last executing test programs: 1m10.90918463s ago: executing program 1 (id=1288): r0 = socket$netlink(0x10, 0x3, 0xc) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x4, &(0x7f0000000500)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8b}]}, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000001c0)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f00000003c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) sendmsg$alg(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x40000) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m9.698306086s ago: executing program 1 (id=1297): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000011000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x0, 0x10, 0x10, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f00000003c0)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), r4) sendmsg$nl_generic(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x48004}, 0x0) recvmmsg(r4, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000008c0)=""/134, 0x86}, {&(0x7f0000000980)=""/238, 0xee}, {&(0x7f0000000a80)=""/63, 0x3f}, {&(0x7f0000001180)=""/4092, 0xffc}], 0x4}, 0xfffffffa}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, 0x0}, 0xfe}, {{0x0, 0x0, &(0x7f0000002180)=[{&(0x7f00000021c0)=""/4119, 0x1017}, {&(0x7f0000003200)=""/4092, 0xffc}], 0x2}, 0x900000}], 0x7, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=@newlink={0x20, 0x10, 0x503, 0xfefffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8010, 0xa8bb}}, 0x20}, 0x1, 0x0, 0x0, 0x4c890}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x30, r6, 0xb97534d5fe9704ef, 0x70bd29, 0x25dfdbfc, {{0x12}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0xffffffffffffff56, r6, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x0, 0x1, 0x73}, @val={0x0, 0x3, r7}, @void}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000020}, 0x48000) 1m9.370478132s ago: executing program 4 (id=1300): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9}, 0x50) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000000)=0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg0\x00', 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000540)={'syztnl2\x00', &(0x7f0000000380)={'syztnl2\x00', r1, 0x7800, 0x20, 0xfff, 0x6f6c0056, {{0x5e, 0x4, 0x1, 0x2, 0x178, 0x67, 0x0, 0x40, 0x2b, 0x0, @local, @broadcast, {[@timestamp_addr={0x44, 0x24, 0x2d, 0x1, 0x0, [{@loopback, 0x1}, {@private=0xa010101, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7f}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10}]}, @noop, @lsrr={0x83, 0x2b, 0x78, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x25}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @private=0xa010102, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x54, 0x9b, 0x3, 0x2, [{@empty, 0x8}, {@local, 0x3}, {@local, 0x9}, {@private=0xa010100, 0x4}, {@multicast2, 0x539}, {@local, 0x5}, {@empty, 0x1}, {@private=0xa010101, 0x1}, {@local}, {@loopback, 0x40}]}, @cipso={0x86, 0x1f, 0x2, [{0x0, 0xa, "c3ceccd90775f4d3"}, {0x1, 0x7, "9326909de7"}, {0x5, 0x8, "ae7deca38753"}]}, @end, @timestamp_addr={0x44, 0x34, 0x9c, 0x1, 0x0, [{@empty, 0x8}, {@loopback, 0x61}, {@multicast1, 0x5}, {@broadcast, 0x5}, {@dev={0xac, 0x14, 0x14, 0x40}, 0xa0000000}, {@private=0xa010101, 0x7fff}]}, @ssrr={0x89, 0x17, 0xc, [@private=0xa010100, @local, @local, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x37, 0x0, [{0x1, 0x3, "8b"}, {0x6, 0xb, "26f61749f339f5bbce"}, {0x5, 0x7, "69824c1256"}, {0x2, 0xe, "0c1c054851eb06aa4e7ceb6a"}, {0x1, 0x5, '3|p'}, {0x5, 0x9, "d31ca53fcbb328"}]}, @timestamp_prespec={0x44, 0x1c, 0xc8, 0x3, 0x9, [{@multicast1, 0x3ff}, {@local, 0x401}, {@private=0xa010101, 0x80000001}]}]}}}}}) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000140)={0xffffffffffffffff}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x2008, '\x00', r1, r3, 0x5, 0x2, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x41}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x27}, 0x94) 1m9.292317955s ago: executing program 4 (id=1301): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r2) sendmsg$NFC_CMD_SE_IO(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x98, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_SE_APDU={0x7b, 0x19, "4d3798f1c8052574bad5f464f3b85c8d2d40b691071f8e1f59da67f83ddf88e4fe2c2e4814d8d712e2db1f48a3b2f084a010b59ea7d18bfdbd8c008807aac2bd1e382a0c524203e4447813192248c2fffe9e9518ef04ea9fac6c001ff6a95f651b29e04d4b69503053b45191e6df131c60193204c3899b"}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}]}, 0x98}, 0x1, 0x0, 0x0, 0x20048001}, 0x6085) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFC_CMD_ENABLE_SE(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x220, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000094}, 0x4) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), r2) sendmsg$NL802154_CMD_SET_CCA_MODE(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r4, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x4004080) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x80) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, r5, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x8080}, 0x20008000) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, 0x2, 0x7, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x10}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44011}, 0x8040000) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000900), r0) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, r7, 0x200, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x81) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x2c, r5, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6a34106b}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x20000000) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000b40), r0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, r9, 0x8, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000010}, 0x8008) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000e80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e40)={&(0x7f0000000c80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x174, 0x18, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0xe8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'erspan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x19c}, 0x1, 0x0, 0x0, 0x8800}, 0x4044) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f00), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x14, r11, 0x100, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xd0}, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r10, 0xc038586a, &(0x7f0000001100)={r8, &(0x7f0000001000)='fou\x00', 0x4000, &(0x7f0000001040)={@align=0x2, {0x9, 0x8017, 0x7fff, 0x4}}, 0x6, &(0x7f0000001080), &(0x7f00000010c0)=0xffff}) bind$netlink(r12, &(0x7f0000001140)={0x10, 0x0, 0x25dfdbfd, 0x40}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000001180)=@arena={0x21, 0x0, 0x0, 0x1e, 0x40600, 0xffffffffffffffff, 0xc, '\x00', 0x0, r12, 0x2, 0x2, 0x4}, 0x50) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001240), r2) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000001380)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x50, r13, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0x200}}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x50}}, 0x4008004) 1m9.19471671s ago: executing program 0 (id=1303): r0 = socket(0x1e, 0x4, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4101}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001a00010000000000000000000a8080"], 0x24}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000180)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3e8, 0xa0, 0xa0, 0x1d8, 0xa0, 0x138, 0xa0, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x7, @multicast1, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xe, 0x4, 0x2}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x36}, @loopback, 0x1fffffffe, 0xff, 'pimreg1\x00', 'dummy0\x00', {0xff}, {}, 0x2, 0x1, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x4, @remote, 0x4e21}}}, {{@ip={@remote, @multicast1, 0xff, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x6c, 0x2, 0x59}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x3, 0x2}, {0x3, 0x0, 0x4}}}}, {{@ip={@local, @remote, 0xffffff00, 0xff, 'gretap0\x00', 'batadv0\x00', {}, {}, 0x84, 0x1, 0x5}, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x0, 0x46c5, 0x0, 0x0, "2b4e84400af0c61fe4b77d62d90d10d33fce7dc71425d4209d84f086ee827a4b064c417320a5f57e2dcc64d51dd574bd8c47cabfe9f21364d0c1a47f3240e300"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) bind$tipc(r0, 0x0, 0x0) socket(0x1e, 0x4, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4101}, 0x10) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001a00010000000000000000000a8080"], 0x24}}, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000180)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3e8, 0xa0, 0xa0, 0x1d8, 0xa0, 0x138, 0xa0, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x7, @multicast1, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xe, 0x4, 0x2}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x36}, @loopback, 0x1fffffffe, 0xff, 'pimreg1\x00', 'dummy0\x00', {0xff}, {}, 0x2, 0x1, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x4, @remote, 0x4e21}}}, {{@ip={@remote, @multicast1, 0xff, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x6c, 0x2, 0x59}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x3, 0x2}, {0x3, 0x0, 0x4}}}}, {{@ip={@local, @remote, 0xffffff00, 0xff, 'gretap0\x00', 'batadv0\x00', {}, {}, 0x84, 0x1, 0x5}, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x0, 0x46c5, 0x0, 0x0, "2b4e84400af0c61fe4b77d62d90d10d33fce7dc71425d4209d84f086ee827a4b064c417320a5f57e2dcc64d51dd574bd8c47cabfe9f21364d0c1a47f3240e300"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) (async) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) (async) bind$tipc(r0, 0x0, 0x0) (async) 1m9.133826278s ago: executing program 0 (id=1304): unshare(0x22020600) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) listen(r1, 0x0) (async) listen(r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x2000) (async) recvmsg$unix(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x2000) shutdown(r2, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f0000000080)={0x0, 0xfffffffffffffd90, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r5, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r4) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x67, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r6}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x67, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r6}]}, 0x3c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r7, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x4, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x64498ca8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'macvlan1\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc800}, 0x24000844) 1m9.084917685s ago: executing program 2 (id=1305): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff80fe}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, 0x0, &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x2}, 0x20) (async) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000240)="fb90c853a7271f692de35b1630188b322d5bc6c89c03ff08385bd84e6b2dd423d3693a40998e39635cc868506d0ea84bdaf452132052d82b3617b34ab39363bd715c73cc792459f278c104c6d3b5cd31e56f902a5aa3f1d62e44ebb2a9fac42322544d5d706f4e59dc278eb749b92c8f43b8514ec1d85d3d85938a0a3f0dd51226594c6fac785781462482ff740ef85586d9fce3c0d192446ae8c88eee61229446450c7df7a9253c7be6be908ed49f2594993e5220537786640a0cb02c1de74056d6b7360ed682bfc84c31c863f38decbcf3567816bf63758878b4788126a5d639f9f31574fcc78c56fe774062f687f052", 0xf1}], 0x1, 0x1) (async) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x200000010, &(0x7f0000000040)=0x9, 0x65) (async) splice(r0, 0x0, r1, 0x0, 0x10001, 0x8) 1m8.959770192s ago: executing program 2 (id=1306): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@bridge_getvlan={0x18, 0x68, 0x1}, 0x18}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x100000c6}, 0x24000010) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write(0xca, &(0x7f0000000180)="040e0c010310", 0x49) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x1008}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_USE_IFADDR={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000740)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b703000000000000a500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000900)=@generic={0x0, r5}, 0x18) close(0x3) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m8.810533881s ago: executing program 2 (id=1307): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'vlan1\x00', &(0x7f0000000000)=@ethtool_stats={0x1d, 0x1, [0x10]}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x201, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xa, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xad5, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x4, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000440)=r3) write$cgroup_devices(r2, &(0x7f0000000480)=ANY=[], 0xffdd) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_TX_TS(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x28, r0, 0x821, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40010) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, 0x0, 0x4008840) 1m8.578679657s ago: executing program 1 (id=1308): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x10) (async, rerun: 64) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) (rerun: 64) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4001}) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @rand_addr=0x64010101}}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', 0x1}) (async) write$tun(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="0000080001031400e803140008004500005c000000004084b019640101026401010104d2270f005c0000000000000800003c"], 0x6a) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r7], 0x50}}, 0x2) (async, rerun: 32) r8 = epoll_create(0x10001) (rerun: 32) ioctl$BTRFS_IOC_SUBVOL_CREATE(r8, 0x5000940e, &(0x7f00000006c0)={{r0}, "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"}) 1m8.289686469s ago: executing program 2 (id=1310): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000000203010100000000000000000200000008000100010000020900020000000000020000000c000440000000022800054000000002"], 0x38}}, 0x0) socket$kcm(0x10, 0x2, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x68, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff3, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_META={0x24, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1018}, {0x1000}}}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR='H%IP']}]}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000600)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000640), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010023010000340200800200000008000100", @ANYRES32=r4, @ANYBLOB="20bf970391aca688234cda1ed9ceb3b5d253556af00f66c7c88b5060f13883fc5759b7046e5e97854feabdaaaad67d5a579ab7907553b2d1206b48d90da70092fb52e7a4dced949f1761542a9a027412fec9fd5fa50851871f36d1dd32b4ec3795a34e3bf9488e598f5edebbc3ea4fd67ce75f1a0d407c414457f2e8cf70f8f62e1bcb5bf39f815121a9f7bf8ed7d2246333c1744a1af65607ef570af8cc3927efdb5fc071ac3c2dc0f95b4006545247c93e6aeb8684f699148ae7f91d"], 0x1c}}, 0x0) write$nci(r3, &(0x7f0000000740)=ANY=[@ANYBLOB="400003ff00008e254c21fb9e43f8cebbd2fc907a66a69ab3829922cb9b3fa21d6ca2944abe124f52e133f3d49c0c1dda611a9d98722789ce4bf38feed0d7d109bdafa4389fcb"], 0x6) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f00000007c0), 0x4) socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000800)={0x6, 0x8000}, 0x4) sendmsg$kcm(r7, &(0x7f0000000840)={&(0x7f0000000880)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000940)="27030200bdfd28000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21880b", 0xfdef}], 0x1}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r10}, &(0x7f0000000280), &(0x7f0000000340)=r9}, 0x20) 1m8.100839903s ago: executing program 4 (id=1311): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x13, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {}, [@alu={0x4, 0x1, 0x8, 0xa, 0x4, 0xc, 0xfffffffffffffff0}, @map_val={0x18, 0xb, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x9}]}, &(0x7f00000000c0)='GPL\x00', 0xe8e, 0x0, 0x0, 0x41100, 0x62, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000180)=[{0x1, 0x4, 0xb}], 0x10, 0x6}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r0, 0x0, 0x25, 0x4, @void}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x4) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f00000005c0)={r1, &(0x7f00000004c0)='\x00', 0x200480, &(0x7f0000000500)={@align=0x9, {0x6, 0x1fea, 0x6, 0x8000}}, 0x0, &(0x7f0000000540), &(0x7f0000000580)}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x4, &(0x7f00000002c0)=@raw=[@map_idx={0x18, 0xb, 0x5, 0x0, 0xd}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xc}], &(0x7f0000000300)='syzkaller\x00', 0x0, 0xe3, &(0x7f0000000340)=""/227, 0x41000, 0x17, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000000600)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000640)={0x0, 0xe, 0x101, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000680)=[0xffffffffffffffff], &(0x7f00000006c0)=[{0x3, 0x4, 0x5, 0x6}, {0x4, 0x5, 0x3, 0xc}, {0x4, 0x1, 0x6, 0x6}, {0x0, 0x4, 0xd, 0x4}], 0x10, 0x3b6}, 0x94) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000880)={'syztnl2\x00', &(0x7f0000000800)={'ip6gre0\x00', r2, 0x4, 0xee, 0xf0, 0x4, 0x29, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @mcast1, 0x40, 0x7800, 0x8, 0xc4}}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000e80)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000e40)={&(0x7f00000008c0)={0x54c, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [{{0x8}, {0x1a0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x14}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x68}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}]}}, {{0x8, 0x1, r2}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xe156}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r4}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r2}, {0x16c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2ca}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}]}}]}, 0x54c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20010040) (async, rerun: 64) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000001ec0)=@buf={0x1000, &(0x7f0000000ec0)="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"}) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000002000)={'syztnl2\x00', &(0x7f0000001f00)={'gre0\x00', r2, 0x8000, 0x1, 0x80000000, 0x6, {{0x32, 0x4, 0x1, 0x6, 0xc8, 0x66, 0x0, 0x1, 0x4, 0x0, @remote, @multicast1, {[@cipso={0x86, 0x63, 0xfffffffffffffffd, [{0x4, 0x12, "e105dc7aa34675ffe168f72383b0b49f"}, {0x5, 0x12, "d98d30b8703a0fd305611a3d91f494d9"}, {0x0, 0x11, "a59afd5e40519f5394a927ad24ff6d"}, {0x0, 0xc, "cdd58e4905f911684779"}, {0x0, 0x12, "aae443f3ddd25661212ce84c78f4657a"}, {0x0, 0x3, '~'}, {0x6, 0x7, "78e64c6ec9"}]}, @ssrr={0x89, 0xb, 0x90, [@private=0x806, @multicast1]}, @timestamp_addr={0x44, 0x44, 0x14, 0x1, 0xd, [{@loopback, 0xfffffffa}, {@rand_addr=0x64010100, 0xab}, {@rand_addr=0x64010100, 0x9}, {@private=0xa010102, 0x7}, {@remote, 0x571}, {@loopback, 0x45ec8032}, {@private=0xa010101, 0xe2cc}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x9}]}]}}}}}) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002080), r3) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000002340)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002300)={&(0x7f00000020c0)={0x234, r6, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x88, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf4f8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xc20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2800000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x93}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_MEDIA={0xb8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x35}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc9bf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x743b}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x20000000}, 0x200000c0) (async) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0x8) (async) sendto$packet(r3, &(0x7f0000002380)="d1e0c77c0fd3d92c97b571979f0781439c553e99ca222813793f3dfb3520cf1f5a8a4b089ace59a4e27535c622359b80cd7ddb3b8f040d880c495ae3f411787a294631d1c73ddcabb0488811a112b371c2b2825c1e855530877e785898a1122fa370b6d6a39411e2bd225b6d51464f127c7dd94f8a54f317aa702c45696c6a46b3da09ed5ffd5f6dfa9446d40d57e5c9ef0a3f74b5ca756124956a0e100da1314e061f6711c0b66566421de171cd47ad9b4d6ec80b011d11bd7dc3e4826ecd0187f9634ff275c3c5b93bd67cc6ff3ec8560549001ea7097528c8924d23", 0xdd, 0x4040000, &(0x7f0000002480)={0x11, 0xf8, r2, 0x1, 0x3, 0x6, @local}, 0x14) accept4$nfc_llcp(r3, &(0x7f00000024c0), &(0x7f0000002540)=0x60, 0x80800) (async) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000002680)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002640)={&(0x7f00000025c0)={0x64, 0x13, 0xa, 0x102, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, 0x64}}, 0x4000000) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000026c0)=@base={0xf, 0xffffff7f, 0x0, 0x1, 0x12220, 0xffffffffffffffff, 0x8, '\x00', r5, r3, 0x1, 0x0, 0x5, 0x0, @void, @value, @value=r3}, 0x50) (async, rerun: 32) r7 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r7, &(0x7f0000002b00)={&(0x7f0000002740)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000002a40)=[{&(0x7f00000027c0)=""/205, 0xcd}, {&(0x7f00000028c0)=""/110, 0x6e}, {&(0x7f0000002940)=""/197, 0xc5}], 0x3, &(0x7f0000002a80)=""/82, 0x52}, 0x2062) getsockopt$inet_tcp_buf(r1, 0x6, 0x1c, &(0x7f0000002b40)=""/164, &(0x7f0000002c00)=0xa4) (async, rerun: 64) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000002c40)={r3}) (rerun: 64) setsockopt$bt_hci_HCI_TIME_STAMP(r8, 0x0, 0x3, &(0x7f0000002c80)=0x2, 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = accept$inet6(r8, &(0x7f0000002cc0)={0xa, 0x0, 0x0, @local}, &(0x7f0000002d00)=0x1c) connect$inet6(r9, &(0x7f0000002d40)={0xa, 0x4e23, 0x80000001, @loopback, 0x5}, 0x1c) (async) r10 = socket$kcm(0x29, 0x0, 0x0) ioctl$XFS_IOC_READLINK_BY_HANDLE(r9, 0xc038586c, &(0x7f0000002e80)={r10, &(0x7f0000002d80)='\x00', 0x80, &(0x7f0000002dc0)={@_ha_fsid={[0x4, 0x2]}, {0x401, 0x6, 0x7ff, 0x5}}, 0x49, &(0x7f0000002e00), &(0x7f0000002e40)=0x7}) ioctl$sock_inet6_SIOCDELRT(r9, 0x890c, &(0x7f0000002ec0)={@mcast2, @private1, @mcast2, 0xe05e, 0x6000, 0x1ff, 0x0, 0x3, 0x10, r2}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000002f40), 0x20200, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GET(r11, &(0x7f0000003180)={&(0x7f0000002f80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003140)={&(0x7f0000003000)={0x140, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x140}, 0x1, 0x0, 0x0, 0x4004854}, 0x20000010) 1m7.895609593s ago: executing program 0 (id=1312): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x2}]}}, 0x0, 0x26}, 0x28) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1001}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close(r7) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000340)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0xfffffffa, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x6}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x0, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x8001, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x23e, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0xcfc}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0xde4, 0x2}, {0x0, 0x3, 0x2, 0x1, 0x2, 0x9}, {0xffffffff, 0x1, 0xc, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x8, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x6}, {0x10002, 0x5, 0x7, 0xac, 0xf, 0x8}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x2}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x1, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0xfcf6, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x40000000, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x13, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x9}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x9, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0x0, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x16, 0x5, 0xffffff01, 0xfff}, {0x7, 0x205, 0xffffff7f, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0x7fffffff, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x10001, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x8}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x80000002}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xbc, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x8002, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x7, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xfffffffb, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x9, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x80007, 0x104, 0x78d, 0xffffcff7, 0x4c0c}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80004, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x5b984eb6d5c686a1, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r8, &(0x7f0000001300)={&(0x7f0000001340)=@xdp={0x2c, 0x8, r6, 0x1109}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001400)='7', 0x1}], 0x1}, 0x20000885) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0xf, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x814}, 0x4004814) 1m7.345063445s ago: executing program 4 (id=1314): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x6d5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r3, 0x29, 0x21, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x60}}, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) 1m7.30048319s ago: executing program 2 (id=1315): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000440)={0x1d, r2}, 0x10) (async) sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0xfda7, &(0x7f00000004c0)={&(0x7f0000000500)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6bcd41fd8"}}, 0x48}, 0x1, 0x0, 0x0, 0xc000}, 0x410) sendmsg$can_bcm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="01000000d90400000400000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="000000000100000000000d006ec4522052ba3120f06d"], 0x48}, 0x1, 0x0, 0x0, 0x40044}, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01"], 0x17) (async) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x41, 0x4, 0x2}, 0x10) (async) nanosleep(&(0x7f0000000200)={0x0, 0x10000000}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) bind(r3, &(0x7f0000000300)=@generic={0x1f, "0000000000000100"}, 0xa) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, r6, 0x100, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x200448d0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r5, 0x215eb000) (async) socket$unix(0x1, 0x1, 0x0) (async) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x4c, 0x14, 0x101, 0x70bd27, 0x25dfdbfd, {0x1, 0x9, 0x8, 0x10, {0x4e21, 0x4e24, [0x4, 0xfffd, 0xb, 0xc3], [0x6, 0x0, 0x40000000, 0x7], 0x0, [0x1, 0x7ffffffb]}, 0x9, 0xc7}}, 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r4) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000800), r0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0x84, r9, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x3a}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x200}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_TOKEN={0x8}]}, 0x84}, 0x1, 0x0, 0x0, 0x440c0}, 0x44) (async) sendmsg$NL80211_CMD_SET_BSS(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, r8, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0xf}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x80) listen(r3, 0x1) 1m7.194378045s ago: executing program 3 (id=1316): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000001c0)={0x0, 0x79, "9d4625107f756ac4f28f3b65ca2a123101464bd790a231ee31b0947ecc67ef0450b8eae8011289a0e1d5fa7871e00c4d5a3d895136a9e6a492dec1d9f765880a197b833d2fc13ca5d64e42253f9ba8eb497a112c0efeffc1cd87e8e39ec2c9f2074d58d6e55a1a6474d713162991c1946946cd44281bc0f0f0"}, &(0x7f0000000280)=0x81) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000300)=ANY=[], 0x32600) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYRES16=r2], 0x1c}}, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000340)=""/185, &(0x7f0000000400)=0xb9) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r3, 0xc0805841, &(0x7f0000000100)={0x8, 0x7fff, 0x8, 0x96c5, 0x8}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'tunl0\x00', 0x0}) sendto$packet(r4, &(0x7f00000004c0)="05031600d3", 0x5, 0x4, &(0x7f0000000500)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000000)=0x3, 0x4) 1m6.83106422s ago: executing program 1 (id=1317): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x3bdc01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0x800}) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000003c0)={0x0, 'syzkaller1\x00', {0x2}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r3, &(0x7f0000000800)={0x1f, 0x4, @none, 0x0, 0x2}, 0xe) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000840)={r3, r4, 0x4, 0x0, 0x0, 0xe, 0x0, 0x5f, 0x1, 0x81, 0x1, 0x2, 'syz0\x00'}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="04000000", @ANYRES16=r6, @ANYBLOB="050200000000fddbdf251200000008000700010000001800018014000200626f6e645f736c6176655f3100000000"], 0x34}}, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r0, 0x400454cd, 0x337) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_RCVMTU(r7, 0x112, 0xf, &(0x7f00000000c0)=0x2, &(0x7f0000000100)=0x2) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000400)={0xffffffffffffffff}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000004c0)={0x0, 0x24, &(0x7f0000000500)={&(0x7f0000000900)=@deltaction={0x0, 0x31, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'connmark\x00'}}, {0x0, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x2}}, {0x0, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x4}}, {0x0, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'skbedit\x00'}}, {0x0, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x400}}]}, @TCA_ACT_TAB={0x0, 0x1, [{0x0, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'bpf\x00'}}, {0x0, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'mirred\x00'}}, {0x0, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'bpf\x00'}}, {0x0, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'vlan\x00'}}]}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x0, 0xf}, {}, {0x11, 0x10}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x80040000}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c014) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f00000006c0)={'syztnl1\x00', &(0x7f0000000640)={'ip_vti0\x00', r11, 0x7800, 0x0, 0xede, 0x0, {{0x10, 0x4, 0x1, 0x9, 0x40, 0x67, 0x0, 0x10, 0x4, 0x0, @multicast2, @empty, {[@timestamp_prespec={0x44, 0x24, 0xac, 0x3, 0x1, [{@loopback, 0xffffffff}, {@multicast2, 0x3}, {@dev={0xac, 0x14, 0x14, 0x43}, 0x7}, {@empty, 0x80000000}]}, @generic={0x0, 0x8, "db91cf93f927"}]}}}}}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r7}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x275a, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r13, &(0x7f00000001c0)=0xffffffffffffffff, 0x12) sendfile(r13, r12, 0x0, 0xbdc4) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r12, 0x84, 0x7, &(0x7f0000000200), 0x4) 1m6.783593715s ago: executing program 4 (id=1318): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'syzkaller0\x00', &(0x7f0000000040)=@ethtool_drvinfo={0x3, "44636164e0e822f44101b2ce79e90176a8e3adbf764b7ba17c1016504dec6a63", "da5bb6a4a942cdc6bdc47ff0f22d6184588ae4d2da64460da5561dfa44692394", "a406283f41927f92a0019f3806b06fce78c7a4440b1a28b93ab4f70bea73867c", "8766f169d963263bba439f759eaf31c660c0915cff80599597593089467ed449", "d7abe459cd38e13ee5ca8d41ab581190201215e2fa446427aed7ed3224e30c9e", "c40c1181abd6e74c59533af9", 0x7, 0x2, 0x2, 0x1, 0x9}}) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_RX(r3, 0x11a, 0x2, &(0x7f0000000180)=@ccm_128={{0x7}, "41b39f1addda7779", "5e4b4002d38147a3a6588fa6a5176bea", "9da4ed68", "d4d94f2b6891b44b"}, 0x28) (async) ioctl$XFS_IOC_GOINGDOWN(r3, 0x8004587d, &(0x7f00000001c0)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'bridge_slave_1\x00', 0x2}) (async, rerun: 64) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f0000000240), &(0x7f0000000280)=0x8) (async, rerun: 64) socket$nl_rdma(0x10, 0x3, 0x14) (async, rerun: 64) r4 = socket$nl_audit(0x10, 0x3, 0x9) (rerun: 64) sendmsg$AUDIT_SIGNAL_INFO(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x10, 0x3f2, 0x100, 0x70bd28, 0x25dfdbfc, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8040}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)=@ipv6_newaddr={0x88, 0x14, 0x200, 0x70bd2d, 0x25dfdbfd, {0xa, 0x10, 0x3, 0xff}, [@IFA_ADDRESS={0x14, 0x1, @remote}, @IFA_RT_PRIORITY={0x8, 0x9, 0x5}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x6, 0x6, 0x2}}, @IFA_LOCAL={0x14, 0x2, @private0}, @IFA_RT_PRIORITY={0x8, 0x9, 0x10001}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_CACHEINFO={0x14, 0x6, {0x4, 0xc, 0x9, 0x8}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0x10004}, 0x10) (async) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000540), &(0x7f0000000580)=0x4) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r7, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, 0x3e9, 0x300, 0x70bd27, 0x25dfdbfb, {0x29, 0x0, 0x2, r1, 0x7, 0x6, 0x7, 0x0, 0x0, 0xe, 0x7fffffff}, ["", "", "", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f00000006c0)='wg0\x00', 0x4) sendmsg$AUDIT_USER_AVC(r7, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x70, 0x453, 0x0, 0x70bd2d, 0x25dfdbff, "c7913dc340408e37f5b2815dacefb377735d63d7c88e73e61160e32dd6f5e44661d39fb3a58279c0804bcb0014d55390f19b4fc71485859de54a1ec22938c33208a20ef5723867b6e1a24ea02fd007339ca26f3d2d132fcaa6b0e72052d3", ["", "", "", "", "", "", ""]}, 0x70}, 0x1, 0x0, 0x0, 0x20000004}, 0x1) (async) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000840)='batadv_slave_0\x00', 0x10) (async) ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f0000000880)={'team_slave_1\x00', {0x2, 0x0, @empty}}) r8 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT(r8, 0x89e1, &(0x7f00000008c0)={@rand_addr=0x64010100, @multicast1}) (async, rerun: 64) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r6, 0xc0385868, &(0x7f0000000a00)={r5, &(0x7f0000000900)='.%)/{:#\x00', 0x200000, &(0x7f0000000940)={@_ha_fsid={[0xff, 0xe]}, {0x2b, 0x3, 0xb, 0x80000001}}, 0x7f, &(0x7f0000000980), &(0x7f00000009c0)=0x8}) (rerun: 64) sendmsg$DEVLINK_CMD_TRAP_GET(r9, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40000) bind$bt_hci(r9, &(0x7f0000000b80)={0x1f, 0x2, 0x3}, 0x6) (async, rerun: 32) ioctl$sock_bt_bnep_BNEPCONNADD(r9, 0x400442c8, &(0x7f0000000bc0)={r8, 0xfffffff8, 0x0, "9d2191630c5ab90e02e97548c710a1348520839fea812b1287ad22e9e57ee2bd421e9715e9029632b0dc1a906e2d628d54b130b4b89bec0729ab88840a74"}) (async, rerun: 32) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r9) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x34, r10, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0xac, 0x27a1]}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1199}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x240080a0}, 0x14) 1m6.695639918s ago: executing program 3 (id=1319): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) recvfrom$inet(r3, &(0x7f00000002c0)=""/134, 0x86, 0x12001, 0x0, 0x0) (async) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000140)=0x1, &(0x7f00000001c0)=0x4) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x4}, [@CGW_SRC_IF={0x8, 0x9, r1}, @CGW_DST_IF={0x8, 0xa, r1}]}, 0x24}}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0600000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r4}, 0x4) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000880)={0x0, @multicast1, @initdev}, &(0x7f00000008c0)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)=@delqdisc={0x2c, 0x25, 0x10, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x10, 0xa}, {0x0, 0xc}, {0xfff2, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x1, 0xda}}]}, 0x2c}}, 0x20000040) (async) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r6, &(0x7f0000000440)={0x0, 0x45, 0x0, 0x0, &(0x7f0000000480)=[@sndrcv={0x30, 0x84, 0x1, {0x3, 0x0, 0x201}}, @init={0x18, 0x84, 0x0, {0x9, 0x7, 0x9, 0x434}}], 0x48}, 0x0) (async) pipe(&(0x7f0000000500)={0xffffffffffffffff}) sendmsg$kcm(r7, &(0x7f0000002580)={&(0x7f0000000540)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e21}}, 0x80, &(0x7f0000002440)=[{&(0x7f00000005c0)}, {&(0x7f0000000600)="a90c5d0f72cc9bbbb51f4b8cf06e5a0f1771c73b6779e79ab68fb27c05d0578afb09f93f9abc9d17120290cc1225fa664f958a70ba2562454643195eb54252cb8d93713cabccc4f03c", 0x49}, {&(0x7f0000000680)="d066f723d322dc182608ffd2091962b54f32bea734bc4d003571888ca08deaf1d0adae856e13a8b8f9f332a783bd599863814c4944e8e5ffeab5eebed7252757ac320abc2167605fe37fc00ba0a4ba95a7ecc5feb55f5c9a408459632e67da1df94002e36e6931eb793fde15f54a15574089b3d3817ce5f35ec16aab05b41cf886acef002135325f99210a322eeae8bc3c95f4c9e7e5508e72f62a878f5eae6798723a2a1ba9c73effa18316e89f15562cd7ce1a067a489e491fd4626046b964bf6742", 0xc3}, {&(0x7f0000000780)="cbba15d67cda3725cda926b93d9f681af9ee9be0acfd54cc976e6f9b5459c1312e9c51f102a9a548c2b1e012582e8b34639a5550c287c450d59ac824b2815be6bf80fee3f0435bf94b84076209b951a2aeae7c2c8316e53039fca78fed63ed7591523cc69c43bfa3d26f0c8ce3d03c23869ab9c0ec907599ca4e31305c1c3b2f45a00e3302753b5d2ca4616a47076eb1693c16bfb6b109bb691c35b711d17ab8a7106f4d95f7d85eafd6ac481661c63300b0e365de20fc2ac0d20f5e64afba4bd3d48b3ee22885088b6b703308dbe6448f24", 0xd2}, {&(0x7f00000012c0)="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", 0x1000}, {&(0x7f00000022c0)="b77207f460a39f6446dd82159a9f51705785f2deebc595939714431739ffa711799bddf3286b2fc2276864c5954687fffaad737f5891104043289d540ed26564b484d41c7f7ce8722a17b3a84848f51898326cac6b1f2639e657abe97769ffb4bc0269860bf4ff86d2355cab4ea31e402cc795660541e99e19e0661bd976a1b3d83161b8fb0f4c8a22297694e2acfb8972155111f760cd60dad85b869c7d63a281d473e620b08423d68b38c30793fbd469b7538375632f67", 0xb8}, {&(0x7f0000002380)="002a54ee91152e88f05d28381bd3cb1f7d7b15411123d1bfbd7de9d53c26c05d94ca224b45c40f9dd3cdbe296e00fc74f800bba5fc3897436d60d981027c0416ea9a93c50cdd8e4e93144f85d189301c5d65a91f5be48f7aba280d4fc6d6ec5e5df68b982d65e006deaa14386baab8e85d22a93c352e96252593dbd9fae39bc850bc14ba35ba5bb67290f89d1c6d5b14", 0x90}], 0x7, &(0x7f00000024c0)=[{0x88, 0x104, 0x3, "7921b835858a984ed40ccd719c4eb8d814f0ea65764ba9d548904943b5e225dde0cf5ba4cc5a3434902c6381555201ba20b3f2a8e8ef7461bb4c7013e14048d66e2b87f9c484a0351947734241779f8e31023d14a9323b2c4bdba1ffebc56888787976514a2046d4eb781e0ebb4b5080e49be758b246"}], 0x88}, 0x8800) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x3c}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x7, 0x1, 0xd, 0x0, 0x0, {0x5, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES8, @ANYBLOB="0000000000000000690200000000000095"], &(0x7f0000000d40)='syzkaller\x00'}, 0x94) 1m6.680116417s ago: executing program 0 (id=1320): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRES8=r0, @ANYBLOB="bd374dcad7d512a708ebc3bcdcba455a8afc4bb1c9a80ba6e8bb782ab30913d3b3c06a84e83f5adf41c20eb1c787af0651eb58", @ANYBLOB="0000000000000000500012800e0001006970366772657461700000003c000280140007002001000000000000000000000000000014000600fe80000000000000000000000000001508000100", @ANYRES32, @ANYBLOB], 0x70}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100200, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'virt_wifi0\x00', 0x1}) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f00000000c0)) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001d0001"], 0x14}}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) socket$packet(0x11, 0x2, 0x300) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRES8=r0, @ANYBLOB="bd374dcad7d512a708ebc3bcdcba455a8afc4bb1c9a80ba6e8bb782ab30913d3b3c06a84e83f5adf41c20eb1c787af0651eb58", @ANYBLOB="0000000000000000500012800e0001006970366772657461700000003c000280140007002001000000000000000000000000000014000600fe80000000000000000000000000001508000100", @ANYRES32, @ANYBLOB], 0x70}}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100200, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'virt_wifi0\x00', 0x1}) (async) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f00000000c0)) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001d0001"], 0x14}}, 0x0) (async) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) (async) 1m6.287679736s ago: executing program 3 (id=1321): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'bond_slave_1\x00', &(0x7f00000001c0)=@ethtool_regs={0x4, 0x7f, 0xac, "fae76f22a004bf0bc2a1ba2e9e682e95ed931904ac5b12174725717569ff4116e833e409f070dcbd2ec35484bb4cb982a8dbdd686fed88e5fdc7038392b4697b68c311df4856c1552b7a34468110765dbbaac7d82a4245f67ab92c9f5df29d5cf8848ee2d4d3e8021d054b101bf12b45a2626d6cc457bce20a22e5af282203757a6d2d07bf7832f578802600d1013cb01787761db6aaa19a0f640accbe812eb552a2f2a30793d7222018d944"}}) getsockopt$sock_int(r0, 0x1, 0x2a, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x52}}], 0x2, 0x0) 1m6.179510761s ago: executing program 0 (id=1322): r0 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg2\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000540)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b36, &(0x7f0000000580)={'wlan0\x00'}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x56) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x1, @loopback, 0x3}, 0x1c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000440)={0x0, 0x8, 0x101}, &(0x7f0000000480)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000004c0)={r3, 0x3}, 0xc) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000300), 0x3c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, "57d08e19a8dd7ab9", "7023281fdec6c209baa0d1f6e55d37cd9b4029076373d35b11c31261fc69b66f", "bc40dd55", "141f862748859918"}, 0x38) setsockopt$inet6_tcp_int(r1, 0x11a, 0x2e, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x10001, 0x7fff, 0x82, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x34, 0x68, 0x200, 0xffffffff, 0x0, {0x2, 0x0, 0x0, 0x0, 0x6}}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={0x2, @in6={{0xa, 0x4e23, 0xa5b, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}}, &(0x7f00000001c0)=0x84) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @mcast2, 0x8}, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r0) setsockopt$inet_sctp_SCTP_ASCONF_SUPPORTED(r0, 0x84, 0x80, &(0x7f0000000200)={r4, 0x9}, 0x8) 1m6.127585449s ago: executing program 3 (id=1323): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x16, &(0x7f0000000b40)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa00000000000001503000008004e002d3501000000000095004100000000006916000000000000bf67000000000000350605000fff07206706000014000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b33e0f32f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3cd3cedd01fdc59589ea6bacde1e40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8b0100010000000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7a7216f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbe00000000000000000000000000fdba1133066c4a21a7149f32"], &(0x7f00000013c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000001400), 0xffffffffffffffd2}, 0x48) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0), 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180000007a000107000000000000000007"], 0x18}], 0x1}, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f0000000100)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000180), 0x12) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000425bd7000fcdbdf040200010008003f0036000000080061"], 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x40, r6, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="140100000000000000bd7000000000002a0000003cdcd76a53d6ffbccfd860494ca38f86c062c820f71b4ec492a4318febe6bedc"], 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={0x14, r1, 0x1, 0x0, 0x0, {{0x2}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x80041}, 0x0) 1m6.020241454s ago: executing program 1 (id=1324): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x3, 0x0, 0x0, @binary="feffffff"}]}, 0x1c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[], 0xfc}}, 0x86) r2 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x4}}, 0x1c) getsockopt$inet6_int(r2, 0x29, 0x18, 0x0, &(0x7f0000000280)) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x802}, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x3, 0x0, 0x0, @binary="feffffff"}]}, 0x1c}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[], 0xfc}}, 0x86) (async) socket$inet6(0xa, 0x2, 0x3a) (async) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x4}}, 0x1c) (async) getsockopt$inet6_int(r2, 0x29, 0x18, 0x0, &(0x7f0000000280)) (async) 1m5.97385672s ago: executing program 4 (id=1325): unshare(0x64000600) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800dd8d26bd70000db094fca50fa3189dbbfcdbdf2502141000fd0000060022002008000f00fe070000"], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e20, @broadcast}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0xff, 0x8, 0x401}) 1m5.935337053s ago: executing program 2 (id=1326): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r0, &(0x7f0000000340)="a3e2767fb68f6329aacda76f2071b10942e3c57b9d1d2a54e15b9236c7532f8d8959e8a4c5dd438f8663228b71d41c5083d55c85da88875cda7471e3ad86cf8dfe174bb69b66fbe6ffc39e77835c737f63a52d0ad1b20bd6122e69568b2816f0530acf026992edd71ff886ab914877753463511a1733b45dae9b98465da8151f8adc19770f205274f295439fc5b9555906f8f60ad7b2482fd1128154cd88dab96fa469c626b4594dfed647ee94488a10273ffc178450d5813aa624559b2d504936bdbf221cec629248bd0bd5f4c40a414bf1f9", &(0x7f0000000440)=""/195}, 0x20) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000f40), &(0x7f0000000f80)=0x8) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f00000010c0)={'sit0\x00', &(0x7f0000001080)={@loopback, @rand_addr=0x64010101, 0x1f, 0xb}}) r3 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000001300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "7f000001"}]}]}}}, {0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_TYPE={0x8}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x128}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r7, &(0x7f0000001500)="01020304", 0x4, 0x8, &(0x7f0000001480)={0x2, 0x1234, @multicast2}, 0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r8, &(0x7f00000014c0)={0x2, 0x1234, @local}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0xfe}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000001100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000011c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001280)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x81}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000dc0)=@gettfilter={0x44, 0x2e, 0x200, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x9, 0x1}, {0xa, 0x5}, {0xe, 0xfff2}}, [{0x8, 0xb, 0x400}, {0x8, 0xb, 0x5e}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x2145}]}, 0x44}}, 0x0) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000580)="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", 0x1fe}, {&(0x7f0000000780)="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", 0x5a2}], 0x2) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x9, &(0x7f0000000d40)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffffbfa300000000000007030000f0ffffff18110000", @ANYRES32=r0, @ANYBLOB="0000020000000000b7040000ce85ce9b02000217a8c30400000085000000020000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m5.707222328s ago: executing program 1 (id=1327): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r1, 0x1, 0xb, &(0x7f0000000400)=""/193, &(0x7f0000000500)=0xc1) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000540)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000940)={0x44, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x26}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}]}]}, 0x44}}, 0x0) listen(r2, 0xc) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000680)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x4000090) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000900)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="016695eda86b1684ba1cdb94f247f568ab33992290cb3f58c89046d431e74d002cbd7000ffdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001f40)=@bpf_lsm={0x1d, 0x24, &(0x7f0000000b80)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x1ab5a039, 0x0, 0x0, 0x0, 0x3ff}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @exit, @generic={0x8, 0x6, 0xf, 0x9, 0x2}, @map_fd={0x18, 0x3}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffff8}, @ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @tail_call], &(0x7f0000000cc0)='GPL\x00', 0x7fffffff, 0x0, &(0x7f0000000d00), 0x41100, 0x7556e7194b82d5cd, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001e40)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001e80)={0x5, 0x1, 0x401, 0x7}, 0x10, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000001ec0), &(0x7f0000001f00)=[{0x0, 0x3, 0x5, 0x1}, {0x4, 0x5, 0xc, 0xc}, {0x2, 0x3, 0x10, 0x3}], 0x10, 0x4}, 0x94) r8 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) r9 = socket$inet(0x2, 0x3, 0x6) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000000140)={0xa, 0xe22}, 0x1c) connect$inet6(r10, &(0x7f0000000240)={0xa, 0x0, 0x3, @mcast1, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r10, 0x84, 0x7, &(0x7f0000000280)={0xfffffffc}, 0x4) ioctl$sock_inet_SIOCSARP(r9, 0x8955, &(0x7f00000000c0)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xff}}, {0x1, @broadcast}, 0x4a, {0x2, 0x0, @dev}, 'veth1_to_bridge\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1e, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000711200000000000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) ioctl$sock_inet_SIOCSARP(r8, 0x8953, &(0x7f00000001c0)={{0x2, 0x0, @dev}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x4a, {0x2, 0x0, @broadcast}, 'syz_tun\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="a0010000100001000000000000000000fc010000000000000000000000000000000000000000000000000000000000000000ecdf00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017"], 0x1a0}}, 0x0) 1m5.684156292s ago: executing program 0 (id=1328): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{0x1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000780)={'tunl0\x00', &(0x7f0000000d40)={'syztnl2\x00', 0x0, 0x700, 0x10, 0x8, 0x6, {{0x24, 0x4, 0x3, 0x4, 0x90, 0x64, 0x0, 0x6, 0x2f, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x26}, {[@cipso={0x86, 0x18, 0x2, [{0x0, 0xc, "eaa0a7f84d7092aef780"}, {0x1, 0x6, "cff593f4"}]}, @lsrr={0x83, 0x2b, 0x89, [@local, @dev={0xac, 0x14, 0x14, 0xc4}, @loopback, @loopback, @local, @local, @rand_addr=0x64010102, @local, @broadcast, @broadcast]}, @timestamp={0x44, 0x1c, 0x42, 0x0, 0x4, [0xaad, 0xd0d7, 0xffffffff, 0x6, 0x4, 0x8]}, @timestamp_addr={0x44, 0x1c, 0x46, 0x1, 0xe, [{@broadcast, 0x8af}, {@multicast1, 0x39c}, {@remote, 0x20000007}]}]}}}}}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000a000000000000000000000d000000040c0000000100cbce2beab47a0c8d40e99540fda32f000604000000050000006b010000002e5f61610030dc3000ab8dceaa0261a864ea6a7bdb419c3cbcffd72f8eb821eb439ea86661dc302474ff73a19def1d70e0c25c5e7f10ed52da6956226f76ffa4a3162184ba453d8fbb5a677588d96cc3696b16cc8fed1a954e98447e61450ca46047785031d1ee6c1a"], 0x0, 0x42}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0xf, &(0x7f0000000980)=ANY=[@ANYBLOB="87"], &(0x7f0000000a40)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000a80)=[{0x0, 0x2, 0x8, 0x6}], 0x10, 0x10001}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@arena={0x21, 0x0, 0x0, 0x20, 0x400, r4, 0x43, '\x00', r5, r6, 0x2, 0x1, 0x2}, 0x50) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newtfilter={0x2c, 0x2c, 0x601, 0x0, 0x80, {0x0, 0x0, 0x0, r7, {0xb, 0x3}, {0xfff1, 0xf}, {0x4}}, [@TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48840}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', @link_local}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r8, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)={0x24, r9, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffff}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004) r10 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCSIFBR(r10, 0x8941, &(0x7f0000000100)=@get={0x1, 0x0, 0x7fffffffffffffff}) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r12 = socket$inet6(0xa, 0x1, 0x0) r13 = socket(0x10, 0x3, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000640)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000e00)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r15, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3df], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f0000000280)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r12, &(0x7f0000000380)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) pipe(&(0x7f0000000c40)) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 1m5.653622879s ago: executing program 3 (id=1329): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRESHEX=r0, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x4aa6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x80) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r4, 0x0, 0xd1, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x0, 0x0, 0x3206, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x33}, @remote}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r3, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001640)=[0x0], 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRESHEX=r0, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x4aa6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x80) (async) socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$MRT_FLUSH(r4, 0x0, 0xd1, 0x0, 0x0) (async) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x0, 0x0, 0x3206, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x33}, @remote}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r3, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001640)=[0x0], 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) 47.486229464s ago: executing program 3 (id=1330): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'lo\x00', &(0x7f0000000080)=@ethtool_rxfh_indir={0x39}}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x48}}, 0x0) 0s ago: executing program 32 (id=1328): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{0x1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000780)={'tunl0\x00', &(0x7f0000000d40)={'syztnl2\x00', 0x0, 0x700, 0x10, 0x8, 0x6, {{0x24, 0x4, 0x3, 0x4, 0x90, 0x64, 0x0, 0x6, 0x2f, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x26}, {[@cipso={0x86, 0x18, 0x2, [{0x0, 0xc, "eaa0a7f84d7092aef780"}, {0x1, 0x6, "cff593f4"}]}, @lsrr={0x83, 0x2b, 0x89, [@local, @dev={0xac, 0x14, 0x14, 0xc4}, @loopback, @loopback, @local, @local, @rand_addr=0x64010102, @local, @broadcast, @broadcast]}, @timestamp={0x44, 0x1c, 0x42, 0x0, 0x4, [0xaad, 0xd0d7, 0xffffffff, 0x6, 0x4, 0x8]}, @timestamp_addr={0x44, 0x1c, 0x46, 0x1, 0xe, [{@broadcast, 0x8af}, {@multicast1, 0x39c}, {@remote, 0x20000007}]}]}}}}}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000a000000000000000000000d000000040c0000000100cbce2beab47a0c8d40e99540fda32f000604000000050000006b010000002e5f61610030dc3000ab8dceaa0261a864ea6a7bdb419c3cbcffd72f8eb821eb439ea86661dc302474ff73a19def1d70e0c25c5e7f10ed52da6956226f76ffa4a3162184ba453d8fbb5a677588d96cc3696b16cc8fed1a954e98447e61450ca46047785031d1ee6c1a"], 0x0, 0x42}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0xf, &(0x7f0000000980)=ANY=[@ANYBLOB="87"], &(0x7f0000000a40)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000a80)=[{0x0, 0x2, 0x8, 0x6}], 0x10, 0x10001}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@arena={0x21, 0x0, 0x0, 0x20, 0x400, r4, 0x43, '\x00', r5, r6, 0x2, 0x1, 0x2}, 0x50) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newtfilter={0x2c, 0x2c, 0x601, 0x0, 0x80, {0x0, 0x0, 0x0, r7, {0xb, 0x3}, {0xfff1, 0xf}, {0x4}}, [@TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48840}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', @link_local}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r8, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)={0x24, r9, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffff}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004) r10 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCSIFBR(r10, 0x8941, &(0x7f0000000100)=@get={0x1, 0x0, 0x7fffffffffffffff}) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r12 = socket$inet6(0xa, 0x1, 0x0) r13 = socket(0x10, 0x3, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000640)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000e00)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r15, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3df], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f0000000280)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r12, &(0x7f0000000380)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) pipe(&(0x7f0000000c40)) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.185' (ED25519) to the list of known hosts. [ 79.353107][ T5621] cgroup: Unknown subsys name 'net' [ 79.465323][ T5621] cgroup: Unknown subsys name 'cpuset' [ 79.474351][ T5621] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.143306][ T5621] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.951595][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.958639][ T5647] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.959273][ T5647] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.961134][ T5647] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.970042][ T5647] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.972561][ T5647] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.973246][ T5647] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.975347][ T5648] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.977365][ T5648] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.983323][ T5648] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.985333][ T5648] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.988341][ T5649] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.989048][ T5649] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.992907][ T5650] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.994719][ T5650] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.996845][ T5650] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.997416][ T5649] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.999493][ T5648] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.999819][ T5648] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.005546][ T5649] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.008531][ T5648] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.011576][ T5648] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.029534][ T5646] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.033181][ T5637] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.042945][ T5649] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.136019][ T5631] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.165335][ T5631] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.178660][ T5636] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 86.178846][ T5632] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 86.184691][ T5633] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 86.206479][ T5631] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.400663][ T5634] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 86.557668][ T5631] infiniband rxe0: set active [ 86.559891][ T5631] infiniband rxe0: added rxe_eth0 [ 86.590251][ T5631] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 86.590294][ T5631] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 86.590333][ T5631] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 86.640579][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.679107][ T5631] RDS/IB: rxe0: added [ 86.679898][ T5631] smc: adding ib device rxe0 with port count 1 [ 86.680006][ T5631] smc: ib device rxe0 port 1 has no pnetid [ 86.707710][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.728429][ T5631] rxe_eth0 speed is unknown, defaulting to 1000 [ 87.112215][ T53] Bluetooth: hci4: command tx timeout [ 87.112340][ T53] Bluetooth: hci1: command tx timeout [ 87.112420][ T53] Bluetooth: hci2: command tx timeout [ 87.112492][ T53] Bluetooth: hci0: command tx timeout [ 87.169472][ T5631] rxe_eth0 speed is unknown, defaulting to 1000 [ 87.192597][ T5637] Bluetooth: hci3: command tx timeout [ 87.655295][ T5631] rxe_eth0 speed is unknown, defaulting to 1000 [ 87.656518][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.657152][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.657308][ T5633] bridge_slave_0: entered allmulticast mode [ 87.659341][ T5633] bridge_slave_0: entered promiscuous mode [ 87.746408][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.746506][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.746622][ T5633] bridge_slave_1: entered allmulticast mode [ 87.749589][ T5633] bridge_slave_1: entered promiscuous mode [ 87.874203][ T5636] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.874318][ T5636] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.874737][ T5636] bridge_slave_0: entered allmulticast mode [ 87.877678][ T5636] bridge_slave_0: entered promiscuous mode [ 87.917327][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.917688][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.917791][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.917931][ T5632] bridge_slave_0: entered allmulticast mode [ 87.921059][ T5632] bridge_slave_0: entered promiscuous mode [ 87.936354][ T5636] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.936658][ T5636] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.937020][ T5636] bridge_slave_1: entered allmulticast mode [ 87.951597][ T5636] bridge_slave_1: entered promiscuous mode [ 87.997855][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.000699][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.000807][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.000977][ T5632] bridge_slave_1: entered allmulticast mode [ 88.018300][ T5632] bridge_slave_1: entered promiscuous mode [ 88.085278][ T5631] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.141291][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.141409][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.141853][ T5634] bridge_slave_0: entered allmulticast mode [ 88.145080][ T5634] bridge_slave_0: entered promiscuous mode [ 88.162277][ T5633] team0: Port device team_slave_0 added [ 88.180249][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.194287][ T5636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.194619][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.194724][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.194864][ T5634] bridge_slave_1: entered allmulticast mode [ 88.196744][ T5634] bridge_slave_1: entered promiscuous mode [ 88.247318][ T5633] team0: Port device team_slave_1 added [ 88.249996][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.299563][ T5636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.375058][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.400721][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.400741][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.400769][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.469332][ T5636] team0: Port device team_slave_0 added [ 88.477293][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.484113][ T5632] team0: Port device team_slave_0 added [ 88.489136][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.489179][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.489256][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.547760][ T5632] team0: Port device team_slave_1 added [ 88.570290][ T5636] team0: Port device team_slave_1 added [ 88.637284][ T5634] team0: Port device team_slave_0 added [ 88.637997][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.638012][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.638038][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.641108][ T5634] team0: Port device team_slave_1 added [ 88.711674][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.711690][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.711712][ T5636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.714000][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.714013][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.714036][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.757968][ T5633] hsr_slave_0: entered promiscuous mode [ 88.763615][ T5633] hsr_slave_1: entered promiscuous mode [ 88.771063][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.771107][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.771182][ T5636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.774410][ T5631] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.918821][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.918840][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.918867][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.975776][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.975796][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.975823][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.083635][ T5632] hsr_slave_0: entered promiscuous mode [ 89.084847][ T5632] hsr_slave_1: entered promiscuous mode [ 89.085735][ T5632] debugfs: 'hsr0' already exists in 'hsr' [ 89.085840][ T5632] Cannot create hsr debugfs directory [ 89.172755][ T5636] hsr_slave_0: entered promiscuous mode [ 89.173640][ T5636] hsr_slave_1: entered promiscuous mode [ 89.174202][ T5636] debugfs: 'hsr0' already exists in 'hsr' [ 89.174221][ T5636] Cannot create hsr debugfs directory [ 89.204207][ T5637] Bluetooth: hci0: command tx timeout [ 89.204244][ T5637] Bluetooth: hci1: command tx timeout [ 89.204259][ T5649] Bluetooth: hci4: command tx timeout [ 89.204839][ T53] Bluetooth: hci2: command tx timeout [ 89.271723][ T53] Bluetooth: hci3: command tx timeout [ 89.326606][ T5634] hsr_slave_0: entered promiscuous mode [ 89.327397][ T5634] hsr_slave_1: entered promiscuous mode [ 89.327930][ T5634] debugfs: 'hsr0' already exists in 'hsr' [ 89.327950][ T5634] Cannot create hsr debugfs directory [ 89.784206][ T5633] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.789599][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.790568][ T5633] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.816353][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.838329][ T5633] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.853667][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.884163][ T5633] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.888375][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.025298][ T5632] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.029133][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.029895][ T5632] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.049356][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.070590][ T5632] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.082639][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.083681][ T5632] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.087191][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.148312][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.148498][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.148918][ T5631] bridge_slave_0: entered allmulticast mode [ 90.150485][ T5631] bridge_slave_0: entered promiscuous mode [ 90.194395][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.194530][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.194665][ T5631] bridge_slave_1: entered allmulticast mode [ 90.195939][ T5631] bridge_slave_1: entered promiscuous mode [ 90.251799][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.276286][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.332109][ T5631] team0: Port device team_slave_0 added [ 90.336291][ T5631] team0: Port device team_slave_1 added [ 90.386079][ T5636] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.390463][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.410439][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.410457][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.410484][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.445542][ T5636] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.466270][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.467958][ T5636] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.473825][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.480957][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.481000][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.481066][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.485889][ T5636] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.497515][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.652867][ T5631] hsr_slave_0: entered promiscuous mode [ 90.653707][ T5631] hsr_slave_1: entered promiscuous mode [ 90.654244][ T5631] debugfs: 'hsr0' already exists in 'hsr' [ 90.654263][ T5631] Cannot create hsr debugfs directory [ 90.664323][ T5634] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.695065][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.696129][ T5634] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.698964][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.726577][ T5634] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.730833][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.746519][ T5634] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.750009][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.815505][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.953626][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.991684][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.991832][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.027664][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.027744][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.059777][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.132494][ T5631] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.138369][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.139821][ T5631] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.165813][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.166783][ T5631] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.169543][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.170962][ T5631] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.189880][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.214957][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.245268][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.245345][ T3324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.271967][ T5649] Bluetooth: hci4: command tx timeout [ 91.271984][ T4952] Bluetooth: hci1: command tx timeout [ 91.272002][ T5649] Bluetooth: hci0: command tx timeout [ 91.272102][ T53] Bluetooth: hci2: command tx timeout [ 91.309986][ T5633] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.325211][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.325288][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.353125][ T53] Bluetooth: hci3: command tx timeout [ 91.407061][ T5636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.452093][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.521598][ T5636] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.550577][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.579664][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.579775][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.615503][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.615612][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.647425][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.647503][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.670717][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.670829][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.964242][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.066485][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.090297][ T24] cfg80211: failed to load regulatory.db [ 92.169647][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.169797][ T3324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.205924][ T109] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.206045][ T109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.502809][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.651139][ T5633] veth0_vlan: entered promiscuous mode [ 92.735146][ T5633] veth1_vlan: entered promiscuous mode [ 92.901137][ T5633] veth0_macvtap: entered promiscuous mode [ 92.939243][ T5633] veth1_macvtap: entered promiscuous mode [ 92.958714][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.060006][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.089168][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.215219][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.215488][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.215530][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.215570][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.310011][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.342660][ T5636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.352590][ T53] Bluetooth: hci4: command tx timeout [ 93.352675][ T53] Bluetooth: hci2: command tx timeout [ 93.352735][ T53] Bluetooth: hci0: command tx timeout [ 93.352799][ T53] Bluetooth: hci1: command tx timeout [ 93.388390][ T5632] veth0_vlan: entered promiscuous mode [ 93.432418][ T5637] Bluetooth: hci3: command tx timeout [ 93.479645][ T85] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.479672][ T85] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.518043][ T5632] veth1_vlan: entered promiscuous mode [ 93.619625][ T3324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.619648][ T3324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.748568][ T5634] veth0_vlan: entered promiscuous mode [ 93.777614][ T5632] veth0_macvtap: entered promiscuous mode [ 93.812474][ T5634] veth1_vlan: entered promiscuous mode [ 93.853074][ T5632] veth1_macvtap: entered promiscuous mode [ 93.895422][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.962902][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.989314][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.021880][ T5633] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.086416][ T5634] veth0_macvtap: entered promiscuous mode [ 94.134488][ T5634] veth1_macvtap: entered promiscuous mode [ 94.230114][ T5631] veth0_vlan: entered promiscuous mode [ 94.255943][ T109] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.256877][ T109] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.256924][ T109] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.256964][ T109] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.323408][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.349561][ T5631] veth1_vlan: entered promiscuous mode [ 94.367179][ T5636] veth0_vlan: entered promiscuous mode [ 94.370460][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.370481][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.396201][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.493442][ T5636] veth1_vlan: entered promiscuous mode [ 94.514631][ T109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.514653][ T109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.542871][ T176] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.544106][ T176] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.544152][ T176] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.544193][ T176] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.704096][ T5631] veth0_macvtap: entered promiscuous mode [ 94.789176][ T5631] veth1_macvtap: entered promiscuous mode [ 94.803396][ T5636] veth0_macvtap: entered promiscuous mode [ 94.831090][ T5636] veth1_macvtap: entered promiscuous mode [ 94.845808][ T109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.845830][ T109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.966961][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.984395][ T3324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.984417][ T3324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.017109][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.046550][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.060868][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.273441][ T5857] Zero length message leads to an empty skb [ 95.372794][ T85] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.377011][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.377032][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.507476][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.507495][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.610708][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.610733][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.670186][ T5868] netlink: 'syz.0.12': attribute type 1 has an invalid length. [ 95.670283][ T5868] netlink: 224 bytes leftover after parsing attributes in process `syz.0.12'. [ 95.719968][ T5868] netlink: 'syz.0.12': attribute type 13 has an invalid length. [ 95.730734][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.730756][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.793932][ T109] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.794337][ T109] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.798046][ T109] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.803844][ T62] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.813579][ T85] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.883514][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.020288][ T5877] warning: `syz.4.5' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 96.044509][ T5878] rxe_eth0 speed is unknown, defaulting to 1000 [ 96.064429][ T3324] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.191891][ T5881] tunl0: entered promiscuous mode [ 96.219266][ T5881] netlink: 'syz.4.16': attribute type 4 has an invalid length. [ 96.219289][ T5881] netlink: 9 bytes leftover after parsing attributes in process `syz.4.16'. [ 96.656612][ T5902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22'. [ 96.870939][ T5910] netlink: 'syz.3.26': attribute type 1 has an invalid length. [ 96.870965][ T5910] netlink: 'syz.3.26': attribute type 2 has an invalid length. [ 96.988604][ T5915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.27'. [ 97.056264][ T5913] netlink: 12 bytes leftover after parsing attributes in process `syz.1.25'. [ 97.327863][ T5928] netlink: 12 bytes leftover after parsing attributes in process `syz.0.29'. [ 97.581055][ T5933] sch_fq: defrate 0 ignored. [ 97.821137][ T5948] netlink: 200 bytes leftover after parsing attributes in process `syz.3.32'. [ 97.981567][ T5955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.37'. [ 98.021028][ T5955] netlink: 40 bytes leftover after parsing attributes in process `syz.1.37'. [ 98.185930][ T5960] syz.2.36 uses obsolete (PF_INET,SOCK_PACKET) [ 98.324190][ T5849] rxe_eth0 speed is unknown, defaulting to 1000 [ 98.690266][ T5989] netlink: 'syz.4.44': attribute type 6 has an invalid length. [ 98.709437][ T5990] netlink: 'syz.4.44': attribute type 6 has an invalid length. [ 98.774118][ T5994] netlink: 61 bytes leftover after parsing attributes in process `syz.2.47'. [ 133.034210][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.034309][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 163.177802][ T6022] netlink: 12 bytes leftover after parsing attributes in process `syz.1.50'. [ 163.425220][ T6034] bond1: option arp_all_targets: invalid value (18446744073709551613) [ 163.446157][ T6034] bond1 (unregistering): Released all slaves [ 163.452218][ T6044] netlink: 16 bytes leftover after parsing attributes in process `syz.1.55'. [ 163.757269][ T6055] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.758557][ T6055] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.828396][ T6055] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.828531][ T6055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.828886][ T6055] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.829034][ T6055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.830894][ T6055] bridge0: entered promiscuous mode [ 163.848525][ T6055] bridge0: entered allmulticast mode [ 164.129444][ T6068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.58'. [ 164.162434][ T6068] netlink: 20 bytes leftover after parsing attributes in process `syz.3.58'. [ 164.508966][ T6089] netlink: 'syz.1.65': attribute type 1 has an invalid length. [ 164.586528][ T6091] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 164.586702][ T6091] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 164.658901][ T6087] bond_slave_1: entered promiscuous mode [ 164.658926][ T6087] bond_slave_1: entered allmulticast mode [ 165.068865][ T6107] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 165.496172][ T6121] netlink: 'syz.2.71': attribute type 8 has an invalid length. [ 165.767505][ T6135] macvtap0: entered allmulticast mode [ 165.767531][ T6135] veth0_macvtap: entered allmulticast mode [ 165.788361][ T6135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.76'. [ 165.804930][ T6132] netlink: set zone limit has 4 unknown bytes [ 165.868977][ T6143] netlink: 4 bytes leftover after parsing attributes in process `syz.1.79'. [ 166.274775][ T6156] netlink: 48 bytes leftover after parsing attributes in process `syz.0.84'. [ 166.389450][ T6170] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 166.747411][ T6188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.89'. [ 166.768751][ T6189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.89'. [ 166.922412][ T6196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.90'. [ 166.924389][ T6196] openvswitch: netlink: Multiple metadata blocks provided [ 167.135924][ T6209] : renamed from virt_wifi0 [ 167.382867][ T6218] tunl0: entered promiscuous mode [ 167.382890][ T6218] tunl0: entered allmulticast mode [ 167.383950][ T6211] netlink: 'syz.4.95': attribute type 1 has an invalid length. [ 168.358429][ T6255] Bluetooth: MGMT ver 1.23 [ 168.373539][ T6255] netlink: 'syz.1.105': attribute type 8 has an invalid length. [ 168.433937][ T6261] openvswitch: netlink: Key type 518 is out of range max 32 [ 168.434278][ T6261] openvswitch: netlink: Key type 518 is out of range max 32 [ 168.434583][ T6261] openvswitch: netlink: Key type 518 is out of range max 32 [ 168.434894][ T6261] openvswitch: netlink: Key type 518 is out of range max 32 [ 168.449565][ T6260] netlink: 'syz.2.106': attribute type 12 has an invalid length. [ 168.449620][ T6260] netlink: 'syz.2.106': attribute type 29 has an invalid length. [ 168.449649][ T6260] __nla_validate_parse: 3 callbacks suppressed [ 168.449681][ T6260] netlink: 148 bytes leftover after parsing attributes in process `syz.2.106'. [ 168.449733][ T6260] netlink: 59 bytes leftover after parsing attributes in process `syz.2.106'. [ 168.457609][ T6261] openvswitch: netlink: Key type 518 is out of range max 32 [ 168.458714][ T6261] openvswitch: netlink: Key type 518 is out of range max 32 [ 168.480095][ T6261] openvswitch: netlink: Key type 518 is out of range max 32 [ 168.480612][ T6261] openvswitch: netlink: Key type 518 is out of range max 32 [ 168.481562][ T6263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.106'. [ 168.482033][ T6260] netlink: 'syz.2.106': attribute type 1 has an invalid length. [ 168.868122][ T6287] netlink: 'syz.4.108': attribute type 10 has an invalid length. [ 168.868147][ T6287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.108'. [ 169.305022][ T6281] syzkaller1: entered promiscuous mode [ 169.305047][ T6281] syzkaller1: entered allmulticast mode [ 169.590906][ T5637] Bluetooth: hci4: link tx timeout [ 169.590929][ T5637] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 169.776177][ T5637] Bluetooth: hci4: link tx timeout [ 169.776199][ T5637] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 169.802897][ T5637] Bluetooth: hci4: link tx timeout [ 169.802919][ T5637] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 170.104969][ T6324] netlink: 64 bytes leftover after parsing attributes in process `syz.1.114'. [ 170.106230][ T6323] netlink: 'syz.4.118': attribute type 1 has an invalid length. [ 170.129226][ T6324] Bluetooth: hci0: unsupported parameter 5135 [ 170.129250][ T6324] Bluetooth: hci0: unsupported parameter 8192 [ 170.129269][ T6324] Bluetooth: hci0: unsupported parameter 5135 [ 170.129282][ T6324] Bluetooth: hci0: unsupported parameter 8192 [ 170.130747][ T6323] netlink: 32 bytes leftover after parsing attributes in process `syz.4.118'. [ 170.379457][ T5637] Bluetooth: hci4: link tx timeout [ 170.379479][ T5637] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 170.552707][ T5637] Bluetooth: hci4: link tx timeout [ 170.552729][ T5637] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 170.999182][ T6356] netlink: 24 bytes leftover after parsing attributes in process `syz.0.123'. [ 171.083906][ T5637] Bluetooth: hci4: link tx timeout [ 171.083926][ T5637] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.187455][ T5637] Bluetooth: hci3: Unexpected cc 0x2753 with no status [ 171.406893][ T6382] netlink: 40 bytes leftover after parsing attributes in process `syz.2.131'. [ 171.426383][ T6383] netlink: 12 bytes leftover after parsing attributes in process `syz.0.130'. [ 171.426914][ T6383] netlink: 12 bytes leftover after parsing attributes in process `syz.0.130'. [ 171.451098][ T5637] Bluetooth: hci4: link tx timeout [ 171.451118][ T5637] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.672486][ T5637] Bluetooth: hci4: command 0x0406 tx timeout [ 171.727572][ T6387] can: request_module (can-proto-0) failed. [ 171.902329][ T6398] nbd: must specify a size in bytes for the device [ 171.928548][ T6398] nbd: must specify a size in bytes for the device [ 171.997954][ T6404] xt_time: unknown flags 0x68 [ 172.157755][ T6408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.219082][ T6410] netlink: 'syz.1.140': attribute type 1 has an invalid length. [ 172.347627][ T6414] No such timeout policy "syz0" [ 172.446956][ T6410] syzkaller0: entered promiscuous mode [ 172.446986][ T6410] syzkaller0: entered allmulticast mode [ 174.482054][ T109] IPVS: starting estimator thread 0... [ 174.571338][ T6456] IPVS: using max 25 ests per chain, 60000 per kthread [ 174.647025][ T6464] sctp: [Deprecated]: syz.3.151 (pid 6464) Use of struct sctp_assoc_value in delayed_ack socket option. [ 174.647025][ T6464] Use struct sctp_sack_info instead [ 174.928502][ T6480] netlink: 'syz.3.156': attribute type 2 has an invalid length. [ 175.013001][ T6485] __nla_validate_parse: 6 callbacks suppressed [ 175.013022][ T6485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.159'. [ 175.099069][ T6490] netlink: 36 bytes leftover after parsing attributes in process `syz.1.161'. [ 175.199300][ T6495] bridge1: entered promiscuous mode [ 175.199368][ T6495] bridge1: entered allmulticast mode [ 175.215234][ T6495] netlink: 44 bytes leftover after parsing attributes in process `syz.3.164'. [ 175.695235][ T6529] netlink: 20 bytes leftover after parsing attributes in process `syz.0.175'. [ 175.802776][ T6529] netlink: 'syz.0.175': attribute type 12 has an invalid length. [ 175.898455][ T6538] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.177'. [ 175.915155][ T6539] netlink: 28 bytes leftover after parsing attributes in process `syz.3.176'. [ 175.937498][ T6538] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.177'. [ 175.938250][ T6538] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.177'. [ 176.057619][ T6534] macvlan2: entered promiscuous mode [ 176.057643][ T6534] macvlan2: entered allmulticast mode [ 176.379575][ T6566] bridge0: entered promiscuous mode [ 176.379602][ T6566] bridge0: entered allmulticast mode [ 176.444951][ T6570] tap0: tun_chr_ioctl cmd 1074025676 [ 176.444977][ T6570] tap0: owner set to 0 [ 176.448883][ T85] IPVS: starting estimator thread 0... [ 176.485482][ T6570] net_ratelimit: 57 callbacks suppressed [ 176.485505][ T6570] ip_tables: iptables: counters copy to user failed while replacing table [ 176.551467][ T6571] IPVS: using max 25 ests per chain, 60000 per kthread [ 176.616514][ T6575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.188'. [ 176.704414][ T6575] batman_adv: batadv0: Adding interface: syz_tun [ 176.704436][ T6575] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.704483][ T6575] batman_adv: batadv0: Interface activated: syz_tun [ 177.056968][ T6596] batman_adv: batadv0: Adding interface: syzkaller0 [ 177.056985][ T6596] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.057011][ T6596] batman_adv: batadv0: Interface activated: syzkaller0 [ 177.402484][ T6623] netlink: 16 bytes leftover after parsing attributes in process `syz.3.198'. [ 177.426224][ T6623] v: renamed from dummy0 (while UP) [ 177.470173][ T6592] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 177.525075][ T6592] batman_adv: batadv0: Removing interface: syzkaller0 [ 178.450232][ T6641] x_tables: unsorted entry at hook 1 [ 178.678596][ T6650] netlink: 'syz.4.209': attribute type 1 has an invalid length. [ 178.707744][ T6650] 8021q: adding VLAN 0 to HW filter on device bond1 [ 178.793530][ T6656] netlink: 'syz.4.211': attribute type 1 has an invalid length. [ 178.820282][ T6656] 8021q: adding VLAN 0 to HW filter on device bond2 [ 178.848244][ T6656] bond2: (slave bridge1): making interface the new active one [ 178.850383][ T6656] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 178.857427][ T6656] netlink: 'syz.4.211': attribute type 1 has an invalid length. [ 178.894221][ T6662] bond2: (slave bridge2): Enslaving as an active interface with a down link [ 180.235456][ T6606] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 180.439166][ T6668] __nla_validate_parse: 5 callbacks suppressed [ 180.439187][ T6668] netlink: 12 bytes leftover after parsing attributes in process `syz.1.213'. [ 180.498258][ T6668] netlink: 'syz.1.213': attribute type 1 has an invalid length. [ 180.723909][ T6682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.220'. [ 180.736590][ T6691] syzkaller0: entered promiscuous mode [ 180.736663][ T6691] syzkaller0: entered allmulticast mode [ 180.888529][ T6698] netlink: 5 bytes leftover after parsing attributes in process `syz.2.221'. [ 180.933623][ T6698] netlink: 5 bytes leftover after parsing attributes in process `syz.2.221'. [ 183.558565][ T6680] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 183.998537][ T6752] lo: entered allmulticast mode [ 183.999347][ T6756] netlink: 24 bytes leftover after parsing attributes in process `syz.0.229'. [ 184.078538][ T6758] netlink: 4 bytes leftover after parsing attributes in process `syz.4.228'. [ 184.078573][ T6758] netlink: 14 bytes leftover after parsing attributes in process `syz.4.228'. [ 184.128532][ T6752] netlink: 64 bytes leftover after parsing attributes in process `syz.2.226'. [ 184.176797][ T6760] netlink: 48 bytes leftover after parsing attributes in process `syz.0.229'. [ 184.284703][ T6760] netlink: 40 bytes leftover after parsing attributes in process `syz.0.229'. [ 184.329871][ T6749] lo: left allmulticast mode [ 184.694765][ T6786] netlink: 'syz.4.233': attribute type 2 has an invalid length. [ 184.730417][ T6786] netlink: 'syz.4.233': attribute type 12 has an invalid length. [ 184.858982][ T6786] netlink: 'syz.4.233': attribute type 12 has an invalid length. [ 184.953770][ T109] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.953820][ T109] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.953857][ T109] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.953894][ T109] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.186392][ T6800] netlink: 'syz.1.239': attribute type 9 has an invalid length. [ 186.114763][ T6841] __nla_validate_parse: 8 callbacks suppressed [ 186.114787][ T6841] netlink: 96 bytes leftover after parsing attributes in process `syz.2.249'. [ 186.116696][ T6842] netlink: 140 bytes leftover after parsing attributes in process `syz.3.251'. [ 186.156054][ T6841] netlink: 20 bytes leftover after parsing attributes in process `syz.2.249'. [ 186.156084][ T6841] tipc: Invalid UDP bearer configuration [ 186.156243][ T6841] tipc: Enabling of bearer rejected, failed to enable media [ 186.373019][ T6854] netlink: 'syz.2.254': attribute type 16 has an invalid length. [ 186.373052][ T6854] netlink: 20 bytes leftover after parsing attributes in process `syz.2.254'. [ 186.446390][ T6851] netlink: 104 bytes leftover after parsing attributes in process `syz.2.254'. [ 186.447614][ T6851] netlink: 104 bytes leftover after parsing attributes in process `syz.2.254'. [ 186.459726][ T6851] netlink: 104 bytes leftover after parsing attributes in process `syz.2.254'. [ 186.503501][ T6851] netlink: 104 bytes leftover after parsing attributes in process `syz.2.254'. [ 186.503721][ T6851] netlink: 104 bytes leftover after parsing attributes in process `syz.2.254'. [ 186.503883][ T6851] netlink: 104 bytes leftover after parsing attributes in process `syz.2.254'. [ 187.161571][ T109] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.524380][ T6892] syzkaller0: entered promiscuous mode [ 187.524405][ T6892] syzkaller0: entered allmulticast mode [ 187.581139][ T6892] Bluetooth: hci0: unsupported parameter 5161 [ 187.582094][ T6892] Bluetooth: hci0: unsupported parameter 8192 [ 187.582111][ T6892] Bluetooth: hci0: unsupported parameter 5161 [ 187.582125][ T6892] Bluetooth: hci0: unsupported parameter 8192 [ 187.762715][ T6901] netlink: 'syz.1.268': attribute type 49 has an invalid length. [ 187.927846][ T6908] netlink: 'syz.1.268': attribute type 2 has an invalid length. [ 188.294397][ T6901] ip6gretap0: entered promiscuous mode [ 188.294424][ T6901] ip6gretap0: entered allmulticast mode [ 188.588338][ T6931] netlink: 'syz.2.276': attribute type 19 has an invalid length. [ 188.606135][ T6933] netlink: 'syz.3.273': attribute type 8 has an invalid length. [ 188.721495][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.721865][ T6931] netlink: 'syz.2.276': attribute type 19 has an invalid length. [ 188.731597][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.731648][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.731686][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.140792][ T6985] Bluetooth: hci0: invalid len left 17, exp >= 23 [ 191.138766][ T7024] __nla_validate_parse: 117 callbacks suppressed [ 191.138789][ T7024] netlink: 12 bytes leftover after parsing attributes in process `syz.1.294'. [ 191.252126][ T7024] netlink: 12 bytes leftover after parsing attributes in process `syz.1.294'. [ 191.331133][ T7024] netlink: 12 bytes leftover after parsing attributes in process `syz.1.294'. [ 191.360197][ T7024] netlink: 12 bytes leftover after parsing attributes in process `syz.1.294'. [ 191.386079][ T7024] netlink: 12 bytes leftover after parsing attributes in process `syz.1.294'. [ 191.412314][ T7024] netlink: 12 bytes leftover after parsing attributes in process `syz.1.294'. [ 191.440859][ T7024] netlink: 12 bytes leftover after parsing attributes in process `syz.1.294'. [ 191.495022][ T7024] netlink: 12 bytes leftover after parsing attributes in process `syz.1.294'. [ 191.567869][ T7048] netlink: 'syz.0.300': attribute type 1 has an invalid length. [ 191.654246][ T7048] 8021q: adding VLAN 0 to HW filter on device bond1 [ 191.661020][ T7046] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 191.705001][ T7046] bond1: entered allmulticast mode [ 191.938352][ T7048] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 192.054493][ T7066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.306'. [ 192.055036][ T7066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.306'. [ 192.724257][ T7095] batman_adv: batadv0: Adding interface: gretap1 [ 192.724279][ T7095] batman_adv: batadv0: The MTU of interface gretap1 is too small (1442) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.724312][ T7095] batman_adv: batadv0: Interface activated: gretap1 [ 193.352781][ T7127] netlink: 'syz.1.320': attribute type 1 has an invalid length. [ 193.558146][ T7138] syzkaller0: entered promiscuous mode [ 193.558170][ T7138] syzkaller0: entered allmulticast mode [ 193.576143][ T7134] netlink: 'syz.1.323': attribute type 1 has an invalid length. [ 193.686924][ T7134] bond2: entered promiscuous mode [ 193.688640][ T7134] 8021q: adding VLAN 0 to HW filter on device bond2 [ 193.709559][ T7133] tipc: Started in network mode [ 193.709596][ T7133] tipc: Node identity ba90a7409e58, cluster identity 4711 [ 193.731731][ T7133] tipc: Enabled bearer , priority 10 [ 194.173733][ T7131] tipc: Resetting bearer [ 194.293623][ T7131] tipc: Disabling bearer [ 194.485019][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.485268][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.550113][ T7150] sctp: [Deprecated]: syz.1.328 (pid 7150) Use of int in max_burst socket option. [ 194.550113][ T7150] Use struct sctp_assoc_value instead [ 194.810380][ T7159] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.321428][ T7196] syz.0.344 (7196) used greatest stack depth: 17608 bytes left [ 196.717328][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.797283][ T7231] __nla_validate_parse: 97 callbacks suppressed [ 196.797305][ T7231] netlink: 244 bytes leftover after parsing attributes in process `syz.1.354'. [ 196.873903][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.317638][ T7257] Cannot find del_set index 65532 as target [ 197.457413][ T7262] netlink: 36 bytes leftover after parsing attributes in process `syz.3.364'. [ 197.528127][ T7267] netlink: 36 bytes leftover after parsing attributes in process `syz.3.364'. [ 197.772761][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.074799][ T7291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.369'. [ 198.210510][ T7298] IPv6: NLM_F_CREATE should be specified when creating new route [ 198.210937][ T7298] netlink: 'syz.0.373': attribute type 1 has an invalid length. [ 198.489177][ T7303] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 198.798722][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.971136][ T7324] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 199.029324][ T7326] bond0: entered promiscuous mode [ 199.029347][ T7326] bond_slave_0: entered promiscuous mode [ 199.029603][ T7326] bond_slave_1: entered promiscuous mode [ 199.056142][ T7326] batadv0: entered promiscuous mode [ 199.059366][ T7326] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 199.853251][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.914572][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.969345][ T7356] xfrm1: entered allmulticast mode [ 199.984517][ T7361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.393'. [ 200.080997][ T7367] netlink: 52 bytes leftover after parsing attributes in process `syz.1.391'. [ 200.170140][ T995] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 200.179848][ T7356] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 200.212115][ T7360] netlink: 36 bytes leftover after parsing attributes in process `syz.4.390'. [ 200.285499][ T995] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 200.352051][ T7374] netlink: 12 bytes leftover after parsing attributes in process `syz.2.395'. [ 200.883340][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.926434][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.153011][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.951819][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.972342][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.001086][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.041399][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.992566][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.085605][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.123645][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.165673][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.033072][ T995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.203012][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.238403][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.282653][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.751678][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.915611][ T4952] Bluetooth: hci3: command 0x0406 tx timeout [ 211.915845][ T5646] Bluetooth: hci1: command 0x0406 tx timeout [ 211.915861][ T4952] Bluetooth: hci2: command 0x0406 tx timeout [ 211.915892][ T4952] Bluetooth: hci0: command 0x0406 tx timeout [ 212.073043][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.321086][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.362846][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.402596][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.964335][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 215.111849][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.442205][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.481621][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.521736][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.152100][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.560847][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.601888][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.088015][ T995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.089978][ T176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.123207][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.123896][ T995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.644946][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.191457][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.680399][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.724166][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.767560][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.231449][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.800803][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.210037][ T995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.841800][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.884314][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.920852][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.231524][ T995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.962346][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.673181][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.000296][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.312292][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.040996][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.058254][ T53] Bluetooth: hci4: link tx timeout [ 231.058274][ T53] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 231.272957][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.082469][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.113190][ T5637] Bluetooth: hci4: command 0x0406 tx timeout [ 233.151587][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.242545][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.313681][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.272781][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.439308][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.446356][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.450435][ T109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.315772][ T29] net_ratelimit: 2 callbacks suppressed [ 236.315795][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.355488][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.395384][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.553054][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.432351][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.475200][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.515364][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.602375][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.553007][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.592798][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.631705][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.633135][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.032824][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.673821][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.676320][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.714434][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.671603][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.752981][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.794909][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.834544][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.711747][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.872255][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.914049][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.954479][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.753385][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.993498][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.035400][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.272973][ T995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.912379][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.912443][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.073578][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.610913][ T7535] netlink: 12 bytes leftover after parsing attributes in process `syz.2.399'. [ 256.796213][ T995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.115580][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.395887][ T7588] netlink: 12 bytes leftover after parsing attributes in process `syz.4.407'. [ 257.466732][ T7586] ip6erspan0: entered promiscuous mode [ 257.513317][ T7591] netlink: 'syz.1.409': attribute type 4 has an invalid length. [ 257.758738][ T7598] bridge0: left promiscuous mode [ 257.758767][ T7598] bridge0: left allmulticast mode [ 257.841049][ T7598] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 257.860339][ C0] Illegal XDP return value 16128 on prog (id 88) dev veth0, expect packet loss! [ 257.897377][ T7605] netlink: 'syz.1.414': attribute type 15 has an invalid length. [ 257.924034][ T7605] syzkaller0: entered promiscuous mode [ 257.924070][ T7605] syzkaller0: entered allmulticast mode [ 258.050690][ T7607] netlink: 'syz.2.415': attribute type 4 has an invalid length. [ 258.167001][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.516100][ T7619] netlink: 132 bytes leftover after parsing attributes in process `syz.3.418'. [ 258.586942][ T7626] netlink: 'syz.4.420': attribute type 1 has an invalid length. [ 258.621398][ T7626] netlink: 'syz.4.420': attribute type 1 has an invalid length. [ 258.685753][ T7630] netlink: 188 bytes leftover after parsing attributes in process `syz.0.421'. [ 258.710584][ T7630] netlink: 188 bytes leftover after parsing attributes in process `syz.0.421'. [ 258.980854][ T7635] netlink: 'syz.0.424': attribute type 1 has an invalid length. [ 259.090480][ T7642] netlink: 12 bytes leftover after parsing attributes in process `syz.4.422'. [ 259.143059][ T7641] netlink: 12 bytes leftover after parsing attributes in process `syz.0.424'. [ 259.193617][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.264083][ T7647] ip_tables: iptables: counters copy to user failed while replacing table [ 259.833772][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.188777][ T7674] raw_sendmsg: syz.2.435 forgot to set AF_INET. Fix it! [ 260.242856][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.275230][ T176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.306578][ T7678] netlink: 16 bytes leftover after parsing attributes in process `syz.3.436'. [ 260.306610][ T7678] netlink: 16 bytes leftover after parsing attributes in process `syz.3.436'. [ 260.391224][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.442712][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.508141][ T7689] netlink: 'syz.4.438': attribute type 25 has an invalid length. [ 260.880515][ T7697] pim6reg: entered allmulticast mode [ 260.892524][ T7697] pim6reg: left allmulticast mode [ 261.053277][ T7697] netlink: 24 bytes leftover after parsing attributes in process `syz.3.445'. [ 261.074163][ T7697] netlink: 'syz.3.445': attribute type 4 has an invalid length. [ 261.386687][ T7680] netlink: 'syz.0.439': attribute type 4 has an invalid length. [ 261.749792][ T7721] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 261.989494][ T7732] __nla_validate_parse: 2 callbacks suppressed [ 261.989519][ T7732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.456'. [ 262.130645][ T7736] netlink: 28 bytes leftover after parsing attributes in process `syz.3.459'. [ 262.150497][ T7736] ip_vti0: entered promiscuous mode [ 262.166467][ T7736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.459'. [ 262.220692][ T7741] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.296677][ T7741] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.345669][ T7734] ip6_vti0: entered promiscuous mode [ 262.444270][ T7734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.457'. [ 262.635399][ T7762] bridge_slave_1: left allmulticast mode [ 262.635429][ T7762] bridge_slave_1: left promiscuous mode [ 262.637077][ T7762] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.730977][ T7762] bridge_slave_0: left allmulticast mode [ 262.731040][ T7762] bridge_slave_0: left promiscuous mode [ 262.733926][ T7751] netlink: 28 bytes leftover after parsing attributes in process `syz.2.461'. [ 262.754919][ T7762] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.004837][ T7775] xt_NFQUEUE: number of total queues is 0 [ 263.088890][ T7774] xt_hashlimit: size too large, truncated to 1048576 [ 263.209663][ T7780] netlink: 'syz.3.467': attribute type 1 has an invalid length. [ 263.209689][ T7780] netlink: 244 bytes leftover after parsing attributes in process `syz.3.467'. [ 263.587215][ T7796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.470'. [ 264.234341][ T7810] netlink: 36 bytes leftover after parsing attributes in process `syz.0.477'. [ 264.315016][ T7810] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.315737][ T7810] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.558132][ T7825] netlink: 64 bytes leftover after parsing attributes in process `syz.2.480'. [ 264.723119][ T7828] 8021q: VLANs not supported on gre0 [ 264.992906][ T7838] netlink: 156 bytes leftover after parsing attributes in process `syz.4.485'. [ 266.858761][ T7893] x_tables: unsorted entry at hook 2 [ 266.971238][ T7893] bridge_slave_1: left allmulticast mode [ 266.971759][ T7893] bridge_slave_1: left promiscuous mode [ 266.972735][ T7893] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.998287][ T7896] __nla_validate_parse: 4 callbacks suppressed [ 266.998340][ T7896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.495'. [ 267.088281][ T7893] bridge_slave_0: left allmulticast mode [ 267.103069][ T7893] bridge_slave_0: left promiscuous mode [ 267.104088][ T7893] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.299900][ T7919] netlink: 16 bytes leftover after parsing attributes in process `syz.1.499'. [ 267.299946][ T7919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.499'. [ 267.334146][ T7909] netlink: 16 bytes leftover after parsing attributes in process `syz.1.499'. [ 267.334191][ T7909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.499'. [ 267.680938][ T7918] netlink: 40 bytes leftover after parsing attributes in process `syz.3.497'. [ 268.177418][ T7944] netlink: 32 bytes leftover after parsing attributes in process `syz.1.505'. [ 268.422225][ T7958] netlink: 36 bytes leftover after parsing attributes in process `syz.2.504'. [ 268.422477][ T7953] netlink: 36 bytes leftover after parsing attributes in process `syz.2.504'. [ 268.463691][ T7963] netlink: 48 bytes leftover after parsing attributes in process `syz.3.507'. [ 269.478462][ T8003] IPVS: length: 4096 != 24 [ 269.524996][ T8002] bridge0: port 3(veth0) entered blocking state [ 269.525123][ T8002] bridge0: port 3(veth0) entered disabled state [ 269.525276][ T8002] veth0: entered allmulticast mode [ 269.553666][ T8002] veth0: entered promiscuous mode [ 269.555502][ T8002] bridge0: port 3(veth0) entered blocking state [ 269.555636][ T8002] bridge0: port 3(veth0) entered forwarding state [ 270.023851][ T53] Bluetooth: hci1: connection err: -111 [ 270.262640][ T8027] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 270.531698][ T8034] ip_tables: iptables: counters copy to user failed while replacing table [ 271.147986][ T8054] netlink: 'syz.4.527': attribute type 6 has an invalid length. [ 271.148010][ T8054] netlink: 'syz.4.527': attribute type 5 has an invalid length. [ 271.184500][ T8041] veth0: entered promiscuous mode [ 271.185562][ T8041] veth0: left promiscuous mode [ 272.643914][ T8090] __nla_validate_parse: 5 callbacks suppressed [ 272.643940][ T8090] netlink: 16 bytes leftover after parsing attributes in process `syz.0.538'. [ 272.862422][ T8103] vlan2: entered allmulticast mode [ 272.862446][ T8103] veth0_vlan: entered allmulticast mode [ 273.016209][ T8111] ip_tables: iptables: counters copy to user failed while replacing table [ 273.153507][ T8110] syzkaller1: entered promiscuous mode [ 273.153730][ T8110] syzkaller1: entered allmulticast mode [ 273.186074][ T8110] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 273.855793][ T8137] netlink: 28 bytes leftover after parsing attributes in process `syz.2.545'. [ 273.855835][ T8137] netlink: 'syz.2.545': attribute type 7 has an invalid length. [ 273.855848][ T8137] netlink: 'syz.2.545': attribute type 8 has an invalid length. [ 273.855862][ T8137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.545'. [ 274.860904][ T8164] netlink: 16 bytes leftover after parsing attributes in process `syz.4.552'. [ 274.925998][ T8171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.554'. [ 274.926781][ T8171] netlink: 'syz.0.554': attribute type 1 has an invalid length. [ 274.926800][ T8171] netlink: 'syz.0.554': attribute type 2 has an invalid length. [ 275.095066][ T8171] netlink: 92 bytes leftover after parsing attributes in process `syz.0.554'. [ 275.661061][ T8203] x_tables: duplicate underflow at hook 2 [ 276.185331][ T8214] netlink: 28 bytes leftover after parsing attributes in process `syz.3.560'. [ 276.353396][ T8217] netlink: 28 bytes leftover after parsing attributes in process `syz.3.560'. [ 276.680558][ T8234] netlink: 156 bytes leftover after parsing attributes in process `syz.1.564'. [ 276.765564][ T8237] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 278.849132][ T5296] veth1_vlan: left promiscuous mode [ 279.070097][ T53] Bluetooth: hci4: unexpected event for opcode 0x2035 [ 279.097129][ T8247] netlink: 920 bytes leftover after parsing attributes in process `syz.2.566'. [ 279.123119][ T8248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.567'. [ 279.199285][ T8251] netlink: 12 bytes leftover after parsing attributes in process `syz.4.570'. [ 279.330415][ T8258] netlink: 632 bytes leftover after parsing attributes in process `syz.0.571'. [ 279.553288][ T8268] h: entered promiscuous mode [ 279.684772][ T8278] openvswitch: netlink: Key type 31 is not supported [ 279.688013][ T8280] workqueue: name exceeds WQ_NAME_LEN. Truncating to: (h\E3~ϱoR!Fo?< [ 280.785618][ T8320] netlink: 16 bytes leftover after parsing attributes in process `syz.2.589'. [ 281.002601][ T8328] netlink: 24 bytes leftover after parsing attributes in process `syz.1.591'. [ 281.180792][ T8328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.591'. [ 281.218031][ T8333] netlink: 'syz.1.591': attribute type 32 has an invalid length. [ 281.218055][ T8333] netlink: 56 bytes leftover after parsing attributes in process `syz.1.591'. [ 281.945386][ T8369] ip_tables: iptables: counters copy to user failed while replacing table [ 282.396570][ T8388] netlink: 40 bytes leftover after parsing attributes in process `syz.2.603'. [ 284.390335][ T8346] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 284.610395][ T8404] netlink: 300 bytes leftover after parsing attributes in process `syz.1.605'. [ 284.813266][ T8411] netlink: 12 bytes leftover after parsing attributes in process `syz.4.604'. [ 285.074986][ T8405] netlink: 'syz.4.604': attribute type 1 has an invalid length. [ 285.303741][ T8439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.610'. [ 285.426819][ T8446] batman_adv: batadv0: Adding interface: veth0 [ 285.426838][ T8446] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.426870][ T8446] batman_adv: batadv0: Interface activated: veth0 [ 286.062076][ T8467] ip_tables: iptables: counters copy to user failed while replacing table [ 286.414582][ T8483] netlink: 'syz.3.622': attribute type 21 has an invalid length. [ 286.414605][ T8483] netlink: 152 bytes leftover after parsing attributes in process `syz.3.622'. [ 286.430373][ T8467] ip_tables: iptables: counters copy to user failed while replacing table [ 286.887668][ T8509] netlink: 52 bytes leftover after parsing attributes in process `syz.4.626'. [ 287.121737][ T8509] netlink: 20 bytes leftover after parsing attributes in process `syz.4.626'. [ 287.149624][ T8509] netlink: 'syz.4.626': attribute type 15 has an invalid length. [ 287.293683][ T8527] bridge0: port 1(gretap0) entered blocking state [ 287.293795][ T8527] bridge0: port 1(gretap0) entered disabled state [ 287.293945][ T8527] gretap0: entered allmulticast mode [ 287.330838][ T8527] gretap0: entered promiscuous mode [ 287.345430][ T8522] netlink: 20 bytes leftover after parsing attributes in process `syz.0.630'. [ 288.004192][ T8551] netlink: 248 bytes leftover after parsing attributes in process `syz.4.640'. [ 288.004239][ T8551] netlink: 52 bytes leftover after parsing attributes in process `syz.4.640'. [ 288.092469][ T8554] netlink: 168 bytes leftover after parsing attributes in process `syz.3.641'. [ 288.773252][ T8587] nftables ruleset with unbound set [ 288.776471][ T53] Bluetooth: hci2: unexpected event for opcode 0x203d [ 289.170385][ T8607] bridge_slave_1: left allmulticast mode [ 289.171176][ T8607] bridge_slave_1: left promiscuous mode [ 289.178487][ T8607] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.205109][ T8607] bridge_slave_0: left allmulticast mode [ 289.205564][ T8607] bridge_slave_0: left promiscuous mode [ 289.213725][ T8607] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.818954][ T8635] sit0: entered promiscuous mode [ 289.845767][ T8635] netlink: 'syz.0.661': attribute type 1 has an invalid length. [ 289.845793][ T8635] __nla_validate_parse: 5 callbacks suppressed [ 289.845805][ T8635] netlink: 1 bytes leftover after parsing attributes in process `syz.0.661'. [ 290.356686][ T8657] Bluetooth: MGMT ver 1.23 [ 290.397094][ T8657] vlan2: entered promiscuous mode [ 290.397435][ T8657] vlan2: entered allmulticast mode [ 290.424576][ T8662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.669'. [ 290.424612][ T8662] netlink: 'syz.0.669': attribute type 6 has an invalid length. [ 290.424626][ T8662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.669'. [ 290.577818][ T8666] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 290.978577][ T8675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.673'. [ 291.468381][ T8687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.676'. [ 291.631688][ T8694] netlink: 2 bytes leftover after parsing attributes in process `syz.3.680'. [ 291.867586][ T8701] netlink: 12 bytes leftover after parsing attributes in process `syz.4.681'. [ 291.869637][ T8702] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.924018][ T8703] tipc: Failed to remove unknown binding: 66,0,0/0:3055055785/3055055786 [ 291.924154][ T8703] tipc: Failed to remove unknown binding: 66,0,0/0:3055055785/3055055786 [ 292.641568][ T8733] netlink: 'syz.4.695': attribute type 21 has an invalid length. [ 292.698809][ T8738] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.694'. [ 292.702377][ T8739] netlink: 16 bytes leftover after parsing attributes in process `syz.4.695'. [ 292.731065][ T8733] bond4: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 292.744808][ T8733] bond4 (unregistering): Released all slaves [ 292.808665][ T8741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.694'. [ 292.849930][ T8738] 0XD: renamed from gretap0 (while UP) [ 293.087729][ T8747] bond0: entered allmulticast mode [ 293.087755][ T8747] bond_slave_0: entered allmulticast mode [ 293.109970][ T62] IPVS: starting estimator thread 0... [ 293.232871][ T8758] IPVS: using max 24 ests per chain, 57600 per kthread [ 293.781078][ T8771] macvtap1: entered promiscuous mode [ 293.790201][ T8771] hsr0: entered promiscuous mode [ 293.791087][ T8771] macvtap1: entered allmulticast mode [ 293.810112][ T8771] hsr0: entered allmulticast mode [ 293.810132][ T8771] hsr_slave_0: entered allmulticast mode [ 293.810150][ T8771] hsr_slave_1: entered allmulticast mode [ 293.876410][ T8779] ip_tables: iptables: counters copy to user failed while replacing table [ 293.876820][ T8779] ip_tables: iptables: counters copy to user failed while replacing table [ 293.877181][ T8779] ip_tables: iptables: counters copy to user failed while replacing table [ 293.914977][ T8779] ip_tables: iptables: counters copy to user failed while replacing table [ 293.960807][ T8779] ip_tables: iptables: counters copy to user failed while replacing table [ 293.963085][ T8779] ip_tables: iptables: counters copy to user failed while replacing table [ 293.984095][ T8779] ip_tables: iptables: counters copy to user failed while replacing table [ 294.003561][ T8779] ip_tables: iptables: counters copy to user failed while replacing table [ 294.003950][ T8779] ip_tables: iptables: counters copy to user failed while replacing table [ 295.032663][ T5637] Bluetooth: hci4: command 0x0406 tx timeout [ 295.180220][ T8824] __nla_validate_parse: 79 callbacks suppressed [ 295.180242][ T8824] netlink: 12 bytes leftover after parsing attributes in process `syz.2.711'. [ 295.211835][ T8827] netlink: 12 bytes leftover after parsing attributes in process `syz.3.712'. [ 295.407038][ T8833] syzkaller1: entered promiscuous mode [ 295.407064][ T8833] syzkaller1: entered allmulticast mode [ 296.947882][ T8883] net_ratelimit: 76 callbacks suppressed [ 296.947905][ T8883] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 297.009680][ T8886] netlink: 'syz.0.720': attribute type 1 has an invalid length. [ 297.009704][ T8886] netlink: 4320 bytes leftover after parsing attributes in process `syz.0.720'. [ 297.066708][ T8889] netlink: 'syz.2.721': attribute type 1 has an invalid length. [ 297.187947][ T8889] 8021q: adding VLAN 0 to HW filter on device bond1 [ 297.221842][ T8889] netlink: 'syz.2.721': attribute type 10 has an invalid length. [ 297.221867][ T8889] netlink: 40 bytes leftover after parsing attributes in process `syz.2.721'. [ 297.366304][ T8898] bond1: (slave dummy0): making interface the new active one [ 297.390330][ T8898] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 297.406225][ T8889] dummy0: entered promiscuous mode [ 297.418291][ T8889] bond1: (slave dummy0): Releasing active interface [ 297.546439][ T8917] netlink: 12 bytes leftover after parsing attributes in process `syz.3.724'. [ 298.081744][ T8928] veth1_to_batadv: entered promiscuous mode [ 298.081771][ T8928] veth1_to_batadv: entered allmulticast mode [ 298.222516][ T8936] netlink: 'syz.3.729': attribute type 1 has an invalid length. [ 298.737085][ T8954] bond1 (unregistering): Released all slaves [ 299.030080][ T8976] netlink: 32 bytes leftover after parsing attributes in process `syz.1.736'. [ 299.267363][ T8985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.737'. [ 299.375165][ T8988] netlink: 48 bytes leftover after parsing attributes in process `syz.3.738'. [ 299.398469][ T8988] netlink: 36 bytes leftover after parsing attributes in process `syz.3.738'. [ 300.289143][ T9025] ip_tables: iptables: counters copy to user failed while replacing table [ 300.507113][ T9033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.751'. [ 300.873988][ T9048] netlink: zone id is out of range [ 300.958724][ T9048] netlink: 'syz.2.754': attribute type 14 has an invalid length. [ 301.666981][ T9073] geneve0: entered allmulticast mode [ 302.020570][ T9091] ip_tables: iptables: counters copy to user failed while replacing table [ 302.120342][ T9096] ip_tables: iptables: counters copy to user failed while replacing table [ 302.627712][ T9105] netlink: 'syz.3.768': attribute type 3 has an invalid length. [ 302.627737][ T9105] netlink: 244 bytes leftover after parsing attributes in process `syz.3.768'. [ 302.727969][ T9101] netlink: 28 bytes leftover after parsing attributes in process `syz.0.766'. [ 302.774188][ T9101] bridge0: entered promiscuous mode [ 302.774214][ T9101] bridge0: entered allmulticast mode [ 302.827831][ T9101] team0: Port device bridge0 added [ 303.219937][ T9122] syzkaller0: Caught tx_queue_len zero misconfig [ 303.246782][ T9122] netlink: 68 bytes leftover after parsing attributes in process `syz.1.771'. [ 303.294665][ T9122] netlink: 'syz.1.771': attribute type 17 has an invalid length. [ 303.294693][ T9122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.771'. [ 303.294723][ T9122] netlink: 28 bytes leftover after parsing attributes in process `syz.1.771'. [ 303.841909][ T9140] Cannot find add_set index 0 as target [ 304.914773][ T9176] xt_TCPMSS: Only works on TCP SYN packets [ 305.258129][ T9178] netlink: 28 bytes leftover after parsing attributes in process `syz.4.782'. [ 305.258164][ T9178] netlink: 28 bytes leftover after parsing attributes in process `syz.4.782'. [ 305.424492][ T9190] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 305.430808][ T9190] xt_hashlimit: size too large, truncated to 1048576 [ 305.597576][ T9193] netlink: 'syz.1.785': attribute type 10 has an invalid length. [ 305.639850][ T9193] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 305.742552][ T9199] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 305.747101][ T9199] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 305.829120][ T9201] netlink: 13 bytes leftover after parsing attributes in process `syz.1.790'. [ 306.346222][ T9220] netlink: 16 bytes leftover after parsing attributes in process `syz.0.795'. [ 306.383834][ T9220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.795'. [ 306.496528][ T53] Bluetooth: hci3: unexpected event for opcode 0x0005 [ 307.467886][ T9265] netlink: 256 bytes leftover after parsing attributes in process `syz.1.805'. [ 307.470126][ T9265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.805'. [ 307.470160][ T9265] netlink: 'syz.1.805': attribute type 5 has an invalid length. [ 307.470176][ T9265] netlink: 20 bytes leftover after parsing attributes in process `syz.1.805'. [ 307.630538][ T9265] geneve2: entered promiscuous mode [ 307.630565][ T9265] geneve2: entered allmulticast mode [ 307.783360][ T8860] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 307.783416][ T8860] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 307.783464][ T8860] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 308.509173][ T9295] netlink: 'syz.4.810': attribute type 4 has an invalid length. [ 308.509200][ T9295] netlink: 224 bytes leftover after parsing attributes in process `syz.4.810'. [ 308.923108][ T9308] netlink: 'syz.1.814': attribute type 1 has an invalid length. [ 308.923136][ T9308] netlink: 224 bytes leftover after parsing attributes in process `syz.1.814'. [ 308.980949][ T9315] netlink: 60 bytes leftover after parsing attributes in process `syz.2.813'. [ 309.457630][ T9301] pim6reg: entered allmulticast mode [ 309.485155][ T9307] pim6reg: left allmulticast mode [ 309.654238][ T9303] syzkaller1: entered promiscuous mode [ 309.654264][ T9303] syzkaller1: entered allmulticast mode [ 309.733257][ T9338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.822'. [ 310.579670][ T9364] netlink: 'syz.0.833': attribute type 18 has an invalid length. [ 310.628784][ T9364] netlink: 'syz.0.833': attribute type 18 has an invalid length. [ 310.631973][ T8862] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.636563][ T31] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.636683][ T31] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.636779][ T31] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.305177][ T9395] netlink: 'syz.0.839': attribute type 21 has an invalid length. [ 311.305272][ T9395] __nla_validate_parse: 6 callbacks suppressed [ 311.305386][ T9395] netlink: 132 bytes leftover after parsing attributes in process `syz.0.839'. [ 311.599252][ T9406] netlink: 4 bytes leftover after parsing attributes in process `syz.1.842'. [ 311.642116][ T9410] netlink: 40 bytes leftover after parsing attributes in process `syz.0.843'. [ 311.874998][ T9406] team0 (unregistering): Port device team_slave_0 removed [ 311.959299][ T9406] team0 (unregistering): Port device team_slave_1 removed [ 312.067462][ T9413] syzkaller0: entered promiscuous mode [ 312.067488][ T9413] syzkaller0: entered allmulticast mode [ 312.528894][ T9439] netlink: 'syz.0.850': attribute type 1 has an invalid length. [ 312.536754][ T9440] netlink: 'syz.0.850': attribute type 1 has an invalid length. [ 312.801013][ T9439] 8021q: adding VLAN 0 to HW filter on device bond4 [ 312.860913][ T9448] netlink: 32 bytes leftover after parsing attributes in process `syz.3.852'. [ 312.988733][ T9443] bond4: (slave geneve2): making interface the new active one [ 313.014479][ T9443] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 313.275896][ T9457] netlink: 28 bytes leftover after parsing attributes in process `syz.4.853'. [ 313.642050][ T9473] netlink: 48 bytes leftover after parsing attributes in process `syz.2.858'. [ 313.644451][ T9464] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.645068][ T9464] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.645227][ T9464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.809317][ T9510] team0: Device xfrm0 is of different type [ 315.018981][ T9533] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 315.651200][ T9545] tipc: Started in network mode [ 315.651234][ T9545] tipc: Node identity 6a2cfeaf7c75, cluster identity 4711 [ 315.651672][ T9545] tipc: Enabled bearer , priority 0 [ 315.676427][ T9543] tipc: Resetting bearer [ 315.689847][ T9509] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 316.023721][ T9561] netlink: 'syz.1.883': attribute type 20 has an invalid length. [ 316.023743][ T9561] netlink: 4 bytes leftover after parsing attributes in process `syz.1.883'. [ 316.079067][ T9561] netlink: 'syz.1.883': attribute type 20 has an invalid length. [ 316.079089][ T9561] netlink: 4 bytes leftover after parsing attributes in process `syz.1.883'. [ 316.099518][ T8863] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.099571][ T8863] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.099609][ T8863] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.197275][ T9560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.881'. [ 316.664652][ T5849] tipc: Node number set to 374996655 [ 316.713242][ T53] Bluetooth: hci3: command 0x0406 tx timeout [ 317.355285][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.382824][ T9617] netlink: 14 bytes leftover after parsing attributes in process `syz.3.897'. [ 317.416887][ T9617] bond0 (unregistering): left promiscuous mode [ 317.416912][ T9617] bond_slave_0: left promiscuous mode [ 317.417145][ T9617] bond_slave_1: left promiscuous mode [ 317.444704][ T9617] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.464765][ T9617] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 317.495474][ T9617] bond0 (unregistering): Released all slaves [ 318.662215][ T9656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.906'. [ 318.700118][ T9662] netlink: 64 bytes leftover after parsing attributes in process `syz.0.910'. [ 318.719731][ T9656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.906'. [ 318.829690][ T9656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.906'. [ 318.832111][ T31] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.832160][ T31] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.832199][ T31] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.832236][ T31] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.953353][ T9673] Bluetooth: MGMT ver 1.23 [ 319.064536][ T9673] ip_tables: iptables: counters copy to user failed while replacing table [ 319.330349][ T9678] netlink: 'syz.3.913': attribute type 1 has an invalid length. [ 320.052397][ T9699] netlink: 32 bytes leftover after parsing attributes in process `syz.2.918'. [ 320.241722][ T9707] openvswitch: netlink: Multiple metadata blocks provided [ 320.784070][ T9719] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 321.617117][ T9748] netlink: 24 bytes leftover after parsing attributes in process `syz.4.934'. [ 321.890892][ T9756] netlink: 'syz.1.938': attribute type 3 has an invalid length. [ 321.890916][ T9756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.938'. [ 322.084045][ T9762] bond0: option downdelay: invalid value (18446744073709551615) [ 322.084076][ T9762] bond0: option downdelay: allowed values 0 - 2147483647 [ 322.123735][ T9762] bond0 (unregistering): Released all slaves [ 322.217325][ T9773] netlink: 12 bytes leftover after parsing attributes in process `syz.4.942'. [ 322.499602][ T9778] bond2: entered promiscuous mode [ 322.509002][ T9778] bond2: entered allmulticast mode [ 322.518421][ T9778] 8021q: adding VLAN 0 to HW filter on device bond2 [ 322.621319][ T9787] syzkaller1: entered promiscuous mode [ 322.621631][ T9787] syzkaller1: entered allmulticast mode [ 323.120849][ T9800] netlink: 24 bytes leftover after parsing attributes in process `syz.3.947'. [ 323.229302][ T9807] netlink: 244 bytes leftover after parsing attributes in process `syz.2.949'. [ 323.242533][ T9806] netlink: 4 bytes leftover after parsing attributes in process `syz.3.947'. [ 323.350721][ T9804] pim6reg: entered allmulticast mode [ 323.486393][ T9815] netlink: 12 bytes leftover after parsing attributes in process `syz.1.950'. [ 323.540402][ T9823] netlink: 8 bytes leftover after parsing attributes in process `syz.4.952'. [ 323.575273][ T9804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.949'. [ 323.575297][ T9804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.949'. [ 323.994767][ T9834] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 324.156957][ T9837] syzkaller1: entered promiscuous mode [ 324.157173][ T9837] syzkaller1: entered allmulticast mode [ 324.352101][ T9845] netlink: 24 bytes leftover after parsing attributes in process `syz.4.959'. [ 324.358577][ T9842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.957'. [ 324.358607][ T9842] netlink: 16 bytes leftover after parsing attributes in process `syz.3.957'. [ 325.065941][ T9860] netlink: 'syz.4.962': attribute type 4 has an invalid length. [ 325.995756][ T9878] netlink: 'syz.0.967': attribute type 10 has an invalid length. [ 326.018151][ T9878] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.042648][ T9878] bond0: (slave team0): Enslaving as an active interface with an up link [ 326.094360][ T9879] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 326.691403][ T9897] netlink: 'syz.1.974': attribute type 1 has an invalid length. [ 326.830944][ T9902] x_tables: duplicate underflow at hook 2 [ 327.289234][ T9916] veth0: entered promiscuous mode [ 327.397330][ T9926] netlink: 'syz.0.983': attribute type 39 has an invalid length. [ 327.474499][ T9928] vlan0: entered promiscuous mode [ 327.818510][ T9938] netlink: 'syz.3.985': attribute type 1 has an invalid length. [ 327.820901][ T9938] netlink: 'syz.3.985': attribute type 1 has an invalid length. [ 327.938184][ T9938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.023170][ T9942] bond0: (slave ip6erspan0): making interface the new active one [ 328.042592][ T9942] bond0: (slave ip6erspan0): Enslaving as an active interface with an up link [ 328.124937][ T9914] veth0: left promiscuous mode [ 328.385211][ T9954] __nla_validate_parse: 11 callbacks suppressed [ 328.385233][ T9954] netlink: 60 bytes leftover after parsing attributes in process `syz.3.990'. [ 328.745989][ T9963] netlink: 'syz.2.993': attribute type 10 has an invalid length. [ 328.765296][ T9963] netlink: 28 bytes leftover after parsing attributes in process `syz.2.993'. [ 329.062425][ T9976] xt_hashlimit: size too large, truncated to 1048576 [ 329.493843][ T9996] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1002'. [ 329.601814][T10001] virt_wifi0 speed is unknown, defaulting to 1000 [ 329.601895][T10001] virt_wifi0 speed is unknown, defaulting to 1000 [ 329.610095][T10001] virt_wifi0 speed is unknown, defaulting to 1000 [ 329.634219][T10001] smbdirect: ib_dev[]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 329.634264][T10001] smbdirect: ib_dev[]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 329.634309][T10001] smbdirect: ib_dev[]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 329.927645][T10001] virt_wifi0 speed is unknown, defaulting to 1000 [ 329.932268][T10001] virt_wifi0 speed is unknown, defaulting to 1000 [ 329.961978][T10011] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1004'. [ 330.004663][T10001] virt_wifi0 speed is unknown, defaulting to 1000 [ 330.035960][T10001] virt_wifi0 speed is unknown, defaulting to 1000 [ 330.040766][T10001] virt_wifi0 speed is unknown, defaulting to 1000 [ 330.588079][T10031] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 330.604826][T10035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1013'. [ 330.674779][T10040] TC_ACT_REPEAT abuse ? [ 331.286506][T10063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1020'. [ 331.286555][T10063] netlink: 'syz.3.1020': attribute type 10 has an invalid length. [ 331.286574][T10063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1020'. [ 331.647404][T10078] netlink: 'syz.3.1024': attribute type 9 has an invalid length. [ 331.647429][T10078] netlink: 134780 bytes leftover after parsing attributes in process `syz.3.1024'. [ 331.829202][T10087] ip_tables: iptables: counters copy to user failed while replacing table [ 331.849935][T10085] batman_adv: batadv0: Interface deactivated: syz_tun [ 331.904277][T10077] netlink: 'syz.3.1024': attribute type 1 has an invalid length. [ 331.904301][T10077] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1024'. [ 331.993066][T10083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1026'. [ 332.043112][T10094] syzkaller1: entered promiscuous mode [ 332.043136][T10094] syzkaller1: entered allmulticast mode [ 333.094680][T10138] netlink: 'syz.4.1036': attribute type 1 has an invalid length. [ 333.094707][T10138] netlink: 'syz.4.1036': attribute type 2 has an invalid length. [ 333.200974][T10137] sctp: [Deprecated]: syz.3.1037 (pid 10137) Use of struct sctp_assoc_value in delayed_ack socket option. [ 333.200974][T10137] Use struct sctp_sack_info instead [ 333.968617][T10161] __nla_validate_parse: 2 callbacks suppressed [ 333.968640][T10161] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1041'. [ 334.564428][T10171] bridge0: port 3(vlan3) entered blocking state [ 334.564560][T10171] bridge0: port 3(vlan3) entered disabled state [ 334.564722][T10171] vlan3: entered allmulticast mode [ 334.568644][T10171] vlan3: entered promiscuous mode [ 334.614499][T10171] batman_adv: batadv0: Removing interface: syz_tun [ 334.661897][T10171] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.667101][T10171] bridge_slave_1: left allmulticast mode [ 334.667265][T10171] bridge_slave_1: left promiscuous mode [ 334.667486][T10171] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.699550][T10171] bond0: (slave bond_slave_0): Releasing backup interface [ 334.710602][T10171] bond_slave_0: left allmulticast mode [ 334.730894][T10171] bond0: (slave bond_slave_1): Releasing backup interface [ 334.742518][T10171] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.742545][T10171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.746121][T10171] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 335.018339][T10178] syzkaller1: entered promiscuous mode [ 335.018365][T10178] syzkaller1: entered allmulticast mode [ 335.037476][T10178] 0: reclassify loop, rule prio 0, protocol 800 [ 335.109669][T10187] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 335.135588][T10187] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1050'. [ 335.741446][T10210] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1056'. [ 335.890350][T10216] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1058'. [ 336.308136][T10229] syzkaller0: entered promiscuous mode [ 336.308162][T10229] syzkaller0: entered allmulticast mode [ 336.608327][T10241] ip_tables: iptables: counters copy to user failed while replacing table [ 336.968996][T10252] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 336.984819][T10252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1068'. [ 336.986030][T10247] C: renamed from lo (while UP) [ 336.995527][T10247] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 337.026646][T10252] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1068'. [ 337.088015][T10255] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1068'. [ 366.535641][T10280] syzkaller1: entered promiscuous mode [ 366.535860][T10280] syzkaller1: entered allmulticast mode [ 366.605613][ T5637] Bluetooth: hci1: unexpected event 0x04 length: 11 > 10 [ 366.605653][ T5637] Bluetooth: unknown link type 48 [ 366.605675][ T5637] Bluetooth: hci1: connection err: -111 [ 366.633848][ T162] IPVS: starting estimator thread 0... [ 366.722087][T10293] IPVS: using max 30 ests per chain, 72000 per kthread [ 366.964349][T10304] syzkaller0: entered promiscuous mode [ 366.964535][T10304] syzkaller0: entered allmulticast mode [ 367.611810][T10326] netlink: 'syz.1.1087': attribute type 3 has an invalid length. [ 367.611834][T10326] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1087'. [ 367.648236][T10332] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1089'. [ 367.650813][T10326] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 368.237669][T10348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1091'. [ 368.239855][T10343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1091'. [ 368.507689][T10350] IPv4: Oversized IP packet from 127.202.26.0 [ 368.526245][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806852d800: rx timeout, send abort [ 368.527850][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88806852d800: 0x2ff03: (3) A timeout occurred and this is the connection abort to close the session. [ 369.060927][T10364] netlink: 'syz.0.1098': attribute type 10 has an invalid length. [ 369.456325][T10378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1100'. [ 369.613094][T10372] TC_ACT_REPEAT abuse ? [ 370.004374][T10387] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1103'. [ 370.129716][T10387] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1103'. [ 370.730197][T10420] xt_ecn: cannot match TCP bits for non-tcp packets [ 370.863440][T10426] xt_ecn: cannot match TCP bits for non-tcp packets [ 371.852741][T10461] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1119'. [ 371.852777][T10461] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1119'. [ 372.514720][T10484] IPVS: lc: FWM 3 0x00000003 - no destination available [ 372.645769][T10481] bridge0: port 3(veth0) entered disabled state [ 372.646435][T10481] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.647051][T10481] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.666333][T10491] netlink: 'syz.1.1126': attribute type 1 has an invalid length. [ 372.666360][T10491] nbd: error processing sock list [ 373.007518][T10481] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.028786][T10481] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.051808][T10506] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1129'. [ 373.302718][ T162] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.302759][ T162] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.302806][ T162] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.302835][ T162] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.302871][ T162] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.302898][ T162] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.302934][ T162] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.302961][ T162] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.431360][ T5637] Bluetooth: hci3: command 0x0406 tx timeout [ 374.114183][T10533] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1137'. [ 374.159471][T10537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1139'. [ 374.194641][T10532] netlink: 'syz.0.1138': attribute type 5 has an invalid length. [ 374.268731][T10542] netlink: 'syz.2.1142': attribute type 58 has an invalid length. [ 374.268756][T10542] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1142'. [ 374.807593][T10568] netlink: 'syz.0.1148': attribute type 10 has an invalid length. [ 374.866445][T10570] netlink: 'syz.0.1148': attribute type 10 has an invalid length. [ 374.892180][T10568] team0: Device wg2 is of different type [ 374.960006][T10570] team0: Device wg2 is of different type [ 375.460996][T10581] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1151'. [ 377.309631][T10546] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 377.620277][T10589] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1153'. [ 377.635374][T10589] openvswitch: netlink: nsh attr 359 is out of range max 3 [ 377.964211][T10603] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1159'. [ 378.060085][T10607] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 378.287321][T10617] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 378.622937][T10628] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1168'. [ 378.718648][T10635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1171'. [ 378.718678][T10635] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1171'. [ 378.788820][T10639] syzkaller0: entered promiscuous mode [ 378.788844][T10639] syzkaller0: entered allmulticast mode [ 378.801793][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.397612][T10660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1180'. [ 379.397640][T10660] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1180'. [ 379.424059][ T3324] IPVS: starting estimator thread 0... [ 379.515777][T10663] IPVS: using max 23 ests per chain, 55200 per kthread [ 379.790841][T10670] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 379.927241][T10676] SET target dimension over the limit! [ 379.946039][T10676] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 379.946137][T10676] gretap0: entered promiscuous mode [ 379.946156][T10676] gretap0: entered allmulticast mode [ 379.975549][T10676] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1182'. [ 380.008897][T10676] ip6gre2: entered promiscuous mode [ 380.139038][T10647] bond5: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 380.215955][T10647] bond5 (unregistering): Released all slaves [ 380.320649][T10689] netlink: 'syz.4.1183': attribute type 10 has an invalid length. [ 380.320675][T10689] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1183'. [ 380.645645][T10680] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 380.670108][T10689] dummy0: entered promiscuous mode [ 380.888575][T10703] netlink: 'syz.1.1189': attribute type 1 has an invalid length. [ 381.110400][T10715] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1190'. [ 381.538854][T10738] netlink: 'syz.3.1197': attribute type 1 has an invalid length. [ 381.647261][T10740] netlink: 'syz.1.1198': attribute type 1 has an invalid length. [ 381.647284][T10740] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1198'. [ 381.840828][T10738] 8021q: adding VLAN 0 to HW filter on device bond1 [ 382.648808][ T30] audit: type=1107 audit(1793550159.677:2): pid=10789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 382.799452][T10799] ip_tables: iptables: counters copy to user failed while replacing table [ 382.974396][T10808] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1220'. [ 383.050280][T10811] vlan4: entered promiscuous mode [ 383.050301][T10811] bridge0: entered promiscuous mode [ 383.050509][T10811] vlan4: entered allmulticast mode [ 383.050522][T10811] bridge0: entered allmulticast mode [ 383.214586][T10819] netlink: 'syz.4.1224': attribute type 13 has an invalid length. [ 383.657862][T10831] netlink: 'syz.4.1226': attribute type 8 has an invalid length. [ 383.657887][T10831] __nla_validate_parse: 2 callbacks suppressed [ 383.657931][T10831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1226'. [ 383.714195][T10835] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1229'. [ 383.767770][T10831] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.899479][T10846] x_tables: unsorted entry at hook 1 [ 383.978767][T10847] netlink: 'syz.0.1227': attribute type 32 has an invalid length. [ 383.978793][T10847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1227'. [ 384.092018][T10831] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.159877][T10845] ip_vti0: entered promiscuous mode [ 384.169285][T10845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1226'. [ 384.292987][T10847] bond6: Setting coupled_control to off (0) [ 384.424320][T10863] netlink: 368 bytes leftover after parsing attributes in process `syz.1.1233'. [ 384.596366][T10874] netlink: 'syz.3.1235': attribute type 13 has an invalid length. [ 384.698680][T10878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1238'. [ 384.698718][T10878] netlink: 50 bytes leftover after parsing attributes in process `syz.3.1238'. [ 384.698738][T10878] netlink: 50 bytes leftover after parsing attributes in process `syz.3.1238'. [ 384.845727][T10866] netlink: 'syz.1.1233': attribute type 3 has an invalid length. [ 384.845752][T10866] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1233'. [ 384.886146][T10880] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 385.029694][T10880] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 385.140332][T10902] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1242'. [ 385.895462][ T5296] veth0_vlan: left promiscuous mode [ 385.936818][ T5746] veth0_vlan: entered promiscuous mode [ 388.144769][T10907] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 388.555037][T10954] netlink: 'syz.1.1249': attribute type 10 has an invalid length. [ 388.555206][T10954] dummy0: entered promiscuous mode [ 388.815900][T10964] tc action pedit unable to extract header offset for header type (0x4) [ 388.815925][T10964] tc action pedit unable to extract header offset for header type (0x4) [ 388.815939][T10964] tc action pedit unable to extract header offset for header type (0x4) [ 388.815952][T10964] tc action pedit unable to extract header offset for header type (0x4) [ 388.815966][T10964] tc action pedit unable to extract header offset for header type (0x4) [ 388.815980][T10964] tc action pedit unable to extract header offset for header type (0x4) [ 388.815993][T10964] tc action pedit unable to extract header offset for header type (0x4) [ 388.816007][T10964] tc action pedit unable to extract header offset for header type (0x4) [ 388.816020][T10964] tc action pedit unable to extract header offset for header type (0x4) [ 388.816034][T10964] tc action pedit unable to extract header offset for header type (0x4) [ 388.816062][T10964] 0: reclassify loop, rule prio 0, protocol 800 [ 389.277260][T10987] __nla_validate_parse: 4 callbacks suppressed [ 389.277285][T10987] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1257'. [ 389.308834][T10987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1257'. [ 389.426123][T10985] xt_nfacct: accounting object `' does not exist [ 389.794336][T11002] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1259'. [ 389.794838][T11001] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1259'. [ 390.534768][T11044] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1260'. [ 390.802054][T11048] netlink: set zone limit has 4 unknown bytes [ 390.828024][ T5637] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 391.229364][T11069] ip6t_hbh: unknown flags 38 [ 391.838413][T11093] nbd: must specify an index to disconnect [ 391.878715][T11103] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1283'. [ 392.048097][T11107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1285'. [ 392.142572][T11118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1285'. [ 392.314245][T11116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1286'. [ 392.314270][T11116] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1286'. [ 392.364047][T11123] xt_l2tp: wrong L2TP version: 255 [ 392.449803][T11110] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 392.622742][T11115] bond4: option all_slaves_active: invalid value (179) [ 392.642875][T11115] bond4 (unregistering): Released all slaves [ 392.978235][T11143] tipc: Failed to remove unknown binding: 66,1,1/0:3584634783/3584634785 [ 393.497146][T11157] 8021q: adding VLAN 0 to HW filter on device bond3 [ 393.584976][T11162] macvlan3: entered promiscuous mode [ 393.585002][T11162] macvlan3: entered allmulticast mode [ 393.585337][T11162] bond3: entered allmulticast mode [ 393.585380][T11162] bond3: entered promiscuous mode [ 393.627583][T11162] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 393.653676][T11162] team0: Port device macvlan3 added [ 394.082294][ T5637] Bluetooth: hci4: unexpected cc 0x1003 length: 67 > 9 [ 394.082331][ T5637] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 394.262637][T11164] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 394.800521][T11210] vlan4: entered promiscuous mode [ 394.800742][T11210] vlan4: entered allmulticast mode [ 395.137740][T11222] netlink: 'syz.2.1310': attribute type 4 has an invalid length. [ 395.137794][T11222] __nla_validate_parse: 7 callbacks suppressed [ 395.137808][T11222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1310'. [ 395.889840][T11245] Bluetooth: ISO socket layer initialized [ 396.632640][T11274] bond2: entered promiscuous mode [ 396.633072][T11274] bond2: entered allmulticast mode [ 396.633452][T11274] 8021q: adding VLAN 0 to HW filter on device bond2 [ 397.579174][T11315] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1329'. [ 398.347882][T11324] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1329'. [ 398.473200][T11319] vlan1: entered allmulticast mode [ 398.474095][T11299] rxe_eth0 speed is unknown, defaulting to 1000 [ 398.617522][T11330] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1327'. [ 404.651090][ C1] sched: DL replenish lagged too much [ 447.334817][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 503.273895][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 566.741794][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 627.805791][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 634.990998][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 634.998007][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P11330/1:b..l.. [ 635.007166][ C0] rcu: (detected by 0, t=10503 jiffies, g=53045, q=1338558 ncpus=2) [ 635.015290][ C0] task:syz.1.1327 state:R running task stack:24720 pid:11330 tgid:11308 ppid:5631 task_flags:0x400140 flags:0x00080002 [ 635.028869][ C0] Call Trace: [ 635.032195][ C0] [ 635.035199][ C0] __schedule+0x17dd/0x5830 [ 635.039782][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 635.045024][ C0] ? __lock_acquire+0x747/0x2de0 [ 635.050012][ C0] ? __pfx___schedule+0x10/0x10 [ 635.054909][ C0] ? __lock_acquire+0x747/0x2de0 [ 635.059924][ C0] preempt_schedule_irq+0x4b/0x90 [ 635.064998][ C0] irqentry_exit+0x14f/0x9b0 [ 635.069627][ C0] ? trace_irq_disable+0x3b/0x140 [ 635.074710][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 635.080745][ C0] RIP: 0010:deref_stack_reg+0xbb/0x220 [ 635.086259][ C0] Code: 83 3f 00 0f 95 c0 4c 39 c5 0f 96 c1 20 c1 4d 39 c6 0f 97 c0 20 c8 3c 01 75 18 49 8d 40 08 48 39 e8 0f 97 c1 4c 39 f0 0f 96 c0 <84> c1 0f 85 c0 00 00 00 49 8d 7f 28 48 89 f8 48 c1 e8 03 80 3c 30 [ 635.105905][ C0] RSP: 0018:ffffc90004c9e918 EFLAGS: 00000283 [ 635.112030][ C0] RAX: ffffc90004c9f301 RBX: 1ffff92000993d41 RCX: 0000000000000001 [ 635.120035][ C0] RDX: ffffc90004c9ea48 RSI: dffffc0000000000 RDI: ffffc90004c9ea18 [ 635.128043][ C0] RBP: ffffc90004c98000 R08: ffffc90004c9f390 R09: 0000000000000000 [ 635.136054][ C0] R10: ffffc90004c9ea58 R11: fffff52000993d4d R12: 1ffff92000993d42 [ 635.144076][ C0] R13: 1ffff92000993d43 R14: ffffc90004ca0000 R15: ffffc90004c9ea08 [ 635.152114][ C0] unwind_next_frame+0x19bd/0x2550 [ 635.157289][ C0] ? xfrm_add_sa+0x2f3f/0x40a0 [ 635.162289][ C0] ? unwind_next_frame+0x8f/0x2550 [ 635.167454][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 635.173655][ C0] arch_stack_walk+0x11b/0x150 [ 635.178480][ C0] ? xfrm_user_rcv_msg+0x7a8/0xf30 [ 635.183647][ C0] stack_trace_save+0xa9/0x100 [ 635.188481][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 635.193896][ C0] ? __lock_acquire+0x747/0x2de0 [ 635.198894][ C0] save_stack+0x122/0x230 [ 635.203280][ C0] ? __pfx_save_stack+0x10/0x10 [ 635.208188][ C0] ? lock_acquire+0x115/0x350 [ 635.212905][ C0] ? __free_frozen_pages+0xc97/0xd90 [ 635.218228][ C0] ? __slab_free+0x269/0x2c0 [ 635.222861][ C0] ? qlist_free_all+0x99/0x100 [ 635.227698][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 635.233383][ C0] ? __kasan_kmalloc+0x22/0xb0 [ 635.238230][ C0] ? __kmalloc_cache_noprof+0x31c/0x600 [ 635.243815][ C0] ? crypto_larval_alloc+0x59/0x290 [ 635.249182][ C0] ? crypto_alg_mod_lookup+0x1a1/0x5d0 [ 635.254716][ C0] ? crypto_alloc_tfm_node+0x135/0x3e0 [ 635.260228][ C0] ? esp_init_state+0x615/0x1220 [ 635.265300][ C0] ? __xfrm_init_state+0x9dd/0x1320 [ 635.270585][ C0] ? xfrm_add_sa+0x2f3f/0x40a0 [ 635.275411][ C0] __reset_page_owner+0x73/0x2a0 [ 635.280409][ C0] __free_frozen_pages+0xc97/0xd90 [ 635.285576][ C0] __slab_free+0x269/0x2c0 [ 635.290057][ C0] qlist_free_all+0x99/0x100 [ 635.294700][ C0] kasan_quarantine_reduce+0x148/0x160 [ 635.300220][ C0] __kasan_kmalloc+0x22/0xb0 [ 635.304864][ C0] __kmalloc_cache_noprof+0x31c/0x600 [ 635.310282][ C0] ? __kmalloc_cache_noprof+0x148/0x600 [ 635.315864][ C0] ? crypto_larval_alloc+0x59/0x290 [ 635.321114][ C0] ? crypto_larval_alloc+0x59/0x290 [ 635.326490][ C0] crypto_larval_alloc+0x59/0x290 [ 635.331585][ C0] crypto_alg_mod_lookup+0x1a1/0x5d0 [ 635.336930][ C0] crypto_alloc_tfm_node+0x135/0x3e0 [ 635.342314][ C0] esp_init_state+0x615/0x1220 [ 635.347135][ C0] ? do_syscall_64+0x166/0x520 [ 635.351942][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.358069][ C0] ? __pfx_esp_init_state+0x10/0x10 [ 635.363343][ C0] ? lock_acquire+0x115/0x350 [ 635.368093][ C0] ? __xfrm_init_state+0x745/0x1320 [ 635.373360][ C0] __xfrm_init_state+0x9dd/0x1320 [ 635.378432][ C0] ? __xfrm_init_state+0x745/0x1320 [ 635.383684][ C0] xfrm_add_sa+0x2f3f/0x40a0 [ 635.388329][ C0] ? __pfx_xfrm_add_sa+0x10/0x10 [ 635.393306][ C0] ? apparmor_capable+0x126/0x170 [ 635.398492][ C0] ? __nla_parse+0x40/0x60 [ 635.403027][ C0] xfrm_user_rcv_msg+0x7a8/0xf30 [ 635.408024][ C0] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 635.413563][ C0] ? __mutex_trylock_common+0x15f/0x270 [ 635.419169][ C0] ? __pfx___mutex_trylock_common+0x10/0x10 [ 635.425117][ C0] ? rcu_is_watching+0x16/0xb0 [ 635.429938][ C0] ? trace_contention_end+0x3d/0x140 [ 635.435287][ C0] netlink_rcv_skb+0x226/0x4a0 [ 635.440170][ C0] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 635.445708][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 635.451067][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 635.456343][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 635.461594][ C0] xfrm_netlink_rcv+0x79/0x90 [ 635.466328][ C0] netlink_unicast+0x8ef/0xa80 [ 635.471180][ C0] netlink_sendmsg+0x7f0/0xb20 [ 635.476005][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 635.481349][ C0] ? aa_sock_msg_perm+0x144/0x210 [ 635.486456][ C0] ? apparmor_socket_sendmsg+0x98/0x360 [ 635.492053][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 635.497421][ C0] sock_sendmsg_nosec+0x14e/0x190 [ 635.502603][ C0] ____sys_sendmsg+0x54e/0x850 [ 635.507416][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 635.512768][ C0] ? import_iovec+0x73/0xa0 [ 635.517385][ C0] ___sys_sendmsg+0x2a5/0x360 [ 635.522097][ C0] ? __lock_acquire+0x747/0x2de0 [ 635.527086][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 635.532351][ C0] ? tomoyo_path_number_perm+0x219/0x5f0 [ 635.538134][ C0] ? __fget_files+0x3a2/0x420 [ 635.542927][ C0] ? __fget_files+0x2a/0x420 [ 635.547565][ C0] __x64_sys_sendmsg+0x1b1/0x290 [ 635.552546][ C0] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 635.558053][ C0] ? kfree+0x4d/0x650 [ 635.562087][ C0] ? __pfx_kcov_ioctl+0x10/0x10 [ 635.566997][ C0] do_syscall_64+0x166/0x520 [ 635.571626][ C0] ? trace_irq_disable+0x3b/0x140 [ 635.576697][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.582810][ C0] ? clear_bhb_loop+0x70/0xc0 [ 635.587556][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.593490][ C0] RIP: 0033:0x7f0d75d9f559 [ 635.597947][ C0] RSP: 002b:00007f0d76c76028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 635.606416][ C0] RAX: ffffffffffffffda RBX: 00007f0d76026360 RCX: 00007f0d75d9f559 [ 635.614435][ C0] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 635.622444][ C0] RBP: 00007f0d75e36b50 R08: 0000000000000000 R09: 0000000000000000 [ 635.630447][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 635.638450][ C0] R13: 00007f0d760263f8 R14: 00007f0d76026360 R15: 00007ffcfd3b9518 [ 635.646484][ C0] [ 635.649540][ C0] rcu: rcu_preempt kthread starved for 1229 jiffies! g53045 f0x2 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=1 [ 635.660607][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 635.670612][ C0] rcu: RCU grace-period kthread stack dump: [ 635.676530][ C0] task:rcu_preempt state:R running task stack:27496 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 635.690074][ C0] Call Trace: [ 635.693385][ C0] [ 635.696352][ C0] __schedule+0x17dd/0x5830 [ 635.700903][ C0] ? __lock_acquire+0x747/0x2de0 [ 635.705907][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 635.711069][ C0] ? __pfx___schedule+0x10/0x10 [ 635.715959][ C0] ? lock_acquire+0x115/0x350 [ 635.720697][ C0] ? schedule+0x90/0x2b0 [ 635.725018][ C0] schedule+0x164/0x2b0 [ 635.729241][ C0] schedule_timeout+0x152/0x2c0 [ 635.734144][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 635.739571][ C0] ? __pfx_process_timeout+0x10/0x10 [ 635.744911][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 635.750755][ C0] ? prepare_to_swait_event+0x220/0x3e0 [ 635.756361][ C0] ? prepare_to_swait_event+0x35e/0x3e0 [ 635.761964][ C0] rcu_gp_fqs_loop+0x30c/0x1230 [ 635.766877][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 635.773076][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 635.778424][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 635.783682][ C0] rcu_gp_kthread+0x9c/0x340 [ 635.788329][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 635.793573][ C0] ? __kthread_parkme+0x71/0x1f0 [ 635.798572][ C0] ? __kthread_parkme+0x199/0x1f0 [ 635.803643][ C0] kthread+0x38b/0x480 [ 635.807761][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 635.813012][ C0] ? __pfx_kthread+0x10/0x10 [ 635.817650][ C0] ret_from_fork+0x514/0xb70 [ 635.822288][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 635.827442][ C0] ? __switch_to+0xc78/0x1410 [ 635.832199][ C0] ? __pfx_kthread+0x10/0x10 [ 635.836829][ C0] ret_from_fork_asm+0x1a/0x30 [ 635.841650][ C0] [ 635.844701][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 635.851062][ C0] Sending NMI from CPU 0 to CPUs 1: [ 635.856313][ C1] NMI backtrace for cpu 1 [ 635.856347][ C1] CPU: 1 UID: 0 PID: 3324 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 635.856369][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 635.856381][ C1] Workqueue: bat_events batadv_tt_purge [ 635.856499][ C1] RIP: 0010:__lock_acquire+0xb06/0x2de0 [ 635.856527][ C1] Code: c7 c6 f7 a0 7c 8e 67 48 0f b9 3a 90 31 c0 48 83 78 40 00 0f 84 73 1d 00 00 49 8b 45 20 25 ff 1f 00 00 48 0f a3 05 4a a0 21 14 <73> 10 48 69 c0 c8 00 00 00 48 8d 80 90 c9 66 95 eb 32 83 3d 11 30 [ 635.856543][ C1] RSP: 0018:ffffc90000a07818 EFLAGS: 00000003 [ 635.856565][ C1] RAX: 0000000000000007 RBX: 0000000002fcf7df RCX: 00000000add6e078 [ 635.856578][ C1] RDX: 000000004dbb4af1 RSI: 000000005970cd9e RDI: ffff888033babe80 [ 635.856591][ C1] RBP: 03813abc00000000 R08: ffffffff817879cf R09: 0000000000000000 [ 635.856604][ C1] R10: ffffc90000a07af8 R11: ffffffff81b3a880 R12: 0000000000004000 [ 635.856618][ C1] R13: ffff888033bacaf8 R14: ffff888033bacaf8 R15: 0000000000000005 [ 635.856631][ C1] FS: 0000000000000000(0000) GS:ffff88812371f000(0000) knlGS:0000000000000000 [ 635.856647][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 635.856660][ C1] CR2: 000055557ff05a38 CR3: 000000007eede000 CR4: 00000000003526f0 [ 635.856677][ C1] Call Trace: [ 635.856684][ C1] [ 635.856695][ C1] ? unwind_next_frame+0x8f/0x2550 [ 635.856723][ C1] ? unwind_next_frame+0x1baf/0x2550 [ 635.856753][ C1] ? lock_acquire+0x115/0x350 [ 635.856779][ C1] lock_acquire+0x115/0x350 [ 635.856807][ C1] ? unwind_next_frame+0x8f/0x2550 [ 635.856837][ C1] ? unwind_next_frame+0x8f/0x2550 [ 635.856866][ C1] ? net_rx_action+0x61d/0xf50 [ 635.856944][ C1] ? unwind_next_frame+0x8f/0x2550 [ 635.856970][ C1] unwind_next_frame+0xac/0x2550 [ 635.856995][ C1] ? unwind_next_frame+0x8f/0x2550 [ 635.857022][ C1] ? __napi_poll+0xaa/0x330 [ 635.857047][ C1] ? unwind_next_frame+0x8f/0x2550 [ 635.857073][ C1] ? kmem_cache_alloc_noprof+0x151/0x600 [ 635.857093][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 635.857119][ C1] arch_stack_walk+0x11b/0x150 [ 635.857146][ C1] ? net_rx_action+0x61d/0xf50 [ 635.857175][ C1] ? dst_alloc+0x105/0x170 [ 635.857199][ C1] stack_trace_save+0xa9/0x100 [ 635.857222][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 635.857247][ C1] ? lock_acquire+0x115/0x350 [ 635.857279][ C1] kasan_save_track+0x3e/0x80 [ 635.857303][ C1] ? kasan_save_track+0x3e/0x80 [ 635.857325][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 635.857349][ C1] ? kmem_cache_alloc_noprof+0x2b4/0x600 [ 635.857369][ C1] ? dst_alloc+0x105/0x170 [ 635.857391][ C1] ? ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 635.857438][ C1] ? ip_route_output_key_hash+0x18d/0x2a0 [ 635.857456][ C1] ? ip_route_output_flow+0x2a/0x150 [ 635.857504][ C1] ? ip_route_me_harder+0x762/0xfe0 [ 635.857521][ C1] ? synproxy_send_tcp+0x332/0x670 [ 635.857565][ C1] ? synproxy_send_client_synack+0x89b/0xde0 [ 635.857587][ C1] ? nft_synproxy_eval_v4+0x362/0x4e0 [ 635.857632][ C1] ? nft_synproxy_do_eval+0x389/0x5d0 [ 635.857655][ C1] ? nft_do_chain+0x48d/0x1b10 [ 635.857700][ C1] ? nft_do_chain_ipv4+0x195/0x290 [ 635.857762][ C1] ? nf_hook_slow+0xc5/0x220 [ 635.857802][ C1] ? NF_HOOK+0x21f/0x3c0 [ 635.857825][ C1] ? NF_HOOK+0x336/0x3c0 [ 635.857847][ C1] ? process_backlog+0xa6b/0x18b0 [ 635.857875][ C1] ? __napi_poll+0xaa/0x330 [ 635.857905][ C1] ? net_rx_action+0x61d/0xf50 [ 635.857954][ C1] __kasan_slab_alloc+0x6c/0x80 [ 635.857980][ C1] kmem_cache_alloc_noprof+0x2b4/0x600 [ 635.858000][ C1] ? dst_alloc+0x105/0x170 [ 635.858022][ C1] ? kmem_cache_alloc_noprof+0x151/0x600 [ 635.858043][ C1] ? dst_alloc+0x105/0x170 [ 635.858070][ C1] dst_alloc+0x105/0x170 [ 635.858096][ C1] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 635.858120][ C1] ? ip_route_output_key_hash+0xd8/0x2a0 [ 635.858141][ C1] ip_route_output_key_hash+0x18d/0x2a0 [ 635.858161][ C1] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 635.858182][ C1] ? lock_acquire+0x115/0x350 [ 635.858210][ C1] ip_route_output_flow+0x2a/0x150 [ 635.858238][ C1] ? ip_route_me_harder+0x74b/0xfe0 [ 635.858257][ C1] ip_route_me_harder+0x762/0xfe0 [ 635.858286][ C1] ? __pfx_ip_route_me_harder+0x10/0x10 [ 635.858308][ C1] ? __alloc_skb+0x27a/0x7a0 [ 635.858363][ C1] ? __cookie_v4_init_sequence+0x273/0x510 [ 635.858387][ C1] ? kmem_cache_alloc_node_noprof+0x3b9/0x600 [ 635.858413][ C1] synproxy_send_tcp+0x332/0x670 [ 635.858438][ C1] synproxy_send_client_synack+0x89b/0xde0 [ 635.858468][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 635.858491][ C1] ? nft_osf_eval+0x514/0x880 [ 635.858512][ C1] ? synproxy_pernet+0x45/0x270 [ 635.858539][ C1] nft_synproxy_eval_v4+0x362/0x4e0 [ 635.858567][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 635.858593][ C1] ? nf_ip_checksum+0x13c/0x510 [ 635.858618][ C1] nft_synproxy_do_eval+0x389/0x5d0 [ 635.858642][ C1] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 635.858671][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 635.858694][ C1] ? clockevents_program_event+0x491/0x630 [ 635.858723][ C1] nft_do_chain+0x48d/0x1b10 [ 635.858749][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 635.858777][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 635.858806][ C1] ? __local_bh_enable_ip+0xd6/0x140 [ 635.858832][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 635.858866][ C1] nft_do_chain_ipv4+0x195/0x290 [ 635.858890][ C1] ? ipt_do_table+0x2b9/0x15d0 [ 635.858913][ C1] ? __pfx_nft_do_chain_ipv4+0x10/0x10 [ 635.858939][ C1] ? iptable_mangle_hook+0x18a/0x4c0 [ 635.858967][ C1] ? __pfx_nft_do_chain_ipv4+0x10/0x10 [ 635.858993][ C1] nf_hook_slow+0xc5/0x220 [ 635.859013][ C1] NF_HOOK+0x21f/0x3c0 [ 635.859038][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 635.859064][ C1] ? NF_HOOK+0x9e/0x3c0 [ 635.859105][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 635.859131][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 635.859160][ C1] ? ip_local_deliver+0x113/0x190 [ 635.859186][ C1] NF_HOOK+0x336/0x3c0 [ 635.859212][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 635.859236][ C1] ? NF_HOOK+0x9e/0x3c0 [ 635.859265][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 635.859291][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 635.859316][ C1] ? ip_rcv_core+0x88d/0xd50 [ 635.859343][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 635.859367][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 635.859392][ C1] process_backlog+0xa6b/0x18b0 [ 635.859423][ C1] ? process_backlog+0x3de/0x18b0 [ 635.859459][ C1] __napi_poll+0xaa/0x330 [ 635.859487][ C1] net_rx_action+0x61d/0xf50 [ 635.859522][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 635.859565][ C1] handle_softirqs+0x265/0x8d0 [ 635.859597][ C1] ? batadv_tt_local_purge+0x277/0x300 [ 635.859625][ C1] do_softirq+0x77/0xd0 [ 635.859649][ C1] [ 635.859655][ C1] [ 635.859662][ C1] __local_bh_enable_ip+0x100/0x140 [ 635.859688][ C1] batadv_tt_local_purge+0x277/0x300 [ 635.859721][ C1] ? process_scheduled_works+0x97a/0x1630 [ 635.859750][ C1] batadv_tt_purge+0x35/0xa40 [ 635.859782][ C1] ? rcu_is_watching+0x16/0xb0 [ 635.859812][ C1] ? process_scheduled_works+0x97a/0x1630 [ 635.859840][ C1] process_scheduled_works+0xc3d/0x1630 [ 635.859885][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 635.859916][ C1] ? assign_work+0x3cf/0x5d0 [ 635.859946][ C1] worker_thread+0xa47/0xfb0 [ 635.859982][ C1] ? __kthread_parkme+0x71/0x1f0 [ 635.860006][ C1] kthread+0x38b/0x480 [ 635.860027][ C1] ? __pfx_worker_thread+0x10/0x10 [ 635.860054][ C1] ? __pfx_kthread+0x10/0x10 [ 635.860075][ C1] ret_from_fork+0x514/0xb70 [ 635.860098][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 635.860119][ C1] ? __switch_to+0xc78/0x1410 [ 635.860150][ C1] ? __pfx_kthread+0x10/0x10 [ 635.860177][ C1] ret_from_fork_asm+0x1a/0x30 [ 635.860206][ C1]