last executing test programs: 16.412436632s ago: executing program 2 (id=15042): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x806c0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x101, 0x54, 0xbbf4, 0x4}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)={0x18, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x9}]}, 0x18}], 0x1}, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$OCFS2_IOC_INFO(r0, 0x80106f05, &(0x7f00000072c0)={&(0x7f0000007100)=[&(0x7f00000000c0)=@journal={{0x4f32494e, 0x7, 0x10, 0xc0000000}}, &(0x7f0000000140)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x40000000}}, &(0x7f0000000180)=@journal={{0x4f32494e, 0x7, 0x10, 0xc0000000}}, &(0x7f00000001c0)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x1}}, &(0x7f0000001300)=@freeinode={{0x4f32494e, 0x8, 0x10}, [{0x10001, 0x1}, {0x4, 0x3}, {0xee9, 0x3}, {0x9, 0x6}, {0x3, 0x25}, {0x8, 0x3}, {0x81, 0xfffffffffffffffe}, {0x10001, 0x8000}, {0x100, 0xfffffffffffffffe}, {0x3, 0x1}, {0x4, 0x7}, {0xc, 0x7}, {0x7}, {0xb, 0x3}, {0xcc3, 0x3}, {0x9, 0x400}, {0x6, 0x8}, {0xf, 0xffff}, {0x1, 0x7}, {0x9}, {0x4d8a, 0x4}, {0x26, 0x8}, {0xa9, 0x3}, {0x5, 0x2}, {0x1, 0xc39}, {0xfffffffffffffffe, 0x100}, {0x9, 0xcf}, {0x10c7, 0x8000000000000000}, {0x1ff, 0x80000001}, {0x200000000000, 0x5}, {0x7ff, 0x8}, {0xf, 0x3}, {0x8, 0x7}, {0x2}, {0x8, 0x8}, {0x7, 0x9e}, {0x4, 0xfffffffffffffeff}, {0x3}, {0x2, 0x3ff}, {0xd33, 0x80}, {0x1, 0x6}, {0x67b, 0x116a}, {0xff, 0xffffffffffffffff}, {0x7, 0x4d5a}, {0xe, 0x1}, {0x3, 0x3}, {0x9, 0x2}, {0x181f, 0x2}, {0x5, 0xfffffffffffffff8}, {0x0, 0x3}, {0x6, 0x8}, {0x2, 0x4fc3098d}, {0xd, 0x8}, {0x9, 0xa3bc}, {0xffffffffffffffff, 0x7f}, {0x401, 0x3}, {0x0, 0x10000}, {0x6, 0x9}, {0x6, 0xfeb}, {0xee, 0x1b1}, {0x8, 0x4}, {0x4, 0x8}, {0x4, 0x1}, {0x5, 0x18a7fc5}, {0x7, 0x100000000}, {0x2, 0x10}, {0xac, 0x8}, {0x2, 0xf0b1}, {0x6, 0x7}, {0x9, 0x4}, {0x2a0, 0x7}, {0x5, 0xfb}, {0x10000, 0x3}, {0x200000000, 0x3}, {0x8000000000000000, 0xb}, {0xf081, 0x2}, {0x8b, 0x7}, {0x8, 0x4}, {0x6, 0x100000000}, {0x2, 0x63}, {0xea2, 0x9}, {0x4, 0x400000}, {0x2, 0x4}, {0x4, 0x1}, {0xffff, 0x1}, {0xffffffffffffffff, 0x7}, {0x7fff, 0x7}, {0x2, 0x4}, {0x70, 0xb}, {0x8, 0x2}, {0x8, 0x5}, {0x800, 0xfd4}, {0x7f, 0x4}, {0x2, 0x9}, {0x6, 0x868e}, {0x87, 0x2}, {0x5, 0x9}, {0x5, 0x1ff}, {0x5, 0x9}, {0xffffffffffffff52, 0x2}, {0x1, 0xb}, {0x1, 0x483}, {0x0, 0x4}, {0x80000001}, {0x2000000000000000, 0x5}, {0x0, 0x10000}, {0x4, 0x1ff}, {0x7753, 0x7}, {0xee9, 0x2}, {0x1ff, 0x7f}, {0x9, 0x3}, {0x6, 0x92}, {0xfffffffffffffff6, 0x1d15}, {0x548, 0xedec}, {0x6, 0x9}, {0x3fffffffc00, 0x1000000000000000}, {0x34, 0x2}, {0x0, 0x6}, {0x5, 0x5}, {0x1, 0x5}, {0x6, 0x7}, {0x7, 0xfb}, {0x626, 0x41}, {0x100000001, 0x1}, {0x0, 0x5}, {0x5, 0xa1}, {0x0, 0x9ade}, {0x70a, 0x3}, {0x8, 0x8}, {0x0, 0x80000}, {0x65, 0x61}, {0x2, 0x16b8}, {0x900, 0xfffffffffffffff8}, {0x6, 0x1000}, {0x6ff38619, 0x1}, {0x6, 0x46f}, {0x7, 0x8}, {0x8, 0x6}, {0x2, 0xfff}, {0x9, 0x1}, {0xafd4, 0x7fffffffffffffff}, {0x5, 0x4}, {0x0, 0x7}, {0x5}, {0x10001, 0x625}, {0xffffffffffffffff, 0x10}, {0xd, 0x401}, {0xffffffffffffffff, 0x7}, {0x9, 0x10000}, {0xffffffffffffffdc, 0x9}, {0x7, 0xde}, {0x8000000000000001, 0x9}, {0x0, 0x7}, {0x10001}, {0x401, 0xc}, {0x8, 0x5}, {0x4, 0xd5}, {0x7, 0x5}, {0x5, 0x3}, {0xfffffffffffffbe9, 0x100}, {0x9, 0x7}, {0x5, 0x100000001}, {0x6, 0x200}, {0x4, 0x9}, {0x2, 0xfffffffffffffffb}, {0x1, 0x5}, {0x400000000, 0x4ccee838}, {0x0, 0x2}, {0x2, 0x400}, {0xf, 0x4}, {0x6, 0xb4}, {0x2, 0x3}, {0xfffffffffffffff8, 0x7}, {0xfff, 0x4}, {0x2, 0x1}, {0xffffffff, 0x9}, {0xd0c, 0xb62c}, {0x8000, 0xfffffffffffffffc}, {0x100, 0xffffffff}, {0x8000000000000001, 0x4}, {0x101, 0x3}, {0x0, 0x7}, {0xfffffffffffff001, 0x6}, {0x1, 0x2}, {0x10001, 0x5}, {0x101}, {0x9, 0x9}, {0x100000000}, {0x6, 0x8}, {0x8, 0xfffffffffffffa66}, {0x7ff, 0x4}, {0x7e3c8ea4, 0x5}, {0x1, 0x81}, {0x4, 0xffffffff}, {0x80, 0x9}, {0x10001, 0x6}, {0x0, 0x6}, {0x5, 0xa}, {0x6, 0x9}, {0x3, 0x7ff}, {0x1, 0x8}, {0xfffffffffffffffe, 0x20000000000}, {0x8, 0x8000000000000000}, {0x3ff, 0x5}, {0x15d7, 0x1}, {0xc00000000000, 0x4}, {0x2, 0x7}, {0x5, 0x3}, {0x52d5, 0x2}, {0x1, 0x8}, {0x8, 0xca}, {0x3, 0x66}, {0x9, 0x3}, {0xf296, 0x3}, {0x5, 0xd7c}, {0x5, 0xc}, {0xe8, 0x46a}, {0x9, 0x3}, {0x7, 0x3}, {0xfffffffffffffff7, 0x8000000000000001}, {0x2, 0x9}, {0x4, 0xc}, {0x5, 0x5}, {0x0, 0x2}, {0x0, 0x4}, {0x100, 0x9}, {0x7, 0x7}, {0x7fffffffffffffff, 0x3876e6a2}, {0x6, 0xffffffff}, {0x0, 0xa}, {0x7, 0xc}, {0xeeb, 0x3}, {0x6, 0x5}, {0x4, 0x7ff}, {0x5, 0x7}, {0x9, 0x9}, {0x0, 0x4}, {0x80, 0x9}, {0x5, 0x7f}, {0x9, 0x2}, {0x8}, {0x9, 0x4}, {0x7, 0x6}, {0x3, 0xffffffffffffffff}, {0xb, 0x7fffffff}, {0xffffffff, 0x2}, {0x0, 0x3}, {0x6, 0xb345}, {0x40, 0x9}, {0xfffffffffffffffa, 0x81}, {0x8, 0x100}, {0x1, 0xab}, {0xec2, 0xcda}, {0x6, 0x6}, {0x80, 0x1}]}, &(0x7f0000002340)=@uuid={{0x4f32494e, 0x5, 0x10, 0x2283b14f93ae57fc}}, &(0x7f0000002380)=@clustersize={{0x4f32494e, 0x1, 0x10, 0xa0000001}}, &(0x7f00000023c0)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x2}}, &(0x7f0000002400)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x80000001}, [{0x1, 0x2}, {0x7, 0xc}, {0x5, 0x3}, {0x8, 0x101}, {0x3, 0x6}, {0xff, 0x6}, {0x200, 0x3ef}, {0x100}, {0xffff, 0x7}, {0x7, 0x5d}, {0x0, 0x7}, {0x64, 0x8}, {0x8, 0x80000000}, {0x100000000, 0x7}, {0x5, 0xe000000000000000}, {0x4, 0x6}, {0x5, 0x8}, {0x63, 0x7}, {0x4000000000000000, 0x10001}, {0xfffffffffffffffa, 0x3b20}, {0x9, 0x2}, {0x8000000000000000, 0x8000000000000001}, {0x6, 0x6}, {0x6, 0xb508}, {0x4, 0x3}, {0xffffffffffffffff, 0x5}, {0xa, 0x7}, {0x8001, 0x101}, {0xc13, 0x10}, {0x8, 0xfffffffffffffbff}, {0x4, 0x1}, {0x4, 0x95f}, {0x7, 0x240000}, {0x3, 0x3}, {0x101, 0x100000001}, {0xfda1, 0x3}, {0x2, 0x5}, {0x5f3}, {0x3, 0x59}, {0x3ff, 0x5}, {0x9, 0x9}, {0x2, 0x503e0a58}, {0x1, 0x80000001}, {0x6, 0x6f58}, {0xc000000000, 0x1000}, {0x0, 0x1}, {0xf4a, 0x2}, {0xa, 0x7}, {0x8000000000000000, 0x2a4}, {0xffffffff, 0x100}, {0xfffffffffffffc01, 0xc14b}, {0x9}, {0x7, 0x4}, {0x6, 0x1}, {0x2, 0xfffffffffffffffc}, {0x3, 0x4}, {0x9e, 0xd310}, {0x8601}, {0xaa, 0xe5f}, {0x1000}, {0x8c, 0x8001}, {0x100000001, 0x8}, {0x1, 0xea47}, {0x3, 0x3}, {0x80000000000000, 0x7e}, {0x5, 0x3d06}, {0x4, 0x6}, {0x8}, {0xc, 0x9}, {0x6, 0x534}, {0x0, 0x4}, {0x5d, 0x786}, {0x8000, 0x8}, {}, {0x9, 0x3}, {0x4, 0x5}, {0xb8c8ee5, 0x8000000000000000}, {0x80, 0xcf8b}, {0x8, 0x1}, {0xffffffffffffffc0}, {0x8000, 0xc}, {0x2, 0xffffffffffffffff}, {0xa723, 0x100}, {0x6, 0x6}, {0x7fffffffffffffff, 0xfffffffffffffffb}, {0x39, 0x80000001}, {0x5, 0x6}, {0x2, 0x720}, {0x0, 0xc}, {0x7, 0x7}, {0xd56, 0x4}, {0xf, 0x3}, {0x80, 0x9}, {0x401}, {0x5, 0x7fffffff}, {0x9, 0xc}, {0xef, 0xe}, {0x3, 0x1}, {0x0, 0xe09}, {0xba7f, 0xff}, {0x8, 0x100000001}, {0x4}, {0x800, 0x81}, {0x7, 0x7}, {0x10001}, {0x3, 0x7}, {0x1, 0x8}, {0x9, 0xfffffffffffffffb}, {0x71ccd28, 0x2}, {0x1ff, 0x3}, {0x1, 0x6}, {0x9, 0x1}, {0x4, 0x2}, {0x9, 0x1}, {0x9, 0xd}, {0x2800000000000, 0x800}, {0x7ff, 0xb}, {0x5, 0x2000}, {0x4, 0x2}, {0x5, 0x7c29}, {0xffffffffffffffff, 0x5}, {0x0, 0x5}, {0x6, 0xe24}, {0x8, 0x9}, {0x4a, 0x7}, {0x3, 0x8c}, {0x1, 0x4}, {0x9, 0x400}, {0x9, 0xffffffffffff81b3}, {0x6b9, 0x5}, {0xffffffffffffffff, 0x5}, {0x8, 0xf4c}, {0x9, 0xcc75}, {0x401, 0x8}, {0x4, 0x4}, {0x9, 0xe41}, {0x96e8, 0xffffffff00000000}, {0x5}, {0x7fffffffffffffff, 0x7fffffff}, {0x9, 0x1ff}, {0x2f, 0xffffffffffff1064}, {0x6, 0x6}, {0x5, 0x1000}, {0x100000001, 0x10000}, {0x443, 0x6}, {0x7, 0xffffffffffffffe2}, {0x1, 0x9}, {0x1, 0x2}, {0xfffffffffffff6ed, 0xffffffffffffffff}, {0x2, 0x7fffffff}, {0x8, 0xe3e1}, {0x6, 0x3}, {0x6, 0x1}, {0x8000000000000000, 0x9}, {0x100000, 0x2}, {0x9, 0xf6}, {0xfffffffffffffffe}, {0x7f, 0x6}, {0xffffffffffffffff, 0x5}, {0x9, 0xa}, {0x5, 0x6}, {0x2, 0xdca}, {0x10, 0x7}, {0x2, 0x3}, {0x100}, {0xc, 0x11}, {0x7}, {0x4, 0x10}, {0x8, 0x2}, {0x3, 0x5}, {0x9}, {0x3, 0x7}, {0xf, 0x9}, {0xa44, 0xd}, {0x8, 0x80}, {0x7, 0x8000000000000001}, {0xffffffff, 0x1}, {0x6, 0x3}, {0x5, 0x5}, {0x40, 0x4}, {0xfffffffffffff36b, 0x8}, {0x7, 0xfff}, {0xe, 0x8}, {0x8, 0x2}, {0x3, 0xfffffffffffffff8}, {0x11b, 0x1ff}, {0x3, 0x8}, {0x86f, 0x4}, {0x8, 0x3}, {0x2}, {0x7, 0x9}, {0x401, 0x1}, {0x6, 0xffff}, {0x3, 0x9}, {0x0, 0x5}, {0x3, 0x4a0000000000}, {0xfad, 0x8000}, {0x2, 0xfffffffffffffff7}, {0x0, 0x7}, {0x2, 0x9}, {0x3, 0xffff}, {0xf, 0x8}, {0x0, 0x74e2}, {0x8, 0x753b}, {0x81, 0x80}, {0x0, 0x8000}, {0xfffffffffffffff7, 0xfffffffffffffffa}, {0x21dc0847, 0x6}, {0x9, 0x5}, {0x100000000, 0x7}, {0x5ab, 0x1}, {0x1}, {0x8000, 0x7}, {0x0, 0x1}, {0x4, 0xa066}, {0x120000000000, 0x6}, {0xfffffffffffffffd, 0x2}, {0x9, 0x1}, {0x2, 0x8514}, {0x4, 0x7fffffff}, {0x2}, {0x5, 0x80000001}, {0x80000001, 0xdb}, {0x10001}, {0x10001, 0xffffffffffffffff}, {0x8, 0x7}, {0x4, 0xf1f6}, {0x2, 0xfff}, {0x7, 0x100000001}, {0x8, 0xb}, {0x81, 0xc9d}, {0x199, 0x7f}, {0x8, 0x401}, {0x4, 0xf}, {0x4, 0x8}, {0xf35, 0x7}, {0x0, 0x7ff}, {0x100000001, 0x400}, {0x480000000, 0xffffffff80000001}, {0x1, 0xb4}, {0x3, 0x1}, {0xf864, 0x2}, {0x7, 0x8}, {0x8, 0x800}, {0x1, 0x7ff}, {0x9, 0x4}, {0xd6, 0x4a2}, {0x4, 0x2}, {0x7f, 0xffffffff}, {0x80000001, 0xda}, {0x0, 0x8}, {0x9}, {0x8, 0x4}, {0x1, 0x9}, {0xfffffffffffffff7, 0x5}]}, &(0x7f0000003440)=@journal={{0x4f32494e, 0x7, 0x10, 0x80000000}}, &(0x7f0000003480)=@journal={{0x4f32494e, 0x7, 0x10, 0x140000001}}, &(0x7f00000034c0)=@features={{0x4f32494e, 0x6, 0x10, 0x80000000}}, &(0x7f0000003500)=@uuid={{0x4f32494e, 0x5, 0x10, 0x40000000}}, &(0x7f0000003540)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000000}}, &(0x7f0000003580)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000001}}, &(0x7f00000035c0)=@freefrag={{0x4f32494e, 0x9, 0x10}, {}, 0x3}, &(0x7f0000003700)=@uuid={{0x4f32494e, 0x5, 0x10}}, &(0x7f0000003740)=@uuid={{0x4f32494e, 0x5, 0x10, 0x80000001}}, &(0x7f0000003780)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x180000001}}, &(0x7f00000037c0)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x100000000}}, &(0x7f0000003800)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000000}}, &(0x7f0000003840)=@journal={{0x4f32494e, 0x7, 0x10, 0xc0000001}}, &(0x7f0000003880)=@blocksize={{0x4f32494e, 0x2, 0x10}}, &(0x7f00000038c0)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000001}}, &(0x7f0000003900)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x40000001}, [{0x4, 0x7}, {0xc3e0, 0xc3}, {0x8000000000000000, 0x15710000}, {0xd, 0x8}, {0x52, 0x40}, {0x4, 0x4}, {0x239a, 0x9}, {0x66b71fbc, 0xf95}, {0x9, 0x10}, {0x9, 0x8}, {0x4, 0x7}, {0x3, 0xffff}, {0x80000000, 0xf}, {0x6, 0x9}, {0x400, 0x4}, {0x3, 0xffffffff}, {0x7, 0x591}, {0x0, 0x1a}, {0x8, 0x3}, {0xda3d}, {0xffffffffffffffff, 0x48}, {0x5, 0xcd}, {0x9, 0x3}, {0x6, 0x2d}, {0x0, 0x1}, {0x40, 0x80}, {0x7ff, 0xc3e}, {0x10001, 0x10000}, {0xffffffffffffffff, 0x98c}, {0x5, 0x14c}, {0x4, 0x1}, {0x9, 0xe}, {0xffff, 0x81}, {0x1f, 0x8}, {0x81, 0xffffffff}, {0x9c, 0x400}, {0x27, 0x8}, {0x3, 0x2}, {0x5, 0x1}, {0x1000, 0xe}, {0x0, 0x33}, {0xe}, {0x5, 0x4}, {0x3, 0x2}, {0x0, 0x7}, {0x8, 0x7fffffffffffffff}, {0xde, 0x7}, {0x4, 0x3}, {0x7, 0x1}, {0x2, 0x6}, {0x0, 0x42}, {0xa21, 0xfffffffffffffff4}, {0x100000001}, {0x1ff, 0x6}, {0xffff, 0x4}, {0x3ff}, {0x4000000000000, 0x8}, {0xe, 0x1}, {0x6, 0x70195c33}, {0x4cfe, 0xa9da}, {0xffffffffffffffff, 0x10000}, {0x5, 0x10000}, {0x6, 0xd7e7}, {0x4, 0x81}, {0x8, 0x1000}, {0x18, 0x60}, {0xffffffffffffaf80, 0x2}, {0x400000000000, 0xffffffffffffffff}, {0x400, 0x4}, {0x400, 0x7}, {0x4, 0xffffffff}, {0x8, 0x6}, {0x6, 0x1}, {0x16faf946, 0x12}, {0x0, 0x5}, {0xffffffff, 0x100000000}, {0x7fff, 0x9}, {0x6, 0x9}, {0x8, 0x8}, {0x1}, {0x9, 0x1}, {0x8ec, 0x1}, {0x5, 0x6}, {0x8, 0x2}, {0x5, 0x6}, {0xa, 0x8}, {0x3, 0x5}, {0x1, 0x5}, {0x8, 0x1}, {0x10001, 0x7}, {0x8000000000000001, 0x80000001}, {0x2, 0x8e37}, {0x10, 0x4}, {0x2}, {0x401, 0x8000000000000001}, {0xffffffffffff7d5a, 0xfffffffffffffffb}, {0x1200000000, 0xe9}, {0x9, 0x72f}, {0x2}, {0x8, 0x7}, {0x6, 0x3}, {0x4, 0x1}, {0x8000000000000000, 0xffffffffffffffff}, {0xa0e}, {0x100000001}, {0x2, 0x9d}, {0x3, 0x5}, {0xe, 0x8001}, {0x400, 0x7}, {0x8, 0x6}, {0x1, 0x1}, {0x3, 0x6}, {0x4670, 0x8000}, {0x6, 0x752}, {0x3, 0x2}, {0x8, 0x2}, {0x8, 0x2}, {0x200, 0x2}, {0x5, 0x241d}, {0x4, 0xe}, {0xf, 0xffffffff}, {0x2, 0x7}, {0x8, 0x8}, {0xfffffffff0000000, 0x9}, {0x4, 0x100000001}, {0x5586, 0x5}, {0x81, 0x4}, {0x40, 0x7}, {0x8, 0x1000}, {0x716188ad, 0x2}, {0xb, 0x1}, {0x582, 0x10}, {0x101, 0x3}, {0xfffffffffffffff9, 0x4}, {0x9e, 0x2}, {0x2, 0x5}, {0x1, 0x8}, {0x0, 0x4}, {0x8, 0x1}, {0x9, 0x6}, {0x5, 0x6}, {0x5, 0x4}, {0xa, 0x8000000000000000}, {0x2666, 0x3}, {0x1125, 0x6}, {0x100000001, 0x1}, {0xfffffffffffffff0}, {0x0, 0x3}, {0x3, 0x1000}, {0x3, 0xfb}, {0x2, 0x8}, {0x1, 0x2}, {0x5, 0x1}, {0x9, 0x9}, {0x101, 0x3}, {0xd, 0x8}, {0x8, 0x1}, {0xfffffffffffff000, 0x68}, {0x40, 0xc}, {0x7, 0x9}, {0x4, 0x101}, {0x6, 0x5}, {0x6, 0x6}, {0x5, 0x10000}, {0x3, 0x198}, {0xffffffffffffffff, 0x6}, {0x2, 0x650}, {0x9, 0x6}, {0x81, 0x3ff}, {0x0, 0xffffffff}, {0x2, 0x8}, {0x3}, {0x7fffffffffffffff, 0x8}, {0x3, 0x47}, {0x75, 0x1}, {0x401, 0xfff}, {0x0, 0xb}, {0x3a8, 0x1}, {0x8, 0x8}, {0x2, 0xa00}, {0xe671, 0xffffffff}, {0xefe, 0x3}, {0x0, 0x5}, {0x20000000000, 0xfffffffffffffff8}, {0xe, 0xc}, {0x7, 0x1}, {0x66, 0x1734}, {0x5, 0x8}, {0x3, 0x4}, {0x1, 0x6}, {0xc, 0x12}, {0x2, 0x4}, {0xc}, {0x7fffffff, 0x4e2f}, {0x3, 0x7}, {0x3, 0xa66}, {0xfffffffffffffffe, 0x59}, {0x127, 0x2}, {0x8, 0x80}, {0x6, 0x6}, {0xf01, 0x4}, {0x800, 0x8}, {0x8, 0x8}, {0x76c5, 0x8}, {0x3, 0xffffffffffffff09}, {0x1}, {0x3, 0x100000001}, {0x769, 0x8000}, {0xa, 0x5}, {0x100000001, 0xfff}, {0x9, 0x4}, {0x4, 0x8000000000000001}, {0x6, 0x4}, {0x4, 0xfffffffffffffe01}, {0x8}, {0x8, 0x326}, {0xc, 0x98}, {0x7, 0x5a7c}, {0x401, 0x7}, {0x4, 0x28b0}, {0x5, 0x180000000000}, {0xffff, 0x3}, {0x4, 0x4}, {0x6, 0x2}, {0x4, 0x7ff}, {0x3, 0x6}, {0xffffffff, 0xff}, {0x7}, {0x0, 0x1}, {0x9, 0x9}, {0x7, 0xf4c5}, {0x0, 0x7}, {0x8001, 0x7fffffff}, {0x50d, 0x1}, {0x7, 0xcd52}, {0xe, 0x7fffffff}, {0x3, 0x1}, {0xb9, 0x7}, {0xffffffff, 0x7}, {0x40, 0x3}, {0x8, 0x5}, {0x2, 0x9}, {0x5, 0x7}, {0x9, 0x280000000000000}, {0x9, 0x2}, {0x9, 0xf}, {0xc5fd, 0x2}, {0x401, 0x5}, {0x8001, 0x9}, {0x2, 0x4}, {0x10001, 0x4b}, {0x5, 0x4}, {0x2, 0x1}, {0x4, 0x6}, {0x92, 0x8}]}, &(0x7f0000004940)=@uuid={{0x4f32494e, 0x5, 0x10}}, &(0x7f0000004980)=@clustersize={{0x4f32494e, 0x1, 0x10, 0xc0000000}}, &(0x7f00000049c0)=@journal={{0x4f32494e, 0x7, 0x10}}, &(0x7f0000004a00)=@freeinode={{0x4f32494e, 0x8, 0x10}, [{0x8, 0x6}, {0x1, 0x1}, {0xfffffffffffffff6, 0x381e}, {0xe5, 0x1}, {0x4, 0x2}, {0xffffffff, 0x1}, {0x2, 0x40}, {0x6, 0x3f85b1f5}, {0x400, 0xda30}, {0xcf3, 0x3}, {0xffffffffffff0001, 0x1}, {0x2, 0x4}, {0x7, 0x1}, {0x2922000000000, 0x9}, {0x7, 0xffffffffffff1224}, {0xfffffffffffffffa, 0x4}, {0x4, 0xb79}, {0x2, 0xfffffffffffffffa}, {0x5, 0x7}, {0x0, 0x5}, {0x6c8, 0xffffffffffffff02}, {0x0, 0xffffffffffffff01}, {0x80000000, 0x6}, {0x0, 0x7}, {0x4}, {0x2, 0x2}, {0x9, 0x4}, {0x8029, 0x4}, {0xffffffff, 0x6}, {0xb, 0x9}, {0x6, 0x481}, {0xdc, 0x33a}, {0x9, 0x7}, {0x9, 0x1}, {0xffffffffffff8000, 0x200}, {0x7, 0x492}, {0x7, 0x3}, {0x3, 0xf37}, {0xfff, 0x400}, {0xd33, 0x5}, {0x5, 0x7fffffff}, {0x6, 0x1}, {0x7f}, {0x3ff, 0x8}, {0x7, 0x3}, {0x2, 0x8}, {0x2, 0x10}, {0x4, 0x7}, {0xd91, 0x6}, {0x6, 0x6}, {0x18000, 0x9}, {0x8000000000000000, 0x5}, {0xae17, 0xfffffffffffffd38}, {0x5, 0x9}, {0x1, 0x1304}, {0x713a, 0x6}, {0x1bc033c3, 0x100}, {0x100, 0xa}, {0x3a8, 0x5}, {0x9323, 0xd19}, {0x6, 0x3}, {0xfffffffffffffffb, 0x6}, {0x2, 0x1}, {0x9, 0xb02}, {0x1000, 0x2}, {0xfff}, {0x6, 0x7fff}, {0x9, 0x2}, {0x6, 0x6}, {0x1}, {0x2, 0x7fffffff}, {0x42f2, 0x35}, {0x9, 0xbdf}, {0x3, 0x4}, {0x2, 0x2}, {0x10000000000, 0x3}, {0xffff, 0x80000001}, {0x10000}, {0x3, 0x2}, {0x232b47aa, 0x7}, {0x0, 0x10001}, {0x7ff, 0x7}, {0x2, 0x7}, {0x9, 0x80000001}, {0xcd4, 0x7}, {0x7}, {0x2000000000, 0x7}, {0x8, 0x400}, {0x3, 0x1}, {0x8000, 0x800}, {0x3, 0xc}, {0xfff, 0xa1a}, {0x0, 0x7}, {0x7, 0x1}, {0xfffffffffffffff7, 0x2}, {0x1c0, 0x80000001}, {0x8, 0x100000000}, {0xc, 0x4f}, {0x3fd9800000000, 0x7}, {0x1, 0x511}, {0x0, 0xe88}, {0x0, 0x6}, {0x6a10218d, 0xa}, {0xd1f9, 0x6}, {0x1, 0x4}, {0x400, 0x6}, {0x5, 0x7}, {0x5, 0x754}, {0x3, 0x3}, {0x1, 0x1}, {0x8, 0x2}, {0x54000000000000, 0x400}, {0x3, 0x8c6}, {0x7, 0xfff}, {0x0, 0x7}, {0xffffffff, 0x4}, {0xffffffffffffffff, 0x9}, {0xd680, 0x6}, {0x0, 0x5}, {0x6, 0x6}, {0x46, 0x6}, {0x3}, {0x7f, 0x5}, {0x854f, 0x6}, {0x7, 0xa}, {0x2, 0x3}, {0x2, 0xfffffffffffffc01}, {0xfffffffffffffffb, 0x2}, {0xc, 0x1000}, {0x8, 0x7}, {0x1e3, 0x5487aba}, {0x0, 0x4}, {0x923}, {0x8000, 0x9}, {0xf, 0x7}, {0x401, 0x14c}, {0x1, 0x5}, {0xfffffffffffffff5, 0x4}, {0xc66, 0x3}, {0x4, 0x77940000000}, {0x8000, 0x2}, {0x5, 0x7ff}, {0x3, 0x80000000}, {0x1, 0xa}, {0x6, 0x8}, {0x4, 0x4}, {0x5, 0x5}, {0x65c, 0x9}, {0xc7, 0x100000000}, {0x3, 0x9}, {0xfffffffffffffffd, 0x7}, {0x5, 0xd52}, {0x2, 0xd0f5}, {0x4, 0x7fffffff}, {0x4, 0x1}, {0x926, 0x8}, {0x7, 0x6}, {0x4, 0x9eed}, {0x101}, {0x6, 0x80000001}, {0xe, 0x6}, {0x45, 0x2}, {0x9, 0xffffffffffffffff}, {0x5, 0x10}, {0xffffffffffffffff, 0xaa}, {0x3f9, 0xffffffffffffffff}, {0xfffffffffffffffe, 0x1ff}, {0xfffffffffffffff9, 0x7fff}, {0x0, 0xfffffffffffffffd}, {0xffffffffffffff01, 0x9}, {0x44, 0x5}, {0x81, 0x5}, {0x4, 0xffffffffffffffff}, {0xaee, 0x8}, {0x0, 0x9}, {0x8, 0x4}, {0x8, 0x1}, {0x3, 0x8}, {0x8, 0x401}, {0x6452, 0xd}, {0x8001, 0x5}, {0xfffffffffffffffd, 0x40}, {0x8, 0x7}, {0xffffffffffffffc0}, {0x1b8000000, 0x1}, {0xd, 0x10000}, {0x6, 0x4}, {0x7fffffff, 0x3}, {0x8, 0x9}, {0x8, 0x5}, {0x5, 0x4}, {0x8, 0x9}, {0xe3, 0x8}, {0x8, 0x1c0000000}, {0x6, 0x8000000000000000}, {0xd, 0x6}, {0x7, 0x3e3}, {0x7, 0x7ff}, {0x4, 0x9}, {0x7d, 0x7f}, {0xfffffffffffffffb, 0x8c7}, {0x7ff, 0x5}, {0x80000001, 0x8}, {0x80, 0x3}, {0x7, 0x6}, {0xe780, 0x80}, {0x3, 0x2}, {0x4aa, 0x9cd7}, {0x3, 0x1}, {0xffffffffffff93f0, 0x80000001}, {0x9c, 0xfffffffffffff933}, {0x41, 0x7}, {0x0, 0xffc00000}, {0x1, 0xd}, {0xda62, 0x884e}, {0x867f, 0x3}, {0x9, 0xd}, {0x3, 0x2675}, {0x7, 0x1}, {0x7, 0x7}, {0x7, 0x8}, {0x4, 0x8}, {0x401, 0xffffffff80000000}, {0x8, 0x10001}, {0x5}, {0x3ff}, {0x4, 0x7fffffff}, {0x2, 0x300000000000000}, {0xf1d, 0x1}, {0x4, 0x7fffffff}, {0x1c00, 0x4}, {0x35, 0x2}, {0x10001, 0x9}, {0x10000, 0x4}, {0x10, 0x1}, {0x7, 0x91}, {0x2, 0x7}, {0x45b3, 0xc7}, {0x54, 0x6}, {0x80000000, 0x9}, {0xc0a5, 0x8000}, {0x1, 0xc0}, {0x0, 0x1ff}, {0xf, 0x7}, {0x8, 0x8001}, {0x3, 0xa88b}, {0x7f, 0x1}, {0xfffffffffffffffe, 0x10}, {0x100, 0x8}, {0x596, 0x8}, {0x4, 0xfffffffffffffffb}, {0x200, 0x7fff}, {0xffff, 0xf}, {0x8, 0x8000000000000001}, {0x8000, 0x200}]}, &(0x7f0000005a40)=@clustersize={{0x4f32494e, 0x1, 0x10}}, &(0x7f0000005a80)=@clustersize={{0x4f32494e, 0x1, 0x10, 0xc0000000}}, &(0x7f0000005ac0)=@journal={{0x4f32494e, 0x7, 0x10, 0x80000000}}, &(0x7f0000005b00)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000000}}, &(0x7f0000005b40)=@uuid={{0x4f32494e, 0x5, 0x10, 0x1}}, &(0x7f0000005b80)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000001}}, &(0x7f0000005bc0)=@features={{0x4f32494e, 0x6, 0x10}}, &(0x7f0000005c00)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000001}}, &(0x7f0000005d40)=@maxslots={{0x4f32494e, 0x3, 0x10, 0xc0000000}}, &(0x7f0000005d80)=@clustersize={{0x4f32494e, 0x1, 0x10, 0xc0000001}}, &(0x7f0000005dc0)=@journal={{0x4f32494e, 0x7, 0x10}}, &(0x7f0000005e00)=@features={{0x4f32494e, 0x6, 0x10, 0x1}}, &(0x7f0000005e40)=@label={{0x4f32494e, 0x4, 0x10, 0x1}}, &(0x7f0000005ec0)=@clustersize={{0x4f32494e, 0x1, 0x10}}, &(0x7f0000005f00)=@label={{0x4f32494e, 0x4, 0x10, 0x80000001}}, &(0x7f0000005f80)=@features={{0x4f32494e, 0x6, 0x10, 0xc0000000}}, &(0x7f0000005fc0)=@blocksize={{0x4f32494e, 0x2, 0x10}}, &(0x7f0000006000)=@uuid={{0x4f32494e, 0x5, 0x10, 0x40000001}}, &(0x7f0000006040)=@uuid={{0x4f32494e, 0x5, 0x10, 0x40000001}}, &(0x7f0000006080)=@freeinode={{0x4f32494e, 0x8, 0x10}, [{0x7, 0x4}, {0x7, 0x7}, {0x22, 0x3}, {0x6, 0x3}, {0x4a, 0x16fe}, {0x2, 0x43}, {0x6, 0x11}, {0x3, 0x401}, {0x9, 0x5972}, {0x0, 0x7}, {0x7, 0xe67}, {0x100000000, 0x7}, {0x6f, 0x2}, {0xfffffffffffffffd, 0xfffffffffffffff1}, {0x3, 0x3}, {0xffffffff00000001, 0xd219}, {0x2, 0x1}, {0x5, 0x8}, {0x5, 0x7}, {0x8, 0x6}, {0x5, 0xfffffffffffffffa}, {0xffffffff, 0x7}, {0x0, 0x5}, {0x0, 0xa}, {0x7fff, 0x637c}, {0xc, 0x5}, {0x971}, {0x7fffffff, 0x9}, {0x0, 0x6}, {0x4, 0x3}, {0x9}, {0x9, 0x2}, {0x380000000, 0x2}, {0x0, 0x7}, {0x212d, 0x5}, {0xfd2e, 0x2}, {0xe6, 0x5311}, {0x5}, {0x3, 0x1}, {0x10001, 0x3}, {0x0, 0x5}, {0x8001, 0x5}, {0x2e4, 0x1}, {0x2, 0x20000}, {0x80000000, 0x7fffffffffffffff}, {0x2, 0x5e}, {0x6, 0x4f}, {0x8000, 0x3}, {0x0, 0x5}, {0x5df, 0x3}, {0x1, 0x8ef}, {0x4, 0x8}, {0x1, 0x9}, {0x5, 0x1}, {0x8000, 0x6}, {0x9, 0x8001}, {0x3, 0x6}, {0x0, 0x89}, {0x8, 0x8}, {0x75f88681, 0xea}, {0x8, 0x2}, {0x6, 0x3}, {0x1, 0x5}, {0x6, 0x7}, {0x6, 0x97}, {0x1, 0x8}, {0xfffffffffffff800}, {0x3, 0x9}, {0x9, 0xf589}, {0x6, 0x5}, {0x7fff, 0xfffffffffffffff8}, {0x10001}, {0x2, 0xffffffffffff0000}, {0x7fff, 0x9}, {0x9, 0x10}, {0x8d0, 0x7fffffffffffffff}, {0x5, 0x4}, {0x2346, 0xfff}, {0x40, 0x7}, {0x4, 0x2}, {0x1cc2, 0x7e}, {0x7, 0x4}, {0x7, 0x2}, {0x5, 0x4a22}, {0x200, 0x1}, {0x8, 0x7}, {0x1, 0x5}, {0x9, 0x6}, {0x5, 0x1000}, {0x4, 0xffffffff}, {0x5, 0xc0}, {0x4, 0x7}, {0xf, 0x6}, {0x6fb2, 0x1}, {0x4, 0x4c5a20c7}, {0x8, 0xfa59}, {0x238f, 0x80000000}, {0xa, 0xffff}, {0x81, 0xffffffffffffffff}, {0x4975, 0x6d9}, {0xe, 0xffffffff}, {0x8000000000000001, 0x2040}, {0x3, 0x591}, {0x7, 0x2}, {0x8, 0x9e8}, {0x28c, 0x57}, {0x6, 0x9}, {0x1000, 0x7db}, {0x1000, 0x80000001}, {0xf}, {0x7, 0x2}, {0x80000001, 0x9}, {0x4, 0x4}, {0xa, 0xfffffffffffffffc}, {0xa9, 0x5}, {0x4, 0xffffffffffffffff}, {0x16d2, 0x40}, {0xac8, 0x73d}, {0x9, 0x3}, {0x2, 0x429}, {0x6, 0x4}, {0x5, 0x6}, {0x4, 0x6}, {0x80, 0x7}, {0xf, 0x8}, {0x10, 0x3ff}, {0x7, 0x7}, {0x8, 0x4}, {0xfffffffffffffff1, 0x3}, {0x5, 0x8}, {0x768, 0x7}, {0x3, 0x2}, {0x0, 0x4}, {0x0, 0x100000000}, {0x9, 0x81}, {0x3, 0x800000000000}, {0x100000001}, {0x6, 0x4}, {0x9, 0x8000000000000001}, {0x6, 0x3}, {0x10, 0x80000001}, {0xffffffffffffffff, 0x7}, {0x0, 0x700000}, {0x4, 0x2}, {0x7fffffff, 0x1}, {0x5, 0x5}, {0xfad, 0x8}, {0x1, 0x4}, {0x46, 0x9}, {0xe9, 0xfffffffffffffff9}, {0x4, 0x9}, {0x5, 0x1}, {0x100000000, 0x2}, {0x5, 0x9}, {0x6, 0x4d3}, {0x3ff, 0x10001}, {0x96, 0x7}, {0x9, 0xd176}, {0x2, 0x7}, {0x3, 0x2}, {0x6, 0x10000}, {0x7, 0xffffffffffffff81}, {0x2, 0x6}, {0xfffffffffffffff9, 0x8000000000000000}, {0x8, 0x51}, {0x8000, 0x7}, {0x100000001, 0x1}, {0x5, 0x1}, {0x100000000, 0x9}, {0x1, 0x10001}, {0x5, 0x3ff}, {0x5, 0x5}, {0x1, 0x9}, {0xdccb, 0x50}, {0x8, 0x8}, {0x5, 0x29036e34}, {0x9ec, 0x154}, {0x1, 0x1}, {0x4, 0x76}, {0xfff, 0x5}, {0xff, 0x1}, {0x3, 0x6}, {0x3, 0x3}, {0x8, 0x18000000000000}, {0x1, 0x401}, {0x5, 0xfffffffffffffffb}, {0x81, 0x1ff}, {0x1, 0x5}, {0x0, 0x4}, {0x6, 0x2}, {0x5, 0x4}, {0x5, 0x40}, {0x5b098678, 0x7}, {0x7ff, 0x4}, {0x4, 0x4}, {0x9, 0x6}, {0xe14, 0x4}, {0xfffffffffffffff8, 0x3}, {0x8001, 0x4}, {0xffffffff, 0x8}, {0x4, 0xf}, {0x100000001, 0x1}, {0x100000000, 0x3}, {0x2, 0x5}, {0x6, 0x4}, {0x0, 0x4}, {}, {0x3, 0xeb6}, {0xb3, 0x8}, {0x7fff, 0x586ee80}, {0x5976, 0xfffffffffffffffc}, {0x8, 0x4}, {0xec, 0xfffffffffffffff8}, {0x4, 0x6}, {0x808000, 0x3}, {0x5, 0x101}, {0x7, 0x7fffffff}, {0x6, 0x81}, {0x8}, {0x539, 0x5}, {0xcafc, 0x5}, {0x9, 0xd}, {0x5, 0x9}, {0x3, 0x9}, {0x6, 0xfe56}, {0xe, 0x800}, {0x7c32, 0xafb}, {0x400, 0xfffffffffffffffa}, {0x7, 0x7ff}, {0x7, 0x4}, {0x800, 0xfffffffffffff800}, {0x8}, {0x701, 0x4b9}, {0x8, 0x8}, {0x7fc, 0xa}, {0x6, 0x3ff}, {0x9, 0xffffffffffff4edf}, {0x0, 0xfffffffffffffffa}, {0x70f, 0x1}, {0xffffffffffffffff, 0x4}, {0x2, 0x5}, {0x1, 0xffffffff80000001}, {0x1}, {0x3, 0x9}, {0x5021f5f7, 0x2}, {0xfffffffffffffff7, 0x3}, {0x400, 0x33}, {0x3, 0x5}, {0x9, 0x4}, {0x74e9, 0x6}, {0x5, 0x2}, {0x8000000000000001, 0x3}, {0x40, 0x7fff}, {0xd, 0x80000001}, {0xd, 0x5}]}, &(0x7f00000070c0)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000000}}], 0x32}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x7331c94b}]}}]}, 0x38}}, 0x0) 16.041059016s ago: executing program 2 (id=15048): socket$nl_route(0x10, 0x3, 0x0) (async) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa"], 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket(0x2d, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2d, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) listen(0xffffffffffffffff, 0xfff) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket(0x8, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x4000000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="24000000000000000100710478200000be0d6e84eb5d832835e8eabb1bc70a19f87cc015b54a962fc3a0d6dca59736d04c8cb5de6692175886c6af3b4ee795237700793d101d37d28bc9f9ded2909c6d0610917d8a7229cb4a7014f443ad90d1d55f9eddf88336e3f6a2493e3eb7d558f0cf6ffc6d3e82027a6c376596715031d4578cc3c75c897f71e4e075ce3b993b3f9200901fe8e7a783e563935881fbe0652e98664dc95fb86435f1fe4aaac183f24f5d27086e2e4dacda22fb52aeb7f91ffbb3a827b657db7377bc0bc20f2d25ed1dc31d0162d8183f76bb5d05b00380ea46ff", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x28, 0x20008880}}], 0x2, 0x4c054) (async) sendmmsg$inet(r1, &(0x7f0000000880), 0x0, 0x81) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) 15.26407129s ago: executing program 2 (id=15054): r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1400000004000000040000002200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000048000000000000000000000000000000000000052e1000351eed13a685d000000003f32443ce265d9450bdfe7ab58a732b915e373bfb4fd49a000"/78], 0x50) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r2, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r1, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r2}, 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) listen(r3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000280), &(0x7f0000000100)=@tcp6=r3, 0x2}, 0x20) (async) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="370000000000000029000000050000000002020100000000fe8000000000000000000000000000bb"], 0x28}, 0x0) 15.109910987s ago: executing program 2 (id=15057): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4008014) (async) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r1, {0xffe0, 0x2}, {}, {0x4, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x6}, @TCA_FLOWER_KEY_TCP_FLAGS={0x6, 0x47, 0x8}, @TCA_FLOWER_KEY_PORT_SRC_MIN={0x6, 0x57, 0x4e24}, @TCA_FLOWER_KEY_PORT_DST_MAX={0x6, 0x5a, 0x4e23}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x24004000) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000bc0)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x7, '\x00', r1, 0xffffffffffffffff, 0x2, 0x4}, 0x50) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) (async) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r6, &(0x7f0000003100)=ANY=[], 0x10448) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@bloom_filter={0x1e, 0x9, 0xcd3, 0x3c5c, 0x41000, 0xffffffffffffffff, 0xfff, '\x00', r1, 0xffffffffffffffff, 0x5, 0x1, 0x2, 0xe}, 0x50) (async) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a80)={r8}, 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@map_fd={0x18, 0x0, 0x2, 0x0, r8}, @ldst={0x1, 0x3, 0x3, 0x0, 0x0, 0x37}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x94) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='memory.events\x00', 0x275a, 0x0) preadv(r9, &(0x7f00000015c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1, 0xfffffffd, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d40)={{0x1, 0xffffffffffffffff}, &(0x7f0000000cc0), &(0x7f0000000d00)='%ps \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_tracing={0x1a, 0x0, &(0x7f0000000740), &(0x7f0000000780)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x2, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x18ae8, 0xffffffffffffffff, 0x7, &(0x7f00000007c0)=[0xffffffffffffffff, r2, r5, r6, r7, r8, 0x1, 0xffffffffffffffff, r9, r10, r10], &(0x7f0000000dc0)=[{0x1, 0x4, 0xe, 0xc}, {0x4, 0x3, 0x3, 0x1}, {0x0, 0x6, 0x10}, {0x5, 0x5, 0x0, 0xc}, {0x1, 0x3, 0x4, 0x7}, {0x1, 0x4, 0x5, 0x8}, {0x0, 0x4, 0x10, 0xa}], 0x10, 0x7}, 0x94) (async) r11 = socket$netlink(0x10, 0x3, 0x0) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r12, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x50, 0xd, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) (async) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r13 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r13, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x368, 0x0, 0x180, 0xffffffff, 0x228, 0x228, 0x2d0, 0x2d0, 0xffffffff, 0x2d0, 0x2d0, 0x5, 0x0, {[{{@uncond, 0x0, 0xa0, 0xd8, 0x48, {}, [@common=@addrtype={{0x30}, {0x1, 0x1c, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @rand_addr=0x64010100, @remote, @gre_key=0x7fff, @port=0x4e24}}}}, {{@ip={@remote, @empty, 0xff000000, 0xff, 'nicvf0\x00', 'pim6reg0\x00', {}, {0xff}, 0x6c}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x6, @rand_addr=0x64010100, @multicast1, @icmp_id=0x67, @port=0x4e23}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x2, @multicast2, @loopback, @icmp_id=0x67, @port=0x4e24}}}}, {{@ip={@empty, @empty, 0xffffff00, 0x0, 'veth0_to_team\x00', 'ip6gretap0\x00', {}, {0xff}, 0x62, 0x3, 0x8}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @multicast1, @empty, @icmp_id=0x65, @port=0x4e24}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20000000}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd, 0xfeefffff}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) 2.554037449s ago: executing program 4 (id=15200): socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) syz_emit_ethernet(0x0, 0x0, 0x0) (async) r0 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x255f, 0x4) sendto$inet(r0, &(0x7f0000000040)="0f83b07ef75b4ff0f2d163c7c8a0d8fb8ab88f5b134df9055ab57dcbb68052fc319ac66954faccf67679a82789438adf3664351d952cd72c0dd8e9e7", 0x3c, 0x0, &(0x7f0000000200)={0x2, 0x4e21, @remote}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004ffffffff000000000300000000000000000000000000000203000000000000000000000b02"], 0x0, 0x4a}, 0x20) 2.43240285s ago: executing program 1 (id=15201): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x50, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x20000000, @rand_addr=' \x01\x00'}}, 0x0, 0x0, 0x3, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e23, 0x5, @loopback, 0x8}}, 0x0, 0x0, 0x4, 0x0, "61236b90dcdfe3ce2bb54fa6c4654e6c39d7ddcc4501330078eb7bf1597d638c7d4315210fb34d4c84c2f976071138016e8934b34d8b9cff05cd33c159c2c5a51f1bbe5b7d758286a3c82392b39a1d3f"}, 0xd8) close(r0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x50, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x20000000, @rand_addr=' \x01\x00'}}, 0x0, 0x0, 0x3, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e23, 0x5, @loopback, 0x8}}, 0x0, 0x0, 0x4, 0x0, "61236b90dcdfe3ce2bb54fa6c4654e6c39d7ddcc4501330078eb7bf1597d638c7d4315210fb34d4c84c2f976071138016e8934b34d8b9cff05cd33c159c2c5a51f1bbe5b7d758286a3c82392b39a1d3f"}, 0xd8) (async) close(r0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) 2.230679913s ago: executing program 1 (id=15204): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r0, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x400484c}, 0x2000844) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r3 = socket(0xa, 0x3, 0x786) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x20, 0x25dfdbff, {0x60, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x5, 0x0, 0x4000}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000805}, 0x0) 2.095702597s ago: executing program 4 (id=15205): unshare(0x20020400) (async) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r0, 0x847b0dac5bec178f, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) (async) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001bc0), 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4440b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0) (async) r5 = socket$kcm(0x11, 0x3, 0x0) sendfile(r5, r3, &(0x7f0000000b80)=0x1349cdec, 0x80000001) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1b, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0xcd, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000840)={'sit0\x00', &(0x7f00000007c0)={'ip_vti0\x00', r1, 0x8000, 0x27, 0x7, 0x1, {{0x9, 0x4, 0x0, 0x8, 0x24, 0x64, 0x0, 0x6, 0x29, 0x0, @rand_addr=0x64010101, @local, {[@ra={0x94, 0x4}, @rr={0x7, 0xb, 0x74, [@broadcast, @broadcast]}]}}}}}) (async) r8 = socket(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0x1000}, @TCA_PIE_LIMIT={0x8, 0x2, 0x7}]}}]}, 0x40}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000880)={'wlan1\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x7d8cffd0bad73659}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000bc0)={0x1c4, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x11}, 0x4040810) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a34000000060a0104000000000000000009ffffeb0900010073797a310000000008000a4000000003090002007379e1c62b42e7967a3200000000140000001100010000000000000000000000000a"], 0x5c}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) (async) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xfc, 0x4, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_HOOK={0x60, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'pim6reg\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'xfrm0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x55595568}, @NFTA_HOOK_DEV={0x14, 0x3, 'vlan0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x151f3e04}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffa}]}, @NFTA_CHAIN_USERDATA={0x13, 0xc, "fd66f0ecc1b417cfb4a05f9a15be31"}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x47416863}, @NFTA_HOOK_DEV={0x14, 0x3, 'netpci0\x00'}]}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4cb}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x804}, 0x40008c0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061043c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) 2.035833322s ago: executing program 3 (id=15207): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x5460, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) recvmmsg(r2, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000100)=""/59, 0x3b}, {&(0x7f0000000140)=""/126, 0x7e}, {&(0x7f0000000680)=""/135, 0x87}, {&(0x7f0000000f80)=""/4100, 0x1004}, {&(0x7f0000000480)=""/255, 0xff}, {&(0x7f00000002c0)=""/222, 0xde}, {&(0x7f0000000880)=""/247, 0xf7}, {&(0x7f0000000780)=""/210, 0xd2}, {&(0x7f0000000040)=""/32, 0x20}, {&(0x7f0000000e00)=""/113, 0x71}, {&(0x7f0000000000)=""/32, 0x20}], 0xb}, 0x10000fff}], 0x1, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f00000003c0)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x2d8}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000006d80)={0x0, 0x0, &(0x7f0000006d40)={&(0x7f0000006d00)={0x30, r5, 0x389, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @val={0xc, 0x99, {0x904, 0x5e}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4c841}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r5, 0x1031, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x75}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16fd}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xaff1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048803}, 0x810) 1.811852703s ago: executing program 0 (id=15208): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002940)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x1}, {0x0, 0xfff1}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x0, 0x1, 0xfff, 0x1, 0x9}, {0xd, 0x1, 0x1, 0x9, 0x8ad, 0x89b}, 0xfffffffc, 0xc, 0x4d}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x3000000) 1.811077567s ago: executing program 1 (id=15209): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (rerun: 64) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) (async, rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x24}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x44}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 1.613591588s ago: executing program 4 (id=15210): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x0, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r1) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r1) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r2, 0xb15}, 0x14}}, 0x80) (async, rerun: 32) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) (rerun: 32) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x71c6}], 0x18}, 0x2c000044) (async) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) (async, rerun: 32) recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x200bac}, {{0x0, 0x0, &(0x7f0000000200), 0x24}, 0x4}], 0x2, 0x60, 0x0) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={0x24, r6, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r7}, @WGDEVICE_A_PEERS={0x8, 0x8, 0x0, 0x1, [{0x4}]}]}, 0x24}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wg1\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r6, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000080}, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async, rerun: 32) r11 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r12 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r12, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8, 0x0, 0x7}, 0x10) write(r12, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080008000d000000", 0x24) (async) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r14, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x1, 0x8, 0x40}}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0xfffffffffffffe98, 0x2c, 0x20, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0xb}, {0x0, 0x1}, {0x7, 0xfff2}}, [@TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040894}, 0x4000000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) 1.613288289s ago: executing program 3 (id=15211): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x12}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0xf2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000008000a00", @ANYRES32=r4, @ANYBLOB], 0x30}}, 0x4000080) 1.611618641s ago: executing program 1 (id=15212): ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x6}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb7030000080000000033deb90095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000100)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r3}, 0x20) r4 = socket(0x2a, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r5, 0x215eb000) getsockname$packet(r4, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0c000000000000000080000000000000c6626505", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24, @ANYRES32, @ANYBLOB], 0x50) 1.59134872s ago: executing program 0 (id=15213): socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000ac0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x8c}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xf}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000004f00)={0x0, 0x0, &(0x7f0000004ec0)={&(0x7f0000002dc0)={0x14, 0x26, 0x303, 0x70bd28, 0x25dfdbfe, {0x1f}}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x24000844) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$sock(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000400)="c3ebdf02ccf049bcc145ba28e73853bc2beca0e03d5bd6c012e42d1428b917e255bc9e75cc701a5deacd14f062187f82e85e20e19b9ebfb6aef45d2ad0a7bc634373c630c98214899de376e8a8c2008b754001691c7b09262a9486cdd1654e717ddf0adc63e0a44f09a257aeb4827cea5c5eb652a7c34ace0d86abb34410bebcdd914d56bf83fd55d154e89e48870351e008a7462652501c07f9eabf4051243ef58362b6870778dbd820f1f674c5314c3dc2c9e671d1acc8a39f526c02fa98be", 0xc0}, {&(0x7f00000004c0)="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", 0x168}], 0x2}, 0x84) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000014001901000000000000000028001100090011eb7599599a38175aa5e9d0c8e22babc259d2ac0000000000f6b0506ae81bb3a7040f39ea4a44cd7c134e6107c0f94dac3301f8fb3dae5410e88d760ae098ed8ecea5b9e6f500000100fdfb54e483118ab849b4b2af5760b0f208000000f3ba8472b5483845405e9a2fb866ee1880f6de4146227cda1f9144fd826dd1a48f2c273902484b68d82533400c75cbc40c72"], 0x28}}, 0x0) 1.396087184s ago: executing program 3 (id=15214): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r1) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000006c0)={0x28, r2, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0xc800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb9", 0x3a) r6 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$SO_TIMESTAMP(r6, 0x1, 0x1c, 0x0, &(0x7f0000000280)) (async) getsockopt$SO_TIMESTAMP(r6, 0x1, 0x1c, 0x0, &(0x7f0000000280)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="fe"], 0x48}}, 0x0) sendmmsg$alg(r5, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) sendmmsg$alg(r5, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x40, r2, 0x200, 0x70bd24, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x40}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x40, r2, 0x200, 0x70bd24, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x40}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x80, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x3c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x38, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}}, 0x20050800) sendmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000300014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004) (async) sendmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000300014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004) 1.394654075s ago: executing program 4 (id=15215): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'ipvlan0\x00', @multicast}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)=@newtfilter={0xb0, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x7c, 0x2, [@TCA_MATCHALL_ACT={0x78, 0x2, [@m_skbmod={0x74, 0xe, 0x0, 0x0, {{0xb}, {0x4}, {0x45, 0x6, "94c0c37be3ef2a3db88cc6b4493bbd317e4a17362907bb81291827380b33589dfbc189b0d7c37f49f0149ec0016bb1a40a437c50325001b0702251a76dda132e5a"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x44000) r10 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r11, 0x3e}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000ac0)="0d96f0280d65625ba798ac4847cb", 0xe}], 0x1, 0x0, 0x0, 0x86dd}, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r15, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r16 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r16, &(0x7f00000025c0)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000440)=@phonet={0x23, 0x1, 0x1}, 0x80, 0x0}}], 0x2, 0x0) recvmsg$unix(r14, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.394400836s ago: executing program 0 (id=15216): r0 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000003c0)={{0xffffffffffffffff, &(0x7f0000000280)='/,!)[#\'\x00', 0x200000, &(0x7f00000002c0)={@align=0xe4, {0x0, 0x9, 0x2, 0x6}}, 0x2, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000340)}, {[0xd9e7, 0x0, 0x8e9, 0x6]}, 0x100, 0xc, &(0x7f0000000380)=""/12}) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000480), 0xffffffffffffffff) r3 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0}, &(0x7f0000000500)=0x14) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x64, r2, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010102}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x25}}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_MS_ADDR6={0x14, 0xc, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_VERSION={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000}, 0x4000090) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bond_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xe4, r0, 0x2, 0x70bd29, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0xc8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x61}}, {0x8, 0x6, r6}}}]}}]}, 0xe4}}, 0x40000) 1.214427066s ago: executing program 0 (id=15217): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x15, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000860000db000000004d05000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000064160001ffffffffb4b63000000000000bb10000080000009482080010000000dd2c0000fcffffff18120000", @ANYRES32=0x1, @ANYBLOB="000000000000000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000004c860001ffffffffbf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000400)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x77, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0x5, 0x100, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) 1.07083841s ago: executing program 3 (id=15218): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x400) r2 = getpid() ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000140)=r2) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000bc0)=0xc) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x4f, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r4}]}, 0x1c}}, 0x0) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x4f, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r4}]}, 0x1c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000380), &(0x7f00000003c0)=0xc) (async) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r9 = syz_open_procfs$namespace(r6, &(0x7f0000001780)='ns/ipc\x00') getpid() (async) r10 = getpid() sendmmsg$unix(r5, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r6, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r6, 0x0, r8}}}, @cred={{0x1c, 0x1, 0x2, {r10, r7}}}, @rights={{0x18, 0x1, 0x1, [r9, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r11, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1, 0x0, r12}}, 0x40) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000002c0)=0x0) r14 = getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000004c0)={{{@in=@multicast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @loopback}}, 0x0, @in6=@private1}}, &(0x7f00000005c0)=0xe8) r16 = getgid() sendmsg$netlink(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)={0xa8, 0x2b, 0x400, 0x70bd29, 0x25dfdbfe, "", [@generic="152b7830f604", @generic="064c3974c13ab634e7cdf78f85e31b3333d56de5221e151e22591b95a8480ef7f4bd9987c481f068bb37f3cc97fe32c2f6be8286bf2da18304877fbbfa9c0dc211ad518a2e1ccf913959ed95363f92cfb03eedea78dbb1615ab7cb397949b28122f688cb8b54b84382f3f15ce7f350eaa4d2dd4e6f4ab4364b15706534558f4ec65ebf386a9bab91dd51", @typed={0x8, 0xe4, 0x0, 0x0, @pid}]}, 0xa8}, {&(0x7f00000001c0)={0x20, 0x14, 0x4, 0x70bd26, 0x25dfdbff, "", [@typed={0x4, 0x71}, @typed={0xc, 0x15b, 0x0, 0x0, @u64=0xffffffff80000000}]}, 0x20}], 0x2, &(0x7f0000000600)=[@cred={{0x1c, 0x1, 0x2, {r2, r4, r8}}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, r16}}}], 0x60, 0x8001}, 0x10) (async) sendmsg$netlink(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)={0xa8, 0x2b, 0x400, 0x70bd29, 0x25dfdbfe, "", [@generic="152b7830f604", @generic="064c3974c13ab634e7cdf78f85e31b3333d56de5221e151e22591b95a8480ef7f4bd9987c481f068bb37f3cc97fe32c2f6be8286bf2da18304877fbbfa9c0dc211ad518a2e1ccf913959ed95363f92cfb03eedea78dbb1615ab7cb397949b28122f688cb8b54b84382f3f15ce7f350eaa4d2dd4e6f4ab4364b15706534558f4ec65ebf386a9bab91dd51", @typed={0x8, 0xe4, 0x0, 0x0, @pid}]}, 0xa8}, {&(0x7f00000001c0)={0x20, 0x14, 0x4, 0x70bd26, 0x25dfdbff, "", [@typed={0x4, 0x71}, @typed={0xc, 0x15b, 0x0, 0x0, @u64=0xffffffff80000000}]}, 0x20}], 0x2, &(0x7f0000000600)=[@cred={{0x1c, 0x1, 0x2, {r2, r4, r8}}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, r16}}}], 0x60, 0x8001}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d103000008000340000000012c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a310000"], 0x4ec}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 992.729208ms ago: executing program 0 (id=15219): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r0, r2, 0x25, 0x2, @val=@perf_event={0x5}}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r3, r4, 0x4, r0}, 0x10) 832.661998ms ago: executing program 0 (id=15220): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000380)={'gre0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_buf(r4, 0x29, 0x2a, &(0x7f0000000040)="51e452bbb83aa410b80b4e5c2b0efb318e1675d157f4dbb09cf578c5d695d4c19669d6f75f4dd7fae5ca772264762e2caa7397be8dae54494bcb85b118ce878d2945924a24a25cf9c6672e7904f0301ffa0f360f9526057e1225a4d032ad0cc690cd327c226b57d5a0243bda5f379f6054b1851c1fa2cbad88d3f0039dddd6b426560bc03965da43", 0x88) nanosleep(&(0x7f0000000280)={r2, r3+10000000}, &(0x7f00000003c0)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) ioctl$TUNGETSNDBUF(r8, 0x800454d3, &(0x7f0000000000)) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r9) r12 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r12, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r12, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x3, 0x7ab0715dca68fed7, 0xfffffffd, {}, {}, {}, 0x4, @canfd={{}, 0x0, 0x2, 0x0, 0x0, "b8ee0816756b62187804752330b2b55830d7228ef1593c0639bd084bba0bfd8db72f70e5b2e7f90e11cbc6ec61a03fc316d5d47970907af5fc4a27f6cf718909"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(r8, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r11, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfff}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x4004) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000000800)={'ip6tnl0\x00', &(0x7f0000000780)={'ip6gre0\x00', r10, 0x29, 0xd, 0x5, 0xfffffffe, 0x3, @loopback, @mcast1, 0x700, 0x8000, 0x4, 0x100}}) sendmsg$nl_route_sched(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@getchain={0x3c, 0x66, 0x800, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, {0xe, 0x9}, {0x6, 0xb}, {0xa, 0x7}}, [{0x8, 0xb, 0x7e}, {0x8, 0xb, 0x7bd}, {0x8, 0xb, 0x3}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r10, {0x0, 0x10}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0xc804}, 0x2) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x2c, 0x64, 0x0, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x9, 0xe}, {0x0, 0xfff1}, {0xc, 0xa}}, [@TCA_CHAIN={0x8, 0xb, 0x38}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044801}, 0x41090) sendmsg$nl_netfilter(r9, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1a8, 0x2, 0x4, 0x801, 0x70bd29, 0x25dfdbfb, {0xa, 0x0, 0x4}, [@generic="f1e12128488962528b4b08b86039f945b422db53edaee459edd2f2cba741d8a6cc1f6ae6fe30973d8679d3cc52ead8ac1c3bcb85fe4095b2d261cda02e3c275eb047933f127eb89b636df717e4e222198c8acdee8f554dfd451843023548dd06b924aec253afea8f501c98f7c8e14c0b23fbbfe337b04a3f5ac3ce62aaad3153c8e966ad4346b9f8e0390da7d8eb586d54388ddcd129bdaa712d7f03a3c3c8106ae5be3c5c71ec9455e6e6337a092507c7f0962ac20db0991fa182a677af913e8a25d8652dd1589e7dcb7565c976be9290d2b4c8fb08b3ffc927fddb0fe3646a475a8e1050a442edc267e977fe785b6053f5d356", @generic="aac09226d308ef19593496b29c77b5f0ae01f451c9674273581f984bd35b4a919d74cd99e9083e0c97b86d798924688dfac865cebb7438f64d647f067990a72ac3fa3fbc8b1aa8fab06b406bf47d02efb1496b8d5d38ed1576a3441b7203636e68b11f5fd918d25f6f40f5e49c70836fe328e0f116af0ee799c7410274900e1727484677afc4bbce6ff017016d96", @generic="55e0f19664e647", @nested={0x8, 0x15a, 0x0, 0x1, [@nested={0x4, 0x155}]}]}, 0x1a8}}, 0x40000) 739.933027ms ago: executing program 3 (id=15221): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x7f, &(0x7f0000000080)=""/4041, &(0x7f0000000000)=0xfc9) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x178, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0x400, 0x9, 0x80, 0x101, 0xe, 0xc40, 0x3, 0xfffffffd, 0x20, 0xb, 0xff, 0x6, 0xca11, 0xfffe}}, @TCA_GRED_STAB={0x104, 0x2, "abcc61b4e508c02286f1bafc7a22c407a52b0e13291c865d493f15736245f220cd4e40006df455836aa3bd3aaa2c9b95578719c46f89e01798d28b6d63cf7465ea95bd97b018b7afaccdcb28bb42d677b73c44e790f0875fb4b795ca95b7dd712d2c5d69945535f92f74a71236743acd06103cd77bd07f2df5989ee40e409b077cc85e96554beb53c986a216051bd5979a8cfcfe9f98be58ffcf44f6cfda8579dbaedceee578bfd1fb554b6e185e9315425ef0a3fc69d17ede93fc7c46357990f7acfdb8216ea52f604b9f12033688caa4b04adecfc926b3f6ca25bcb5432905e3f30ccbf10cf0f2d00858ba2bbd2702b8d4a7a7c744fbaa2fa35b1c586020d6"}, @TCA_GRED_MAX_P={0x8, 0x4, 0x9}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0x845}, 0x24008804) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) (async) socket(0x2, 0x80805, 0x0) (async) getsockopt$bt_hci(r3, 0x84, 0x7f, &(0x7f0000000080)=""/4041, &(0x7f0000000000)=0xfc9) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x178, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0x400, 0x9, 0x80, 0x101, 0xe, 0xc40, 0x3, 0xfffffffd, 0x20, 0xb, 0xff, 0x6, 0xca11, 0xfffe}}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_MAX_P={0x8, 0x4, 0x9}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0x845}, 0x24008804) (async) 578.349367ms ago: executing program 4 (id=15222): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002940)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x1}, {0x0, 0xfff1}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x0, 0x1, 0xfff, 0x1, 0x9}, {0xd, 0x1, 0x1, 0x9, 0x8ad, 0x89b}, 0xfffffffc, 0xc, 0x4d}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0xf000000) 479.971169ms ago: executing program 3 (id=15223): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0xfffffff8, 0x0, r1}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x1, 0x8, 0x8}, 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @broadcast}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x12}]}}}]}, 0x38}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISASSOCIATE(r4, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x58, r6, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="71a51a8faa49"}, @NL80211_ATTR_SSID={0x23, 0x34, @random="2fcec97299430c10edfc5dd479e4e5d5a3750203db8f6d58eb51fcacbc9253"}]}, 0x58}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) ioctl$OCFS2_IOC_RESVSP64(r4, 0x4030582a, &(0x7f0000000600)={0x1, 0x0, 0x5, 0x0, 0x3, 0x3}) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="080008000500060000001400000045bf002800640000080690780a010101ac14143e4e204e222bd32ec16f8128fe6dcae7d4eaf7a1f232b32c13d29e245aebc9a87ac12bcaad65e018072ba5096f52a7bea3c4ed113830ea4319008fdede529e1f967a763d1f9949ab5c964994747ec1fd964b4625030e52b27aeeb935b992235196634b622a52f72a9a2738972b93ca5aaf60f4f964ad8d54c19e52911d3d04d9699b34db2e751f1a336829ec2dda24ccf4ae2cbc000000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2010190780401"], 0x36) ioctl$XFS_IOC_GETBMAPA(r0, 0xc020582c, &(0x7f0000000000)={0xfffffffffffffff8, 0x2, 0x1, 0x81, 0xb}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4040010) 366.237568ms ago: executing program 2 (id=15061): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40884}, 0x4080) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x504, 0x70bd28, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x30}, 0x40800) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x300, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4040084) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd4, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_RULES={0xa0, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xd}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xe27}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7ff}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x71}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3df}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}]}, {0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x81}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x100}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x10}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3c}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40000000}, 0x4000000) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='cpuset.effective_cpus\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r5, 0x1, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x6}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, r6, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x811) r7 = openat$cgroup_ro(r4, &(0x7f0000000840)='blkio.bfq.sectors\x00', 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT(r7, &(0x7f0000000d00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000cc0)={&(0x7f00000008c0)={0x3dc, 0x1, 0x3, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFQA_EXP={0x1a4, 0xf, 0x0, 0x1, [@CTA_EXPECT_TUPLE={0x84, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1ad}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASTER={0x34, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_MASK={0x34, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}}}]}, @CTA_EXPECT_NAT={0x80, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x24}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @remote}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_NAT={0x10, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, @NFQA_EXP={0x1b0, 0xf, 0x0, 0x1, [@CTA_EXPECT_NAT={0x104, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x14, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_TUPLE={0x94, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @local}}}]}]}, @CTA_EXPECT_TUPLE={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_MASK={0xc, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xa}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x9}, @CTA_EXPECT_MASK={0xc, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_HELP_NAME={0x5, 0x6, '\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x4}]}, @NFQA_EXP={0x74, 0xf, 0x0, 0x1, [@CTA_EXPECT_NAT={0x70, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}}]}]}]}]}, 0x3dc}, 0x1, 0x0, 0x0, 0x20000011}, 0x800) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000e00)={'syztnl0\x00', &(0x7f0000000d80)={'syztnl1\x00', 0x0, 0x29, 0xff, 0x9, 0x6, 0x45, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x80, 0xd2, 0x7ff}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000ec0)={'ip6tnl0\x00', &(0x7f0000000e40)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x4, 0x5, 0x0, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x40, 0x7, 0x40}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000f80)={'syztnl1\x00', &(0x7f0000000f00)={'ip6tnl0\x00', 0x0, 0x2f, 0x7, 0x0, 0x6, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, 0x7800, 0x80, 0x3, 0x3}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000fc0)={'wg2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000010c0)={'syztnl0\x00', &(0x7f0000001000)={'erspan0\x00', 0x0, 0x80, 0x7800, 0x0, 0x3, {{0x26, 0x4, 0x0, 0x9, 0x98, 0x66, 0x0, 0x2, 0x2f, 0x0, @rand_addr=0x64010101, @remote, {[@lsrr={0x83, 0x13, 0xd9, [@multicast1, @remote, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0xb, 0x62, [@local, @remote]}, @timestamp_prespec={0x44, 0x14, 0x8f, 0x3, 0x4, [{@local, 0x2}, {@private=0x3e, 0x1}]}, @generic={0x7, 0xb, "a4632c61115404641f"}, @timestamp_prespec={0x44, 0x1c, 0x61, 0x3, 0x2, [{@broadcast, 0x2}, {@multicast2, 0xe}, {@multicast1, 0x4}]}, @ssrr={0x89, 0x2b, 0x2e, [@rand_addr=0x64010100, @empty, @multicast1, @multicast1, @local, @loopback, @dev={0xac, 0x14, 0x14, 0x24}, @loopback, @local, @broadcast]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000011c0)={'syztnl1\x00', &(0x7f0000001100)={'syztnl0\x00', 0x0, 0x20, 0x7, 0x0, 0x4, {{0x24, 0x4, 0x1, 0x39, 0x90, 0x67, 0x0, 0x40, 0x2f, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x22}, {[@end, @cipso={0x86, 0x78, 0x3, [{0x1, 0xe, "37a933e09b9792e7b0ca12a8"}, {0x0, 0x12, "bd663bf7b3ca24240623b747b6f84fed"}, {0x7, 0x12, "916a6cca173ba23af1c03d66c5b35f0c"}, {0x7, 0xf, "79c688fab98da5a413a999d101"}, {0x5, 0xa, "e400ff29b85918fb"}, {0x0, 0x11, "76675735d06014a8af8c7996cd8174"}, {0x1, 0xe, "619aad4339b10f039d4dfdcb"}, {0x5, 0x8, "aedf14f533fa"}]}, @end]}}}}}) sendmsg$ETHTOOL_MSG_WOL_GET(r7, &(0x7f0000001400)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000013c0)={&(0x7f0000001200)={0x1b4, r5, 0x102, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x44000}, 0xc0) r14 = syz_genetlink_get_family_id$tipc(&(0x7f0000001480), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r7, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x2c, r14, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @l2={'ib', 0x3a, 'dvmrp1\x00'}}}, [""]}, 0x2c}}, 0x4) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x28, r2, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4891}, 0x400d4) getsockopt$EBT_SO_GET_ENTRIES(r7, 0x0, 0x81, &(0x7f0000001780)={'nat\x00', 0x0, 0x4, 0xad, [0x1, 0x7fffffffffffffff, 0xd, 0x8, 0x1, 0x800], 0x0, &(0x7f0000001680), &(0x7f00000016c0)=""/173}, &(0x7f0000001800)=0x78) r15 = syz_genetlink_get_family_id$batadv(&(0x7f0000001880), r7) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r7, &(0x7f0000001940)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x1c, r15, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x200}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r16 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000019c0), r0) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000001ac0)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)={0x68, r16, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}]}, 0x68}, 0x1, 0x0, 0x0, 0x40800}, 0x10) 268.042204ms ago: executing program 1 (id=15224): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0x11, 0x0, &(0x7f0000002580)) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000190000000100800e000f01"}}}]}, 0x48}}, 0x0) 170.343136ms ago: executing program 2 (id=15226): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'ip6gretap0\x00', @random="e32579d14a8f"}) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000100)=0x79, 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)={0x18, r1, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000300)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff3599127db0d17fa8bbc31ff7d3f2b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x6a}, {&(0x7f0000000800)}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d531", 0x4e}], 0x4}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x2}}, 0x80, 0x0}}], 0x3, 0x20000044) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r4, @ANYBLOB="20000100", @ANYBLOB="00001000e0000300000100010000"], 0x38}}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c2700000906010300000000000000000a00000124000880100007800900130073797a3000000000100007800c00148008000140ac1414aa2400078018001480140002402001000000000000000000000000000106001d4000080000"], 0x5c}, 0x1, 0x0, 0x0, 0x20040004}, 0x40010) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f0000000540)) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000005000000000000000100000400000000010000000400000003180000002e5f2e"], 0x0, 0x35}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05"], 0xfdef) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x9, &(0x7f0000000180)=0x1, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 59.36591ms ago: executing program 1 (id=15227): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r1, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x1b}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040007}, 0x4c000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x700, 0x7, 0x7a937da7, 0x8, {{0x35, 0x4, 0x1, 0x0, 0xd4, 0x65, 0x0, 0x9, 0x0, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @ra={0x94, 0x4}, @rr={0x7, 0xb, 0x31, [@multicast2, @remote]}, @timestamp_addr={0x44, 0x2c, 0xea, 0x1, 0x8, [{@multicast1, 0x400}, {@private=0xa010100, 0x9}, {@dev={0xac, 0x14, 0x14, 0xf}, 0xe}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x40}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x4}]}, @end, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x3c, 0x75, 0x3, 0x8, [{@multicast1, 0x5}, {@multicast1, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@rand_addr=0x64010102, 0x4}, {@rand_addr=0x64010102, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@remote, 0x3}]}, @timestamp={0x44, 0x24, 0xca, 0x0, 0x4, [0x3, 0x0, 0x4, 0x8, 0x3, 0x7ff, 0xe, 0xfb]}, @ssrr={0x89, 0x1f, 0x7, [@local, @loopback, @rand_addr=0x64010102, @broadcast, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}]}}}}}) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000003100)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000030c0)={&(0x7f0000003040)={0x6c, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x3}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x6d4}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x46}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1a}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x39}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x54}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000880) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x4000000) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd22, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xc, 0xf}, {}, {0xfff1, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xffe0, 0xc}, {0x0, 0xfff1}, {0xfff1, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000811}, 0x24045810) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x1, 0x700, 0x537, 0x4, {{0x11, 0x4, 0x3, 0x9, 0x44, 0x65, 0x0, 0x5, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x2c}, {[@end, @timestamp_prespec={0x44, 0x2c, 0x3a, 0x3, 0x0, [{@local, 0xe}, {@broadcast, 0x19}, {@loopback, 0x7}, {@multicast2, 0x9}, {@multicast1, 0x7}]}, @end]}}}}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000003c0)={0x0, @broadcast, @multicast2}, &(0x7f0000000400)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r12, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r12, &(0x7f00000002c0)="05032200d1fd140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r13, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000004c0)={'wg2\x00', 0x0}) r15 = socket$nl_route(0x10, 0x3, 0x0) r16 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r17, {0x6}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000500)={@rand_addr, @broadcast, 0x0}, &(0x7f0000000540)=0xc) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002f40)={&(0x7f0000000ac0)={0x2460, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x206c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "8beb759b9494d5ccae3e3b4543ff9f4d46876ac199aad65c22abd05807ff27d5512504fb7e99b2128a66399cfac8a9ca2980b91aa720923c1a647428058c9939b117a40e4aa432bd03d534401cbd9b56dc0c43e235eede5b8bbe946d9cf4370d6ea3d2616c40482a0e812a345aa7143a5de82e8913f00576b34e8a5fd9e74efaa1fb3d0cc28a762ee0daf41c0cc4011faf12295454b8521837cf9f647a62c871a8f10d4046e671edaed2f7fc8e2ae5870ae343fa7736f7effb3b74d9609797fd47633146d3d3fdb731af897b3ff9a6ddfde8ce494e0c2d6d29291b70cbbd9f4768985156acad328f3c06087796c334af3b138b7df748956799a5ea9280e3b097a35abd3956424cd748a7b79f57907e03f50119372c9d56dbc31495a1d755d24da6a62aa2d08f9bb28fcf4e66a065158f94f1b559a69da2105d6e85f50aad8a60a6e634a19fefa156e2ace01d80a52a5a37eaeb469136fe3207a44aa013803dccb8189846a0c420b22e488adcf6918231415a7d510f9b17ff4ac12d817a488f974225ad2008544047318a488ce4d7172015c4d07f396f5847056c935220c941a3b5de28d12f5829681335a20f34331ff889ae92ce268f9009ea2549ea4a4f8c6f56802734090d794b6617711847858dbe10f991fcbf30525b5ab4e7e9a3aba1ce70f70c4875934a085422857caf63aeb9c55cbb4919e1065154e954a275c3cc1e8639981e0f53c1b464b52a104e7dc9686eff72aa51768efba3fd97158daa785731029dfc543c05f9dc4ed4d262eb10501d1164ca87ec714039e42811e48abc9ac041787b5d1b2e902e0700654e5e6ede83cd17ac058bce1c6fe4855bd44419b545ac8580db6703ac7043ea8d9fb3ce835323da32f07721435dfea191dc1d66d4574655fbeac1ada265835d28492313b818fb4055419a905aaca6b24d187e11c837bad31a236b2d5b1c39adb00fbb1f1db0f9c15ebf0eb3b427a7a23f046b418e9c5b0fff0e6eb99e8a145aa3925e89ea5784093b240f842d9af0764b00957f2fba4d055387355f32354ed0f3ada4cb50e1994c6000c8ab82d7f487ffde77d456aad39c022f8aceb4234ce5e3cc5b4ad701ca340f550742bdefd88e8aa8e57b10cba045467d4f2dbfaa2c79d70f34887540004bec0982a92e22f7bea08f023278e86f681178b97cad47415bbed51839f8ae4bbe70c3f383c73518998149fef5113940076eee526217c32684dcec52480eb75ee4b11e3143c7c006e5c1e3710075297dc5aac28c29b013ac6541f6f1acfac50d9ffb998cd10a11eb7868d5d484b99f4d9ddf44e2f073068dc332f342d848b223016551219d34ff66d9c1304d87d73648406122e0c1e2fdb18498d0869d82e819ad1f9a266d045fb896d4eb21f6cc1005a4128f6557b6b7e27d5b2217b695f38acc3fc2df7d649ec8a0f0bdee47802f096b7cb92a31bfb77903bb33fd6f5e053da2c291bf93b8da6c36303259caa05729fe3d1ccf52a9d461f1d51035a48c095c9c0477cfaa877391161c82b102f86d4c48c17f548afe51a8736e033dbbf8d4a4b881f27e0ad0979be4d181a236c031466acec484a7e77c5f28e7fe12676411acea58e47d4d06145b3c128764aa7a11555b39ed232a1f1595d848adf3c11d868e484c9733cc62953bbe49cbb38b6d3c3e88fd17c71cff111250c6c644b30787b7f9a36a13ff60578be998770cf81ef537a4dccc55ce0e78eaf47974ffd1dbfa117b31d943231fe09e4360b5365bf5c83d1597e047c8d387bde0e0f8ffda0fc8505be6ac20bf045c6a2f95d933e0ee4fc7a5f0aaf03b999e4b78afacdc0cf87af0672b8b6dde58675ab90827748b0bb9153db1314b5e1ecd3510c88fbc4422256164224da1fcec9a4aacf16b90655ed90fb0233ad601dfd54485c3c14d01e392baac48892bd762f3d9a752e5d79465cc71a6e70bc1332e1d7d7eb12ccc79388a6655bfd5074297bf0bead1cd7a23320456f268a7123df8338e324c460fdaea7a5c4165bb97524d16d435674ae06caa8cefa0c00513e113a4f1f9946105ab3ab9faaf4cf09a8f5217ab939ac5bc55ed478e25e8f5cd2bc386dc68d5ebbf1baf7dd9e9c20d0f1c8f145dacd7eb7474fb59c0bb3dbd02f436cb45e03a52623121026839af24b251d9be0025b5b47cb8795c65309fc89d94c691209d23d8b27c9311502cf71247243b00780ca9fd34b44340ba528a0b4c4fdc09ecf2898ec5f674256634d7d79e50bed66309fcea85885527ca73f488a457b4cf17a5cf09212558e9a64e7303b73ba0a8753442b209ce31edfd366573baeb8fdcf794da4f553699a36f3438a79e7a0e9a53adb00af66dd16188a4728f28b016f8b1e0fb0771062d8fa15b69375299b18a49aab4fd49084737c21ec1b94695a3f58a4239a505d9414e4470933e10e478af88c27a3698c5dd8024c973d198810cb1409291ac2d20669a32e70a6543d3401ec3eef03995392c04d912d6e6382e3225eca559caad92fb89a10c53708a658a71898fabedded06e5f8a66507741b263eb0fc7ecf96883403155099ab3c8feeb527ab8142fd0d071cab62df84de1569c25f4f181a9ce10af54bceb2bce2e6b2f7b4c4da8bfeababfb13bfe141f9f72d77bb74301fbc49451a682b0201447a9b31effad7e03ea0f75208e97f9633e51d9eb2125e11fbf0149215428c1d2511252e995ffbc4edb61efaee020658405bc4743ab1c3c6c4f189232c6abf1138b154a60a5a24c8b6ccfe03d40c5954039326ff5100c6c02ff2c9a02e40ba7ed90a8887d9ddc2811396ba6b2f42c7b54723e01f62d39ef46b0d15043d6e39e7a132f41179c12600cd06024bd8c9b8e1da23c06ce510f34001380b389463ece6d388645075b54ef3a36571eea2a621267529e097b6b1df1b0991889680fd656eb0693c90e7ea98da84f56cbcf573efe68de8b84c8bb4fa3d34b804e4ab4783a0869706afad1ccddf51dc96a6f10f9a92dc36536755b869f0bf10bbc28ebeb23c7717930d8a16df87eb43ef1b7d62279bea80e3ad4bc2285317f7d21c64c86a94187795152f8cb2216d402420373df330e212e1c3edc1e8e81454f8756e2b8f703d4c393ab4ca706c2f5a5405da5ba33966b3fe4620574ac6db1c5b8868bb3c84c7bd9dae42a53bf75d0301a97384a7e62d81f848012782c7e47d30e15e62cd319cf80d955a3de44e6b48132d9e74973c72b2928f2f89719d112fdf0c618f6d2e0b653c75079060d7d095bb876a708f71403dc7ccf4a94f9f51377a6635abda1224bcb4d923ee6538a767699ad3182a7ef6d13440aa11056bac8b6f0feb661a3423b1eaa48b6ac89390d7885275d8a5e73369c96569f2a968a8719530c7b636a33924dd7bf0407747ddb5f6b468e3c626479d565409f8d676102f56f46c071d541bc9460b58cd0525502f048d7f345d38b97249f46447974f1268356feef9ead627951aa698b85de783b0401c355f7d89776ab3f4aef4ea3ca56464bc30ec6cf7b3f1e5ee40f8477967d27e5471d8516079d55c4fc0a0b727e761a516ec0fa1dd0752a08197fcec708df3682ef354bb1d8d617c48472e04b94fe46b3f884d95cfedc768acd95442386a1f23a308bae370b132649d75de5080caaa35d9c824ff587bc8c5919ac73a53360b92a9b90d61213604dc17bcc2d2d035bc6ba7091d0fcbb1faf2ae11c011c261aed747d99457f467f42ecfb58ebac9dbac101cb652bf897f97ca4f1ab8f65cde2a6047e6e8dcabcd29cc842dcf6b80d9665c87a1de52769f743e3e4ea2c36b7b7cdc4c685bfd9b4cd415d1b0530a49dd6503bfc4f2e4d3dfc011e7012216f91bb90f266f799cc71c8b0c705f02b90cf83f82decae78bf4911a684e0b8e7cd580847fd22e58784778a7af31a0694b5f6139eee32cec7c69e81efa7bdc72d224680b91dc54ef4083eff9169e5380d500c57678d65a72d4f859c69c2112c78a240393fa459b3b86fc73ec1d8904142b1d44b5a79c6e354fab2e5ed0a732a1c5ad93dc43b96e600b1cda6410c6b92d8f1ec076fcf11c863efe19439a365591113e1858d9fa2b9049728e447a2227836d32f240ab48c746c26359a469265026569b5f87237a9d45d40fc73754bee86a5847945890a5e3b0faf1688202e062930802f843013fafcc5d4957c3c4d84f540e6fe6ea8cc7a28280115d2778913c78f69b1155b779887aea184da9258be9ba9acf7ab0f9c6ec961cd5fbe9f6fcc0d64a86c2fef3fbb2811dc381f77e7236e1f49cf4d788ebd93bbc9410cea2f7fea59eab8e75c75e277a1525dc32036eb373b1e48cad7b70d64fc568290a9fbf46a16868c11592ae25d7fc4c531dcb4b260cf43f9878502b2208234afe69ca5e714b9d92ffc31a1974bfa5c9808aaea157f9d9bd1f38f33fc9003d027f8af5b8c3a59e0d1238a5f045c793cc5f958bd1545a4a512273986247c1503749e6e1537679cbc74215e3a403bab78395be31df04b0b721459560fb9f8c9e4fc88cd8ff7622bd9e53370249a344e2310644a9bfb345634dbf53fa0a4cbf980f344a71d6a86126701ece22565c0a76e8157bf73e1ff742c23721727ddc480459b007e84034d00778f9eaf8d0bfc941e9ffb87e24cc2c5713fd1f7695ca0507ad47b025bd150a4d7009d123e137d6d6f9782690635af8ff6c0082258c510c4df4e5fe291480ca6cddad9bc3eaea6306d1e3257aeeb1ffbe60a843e45d85b1cc9d66cb5bd6c992d274c4084a7e83aa5fabe29d9b6ac7ccaafedcdea63705e1298de88af67b143a1e41c8a115482f09942d0b96295939a8a663838b1ef0631acfed92fbb6ae98ee7e5df51cc9239ddebdd413676ff577a197108ce9b251e94355d5d276657480ca5e5b0d895ecf5baaa978b3e953821d05318e0550281ecfe242fb84907aff50c4737b96995e15aa96221643be6ca96a159418b0ba06f99d2e6dd09c7ea247547692a2596aac0fb3a047cb9114b6d0aa8d179bc18a80ec81aacaba7bf2a8e0b7d43f4f670e4f1652175e5f710c987511237a345a9698c663c7e82420f0c7dcec419400c1b80badf74b249b9e1b7a02cf1b99e78e9752b0810738f2bbea223bc4fc86715f9c3fa6ee93755e84d53d92c8ce2fc75c4cf423ba304e607a95959a1056682964942cddb12b16f5bfebe9a9fed62eaaef3421fb87e471cd379b457ffa92016779162934d86f6712fb5e36dcab9d1e06c64537eb2bc129bc4dddb5e131053486d3970327018f1ce6607117cd7e5a877d93f0c917df98bd1903b9921737ab1243c6bb407dd653bea2910071df49ab1595ff2f0ba5d70add7bfd3511e32325dcd63ea46e0aa454a1f39ece4da6f81ba7d847ba564b8c51f010586a043cf3682b7ac2c3d4342173ebc0ff15a25c261b11eea351189bc5fa1682a9f2e340d6379389028cfcf4c0eab00d90182ee7d43f03db323435e7f5fba4e493865bbee2d68483c287680279c2f138ab2a0efe681c108380d621f9abe640bd1eba82529d163e39a8702e3bfa8139b6970b08e0930fc268bb8a108de9ff100ce3e8f07a745ba3cc36b31f1c5e8eb664e2a289f77fa902a9ab6d73bef6950ccdee5724f07f7e11e21f10c3cb958b6d0c49e9488dadebf4015589de09082b0cf57156fc2bf79cac402ea938e82173c5b8af2d02cbbfde0e95ded5aba388a641419e47af0abdb7f91ab2b852a98494eee0d36d2a8984ba3659cfe0f6475e0a3a746a0442de715666a561a689a1e635cab3f9abfc113234e630cafae29426747f60516a14f3209996b8880176b"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_BITS={0x54, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2b58}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1d}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xe5\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ',),\\\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x24, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x93, 0x4, "c7168318cffabcca20924fcd340e75f56e3d594d3f48e760eefcdb3affec4fac87b3dbecfb3d95e1c1f3eb74332f54bcca7a53f7eee9e1e71679e39b33b7a60c16989198f4e4550ad130efbbd68f583c75a61ddd921364dbcc22292e45f9ebc6d659d37f67c49c9585ea4728fc15d654cec6738a550e34cefc536ed0e151bf1fef5b85e25c62a2ededa370b5994561"}, @ETHTOOL_A_BITSET_MASK={0x6, 0x5, ',G'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x160, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xa2, 0x4, "0705cf4622ca06fa75816538bfd6e45d758d2db1a26ca3f7a4b5727c1ab3a14b24d6c5be95cae35af7120148575ae431b36556e58fb8fe13fffa5840f209d7a346e93475e66cfec38d50b8b7b19f1eeb9e2923cd741612d900600045f041e53dcfd0b0eb6bf0a369e1c73e1a2ce2e34a1685e188a8878f2ff9be2a45f5d38d2373bbc690a5f4ea00f56ea29ca363ebfa407cabe037d6560f4d953fa9179c"}, @ETHTOOL_A_BITSET_MASK={0x9e, 0x5, "c927011aedc6aca4380d2369bfb7692c88fb9c337958637f3231f5c5aff47e66606e1223e2597c76b61b0fa4c5e26e155488605226f314123725dc09d7bc6bcefae973a4bc06bba1f887c60960f0717085807cfedd64f5fde4cd1ac6bd9394529e0eec55ef737067b19e1034d06b534bd7c4e086dca647bc09c400ca0a1b0f4b36c3d2354afd09fae33270fdbc4ec7d468924b90c25b061f0554"}, @ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}]}, @ETHTOOL_A_DEBUG_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x128, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80000000}, @ETHTOOL_A_BITSET_BITS={0x114, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'netpci0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '}(@\\[#+\\:#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fc0000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'netpci0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '(\'%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'SYNPROXY\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa93}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '):\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff3}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ')^\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x2460}}, 0x4010) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x488, 0x0, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3b8, 0xffffffff, 0xffffffff, 0x3b8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0xffff0000, 0xc11270e446e71eb1, 0x0, 'syz1\x00'}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1a, 0x1, 0x5}}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1d0, 0x1f0, 0x0, {}, [@common=@srh={{0x30}, {0x2, 0xb7, 0x4, 0xe8, 0x6, 0x1268, 0xb2a}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) 0s ago: executing program 4 (id=15228): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r2, 0x89ee, &(0x7f0000000300)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, r5, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x3}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4c041}, 0x24000000) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034888a801000000000014"], 0xfdef) kernel console output (not intermixed with test programs): 758][T24581] syz_tun: tun_net_xmit 42 [ 1483.783418][T24581] syz_tun: tun_net_xmit 42 [ 1483.788424][T24581] syz_tun: tun_net_xmit 42 [ 1483.793056][T24581] syz_tun: tun_net_xmit 42 [ 1483.798758][T24581] syz_tun: tun_net_xmit 42 [ 1483.803389][T24581] syz_tun: tun_net_xmit 42 [ 1483.808826][T24581] syz_tun: tun_net_xmit 42 [ 1483.813452][T24581] syz_tun: tun_net_xmit 42 [ 1483.818350][T24581] syz_tun: tun_net_xmit 42 [ 1483.822984][T24581] syz_tun: tun_net_xmit 42 [ 1483.827795][T24581] syz_tun: tun_net_xmit 42 [ 1483.832405][T24581] syz_tun: tun_net_xmit 42 [ 1483.838057][T24581] syz_tun: tun_net_xmit 42 [ 1483.842731][T24581] syz_tun: tun_net_xmit 42 [ 1483.847503][T24581] syz_tun: tun_net_xmit 42 [ 1483.852134][T24581] syz_tun: tun_net_xmit 42 [ 1483.857703][T24581] syz_tun: tun_net_xmit 42 [ 1483.862719][T24581] syz_tun: tun_net_xmit 42 [ 1483.868143][T24581] syz_tun: tun_net_xmit 42 [ 1483.872751][T24581] syz_tun: tun_net_xmit 42 [ 1483.877803][T24581] syz_tun: tun_net_xmit 42 [ 1483.882545][T24581] syz_tun: tun_net_xmit 42 [ 1483.887365][T24581] syz_tun: tun_net_xmit 42 [ 1483.891984][T24581] syz_tun: tun_net_xmit 42 [ 1483.897363][T24581] syz_tun: tun_net_xmit 42 [ 1483.901980][T24581] syz_tun: tun_net_xmit 42 [ 1483.906794][T24581] syz_tun: tun_net_xmit 42 [ 1483.911562][T24581] syz_tun: tun_net_xmit 42 [ 1483.916256][T24581] syz_tun: tun_net_xmit 42 [ 1483.921515][T24581] syz_tun: tun_net_xmit 42 [ 1483.926153][T24581] syz_tun: tun_net_xmit 42 [ 1483.931594][T24581] syz_tun: tun_net_xmit 42 [ 1483.936246][T24581] syz_tun: tun_net_xmit 42 [ 1483.940979][T24581] syz_tun: tun_net_xmit 42 [ 1483.945708][T24581] syz_tun: tun_net_xmit 42 [ 1483.950650][T24581] syz_tun: tun_net_xmit 42 [ 1483.955276][T24581] syz_tun: tun_net_xmit 42 [ 1483.961045][T24581] syz_tun: tun_net_xmit 42 [ 1483.965675][T24581] syz_tun: tun_net_xmit 42 [ 1483.970503][T24581] syz_tun: tun_net_xmit 42 [ 1483.975119][T24581] syz_tun: tun_net_xmit 42 [ 1483.980605][T24581] syz_tun: tun_net_xmit 42 [ 1483.985412][T24581] syz_tun: tun_net_xmit 42 [ 1483.990807][T24581] syz_tun: tun_net_xmit 42 [ 1483.995458][T24581] syz_tun: tun_net_xmit 42 [ 1484.000331][T24581] syz_tun: tun_net_xmit 42 [ 1484.004956][T24581] syz_tun: tun_net_xmit 42 [ 1484.009766][T24581] syz_tun: tun_net_xmit 42 [ 1484.014365][T24581] syz_tun: tun_net_xmit 42 [ 1484.019859][T24581] syz_tun: tun_net_xmit 42 [ 1484.024478][T24581] syz_tun: tun_net_xmit 42 [ 1484.029274][T24581] syz_tun: tun_net_xmit 42 [ 1484.033892][T24581] syz_tun: tun_net_xmit 42 [ 1484.039435][T24581] syz_tun: tun_net_xmit 42 [ 1484.044063][T24581] syz_tun: tun_net_xmit 42 [ 1484.049782][T24581] syz_tun: tun_net_xmit 42 [ 1484.054398][T24581] syz_tun: tun_net_xmit 42 [ 1484.059365][T24581] syz_tun: tun_net_xmit 42 [ 1484.063986][T24581] syz_tun: tun_net_xmit 42 [ 1484.068995][T24581] syz_tun: tun_net_xmit 42 [ 1484.073716][T24581] syz_tun: tun_net_xmit 42 [ 1484.079070][T24581] syz_tun: tun_net_xmit 42 [ 1484.083842][T24581] syz_tun: tun_net_xmit 42 [ 1484.088761][T24581] syz_tun: tun_net_xmit 42 [ 1484.093489][T24581] syz_tun: tun_net_xmit 42 [ 1484.098795][T24581] syz_tun: tun_net_xmit 42 [ 1484.103562][T24581] syz_tun: tun_net_xmit 42 [ 1484.109227][T24581] syz_tun: tun_net_xmit 42 [ 1484.113968][T24581] syz_tun: tun_net_xmit 42 [ 1484.119812][T24581] syz_tun: tun_net_xmit 42 [ 1484.124587][T24581] syz_tun: tun_net_xmit 42 [ 1484.129748][T24581] syz_tun: tun_net_xmit 42 [ 1484.134380][T24581] syz_tun: tun_net_xmit 42 [ 1484.139743][T24581] syz_tun: tun_net_xmit 42 [ 1484.144430][T24581] syz_tun: tun_net_xmit 42 [ 1484.149331][T24581] syz_tun: tun_net_xmit 42 [ 1484.153972][T24581] syz_tun: tun_net_xmit 42 [ 1484.158909][T24581] syz_tun: tun_net_xmit 42 [ 1484.163540][T24581] syz_tun: tun_net_xmit 42 [ 1484.168953][T24581] syz_tun: tun_net_xmit 42 [ 1484.173649][T24581] syz_tun: tun_net_xmit 42 [ 1484.179329][T24581] syz_tun: tun_net_xmit 42 [ 1484.184048][T24581] syz_tun: tun_net_xmit 42 [ 1484.189592][T24581] syz_tun: tun_net_xmit 42 [ 1484.194229][T24581] syz_tun: tun_net_xmit 42 [ 1484.199160][T24581] syz_tun: tun_net_xmit 42 [ 1484.203804][T24581] syz_tun: tun_net_xmit 42 [ 1484.208679][T24581] syz_tun: tun_net_xmit 42 [ 1484.213437][T24581] syz_tun: tun_net_xmit 42 [ 1484.218398][T24581] syz_tun: tun_net_xmit 42 [ 1484.223095][T24581] syz_tun: tun_net_xmit 42 [ 1484.231004][T24581] syz_tun: tun_net_xmit 42 [ 1484.235798][T24581] syz_tun: tun_net_xmit 42 [ 1484.240676][T24581] syz_tun: tun_net_xmit 42 [ 1484.245299][T24581] syz_tun: tun_net_xmit 42 [ 1484.250490][T24581] syz_tun: tun_net_xmit 42 [ 1484.255137][T24581] syz_tun: tun_net_xmit 42 [ 1484.260462][T24581] syz_tun: tun_net_xmit 42 [ 1484.265156][T24581] syz_tun: tun_net_xmit 42 [ 1484.270083][T24581] syz_tun: tun_net_xmit 42 [ 1484.274704][T24581] syz_tun: tun_net_xmit 42 [ 1484.280320][T24581] syz_tun: tun_net_xmit 42 [ 1484.284960][T24581] syz_tun: tun_net_xmit 42 [ 1484.290631][T24581] syz_tun: tun_net_xmit 42 [ 1484.295246][T24581] syz_tun: tun_net_xmit 42 [ 1484.300164][T24581] syz_tun: tun_net_xmit 42 [ 1484.304812][T24581] syz_tun: tun_net_xmit 42 [ 1484.309824][T24581] syz_tun: tun_net_xmit 42 [ 1484.314654][T24581] syz_tun: tun_net_xmit 42 [ 1484.320163][T24581] syz_tun: tun_net_xmit 42 [ 1484.324835][T24581] syz_tun: tun_net_xmit 42 [ 1484.329658][T24581] syz_tun: tun_net_xmit 42 [ 1484.334283][T24581] syz_tun: tun_net_xmit 42 [ 1484.340772][T24581] syz_tun: tun_net_xmit 42 [ 1484.345958][T24581] syz_tun: tun_net_xmit 42 [ 1484.351321][T24581] syz_tun: tun_net_xmit 42 [ 1484.356056][T24581] syz_tun: tun_net_xmit 42 [ 1484.362977][T24581] syz_tun: tun_net_xmit 42 [ 1484.367876][T24581] syz_tun: tun_net_xmit 42 [ 1484.372614][T24581] syz_tun: tun_net_xmit 42 [ 1484.378027][T24581] syz_tun: tun_net_xmit 42 [ 1484.382643][T24581] syz_tun: tun_net_xmit 42 [ 1484.388040][T24581] syz_tun: tun_net_xmit 42 [ 1484.392697][T24581] syz_tun: tun_net_xmit 42 [ 1484.398238][T24581] syz_tun: tun_net_xmit 42 [ 1484.402917][T24581] syz_tun: tun_net_xmit 42 [ 1484.408374][T24581] syz_tun: tun_net_xmit 42 [ 1484.413038][T24581] syz_tun: tun_net_xmit 42 [ 1484.417999][T24581] syz_tun: tun_net_xmit 42 [ 1484.422645][T24581] syz_tun: tun_net_xmit 42 [ 1484.427449][T24581] syz_tun: tun_net_xmit 42 [ 1484.432062][T24581] syz_tun: tun_net_xmit 42 [ 1484.438302][T24581] syz_tun: tun_net_xmit 42 [ 1484.443061][T24581] syz_tun: tun_net_xmit 42 [ 1484.448033][T24581] syz_tun: tun_net_xmit 42 [ 1484.453242][T24581] syz_tun: tun_net_xmit 42 [ 1484.458583][T24581] syz_tun: tun_net_xmit 42 [ 1484.463261][T24581] syz_tun: tun_net_xmit 42 [ 1484.468758][T24581] syz_tun: tun_net_xmit 42 [ 1484.473548][T24581] syz_tun: tun_net_xmit 42 [ 1484.478707][T24581] syz_tun: tun_net_xmit 42 [ 1484.483334][T24581] syz_tun: tun_net_xmit 42 [ 1484.488196][T24581] syz_tun: tun_net_xmit 42 [ 1484.492898][T24581] syz_tun: tun_net_xmit 42 [ 1484.498735][T24581] syz_tun: tun_net_xmit 42 [ 1484.503456][T24581] syz_tun: tun_net_xmit 42 [ 1484.508374][T24581] syz_tun: tun_net_xmit 42 [ 1484.512990][T24581] syz_tun: tun_net_xmit 42 [ 1484.518390][T24581] syz_tun: tun_net_xmit 42 [ 1484.523114][T24581] syz_tun: tun_net_xmit 42 [ 1484.528229][T24581] syz_tun: tun_net_xmit 42 [ 1484.532894][T24581] syz_tun: tun_net_xmit 42 [ 1484.537983][T24581] syz_tun: tun_net_xmit 42 [ 1484.542608][T24581] syz_tun: tun_net_xmit 42 [ 1484.547438][T24581] syz_tun: tun_net_xmit 42 [ 1484.552066][T24581] syz_tun: tun_net_xmit 42 [ 1484.557918][T24581] syz_tun: tun_net_xmit 42 [ 1484.562704][T24581] syz_tun: tun_net_xmit 42 [ 1484.567479][T24581] syz_tun: tun_net_xmit 42 [ 1484.572204][T24581] syz_tun: tun_net_xmit 42 [ 1484.577643][T24581] syz_tun: tun_net_xmit 42 [ 1484.582315][T24581] syz_tun: tun_net_xmit 42 [ 1484.587611][T24581] syz_tun: tun_net_xmit 42 [ 1484.592319][T24581] syz_tun: tun_net_xmit 42 [ 1484.598144][T24581] syz_tun: tun_net_xmit 42 [ 1484.602818][T24581] syz_tun: tun_net_xmit 42 [ 1484.607614][T24581] syz_tun: tun_net_xmit 42 [ 1484.612221][T24581] syz_tun: tun_net_xmit 42 [ 1484.617899][T24581] syz_tun: tun_net_xmit 42 [ 1484.622545][T24581] syz_tun: tun_net_xmit 42 [ 1484.627334][T24581] syz_tun: tun_net_xmit 42 [ 1484.631937][T24581] syz_tun: tun_net_xmit 42 [ 1484.637190][T24581] syz_tun: tun_net_xmit 42 [ 1484.641824][T24581] syz_tun: tun_net_xmit 42 [ 1484.647427][T24581] syz_tun: tun_net_xmit 42 [ 1484.652039][T24581] syz_tun: tun_net_xmit 42 [ 1484.657532][T24581] syz_tun: tun_net_xmit 42 [ 1484.662195][T24581] syz_tun: tun_net_xmit 42 [ 1484.668153][T24581] syz_tun: tun_net_xmit 42 [ 1484.673123][T24581] syz_tun: tun_net_xmit 42 [ 1484.678806][T24581] syz_tun: tun_net_xmit 42 [ 1484.683468][T24581] syz_tun: tun_net_xmit 42 [ 1484.688531][T24581] syz_tun: tun_net_xmit 42 [ 1484.693169][T24581] syz_tun: tun_net_xmit 42 [ 1484.698148][T24581] syz_tun: tun_net_xmit 42 [ 1484.702911][T24581] syz_tun: tun_net_xmit 42 [ 1484.708145][T24581] syz_tun: tun_net_xmit 42 [ 1484.712902][T24581] syz_tun: tun_net_xmit 42 [ 1484.717899][T24581] syz_tun: tun_net_xmit 42 [ 1484.722544][T24581] syz_tun: tun_net_xmit 42 [ 1484.727540][T24581] syz_tun: tun_net_xmit 42 [ 1484.732142][T24581] syz_tun: tun_net_xmit 42 [ 1484.737735][T24581] syz_tun: tun_net_xmit 42 [ 1484.742345][T24581] syz_tun: tun_net_xmit 42 [ 1484.747382][T24581] syz_tun: tun_net_xmit 42 [ 1484.751995][T24581] syz_tun: tun_net_xmit 42 [ 1484.757934][T24581] syz_tun: tun_net_xmit 42 [ 1484.762565][T24581] syz_tun: tun_net_xmit 42 [ 1484.768993][T24581] syz_tun: tun_net_xmit 42 [ 1484.773607][T24581] syz_tun: tun_net_xmit 42 [ 1484.781038][T24581] syz_tun: tun_net_xmit 42 [ 1484.785662][T24581] syz_tun: tun_net_xmit 42 [ 1484.790568][T24581] syz_tun: tun_net_xmit 42 [ 1484.795415][T24581] syz_tun: tun_net_xmit 42 [ 1484.801518][T24581] syz_tun: tun_net_xmit 42 [ 1484.806407][T24581] syz_tun: tun_net_xmit 42 [ 1484.811048][T24581] syz_tun: tun_net_xmit 42 [ 1484.815661][T24581] syz_tun: tun_net_xmit 42 [ 1484.820780][T24581] syz_tun: tun_net_xmit 42 [ 1484.825390][T24581] syz_tun: tun_net_xmit 42 [ 1484.830967][T24581] syz_tun: tun_net_xmit 42 [ 1484.835563][T24581] syz_tun: tun_net_xmit 42 [ 1484.841360][T24581] syz_tun: tun_net_xmit 42 [ 1484.845971][T24581] syz_tun: tun_net_xmit 42 [ 1484.850772][T24581] syz_tun: tun_net_xmit 42 [ 1484.855408][T24581] syz_tun: tun_net_xmit 42 [ 1484.860264][T24581] syz_tun: tun_net_xmit 42 [ 1484.864885][T24581] syz_tun: tun_net_xmit 42 [ 1484.869920][T24581] syz_tun: tun_net_xmit 42 [ 1484.874542][T24581] syz_tun: tun_net_xmit 42 [ 1484.879396][T24581] syz_tun: tun_net_xmit 42 [ 1484.884013][T24581] syz_tun: tun_net_xmit 42 [ 1484.889098][T24581] syz_tun: tun_net_xmit 42 [ 1484.893711][T24581] syz_tun: tun_net_xmit 42 [ 1484.899181][T24581] syz_tun: tun_net_xmit 42 [ 1484.903797][T24581] syz_tun: tun_net_xmit 42 [ 1484.909092][T24581] syz_tun: tun_net_xmit 42 [ 1484.913703][T24581] syz_tun: tun_net_xmit 42 [ 1484.919171][T24581] syz_tun: tun_net_xmit 42 [ 1484.923823][T24581] syz_tun: tun_net_xmit 42 [ 1484.928877][T24581] syz_tun: tun_net_xmit 42 [ 1484.933482][T24581] syz_tun: tun_net_xmit 42 [ 1484.938496][T24581] syz_tun: tun_net_xmit 42 [ 1484.943253][T24581] syz_tun: tun_net_xmit 42 [ 1484.948705][T24581] syz_tun: tun_net_xmit 42 [ 1484.953399][T24581] syz_tun: tun_net_xmit 42 [ 1484.958593][T24581] syz_tun: tun_net_xmit 42 [ 1484.963389][T24581] syz_tun: tun_net_xmit 42 [ 1484.968760][T24581] syz_tun: tun_net_xmit 42 [ 1484.973389][T24581] syz_tun: tun_net_xmit 42 [ 1484.978195][T24581] syz_tun: tun_net_xmit 42 [ 1484.982833][T24581] syz_tun: tun_net_xmit 42 [ 1484.987804][T24581] syz_tun: tun_net_xmit 42 [ 1484.992461][T24581] syz_tun: tun_net_xmit 42 [ 1485.001348][T24581] syz_tun: tun_net_xmit 42 [ 1485.005975][T24581] syz_tun: tun_net_xmit 42 [ 1485.011288][T24581] syz_tun: tun_net_xmit 42 [ 1485.015910][T24581] syz_tun: tun_net_xmit 42 [ 1485.021455][T24581] syz_tun: tun_net_xmit 42 [ 1485.026105][T24581] syz_tun: tun_net_xmit 42 [ 1485.031123][T24581] syz_tun: tun_net_xmit 42 [ 1485.035960][T24581] syz_tun: tun_net_xmit 42 [ 1485.041597][T24581] syz_tun: tun_net_xmit 42 [ 1485.046255][T24581] syz_tun: tun_net_xmit 42 [ 1485.051532][T24581] syz_tun: tun_net_xmit 42 [ 1485.056146][T24581] syz_tun: tun_net_xmit 42 [ 1485.061177][T24581] syz_tun: tun_net_xmit 42 [ 1485.065786][T24581] syz_tun: tun_net_xmit 42 [ 1485.071035][T24581] syz_tun: tun_net_xmit 42 [ 1485.075628][T24581] syz_tun: tun_net_xmit 42 [ 1485.080624][T24581] syz_tun: tun_net_xmit 42 [ 1485.083712][T24613] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1485.085370][T24581] syz_tun: tun_net_xmit 42 [ 1485.099975][T24581] syz_tun: tun_net_xmit 42 [ 1485.104787][T24581] syz_tun: tun_net_xmit 42 [ 1485.110813][T24581] syz_tun: tun_net_xmit 42 [ 1485.115552][T24581] syz_tun: tun_net_xmit 42 [ 1485.120451][T24581] syz_tun: tun_net_xmit 42 [ 1485.125204][T24581] syz_tun: tun_net_xmit 42 [ 1485.130782][T24581] syz_tun: tun_net_xmit 42 [ 1485.135605][T24581] syz_tun: tun_net_xmit 42 [ 1485.141008][T24581] syz_tun: tun_net_xmit 42 [ 1485.167242][T24581] syz_tun: tun_net_xmit 42 [ 1485.199611][T24581] syz_tun: tun_net_xmit 42 [ 1485.220337][T24581] syz_tun: tun_net_xmit 42 [ 1485.227042][T24581] syz_tun: tun_net_xmit 42 [ 1485.261735][T24581] syz_tun: tun_net_xmit 42 [ 1485.288217][T24581] syz_tun: tun_net_xmit 42 [ 1485.299075][T24581] syz_tun: tun_net_xmit 42 [ 1485.308308][T24581] syz_tun: tun_net_xmit 42 [ 1485.313343][T24581] syz_tun: tun_net_xmit 42 [ 1485.320865][T24581] syz_tun: tun_net_xmit 42 [ 1485.331887][T24581] syz_tun: tun_net_xmit 42 [ 1485.339030][T24581] syz_tun: tun_net_xmit 42 [ 1485.344231][T24581] syz_tun: tun_net_xmit 42 [ 1485.350304][T24581] syz_tun: tun_net_xmit 42 [ 1485.355244][T24581] syz_tun: tun_net_xmit 42 [ 1485.361040][T24581] syz_tun: tun_net_xmit 42 [ 1485.365969][T24581] syz_tun: tun_net_xmit 42 [ 1485.373906][T24652] netlink: 'syz.2.13671': attribute type 1 has an invalid length. [ 1485.383481][T24581] syz_tun: tun_net_xmit 42 [ 1485.388566][T24581] syz_tun: tun_net_xmit 42 [ 1485.394748][T24581] syz_tun: tun_net_xmit 42 [ 1485.417230][T24581] syz_tun: tun_net_xmit 42 [ 1485.422063][T24581] syz_tun: tun_net_xmit 42 [ 1485.428221][T24581] syz_tun: tun_net_xmit 42 [ 1485.433025][T24581] syz_tun: tun_net_xmit 42 [ 1485.452897][T24581] syz_tun: tun_net_xmit 42 [ 1485.469570][T24581] syz_tun: tun_net_xmit 42 [ 1485.485471][T24581] syz_tun: tun_net_xmit 42 [ 1485.492882][T24581] syz_tun: tun_net_xmit 42 [ 1485.504888][T24581] syz_tun: tun_net_xmit 42 [ 1485.515719][T24581] syz_tun: tun_net_xmit 42 [ 1485.531204][T24581] syz_tun: tun_net_xmit 42 [ 1485.541701][T24581] syz_tun: tun_net_xmit 42 [ 1485.555107][T24661] netlink: 'syz.3.13674': attribute type 1 has an invalid length. [ 1485.555274][T24581] syz_tun: tun_net_xmit 42 [ 1485.574185][T24581] syz_tun: tun_net_xmit 42 [ 1485.581298][T24661] __nla_validate_parse: 15 callbacks suppressed [ 1485.581315][T24661] netlink: 16110 bytes leftover after parsing attributes in process `syz.3.13674'. [ 1485.586124][T24581] syz_tun: tun_net_xmit 42 [ 1485.592322][T24661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13674'. [ 1485.612921][T24581] syz_tun: tun_net_xmit 42 [ 1485.618528][T24581] syz_tun: tun_net_xmit 42 [ 1485.621684][T24663] netlink: 'syz.0.13675': attribute type 5 has an invalid length. [ 1485.623589][T24581] syz_tun: tun_net_xmit 42 [ 1485.636556][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1485.647655][T24581] syz_tun: tun_net_xmit 42 [ 1485.653617][T24581] syz_tun: tun_net_xmit 42 [ 1485.659259][T24581] syz_tun: tun_net_xmit 42 [ 1485.664198][T24581] syz_tun: tun_net_xmit 42 [ 1485.669685][T24581] syz_tun: tun_net_xmit 42 [ 1485.674477][T24581] syz_tun: tun_net_xmit 42 [ 1485.690708][T24581] syz_tun: tun_net_xmit 42 [ 1485.695679][T24581] syz_tun: tun_net_xmit 42 [ 1485.701139][T24581] syz_tun: tun_net_xmit 42 [ 1485.726728][T24581] syz_tun: tun_net_xmit 42 [ 1485.741302][T24581] syz_tun: tun_net_xmit 42 [ 1485.754946][T24581] syz_tun: tun_net_xmit 42 [ 1485.778409][T24581] syz_tun: tun_net_xmit 42 [ 1485.788206][T24581] syz_tun: tun_net_xmit 42 [ 1485.804912][T24581] syz_tun: tun_net_xmit 42 [ 1485.811456][T24581] syz_tun: tun_net_xmit 42 [ 1485.816379][T24581] syz_tun: tun_net_xmit 42 [ 1485.821353][T24581] syz_tun: tun_net_xmit 42 [ 1485.826172][T24581] syz_tun: tun_net_xmit 42 [ 1485.832527][T24581] syz_tun: tun_net_xmit 42 [ 1485.841119][T24581] syz_tun: tun_net_xmit 42 [ 1485.846025][T24581] syz_tun: tun_net_xmit 42 [ 1485.851416][T24581] syz_tun: tun_net_xmit 42 [ 1485.856391][T24581] syz_tun: tun_net_xmit 42 [ 1485.865324][T24581] syz_tun: tun_net_xmit 42 [ 1485.870921][T24581] syz_tun: tun_net_xmit 42 [ 1485.875753][T24581] syz_tun: tun_net_xmit 42 [ 1485.881105][T24581] syz_tun: tun_net_xmit 42 [ 1485.887041][T24581] syz_tun: tun_net_xmit 42 [ 1485.897553][T24581] syz_tun: tun_net_xmit 42 [ 1485.902425][T24581] syz_tun: tun_net_xmit 42 [ 1485.908092][T24581] syz_tun: tun_net_xmit 42 [ 1485.914367][T24581] syz_tun: tun_net_xmit 42 [ 1485.920916][T24581] syz_tun: tun_net_xmit 42 [ 1485.929412][T24581] syz_tun: tun_net_xmit 42 [ 1485.939698][T24581] syz_tun: tun_net_xmit 42 [ 1485.944603][T24581] syz_tun: tun_net_xmit 42 [ 1485.946642][T23781] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1485.951560][T24581] syz_tun: tun_net_xmit 42 [ 1485.963491][T24581] syz_tun: tun_net_xmit 42 [ 1485.974734][T24581] syz_tun: tun_net_xmit 42 [ 1485.979834][T24581] syz_tun: tun_net_xmit 42 [ 1485.984842][T24581] syz_tun: tun_net_xmit 42 [ 1485.988004][T23781] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1486.013226][T24581] syz_tun: tun_net_xmit 42 [ 1486.023187][T24581] syz_tun: tun_net_xmit 42 [ 1486.029258][T24581] syz_tun: tun_net_xmit 42 [ 1486.042149][T24581] syz_tun: tun_net_xmit 42 [ 1486.048100][T24581] syz_tun: tun_net_xmit 42 [ 1486.053095][T24581] syz_tun: tun_net_xmit 42 [ 1486.059355][T24581] syz_tun: tun_net_xmit 42 [ 1486.064352][T24581] syz_tun: tun_net_xmit 42 [ 1486.070276][T24581] syz_tun: tun_net_xmit 42 [ 1486.073168][T23781] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1486.075222][T24581] syz_tun: tun_net_xmit 42 [ 1486.089790][T24581] syz_tun: tun_net_xmit 42 [ 1486.094994][T24581] syz_tun: tun_net_xmit 42 [ 1486.098387][T23781] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1486.106945][T24581] syz_tun: tun_net_xmit 42 [ 1486.113210][T24581] syz_tun: tun_net_xmit 42 [ 1486.123484][T24581] syz_tun: tun_net_xmit 42 [ 1486.137418][T24581] syz_tun: tun_net_xmit 42 [ 1486.148212][T24581] syz_tun: tun_net_xmit 42 [ 1486.156893][T24581] syz_tun: tun_net_xmit 42 [ 1486.168039][T24581] syz_tun: tun_net_xmit 42 [ 1486.188225][T24581] syz_tun: tun_net_xmit 42 [ 1486.193107][T24581] syz_tun: tun_net_xmit 42 [ 1486.201878][T24686] syzkaller1: entered promiscuous mode [ 1486.201976][T24581] syz_tun: tun_net_xmit 42 [ 1486.211969][T24686] syzkaller1: entered allmulticast mode [ 1486.212388][T24581] syz_tun: tun_net_xmit 42 [ 1486.227263][T24581] syz_tun: tun_net_xmit 42 [ 1486.232780][T24581] syz_tun: tun_net_xmit 42 [ 1486.240858][T24581] syz_tun: tun_net_xmit 42 [ 1486.255102][T24581] syz_tun: tun_net_xmit 42 [ 1486.260233][T24581] syz_tun: tun_net_xmit 42 [ 1486.265060][T24581] syz_tun: tun_net_xmit 42 [ 1486.270384][T24581] syz_tun: tun_net_xmit 42 [ 1486.275182][T24581] syz_tun: tun_net_xmit 42 [ 1486.292355][T24581] syz_tun: tun_net_xmit 42 [ 1486.332047][T24581] syz_tun: tun_net_xmit 42 [ 1486.337820][T24581] syz_tun: tun_net_xmit 42 [ 1486.344256][T24581] syz_tun: tun_net_xmit 42 [ 1486.355677][T24581] syz_tun: tun_net_xmit 42 [ 1486.378774][T24581] syz_tun: tun_net_xmit 42 [ 1486.383611][T24581] syz_tun: tun_net_xmit 42 [ 1486.389880][T24581] syz_tun: tun_net_xmit 42 [ 1486.419369][T24581] syz_tun: tun_net_xmit 42 [ 1486.429724][T24581] syz_tun: tun_net_xmit 42 [ 1486.435084][T24581] syz_tun: tun_net_xmit 42 [ 1486.442767][T24581] syz_tun: tun_net_xmit 42 [ 1486.449523][T24581] syz_tun: tun_net_xmit 42 [ 1486.454427][T24581] syz_tun: tun_net_xmit 42 [ 1486.459484][T24581] syz_tun: tun_net_xmit 42 [ 1486.464208][T24581] syz_tun: tun_net_xmit 42 [ 1486.469375][T24581] syz_tun: tun_net_xmit 42 [ 1486.474617][T24581] syz_tun: tun_net_xmit 42 [ 1486.480468][T24581] syz_tun: tun_net_xmit 42 [ 1486.485300][T24581] syz_tun: tun_net_xmit 42 [ 1486.491017][T24581] syz_tun: tun_net_xmit 42 [ 1486.495837][T24581] syz_tun: tun_net_xmit 42 [ 1486.507702][T24581] syz_tun: tun_net_xmit 42 [ 1486.512519][T24581] syz_tun: tun_net_xmit 42 [ 1486.518459][T24581] syz_tun: tun_net_xmit 42 [ 1486.523290][T24581] syz_tun: tun_net_xmit 42 [ 1486.528303][T24581] syz_tun: tun_net_xmit 42 [ 1486.533105][T24581] syz_tun: tun_net_xmit 42 [ 1486.539209][T24581] syz_tun: tun_net_xmit 42 [ 1486.544082][T24581] syz_tun: tun_net_xmit 42 [ 1486.550931][T24581] syz_tun: tun_net_xmit 42 [ 1486.555806][T24581] syz_tun: tun_net_xmit 42 [ 1486.562377][T24581] syz_tun: tun_net_xmit 42 [ 1486.568602][T24581] syz_tun: tun_net_xmit 42 [ 1486.573719][T24581] syz_tun: tun_net_xmit 42 [ 1486.581286][T24581] syz_tun: tun_net_xmit 42 [ 1486.586199][T24581] syz_tun: tun_net_xmit 42 [ 1486.592666][T24581] syz_tun: tun_net_xmit 42 [ 1486.599155][T24581] syz_tun: tun_net_xmit 42 [ 1486.604934][T24581] syz_tun: tun_net_xmit 42 [ 1486.610304][T24581] syz_tun: tun_net_xmit 42 [ 1486.615490][T24581] syz_tun: tun_net_xmit 42 [ 1486.620567][T24581] syz_tun: tun_net_xmit 42 [ 1486.625363][T24581] syz_tun: tun_net_xmit 42 [ 1486.631645][T24581] syz_tun: tun_net_xmit 42 [ 1486.636736][T24581] syz_tun: tun_net_xmit 42 [ 1486.641523][T24581] syz_tun: tun_net_xmit 42 [ 1486.647224][T24581] syz_tun: tun_net_xmit 42 [ 1486.652025][T24581] syz_tun: tun_net_xmit 42 [ 1486.658138][T24581] syz_tun: tun_net_xmit 42 [ 1486.662959][T24581] syz_tun: tun_net_xmit 42 [ 1486.668936][T24581] syz_tun: tun_net_xmit 42 [ 1486.673724][T24581] syz_tun: tun_net_xmit 42 [ 1486.679200][T24581] syz_tun: tun_net_xmit 42 [ 1486.684006][T24581] syz_tun: tun_net_xmit 42 [ 1486.690317][T24581] syz_tun: tun_net_xmit 42 [ 1486.695113][T24581] syz_tun: tun_net_xmit 42 [ 1486.700180][T24581] syz_tun: tun_net_xmit 42 [ 1486.704979][T24581] syz_tun: tun_net_xmit 42 [ 1486.712148][T24581] syz_tun: tun_net_xmit 42 [ 1486.717860][T24581] syz_tun: tun_net_xmit 42 [ 1486.722677][T24581] syz_tun: tun_net_xmit 42 [ 1486.728191][T24581] syz_tun: tun_net_xmit 42 [ 1486.733624][T24581] syz_tun: tun_net_xmit 42 [ 1486.739049][T24581] syz_tun: tun_net_xmit 42 [ 1486.743843][T24581] syz_tun: tun_net_xmit 42 [ 1486.750193][T24581] syz_tun: tun_net_xmit 42 [ 1486.755009][T24581] syz_tun: tun_net_xmit 42 [ 1486.760540][T24581] syz_tun: tun_net_xmit 42 [ 1486.765298][T24581] syz_tun: tun_net_xmit 42 [ 1486.770362][T24581] syz_tun: tun_net_xmit 42 [ 1486.775131][T24581] syz_tun: tun_net_xmit 42 [ 1486.780519][T24581] syz_tun: tun_net_xmit 42 [ 1486.785260][T24581] syz_tun: tun_net_xmit 42 [ 1486.790587][T24581] syz_tun: tun_net_xmit 42 [ 1486.795345][T24581] syz_tun: tun_net_xmit 42 [ 1486.800483][T24581] syz_tun: tun_net_xmit 42 [ 1486.807368][T24581] syz_tun: tun_net_xmit 42 [ 1486.812144][T24581] syz_tun: tun_net_xmit 42 [ 1486.817135][T24581] syz_tun: tun_net_xmit 42 [ 1486.821907][T24581] syz_tun: tun_net_xmit 42 [ 1486.827457][T24581] syz_tun: tun_net_xmit 42 [ 1486.832331][T24581] syz_tun: tun_net_xmit 42 [ 1486.841637][T24581] syz_tun: tun_net_xmit 42 [ 1486.846917][T24581] syz_tun: tun_net_xmit 42 [ 1486.851680][T24581] syz_tun: tun_net_xmit 42 [ 1486.856511][T24581] syz_tun: tun_net_xmit 42 [ 1486.861242][T24581] syz_tun: tun_net_xmit 42 [ 1486.868442][T24581] syz_tun: tun_net_xmit 42 [ 1486.873223][T24581] syz_tun: tun_net_xmit 42 [ 1486.878505][T24581] syz_tun: tun_net_xmit 42 [ 1486.883318][T24581] syz_tun: tun_net_xmit 42 [ 1486.888446][T24581] syz_tun: tun_net_xmit 42 [ 1486.893246][T24581] syz_tun: tun_net_xmit 42 [ 1486.898900][T24581] syz_tun: tun_net_xmit 42 [ 1486.903704][T24581] syz_tun: tun_net_xmit 42 [ 1486.908951][T24581] syz_tun: tun_net_xmit 42 [ 1486.913732][T24581] syz_tun: tun_net_xmit 42 [ 1486.919276][T24581] syz_tun: tun_net_xmit 42 [ 1486.924042][T24581] syz_tun: tun_net_xmit 42 [ 1486.930197][T24581] syz_tun: tun_net_xmit 42 [ 1486.934978][T24581] syz_tun: tun_net_xmit 42 [ 1486.940121][T24581] syz_tun: tun_net_xmit 42 [ 1486.944848][T24581] syz_tun: tun_net_xmit 42 [ 1486.949997][T24581] syz_tun: tun_net_xmit 42 [ 1486.954795][T24581] syz_tun: tun_net_xmit 42 [ 1486.960138][T24581] syz_tun: tun_net_xmit 42 [ 1486.964870][T24581] syz_tun: tun_net_xmit 42 [ 1486.970083][T24581] syz_tun: tun_net_xmit 42 [ 1486.974938][T24581] syz_tun: tun_net_xmit 42 [ 1486.979770][T24581] syz_tun: tun_net_xmit 42 [ 1486.984504][T24581] syz_tun: tun_net_xmit 42 [ 1486.990346][T24581] syz_tun: tun_net_xmit 42 [ 1486.995120][T24581] syz_tun: tun_net_xmit 42 [ 1487.000613][T24581] syz_tun: tun_net_xmit 42 [ 1487.005381][T24581] syz_tun: tun_net_xmit 42 [ 1487.010362][T24581] syz_tun: tun_net_xmit 42 [ 1487.015125][T24581] syz_tun: tun_net_xmit 42 [ 1487.020502][T24581] syz_tun: tun_net_xmit 42 [ 1487.025250][T24581] syz_tun: tun_net_xmit 42 [ 1487.030345][T24581] syz_tun: tun_net_xmit 42 [ 1487.035102][T24581] syz_tun: tun_net_xmit 42 [ 1487.040114][T24581] syz_tun: tun_net_xmit 42 [ 1487.044912][T24581] syz_tun: tun_net_xmit 42 [ 1487.050555][T24581] syz_tun: tun_net_xmit 42 [ 1487.055304][T24581] syz_tun: tun_net_xmit 42 [ 1487.060708][T24581] syz_tun: tun_net_xmit 42 [ 1487.065472][T24581] syz_tun: tun_net_xmit 42 [ 1487.070831][T24581] syz_tun: tun_net_xmit 42 [ 1487.075634][T24581] syz_tun: tun_net_xmit 42 [ 1487.081433][T24581] syz_tun: tun_net_xmit 42 [ 1487.086246][T24581] syz_tun: tun_net_xmit 42 [ 1487.091288][T24581] syz_tun: tun_net_xmit 42 [ 1487.096055][T24581] syz_tun: tun_net_xmit 42 [ 1487.101062][T24581] syz_tun: tun_net_xmit 42 [ 1487.105797][T24581] syz_tun: tun_net_xmit 42 [ 1487.111251][T24581] syz_tun: tun_net_xmit 42 [ 1487.116064][T24581] syz_tun: tun_net_xmit 42 [ 1487.120934][T24581] syz_tun: tun_net_xmit 42 [ 1487.125713][T24581] syz_tun: tun_net_xmit 42 [ 1487.131032][T24581] syz_tun: tun_net_xmit 42 [ 1487.135783][T24581] syz_tun: tun_net_xmit 42 [ 1487.141175][T24581] syz_tun: tun_net_xmit 42 [ 1487.145937][T24581] syz_tun: tun_net_xmit 42 [ 1487.151371][T24581] syz_tun: tun_net_xmit 42 [ 1487.156167][T24581] syz_tun: tun_net_xmit 42 [ 1487.161410][T24581] syz_tun: tun_net_xmit 42 [ 1487.166163][T24581] syz_tun: tun_net_xmit 42 [ 1487.171881][T24581] syz_tun: tun_net_xmit 42 [ 1487.176704][T24581] syz_tun: tun_net_xmit 42 [ 1487.181437][T24581] syz_tun: tun_net_xmit 42 [ 1487.186272][T24581] syz_tun: tun_net_xmit 42 [ 1487.191483][T24581] syz_tun: tun_net_xmit 42 [ 1487.197108][T24581] syz_tun: tun_net_xmit 42 [ 1487.201952][T24581] syz_tun: tun_net_xmit 42 [ 1487.207290][T24581] syz_tun: tun_net_xmit 42 [ 1487.212144][T24581] syz_tun: tun_net_xmit 42 [ 1487.217317][T24581] syz_tun: tun_net_xmit 42 [ 1487.222062][T24581] syz_tun: tun_net_xmit 42 [ 1487.227852][T24581] syz_tun: tun_net_xmit 42 [ 1487.232633][T24581] syz_tun: tun_net_xmit 42 [ 1487.238033][T24581] syz_tun: tun_net_xmit 42 [ 1487.243534][T24581] syz_tun: tun_net_xmit 42 [ 1487.248790][T24581] syz_tun: tun_net_xmit 42 [ 1487.253575][T24581] syz_tun: tun_net_xmit 42 [ 1487.259125][T24581] syz_tun: tun_net_xmit 42 [ 1487.263907][T24581] syz_tun: tun_net_xmit 42 [ 1487.269303][T24581] syz_tun: tun_net_xmit 42 [ 1487.274076][T24581] syz_tun: tun_net_xmit 42 [ 1487.278895][T24581] syz_tun: tun_net_xmit 42 [ 1487.283631][T24581] syz_tun: tun_net_xmit 42 [ 1487.289504][T24581] syz_tun: tun_net_xmit 42 [ 1487.294300][T24581] syz_tun: tun_net_xmit 42 [ 1487.299497][T24581] syz_tun: tun_net_xmit 42 [ 1487.305090][T24581] syz_tun: tun_net_xmit 42 [ 1487.310113][T24581] syz_tun: tun_net_xmit 42 [ 1487.314870][T24581] syz_tun: tun_net_xmit 42 [ 1487.320509][T24581] syz_tun: tun_net_xmit 42 [ 1487.325278][T24581] syz_tun: tun_net_xmit 42 [ 1487.330308][T24581] syz_tun: tun_net_xmit 42 [ 1487.335071][T24581] syz_tun: tun_net_xmit 42 [ 1487.340238][T24581] syz_tun: tun_net_xmit 42 [ 1487.344973][T24581] syz_tun: tun_net_xmit 42 [ 1487.350532][T24581] syz_tun: tun_net_xmit 42 [ 1487.355307][T24581] syz_tun: tun_net_xmit 42 [ 1487.360432][T24581] syz_tun: tun_net_xmit 42 [ 1487.365168][T24581] syz_tun: tun_net_xmit 42 [ 1487.370234][T24581] syz_tun: tun_net_xmit 42 [ 1487.375050][T24581] syz_tun: tun_net_xmit 42 [ 1487.380647][T24581] syz_tun: tun_net_xmit 42 [ 1487.385386][T24581] syz_tun: tun_net_xmit 42 [ 1487.390650][T24581] syz_tun: tun_net_xmit 42 [ 1487.395402][T24581] syz_tun: tun_net_xmit 42 [ 1487.400648][T24581] syz_tun: tun_net_xmit 42 [ 1487.405430][T24581] syz_tun: tun_net_xmit 42 [ 1487.411197][T24581] syz_tun: tun_net_xmit 42 [ 1487.415963][T24581] syz_tun: tun_net_xmit 42 [ 1487.421106][T24581] syz_tun: tun_net_xmit 42 [ 1487.425827][T24581] syz_tun: tun_net_xmit 42 [ 1487.430793][T24581] syz_tun: tun_net_xmit 42 [ 1487.435542][T24581] syz_tun: tun_net_xmit 42 [ 1487.440838][T24581] syz_tun: tun_net_xmit 42 [ 1487.445565][T24581] syz_tun: tun_net_xmit 42 [ 1487.450962][T24581] syz_tun: tun_net_xmit 42 [ 1487.455748][T24581] syz_tun: tun_net_xmit 42 [ 1487.460665][T24581] syz_tun: tun_net_xmit 42 [ 1487.465413][T24581] syz_tun: tun_net_xmit 42 [ 1487.471108][T24581] syz_tun: tun_net_xmit 42 [ 1487.475846][T24581] syz_tun: tun_net_xmit 42 [ 1487.481385][T24581] syz_tun: tun_net_xmit 42 [ 1487.497884][T24581] syz_tun: tun_net_xmit 42 [ 1487.504829][T24581] syz_tun: tun_net_xmit 42 [ 1487.510838][T24581] syz_tun: tun_net_xmit 42 [ 1487.515687][T24581] syz_tun: tun_net_xmit 42 [ 1487.522926][T24581] syz_tun: tun_net_xmit 42 [ 1487.527940][T24581] syz_tun: tun_net_xmit 42 [ 1487.532736][T24581] syz_tun: tun_net_xmit 42 [ 1487.537935][T24581] syz_tun: tun_net_xmit 42 [ 1487.543157][T24581] syz_tun: tun_net_xmit 42 [ 1487.547405][T24705] lo speed is unknown, defaulting to 1000 [ 1487.550271][T24581] syz_tun: tun_net_xmit 42 [ 1487.558944][T24581] syz_tun: tun_net_xmit 42 [ 1487.563804][T24581] syz_tun: tun_net_xmit 42 [ 1487.569225][T24581] syz_tun: tun_net_xmit 42 [ 1487.574006][T24581] syz_tun: tun_net_xmit 42 [ 1487.580020][T24581] syz_tun: tun_net_xmit 42 [ 1487.584817][T24581] syz_tun: tun_net_xmit 42 [ 1487.588262][T24705] C speed is unknown, defaulting to 1000 [ 1487.590243][T24581] syz_tun: tun_net_xmit 42 [ 1487.601125][T24581] syz_tun: tun_net_xmit 42 [ 1487.605922][T24581] syz_tun: tun_net_xmit 42 [ 1487.612052][T24581] syz_tun: tun_net_xmit 42 [ 1487.617346][T24581] syz_tun: tun_net_xmit 42 [ 1487.622132][T24581] syz_tun: tun_net_xmit 42 [ 1487.636105][T24581] syz_tun: tun_net_xmit 42 [ 1487.647849][T24581] syz_tun: tun_net_xmit 42 [ 1487.660881][T24581] syz_tun: tun_net_xmit 42 [ 1487.675764][T24581] syz_tun: tun_net_xmit 42 [ 1487.685609][T24581] syz_tun: tun_net_xmit 42 [ 1487.694604][T24581] syz_tun: tun_net_xmit 42 [ 1487.707611][T24581] syz_tun: tun_net_xmit 42 [ 1487.718471][T24581] syz_tun: tun_net_xmit 42 [ 1487.732969][T24581] syz_tun: tun_net_xmit 42 [ 1487.744047][T24581] syz_tun: tun_net_xmit 42 [ 1487.759813][T24581] syz_tun: tun_net_xmit 42 [ 1487.772169][T24581] syz_tun: tun_net_xmit 42 [ 1487.782409][T24581] syz_tun: tun_net_xmit 42 [ 1487.798661][T24581] syz_tun: tun_net_xmit 42 [ 1487.811649][T24581] syz_tun: tun_net_xmit 42 [ 1487.837098][T24581] syz_tun: tun_net_xmit 42 [ 1487.843346][T24581] syz_tun: tun_net_xmit 42 [ 1487.851700][T24581] syz_tun: tun_net_xmit 42 [ 1487.861654][T24581] syz_tun: tun_net_xmit 42 [ 1487.872178][T24581] syz_tun: tun_net_xmit 42 [ 1487.888568][T24581] syz_tun: tun_net_xmit 42 [ 1487.893632][T24581] syz_tun: tun_net_xmit 42 [ 1487.900291][T24581] syz_tun: tun_net_xmit 42 [ 1487.909591][T24581] syz_tun: tun_net_xmit 42 [ 1487.915852][T24581] syz_tun: tun_net_xmit 42 [ 1487.921111][T24581] syz_tun: tun_net_xmit 42 [ 1487.925973][T24581] syz_tun: tun_net_xmit 42 [ 1487.932485][T24581] syz_tun: tun_net_xmit 42 [ 1487.938191][T24581] syz_tun: tun_net_xmit 42 [ 1487.943365][T24581] syz_tun: tun_net_xmit 42 [ 1487.951401][T24581] syz_tun: tun_net_xmit 42 [ 1487.956886][T24581] syz_tun: tun_net_xmit 42 [ 1487.961714][T24581] syz_tun: tun_net_xmit 42 [ 1487.967567][T24581] syz_tun: tun_net_xmit 42 [ 1487.977399][T24581] syz_tun: tun_net_xmit 42 [ 1487.984052][T24581] syz_tun: tun_net_xmit 42 [ 1487.994681][T24581] syz_tun: tun_net_xmit 42 [ 1488.006991][T24581] syz_tun: tun_net_xmit 42 [ 1488.017356][T24581] syz_tun: tun_net_xmit 42 [ 1488.032415][T24581] syz_tun: tun_net_xmit 42 [ 1488.193880][T24734] netlink: 44 bytes leftover after parsing attributes in process `syz.0.13693'. [ 1488.217236][T24734] netlink: 43 bytes leftover after parsing attributes in process `syz.0.13693'. [ 1488.226894][T24734] netlink: 'syz.0.13693': attribute type 6 has an invalid length. [ 1488.234854][T24734] netlink: 'syz.0.13693': attribute type 5 has an invalid length. [ 1488.263202][T24734] netlink: 43 bytes leftover after parsing attributes in process `syz.0.13693'. [ 1488.421970][T24751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13698'. [ 1488.441663][T24751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13698'. [ 1488.623740][T24764] netlink: 'syz.0.13701': attribute type 4 has an invalid length. [ 1488.644068][T24764] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13701'. [ 1488.687149][T24761] netlink: 48 bytes leftover after parsing attributes in process `syz.3.13702'. [ 1488.775773][T24761] netlink: 128 bytes leftover after parsing attributes in process `syz.3.13702'. [ 1489.921532][T24841] netlink: 'syz.1.13727': attribute type 1 has an invalid length. [ 1490.090284][T24847] netlink: 'syz.4.13729': attribute type 2 has an invalid length. [ 1490.507440][T24870] syzkaller1: entered promiscuous mode [ 1490.513493][T24870] syzkaller1: entered allmulticast mode [ 1490.606082][T24874] syzkaller1: entered promiscuous mode [ 1490.614047][T24874] syzkaller1: entered allmulticast mode [ 1490.812882][T24885] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 1490.857850][T24888] netlink: 'syz.1.13743': attribute type 1 has an invalid length. [ 1490.892567][T24888] netlink: 'syz.1.13743': attribute type 2 has an invalid length. [ 1490.920305][T24887] netlink: 'syz.1.13743': attribute type 1 has an invalid length. [ 1490.941761][T24889] __nla_validate_parse: 8 callbacks suppressed [ 1490.941779][T24889] netlink: 48 bytes leftover after parsing attributes in process `syz.1.13743'. [ 1490.982738][T24887] netlink: 'syz.1.13743': attribute type 2 has an invalid length. [ 1491.029365][T24900] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13747'. [ 1491.062584][T24901] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13747'. [ 1491.155728][T24901] netlink: 'syz.2.13747': attribute type 1 has an invalid length. [ 1491.164178][T24901] netlink: 224 bytes leftover after parsing attributes in process `syz.2.13747'. [ 1491.184773][T24906] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13748'. [ 1491.640047][T24936] netlink: 'syz.3.13756': attribute type 18 has an invalid length. [ 1492.308386][T24978] syzkaller0: entered promiscuous mode [ 1492.325216][T24978] syzkaller0: entered allmulticast mode [ 1492.455214][T24987] netlink: 11 bytes leftover after parsing attributes in process `syz.0.13770'. [ 1492.475970][T24990] netlink: 44 bytes leftover after parsing attributes in process `syz.1.13771'. [ 1492.489702][T24990] netlink: 44 bytes leftover after parsing attributes in process `syz.1.13771'. [ 1492.489975][T24978] tipc: Enabled bearer , priority 0 [ 1492.518086][T24976] tipc: Resetting bearer [ 1492.595764][T24976] tipc: Disabling bearer [ 1492.734970][T25006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13775'. [ 1492.854461][T25006] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1492.879158][T25012] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13778'. [ 1493.100673][T25031] netlink: 'syz.0.13783': attribute type 1 has an invalid length. [ 1493.452134][T25053] netlink: 'syz.2.13790': attribute type 2 has an invalid length. [ 1493.492076][T25053] netlink: 'syz.2.13790': attribute type 2 has an invalid length. [ 1493.503032][T25058] netlink: 'syz.1.13791': attribute type 39 has an invalid length. [ 1493.537455][T25058] hsr_slave_0: left promiscuous mode [ 1493.547124][T25058] hsr_slave_1: left promiscuous mode [ 1493.564048][T25062] SET target dimension over the limit! [ 1495.121003][T25151] IPVS: Unknown mcast interface: vcan0 [ 1495.145363][T25153] batadv1: entered allmulticast mode [ 1495.502005][T25177] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20001 [ 1496.523368][ C1] syz_tun: tun_net_xmit 42 [ 1496.781496][T25198] xt_nat: multiple ranges no longer supported [ 1496.810895][T25198] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6 [ 1497.556533][ C1] syz_tun: tun_net_xmit 42 [ 1498.415125][T25206] validate_nla: 1 callbacks suppressed [ 1498.415142][T25206] netlink: 'syz.0.13827': attribute type 27 has an invalid length. [ 1498.459540][T25206] netlink: 'syz.0.13827': attribute type 4 has an invalid length. [ 1498.476156][T25206] __nla_validate_parse: 14 callbacks suppressed [ 1498.476173][T25206] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13827'. [ 1498.529079][T25217] syzkaller0: entered promiscuous mode [ 1498.534943][T25217] syzkaller0: entered allmulticast mode [ 1498.596407][ C1] syz_tun: tun_net_xmit 42 [ 1498.763464][T25228] xt_hashlimit: size too large, truncated to 1048576 [ 1499.615689][T25191] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1499.626999][T25238] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13834'. [ 1499.717836][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1499.953556][T25273] netlink: 'syz.0.13841': attribute type 1 has an invalid length. [ 1499.985139][T25283] pim6reg: entered allmulticast mode [ 1500.008599][T25283] pim6reg: left allmulticast mode [ 1502.773316][T25249] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1503.040991][T25320] xt_ecn: cannot match TCP bits for non-tcp packets [ 1503.052736][T25325] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1500) ! [ 1503.118964][T25325] syzkaller0: entered promiscuous mode [ 1503.124559][T25325] syzkaller0: entered allmulticast mode [ 1503.352576][T25338] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13854'. [ 1503.556389][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1503.571285][T25350] netlink: 'syz.1.13856': attribute type 1 has an invalid length. [ 1503.604673][T25350] netlink: 'syz.1.13856': attribute type 3 has an invalid length. [ 1503.635251][T25350] netlink: 188 bytes leftover after parsing attributes in process `syz.1.13856'. [ 1504.103412][T25374] netlink: 224 bytes leftover after parsing attributes in process `syz.4.13861'. [ 1504.126113][T23780] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1504.146460][T23780] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 1504.174244][T23780] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1504.183290][T23780] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 1504.214684][T23780] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1504.243633][T23780] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 1504.269162][T23780] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1504.280327][T25377] netlink: 14 bytes leftover after parsing attributes in process `syz.2.13863'. [ 1504.295698][T23780] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 1504.353628][T25381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13864'. [ 1504.438442][T25385] syzkaller0: entered promiscuous mode [ 1504.446850][T25385] syzkaller0: entered allmulticast mode [ 1504.843705][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1507.439926][T25409] netlink: 64 bytes leftover after parsing attributes in process `syz.3.13874'. [ 1507.474536][T25409] syzkaller1: entered promiscuous mode [ 1507.487206][T25409] syzkaller1: entered allmulticast mode [ 1507.630517][T25419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13878'. [ 1507.651689][T25419] gtp0: entered promiscuous mode [ 1507.656867][T25419] gtp0: entered allmulticast mode [ 1507.785420][T25424] vlan1: entered promiscuous mode [ 1507.794513][T25424] hsr0: entered promiscuous mode [ 1507.822215][T25424] vlan1: entered allmulticast mode [ 1507.834060][T25424] hsr0: entered allmulticast mode [ 1507.855104][T25424] hsr_slave_0: entered allmulticast mode [ 1507.878215][T25424] hsr_slave_1: entered allmulticast mode [ 1507.909440][T25434] ip6erspan1: entered allmulticast mode [ 1508.083772][T25443] netlink: 'syz.0.13885': attribute type 1 has an invalid length. [ 1508.143607][T25451] FAULT_INJECTION: forcing a failure. [ 1508.143607][T25451] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1508.185189][T25451] CPU: 1 UID: 0 PID: 25451 Comm: syz.3.13887 Not tainted syzkaller #0 PREEMPT(full) [ 1508.185239][T25451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1508.185262][T25451] Call Trace: [ 1508.185270][T25451] [ 1508.185278][T25451] dump_stack_lvl+0xe8/0x150 [ 1508.185308][T25451] should_fail_ex+0x40c/0x560 [ 1508.185339][T25451] _copy_from_user+0x2d/0xb0 [ 1508.185361][T25451] ___sys_sendmsg+0x1c6/0x360 [ 1508.185381][T25451] ? __lock_acquire+0x683/0x2cf0 [ 1508.185406][T25451] ? __pfx____sys_sendmsg+0x10/0x10 [ 1508.185462][T25451] ? __fget_files+0x2a/0x420 [ 1508.185480][T25451] ? __fget_files+0x3a2/0x420 [ 1508.185508][T25451] __x64_sys_sendmsg+0x1b1/0x290 [ 1508.185531][T25451] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1508.185565][T25451] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1508.185583][T25451] do_syscall_64+0x174/0x580 [ 1508.185599][T25451] ? trace_irq_disable+0x3b/0x140 [ 1508.185617][T25451] ? clear_bhb_loop+0x40/0x90 [ 1508.185640][T25451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1508.185658][T25451] RIP: 0033:0x7f6f44b9ce59 [ 1508.185677][T25451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1508.185693][T25451] RSP: 002b:00007f6f459f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1508.185714][T25451] RAX: ffffffffffffffda RBX: 00007f6f44e15fa0 RCX: 00007f6f44b9ce59 [ 1508.185728][T25451] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000006 [ 1508.185741][T25451] RBP: 00007f6f459f0090 R08: 0000000000000000 R09: 0000000000000000 [ 1508.185752][T25451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1508.185763][T25451] R13: 00007f6f44e16038 R14: 00007f6f44e15fa0 R15: 00007ffeb6001798 [ 1508.185793][T25451] [ 1508.194143][T25443] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1508.410074][T25454] bond8: (slave veth0_to_bond): making interface the new active one [ 1508.437121][T25454] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1508.480170][T25443] macvlan2: entered promiscuous mode [ 1508.492175][T25443] macvlan2: entered allmulticast mode [ 1508.503161][T25443] bond8: entered promiscuous mode [ 1508.509181][T25443] veth0_to_bond: entered promiscuous mode [ 1508.515976][T25443] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1508.531826][T25443] bond8: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1508.550050][T25443] bond8: left promiscuous mode [ 1508.555552][T25443] veth0_to_bond: left promiscuous mode [ 1508.637639][T25460] syzkaller0: entered promiscuous mode [ 1508.643358][T25460] syzkaller0: entered allmulticast mode [ 1509.407938][T25488] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13896'. [ 1509.759746][T25496] FAULT_INJECTION: forcing a failure. [ 1509.759746][T25496] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1509.774445][T25496] CPU: 1 UID: 0 PID: 25496 Comm: syz.4.13899 Not tainted syzkaller #0 PREEMPT(full) [ 1509.774471][T25496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1509.774483][T25496] Call Trace: [ 1509.774491][T25496] [ 1509.774499][T25496] dump_stack_lvl+0xe8/0x150 [ 1509.774528][T25496] should_fail_ex+0x40c/0x560 [ 1509.774559][T25496] _copy_from_user+0x2d/0xb0 [ 1509.774591][T25496] __copy_msghdr+0x390/0x590 [ 1509.774617][T25496] ___sys_sendmsg+0x213/0x360 [ 1509.774637][T25496] ? __lock_acquire+0x683/0x2cf0 [ 1509.774662][T25496] ? __pfx____sys_sendmsg+0x10/0x10 [ 1509.774717][T25496] ? __fget_files+0x2a/0x420 [ 1509.774734][T25496] ? __fget_files+0x3a2/0x420 [ 1509.774762][T25496] __x64_sys_sendmsg+0x1b1/0x290 [ 1509.774786][T25496] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1509.774824][T25496] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1509.774845][T25496] do_syscall_64+0x174/0x580 [ 1509.774862][T25496] ? trace_irq_disable+0x3b/0x140 [ 1509.774881][T25496] ? clear_bhb_loop+0x40/0x90 [ 1509.774904][T25496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1509.774923][T25496] RIP: 0033:0x7f27a5d9ce59 [ 1509.774941][T25496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1509.774958][T25496] RSP: 002b:00007f27a6cea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1509.774978][T25496] RAX: ffffffffffffffda RBX: 00007f27a6015fa0 RCX: 00007f27a5d9ce59 [ 1509.774993][T25496] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000006 [ 1509.775005][T25496] RBP: 00007f27a6cea090 R08: 0000000000000000 R09: 0000000000000000 [ 1509.775017][T25496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1509.775027][T25496] R13: 00007f27a6016038 R14: 00007f27a6015fa0 R15: 00007fffb0b2e338 [ 1509.775054][T25496] [ 1511.929446][T25475] C: entered promiscuous mode [ 1511.942279][T25475] gre0: entered promiscuous mode [ 1511.958690][T25475] 0ªî{X¹¦: entered promiscuous mode [ 1511.964284][T25475] 0ªî{X¹¦: left allmulticast mode [ 1511.998903][T25475] erspan0: entered promiscuous mode [ 1512.019946][T25475] ip_vti0: entered promiscuous mode [ 1512.035327][T25484] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 1512.083006][T25514] tipc: Enabling of bearer rejected, failed to enable media [ 1512.189570][T25523] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13905'. [ 1512.217919][T25525] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13905'. [ 1512.225217][T25527] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13907'. [ 1512.265797][T25523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13905'. [ 1512.342782][T25537] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13910'. [ 1512.359423][T25527] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1512.597281][T25527] bond10 (unregistering): Released all slaves [ 1512.805989][T25556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13913'. [ 1512.865391][T25561] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1512.995569][T25568] 0: reclassify loop, rule prio 0, protocol 700 [ 1513.171391][T25576] netlink: 'syz.2.13920': attribute type 2 has an invalid length. [ 1513.221287][T25540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1513.250903][T25576] netlink: 'syz.2.13920': attribute type 2 has an invalid length. [ 1513.295232][T25576] netlink: 1347 bytes leftover after parsing attributes in process `syz.2.13920'. [ 1513.342224][T25583] netlink: 44 bytes leftover after parsing attributes in process `syz.1.13921'. [ 1513.374927][T25583] netlink: 43 bytes leftover after parsing attributes in process `syz.1.13921'. [ 1513.399415][T25583] netlink: 'syz.1.13921': attribute type 6 has an invalid length. [ 1513.412192][T25583] netlink: 'syz.1.13921': attribute type 5 has an invalid length. [ 1513.449933][T25586] gtp0: entered promiscuous mode [ 1513.468371][T25586] gtp0: entered allmulticast mode [ 1513.718256][T25601] bridge0: port 1(1¾x9ÿ) entered disabled state [ 1513.740671][T25605] netlink: 'syz.1.13928': attribute type 7 has an invalid length. [ 1513.761576][T25605] netlink: 'syz.1.13928': attribute type 8 has an invalid length. [ 1513.821829][T25601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1513.839098][T25601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1514.003028][T25623] xt_hashlimit: size too large, truncated to 1048576 [ 1514.094882][T25613] team0: Mode changed to "activebackup" [ 1514.114840][T23781] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1514.154435][T23781] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1514.184187][T23781] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1514.196123][T23781] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1514.208248][T23781] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1514.218048][T23781] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1514.255376][T23781] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1514.271814][T23781] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1514.432597][T25645] __nla_validate_parse: 5 callbacks suppressed [ 1514.432617][T25645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13938'. [ 1514.514023][T25649] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13939'. [ 1514.664434][ T6802] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0xa3 [ 1514.670499][T25668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13943'. [ 1514.721995][T25670] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1500) ! [ 1514.742107][T25670] syzkaller0: entered promiscuous mode [ 1514.770481][T25670] syzkaller0: entered allmulticast mode [ 1514.814557][T25672] netlink: 'syz.1.13945': attribute type 10 has an invalid length. [ 1515.555105][T25702] openvswitch: netlink: IP tunnel attribute has 236 unknown bytes. [ 1517.540451][T25657] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1518.091040][T25741] IPVS: ip_vs_edit_dest(): server weight less than zero [ 1518.405591][T25759] netlink: 72 bytes leftover after parsing attributes in process `syz.0.13967'. [ 1518.417510][T25759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13967'. [ 1518.750511][T25776] netlink: 'syz.3.13971': attribute type 13 has an invalid length. [ 1519.119813][T25794] netlink: 80 bytes leftover after parsing attributes in process `syz.1.13974'. [ 1519.168223][T25797] x_tables: duplicate underflow at hook 1 [ 1519.190856][T25795] mac80211_hwsim hwsim97 syzkaller0: left promiscuous mode [ 1519.221199][T25795] mac80211_hwsim hwsim97 syzkaller0: left allmulticast mode [ 1519.294950][T25802] netlink: 7 bytes leftover after parsing attributes in process `syz.1.13978'. [ 1519.385515][T25804] syzkaller0: entered promiscuous mode [ 1519.400517][T25804] syzkaller0: entered allmulticast mode [ 1519.461869][T25811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13982'. [ 1519.505873][T25814] : renamed from bond0 [ 1519.544606][T25814] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13983'. [ 1519.692950][T25829] tipc: Enabling of bearer rejected, failed to enable media [ 1519.770596][T25828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13987'. [ 1519.802182][T25828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13987'. [ 1519.838301][T25828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13987'. [ 1519.942982][T25847] netlink: 13 bytes leftover after parsing attributes in process `syz.2.13992'. [ 1520.332714][T25873] bond11: entered promiscuous mode [ 1520.337998][T25873] bond11: entered allmulticast mode [ 1520.343849][T25873] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1520.433043][T25881] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14002'. [ 1520.512927][T25886] netlink: 'syz.3.14003': attribute type 24 has an invalid length. [ 1520.621904][T25895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14007'. [ 1520.642923][T25895] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14007'. [ 1520.690527][T23781] netdevsim netdevsim0 : set [0, 0] type 1 family 0 port 8472 - 0 [ 1520.705651][T25895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14007'. [ 1520.727597][T23781] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1520.814225][T23781] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1520.833695][T23781] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1520.890815][T25912] vlan0: entered promiscuous mode [ 1520.907628][T25912] gretap0: entered promiscuous mode [ 1520.962793][T25924] netlink: 'syz.0.14017': attribute type 30 has an invalid length. [ 1521.148741][T25936] openvswitch: netlink: IP tunnel dst address not specified [ 1521.263156][T25946] IPVS: ip_vs_edit_dest(): server weight less than zero [ 1521.307569][T25944] veth0: entered promiscuous mode [ 1521.313830][T25943] veth0: left promiscuous mode [ 1521.331199][T25953] ip6gre0: Master is either lo or non-ether device [ 1521.341155][T25950] ip6gre0: Master is either lo or non-ether device [ 1521.416823][T25951] tc action pedit 'at' offset 9 out of bounds [ 1521.745072][ T50] block nbd5: Receive control failed (result -32) [ 1521.813870][T25981] syzkaller0: entered promiscuous mode [ 1521.829512][T25981] syzkaller0: entered allmulticast mode [ 1521.852267][T25983] netlink: 'syz.3.14036': attribute type 2 has an invalid length. [ 1521.872934][T25983] netlink: 'syz.3.14036': attribute type 18 has an invalid length. [ 1521.966748][T25987] lo: Caught tx_queue_len zero misconfig [ 1522.108233][T25995] lo speed is unknown, defaulting to 1000 [ 1522.130647][T25993] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 1522.145527][T25995] C speed is unknown, defaulting to 1000 [ 1522.183410][T26003] netlink: 'syz.4.14042': attribute type 4 has an invalid length. [ 1522.240682][T26003] .`: renamed from bond0 (while UP) [ 1522.374003][T26007] bond0: (slave gre0): Device is not bonding slave [ 1522.381638][T26007] bond0: option active_slave: invalid value (gre0) [ 1522.393219][T26007] bond0 (unregistering): Released all slaves [ 1522.655744][T26033] tls_set_device_offload: netdev not found [ 1522.665852][T26033] netlink: 'syz.0.14052': attribute type 8 has an invalid length. [ 1522.913339][T26037] syzkaller0: entered promiscuous mode [ 1522.921084][T26037] syzkaller0: entered allmulticast mode [ 1523.970226][T26064] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input7 [ 1524.171295][T26065] netlink: 'syz.0.14059': attribute type 11 has an invalid length. [ 1526.184901][T26068] netlink: 'syz.2.14061': attribute type 4 has an invalid length. [ 1526.232322][T26068] __nla_validate_parse: 16 callbacks suppressed [ 1526.232341][T26068] netlink: 104 bytes leftover after parsing attributes in process `syz.2.14061'. [ 1526.303430][T26083] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14065'. [ 1526.907358][T26112] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14075'. [ 1526.921890][T26104] ksmbd: Unknown IPC event: 1, ignore. [ 1527.011422][T26114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14078'. [ 1527.291823][T26129] netlink: 256 bytes leftover after parsing attributes in process `syz.2.14082'. [ 1527.308459][T26131] netlink: 40 bytes leftover after parsing attributes in process `syz.4.14083'. [ 1527.340316][T26133] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14084'. [ 1527.394602][T26133] xfrm1: entered promiscuous mode [ 1527.464090][T26144] netlink: 40 bytes leftover after parsing attributes in process `syz.4.14085'. [ 1527.469015][T26133] xfrm1: entered allmulticast mode [ 1527.549261][T26144] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14085'. [ 1527.618062][T26144] veth1_macvtap: left promiscuous mode [ 1527.624271][T26158] x_tables: duplicate underflow at hook 2 [ 1527.686495][T26144] macsec0: entered promiscuous mode [ 1527.768273][T26160] netlink: 244 bytes leftover after parsing attributes in process `syz.4.14085'. [ 1527.860728][T26162] netlink: 'syz.1.14087': attribute type 1 has an invalid length. [ 1528.060969][T26173] netlink: 'syz.0.14091': attribute type 4 has an invalid length. [ 1528.192106][T26183] netlink: 'syz.2.14096': attribute type 1 has an invalid length. [ 1528.203694][T26183] netlink: 'syz.2.14096': attribute type 4 has an invalid length. [ 1528.242382][ T50] block nbd0: Receive control failed (result -107) [ 1528.249897][T26182] block nbd0: reconnected socket [ 1528.379308][T23783] pim6reg: left allmulticast mode [ 1528.584235][T23783] bond6 (unregistering): (slave ip6gretap1): Releasing active interface [ 1528.721251][T23783] bond1 (unregistering): (slave vti0): Releasing backup interface [ 1528.829411][T23783] bond3 (unregistering): (slave gretap2): Releasing backup interface [ 1529.107327][T23783] bond0 (unregistering): Released all slaves [ 1529.118387][T23783] bond1 (unregistering): Released all slaves [ 1529.133665][T23783] bond2 (unregistering): Released all slaves [ 1529.161967][T23783] bond3 (unregistering): (slave bond4): Releasing backup interface [ 1529.180240][T23783] bond3 (unregistering): Released all slaves [ 1529.195632][T23783] bond4 (unregistering): Released all slaves [ 1529.210519][T23783] bond5 (unregistering): Released all slaves [ 1529.229742][T23783] bond6 (unregistering): Released all slaves [ 1529.355070][T26226] bond0: option fail_over_mac: invalid value (16) [ 1529.370621][T26226] bond0 (unregistering): Released all slaves [ 1529.473789][T23783] tipc: Left network mode [ 1529.651332][T26240] ip6gre0: Caught tx_queue_len zero misconfig [ 1530.066075][T26261] netlink: 'syz.3.14121': attribute type 9 has an invalid length. [ 1530.129956][T26254] netlink: 'syz.0.14118': attribute type 1 has an invalid length. [ 1530.180040][T26267] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1530.298921][T23783] hsr_slave_0: left promiscuous mode [ 1530.327070][T23783] hsr_slave_1: left promiscuous mode [ 1530.380873][T26279] netlink: 'syz.2.14127': attribute type 2 has an invalid length. [ 1531.068059][T26288] syzkaller0: entered promiscuous mode [ 1531.077023][T23782] smbdirect: ib_dev[syú2] removed [ 1531.111443][T26288] syzkaller0: entered allmulticast mode [ 1531.319748][ T7222] IPVS: starting estimator thread 0... [ 1531.357527][T26320] __nla_validate_parse: 13 callbacks suppressed [ 1531.357546][T26320] netlink: 196 bytes leftover after parsing attributes in process `syz.2.14135'. [ 1531.429603][T26317] IPVS: using max 27 ests per chain, 64800 per kthread [ 1531.438761][T26321] atomic_op ffff888054c1f198 conn xmit_atomic 0000000000000000 [ 1531.465943][T26321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14134'. [ 1531.552456][T26330] openvswitch: netlink: IP tunnel dst address not specified [ 1531.863499][T23783] IPVS: stop unused estimator thread 0... [ 1532.044644][T26351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14145'. [ 1532.253402][T26363] netlink: 'syz.4.14148': attribute type 1 has an invalid length. [ 1532.304037][T26365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14149'. [ 1532.419725][T26369] mac80211_hwsim hwsim97 syzkaller0: entered promiscuous mode [ 1532.431257][T26369] mac80211_hwsim hwsim97 syzkaller0: entered allmulticast mode [ 1532.489807][T26371] netlink: 'syz.2.14152': attribute type 1 has an invalid length. [ 1532.553432][T26371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14152'. [ 1532.575332][T26379] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14153'. [ 1532.635048][T26371] bond12 (unregistering): Released all slaves [ 1532.734889][T26389] syzkaller1: entered promiscuous mode [ 1532.740641][T26389] syzkaller1: entered allmulticast mode [ 1533.015681][T26418] netlink: 'syz.2.14162': attribute type 1 has an invalid length. [ 1533.043714][T26414] bond0: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 1533.066134][T26414] bond0 (unregistering): Released all slaves [ 1533.155216][T26425] syzkaller0: mtu less than device minimum [ 1533.198116][T26423] netlink: 52 bytes leftover after parsing attributes in process `syz.3.14163'. [ 1533.208088][T26427] syzkaller0: entered promiscuous mode [ 1533.213724][T26427] syzkaller0: entered allmulticast mode [ 1533.224342][T26423] bridge0: port 2(bridge_slave_1) entered disabled state [ 1533.252369][T26423] netlink: 76 bytes leftover after parsing attributes in process `syz.3.14163'. [ 1533.272959][T26423] netlink: 52 bytes leftover after parsing attributes in process `syz.3.14163'. [ 1533.620390][T26449] netlink: 'syz.2.14173': attribute type 29 has an invalid length. [ 1533.631023][T26451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14174'. [ 1533.657664][T26449] netdevsim netdevsim2: Direct firmware load for . failed with error -2 [ 1533.668491][T26451] netlink: 'syz.1.14174': attribute type 18 has an invalid length. [ 1533.679803][T26449] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1533.721421][T26451] netlink: 'syz.1.14174': attribute type 18 has an invalid length. [ 1533.725291][T23779] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1533.773523][T23779] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1533.800387][T23779] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1533.819070][T23779] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1534.026894][T26471] tc action pedit 'at' offset 19 out of bounds [ 1534.035451][T26471] tc action pedit 'at' offset 19 out of bounds [ 1534.041678][T26471] tc action pedit 'at' offset 19 out of bounds [ 1534.047875][T26471] tc action pedit 'at' offset 19 out of bounds [ 1534.054032][T26471] tc action pedit 'at' offset 19 out of bounds [ 1534.060213][T26471] tc action pedit 'at' offset 19 out of bounds [ 1534.066371][T26471] tc action pedit 'at' offset 19 out of bounds [ 1534.072505][T26471] tc action pedit 'at' offset 19 out of bounds [ 1534.078650][T26471] tc action pedit 'at' offset 19 out of bounds [ 1534.084779][T26471] tc action pedit 'at' offset 19 out of bounds [ 1534.090935][T26471] 0: reclassify loop, rule prio 0, protocol 800 [ 1534.167009][T26471] netlink: 'syz.3.14179': attribute type 9 has an invalid length. [ 1534.691350][ T29] audit: type=1800 audit(1782743145.873:45): pid=26514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.14190" name="memory.events" dev="tmpfs" ino=1874 res=0 errno=0 [ 1534.747040][T26514] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1534.759926][T26521] syzkaller0: entered allmulticast mode [ 1534.951264][T26530] IPVS: set_ctl: invalid protocol: 25647 47.110.101.116:12148 [ 1535.159898][T26542] syzkaller0: entered promiscuous mode [ 1535.180732][T26542] syzkaller0: entered allmulticast mode [ 1535.610792][T26566] xt_hashlimit: overflow, rate too high: 0 [ 1535.818156][T26582] bond12: option min_links: invalid value (18446744073709551614) [ 1535.836573][T26582] bond12: option min_links: allowed values 0 - 2147483647 [ 1535.871357][T26582] bond12 (unregistering): Released all slaves [ 1535.998596][T26586] tipc: Enabling of bearer rejected, failed to enable media [ 1536.021989][T26597] nbd: must specify at least one socket [ 1536.032979][T26598] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1536.707310][T26646] __nla_validate_parse: 9 callbacks suppressed [ 1536.707330][T26646] netlink: 260 bytes leftover after parsing attributes in process `syz.3.14229'. [ 1536.739912][T26651] netlink: 'syz.4.14230': attribute type 21 has an invalid length. [ 1536.764777][T26646] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14229'. [ 1536.782803][T26651] netlink: 'syz.4.14230': attribute type 6 has an invalid length. [ 1536.803781][T26651] netlink: 132 bytes leftover after parsing attributes in process `syz.4.14230'. [ 1536.911839][T26664] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1536.931930][T26665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14234'. [ 1537.113036][T26677] netlink: 164 bytes leftover after parsing attributes in process `syz.0.14239'. [ 1537.248077][T26684] bond0: entered promiscuous mode [ 1537.264122][T26684] bond0: entered allmulticast mode [ 1537.299269][T26692] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14245'. [ 1537.348531][T26692] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14245'. [ 1537.377957][T26694] tipc: New replicast peer: 0.0.0.0 [ 1537.383777][T26694] tipc: Enabled bearer , priority 10 [ 1537.521283][T26700] netlink: 48 bytes leftover after parsing attributes in process `syz.1.14247'. [ 1537.564650][T26700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14247'. [ 1537.912031][T26734] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1537.970459][T26741] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1538.128831][T26750] syzkaller0: entered promiscuous mode [ 1538.145883][T26750] syzkaller0: entered allmulticast mode [ 1538.158296][T26754] xt_nat: multiple ranges no longer supported [ 1538.167380][T26752] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 1538.193844][T26756] syzkaller1: entered promiscuous mode [ 1538.199423][T26756] syzkaller1: entered allmulticast mode [ 1538.951060][ T29] audit: type=1800 audit(1782743150.133:46): pid=26777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.14267" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1690 res=0 errno=0 [ 1539.054372][T26784] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1539.200365][T26791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14271'. [ 1541.105129][ T7222] tipc: Node number set to 4240258270 [ 1541.139517][T26791] netlink: 'syz.0.14271': attribute type 1 has an invalid length. [ 1541.157555][T26791] netlink: 'syz.0.14271': attribute type 2 has an invalid length. [ 1541.172163][T26787] syzkaller1: entered promiscuous mode [ 1541.185881][T26787] syzkaller1: entered allmulticast mode [ 1541.371388][T26795] netlink: 'syz.3.14272': attribute type 1 has an invalid length. [ 1541.401352][T26795] netlink: 'syz.3.14272': attribute type 1 has an invalid length. [ 1541.559035][T26808] syzkaller0: entered promiscuous mode [ 1541.581619][T26808] syzkaller0: entered allmulticast mode [ 1541.760654][T26823] __nla_validate_parse: 2 callbacks suppressed [ 1541.760673][T26823] netlink: 32 bytes leftover after parsing attributes in process `syz.0.14279'. [ 1541.804809][T26825] netlink: 'syz.1.14280': attribute type 1 has an invalid length. [ 1541.819178][T26829] netlink: 32 bytes leftover after parsing attributes in process `syz.0.14279'. [ 1541.923679][T26825] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1541.944216][T26826] vlan2: entered promiscuous mode [ 1541.949871][T26826] bond3: entered promiscuous mode [ 1541.955146][T26826] vlan2: entered allmulticast mode [ 1541.961267][T26826] bond3: entered allmulticast mode [ 1542.404647][T26869] netlink: 'syz.0.14292': attribute type 3 has an invalid length. [ 1542.674951][T26888] lo: Caught tx_queue_len zero misconfig [ 1542.788616][T26900] netlink: zone id is out of range [ 1542.811131][T26900] netlink: del zone limit has 4 unknown bytes [ 1542.852184][T26888] netlink: 48 bytes leftover after parsing attributes in process `syz.3.14297'. [ 1542.885086][T26906] netlink: 48 bytes leftover after parsing attributes in process `syz.4.14300'. [ 1542.934778][T26900] netlink: 'syz.3.14297': attribute type 11 has an invalid length. [ 1543.252743][ T5288] veth1_macvtap: left promiscuous mode [ 1543.426717][T26932] syzkaller0: entered promiscuous mode [ 1543.447078][T26932] syzkaller0: entered allmulticast mode [ 1543.662243][T26940] netlink: 'syz.0.14309': attribute type 10 has an invalid length. [ 1543.691051][T26940] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14309'. [ 1543.847392][T26940] team0: Port device geneve1 added [ 1544.713607][T27011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14326'. [ 1544.969784][T27037] netlink: 'syz.1.14335': attribute type 15 has an invalid length. [ 1544.983122][ T29] audit: type=1800 audit(1782743156.163:47): pid=27038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.14335" name="memory.events" dev="tmpfs" ino=2031 res=0 errno=0 [ 1545.005409][T27037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14335'. [ 1545.043159][T23783] netdevsim netdevsim1 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 1545.051873][T27037] netlink: 'syz.1.14335': attribute type 15 has an invalid length. [ 1545.075864][T23783] netdevsim netdevsim1 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 1545.082651][T27044] sctp: [Deprecated]: syz.4.14336 (pid 27044) Use of int in max_burst socket option deprecated. [ 1545.082651][T27044] Use struct sctp_assoc_value instead [ 1545.091538][T27037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14335'. [ 1545.109879][T23783] netdevsim netdevsim1 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 1545.120604][T23783] netdevsim netdevsim1 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 1545.236869][T27049] bond12 (unregistering): Released all slaves [ 1545.312519][T27053] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 1545.487963][T27063] netlink: 64985 bytes leftover after parsing attributes in process `syz.2.14341'. [ 1545.511632][T27070] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 1545.779211][ T29] audit: type=1107 audit(1782743156.963:48): pid=27088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊ‘BÙôÙ ë0ä™l…t¿Ý•/Öÿ Ž6òЍŠç›' [ 1545.804395][T27093] netlink: 64 bytes leftover after parsing attributes in process `syz.2.14349'. [ 1545.850823][ T29] audit: type=1107 audit(1782743156.963:49): pid=27088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊ‘BÙôÙ ë0ä™l…t¿Ý•/Öÿ Ž6òЍŠç›' [ 1546.007524][T27110] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1546.043837][T27110] bond0: entered promiscuous mode [ 1546.074179][T27110] batadv0: entered promiscuous mode [ 1546.106757][T27110] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 1546.124361][T27110] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 1546.136136][T27110] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1546.149506][T27110] bond0: left promiscuous mode [ 1546.158428][T27110] batadv0: left promiscuous mode [ 1546.191676][T27127] netlink: 'syz.3.14359': attribute type 1 has an invalid length. [ 1546.306015][T27127] bond4: entered promiscuous mode [ 1546.313229][T27127] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1546.365551][T27127] bond4: (slave bridge12): making interface the new active one [ 1546.375614][T27127] bridge12: entered promiscuous mode [ 1546.387226][T27127] bond4: (slave bridge12): Enslaving as an active interface with an up link [ 1546.462817][T27128] bond4: (slave bridge13): Enslaving as a backup interface with an up link [ 1546.464141][T27136] netlink: 'syz.0.14360': attribute type 2 has an invalid length. [ 1546.612797][T27146] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1546.620116][T27146] IPv6: NLM_F_CREATE should be set when creating new route [ 1546.641403][T27138] bond12: entered promiscuous mode [ 1546.646927][T27138] bond12: entered allmulticast mode [ 1546.652554][T27138] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1546.689744][T27146] IPv6: sit4: Disabled Multicast RS [ 1546.721935][T27140] vlan2: entered promiscuous mode [ 1546.751971][T27140] bridge0: entered promiscuous mode [ 1546.781568][T27152] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1546.894270][T27148] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14365'. [ 1547.117096][T27169] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 1547.125780][T27145] lo speed is unknown, defaulting to 1000 [ 1547.132495][T27172] syz_tun: refused to change device tx_queue_len [ 1547.178053][T27171] tipc: Enabling of bearer rejected, failed to enable media [ 1547.212515][T27175] sctp: [Deprecated]: syz.1.14372 (pid 27175) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1547.212515][T27175] Use struct sctp_sack_info instead [ 1547.301484][T27175] syzkaller0: entered promiscuous mode [ 1547.310949][T27175] syzkaller0: entered allmulticast mode [ 1547.679367][T27198] netlink: 'syz.1.14378': attribute type 1 has an invalid length. [ 1547.765176][T27198] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1547.796752][T32486] Bluetooth: hci5: command 0x0405 tx timeout [ 1547.845114][T27199] bond4: (slave geneve3): making interface the new active one [ 1547.855113][T27199] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 1547.897499][T12067] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1547.946690][T12067] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1547.961918][T12067] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1548.029297][T27223] netlink: 36 bytes leftover after parsing attributes in process `syz.1.14381'. [ 1548.055689][T27220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14382'. [ 1548.342686][T27187] syzkaller0: entered promiscuous mode [ 1548.354060][T27187] syzkaller0: entered allmulticast mode [ 1548.634113][T27233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14385'. [ 1548.795320][T12067] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1549.021933][T27241] netlink: 'syz.2.14387': attribute type 1 has an invalid length. [ 1549.062407][T27238] bond5: entered promiscuous mode [ 1549.091374][T27238] bond5: entered allmulticast mode [ 1549.097242][T27238] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1549.177419][T27236] bond6: entered promiscuous mode [ 1549.196875][T27236] bond6: entered allmulticast mode [ 1549.202414][T27236] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1549.298306][T27245] bond13: (slave geneve5): making interface the new active one [ 1549.329563][T27245] bond13: (slave geneve5): Enslaving as an active interface with an up link [ 1549.372002][T27250] pim6reg: entered allmulticast mode [ 1549.387146][T27252] pim6reg: left allmulticast mode [ 1549.439494][T12067] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 1549.458267][T12067] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 1549.512625][T12067] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 1549.527267][T27259] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14391'. [ 1549.553953][T27256] tipc: Enabled bearer , priority 0 [ 1549.632389][T27266] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14393'. [ 1549.672235][T27256] syzkaller0: entered promiscuous mode [ 1549.677858][T27256] syzkaller0: entered allmulticast mode [ 1549.684294][T27256] tipc: Resetting bearer [ 1549.691127][T23783] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 1549.745185][T27255] tipc: Resetting bearer [ 1549.791345][T27270] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14392'. [ 1549.817317][T27274] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 1553.139497][T27255] tipc: Disabling bearer [ 1553.198064][T25279] tipc: Node number set to 2398075152 [ 1553.206989][T27308] tipc: Enabled bearer , priority 0 [ 1553.225652][T27309] mac80211_hwsim hwsim97 syzkaller0: left promiscuous mode [ 1553.257041][T27309] mac80211_hwsim hwsim97 syzkaller0: left allmulticast mode [ 1553.269888][T27309] tipc: Resetting bearer [ 1554.038034][T27365] x_tables: unsorted entry at hook 1 [ 1554.149621][T27365] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1554.167166][T27365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14419'. [ 1554.428406][T27378] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14422'. [ 1554.644156][T27389] netlink: 'syz.1.14424': attribute type 9 has an invalid length. [ 1554.753442][T27395] bridge_slave_1: left allmulticast mode [ 1554.774343][T27395] bridge_slave_1: left promiscuous mode [ 1554.794414][T27395] bridge0: port 2(bridge_slave_1) entered disabled state [ 1554.951595][T27408] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1555.621020][T27456] set match dimension is over the limit! [ 1555.973311][T27478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14445'. [ 1556.007463][T27478] netlink: 'syz.1.14445': attribute type 19 has an invalid length. [ 1556.025729][T27478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14445'. [ 1556.053003][T27478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14445'. [ 1556.088908][T27478] netlink: 'syz.1.14445': attribute type 19 has an invalid length. [ 1556.110816][T27478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14445'. [ 1556.270570][T27501] mac80211_hwsim hwsim97 syzkaller0: entered promiscuous mode [ 1556.289462][T27501] mac80211_hwsim hwsim97 syzkaller0: entered allmulticast mode [ 1556.315637][T27501] tipc: Resetting bearer [ 1556.375840][T27508] xt_hashlimit: size too large, truncated to 1048576 [ 1556.482161][T27511] netlink: 14197 bytes leftover after parsing attributes in process `syz.1.14455'. [ 1556.511679][T27511] 0ªX¹¦Dö»: renamed from gretap0 [ 1556.548137][T27511] 0ªX¹¦Dö»: entered allmulticast mode [ 1556.759515][T27526] bond5 (unregistering): Released all slaves [ 1556.856688][T27535] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14462'. [ 1556.893755][T27537] xt_hashlimit: size too large, truncated to 1048576 [ 1557.457110][T27564] netlink: 'syz.4.14471': attribute type 3 has an invalid length. [ 1557.457110][T27569] netlink: 'syz.4.14471': attribute type 3 has an invalid length. [ 1557.457133][T27569] netlink: 224 bytes leftover after parsing attributes in process `syz.4.14471'. [ 1557.509277][T27564] netlink: 224 bytes leftover after parsing attributes in process `syz.4.14471'. [ 1557.693552][T27575] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1557.729119][T27575] bond0: (slave bond11): Enslaving as an active interface with an up link [ 1557.757151][T27576] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 1557.971580][T27593] syzkaller0: entered promiscuous mode [ 1557.987918][T27593] syzkaller0: entered allmulticast mode [ 1558.372540][T27618] xt_l2tp: v2 tid > 0xffff: 1114244 [ 1558.407468][T27619] netlink: 'syz.1.14487': attribute type 39 has an invalid length. [ 1558.608508][T27634] netlink: 'syz.1.14493': attribute type 3 has an invalid length. [ 1558.714421][T27638] xt_connbytes: Forcing CT accounting to be enabled [ 1558.759343][T27638] xt_bpf: check failed: parse error [ 1558.993575][T27659] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1559.199796][T27672] __nla_validate_parse: 6 callbacks suppressed [ 1559.199815][T27672] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14503'. [ 1559.517547][T27691] netlink: 11 bytes leftover after parsing attributes in process `syz.1.14511'. [ 1559.528149][T27691] netlink: 11 bytes leftover after parsing attributes in process `syz.1.14511'. [ 1559.540862][T27684] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14508'. [ 1559.641963][T27689] netlink: 36 bytes leftover after parsing attributes in process `syz.3.14508'. [ 1559.923952][T27707] syzkaller0: entered promiscuous mode [ 1559.932756][T27707] syzkaller0: entered allmulticast mode [ 1559.963726][T27709] netlink: 'syz.2.14517': attribute type 1 has an invalid length. [ 1559.982698][T27709] netlink: 224 bytes leftover after parsing attributes in process `syz.2.14517'. [ 1560.153139][T27725] netlink: 'syz.2.14523': attribute type 10 has an invalid length. [ 1560.200158][T27725] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1560.242637][T27725] .`: (slave netdevsim1): Enslaving as an active interface with an up link [ 1560.242825][T27739] netlink: 'syz.1.14525': attribute type 1 has an invalid length. [ 1560.261582][T27739] netlink: 228 bytes leftover after parsing attributes in process `syz.1.14525'. [ 1560.333790][T23779] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1560.377826][T27734] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1560.616102][T27764] netlink: 216 bytes leftover after parsing attributes in process `syz.0.14535'. [ 1560.812590][T27779] sctp: [Deprecated]: syz.4.14539 (pid 27779) Use of int in maxseg socket option. [ 1560.812590][T27779] Use struct sctp_assoc_value instead [ 1561.026630][T27799] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14545'. [ 1561.037542][T27799] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14545'. [ 1561.255576][T27811] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1561.338649][ T50] block nbd6: Receive control failed (result -32) [ 1561.423731][T27820] netlink: 'syz.1.14553': attribute type 1 has an invalid length. [ 1561.594274][T27823] tipc: New replicast peer: 255.255.255.255 [ 1561.618070][T27823] tipc: Enabled bearer , priority 10 [ 1561.668897][T27823] netlink: 'syz.4.14554': attribute type 1 has an invalid length. [ 1561.767226][T27823] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1561.790080][T27834] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1561.911564][T27823] macvlan2: entered promiscuous mode [ 1561.926735][T27823] macvlan2: entered allmulticast mode [ 1561.940353][T27823] bond5: entered promiscuous mode [ 1561.963050][T27823] veth0_to_bond: entered promiscuous mode [ 1561.976903][T27823] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1562.010645][T27823] bond5: left promiscuous mode [ 1562.035798][T27823] veth0_to_bond: left promiscuous mode [ 1562.312375][T27842] ¾x9ÿ: left promiscuous mode [ 1562.328546][T27842] bridge0: port 1(1¾x9ÿ) entered disabled state [ 1562.355665][T27842] bridge_slave_1: left allmulticast mode [ 1562.375579][T27842] bridge_slave_1: left promiscuous mode [ 1562.387551][T27842] bridge0: port 2(bridge_slave_1) entered disabled state [ 1562.417524][T27842] bond5: (slave veth0_to_bond): Releasing backup interface [ 1562.499034][T27842] .`: (slave bond_slave_0): Releasing backup interface [ 1562.547568][T27842] .`: (slave bond_slave_1): Releasing backup interface [ 1562.577644][T27842] team0: Port device team_slave_0 removed [ 1562.597479][T27842] team0: Port device team_slave_1 removed [ 1562.604545][T27842] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1562.622302][T27842] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1562.632259][T27842] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1562.701266][T27862] netlink: 'syz.3.14563': attribute type 1 has an invalid length. [ 1562.775420][T18884] tipc: Node number set to 2980381177 [ 1562.822171][T27862] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1562.832577][T27862] bond5: (slave bond6): making interface the new active one [ 1562.841416][T27862] bond5: (slave bond6): Enslaving as an active interface with an up link [ 1562.863954][T27869] tipc: Enabled bearer , priority 0 [ 1562.879393][T27874] netlink: 'syz.4.14567': attribute type 11 has an invalid length. [ 1562.921760][T27874] netlink: 'syz.4.14567': attribute type 4 has an invalid length. [ 1562.981728][T27872] bond5: (slave gretap1): Enslaving as a backup interface with an up link [ 1563.020633][T27862] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1563.038438][T27869] tipc: Disabling bearer [ 1563.324162][T27885] netlink: 'syz.4.14569': attribute type 2 has an invalid length. [ 1563.793175][T27901] bond_slave_0: entered promiscuous mode [ 1563.814671][T27901] bond_slave_0: entered allmulticast mode [ 1563.873330][T27909] tunl0: left promiscuous mode [ 1564.000879][T27909] 8021q: adding VLAN 0 to HW filter on device .` [ 1564.037268][T27909] 8021q: adding VLAN 0 to HW filter on device team0 [ 1564.071323][T27909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1564.202189][T27909] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1564.225963][T27909] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1564.245793][T27909] veth1_vlan: left promiscuous mode [ 1564.252966][T27909] veth0_vlan: left promiscuous mode [ 1564.260928][T27909] veth0_vlan: entered promiscuous mode [ 1564.269558][T27909] veth1_vlan: entered promiscuous mode [ 1564.281298][T27909] veth0_macvtap: left promiscuous mode [ 1564.288147][T27909] veth0_macvtap: entered promiscuous mode [ 1564.301900][T27909] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1564.312340][T27909] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1564.320792][T27909] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1564.339831][T27909] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1564.351159][T27909] geneve3: left promiscuous mode [ 1564.356136][T27909] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 1564.431980][T23777] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1564.444390][T23777] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0 [ 1564.533886][T23777] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1564.554713][T23777] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0 [ 1564.568082][T23777] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1564.592046][T23777] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0 [ 1564.614455][T23777] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1564.638587][T23777] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0 [ 1564.659467][T27939] __nla_validate_parse: 8 callbacks suppressed [ 1564.659485][T27939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14584'. [ 1564.681329][T27925] lo speed is unknown, defaulting to 1000 [ 1564.718017][T27940] netlink: 76 bytes leftover after parsing attributes in process `syz.0.14584'. [ 1564.774345][T27939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14584'. [ 1564.862754][T27940] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14584'. [ 1565.031438][T27964] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14591'. [ 1565.040404][ T29] audit: type=1800 audit(1782743176.223:50): pid=27961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.14590" name="memory.events" dev="tmpfs" ino=2276 res=0 errno=0 [ 1565.628107][T27998] netlink: 'syz.2.14601': attribute type 1 has an invalid length. [ 1565.649739][T27994] IPVS: ip_vs_add_dest(): server weight less than zero [ 1565.658718][T27998] netlink: 'syz.2.14601': attribute type 11 has an invalid length. [ 1565.674396][T28000] netlink: 36 bytes leftover after parsing attributes in process `syz.0.14602'. [ 1565.694242][T27998] netlink: 224 bytes leftover after parsing attributes in process `syz.2.14601'. [ 1565.919229][T28018] netlink: 'syz.1.14607': attribute type 1 has an invalid length. [ 1566.081270][T28018] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14607'. [ 1566.109252][T28024] bond7: (slave geneve4): making interface the new active one [ 1566.133466][T28030] netlink: 52 bytes leftover after parsing attributes in process `syz.1.14607'. [ 1566.153854][T28024] bond7: (slave geneve4): Enslaving as an active interface with an up link [ 1566.172950][ T6792] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1566.188920][T28030] can: request_module (can-proto-0) failed. [ 1566.215922][T28018] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1566.240637][ T6792] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1566.273479][ T6792] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1566.412993][T28027] syzkaller0: entered promiscuous mode [ 1566.421068][T28027] syzkaller0: entered allmulticast mode [ 1566.429505][T28055] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1566.431403][ T6792] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1566.458383][T28042] bridge0: entered promiscuous mode [ 1566.463732][T28042] bridge0: entered allmulticast mode [ 1569.150244][T28066] netlink: 36 bytes leftover after parsing attributes in process `syz.0.14620'. [ 1569.171550][T28069] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1569.451213][T28083] bond7: option arp_all_targets: invalid value (18446744073709551613) [ 1569.495967][T28083] bond7 (unregistering): Released all slaves [ 1569.926126][T28121] syzkaller0: entered promiscuous mode [ 1569.947823][T28121] syzkaller0: entered allmulticast mode [ 1570.102592][T28121] __nla_validate_parse: 2 callbacks suppressed [ 1570.102612][T28121] netlink: 48 bytes leftover after parsing attributes in process `syz.3.14633'. [ 1570.277700][T28137] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14637'. [ 1570.463780][T28137] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14637'. [ 1570.510016][T28147] syzkaller0: entered promiscuous mode [ 1570.548278][T28147] syzkaller0: entered allmulticast mode [ 1570.564277][T28152] netlink: 48 bytes leftover after parsing attributes in process `syz.4.14643'. [ 1570.613947][T28152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14643'. [ 1570.634656][T28153] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14642'. [ 1570.758964][T28149] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14637'. [ 1570.771001][T28152] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1570.805513][T28166] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14646'. [ 1570.824792][T28149] nbd: device at index 64 is going down [ 1570.999461][T28171] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14647'. [ 1571.027517][T28172] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14647'. [ 1571.202651][T28182] xt_hashlimit: size too large, truncated to 1048576 [ 1571.224687][T28183] vlan3: entered allmulticast mode [ 1571.274449][T28190] bridge_slave_0 (unregistering): left allmulticast mode [ 1571.312422][T28190] bridge_slave_0 (unregistering): left promiscuous mode [ 1571.353150][T28190] bridge0: port 1(bridge_slave_0) entered disabled state [ 1571.505315][T28198] netlink: 'syz.0.14656': attribute type 30 has an invalid length. [ 1571.584987][T28198] bond12: option arp_missed_max: invalid value (0) [ 1571.626376][T28198] bond12: option arp_missed_max: allowed values 1 - 255 [ 1571.651795][T28198] bond12 (unregistering): Released all slaves [ 1571.746982][T28214] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvtap0, syncid = 2, id = 0 [ 1571.820194][T28218] x_tables: duplicate underflow at hook 2 [ 1571.829590][T28220] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1572.190016][T28241] IPVS: set_ctl: invalid protocol: 255 224.0.0.2:20000 [ 1572.233276][T28241] sctp: [Deprecated]: syz.4.14665 (pid 28241) Use of int in max_burst socket option. [ 1572.233276][T28241] Use struct sctp_assoc_value instead [ 1572.972521][T28294] netlink: 'syz.0.14677': attribute type 62 has an invalid length. [ 1573.035703][T28298] netlink: 'syz.2.14678': attribute type 3 has an invalid length. [ 1573.045070][T28294] netlink: 'syz.0.14677': attribute type 1 has an invalid length. [ 1573.500952][T28337] ip6tnl0: Caught tx_queue_len zero misconfig [ 1573.812366][T28356] Bluetooth: MGMT ver 1.23 [ 1573.890777][T28351] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1573.900736][T28351] bond0: (slave bond14): Enslaving as a backup interface with a down link [ 1574.149884][T28379] tipc: Enabling of bearer rejected, failed to enable media [ 1574.182051][T28375] IPVS: persistence engine module ip_vs_pe_À not found [ 1574.540403][T28402] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20000 [ 1574.869848][T28420] tipc: Enabled bearer , priority 0 [ 1574.985001][T28420] syzkaller0: entered promiscuous mode [ 1574.991483][T28420] syzkaller0: entered allmulticast mode [ 1575.000241][T28420] tipc: Resetting bearer [ 1575.020571][T28419] tipc: Resetting bearer [ 1575.111259][T28439] __nla_validate_parse: 7 callbacks suppressed [ 1575.111278][T28439] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14725'. [ 1575.288902][T28452] netlink: 'syz.3.14726': attribute type 9 has an invalid length. [ 1575.465677][T28460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14729'. [ 1575.493408][T28460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14729'. [ 1577.947062][T28419] tipc: Disabling bearer [ 1578.091488][T28472] syzkaller0: entered promiscuous mode [ 1578.110771][T28472] syzkaller0: entered allmulticast mode [ 1578.143788][T28472] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1578.221189][T28479] netlink: 'syz.3.14735': attribute type 21 has an invalid length. [ 1578.249199][T28484] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14737'. [ 1578.262945][T28479] netlink: 128 bytes leftover after parsing attributes in process `syz.3.14735'. [ 1578.314048][T28491] netlink: 'syz.3.14735': attribute type 21 has an invalid length. [ 1578.341018][T28491] netlink: 128 bytes leftover after parsing attributes in process `syz.3.14735'. [ 1578.369973][T28479] netlink: 'syz.3.14735': attribute type 4 has an invalid length. [ 1578.391831][T28479] netlink: 'syz.3.14735': attribute type 5 has an invalid length. [ 1578.400186][T28479] netlink: 3 bytes leftover after parsing attributes in process `syz.3.14735'. [ 1578.413247][T28491] netlink: 'syz.3.14735': attribute type 4 has an invalid length. [ 1578.419396][T28493] netlink: 'syz.0.14738': attribute type 1 has an invalid length. [ 1578.430435][T28491] netlink: 'syz.3.14735': attribute type 5 has an invalid length. [ 1578.461526][T28491] netlink: 3 bytes leftover after parsing attributes in process `syz.3.14735'. [ 1578.470909][T28493] netlink: 'syz.0.14738': attribute type 4 has an invalid length. [ 1578.503588][T28493] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.14738'. [ 1578.547963][T28504] netlink: 'syz.0.14738': attribute type 1 has an invalid length. [ 1578.562090][T28504] netlink: 'syz.0.14738': attribute type 4 has an invalid length. [ 1578.572675][T28504] netlink: 9491 bytes leftover after parsing attributes in process `syz.0.14738'. [ 1579.034976][T28536] gre2: entered promiscuous mode [ 1579.693139][T28572] veth0: entered promiscuous mode [ 1579.714358][T28570] veth0: left promiscuous mode [ 1580.215656][T28596] syzkaller0: entered promiscuous mode [ 1580.261260][T28596] syzkaller0: entered allmulticast mode [ 1580.476038][T28601] __nla_validate_parse: 4 callbacks suppressed [ 1580.476056][T28601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14762'. [ 1583.666109][T28626] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1584.052022][T28659] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.14776'. [ 1584.287946][T28678] netlink: 48 bytes leftover after parsing attributes in process `syz.0.14782'. [ 1584.346108][T28685] smc: net device team0 applied user defined pnetid SYZ2 [ 1584.372017][T28691] netlink: 36 bytes leftover after parsing attributes in process `syz.3.14781'. [ 1584.412783][T28693] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14785'. [ 1584.556106][T28693] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1584.566134][T28693] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14785'. [ 1584.716513][T28709] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 1585.105812][T28739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14799'. [ 1586.291202][T28834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14823'. [ 1586.412185][T28844] IPVS: set_ctl: invalid protocol: 47 10.1.1.0:20004 [ 1586.444290][T28844] validate_nla: 2 callbacks suppressed [ 1586.444305][T28844] netlink: 'syz.1.14826': attribute type 2 has an invalid length. [ 1586.587772][T28849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14827'. [ 1586.625830][T28858] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1586.642998][T28853] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14828'. [ 1586.733765][T28853] bond13: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 1586.832121][T28865] netlink: 'syz.0.14833': attribute type 11 has an invalid length. [ 1586.840410][T28865] netlink: 4320 bytes leftover after parsing attributes in process `syz.0.14833'. [ 1586.874109][T28869] nft_compat: unsupported protocol 0 [ 1586.887636][T28868] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14832'. [ 1586.896692][T28869] netlink: 71 bytes leftover after parsing attributes in process `syz.4.14834'. [ 1587.063325][T28884] netlink: 76 bytes leftover after parsing attributes in process `syz.0.14838'. [ 1587.197507][T28890] syzkaller0: entered promiscuous mode [ 1587.203321][T28890] syzkaller0: entered allmulticast mode [ 1587.299804][T28894] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14841'. [ 1587.668250][T28904] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1587.677800][T28902] netlink: 224 bytes leftover after parsing attributes in process `syz.3.14842'. [ 1587.801130][T28908] netlink: 'syz.3.14845': attribute type 1 has an invalid length. [ 1587.810738][T28908] netlink: 'syz.3.14845': attribute type 2 has an invalid length. [ 1590.691338][T28924] openvswitch: netlink: VXLAN extension message has 8 unknown bytes. [ 1590.889515][T28941] syzkaller0: entered promiscuous mode [ 1590.895222][T28941] syzkaller0: entered allmulticast mode [ 1591.120767][T28962] netlink: 40 bytes leftover after parsing attributes in process `syz.4.14861'. [ 1591.189965][T28966] netlink: 'syz.3.14860': attribute type 3 has an invalid length. [ 1591.313082][T28978] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1591.325026][T28974] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1591.407692][T28984] __nla_validate_parse: 1 callbacks suppressed [ 1591.407710][T28984] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14868'. [ 1591.419836][T28983] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14867'. [ 1591.675882][T28997] sctp: [Deprecated]: syz.4.14871 (pid 28997) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1591.675882][T28997] Use struct sctp_sack_info instead [ 1592.034818][T29028] netlink: 60 bytes leftover after parsing attributes in process `syz.1.14878'. [ 1592.068774][T29030] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14880'. [ 1592.069941][T29034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14881'. [ 1592.088430][T29034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14881'. [ 1592.143212][T29028] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14878'. [ 1592.191079][T29028] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14878'. [ 1592.260498][T29042] netlink: 'syz.2.14882': attribute type 9 has an invalid length. [ 1592.367733][T29051] netlink: 'syz.0.14884': attribute type 12 has an invalid length. [ 1592.391831][T29050] openvswitch: netlink: Message has 8 unknown bytes. [ 1592.402417][T29051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14884'. [ 1592.412587][T29050] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1593.027903][T29088] mac80211_hwsim hwsim100 wlan1: Caught tx_queue_len zero misconfig [ 1593.034334][T29089] SET target dimension over the limit! [ 1593.070945][T29087] SET target dimension over the limit! [ 1593.088437][T29091] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 1593.231741][T29102] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14893'. [ 1593.586934][T29126] h: entered promiscuous mode [ 1593.626770][T23784] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1593.639993][T29132] netlink: 'syz.0.14904': attribute type 1 has an invalid length. [ 1593.648106][T23784] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1593.710560][T29137] netlink: 'syz.4.14906': attribute type 21 has an invalid length. [ 1593.722935][T29132] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1593.747365][T23784] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1593.762761][T23784] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1593.904831][T29146] bond7: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1593.934393][T29146] bond7 (unregistering): Released all slaves [ 1594.125600][T29161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1594.190975][T29166] team0: Port device xfrm0 added [ 1594.288393][T29170] syzkaller0: entered promiscuous mode [ 1594.308048][T29170] syzkaller0: entered allmulticast mode [ 1594.652614][T29199] tipc: Enabling of bearer rejected, failed to enable media [ 1594.941423][T29209] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1594.984213][T29233] x_tables: duplicate underflow at hook 1 [ 1594.990573][T29226] syzkaller0: entered promiscuous mode [ 1595.038785][T29226] syzkaller0: entered allmulticast mode [ 1595.736045][T29285] vlan3: entered promiscuous mode [ 1595.741535][T29285] bridge0: entered promiscuous mode [ 1595.943186][T29299] openvswitch: netlink: Unknown nsh attribute 0 [ 1596.035578][T29300] .`: (slave team0): Releasing backup interface [ 1596.089267][T29300] bridge_slave_0: left allmulticast mode [ 1596.095156][T29300] bridge_slave_0: left promiscuous mode [ 1596.101022][T29300] bridge0: port 1(bridge_slave_0) entered disabled state [ 1596.116102][T29300] bridge_slave_1: left allmulticast mode [ 1596.123184][T29300] bridge_slave_1: left promiscuous mode [ 1596.129208][T29300] bridge0: port 2(bridge_slave_1) entered disabled state [ 1596.142759][T29300] bond5: (slave veth0_to_bond): Releasing backup interface [ 1596.158649][T29300] .`: (slave bond_slave_0): Releasing backup interface [ 1596.174178][T29300] .`: (slave bond_slave_1): Releasing backup interface [ 1596.192957][T29300] team0: Port device team_slave_0 removed [ 1596.221137][T29300] team0: Port device team_slave_1 removed [ 1596.238604][T29300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1596.248667][T29300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1596.259711][T29300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1596.270974][T29300] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1596.334752][T29305] syzkaller0: entered allmulticast mode [ 1596.639620][T29332] x_tables: duplicate underflow at hook 1 [ 1596.687542][T29334] __nla_validate_parse: 16 callbacks suppressed [ 1596.687559][T29334] netlink: 48 bytes leftover after parsing attributes in process `syz.2.14962'. [ 1596.713869][T29338] xt_hashlimit: size too large, truncated to 1048576 [ 1596.742864][T29340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14965'. [ 1596.765350][T29340] netlink: 'syz.1.14965': attribute type 3 has an invalid length. [ 1596.830751][T29346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14966'. [ 1596.858416][T29346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14966'. [ 1597.121995][T29364] netlink: 'syz.2.14969': attribute type 6 has an invalid length. [ 1597.167209][T29364] bridge0: port 1(veth1_to_bridge) entered blocking state [ 1597.207859][T29364] bridge0: port 1(veth1_to_bridge) entered disabled state [ 1597.258013][T29364] veth1_to_bridge: entered allmulticast mode [ 1597.280265][T29364] veth1_to_bridge: entered promiscuous mode [ 1597.307584][T29364] bridge0: port 1(veth1_to_bridge) entered blocking state [ 1597.314884][T29364] bridge0: port 1(veth1_to_bridge) entered listening state [ 1597.493525][T29383] netlink: 'syz.3.14976': attribute type 1 has an invalid length. [ 1597.513622][T29383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14976'. [ 1597.533292][T29393] x_tables: duplicate underflow at hook 2 [ 1597.560304][T29392] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14979'. [ 1597.569956][T29393] IPVS: set_ctl: invalid protocol: 46 172.20.20.19:20001 [ 1597.596512][T29394] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14979'. [ 1597.622421][T29392] netlink: 32 bytes leftover after parsing attributes in process `syz.4.14979'. [ 1597.978916][T29428] netlink: 64 bytes leftover after parsing attributes in process `syz.4.14986'. [ 1597.997483][T29428] netlink: 64 bytes leftover after parsing attributes in process `syz.4.14986'. [ 1598.641970][T29483] syzkaller0: entered promiscuous mode [ 1598.661442][T29483] syzkaller0: entered allmulticast mode [ 1598.775070][T29483] tipc: Enabled bearer , priority 0 [ 1598.791544][T29493] bridge_slave_1: left allmulticast mode [ 1598.801398][T29493] bridge_slave_1: left promiscuous mode [ 1598.808413][T29493] bridge0: port 2(bridge_slave_1) entered disabled state [ 1598.859817][T29482] tipc: Resetting bearer [ 1598.902290][T29482] tipc: Disabling bearer [ 1598.920631][T29500] netlink: 'syz.4.15007': attribute type 4 has an invalid length. [ 1599.466017][T29529] xt_bpf: check failed: parse error [ 1599.570857][T29534] syzkaller0: entered promiscuous mode [ 1599.576682][T29534] syzkaller0: entered allmulticast mode [ 1599.655307][T29534] tipc: Enabled bearer , priority 0 [ 1599.688533][T29533] tipc: Resetting bearer [ 1599.767576][T29533] tipc: Disabling bearer [ 1599.949547][T29559] tipc: Enabling of bearer rejected, already enabled [ 1600.003837][T29562] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20003 [ 1600.178419][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032b2f400: rx timeout, send abort [ 1600.678613][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032b2d000: rx timeout, send abort [ 1600.687020][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032b2f400: abort rx timeout. Force session deactivation [ 1601.014128][T29600] SET target dimension over the limit! [ 1601.186923][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032b2d000: abort rx timeout. Force session deactivation [ 1603.310651][T29576] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1603.331488][T29595] netlink: 'syz.3.15039': attribute type 2 has an invalid length. [ 1603.367182][T29595] __nla_validate_parse: 15 callbacks suppressed [ 1603.367199][T29595] netlink: 188 bytes leftover after parsing attributes in process `syz.3.15039'. [ 1603.568566][T29609] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15044'. [ 1603.625294][T29609] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15044'. [ 1603.686783][T29609] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15044'. [ 1603.758721][T29620] netlink: 'syz.1.15043': attribute type 1 has an invalid length. [ 1603.774566][T29620] netlink: 'syz.1.15043': attribute type 2 has an invalid length. [ 1604.017317][T29637] netlink: 52 bytes leftover after parsing attributes in process `syz.1.15049'. [ 1604.600910][T29649] hsr0: entered promiscuous mode [ 1604.962245][T29669] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15060'. [ 1605.012729][T29675] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15062'. [ 1605.302499][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1605.315161][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1605.337720][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1605.352378][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1605.366513][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1605.684473][T29713] netlink: 48 bytes leftover after parsing attributes in process `syz.1.15073'. [ 1605.951171][ T6792] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1605.963659][T29722] netlink: 'syz.1.15077': attribute type 28 has an invalid length. [ 1605.967404][ T6792] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1605.978543][T29722] netlink: 'syz.1.15077': attribute type 3 has an invalid length. [ 1605.997495][T29722] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15077'. [ 1606.011515][ T6792] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1606.022922][ T6792] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 1606.035289][T29723] netlink: 'syz.0.15076': attribute type 1 has an invalid length. [ 1606.167894][T29723] bond16: entered promiscuous mode [ 1606.195934][T29723] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1606.392099][ T6792] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1606.404582][ T6792] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1606.416078][ T6792] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1606.430380][ T6792] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 1606.564427][ T6792] .`: (slave netdevsim1): Releasing backup interface [ 1606.583992][ T6792] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1606.620092][ T6792] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1606.656804][ T6792] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1606.673798][T29759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15084'. [ 1606.687159][ T6792] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 1606.754907][T29691] lo speed is unknown, defaulting to 1000 [ 1606.763017][T29758] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1606.942174][ T6792] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1606.960732][ T6792] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1606.971932][ T6792] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1606.983829][ T6792] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 1607.481764][ T50] Bluetooth: hci2: command tx timeout [ 1607.848591][ T6792] veth1_to_bridge: left allmulticast mode [ 1607.864864][ T6792] veth1_to_bridge: left promiscuous mode [ 1607.888896][ T6792] bridge0: port 1(veth1_to_bridge) entered disabled state [ 1608.574671][ T6792] bond13 (unregistering): (slave geneve5): Releasing active interface [ 1608.635234][ T6792] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1608.772359][ T6792] .` (unregistering): Released all slaves [ 1608.792099][ T6792] bond1 (unregistering): Released all slaves [ 1608.822913][ T6792] bond2 (unregistering): Released all slaves [ 1608.843602][ T6792] bond3 (unregistering): Released all slaves [ 1608.871623][ T6792] bond4 (unregistering): Released all slaves [ 1608.899184][ T6792] bond5 (unregistering): Released all slaves [ 1608.925375][ T6792] bond0 (unregistering): (slave bond14): Releasing backup interface [ 1608.941967][ T6792] bond0 (unregistering): Released all slaves [ 1608.962250][ T6792] bond6 (unregistering): Released all slaves [ 1608.986520][ T6792] bond7 (unregistering): Released all slaves [ 1609.003231][T29867] __nla_validate_parse: 2 callbacks suppressed [ 1609.003248][T29867] netlink: 64 bytes leftover after parsing attributes in process `syz.1.15112'. [ 1609.011484][ T6792] bond8 (unregistering): Released all slaves [ 1609.028583][T29869] netlink: 64 bytes leftover after parsing attributes in process `syz.1.15112'. [ 1609.054419][ T6792] bond9 (unregistering): Released all slaves [ 1609.075200][ T6792] bond10 (unregistering): Released all slaves [ 1609.102490][ T6792] bond11 (unregistering): Released all slaves [ 1609.103197][T29872] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15113'. [ 1609.125497][ T6792] bond12 (unregistering): Released all slaves [ 1609.152719][ T6792] bond13 (unregistering): Released all slaves [ 1609.174934][ T6792] bond14 (unregistering): Released all slaves [ 1609.231833][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1609.557512][ T50] Bluetooth: hci2: command tx timeout [ 1609.603126][T29885] netlink: 164 bytes leftover after parsing attributes in process `syz.0.15117'. [ 1609.639920][T29691] bridge0: port 1(bridge_slave_0) entered blocking state [ 1609.673214][T29691] bridge0: port 1(bridge_slave_0) entered disabled state [ 1609.689534][T29691] bridge_slave_0: entered allmulticast mode [ 1609.698925][T29691] bridge_slave_0: entered promiscuous mode [ 1609.737469][ T6792] tipc: Disabling bearer [ 1609.746027][ T6792] tipc: Left network mode [ 1609.750947][T29691] bridge0: port 2(bridge_slave_1) entered blocking state [ 1609.759658][T29691] bridge0: port 2(bridge_slave_1) entered disabled state [ 1609.768618][T29691] bridge_slave_1: entered allmulticast mode [ 1609.791130][T29691] bridge_slave_1: entered promiscuous mode [ 1609.951984][T29691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1610.009878][T29691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1610.090852][T29900] netlink: 240 bytes leftover after parsing attributes in process `syz.4.15123'. [ 1610.154796][T29901] netlink: 'syz.0.15122': attribute type 1 has an invalid length. [ 1610.270179][T29691] team0: Port device team_slave_0 added [ 1610.283349][T29908] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1610.372025][T29901] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1610.399361][T29913] bond8: (slave veth0_to_bond): Releasing active interface [ 1610.457815][T29691] team0: Port device team_slave_1 added [ 1610.489027][T29916] macvlan2: entered promiscuous mode [ 1610.494360][T29916] macvlan2: entered allmulticast mode [ 1610.502424][T29916] bond17: entered promiscuous mode [ 1610.508876][T29916] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1610.527155][T29916] bond17: left promiscuous mode [ 1610.620902][T29691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1610.636971][T29691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1610.710295][T29691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1610.754009][T29691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1610.761977][T29691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1610.807088][T29691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1611.019613][T29953] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15130'. [ 1611.125625][T29691] hsr_slave_0: entered promiscuous mode [ 1611.136892][T29691] hsr_slave_1: entered promiscuous mode [ 1611.143322][T29691] debugfs: 'hsr0' already exists in 'hsr' [ 1611.149683][T29691] Cannot create hsr debugfs directory [ 1611.163003][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1611.239081][T29957] tipc: Enabling of bearer rejected, failed to enable media [ 1611.268494][T29957] netlink: 'syz.3.15131': attribute type 11 has an invalid length. [ 1611.297749][T29957] netlink: 64 bytes leftover after parsing attributes in process `syz.3.15131'. [ 1611.569670][ T6792] hsr_slave_0: left promiscuous mode [ 1611.583301][ T6792] hsr_slave_1: left promiscuous mode [ 1611.618163][ T6792] veth0_macvtap: left promiscuous mode [ 1611.624582][ T6792] veth1_vlan: left promiscuous mode [ 1611.630701][ T6792] veth0_vlan: left promiscuous mode [ 1611.638947][ T50] Bluetooth: hci2: command tx timeout [ 1612.460255][T30014] netlink: 'syz.3.15144': attribute type 1 has an invalid length. [ 1612.469866][T30014] netlink: 240 bytes leftover after parsing attributes in process `syz.3.15144'. [ 1612.484655][T30014] netlink: 'syz.3.15144': attribute type 1 has an invalid length. [ 1612.497399][T30015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15143'. [ 1612.717509][T30024] netlink: 'syz.1.15145': attribute type 39 has an invalid length. [ 1612.887931][T30039] netlink: 'syz.4.15148': attribute type 10 has an invalid length. [ 1613.227110][T30056] syzkaller0: entered promiscuous mode [ 1613.227380][ T6792] IPVS: stop unused estimator thread 0... [ 1613.242135][T30056] syzkaller0: entered allmulticast mode [ 1613.718194][ T50] Bluetooth: hci2: command tx timeout [ 1614.039939][T30096] bond7: option downdelay: invalid value (18446744073709551610) [ 1614.062814][T30096] bond7: option downdelay: allowed values 0 - 2147483647 [ 1614.080771][T30096] bond7 (unregistering): Released all slaves [ 1614.625115][T30123] syzkaller0: entered promiscuous mode [ 1614.649976][T30123] syzkaller0: entered allmulticast mode [ 1614.665052][T30134] netlink: 'syz.0.15169': attribute type 2 has an invalid length. [ 1614.737165][T30123] tipc: Enabled bearer , priority 0 [ 1614.789178][T30122] tipc: Resetting bearer [ 1614.848561][T30122] tipc: Disabling bearer [ 1614.862129][T29691] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1614.873673][T29691] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1614.892211][T29691] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1614.949674][T29691] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1614.970881][T29691] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1615.029008][T29691] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1615.045357][T30155] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15173'. [ 1615.071400][T29691] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1615.108799][T29691] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1615.198375][T32486] block nbd7: Receive control failed (result -107) [ 1615.232688][T30138] nbd7: detected capacity change from 0 to 63 [ 1615.242910][ T50] block nbd7: Receive control failed (result -32) [ 1615.263742][ T1617] block nbd7: Dead connection, failed to find a fallback [ 1615.277031][ T1617] block nbd7: shutting down sockets [ 1615.283841][ T1617] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1615.297775][ T1617] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1615.309171][ T1617] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1615.318744][ T1617] Buffer I/O error on dev nbd7, logical block 1, async page read [ 1615.326947][ T1617] I/O error, dev nbd7, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1615.338745][ T1617] Buffer I/O error on dev nbd7, logical block 2, async page read [ 1615.347501][ T1617] I/O error, dev nbd7, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1615.357122][ T1617] Buffer I/O error on dev nbd7, logical block 3, async page read [ 1615.366066][ T1617] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1615.377525][ T1617] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1615.385473][ T1617] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1615.401190][ T1617] Buffer I/O error on dev nbd7, logical block 1, async page read [ 1615.411796][ T1617] I/O error, dev nbd7, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 1615.421912][ T1617] Buffer I/O error on dev nbd7, logical block 2, async page read [ 1615.430434][ T1617] Buffer I/O error on dev nbd7, logical block 3, async page read [ 1615.440654][ T1617] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1615.449927][ T1617] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1615.458406][ T1617] Buffer I/O error on dev nbd7, logical block 1, async page read [ 1615.470560][ T1617] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1615.482456][ T1617] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1615.501428][T29996] ldm_validate_partition_table(): Disk read failed. [ 1615.519593][T29996] Dev nbd7: unable to read RDB block 0 [ 1615.538947][T29996] nbd7: unable to read partition table [ 1615.599408][T29996] ldm_validate_partition_table(): Disk read failed. [ 1615.610176][T29996] Dev nbd7: unable to read RDB block 0 [ 1615.621720][T29996] nbd7: unable to read partition table [ 1615.648462][T30179] IPv6: sit1: Disabled Multicast RS [ 1615.863323][T29691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1615.924364][T30199] netlink: 'syz.0.15181': attribute type 5 has an invalid length. [ 1615.937080][T29691] 8021q: adding VLAN 0 to HW filter on device team0 [ 1615.980478][T30199] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1615.999881][T23769] bridge0: port 1(bridge_slave_0) entered blocking state [ 1616.007089][T23769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1616.044021][T23769] bridge0: port 2(bridge_slave_1) entered blocking state [ 1616.051243][T23769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1616.067791][T30206] syzkaller0: entered promiscuous mode [ 1616.076852][T30206] syzkaller0: entered allmulticast mode [ 1616.110110][T30209] sctp: [Deprecated]: syz.1.15184 (pid 30209) Use of int in max_burst socket option deprecated. [ 1616.110110][T30209] Use struct sctp_assoc_value instead [ 1616.162002][T30203] tipc: Enabled bearer , priority 0 [ 1616.180725][T30200] tipc: Resetting bearer [ 1616.254264][T30200] tipc: Disabling bearer [ 1616.329459][T30220] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15187'. [ 1616.562461][T30237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15189'. [ 1616.579841][T30237] macvlan0: Caught tx_queue_len zero misconfig [ 1616.593080][T30231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15189'. [ 1616.609017][T30238] bridge_slave_1: default FDB implementation only supports local addresses [ 1616.964629][T30263] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1617.042842][T30267] erspan0: entered promiscuous mode [ 1617.057741][T30267] erspan0: left allmulticast mode [ 1617.072819][T30267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15193'. [ 1617.135952][T30271] tipc: Enabling of bearer rejected, already enabled [ 1617.158738][T30274] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15196'. [ 1617.228557][T30277] macvlan0: entered promiscuous mode [ 1617.354901][T30282] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15199'. [ 1617.420827][T30280] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15199'. [ 1617.571254][T30300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15202'. [ 1617.613279][T30300] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15202'. [ 1618.019938][T29691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1618.095767][T30334] tipc: Enabling of bearer rejected, already enabled [ 1618.208197][T29691] veth0_vlan: entered promiscuous mode [ 1618.263568][T29691] veth1_vlan: entered promiscuous mode [ 1618.430038][T29691] veth0_macvtap: entered promiscuous mode [ 1618.452455][T29691] veth1_macvtap: entered promiscuous mode [ 1618.493723][T29691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1618.520563][T29691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1618.563163][T23769] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1618.599029][T23769] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1618.689585][T23769] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1618.719420][T23769] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1618.760600][T30366] ipvlan0: entered promiscuous mode [ 1618.789776][T30366] ipvlan0: entered allmulticast mode [ 1618.799784][T30366] veth0_vlan: entered allmulticast mode [ 1619.030104][ T6786] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1619.063833][ T6786] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1619.256741][ T6791] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1619.283955][ T6791] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1619.320285][T30392] syzkaller0: entered promiscuous mode [ 1619.349832][T30392] syzkaller0: entered allmulticast mode [ 1619.437667][T30392] tipc: Enabled bearer , priority 0 [ 1619.460767][T30391] tipc: Resetting bearer [ 1619.605894][T30391] tipc: Disabling bearer [ 1619.834243][T30398] syzkaller1: entered promiscuous mode [ 1619.855294][T30398] syzkaller1: entered allmulticast mode [ 1619.993329][T32486] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1620.011911][T32486] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1620.020469][T32486] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1620.034704][T32486] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1620.042727][T32486] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1620.080391][T32486] [ 1620.082755][T32486] ====================================================== [ 1620.089771][T32486] WARNING: possible circular locking dependency detected [ 1620.097064][T32486] syzkaller #0 Not tainted [ 1620.101477][T32486] ------------------------------------------------------ [ 1620.108494][T32486] kworker/u9:1/32486 is trying to acquire lock: [ 1620.114726][T32486] ffff88801be9d210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x4c7/0x5a0 [ 1620.125155][T32486] [ 1620.125155][T32486] but task is already holding lock: [ 1620.132507][T32486] ffff88801be9d180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5e0 [ 1620.141894][T32486] [ 1620.141894][T32486] which lock already depends on the new lock. [ 1620.141894][T32486] [ 1620.152282][T32486] [ 1620.152282][T32486] the existing dependency chain (in reverse order) is: [ 1620.161274][T32486] [ 1620.161274][T32486] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 1620.169254][T32486] down_write+0x96/0x200 [ 1620.174006][T32486] kernfs_add_one+0x41/0x5e0 [ 1620.179102][T32486] kernfs_create_dir_ns+0x1a1/0x230 [ 1620.184807][T32486] internal_create_group+0x440/0x1180 [ 1620.190685][T32486] cpuhp_invoke_callback+0x434/0x810 [ 1620.196482][T32486] cpuhp_issue_call+0x3f0/0x750 [ 1620.201855][T32486] __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0 [ 1620.208441][T32486] __cpuhp_setup_state+0x3f/0x60 [ 1620.213893][T32486] do_one_initcall+0x250/0x870 [ 1620.219164][T32486] do_initcall_level+0x10a/0x1a0 [ 1620.224638][T32486] do_initcalls+0x59/0xa0 [ 1620.229477][T32486] kernel_init_freeable+0x29d/0x3e0 [ 1620.235191][T32486] kernel_init+0x1d/0x1d0 [ 1620.240031][T32486] ret_from_fork+0x514/0xb70 [ 1620.245132][T32486] ret_from_fork_asm+0x1a/0x30 [ 1620.250407][T32486] [ 1620.250407][T32486] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 1620.258213][T32486] [ 1620.258213][T32486] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 1620.265932][T32486] cpus_read_lock+0x42/0x160 [ 1620.271043][T32486] static_key_slow_inc+0x12/0x30 [ 1620.276501][T32486] nbd_genl_reconfigure+0x1301/0x1e80 [ 1620.282388][T32486] genl_family_rcv_msg_doit+0x233/0x340 [ 1620.288460][T32486] genl_rcv_msg+0x614/0x7a0 [ 1620.293494][T32486] netlink_rcv_skb+0x226/0x4a0 [ 1620.298770][T32486] genl_rcv+0x28/0x40 [ 1620.303265][T32486] netlink_unicast+0x7bb/0x940 [ 1620.308540][T32486] netlink_sendmsg+0x813/0xb40 [ 1620.313822][T32486] sock_sendmsg_nosec+0x13a/0x180 [ 1620.319360][T32486] ____sys_sendmsg+0x54e/0x850 [ 1620.324632][T32486] ___sys_sendmsg+0x2a5/0x360 [ 1620.329815][T32486] __x64_sys_sendmsg+0x1b1/0x290 [ 1620.335261][T32486] do_syscall_64+0x174/0x580 [ 1620.340357][T32486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1620.346760][T32486] [ 1620.346760][T32486] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 1620.354391][T32486] __mutex_lock+0x19d/0x1550 [ 1620.359489][T32486] nbd_queue_rq+0x373/0x1150 [ 1620.364591][T32486] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1620.370651][T32486] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1620.377570][T32486] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1620.384055][T32486] blk_mq_run_work_fn+0x16c/0x300 [ 1620.389591][T32486] process_scheduled_works+0xa8e/0x14e0 [ 1620.395654][T32486] worker_thread+0xa47/0xfb0 [ 1620.400765][T32486] kthread+0x388/0x470 [ 1620.405358][T32486] ret_from_fork+0x514/0xb70 [ 1620.410466][T32486] ret_from_fork_asm+0x1a/0x30 [ 1620.415757][T32486] [ 1620.415757][T32486] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 1620.422961][T32486] __mutex_lock+0x19d/0x1550 [ 1620.428064][T32486] nbd_queue_rq+0xc1/0x1150 [ 1620.433081][T32486] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1620.439144][T32486] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1620.445984][T32486] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1620.452472][T32486] blk_mq_run_work_fn+0x16c/0x300 [ 1620.458014][T32486] process_scheduled_works+0xa8e/0x14e0 [ 1620.464076][T32486] worker_thread+0xa47/0xfb0 [ 1620.469178][T32486] kthread+0x388/0x470 [ 1620.473753][T32486] ret_from_fork+0x514/0xb70 [ 1620.478850][T32486] ret_from_fork_asm+0x1a/0x30 [ 1620.484123][T32486] [ 1620.484123][T32486] -> #4 (set->srcu){.+.+}-{0:0}: [ 1620.491235][T32486] __synchronize_srcu+0xc9/0x2f0 [ 1620.496683][T32486] elevator_switch+0x1e8/0x7b0 [ 1620.501961][T32486] elevator_change+0x2fa/0x480 [ 1620.507238][T32486] elevator_set_default+0x375/0x440 [ 1620.512951][T32486] blk_register_queue+0x3f3/0x4e0 [ 1620.518485][T32486] __add_disk+0x6cb/0xe30 [ 1620.523327][T32486] add_disk_fwnode+0xfb/0x4b0 [ 1620.528508][T32486] nbd_dev_add+0x733/0xb60 [ 1620.533434][T32486] nbd_init+0x15f/0x1e0 [ 1620.538105][T32486] do_one_initcall+0x250/0x870 [ 1620.543380][T32486] do_initcall_level+0x10a/0x1a0 [ 1620.548826][T32486] do_initcalls+0x59/0xa0 [ 1620.553663][T32486] kernel_init_freeable+0x29d/0x3e0 [ 1620.559370][T32486] kernel_init+0x1d/0x1d0 [ 1620.564205][T32486] ret_from_fork+0x514/0xb70 [ 1620.569300][T32486] ret_from_fork_asm+0x1a/0x30 [ 1620.574576][T32486] [ 1620.574576][T32486] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 1620.582383][T32486] __mutex_lock+0x19d/0x1550 [ 1620.587484][T32486] elevator_change+0x1af/0x480 [ 1620.592770][T32486] elevator_set_none+0xb5/0x140 [ 1620.598133][T32486] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1620.604452][T32486] nbd_start_device+0x189/0xb30 [ 1620.609808][T32486] nbd_genl_connect+0x1597/0x1c10 [ 1620.615428][T32486] genl_family_rcv_msg_doit+0x233/0x340 [ 1620.621487][T32486] genl_rcv_msg+0x614/0x7a0 [ 1620.626511][T32486] netlink_rcv_skb+0x226/0x4a0 [ 1620.631780][T32486] genl_rcv+0x28/0x40 [ 1620.636272][T32486] netlink_unicast+0x7bb/0x940 [ 1620.641553][T32486] netlink_sendmsg+0x813/0xb40 [ 1620.646826][T32486] sock_sendmsg_nosec+0x13a/0x180 [ 1620.652360][T32486] ____sys_sendmsg+0x54e/0x850 [ 1620.657644][T32486] ___sys_sendmsg+0x2a5/0x360 [ 1620.662829][T32486] __x64_sys_sendmsg+0x1b1/0x290 [ 1620.668283][T32486] do_syscall_64+0x174/0x580 [ 1620.673378][T32486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1620.679778][T32486] [ 1620.679778][T32486] -> #2 (&q->q_usage_counter(io)#56){++++}-{0:0}: [ 1620.688373][T32486] blk_alloc_queue+0x544/0x690 [ 1620.693658][T32486] __blk_mq_alloc_disk+0x194/0x390 [ 1620.699279][T32486] nbd_dev_add+0x494/0xb60 [ 1620.704205][T32486] nbd_init+0x15f/0x1e0 [ 1620.708874][T32486] do_one_initcall+0x250/0x870 [ 1620.714147][T32486] do_initcall_level+0x10a/0x1a0 [ 1620.719597][T32486] do_initcalls+0x59/0xa0 [ 1620.724438][T32486] kernel_init_freeable+0x29d/0x3e0 [ 1620.730145][T32486] kernel_init+0x1d/0x1d0 [ 1620.734984][T32486] ret_from_fork+0x514/0xb70 [ 1620.740082][T32486] ret_from_fork_asm+0x1a/0x30 [ 1620.745359][T32486] [ 1620.745359][T32486] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1620.752568][T32486] fs_reclaim_acquire+0x71/0x100 [ 1620.758009][T32486] kmem_cache_alloc_noprof+0x64/0x5f0 [ 1620.763898][T32486] __kernfs_iattrs+0xdd/0x380 [ 1620.769084][T32486] kernfs_iop_setattr+0xe6/0x3f0 [ 1620.774524][T32486] notify_change+0xbba/0xea0 [ 1620.779623][T32486] do_truncate+0x1c2/0x250 [ 1620.784545][T32486] path_openat+0x2fed/0x3830 [ 1620.789644][T32486] do_file_open+0x23e/0x4a0 [ 1620.794659][T32486] do_sys_openat2+0x115/0x200 [ 1620.799846][T32486] __x64_sys_openat+0x138/0x170 [ 1620.805203][T32486] do_syscall_64+0x174/0x580 [ 1620.810294][T32486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1620.816695][T32486] [ 1620.816695][T32486] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 1620.825196][T32486] __lock_acquire+0x1520/0x2cf0 [ 1620.830640][T32486] lock_acquire+0x106/0x350 [ 1620.835646][T32486] down_write+0x96/0x200 [ 1620.840399][T32486] kernfs_link_sibling+0x4c7/0x5a0 [ 1620.846024][T32486] kernfs_add_one+0x1d2/0x5e0 [ 1620.851204][T32486] kernfs_create_dir_ns+0x1a1/0x230 [ 1620.856918][T32486] sysfs_create_dir_ns+0x12f/0x2a0 [ 1620.862541][T32486] kobject_add_internal+0x622/0xcd0 [ 1620.868248][T32486] kobject_add+0x163/0x240 [ 1620.873168][T32486] device_add+0x3fa/0xb80 [ 1620.878009][T32486] hci_conn_add_sysfs+0xd5/0x210 [ 1620.883457][T32486] hci_conn_complete_evt+0x8a8/0x1350 [ 1620.889336][T32486] hci_event_packet+0x6cd/0xf10 [ 1620.894695][T32486] hci_rx_work+0x3ee/0x1020 [ 1620.899706][T32486] process_scheduled_works+0xa8e/0x14e0 [ 1620.905763][T32486] worker_thread+0xa47/0xfb0 [ 1620.910863][T32486] kthread+0x388/0x470 [ 1620.915438][T32486] ret_from_fork+0x514/0xb70 [ 1620.920535][T32486] ret_from_fork_asm+0x1a/0x30 [ 1620.925822][T32486] [ 1620.925822][T32486] other info that might help us debug this: [ 1620.925822][T32486] [ 1620.936037][T32486] Chain exists of: [ 1620.936037][T32486] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 1620.936037][T32486] [ 1620.950451][T32486] Possible unsafe locking scenario: [ 1620.950451][T32486] [ 1620.957888][T32486] CPU0 CPU1 [ 1620.963234][T32486] ---- ---- [ 1620.968579][T32486] lock(&root->kernfs_rwsem); [ 1620.973330][T32486] lock(cpuhp_state_mutex); [ 1620.980424][T32486] lock(&root->kernfs_rwsem); [ 1620.987691][T32486] lock(&root->kernfs_iattr_rwsem); [ 1620.992960][T32486] [ 1620.992960][T32486] *** DEADLOCK *** [ 1620.992960][T32486] [ 1621.001087][T32486] 4 locks held by kworker/u9:1/32486: [ 1621.006438][T32486] #0: ffff88802a4b3140 ((wq_completion)hci0#2){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1621.017406][T32486] #1: ffffc9000d98fc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1621.029406][T32486] #2: ffff88807bf0c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_conn_complete_evt+0xba/0x1350 [ 1621.039234][T32486] #3: ffff88801be9d180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5e0 [ 1621.049061][T32486] [ 1621.049061][T32486] stack backtrace: [ 1621.054934][T32486] CPU: 0 UID: 0 PID: 32486 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 1621.054952][T32486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1621.054964][T32486] Workqueue: hci0 hci_rx_work [ 1621.054983][T32486] Call Trace: [ 1621.054989][T32486] [ 1621.054997][T32486] dump_stack_lvl+0xe8/0x150 [ 1621.055016][T32486] print_circular_bug+0x2e1/0x300 [ 1621.055037][T32486] check_noncircular+0x12e/0x150 [ 1621.055058][T32486] __lock_acquire+0x1520/0x2cf0 [ 1621.055076][T32486] ? __lock_acquire+0x683/0x2cf0 [ 1621.055096][T32486] ? kernfs_link_sibling+0x4c7/0x5a0 [ 1621.055112][T32486] lock_acquire+0x106/0x350 [ 1621.055127][T32486] ? kernfs_link_sibling+0x4c7/0x5a0 [ 1621.055148][T32486] down_write+0x96/0x200 [ 1621.055163][T32486] ? kernfs_link_sibling+0x4c7/0x5a0 [ 1621.055179][T32486] ? __pfx_down_write+0x10/0x10 [ 1621.055194][T32486] ? kernfs_root+0x1c/0x230 [ 1621.055208][T32486] ? kernfs_root+0x1c/0x230 [ 1621.055222][T32486] ? kernfs_root+0x1c/0x230 [ 1621.055236][T32486] ? kernfs_root+0x1ea/0x230 [ 1621.055250][T32486] kernfs_link_sibling+0x4c7/0x5a0 [ 1621.055270][T32486] kernfs_add_one+0x1d2/0x5e0 [ 1621.055288][T32486] kernfs_create_dir_ns+0x1a1/0x230 [ 1621.055306][T32486] sysfs_create_dir_ns+0x12f/0x2a0 [ 1621.055330][T32486] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1621.055354][T32486] ? do_raw_spin_unlock+0xf5/0x210 [ 1621.055376][T32486] kobject_add_internal+0x622/0xcd0 [ 1621.055397][T32486] kobject_add+0x163/0x240 [ 1621.055415][T32486] ? __pfx_kobject_add+0x10/0x10 [ 1621.055433][T32486] ? get_device_parent+0x366/0x3a0 [ 1621.055452][T32486] device_add+0x3fa/0xb80 [ 1621.055475][T32486] hci_conn_add_sysfs+0xd5/0x210 [ 1621.055500][T32486] hci_conn_complete_evt+0x8a8/0x1350 [ 1621.055517][T32486] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1621.055541][T32486] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 1621.055557][T32486] ? skb_pull_data+0xf0/0x200 [ 1621.055577][T32486] hci_event_packet+0x6cd/0xf10 [ 1621.055594][T32486] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 1621.055608][T32486] ? __pfx_hci_event_packet+0x10/0x10 [ 1621.055625][T32486] ? audit_trim_trees+0x280/0x7e0 [ 1621.055645][T32486] ? hci_send_to_monitor+0xe2/0x590 [ 1621.055666][T32486] hci_rx_work+0x3ee/0x1020 [ 1621.055684][T32486] ? process_scheduled_works+0xa20/0x14e0 [ 1621.055705][T32486] process_scheduled_works+0xa8e/0x14e0 [ 1621.055735][T32486] ? __pfx_process_scheduled_works+0x10/0x10 [ 1621.055758][T32486] ? assign_work+0x3cf/0x5d0 [ 1621.055779][T32486] worker_thread+0xa47/0xfb0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1621.055805][T32486] ? __kthread_parkme+0x71/0x1f0 [ 1621.055830][T32486] kthread+0x388/0x470 [ 1621.055846][T32486] ? __pfx_worker_thread+0x10/0x10 [ 1621.055866][T32486] ? __pfx_kthread+0x10/0x10 [ 1621.055881][T32486] ret_from_fork+0x514/0xb70 [ 1621.055899][T32486] ? __pfx_ret_from_fork+0x10/0x10 [ 1621.055915][T32486] ? __switch_to+0xc89/0x1420 [ 1621.055938][T32486] ? __pfx_kthread+0x10/0x10 [ 1621.055954][T32486] ret_from_fork_asm+0x1a/0x30 [ 1621.055978][T32486] [ 1621.464943][T30436] xt_recent: Unsupported userspace flags (000000b1) [ 1621.593715][T30416] tipc: Enabling of bearer rejected, failed to enable media [ 1622.161177][T23769] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1622.531809][T23769] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1622.593361][T23769] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1622.680474][T23769] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1622.779807][T23769] bridge_slave_1: left allmulticast mode [ 1622.789626][T23769] bridge_slave_1: left promiscuous mode [ 1622.795364][T23769] bridge0: port 2(bridge_slave_1) entered disabled state [ 1622.804458][T23769] bridge_slave_0: left allmulticast mode [ 1622.810510][T23769] bridge_slave_0: left promiscuous mode [ 1622.817300][T23769] bridge0: port 1(bridge_slave_0) entered disabled state [ 1622.908075][T23769] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1622.921276][T23769] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1622.932259][T23769] bond0 (unregistering): Released all slaves [ 1623.084217][T23769] hsr_slave_0: left promiscuous mode [ 1623.091885][T23769] hsr_slave_1: left promiscuous mode [ 1623.098258][T23769] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1623.105848][T23769] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1623.115297][T23769] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1623.127637][T23769] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1623.141839][T23769] veth1_macvtap: left promiscuous mode [ 1623.148245][T23769] veth0_macvtap: left promiscuous mode [ 1623.153803][T23769] veth1_vlan: left promiscuous mode [ 1623.159853][T23769] veth0_vlan: left promiscuous mode [ 1623.325304][T23769] team0 (unregistering): Port device team_slave_1 removed [ 1623.340567][T23769] team0 (unregistering): Port device team_slave_0 removed [ 1623.687879][T23769] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1623.699197][T23769] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1623.780765][T23769] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1623.791867][T23769] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1623.832225][T23769] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1623.843036][T23769] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1623.941129][T23769] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1623.952442][T23769] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1623.971822][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1624.251913][T23769] bond3 (unregistering): (slave bridge1): Releasing backup interface [ 1624.270388][T23769] bridge1 (unregistering): left promiscuous mode [ 1624.293390][T23769] .` (unregistering): Released all slaves [ 1624.301871][T23769] bond1 (unregistering): Released all slaves [ 1624.311127][T23769] bond2 (unregistering): Released all slaves [ 1624.325037][T23769] bond3 (unregistering): Released all slaves [ 1624.334345][T23769] bond4 (unregistering): Released all slaves [ 1624.343542][T23769] bond0 (unregistering): Released all slaves [ 1624.353022][T23769] bond5 (unregistering): Released all slaves [ 1624.362033][T23769] bond6 (unregistering): Released all slaves [ 1624.374728][T23769] bond7 (unregistering): Released all slaves [ 1624.386411][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1624.481706][T23769] : left promiscuous mode [ 1624.537610][T23769] tipc: Disabling bearer [ 1624.543096][T23769] tipc: Left network mode [ 1624.696463][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1624.741523][T23769] hsr_slave_0: left promiscuous mode [ 1624.747665][T23769] hsr_slave_1: left promiscuous mode [ 1624.759993][T23769] veth0_macvtap: left promiscuous mode [ 1624.765670][T23769] veth1_vlan: left promiscuous mode [ 1624.772653][T23769] veth0_vlan: left promiscuous mode [ 1625.070097][ T5288] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1625.303652][T23769] IPVS: stop unused estimator thread 0... [ 1625.581178][ T5288] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1625.786047][ T5288] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1625.990992][ T5288] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1626.190896][ T5288] 8021q: adding VLAN 0 to HW filter on device eth8