.003292][ T8273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.649'. [ 157.436128][ T8284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.651'. [ 157.482089][ T8284] netlink: 12 bytes leftover after parsing attributes in process `syz.3.651'. [ 157.496246][ T8285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.651'. [ 157.522255][ T8285] netlink: 12 bytes leftover after parsing attributes in process `syz.3.651'. [ 157.544089][ T8269] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 157.625323][ T144] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.660214][ T144] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.690371][ T144] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.724877][ T144] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 OK [ 157.895104][ T8296] ieee802154 phy0 wpan0: encryption failed: -22 [ 157.954247][ T8296] sctp: [Deprecated]: syz.1.656 (pid 8296) Use of int in max_burst socket option. [ 157.954247][ T8296] Use struct sctp_assoc_value instead Stopping syslogd: stopped /sbin/syslogd (pid 4980) OK [ 158.792392][ T8330] netlink: 'syz.2.664': attribute type 12 has an invalid length. [ 158.825509][ T8330] netlink: 'syz.2.664': attribute type 29 has an invalid length. [ 158.860538][ T8336] netlink: 'syz.2.664': attribute type 12 has an invalid length. [ 158.873226][ T5639] Bluetooth: hci0: command 0x080f tx timeout [ 158.890052][ T5766] IPVS: starting estimator thread 0... [ 158.905528][ T8336] netlink: 'syz.2.664': attribute type 29 has an invalid length. [ 158.923394][ T8338] netlink: 'syz.0.665': attribute type 4 has an invalid length. [ 158.945770][ T8337] IPVS: sed: FWM 3 0x00000003 - no destination available [ 158.992730][ T8339] IPVS: using max 29 ests per chain, 69600 per kthread [ 159.010759][ T8338] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 159.120157][ C0] Dead loop on virtual device ip6_vti0 (net 36), fix it urgently! umount: can't remount debugfs read-only [ 159.335008][ T8352] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 159.690843][ T8361] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 159.906668][ T8372] tipc: Enabling not permitted [ 159.913814][ T8372] tipc: Enabling of bearer rejected, failed to enable media [ 161.244823][ T8430] netlink: 'syz.1.688': attribute type 13 has an invalid length. [ 161.348912][ T8425] 8021q: adding VLAN 0 to HW filter on device bond3 [ 161.389207][ T8425] bridge0: port 3(bond3) entered blocking state [ 161.411315][ T8425] bridge0: port 3(bond3) entered disabled state [ 161.442176][ T8425] bond3: entered allmulticast mode [ 161.474736][ T8425] bond3: entered promiscuous mode [ 161.497604][ T8425] bridge0: port 3(bond3) entered blocking state [ 161.504129][ T8425] bridge0: port 3(bond3) entered forwarding state [ 161.841095][ T8443] __nla_validate_parse: 20 callbacks suppressed [ 161.841121][ T8443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.692'. [ 161.907961][ T47] bridge0: port 3(bond3) entered disabled state [ 161.950210][ T8436] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 162.307134][ T8446] netlink: 48 bytes leftover after parsing attributes in process `syz.3.693'. [ 162.352878][ T8448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.694'. [ 162.509855][ T8446] netlink: 48 bytes leftover after parsing attributes in process `syz.3.693'. [ 162.851902][ T8466] netlink: 'syz.1.700': attribute type 3 has an invalid length. umount: sysfs busy - remounted read-only[ 163.085867][ T8474] netlink: 'syz.2.702': attribute type 12 has an invalid length. umount: devtmpfs busy - remounted read-only [ 163.124545][ T8474] netlink: 'syz.2.702': attribute type 29 has an invalid length. [ 163.157375][ T8474] netlink: 148 bytes leftover after parsing attributes in process `syz.2.702'. umount: can't remount /dev/root read-only [ 163.194338][ T8474] netlink: 59 bytes leftover after parsing attributes in process `syz.2.702'. The system is going down NOW! Sent SIGTERM to all processes Connection to 10.128.0.96 closed by remote host. [ 164.236693][ T5364] ------------[ cut here ]------------ [ 164.242467][ T5364] workqueue: cannot queue hci_conn_timeout on wq hci3 [ 164.249396][ T5364] WARNING: kernel/workqueue.c:2298 at __queue_work+0xd3f/0x1040, CPU#0: kworker/0:3/5364 [ 164.259358][ T5364] Modules linked in: [ 164.266473][ T5364] CPU: 0 UID: 0 PID: 5364 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full) [ 164.275904][ T5364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 164.286012][ T5364] Workqueue: events l2cap_chan_timeout [ 164.291744][ T5364] RIP: 0010:__queue_work+0xd67/0x1040 [ 164.297180][ T5364] Code: a5 0e 49 8d 7d 18 48 89 f8 48 c1 e8 03 42 80 3c 20 00 74 05 e8 7a db a3 00 49 8b 75 18 49 81 c7 70 01 00 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef [ 164.316935][ T5364] RSP: 0018:ffffc9000361f890 EFLAGS: 00010082 [ 164.323230][ T5364] RAX: 1ffff1100ef5b14b RBX: 0000000000000008 RCX: ffff888026a9dd00 [ 164.331254][ T5364] RDX: ffff888034b36970 RSI: ffffffff8a9c8410 RDI: ffffffff903320b0 [ 164.339258][ T5364] RBP: 0000000000000020 R08: ffff888077ad8a47 R09: 1ffff1100ef5b148 [ 164.347265][ T5364] R10: dffffc0000000000 R11: ffffed100ef5b149 R12: dffffc0000000000 [ 164.355264][ T5364] R13: ffff888077ad8a40 R14: ffffffff903320b0 R15: ffff888034b36970 [ 164.363353][ T5364] FS: 0000000000000000(0000) GS:ffff88812529e000(0000) knlGS:0000000000000000 [ 164.372304][ T5364] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 164.378922][ T5364] CR2: 00007ffd9ca97ea0 CR3: 000000000e74a000 CR4: 00000000003526f0 [ 164.387028][ T5364] Call Trace: [ 164.390340][ T5364] [ 164.393324][ T5364] ? rcu_is_watching+0x15/0xb0 [ 164.398133][ T5364] queue_delayed_work_on+0x11a/0x1e0 [ 164.403464][ T5364] l2cap_chan_del+0x285/0x610 [ 164.408178][ T5364] l2cap_chan_close+0x4d7/0x770 [ 164.413066][ T5364] ? __pfx_l2cap_chan_close+0x10/0x10 [ 164.418559][ T5364] ? process_scheduled_works+0xa70/0x1860 [ 164.424450][ T5364] l2cap_chan_timeout+0x158/0x3b0 [ 164.429496][ T5364] ? process_scheduled_works+0xa70/0x1860 [ 164.435244][ T5364] process_scheduled_works+0xb5d/0x1860 [ 164.440933][ T5364] ? __pfx_process_scheduled_works+0x10/0x10 [ 164.446944][ T5364] ? assign_work+0x3d5/0x5e0 [ 164.451569][ T5364] worker_thread+0xa53/0xfc0 [ 164.456225][ T5364] kthread+0x389/0x470 [ 164.460323][ T5364] ? __pfx_worker_thread+0x10/0x10 [ 164.465453][ T5364] ? __pfx_kthread+0x10/0x10 [ 164.470070][ T5364] ret_from_fork+0x514/0xb70 [ 164.474718][ T5364] ? __pfx_ret_from_fork+0x10/0x10 [ 164.479871][ T5364] ? __switch_to+0xc79/0x1410 [ 164.485029][ T5364] ? __pfx_kthread+0x10/0x10 [ 164.489677][ T5364] ret_from_fork_asm+0x1a/0x30 [ 164.494479][ T5364] [ 164.497533][ T5364] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 164.504847][ T5364] CPU: 0 UID: 0 PID: 5364 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full) [ 164.514275][ T5364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 164.524627][ T5364] Workqueue: events l2cap_chan_timeout [ 164.530118][ T5364] Call Trace: [ 164.533429][ T5364] [ 164.536386][ T5364] vpanic+0x56c/0xa60 [ 164.540400][ T5364] ? __pfx__printk+0x10/0x10 [ 164.545036][ T5364] ? __pfx_vpanic+0x10/0x10 [ 164.549566][ T5364] ? is_bpf_text_address+0x292/0x2b0 [ 164.554882][ T5364] ? is_bpf_text_address+0x26/0x2b0 [ 164.560131][ T5364] panic+0xc5/0xd0 [ 164.563907][ T5364] ? __pfx_panic+0x10/0x10 [ 164.568371][ T5364] ? ret_from_fork_asm+0x1a/0x30 [ 164.573517][ T5364] __warn+0x315/0x4c0 [ 164.577576][ T5364] ? __queue_work+0xd3f/0x1040 [ 164.582404][ T5364] ? __queue_work+0xd3f/0x1040 [ 164.587308][ T5364] __report_bug+0x29a/0x540 [ 164.591947][ T5364] ? __queue_work+0xd3f/0x1040 [ 164.596759][ T5364] ? __pfx___report_bug+0x10/0x10 [ 164.601837][ T5364] ? __pfx_hci_conn_timeout+0x10/0x10 [ 164.607268][ T5364] ? do_raw_spin_lock+0x12b/0x2f0 [ 164.612347][ T5364] report_bug_entry+0x19a/0x290 [ 164.617236][ T5364] ? __queue_work+0xd67/0x1040 [ 164.622381][ T5364] ? __queue_work+0xd6c/0x1040 [ 164.627272][ T5364] handle_bug+0xce/0x200 [ 164.631560][ T5364] exc_invalid_op+0x1a/0x50 [ 164.636116][ T5364] asm_exc_invalid_op+0x1a/0x20 [ 164.640998][ T5364] RIP: 0010:__queue_work+0xd67/0x1040 [ 164.646418][ T5364] Code: a5 0e 49 8d 7d 18 48 89 f8 48 c1 e8 03 42 80 3c 20 00 74 05 e8 7a db a3 00 49 8b 75 18 49 81 c7 70 01 00 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef [ 164.666549][ T5364] RSP: 0018:ffffc9000361f890 EFLAGS: 00010082 [ 164.672668][ T5364] RAX: 1ffff1100ef5b14b RBX: 0000000000000008 RCX: ffff888026a9dd00 [ 164.680787][ T5364] RDX: ffff888034b36970 RSI: ffffffff8a9c8410 RDI: ffffffff903320b0 [ 164.688887][ T5364] RBP: 0000000000000020 R08: ffff888077ad8a47 R09: 1ffff1100ef5b148 [ 164.696899][ T5364] R10: dffffc0000000000 R11: ffffed100ef5b149 R12: dffffc0000000000 [ 164.705248][ T5364] R13: ffff888077ad8a40 R14: ffffffff903320b0 R15: ffff888034b36970 [ 164.713258][ T5364] ? __pfx_hci_conn_timeout+0x10/0x10 [ 164.718719][ T5364] ? rcu_is_watching+0x15/0xb0 [ 164.723526][ T5364] queue_delayed_work_on+0x11a/0x1e0 [ 164.728875][ T5364] l2cap_chan_del+0x285/0x610 [ 164.733588][ T5364] l2cap_chan_close+0x4d7/0x770 [ 164.738461][ T5364] ? __pfx_l2cap_chan_close+0x10/0x10 [ 164.743874][ T5364] ? process_scheduled_works+0xa70/0x1860 [ 164.749722][ T5364] l2cap_chan_timeout+0x158/0x3b0 [ 164.754835][ T5364] ? process_scheduled_works+0xa70/0x1860 [ 164.760750][ T5364] process_scheduled_works+0xb5d/0x1860 [ 164.766397][ T5364] ? __pfx_process_scheduled_works+0x10/0x10 [ 164.772438][ T5364] ? assign_work+0x3d5/0x5e0 [ 164.777085][ T5364] worker_thread+0xa53/0xfc0 [ 164.781839][ T5364] kthread+0x389/0x470 [ 164.785973][ T5364] ? __pfx_worker_thread+0x10/0x10 [ 164.791211][ T5364] ? __pfx_kthread+0x10/0x10 [ 164.795954][ T5364] ret_from_fork+0x514/0xb70 [ 164.800603][ T5364] ? __pfx_ret_from_fork+0x10/0x10 [ 164.805773][ T5364] ? __switch_to+0xc79/0x1410 [ 164.810502][ T5364] ? __pfx_kthread+0x10/0x10 [ 164.815139][ T5364] ret_from_fork_asm+0x1a/0x30 [ 164.819966][ T5364] [ 164.823926][ T5364] Kernel Offset: disabled [ 164.828269][ T5364] Rebooting in 86400 seconds..