last executing test programs: 41.859088076s ago: executing program 3 (id=3687): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r1, 0x0, 0x0) (async) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) (async, rerun: 64) ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d) (async, rerun: 64) unshare(0x22020600) (async, rerun: 64) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) (rerun: 64) vmsplice(r2, &(0x7f0000000800)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0xd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000fd0020851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000ff6608fffffff3f800180000000000000000000000001000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xe7, &(0x7f00000027c0)=""/231, 0x41000, 0x1e}, 0x94) 41.718692954s ago: executing program 3 (id=3690): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x62, &(0x7f0000000040)={&(0x7f00000000c0)=@getqdisc={0x34, 0x26, 0x1, 0x70bd26, 0x10003, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xf}, {0xb, 0x4}, {0xfff3, 0xd}}, [{0xffffffffffffffac}, {0x4}, {0x4}, {0x4}, {}, {}]}, 0xffffffffffffff6f}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000100feffffffffdbdf25017c0000040042800c00018006000600800a000014000280100017800c00010006"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r1, 0x0, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4009845}, 0x1d9) 41.568492912s ago: executing program 3 (id=3691): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="640000000101010200000000000000000a0000000c001980080001008d070000440001802c00018014000300fd"], 0x64}, 0x1, 0x0, 0x0, 0x8000000}, 0x24008850) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_bt_hci(r1, 0x400448de, &(0x7f0000000040)="84b31ee703f6dada8ed000b18b82fbfb50c86fc0aba02a6f5d2b8ce005b37885a9215a77ebdcef511a982c2baddd95169b5b032a130e5da05539bda94377b5596a6e8cca1b") 41.412434131s ago: executing program 3 (id=3693): syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000d40)=[{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000080)="fc79ea35d065b9ab3476a577889a62263064a4f9365db73c96a2400dc5e53ae7", 0x20}], 0x1, 0x0, 0x0, 0x20008014}], 0x1, 0x4814) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000980)=@nat={'nat\x00', 0x670, 0x5, 0x458, 0x218, 0x218, 0xfeffffff, 0xf0, 0x218, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [0x4e23], 0x0, 0x0, 0x2, 0x8}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000000, 0x4000000]}}}, @common=@set={{0x40}, {{0x0, [0x218]}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@private=0xa010102, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010101, @ipv4=@dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) setsockopt$sock_void(r1, 0x1, 0x3f, 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f00000000c0)={'broute\x00', 0x0, 0x0, 0x0, [0x7, 0x0, 0x2, 0xa, 0x5, 0x3], 0x1, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}]}, 0x88) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x4, 0xe, 0x76, 0xfffffff5, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, 0x10, 0x80, 0x6, 0x5}}) 41.127718909s ago: executing program 3 (id=3697): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x8001ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r4 = socket$kcm(0xa, 0x922000000003, 0x11) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000150900010073797a30000000000900020073797a320000000014000000110001", @ANYRES16=r5, @ANYRES64=r3, @ANYRESHEX=r0, @ANYRESHEX=r1, @ANYBLOB="f2f089f311ebea507a5443b33568967dda131d31901309b3afae8d42e168c80c45f86312a6df8e21281442ea231b45f409f76195c20a66d4b0983d0f3b1f555ce15a72d52c0e7ff7851592805a239f25751b916b20982aa1b347a288663eee44fad64003e040b56716d00f34ce02d88155e7f3dcc1a36934691f2491adde88a325e5cdbe8930392b3a2dd166a49f86119b7720bdbd03", @ANYBLOB="155fde"], 0x94}}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x4008014) syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), r1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="18080000000000000000000000000000010000005db81d63e405000000d73a5fc2bc8ff04f2f6ca96bd0105f6361f922a52a960100000000000000d745ffcb", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000550901000000000095000000000000009405080010000000bf98000000000000560800000000000085000000b4000000b7000000000000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x475, 0x4, 0x3}, 0x1c) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r9 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x4003, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmsg$unix(r9, &(0x7f0000000100)={0x0, 0x1d, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r9, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmsg$unix(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) recvmsg$unix(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000700)=""/4077, 0xfed}], 0x1}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="0300000004000000040000000a0000000000000086ab416ae378a8e5681fcd971d2826115d5699cbeb07515ebe69f253d6629db53782bfbb97c8f6c1b9549351b70b508f6a22eee1f769f0dee3d4640341e65984686912fc97ad17065c3ac4ef4412a7e5df44f511701735575e93f2832a4cd3e66004292f7b67b886ec5a677a399cde6ab18a066e7b2f271ada", @ANYRES32=r6, @ANYBLOB="ffffff7f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000200"/28], 0x50) 39.706600196s ago: executing program 3 (id=3707): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x4001, 0x3, 0x438, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x3a0, 0x206, 0x240, 0x3a0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0x2c8, 0x2f0, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x1000}}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0xff, {0x9184}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x498) r2 = socket(0x2b, 0x1, 0x1) sendmsg(r2, &(0x7f0000001b00)={&(0x7f00000002c0)=@tipc=@name={0x1e, 0x2, 0x0, {{0x40, 0x2}, 0x4}}, 0x80, &(0x7f0000001740)=[{&(0x7f0000000400)="7766085dd1cf8f136780a533ea5eaa430cccc148610e959a217d4dcc3523adba7859dbf4eb5b581deff0e80efb44590c8ff9dcf300f3c9aa449e6efc3b62689ae412a088ccb3a713fd23538c3c69566348d4f69f454582580c8cdca9fc18c49b4c3d258184328d0654c7496d74f564cd0f118c0c467303a42e69c7427dc3af1690f74d72e967843f9190c0598155c98c8398765dfe8a1b3dd27cca3b86ce0845f3486584ebf2331082cff37a1593", 0xae}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="890d7ccbbdfeda91dea5a3d657a4f3ee06011e2e4186fbeb31bdfb340eb3e64a38fd47f88731bd354cac9093da85c5c083b286511fdb2cdf0088d774f94d165af18ce71f894eb779894b08c11dfca8beb0d26a1290a9187a", 0x58}, {&(0x7f0000001580)="3dfd9400ff92de89af1d3632847fbd7727fba339c3a30ef49889831bec89a7f99038a13c33d6fa5fe6c76a27e37e064edcf81ba3743100badc9af622c177fcec1818d99cb82b2cd2c3cee3c2b66b3197df561ebd30fd16464f78399554082cde30614de9860c713307a4270267133d93eae80061ea3c8b95a4dc314949939cb2e0b1057c483bb0bcf7", 0x89}, {&(0x7f0000001640)="473ba160b5793d6d0b582e1ebfef5c3083f317c67c313674d021bdaa1d7202b3d1bb186ea9241538951503989191c98348b63ad890b31fff256f3b7d0506914b0a3dc136dbc4a538f461566feb7a8d60da97c6675bda5eedc468dfd97ef5bcb0c2422a6d96ad3739739c082f010a", 0x6e}, {&(0x7f00000016c0)="2efe67bf3410f0b720e81beb11f17c86205c5c34ca06351fc1f5346c13f899d9d8ba6939320f7103e1c887ff725e085d979b55d31125603f08a30659782a7aa0a98266", 0x43}], 0x6, &(0x7f00000017c0)=[{0x20, 0x3a, 0x5, "fb7c80ab931e02e2f064ad7f"}, {0xd8, 0x103, 0x7fffffff, "8609a4d2761f95ca8154445d400da0d542cf7f08b762f6ca6f6208a2ddc8eb8944d1fb1d5ffff98b965c297d4bc7038a8c5933197a351ffa8dc4ce43bbd7fec44df9f63abd49f09ecad61b8f8fccfd7d736aaaa9beca334de0f9080af6a2392554b77247db93e04e15bd8fbe8093f270f4ca84f983b87126d5f4a1026d0df9fbe10a3b743a4775c2322f01d0dfbae5ef377c787674cef308ebb42b4af8e58fc38018d4ed00e59f82e9d1d5be6428fff6b93f175c720cdcae441c906ae8b1506e1d09eebb9dd0"}, {0x108, 0x10e, 0x6, "b56719a7da9e3d09e56e104f20277f52cbf0c38fa730a403ecb24484cd7866d40f58ff6b6554f6572485b97d3f931e94c07914cab52d8a645f7ff3f8c227a1bcd57ba12d55910c1e717be57cff7d4177d0a2b64773de4675d1be3f01be813d1c8affae961381c0708882744156e77f2eb75f1c02fd3ceb8b2c24a424627908fbdb94496e74539df8cba8067ddc785209eea7724ed1c031478b73e3f00b578d75b1e95b4f7825dc73ebc89e40c3fcdc2e21b0c29b71f100adc736a91b3fdb18512900ca2ad06bca69d9f9ab3306548a07ace199ea7927a0af21595e4f5f317ba4c719aa65b7832e55bcc26289dd634d6e3237441d"}, {0xd8, 0x0, 0x759, "8cf46949feabc5acedc328a1abbc38d48fe50f638a6180345305bd865a9a1b5bfbf2ce9e4b73d20253717895be2f87bc2a43105ce2db17b380ba838475b2e08af5e527c24e07621fc9b82607332b82845c7a148b5defa3b9c74ef6a25fbc4a1bd6fb2f71ed7ff0f7378f0fa9e1bd2b0965bbea12328ebced082d086059ca6f9365de1708e2dff358294392027c408f047f67bf8d091d1f4d0f06478a7d4e94d96db029b1c78ba0a99416c1b9f7e1d247ad07bb4e71b072d01545ea07c687698854c93cd1"}, {0x50, 0x0, 0x7e5e91c8, "8873c109943ff5893bff03d1fe71568b58b4ac7580a8296454f19957cf5b396085f997d144134b80e21cd0d44138b730c8d65fe3ed0e107c656209"}, {0x10, 0x88, 0x7ff}], 0x338}, 0x800) listen(r2, 0x5) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x4c884}, 0x20008000) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r2) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x24, r4, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x9}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x44000) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000001b40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r3, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x15, 0x4, @udp='udp:syz0\x00'}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x8801) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000250019032dbd7000008000000500000008000500ac"], 0x1c}, 0x1, 0x0, 0x0, 0xc844}, 0x24044004) 24.340953033s ago: executing program 32 (id=3707): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x4001, 0x3, 0x438, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x3a0, 0x206, 0x240, 0x3a0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0x2c8, 0x2f0, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x1000}}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0xff, {0x9184}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x498) r2 = socket(0x2b, 0x1, 0x1) sendmsg(r2, &(0x7f0000001b00)={&(0x7f00000002c0)=@tipc=@name={0x1e, 0x2, 0x0, {{0x40, 0x2}, 0x4}}, 0x80, &(0x7f0000001740)=[{&(0x7f0000000400)="7766085dd1cf8f136780a533ea5eaa430cccc148610e959a217d4dcc3523adba7859dbf4eb5b581deff0e80efb44590c8ff9dcf300f3c9aa449e6efc3b62689ae412a088ccb3a713fd23538c3c69566348d4f69f454582580c8cdca9fc18c49b4c3d258184328d0654c7496d74f564cd0f118c0c467303a42e69c7427dc3af1690f74d72e967843f9190c0598155c98c8398765dfe8a1b3dd27cca3b86ce0845f3486584ebf2331082cff37a1593", 0xae}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="890d7ccbbdfeda91dea5a3d657a4f3ee06011e2e4186fbeb31bdfb340eb3e64a38fd47f88731bd354cac9093da85c5c083b286511fdb2cdf0088d774f94d165af18ce71f894eb779894b08c11dfca8beb0d26a1290a9187a", 0x58}, {&(0x7f0000001580)="3dfd9400ff92de89af1d3632847fbd7727fba339c3a30ef49889831bec89a7f99038a13c33d6fa5fe6c76a27e37e064edcf81ba3743100badc9af622c177fcec1818d99cb82b2cd2c3cee3c2b66b3197df561ebd30fd16464f78399554082cde30614de9860c713307a4270267133d93eae80061ea3c8b95a4dc314949939cb2e0b1057c483bb0bcf7", 0x89}, {&(0x7f0000001640)="473ba160b5793d6d0b582e1ebfef5c3083f317c67c313674d021bdaa1d7202b3d1bb186ea9241538951503989191c98348b63ad890b31fff256f3b7d0506914b0a3dc136dbc4a538f461566feb7a8d60da97c6675bda5eedc468dfd97ef5bcb0c2422a6d96ad3739739c082f010a", 0x6e}, {&(0x7f00000016c0)="2efe67bf3410f0b720e81beb11f17c86205c5c34ca06351fc1f5346c13f899d9d8ba6939320f7103e1c887ff725e085d979b55d31125603f08a30659782a7aa0a98266", 0x43}], 0x6, &(0x7f00000017c0)=[{0x20, 0x3a, 0x5, "fb7c80ab931e02e2f064ad7f"}, {0xd8, 0x103, 0x7fffffff, "8609a4d2761f95ca8154445d400da0d542cf7f08b762f6ca6f6208a2ddc8eb8944d1fb1d5ffff98b965c297d4bc7038a8c5933197a351ffa8dc4ce43bbd7fec44df9f63abd49f09ecad61b8f8fccfd7d736aaaa9beca334de0f9080af6a2392554b77247db93e04e15bd8fbe8093f270f4ca84f983b87126d5f4a1026d0df9fbe10a3b743a4775c2322f01d0dfbae5ef377c787674cef308ebb42b4af8e58fc38018d4ed00e59f82e9d1d5be6428fff6b93f175c720cdcae441c906ae8b1506e1d09eebb9dd0"}, {0x108, 0x10e, 0x6, "b56719a7da9e3d09e56e104f20277f52cbf0c38fa730a403ecb24484cd7866d40f58ff6b6554f6572485b97d3f931e94c07914cab52d8a645f7ff3f8c227a1bcd57ba12d55910c1e717be57cff7d4177d0a2b64773de4675d1be3f01be813d1c8affae961381c0708882744156e77f2eb75f1c02fd3ceb8b2c24a424627908fbdb94496e74539df8cba8067ddc785209eea7724ed1c031478b73e3f00b578d75b1e95b4f7825dc73ebc89e40c3fcdc2e21b0c29b71f100adc736a91b3fdb18512900ca2ad06bca69d9f9ab3306548a07ace199ea7927a0af21595e4f5f317ba4c719aa65b7832e55bcc26289dd634d6e3237441d"}, {0xd8, 0x0, 0x759, "8cf46949feabc5acedc328a1abbc38d48fe50f638a6180345305bd865a9a1b5bfbf2ce9e4b73d20253717895be2f87bc2a43105ce2db17b380ba838475b2e08af5e527c24e07621fc9b82607332b82845c7a148b5defa3b9c74ef6a25fbc4a1bd6fb2f71ed7ff0f7378f0fa9e1bd2b0965bbea12328ebced082d086059ca6f9365de1708e2dff358294392027c408f047f67bf8d091d1f4d0f06478a7d4e94d96db029b1c78ba0a99416c1b9f7e1d247ad07bb4e71b072d01545ea07c687698854c93cd1"}, {0x50, 0x0, 0x7e5e91c8, "8873c109943ff5893bff03d1fe71568b58b4ac7580a8296454f19957cf5b396085f997d144134b80e21cd0d44138b730c8d65fe3ed0e107c656209"}, {0x10, 0x88, 0x7ff}], 0x338}, 0x800) listen(r2, 0x5) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x4c884}, 0x20008000) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r2) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x24, r4, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x9}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x44000) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000001b40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r3, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x15, 0x4, @udp='udp:syz0\x00'}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x8801) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000250019032dbd7000008000000500000008000500ac"], 0x1c}, 0x1, 0x0, 0x0, 0xc844}, 0x24044004) 5.494587574s ago: executing program 4 (id=3823): syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x6e23, 0x3, @local, 0x8001}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000400)=0x3, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x54, r2, 0x1, 0x70bd27, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6}, {0x8, 0x13, 0xb}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40040}, 0x4044000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r3, &(0x7f0000000500)={&(0x7f0000000080)={0xa, 0x4e23, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000000c0)="06", 0x1}], 0x1}, 0x80001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002"], 0x68}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002"], 0x68}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0100002e00010000000000fcdbdf250b"], 0x11c}], 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}], 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000008000000000aec8000018bbf7b1", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008500000050000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000840)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1a}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000008000000000aec8000018bbf7b1", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008500000050000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000840)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1a}, 0x94) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r8, 0x1, 0x2b, 0x0, &(0x7f00000001c0)=0xc) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x38, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfa, {0x0, 0x0, 0x0, r11, {0xe, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_POLICE={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) 4.902663811s ago: executing program 2 (id=3826): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000980)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}, 0x4000004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x62, &(0x7f0000001a80)={&(0x7f0000000000)={0x2c, r4, 0x200, 0x70bd26, 0x25dfdc00, {0x25}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80040880}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, r4, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000040}, 0x10) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f00000000c0)=0xc, 0x4) listen(r1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000280), 0x4) ioctl$TUNSETNOCSUM(r5, 0xc040ff0b, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)={0x14, 0x40, 0x107, 0x2, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$inet(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000980)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}, 0x4000004) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x62, &(0x7f0000001a80)={&(0x7f0000000000)={0x2c, r4, 0x200, 0x70bd26, 0x25dfdc00, {0x25}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) (async) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80040880}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, r4, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000040}, 0x10) (async) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) (async) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f00000000c0)=0xc, 0x4) (async) listen(r1, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000280), 0x4) (async) ioctl$TUNSETNOCSUM(r5, 0xc040ff0b, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)={0x14, 0x40, 0x107, 0x2, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) 4.688073542s ago: executing program 4 (id=3827): socket$inet6(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xfffc, 0xffff}, {0x8a122b7e93ba9198}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x6, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_ACK_FILTER={0x8}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000001c40)=0x4) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) ioctl$PPPIOCSMAXCID(r8, 0x40047451, &(0x7f0000000100)=0xffff0080) ioctl$PPPIOCSMAXCID(r8, 0x40047451, &(0x7f0000000000)=0x8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r9) r10 = socket$unix(0x1, 0x5, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socketpair(0x6, 0x1, 0x5aa9, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$TEAM_CMD_OPTIONS_SET(r13, &(0x7f00000009c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1d9e3a6d2ee34180}, 0xc, &(0x7f0000000980)={&(0x7f0000000d80)=ANY=[@ANYBLOB="84020000aac3e407b5e428b40ad0bc2d49d8a4b1ad8ffbdb9fc272d3cf56c2455568c805dab11fb20205c69853ed8ade21b23c7cae2a1c3e96af61802b4330c63092c641e636745c5d4b17d80bd3750f02bb6a271428d8bf836b198a8fade47e20b5a613007ba20f180ead74449f202128a5cb64a91100acae5a3986a8abf32d1c2db158d91156173f231595ece6863d96a2c9298ae1385d0e03f1e2aca2dd3b8e8080039eb867db9447d3e33c201ca226f3ffc95a", @ANYRES16=0x0, @ANYBLOB="000425bd7000fbdbdf250100000008000100", @ANYRES32=r5, @ANYBLOB="680202803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r12, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000100000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040001000000080007000000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000180000008000600", @ANYRES32=r5, @ANYBLOB], 0x284}, 0x1, 0x0, 0x0, 0xf0}, 0x40080) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x5, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7ff, 0x100000000, 0x6eb, 0x5, 0x7, 0x2c0b}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r14, 0x29, 0x33, 0x0, 0x0) 4.400461942s ago: executing program 2 (id=3828): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@restrict={0x0, 0x0, 0x0, 0xb, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x1, 0x1c}}, @func_proto]}}, 0x0, 0x4a, 0x0, 0x1}, 0x28) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x80000) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000007c0)=""/67, 0x43}], 0x1}, 0x2000) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x18, 0x3f9, 0x4, 0x70bd2a, 0x25dfdbfc, {0x1}}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x4041) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=0x0, @ANYRESHEX=r1], 0x7b8}}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0xfffffffd}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xff}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c4004"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 4.160999175s ago: executing program 1 (id=3829): ioctl$OCFS2_IOC_REFLINK(0xffffffffffffffff, 0x40186f04, &(0x7f0000000140)={&(0x7f0000000000)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', &(0x7f0000000100)='ip6gretap\x00', 0x6}) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x7fff, 0x8, &(0x7f0000000280)="3e8f66080e73ff290c27444b7693dc43316f12093cffe8d3cac804c071f7e5ccda4f11c27aa203cf854cf1c4c6c0522adf7ac51035578041fe8281a218cb13102bf7e1dbd6aa1db9d9f22cbb5eb1ae1fd573c5a6c0e83f175c29c1cdbefb250cac8bede9acf6c927a652453301b3e273dd081186cb3e58ec033eaef63e4928e2104d401aa37ed63020e2fef9893be6df0487e4c6768e36283d5244f06b13c63fc5b64558a0296f2336ba384157a90d5a1d0ed6abc5b342d62d1c872a9ee9924e587b5807ff76c22aeef56fd1f896bdc2baa824fe4eba431b4d7dcb6e93e14ae9587eaf691bab79ae6bf4783b7a204b6dea0c30b79a1d7d1d3658b5786678b3154e24de1b553c9d5b903361c0b78de4337e24e2df481228693a84044ce42be515845a28aa5d709a93bf1897c326d53d39135b40e9a1df4323f1276c874f588e240ea0d66fb9a826104b07e90cc50d10c4a231f3b5931d2ef034726008a1d528d3ddee3f1664d23cfc9376f491e64f2a5eb7d1b84b3f857fbc7afcf0f1b05ab0b3227bf3c20d0567882e4ab751227430af296c4787892cdd7433d2089bb5745b09ec9f4b90f23aea16a5b51631a3e70c6ce871048c4ba4070844add7d969b322b9e16631524b300bb2c4719719e1727b8b571d129fa6cda4e0215a58128e49de0ae59651fcf70e1f18fe4a5fc6098adca4591a3566b31635c3fc2da0fcebe323ba5f051c5e9e1fa2b4807c384c1bb592e298c579b049a2d68eda07b9cdf21fff685af0c574af51d94c7b8f431759da5b4e803de0394605b7546b390c3a88decf235b989e80cc165a906f4b682166fe7eba94fa245288a9543f254584a52a70fc4e540839012892473a1879bdd79c7d195a43eff77c164ca506c598366588cc1b05adc99333ed425404086bc0b7b102848f2de78c281a8d46660ab0edd01c36855ca60a481e31a7e5b667608e674c6394307cb1460b783252463f6782d42dc8f4b8f7d65bb08215cbad5a8ae1d88d4b26ffc1f3ecfc91a31c0ff17368d6630a548cd89738b61d7dfec5c21f54e24e7528e292ca5dc78a2d365c6b433acbdad0c9a25a9e72d590223a6b7e356ff7a5f93e41c935b0e111e1f6cfd107a7d635ad04ea5ef0cd78260bccc58449d8b264b0e2b9107eef142ef26c26ca47fed7f9a4c4b4cd30a6fbe4bfb42248e375875ad34cba2f8b50399d493490e825c4ce9a1a13ccde73167a8f2605e57286053b320fa37a7336e8821351fb81bf1dc5a20281939db46b9a55ecb1e0651e5d5b5d3bc6052f60edb235123066452b75f2100f3f27922f035645d1419e926df3bcb2dd2dfb278d9ac0db3b60981a29c8682f3d7536711ebcc8aadeb52ee5bd33f868245727ab89b0219a3501d146a94b7b91323dfe487bb5b6fa01f92b4b59a9c48b4a93b97df8201fc2e2faf23198cbba0957a97e1482dd5a4f027443dc118174deb3e63cb2145f2bbe7a972a7e19550ed8abc8b320a7fa88fb111d94bb4169208848b1395b0870907346cbecee20dc5c67fb42bbc84f627ae6224d0b6b712a0e0861d6481ece039759121983b050e9df616a7e8eabbf4be9ee5840feb40d2071df832cfcac915723601d66b4dfed2c54f85b3277fd6b38aa98d3ed9e761002351f7c5ed014da94a5e05aa4054b9e2b97e43b0bea60c8ff6e7f4c6dc1d6919396590f8ef9bc8d5456deee2581c4d7f199e722da7b4f30c69ce86d829bb194e69f05ad56cf79611638def683bcf47df3998134405cd5741de30fdc8a06dab16a022c94b7cc2c2f07ded188485f35fc4779e1c2d0f06088403e516ac8b159922633066cebdafbc6c8e9d38154bb82439456a1a7a79f34886f10add346458508fa2d9b23d1c8751394f7199e2e2c852ea93f83929d3d12f34126adf14590af0d74beaadd23254d92ac2a051359aa77afacf5e8d82b79a3bd41d9277c4d8501e5bfe0855aa9bf58e06f2dfad04f0fcfbcb4f7a78d88175a9c5ed04a6cea2c3829c5deb8a83deb887c5a4cd98b401469be0fda2ec340129e44819089a00ec64e2e14b2f2b887c51aeb18390bc980fea9fb55623073235ad82fa3cee604f30bf34bdd2dccf6c554ef851948b03a69045ace5a89a28740f383e5fb6c258fd7e8da51d950d4483a6fbcc32753f64043cf314fa47b126cbc4afc2f864caf1326dacc29b9f9570ebdf87dfa481b7ab203e3da21fb55707ba35cf9b78e72c789b03978b63cfd7af9ce5329e4aa0946aea48cefd0848c60d9221a432ac98ef813ca7a862ff2358a174c1a3632130409a8e377287bc77e15535c38a72bedfc2c7a5635bcf8248aa8cf15dd8d02e8ff53bfa7cb9e56f4978c4e0dc96653686b3e17640a5139dd3d4058c6e31fcb2dd2171558d84c15852dd9fa64053beaf7406f2796ac8693cc173b050b5ee1a1dbdba3a223bf17370e751d7047338566d506924bc7350bca6c35e55c6fcfeb305204eb4cb9d2f81f9fd688fe6ec3c02730b11c9dd9e0155d037905005754ce178adbc6c995228706e9be8ce0329b37bc31a69f64011961c5e5fd8aa06678d75086643bd494ebb2bec3a01b31890c2844963189fc4db478c1c10002c64a1dbd0fef6d694b45a5b76c50bd32bb55a3c746c8bae6d0b57f3e59d3b02018a54e4a4b089b1740720076cda9d3f75a08aca27670646ed15a3c094faeceea012e57ff7014c07d8035d979514fc6324f6e4966fd1395d39a042cd4998490bb5d1682dcfa4a820a6d44e938fa7861cfdd96d8d661f2dbc35ca608e5c0d42f0afd20b198e814fc54c8d10e5c3289b5ef667eaf1b227b0257f02825a5d61894d0c72fa013f593d0d6e15b97f1c0c113c26e73ca6c4a019c70d578f2fcbdfd577fc6eaf63f1a740a3c5db2429e2437323d4613f69850a8147cd590e3519cb9dc7614a54c864ff53c6f2063ab14b6271570adfb3ea77b1f6c682edf883690eb8f97e1867992428d476bf300a882d24a638743bace02b87c15fc403420f791bd25056c2b1266ef9abefb299fe6cee3d5e61ddc62a27dd098b7ae3d1b3e2a2fc600e1b55286a7ea92ea1771b5345e04a51e4a8e5d270e8de3dc492ebaae90b54ecabf00a2982d110659447826f3fc5825e569dd785aada6894395d4e7ca182a3002781cf8cc0aea65fc83a6d3cf83ad3eea836735c8dc85e44176abfe8e0780bd318404440bb20321cfc2ffbbc77c9a6da4e2de9096f37b60d2e83aecacd0cffd026b89519396991c18b2c9aec50781ebd751e3cb26e1365be331d30a38d66a3b723749a5f498732b4bb7a095a71b5f12d74cbe472ab35c56888837556f7580eb0d71e07ce76efa7f0bb92201d7a8d567748e05a446a0c3f3aae445d31605864c5063df9789e68d9442de9263bc26e04f4905370762cf98963923fc4201acb3e05f86835439f30434d38c4329cefcedd0e2326bc17bca3e1c1ce765252df61f05a7e595ab1b37fefa4c278fd3711ae073808514a46adef6cced29f9f7654dd00946fd0f2bc2a5b541a08407d55d98c1fe275d81c99a427b4fd4cedde3dd1e327c29ebb1be3538f04562c1ac8478df5646ef81f34eab09c599f469c62b9060012b2802f8616d913efd6a3f2c2424a74930cddf016128f48974df7559d19385dbb1f6d47294630ef632afab02e1666b5f1f2bd9b5f8c0161376833bdfc53b7d33f3e39e7c5e5a1f462c2d69e4cf472f3793ae7be5abe8316f96f0e13214fd95a62ce63a78fce36114cd30089788723a3cb8899776d530d98ea111186e75b458e0bcc65daa848eb2c4d4065a86a856b7d4c9510d81c1fcb512709d016ccb5f5fe87c68c3b8e454bd5885880fe80da8ff41838ceba063aed4b314f78d5cafca02d80578edb0260b5a79b5c716c9e0c54822b626225fb1a9923d6cf0dea046ff8d5fc2dfddaf077085d5656645831242e1c451c6b849d9cdc21bcd8f917c5b142d2d2105f0248b7cbd0f1edd6c90ba28e986e795057a530e131a81933f26f73d4fd84ba9e9d7cd6c125a86f88649295441c4c5355d0a3a71e8f337a95aaa91e8e62990a4301ec1aac438e23982f7a642d5ead7d5c12e1351d68018146855919f162d39ff37cd7842824e8849b98ff71b7f817d7eca059fdd19bdf8ff0312d05edd76afefd23c6b6da405d958b1ad1591146bb70984a5d537eb094c5d3eb0f51dd6a3e23b318a6930f6341e2abf03447434c65c0b6e67ff8517b1036acde3fe122e4c92e66b8329493c68f5f28af018d5ab52210ab0f513f5a3f1b3d8c459ca8d7929813ca97799a5adc710f934076e43ec5d41f44b9e2ad1afa1f14dcb6bb00962e76c365c646410ccbd68f41e64ed76f5a0aea71a958f6a7289fd48d764f507f8f2cce4a5313cf9c455ba069a14838fff4e00a92ab27210e8612e54d669264887bdeeb1e71b3f72622e56f856df22703f2d1912987ec9ca705e2c4bffad8707430113d9ce239ba490d4ea58408d7a39e946fa190199f66dcbf62dfea38a237df7317752f05f69aed34c6ca401e5783cbdfda189a5cbfd81811b89153877e893c4074e5686e2fff57e1736b6420df825556a525e20dd739aa08d25ff5cd301d91a61ad96846a4a619ae5e10b015555384fe6d6295d41b303d8de7a0e6000a571b668187fb53484c6ba78f70d5f6caf8262437a8fbe6b734eb71e6412650066cd2b69c604ad2ff2e82a34290035d813b04ae57357d6c01338c3e0b5f551cd2ff04efa199c5741a0eae327501412b8293e2aae18ef4457dacf37314699a6e11311eec22ddd583123f8e54dc874d7e8ab080cd884a7fac0e9028e2fbee775b1f4509d6032093723fb86da8e3c99dbbad6708d2b9619542232afbe1267297e38caca1135f0e4f0cf0609c751efb347ccdf6442bd67d45c2ad052a10af6c74e93cd5f654ea1d1a76676c2b963540b0cdfbabe7e9cdd10859934d675972c9f0cd3ad0e528f6a892c991ff5e829d7de8f53ef805b97df779c2347641e92e4e41dd2b432aeffd6a965c9af5809b1372bbb7691b9dc6e719d258a6c6fcf07d635bd548a8626447eac19279b6a83d6482416a9749b948774346cadb40a992d9ff7e333eb41fdddccdfda00094fa1b9d23fe66aa3da436f04c9916b3644db9600156ddc45a367acebc266defc8897482a7aa01424ff6f30b6797b8303d29ad79b93df88f20def780ee00b5ed0b5c0f624dd4c6327e9f14c074c9ec68e6d10d7d713fdd1c2ce6359103b4a911bf6057918023d02c7ca1811de1a9763dfee6af6a6c51d6d146622306e4ef09c9d3281f8034ca671030d8c7e6139507130e620e6af54b994e6febf9176ac33213ec5aa5fef6c2c860c96554da86b232206ebec16277a68b2d1e7b2d2e9d0d706d11bb18b36e6ca950e722f50897b74634a307392c66fa3a40a55c02bc4f8802480eb8706be1843b679dff178a39f898cc23bf7a8d5a4f717838efc411ef89eb70e4eef7a38a14d396c3b28d3062a218e04e22e1bc7333f8bdc5a425cefb9fd1632f1bcd2a45f811d5fa7e6e23baa2dda2cb4a6fb5a907a07e24f69353464a86e6c2d07c4d7d06cf3393df363cfe5a01e97949575ec75aa7b5475e30ae85f8d3fb0729560ebe9cc270fec7c7c495493256152274b12bee35113b68c46ee374bbb5bc53c336a7daec876203ea6d7690fd99e2b623fdf78fd9bc1a16dbe88985d4bf80a745c808a0e8f04732956abcace65d0fcd712896ea5f7511ecb4531993a292bce3ddbca6e46481713a419a746faa8587326a752857997f474c0d12231e1ea250493c89ed34e5d6288f29e3b4991b4fbf582", 0x1000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xfffffdfa, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="46b9d77af410001f", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e000100697036677265746170000000180002801400060000000000000000000000ffffac14142e00002200f07e76866c316871842772a191cf0000"], 0x54}, 0x1, 0x0, 0x0, 0x20}, 0x0) 3.813444348s ago: executing program 5 (id=3729): unshare(0x22020600) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000003b0009002bbd7000fddbff2502000000080001800409"], 0x1c}, 0x1, 0x0, 0x0, 0x8084}, 0x4000014) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x5, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x7, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRESOCT, @ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000005500e50226bd70000100000007000000", @ANYRES32, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x2000c844}, 0x0) 3.716372288s ago: executing program 1 (id=3830): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0xe5c}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x82, &(0x7f0000000180), &(0x7f0000000200)=0x8) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7800000000010104000000000000000002000000240001801400018008000100e000000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c000280050001000000100008000314000d80080001000000000008000200ac59d82ce0ba2c944668b5c44f5b71141422"], 0x78}}, 0x0) 3.628914249s ago: executing program 2 (id=3831): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x38, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @empty}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x899}]}]}, 0x38}}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') read(r1, 0x0, 0x0) 3.401575656s ago: executing program 0 (id=3832): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000140)={0x7, 0x6, 0x0, 0x3, 0x2, 0x0, [{0x1, 0xd5bc, 0x8001, '\x00', 0x1182}, {0x8, 0x4, 0xae, '\x00', 0x2503}]}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x20000000, 0xfffffffc, 0x7ff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4811}, 0x40884) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x32, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) 3.271902675s ago: executing program 5 (id=3833): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x23, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000080)={0x10000000}) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r4, &(0x7f0000000000)={0xa0000001}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) shutdown(r2, 0x1) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000012c0)=@newtfilter={0x3c, 0x28, 0x575ac7824d421509, 0x70bd29, 0x4, {0x0, 0x0, 0x0, 0x0, {0x9, 0x6}, {0xffff}, {0x10, 0x5}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x40) r8 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r8, &(0x7f0000000140), 0x4924b68, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r9, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575960000dd", 0x12}, {0x0, 0x1d}], 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r10, 0x4) r11 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r11, &(0x7f0000000040)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r12, &(0x7f0000000080)='\x00\x00\x00\x00', 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x4, @mcast2, 0x4}, 0x1c) getpeername$inet6(r8, &(0x7f0000000240)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000280)=0x1c) socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000003c0)=r0, 0x4) 3.218666829s ago: executing program 1 (id=3834): socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x2c060000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket$nl_route(0x10, 0x3, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x40400cc}, 0x20000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xa, &(0x7f0000000c40)=ANY=[@ANYBLOB="60b4271ebc39294df424fcec5e919098ad2d549e912cb81f83cd73f610abcc7cbbf7bdc80886a978cfc6a7b08b778e3731afa9062c30d4da63b5017c4861e4281e761f687b2fb0280fe1a9e5c2043efce2a0", @ANYRES32=r2, @ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000140)=r4, 0x4) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000001f80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc8, 0xc8, 0x2, [@var={0x4, 0x0, 0x0, 0xe, 0x2, 0x2}, @float={0xc, 0x0, 0x0, 0x10, 0xc}, @restrict={0x0, 0x0, 0x0, 0xb, 0x4}, @volatile={0x3, 0x0, 0x0, 0x9, 0x10}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x3, 0x4d3}}, @typedef={0x9, 0x0, 0x0, 0x8, 0x5}, @enum64={0x6, 0x6, 0x0, 0x13, 0x1, 0x0, [{0x1, 0xffffffff, 0x100}, {0x5, 0x8, 0x6}, {0x4, 0x401, 0xfffffff9}, {0x1, 0xaf4, 0x9f}, {0xc, 0x1fd3, 0x7}, {0x7, 0x1, 0x3}]}, @decl_tag={0x8, 0x0, 0x0, 0x11, 0x3, 0x6}, @func={0x1, 0x0, 0x0, 0xc, 0x3}]}}, &(0x7f0000000f80)=""/4096, 0xe2, 0x1000, 0x1, 0x80}, 0x28) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES32=r3], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f80)={r5, 0x5, 0x0, 0x0, 0x0, 0x0, 0xcfc, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffff1}, 0x50) r6 = socket$inet(0x2, 0x3, 0xa) sendmmsg$inet(r6, &(0x7f0000000900)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1c000000000000000000000007000000860a00000003"], 0x20}}], 0x1, 0x24000004) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a14000000060a0102000000000000000005000900000000001100010000000000000000000100000a"], 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r7 = accept4$x25(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x12, 0x80800) socket$packet(0x11, 0x2, 0x300) sendto$x25(r7, &(0x7f00000000c0)="a8c4d5bf4d812170d4ea53f046e3abb5e94a4fc9806d4046f34235efab60499f9c73df120f16df535df1edeee04592b88ecce0e40fb83625d7e7274ea32d", 0x3e, 0x400c007, 0x0, 0x0) r8 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x80008010}, 0xc, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x9c, 0xb, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x21}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x8}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}, @IPSET_ATTR_ADT={0x48, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xffff8000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x40) 3.18997702s ago: executing program 2 (id=3835): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x17, 0x0, 0x4, 0xfd, 0x45000, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) select(0x40, &(0x7f0000000000)={0x6}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000148000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e617400140004800800024000000000080001"], 0xc4}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) read(r2, &(0x7f0000001480)=""/4096, 0x38) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r5, 0x701, 0x74bd2a, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x2000c074}, 0x40804) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100fdffffffffdbdf251d00000008000300", @ANYRES32=r8, @ANYBLOB="60002f8008000100000000000c0002000202aaaaaaaaaaaa480003800800040091f60000340003800800020001000000060001000000010008000200020000000800020002000000060001000000000006000300a2aa0000080001"], 0x7c}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000040) readv(r2, &(0x7f0000000800)=[{&(0x7f0000000280)=""/30, 0x1e}, {&(0x7f00000005c0)=""/105, 0x69}, {&(0x7f0000000700)=""/114, 0x72}, {&(0x7f0000000780)=""/70, 0x46}], 0x4) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)={0x68, r5, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVKEY={0x30, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xffffffff}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x20000054) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r3) 3.072729339s ago: executing program 4 (id=3836): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100037040400"/20, @ANYRES32=r4, @ANYBLOB="830405000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=r4], 0x48}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) connect$pppl2tp(r2, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) (async) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r6, 0x8) (async) r7 = accept4(r6, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000000)={0x9, 0x0, 0x1000006, 0x692}, 0x10) (async) sendto$inet6(r7, &(0x7f0000000040)="78d6", 0x2, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4}, 0x8) (async) sendmmsg(r2, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) r8 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'pimreg1\x00'}) (async) close(r2) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0xfffffffe) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000080)=0xe) 2.789982356s ago: executing program 0 (id=3837): r0 = socket$nl_route(0x10, 0x3, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1, 0x12) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x12, 0x6, 0x4, 0x4, 0x0, 0x1}, 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x12, 0x6, 0x4, 0x4, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x50, r6, 0xffffe000) (async) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x50, r6, 0xffffe000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x100, 0x46951}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}}, 0x2000000) 2.528372616s ago: executing program 0 (id=3838): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071041f000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x4) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x20, &(0x7f0000000440)={&(0x7f0000000300)=""/177, 0xb1, 0x0, &(0x7f00000003c0)=""/121, 0x79}}, 0x10) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000005c0)={r0, &(0x7f00000004c0)='GPL\x00', 0x200, &(0x7f0000000500)={@align=0x40986c7f, {0x2c, 0x1, 0x9, 0x5}}, 0x7, &(0x7f0000000540)={@_ha_fsid}, &(0x7f0000000580)=0x80}) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={0x1, 0xffffffffffffffff}, 0x4) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x50) (async) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0xbf, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1}, 0x50) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)='%-010d \x00'}, 0x20) (async) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000800)={0xffffffffffffffff, 0x0, 0x8}, 0xc) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000008c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)='%pS \x00'}, 0x20) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r12], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r13, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1e, 0xe, &(0x7f0000000080)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], &(0x7f0000000100)='syzkaller\x00', 0x1, 0x48, &(0x7f0000000140)=""/72, 0x41100, 0x19, '\x00', r2, @fallback=0x25, r3, 0x8, &(0x7f0000000280)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x9, 0x7, 0x3}, 0x10, r4, r5, 0x7, &(0x7f0000000900)=[r6, r7, r8, r9, r10, 0xffffffffffffffff, r11, r12], &(0x7f0000000940)=[{0x3, 0x2, 0x8, 0x3}, {0x4, 0x5, 0xa, 0x4}, {0x3, 0x4, 0x1, 0xc}, {0x0, 0x3, 0x0, 0x5}, {0x0, 0x2, 0x1, 0xc}, {0x2, 0x5, 0x9, 0x1}, {0x1, 0x4, 0x5, 0x2}], 0x10, 0x6}, 0x94) 2.360342602s ago: executing program 5 (id=3839): unshare(0x20040200) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)=@ipv4_getnexthop={0x18, 0x6a, 0x603, 0x70bd2a, 0x25dfdbfe}, 0x18}, 0x1, 0x0, 0x0, 0x4000001}, 0x10000010) 2.349783177s ago: executing program 4 (id=3840): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) recvmmsg(r1, &(0x7f0000002f40)=[{{&(0x7f0000000480)=@sco={0x1f, @none}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000680)=""/137, 0x89}], 0x1, &(0x7f0000000780)=""/94, 0x5e}}, {{&(0x7f0000000800)=@xdp, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000880)=""/102, 0x66}, {&(0x7f0000000900)=""/94, 0x5e}, {&(0x7f0000000a00)=""/244, 0xf4}, {&(0x7f0000000b00)=""/7, 0x7}, {&(0x7f0000000b40)=""/203, 0xcb}, {&(0x7f0000000c40)=""/155, 0x9b}], 0x6, &(0x7f0000003100)=""/250, 0xfa}, 0x800}, {{&(0x7f0000000e80)=@ax25={{0x3, @rose}, [@netrom, @netrom, @netrom, @bcast, @rose, @bcast, @remote, @netrom]}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000f00)=""/48, 0x30}], 0x1, &(0x7f0000000f80)=""/20, 0x14}, 0x1}, {{&(0x7f0000000fc0)=@nfc_llcp, 0x80, &(0x7f0000002480)=[{&(0x7f0000001040)=""/91, 0x5b}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f00000020c0)=""/48, 0x30}, {&(0x7f0000002100)=""/166, 0xa6}, {&(0x7f00000021c0)=""/44, 0x2c}, {&(0x7f0000000d80)=""/249, 0xf9}, {&(0x7f0000002300)=""/175, 0xaf}, {&(0x7f00000023c0)=""/149, 0x95}], 0x8, &(0x7f0000002500)=""/118, 0x76}, 0x9}, {{&(0x7f0000002580)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f00000027c0)=[{&(0x7f0000002600)=""/181, 0xb5}, {&(0x7f00000026c0)=""/159, 0x9f}, {&(0x7f0000002780)=""/48, 0x30}], 0x3, &(0x7f0000002800)=""/132, 0x84}, 0xfffffff9}, {{&(0x7f00000028c0)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000002c40)=[{&(0x7f0000002940)=""/223, 0xdf}, {&(0x7f0000002a40)=""/248, 0xf8}, {&(0x7f0000002b40)=""/195, 0xc3}], 0x3, &(0x7f0000002c80)=""/71, 0x47}, 0x8}], 0x6, 0x12020, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000022c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@var={0x9, 0x0, 0x0, 0xe, 0x1, 0x1}]}, {0x0, [0x5f, 0x30, 0x2e]}}, &(0x7f0000002200)=""/135, 0x2d, 0x87, 0x0, 0x3}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000003200)=@base={0x20, 0x80, 0x3, 0x40, 0x1400, 0xffffffffffffffff, 0x6, '\x00', 0x0, r2, 0x5, 0x0, 0x3}, 0x50) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @dev}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, {[@exp_fastopen={0x1d, 0x4}, @md5sig={0x13, 0x12, "c140c2ba3d3f09659390e45c2a2b031e"}]}}}}}}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000540)={'veth0_vlan\x00', 0x200}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000042c0)={0x0, 0x0, &(0x7f0000004280)={&(0x7f0000004240)=@delneigh={0x28, 0x1d, 0x1, 0x70bd25, 0x7, {0xa, 0x0, 0x0, 0x0, 0x0, 0x84, 0x2}, [@NDA_DST_MAC={0xa, 0x1, @multicast}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0x8) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r1) sendmsg$TIPC_NL_LINK_GET(r0, 0x0, 0x44) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000140)={r5, 0x2}, &(0x7f0000000180)=0x8) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r7) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000100037040100fbffffff000000000000", @ANYRES32=r8, @ANYBLOB="83000500012c00001c0012800b00010067726574617000000c00028008000700ac1414aa"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40850) sendmmsg$inet(r6, &(0x7f00000018c0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @local, @local}}}], 0x20}}], 0x1, 0x24000000) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r9, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r9, 0x1, 0x24, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x8d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 2.165515015s ago: executing program 0 (id=3841): unshare(0x22020600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x7, 0x0, 0x0, 0x10}}, &(0x7f0000000040)='GPL\x00', 0x2, 0x92, &(0x7f0000000240)=""/146}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x28, 0x1d, 0xfffffffb, 0xffffffff}, 0x10) bind$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400"], 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'virt_wifi0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x6, @void}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r5) recvmmsg(r5, &(0x7f0000008bc0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x3fffffffffffde9, 0x10002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x10448) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="03000000020000000100"/28, @ANYRES32=r2, @ANYBLOB="004058040000000000000000005c00000000000000a2cf305a5d489e9168ab72793d2d4d5b69fd673600b53ace33cb29971b2be2d479fb3c2f8deb81cfdbf57430bae3aa2090d43519772933b211f5a95a55eaf2b95477776e21b2fc16a1678719a60699f332939f3ffac0cd020e997d5a7e0339b31f0047003261e27714a8ed4d73e4e28ab419d3ba6cb954fbdb69a2acc3e8798d063b0cdc4a45966890367fad1c", @ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r0, @ANYRES32=r3, @ANYRES64], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r2}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x21, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000005000000000000007f00000018110000", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000020000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0xa, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0x1, 0x9, 0xe}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000740), &(0x7f0000000780)=[{0x4, 0x4001001, 0xc}, {0x2, 0x4, 0x1, 0x1}, {0x5, 0x20002, 0xf, 0x5}, {0x4, 0x1, 0x1, 0x1}, {0x4, 0x3, 0x9, 0xc}, {0x4, 0x5, 0x7, 0x4}], 0x10, 0x29b7}, 0x94) r6 = socket(0x840000000002, 0x3, 0x100) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r6, &(0x7f0000005240), 0x4000095, 0xfffe) syz_emit_ethernet(0x106f, &(0x7f0000000a00)=ANY=[], 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x3c, r8, 0x1, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x10}, @TIPC_NLA_CON_FLAG={0x8}]}]}]}, 0x3c}}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) 2.100844352s ago: executing program 1 (id=3842): r0 = socket(0x22, 0x3, 0x4) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa006}, 0x4) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r3 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000040010000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000010006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50af8ffffff000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="0800080006000600000014000000450a0fc0"], 0xfce) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0xfffffffffffffd97, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2800c0c0) (async) getsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040), &(0x7f0000000140)=0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5}, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000076000100fefffffffddbdf25810a000000000000080001", @ANYRES16=r0, @ANYRESDEC=r4], 0x20}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x7, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000228fc9d825b930ecc880260e1d1d3e0f05000000bf0900000000000035090100000000009500000000000000bf9800000000000056080000000000008500000005000000b700005b64bd9900507802918aba8b68c2db5f4f"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xca, 0x0, 0x0, 0x0, 0x100}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x45}, 0x94) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x2000c000) (async) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000600)=[@in6={0xa, 0x4e22, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20000000}], 0x1c) (async) sendmmsg$inet6(r7, &(0x7f0000000840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x0) (async) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r9, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 2.075418573s ago: executing program 5 (id=3843): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1000000004000000040000000200000060000200", @ANYRES32, @ANYBLOB="801f00000000000000000000964e00000000000000003d3dff74867e249580977e6bdd58", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async, rerun: 32) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000140)=0x65e) (async) unshare(0x20000000) (async) r2 = socket(0x2a, 0x2, 0x0) sendto$x25(r2, 0x0, 0x0, 0xc000, 0x0, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002e00090027bd700000000000040000000800090000000f000400"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000004f00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x808, 0xb, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_SET_EXPR={0x7e8, 0x11, 0x0, 0x1, @immediate={{0xe}, @val={0x7d4, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x7d0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x45d, 0x1, "7c75676224a8fcb4aecf6da7220184b7e3a4cb53a48de45dedd88d6bc22e78ad41c6dde4aed7ad511eced25c60ad1b3ea27e5d38b9112ee91d7624e6b481021cda83081f841f79fe0ab0546f236bb9b6c5fc9ad60f342f7e5e75f811db4cc1c07c2ddec49988a322af7b43c4fdd6bbbe49ea237e27976f4827a329c1ab89a244200e1f3d2558c5d1a2ebe56562e252e763c77a23c024f6ae2b967745e2dc4bbba458063a70219b692fb93216ed4696b1c6577aabda6bd01fe90753303cdd9f60c5e2313e97547dd4ad75aa8f833e449435d60733eb5fb816dfb7f581640fe26f1d66f67d7e617869c74d4e1ac1de80e8fe36ebea4de402a6d4be5589ff1dc100522f5d5aace9bb2c7e29e4cf8d4e0090fc4093dc002cf62a1a84a7313c27b03ed8b7a5005a96b0608bf42124fbb4137ecb62846bd9629bf9ab232a0437001befcf9eccfb933e376ab425748638757b7fce9b34c7160dbf5cefd61fbd24563c05b7d15cafee34528fc34c53ab88dc334caed7c6a0df147dd4fb22228773aa2e4a397dcb564837ea8365437dc0109a24600e1c23d22a039230e4c2f3a8fa30451a026ba8ee5e651ed800b9ac5ba1ef84f6e44469a31eeb2c36564c94f72f659d07f564755ea2d6708e56acfdf4c2d228c2effa551702ce65cc5065f4cfac97c36ba38af84517e1791e19e27666bc5a7bc563dee2bfa8b254995fd7598248143097c84dd7f43f060377328e67b4d353061d1b5c9698701b6c7f915008534c51a24068899a75c0cf9ed5c04e1ffcde9f911ac57218ac50415ce33fa94bc15a42c7c57305b06a4ed1b18c0b17992c0ec22e1cf793e3ea45907c5e3e486c19e0ad71f8f535fd586f12c26d2c5d7e41bfa90d20a98324003dd292406750b715da008974128cbb74778d659ca3cd7f83348ee9d1c896b68568762008fa8a2a324112b7ffe4173ba7f2a4019de139321613b4e70b169c41b7238de47c4df8ca87a863b00024c209032cc10ddcb19a1091ceeb24e7f218e29cf5121f97327f6ea87e651748d10f377b6fc79f07b736ca56b1ff7f26321daeb9690d8fa5b49027594308151f1e691952e0431b835392ee46c8dfc6f7ef43f9b25f1026ed7e86bea39272b4ccff4d9b2eecedef1af53be08c9190e6d7176fbd86d479e57d8cb6d0840bc10faf81bbf0960dc9ab23318dc40d9fdb2ac5fb5ff0fd4e5077864b61a0984ad0c2814c54ee90d400bcfb882217f968e13d6d388911fe84663dddf2d38fbb696fe7e5d84e837f97ee331d348875b2caee7e54d697f895d7138611c0ced2b683507eb96f949249c39fe1d42d6e1162a8bc92859b18de51b5b101f17300f7576d50b99fdc734c30eb751da7c9a0a35264dbaf5ed7eb62e817a99608fed421843cfd365d65bd6f2ad3e09685dbaf3f7e43a3c52664f5e2627e02f884caabdec587f71a8192da0c0c1f88e6905e60ecc948c7fff964870d373e0d7a72cfe78a1eac66e6bb5b65a19c88d09f7c997c7a8176ba35a3c655649efc51ba407fea0b8d2454fc896110b5d4684e97ff60021c8cde8786728e637b984962630afb"}, @NFTA_DATA_VALUE={0xc4, 0x1, "3c3da326e44ae515206ccf1ab6de4da5b111d740546a966d5a88a0ce580ceac8e233793ebf7478c4ddb32df044121e72beb4b488149e689d7b19a75de1c9989c4612f8b55eb9f466132307b318da1b691485a8f713b792c335c7bdaea7f76c581f43bed9cbbd7877330d808a8c2d22f6558fe345bcc2b7537ce0b4d16c05f035dbb8150e4fa06da589dfd79330956b9c2aa4e5b222f9ffc3642d2e817a208b30bc86c5271d8fa60e2b2c749569b97a2fffe406a09b6024a518e5800e78bb5d08"}, @NFTA_DATA_VALUE={0xa3, 0x1, "61db826ef7733fe3da5e398c1aac67691f3b8f8360bc67402b0da7e262c3fee42d9a0495a7707febb9b1bd285a2d68340f99c9e3f220a42ac5927eceb2027b681e0810f39e15ff4a579de56b29723c48ad100d0ffe4b532f5c798d404accf63c5c81ddff5d45e4527f94f1d803b603d1b2e9e02ceb70de4125065b2b047e66539f9e6f0a21ab4394a2df41d3bf838ad41904d22af8073c5ae10cbc011d07bc"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x58, 0x1, "0813ded80e033a530485ff418af89842d60989628b755d854ef8b6a333930fd3b8a6da4857ea03f51c0fcfd5f4c1c380a635d64b185a2357869ca5757e10139ba18af787fc19a186515a8f7bba3d10268685398a"}, @NFTA_DATA_VALUE={0xcc, 0x1, "f9c046ce4d055afe1ada7a3542d15cb9b8aac46ad788e9cfca450fc5d4a19c00f4babfce154fdefa3756493183e81cca869d733fa0dc985fd57d19c97986f48d9d9f9dcfb411f760c9322d4dfc491e6f00cba6e596c4c154fd0029d85f1e37f30c5da94bafa93ddeff75229ae7f4ec10bdd7fd473b41a19158741c5cb1c6ef61e9aa746b153485f196c1f3331f5769463d35a2316f7f7d1104482666978af77a5168e8fe48f0a16d345131607a0fbf9dc9a4abbfa8d5fafecde64cc7c3d4a574bdfbf1633648fad7"}, @NFTA_DATA_VALUE={0x95, 0x1, "7119a22676ccca2027cad0ef6c8b899515edcb610fd1a0cff7702dcdc8470b68f76fc8d1823042f1b29394a54067bdf42a565ca68db30b17f73040b17eae16feede39cd7aa19ede848957e747761abfd083b49d01e41c1d0197902ea9271482674af2eab38a25424f8eafede00b70556fb15e9fe0a545d966a991310b79f1c19260654525f87c05edb39b1ab736bf5e520"}]}]}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x850}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) (async, rerun: 32) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{0x0, 0x51}], 0x1}, 0x0) (async, rerun: 32) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) (async) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, 'wlan1\x00'}}, 0x1e) (async, rerun: 64) r5 = socket$pppl2tp(0x18, 0x1, 0x1) (rerun: 64) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) recvmsg(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x40) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) (async) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r9, 0x40047438, &(0x7f0000000500)=0x2) ioctl$PPPIOCBRIDGECHAN(r9, 0x40047435, &(0x7f0000000200)=0x1) (async) socket$netlink(0x10, 0x3, 0x0) (async) r10 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) 1.878464444s ago: executing program 2 (id=3844): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) unshare(0x22020400) r1 = socket(0x29, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x119, 0x22, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000021000010000000010000002000000000a2c000000180a010300000000000000000a0000050900010273798831400000000900020073797a32faf46b000000970014004000e256ff954e800104cea609a63b6c79d21100010000000000000000000200000a5319a2737a964948ec90be1bfcf7f6e67d657dcddb05"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x20000854) 1.550807232s ago: executing program 0 (id=3845): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7177}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @rand_addr=0x64010102}}, 0x5, 0x0, 0x0, 0x104, 0xe2d8f2eb1d010935, 0x7, 0x4}, 0x9c) syz_emit_ethernet(0xa8, &(0x7f0000000000)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@generic={0x6002, "3abfe33e56dc56d314aed412f6c8297ea963dbeeea2e3bc28472aa29626e84e2075f05378185d7b550ad9842660adb945ae0bfd39f2a9a9a1be02c32156e2cd3216cb31786b2772aaf005260a1087432c4ba482412b57573e28b68fb39e093889af142d942ea43e393d4eadfc2fb987248f5a3fe1039770c1760d6962ea36ff3b134e289bff986cc126993eca5fcaddaa870f0b9b31d2d4ab5fa"}}}, &(0x7f00000000c0)={0x1, 0x2, [0x530, 0xcad, 0x62d, 0xc30]}) (async) syz_emit_ethernet(0xa8, &(0x7f0000000000)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@generic={0x6002, "3abfe33e56dc56d314aed412f6c8297ea963dbeeea2e3bc28472aa29626e84e2075f05378185d7b550ad9842660adb945ae0bfd39f2a9a9a1be02c32156e2cd3216cb31786b2772aaf005260a1087432c4ba482412b57573e28b68fb39e093889af142d942ea43e393d4eadfc2fb987248f5a3fe1039770c1760d6962ea36ff3b134e289bff986cc126993eca5fcaddaa870f0b9b31d2d4ab5fa"}}}, &(0x7f00000000c0)={0x1, 0x2, [0x530, 0xcad, 0x62d, 0xc30]}) 1.550427035s ago: executing program 5 (id=3846): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="44000000000101040000000000000100e000000108000200e00000010c000280050001"], 0x44}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x2, 0x3, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000001) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f00000002c0)={0x24, @none={0x0, 0x1}}, 0x14) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18, &(0x7f00000001c0)={&(0x7f0000000140)="5ab37158946b88213a", 0x9}, 0x1, 0x0, 0x0, 0x20008840}, 0x4000000) readv(r2, &(0x7f00000000c0)=[{&(0x7f00000014c0)=""/4105, 0x1009}], 0x1) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r7, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r8, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004081}, 0x4044848) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x2ddfdbfb, {0x0, 0x0, 0x0, r6, {0x9, 0xa}, {0x8, 0xfff1}, {0x0, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4041880) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r6, 0x1, {0x1, 0xf0, 0x3}}, 0x18) 1.421896394s ago: executing program 1 (id=3847): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000630000dd000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x13, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x23) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) socket$igmp6(0xa, 0x3, 0x2) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x90000, '\x00', r2, 0xffffffffffffffff, 0x4, 0x0, 0x3}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000300)={@val={0x800e}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}, {0x4500, 0x0, 0x14, 0x0, @gue={{0x2, 0x0, 0x0, 0x4, 0x100, @val=0x80}, "80f7c1d0"}}}}}}}, 0x3a) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000880)={r0, &(0x7f0000000780)='\x00', 0x40100, &(0x7f00000007c0)={@_ha_fsid={[0x4, 0x6]}, {0x4, 0xfffe, 0x3, 0x2}}, 0x360a81d6, &(0x7f0000000800), &(0x7f0000000840)=0x3f800000}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) gettid() (async) r9 = gettid() socket(0x10, 0x803, 0x0) (async) r10 = socket(0x10, 0x803, 0x0) socket(0x29, 0x5, 0x8e30) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000304f9fff2ffbedbdf2500007400", @ANYRES32=r8, @ANYBLOB="089805000750050008001300", @ANYRES32=r9, @ANYBLOB="08002c00050000071400030076"], 0x44}, 0x1, 0x0, 0x0, 0x44882}, 0x4040010) (async) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000304f9fff2ffbedbdf2500007400", @ANYRES32=r8, @ANYBLOB="089805000750050008001300", @ANYRES32=r9, @ANYBLOB="08002c00050000071400030076"], 0x44}, 0x1, 0x0, 0x0, 0x44882}, 0x4040010) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', r2, 0xffffffffffffffff, 0x5, 0x1, 0x5}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x18, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x686a}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ldst={0x3, 0x1, 0x6, 0x1, 0xa, 0xdd0940145bcc6604, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000440)='syzkaller\x00', 0x3, 0xde, &(0x7f0000000680)=""/222, 0x41100, 0x21, '\x00', r2, 0x25, r7, 0x8, &(0x7f00000008c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000900)={0x2, 0x2, 0x2b8fd33d}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000009c0)=[r8, r11], &(0x7f0000000a00)=[{0x0, 0x2, 0x2, 0x5}], 0x10, 0x8}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x10, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}}, 0x20}}, 0x0) 1.408311566s ago: executing program 4 (id=3848): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) close(r0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x8, 0x0, &(0x7f0000000400)) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r8) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r10) (async) getsockname$packet(r10, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="3800000010003704000080000000000000000000", @ANYRES32=r11, @ANYBLOB="c3040500000000001800128008000100677470000c00028008000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r8, &(0x7f0000000240)={0x0, 0x51, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002cbd70000e0000000202ff0008000100", @ANYRES8=r11, @ANYRES8=r9], 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) (async) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x9, 0x3, 0x6}}}}]}, 0x44}}, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async, rerun: 32) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 32) r13 = openat$cgroup_ro(r12, &(0x7f00000002c0)='cgroup.stat\x00', 0x275a, 0xfffe) preadv(r13, &(0x7f0000001440)=[{0x0}, {&(0x7f0000001480)=""/15, 0xf}], 0x2, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) (async) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00022cbd7000fbdbdf250000000006001d00df5d0000050400000000000006001a004e200000080009000200000006000e004609000008001900ac14142d080017001c458937301eca02c80f7e96acfd60932f28a845fde68ed0282867ea5f5630086de2f41e206cc8ede028c0403a3173b9a01b2972b3b001cd9c27c63064376293e2", @ANYRES32=r4, @ANYBLOB="0c000f00000000000000000008000a0004000000"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) (async) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x3, 0x1, 0x2, 0x3, {0xa, 0x4e22, 0x1, @private0, 0x1}}}, 0x32) (async, rerun: 32) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000040)="d9b604") (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r13}, 0x94) 1.35666456s ago: executing program 2 (id=3849): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000540)={&(0x7f0000000200), 0xc, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[@ANYBLOB="dc9e0000", @ANYBLOB="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", @ANYRES64=r1], 0xdc}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028005002d00200000001ef540574773755e5e48dc7edb27394d97ad76e9d5a0bfc624177363d041a1d277a0385d27eae1b70fb6"], 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r3, 0x400448e7, &(0x7f0000000080)) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4c854}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c000000f702010100000000000000000500ab930800044000005932280002800600034000010000060003400005000004000180080001000a010100"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_LEAVE_OCB(r4, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000978e6a2ae5e62d0e93f7fc62c2f5ca2abfe782ef25bc05ce18fa07bdd256c69512ebc0", @ANYRES16=r5, @ANYBLOB="040026bd7000fddbdf256d000000"], 0x14}}, 0x20008894) bind$inet(r6, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24}, 0x24}}, 0x0) recvmmsg(r8, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/33, 0x21}, {&(0x7f0000000800)=""/21, 0x15}], 0x2}}], 0x2, 0x0, 0x0) sendto$inet(r6, &(0x7f0000000100)="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", 0xfffffffffffffdb0, 0x4040004, 0x0, 0xfffffffb) sendmsg$nl_generic(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[], 0x13a0}, 0x1, 0x0, 0x0, 0x20020045}, 0x4000000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x20000043}, 0x0) 680.143416ms ago: executing program 1 (id=3850): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0xfffffffffffffdb8, &(0x7f0000001700)=[@in6={0xa, 0x4e20, 0x81, @private1, 0x602d1b12}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, @in6={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}, 0x8001}, @in6={0xa, 0x4e21, 0xfff, @dev={0xfe, 0x80, '\x00', 0x21}, 0x3}, @in6={0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00', 0x4ab4}]}, &(0x7f00000007c0)=0x10) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0xfffffffffffffdb8, &(0x7f0000001700)=[@in6={0xa, 0x4e20, 0x81, @private1, 0x602d1b12}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, @in6={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}, 0x8001}, @in6={0xa, 0x4e21, 0xfff, @dev={0xfe, 0x80, '\x00', 0x21}, 0x3}, @in6={0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00', 0x4ab4}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000180)={r1, 0x2, 0x6, 0x80000000, 0xa18c, 0x8}, &(0x7f00000001c0)=0x14) r2 = socket$inet_sctp(0x2, 0x5, 0x84) close(r2) (async) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @rand_addr=0x64010181}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="200000000000000084000000020000001a000400230002", @ANYRES32=r4], 0x20, 0x404a055}, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000001500)={0x0, 0x10001}, &(0x7f0000001540)=0x8) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f00000000c0)=@in={0x2, 0x9, @multicast1}, 0x10, &(0x7f0000001440)=[{&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="f686bc19dc7ecba508bd9c6bc7805f6e8e6a18baa28421c16f99b1e994152ee6db5a20ccd59ebf5667acfc4566c8db9ff20a8841cbe962449c165b5bf28dd49f33b7ce36522419e0c72f877a50fdf3e0b9544ce94533b3193a39438e7add6c1f208f01e8cb4b0cf0a6323a5475855dae1db1f9eec14bda99d3f498010d2618b8b46d56af4a0ed5dc736753a49f39e225a5750844b548bb15b3aec25b9907685b6da8eb45276112333065b7cad0c572f9672af27d17ba32b1a4", 0xb9}], 0x2, &(0x7f0000001580)=ANY=[@ANYBLOB="200000000000000084000000020000000700050010000000ffffff7f", @ANYRES32, @ANYBLOB="30000000000000008400000001000000596f090002800000a6ab000008000000060000000200000001000080", @ANYRES32=r1, @ANYBLOB="20000000646a403824b48b45df393700000000008400000002000000", @ANYRES32=r4, @ANYBLOB="1800000000000000840000000500000010000000020000002000000000000000840000000200000008000002ffffffff03000000", @ANYRES32=r5, @ANYBLOB="18000000000000008400000006000000008000000000000018000000000000008400000005000000f8fc0000000000002000000000000000840000000200000000000000f206000009000000", @ANYRES32, @ANYBLOB="18000000000000008400000007000000ffffffff00000000"], 0x110, 0x40}, 0x20000004) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000440)={r1, @in={{0x2, 0x4e20, @multicast2}}, 0x9, 0x5, 0x1f, 0x6, 0x6}, &(0x7f0000000500)=0x98) ioctl(r0, 0x8b2a, &(0x7f0000000040)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000900)=""/208, 0x112, 0xd0, 0x0, 0x1}, 0x28) (async) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000900)=""/208, 0x112, 0xd0, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="3a76da6d0326dd8d98b1a1321f6e648d26bec4332ccb6d2464c1a407b4b04e0ef3f5adff14e16970a75fa28f7d2e8eb823c7286547d94d9384ab51"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) socket$inet_mptcp(0x2, 0x1, 0x106) (async) socket$inet_mptcp(0x2, 0x1, 0x106) r7 = socket$kcm(0xa, 0x2, 0x0) r8 = socket(0x2, 0x80805, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="120000000100000004ed00000880000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) close(0x3) (async) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4f29, 0x3, 'nq\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x0, 0x1, 0x1}}, 0x44) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$sock_buf(r11, 0x1, 0x47, 0x0, 0x0) sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @mark={{0x14, 0x1, 0x24, 0xa}}, @timestamping={{0x14, 0x1, 0x25, 0x200}}], 0x78}, 0x80) (async) sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @mark={{0x14, 0x1, 0x24, 0xa}}, @timestamping={{0x14, 0x1, 0x25, 0x200}}], 0x78}, 0x80) 592.962203ms ago: executing program 4 (id=3851): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0xc, &(0x7f0000000080)=0x1, 0x4) syz_emit_ethernet(0x52, &(0x7f0000000400)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x1c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @mlv2_query={0x82, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4, 0x1, 0x8, 0x6}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x4}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x5}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 172.976987ms ago: executing program 5 (id=3852): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x70bd2d, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x0, 0x3, @dev={0xac, 0x14, 0x14, 0x34}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x0, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x0, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x0, 0x4, @private=0xa010101}]}, {0x2}, {0xc}, {0xc}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008800}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="050000000000ecfe7111010000850000000500000095000000000000009500a505e2ffffff000000000000000000000086ada01709c021887f4da42281bbc6cfeea3a9d2939b6113897e9b45d60166e2f5afc521bb0e68"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r1, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 0s ago: executing program 0 (id=3853): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000007c0)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x50}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x0, 0x1, 0xffffffff, 0xfffffffe, 0x1}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0xfffffffffffff813, 0xfffffffc, 0x7, 0x4, 0x55}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x11}, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000040)={0xffffffffffffffff}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r3}, 0x8) syz_emit_ethernet(0x4e, &(0x7f0000002e40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd607428dd00183afffe8000000000000000000000000000bbff0200000000000000000000000000018900907800000000fe00000001"], 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x94, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x68, 0x3, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x58, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x118}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='cdg', 0x3) sendmmsg$inet(r4, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="91683297cf74172f36fe963a1090c81609d212cd619a74fb5a1fa5e76bba163cb717dd6ce0209ca6114fe798923d2fa1561a2fff974acac202c5fe7daef393df555c7f3fd228c6b0ce672ad9762cde2662256fb0a41cea16c322b40f27", 0x5d}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001500)="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", 0x220}], 0x1}}], 0x2, 0x2090) write$bt_hci(r3, &(0x7f0000000240)={0x1, @le_set_ext_scan_params={{0x2041, 0xa7}, {0x2, 0x9, 0x15, "ad88de6023fa62ba12c32ccc199a1b940cde532acc074fd2d02c3626701c6da08bcaa20922d2339636de8366adb7a96f34d0bca22ef4373b7a3034a80767d1f5bbb53bf9c510b15a532be572ae2c3835fbe6e1531338ca23f2450b0407419119e3503ae75a48623817209df0aa31cdde266035b5bb64885f1e1bb3e31273469e6c532d7c11465384c23bff2c9ee3bd711ef87a711aa3cd150d68c56ef244964f3fbdffbd"}}}, 0xab) listen(r0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c000380080001400000000008000240000000001000038014000100746561003000000000000000000000005c000000160a0901000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c"], 0xfc}}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="020400000c00000000000000fddbdf25050a06006c20d226f42b218131970004fc000000000000000000000000000001810010000002000100000000000000fb0300000000030005000000000002004e23ac1414aa00"/96], 0x60}, 0x1, 0x7}, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x400) connect$vsock_stream(r8, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r9 = accept(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111b4000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) setsockopt$sock_timeval(r9, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10) kernel console output (not intermixed with test programs): 141 [ 403.118760][T17692] RAX: ffffffffffffffda RBX: 00007f68f5c15fa0 RCX: 00007f68f599ce59 [ 403.118773][T17692] RDX: 000000000000004c RSI: 0000200000000640 RDI: 000000000000000a [ 403.118784][T17692] RBP: 00007f68f67e0090 R08: 0000000000000000 R09: 0000000000000000 [ 403.118794][T17692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.118805][T17692] R13: 00007f68f5c16038 R14: 00007f68f5c15fa0 R15: 00007ffdb4bc0898 [ 403.118833][T17692] [ 403.426839][ T146] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.527672][ T80] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.576832][ T146] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.725793][T17714] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2892'. [ 403.806357][T17714] validate_nla: 3 callbacks suppressed [ 403.806459][T17714] netlink: 'syz.2.2892': attribute type 142 has an invalid length. [ 403.850792][T17715] netlink: 'syz.2.2892': attribute type 142 has an invalid length. [ 403.996634][T17683] lo speed is unknown, defaulting to 1000 [ 404.524931][T17753] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 404.700446][T17683] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.726409][T17683] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.768522][T17683] bridge_slave_0: entered allmulticast mode [ 404.780837][T17683] bridge_slave_0: entered promiscuous mode [ 404.834362][T17683] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.856461][T17683] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.872821][T17683] bridge_slave_1: entered allmulticast mode [ 404.887143][T17683] bridge_slave_1: entered promiscuous mode [ 404.966333][T17683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.000928][T17683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.062436][ T5638] Bluetooth: hci5: command tx timeout [ 405.120369][ T146] net_ratelimit: 27 callbacks suppressed [ 405.120388][ T146] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 405.144015][T17683] team0: Port device team_slave_0 added [ 405.161677][T17683] team0: Port device team_slave_1 added [ 405.233354][T17683] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.241671][T17683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.249206][T17791] __nla_validate_parse: 4 callbacks suppressed [ 405.249227][T17791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2914'. [ 405.279362][T17683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.345388][T17683] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.368889][T17683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.423763][T17683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.664243][T17683] hsr_slave_0: entered promiscuous mode [ 405.674350][T17683] hsr_slave_1: entered promiscuous mode [ 405.718105][T17809] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2918'. [ 405.938386][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 406.027162][ T5635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.157993][T17683] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 406.172016][T17683] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.208410][T10547] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 406.277834][T17683] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 406.306218][T17683] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.349036][ T146] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 406.416263][T17683] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 406.428737][T17683] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.470621][ T80] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 406.550959][T17683] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 406.563409][T17683] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.589025][ T146] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 406.698468][ T80] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 406.726331][T17683] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 406.739878][T17683] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 406.750866][T17683] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 406.764025][T17683] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 406.777142][T17683] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 406.794341][T17683] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 406.805017][T17683] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 406.815454][T17683] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 406.885425][T17683] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.912968][T17683] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.933713][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.941436][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.956360][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.965053][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.978269][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 406.990141][ T8976] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 407.139269][ T5644] Bluetooth: hci5: command tx timeout [ 407.332955][T17683] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.387760][T17683] veth0_vlan: entered promiscuous mode [ 407.415910][T17683] veth1_vlan: entered promiscuous mode [ 407.456821][T17683] veth0_macvtap: entered promiscuous mode [ 407.469463][T17683] veth1_macvtap: entered promiscuous mode [ 407.495242][T17683] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.511485][T17683] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.533927][ T146] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.544076][ T146] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.558662][ T146] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.567673][ T146] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.681189][T10547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.696981][T10547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.724696][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.734039][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.802915][T17830] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2885'. [ 407.929519][T17835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2885'. [ 407.939796][T17835] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2885'. [ 409.219143][ T5644] Bluetooth: hci5: command 0x040f tx timeout [ 410.228951][ T8976] net_ratelimit: 30 callbacks suppressed [ 410.228972][ T8976] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 410.348557][ T8976] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 410.458941][T10547] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 410.568733][T10547] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 410.678563][ T8876] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 410.788460][ T8876] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 410.796241][T17830] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 410.899181][ T8976] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 411.008753][ T8876] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 411.118923][ T80] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 411.138379][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 411.298757][ T5638] Bluetooth: hci5: command 0x040f tx timeout [ 413.380362][ T5638] Bluetooth: hci5: command 0x040f tx timeout [ 415.298421][ C0] net_ratelimit: 44 callbacks suppressed [ 415.298448][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 415.329044][ T8876] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 415.449492][ T8876] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 415.559347][T10547] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 415.669043][ T80] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 415.779245][ T8876] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 415.889273][ T8876] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 415.999220][ T8876] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 416.108731][T10547] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 416.219059][ T80] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 420.308800][ T146] net_ratelimit: 41 callbacks suppressed [ 420.308819][ T146] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 420.428377][ T80] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 420.498325][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 420.538887][ T8876] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 420.648779][ T80] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 420.758681][ T80] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 420.868924][ T8879] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 420.901292][ T8879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.978846][ T8876] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 421.088581][ T8879] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 425.399158][ T8879] net_ratelimit: 44 callbacks suppressed [ 425.399180][ T8879] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 425.518408][ T80] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 425.628786][ T8879] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 425.698415][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 425.738940][ T146] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 425.848981][ T146] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 425.968507][ T80] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 426.078699][ T80] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 426.189233][ T80] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 426.309138][ T8879] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 430.489055][ T146] net_ratelimit: 44 callbacks suppressed [ 430.489077][ T146] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 430.608617][ T146] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 430.718823][ T8876] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 430.828978][ T8876] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 430.898353][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 430.938995][ T8876] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 431.048899][ T8876] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 431.158822][ T8876] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 431.269017][ T8876] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 431.379105][ T146] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 434.881809][T17843] netlink: 'syz.3.2922': attribute type 1 has an invalid length. [ 434.926766][T17853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2920'. [ 434.953896][T17843] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2922'. [ 435.002539][T17853] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2920'. [ 435.274792][T17858] bond23: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 435.302166][T17858] bond23 (unregistering): Released all slaves [ 435.332671][T17846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2920'. [ 435.558623][T10547] net_ratelimit: 39 callbacks suppressed [ 435.558643][T10547] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 435.719685][ T8879] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 435.802399][T17872] bridge13: entered promiscuous mode [ 435.865082][ T8879] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 435.999077][ T8876] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 436.098347][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 436.110681][T17891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2936'. [ 436.125307][T17886] team0 (unregistering): Port device team_slave_0 removed [ 436.142230][T17886] team0 (unregistering): Port device team_slave_1 removed [ 436.282394][T17902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2937'. [ 436.315857][T17888] ip6tnl0: entered promiscuous mode [ 436.336204][T17888] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2935'. [ 436.429381][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.587996][T17919] netlink: 'syz.4.2941': attribute type 1 has an invalid length. [ 436.967925][T17901] batadv0: entered promiscuous mode [ 436.970244][T17914] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2940'. [ 436.980918][T17901] batadv0: left promiscuous mode [ 437.014879][T17919] workqueue: Failed to create a rescuer kthread for wq "bond28": -EINTR [ 437.079273][T10547] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 437.138314][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 437.240704][ T146] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 437.277831][T17938] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2942'. [ 437.565592][ T5644] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 437.587913][ T5644] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 437.606672][ T5644] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 437.610018][T10547] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 437.638108][ T5644] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 437.651708][ T5644] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 438.415033][T17988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2952'. [ 438.439577][T17981] netlink: 'syz.3.2949': attribute type 4 has an invalid length. [ 438.484681][ T5629] bond8: (slave syz_tun): Removing an active aggregator [ 438.514114][ T5629] bond8: (slave syz_tun): Releasing backup interface [ 438.750330][T17971] lo speed is unknown, defaulting to 1000 [ 438.763703][T17949] lo speed is unknown, defaulting to 1000 [ 439.698870][ T5644] Bluetooth: hci0: command tx timeout [ 439.889532][T18013] batman_adv: batadv0: Removing interface: vlan4 [ 439.905319][T18013] vlan2 (unregistering): left allmulticast mode [ 439.912953][T18013] geneve0 (unregistering): left allmulticast mode [ 439.922651][T18013] vlan2 (unregistering): left promiscuous mode [ 439.930307][T18013] geneve0 (unregistering): left promiscuous mode [ 439.936948][T18013] bridge0: port 1(vlan2) entered disabled state [ 440.013845][T17949] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.027843][T17949] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.041496][T17949] bridge_slave_0: entered allmulticast mode [ 440.060266][T17949] bridge_slave_0: entered promiscuous mode [ 440.084317][T17949] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.102892][T17949] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.131261][T17949] bridge_slave_1: entered allmulticast mode [ 440.151820][T18023] __nla_validate_parse: 28 callbacks suppressed [ 440.151839][T18023] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2961'. [ 440.152590][T17949] bridge_slave_1: entered promiscuous mode [ 440.162484][T18023] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2961'. [ 440.283913][T17949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.315772][T17949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.436405][T17949] team0: Port device team_slave_0 added [ 440.447291][T18030] xt_bpf: check failed: parse error [ 440.455570][T17949] team0: Port device team_slave_1 added [ 440.473325][T18028] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2963'. [ 440.562491][T17949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.591775][T17949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.676291][T18040] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2966'. [ 440.686780][T17949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.703026][T17949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.711488][T17949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.739919][T17949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.827144][T18051] netlink: 'syz.3.2970': attribute type 1 has an invalid length. [ 440.852407][T18049] tipc: Enabled bearer , priority 0 [ 441.012825][T18049] syzkaller0: entered promiscuous mode [ 441.032478][T18049] syzkaller0: entered allmulticast mode [ 441.106825][T17949] hsr_slave_0: entered promiscuous mode [ 441.115443][T17949] hsr_slave_1: entered promiscuous mode [ 441.122909][T18051] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2970'. [ 441.134213][T17949] debugfs: 'hsr0' already exists in 'hsr' [ 441.141129][T17949] Cannot create hsr debugfs directory [ 441.150158][T18049] tipc: Resetting bearer [ 441.173026][T18051] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2970'. [ 441.206243][T18046] tipc: Resetting bearer [ 441.245294][T18046] tipc: Disabling bearer [ 441.293172][T18071] xt_hashlimit: size too large, truncated to 1048576 [ 441.300549][ C0] net_ratelimit: 20 callbacks suppressed [ 441.300570][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 441.459923][ T8879] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 441.507555][T18080] IPVS: set_ctl: invalid protocol: 58 100.1.1.0:20003 [ 441.775411][T18091] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2978'. [ 441.779433][ T5644] Bluetooth: hci0: command tx timeout [ 441.819645][ T8976] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 442.020536][T18105] netlink: 'syz.2.2983': attribute type 3 has an invalid length. [ 442.338406][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 442.360805][ T8876] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 442.514277][ T5364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.612677][T18117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2985'. [ 442.807148][T18120] netlink: 1008 bytes leftover after parsing attributes in process `syz.3.2986'. [ 443.011034][ T80] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.034196][T18121] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 443.388308][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 443.524534][ T80] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.567280][ T80] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.621264][T18137] syzkaller1: entered promiscuous mode [ 443.647481][T18137] syzkaller1: entered allmulticast mode [ 443.680894][ T80] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.728551][ T8879] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 443.860510][ T5644] Bluetooth: hci0: command tx timeout [ 443.939396][ T8879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.121481][T18165] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2997'. [ 444.318919][T18175] lo speed is unknown, defaulting to 1000 [ 444.347320][T18180] netlink: 'syz.3.3000': attribute type 1 has an invalid length. [ 444.642273][T18188] tipc: Enabled bearer , priority 0 [ 444.706800][ T5824] IPVS: starting estimator thread 0... [ 444.810030][T18198] IPVS: using max 42 ests per chain, 100800 per kthread [ 444.865755][T18188] syzkaller0: entered promiscuous mode [ 444.884263][T18188] syzkaller0: entered allmulticast mode [ 444.897849][T18188] tipc: Resetting bearer [ 444.965110][T18187] tipc: Resetting bearer [ 445.944047][ T5644] Bluetooth: hci0: command tx timeout [ 446.505162][ C0] net_ratelimit: 6 callbacks suppressed [ 446.505182][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 447.548264][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 448.588826][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 448.596571][ T5364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.002808][T18187] tipc: Disabling bearer [ 449.309019][T18223] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3009'. [ 449.351851][T17949] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 449.406992][T17949] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 449.417772][T17949] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 449.445017][T17949] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 449.505868][T17949] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 449.536720][T17949] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 449.559752][T17949] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 449.589418][T17949] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 449.594198][T18230] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3014'. [ 449.619089][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 449.700020][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.724550][T18242] ipvlan0: entered promiscuous mode [ 449.770668][T18232] lo speed is unknown, defaulting to 1000 [ 449.782040][ T5801] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 449.989001][ T5801] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 450.030876][T18252] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3019'. [ 450.105445][T17949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.140932][ T8878] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 450.183981][T17949] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.215198][ T8876] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.222499][ T8876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.280866][ T8876] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.288595][ T8876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.368697][ T8879] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 450.526975][T18261] lo speed is unknown, defaulting to 1000 [ 450.687326][T18273] tipc: Enabling of bearer rejected, already enabled [ 450.888876][T18282] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3027'. [ 451.244378][T18292] netlink: 'syz.0.3029': attribute type 10 has an invalid length. [ 451.575685][T18298] veth0_macvtap: left allmulticast mode [ 451.615447][T18304] netlink: 'syz.2.3031': attribute type 12 has an invalid length. [ 451.629652][ T5746] net_ratelimit: 7 callbacks suppressed [ 451.629672][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.648777][ T5801] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.680852][ T5801] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.698352][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 451.712507][ T5801] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.722075][ T5801] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.760998][T17949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.835967][T18308] Bluetooth: MGMT ver 1.23 [ 451.897226][T17949] veth0_vlan: entered promiscuous mode [ 451.944177][T17949] veth1_vlan: entered promiscuous mode [ 451.979859][ T8976] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 452.064566][T17949] veth0_macvtap: entered promiscuous mode [ 452.080946][T18321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3036'. [ 452.110083][T17949] veth1_macvtap: entered promiscuous mode [ 452.148827][T18322] netlink: 27 bytes leftover after parsing attributes in process `syz.0.3036'. [ 452.177559][T17949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 452.220777][T17949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 452.244281][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.281021][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.344168][ T8876] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 452.373360][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.386362][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.478905][ T8879] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 452.566046][ T5801] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.580682][T18333] lo speed is unknown, defaulting to 1000 [ 452.591532][ T5801] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.722505][ T8879] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.738485][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 452.739018][ T8879] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.779461][ T5801] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 452.871830][T18340] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2946'. [ 452.941642][ T8876] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 453.064273][ T13] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 453.125220][T18346] batadv_slave_1: entered promiscuous mode [ 453.414622][ T5801] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 453.466425][ T5645] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 453.480642][ T5645] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 453.500379][ T5645] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 453.512190][T18347] batadv_slave_1: left promiscuous mode [ 453.524245][ T5631] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 453.550760][ T5631] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 453.692072][T18366] netlink: 'syz.4.3048': attribute type 27 has an invalid length. [ 453.943159][ T5644] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 453.953918][ T5644] Bluetooth: hci0: command 0x0c1a tx timeout [ 454.028964][T18375] netlink: 'syz.1.3050': attribute type 1 has an invalid length. [ 454.037129][T18375] netlink: 'syz.1.3050': attribute type 4 has an invalid length. [ 454.050773][T18375] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.3050'. [ 454.061600][T18375] netlink: 'syz.1.3050': attribute type 1 has an invalid length. [ 454.070025][T18375] netlink: 'syz.1.3050': attribute type 4 has an invalid length. [ 454.078095][T18375] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.3050'. [ 454.088833][T18375] netlink: 'syz.1.3050': attribute type 1 has an invalid length. [ 454.099591][T18375] netlink: 'syz.1.3050': attribute type 4 has an invalid length. [ 454.134863][T18375] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.3050'. [ 454.146046][T18375] netlink: 'syz.1.3050': attribute type 1 has an invalid length. [ 454.465313][T18396] syzkaller1: entered promiscuous mode [ 454.496232][T18396] syzkaller1: entered allmulticast mode [ 454.700658][T18355] lo speed is unknown, defaulting to 1000 [ 454.836054][T18412] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.843983][T18412] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.869403][T18412] bridge0: entered allmulticast mode [ 454.974771][T18412] bridge_slave_1: left allmulticast mode [ 455.007423][T18412] bridge_slave_1: left promiscuous mode [ 455.030392][T18412] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.086070][T18412] bridge_slave_0: left allmulticast mode [ 455.100979][T18412] bridge_slave_0: left promiscuous mode [ 455.116584][T18412] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.448077][T18421] __nla_validate_parse: 30 callbacks suppressed [ 455.448098][T18421] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3059'. [ 455.633277][T18427] bond23: option resend_igmp: invalid value (2878) [ 455.648381][T18427] bond23: option resend_igmp: allowed values 0 - 255 [ 455.687529][T18427] bond23 (unregistering): Released all slaves [ 455.699039][ T5638] Bluetooth: hci2: command tx timeout [ 456.079372][T18355] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.086793][T18355] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.096428][T18355] bridge_slave_0: entered allmulticast mode [ 456.106299][T18355] bridge_slave_0: entered promiscuous mode [ 456.116830][T18355] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.125104][T18355] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.133817][T18355] bridge_slave_1: entered allmulticast mode [ 456.144525][T18355] bridge_slave_1: entered promiscuous mode [ 456.210444][T18355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.244904][T18355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.302467][T18445] validate_nla: 59 callbacks suppressed [ 456.302489][T18445] netlink: 'syz.3.3065': attribute type 58 has an invalid length. [ 456.356125][T18445] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3065'. [ 456.457512][T18355] team0: Port device team_slave_0 added [ 456.504457][T18355] team0: Port device team_slave_1 added [ 456.544299][T18450] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3066'. [ 456.625771][T18355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.648107][T18355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.706647][T18456] IPv6: NLM_F_CREATE should be specified when creating new route [ 456.727300][T18355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.742517][T18456] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 456.756274][T18456] IPv6: NLM_F_CREATE should be set when creating new route [ 456.816639][T18355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.842330][T18355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.908217][ C0] net_ratelimit: 19 callbacks suppressed [ 456.908235][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 456.937977][T18470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3068'. [ 456.955581][T18355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.037385][T18456] netlink: 'syz.3.3068': attribute type 1 has an invalid length. [ 457.066549][T18456] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3068'. [ 457.282218][T18355] hsr_slave_0: entered promiscuous mode [ 457.293312][T18355] hsr_slave_1: entered promiscuous mode [ 457.346015][T18355] debugfs: 'hsr0' already exists in 'hsr' [ 457.386446][T18355] Cannot create hsr debugfs directory [ 457.421705][ T5801] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 457.625444][T18485] netlink: 'syz.3.3072': attribute type 10 has an invalid length. [ 457.644129][T18487] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 457.683783][T18485] syz_tun: entered promiscuous mode [ 457.698916][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.726821][T18485] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 457.778471][T18494] lo speed is unknown, defaulting to 1000 [ 457.785606][ T5638] Bluetooth: hci2: command 0x041b tx timeout [ 457.938418][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 458.143933][T18516] syz_tun: entered allmulticast mode [ 458.168030][T18516] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3080'. [ 458.168505][ T13] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 458.184936][T18516] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3080'. [ 458.215358][T18516] ip6gretap0: entered promiscuous mode [ 458.228939][T18516] ip6gretap0: left promiscuous mode [ 458.486366][T18532] gretap0: left promiscuous mode [ 458.505111][T18532] ip6tnl0: left promiscuous mode [ 458.764602][T18532] vlan7: left promiscuous mode [ 458.770775][T18532] bond18: left promiscuous mode [ 458.789292][T18532] 8021q: adding VLAN 0 to HW filter on device bond19 [ 458.801497][T18532] erspan0: left promiscuous mode [ 458.814830][T18532] syzkaller0: left promiscuous mode [ 458.836365][T18532] bond20: left promiscuous mode [ 458.845569][T18532] bond21: left promiscuous mode [ 458.866571][T18532] 8021q: adding VLAN 0 to HW filter on device bond22 [ 458.896232][T18532] 8021q: adding VLAN 0 to HW filter on device bond23 [ 458.916874][T18532] bridge9: left promiscuous mode [ 458.936803][T18532] bond24: left promiscuous mode [ 458.947532][T18532] bridge10: left promiscuous mode [ 458.977108][T18532] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 458.988276][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 459.016699][T18532] 8021q: adding VLAN 0 to HW filter on device bond25 [ 459.030052][T18532] 8021q: adding VLAN 0 to HW filter on device bond26 [ 459.049979][T18532] 8021q: adding VLAN 0 to HW filter on device bond27 [ 459.088379][ T80] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 459.244411][ T8879] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 459.330970][ T8976] bond25: (slave veth21): link status definitely up, 10000 Mbps full duplex [ 459.366020][ T8976] bond25: (slave veth21): making interface the new active one [ 459.401913][ T8976] bond25: active interface up! [ 459.517598][ T13] bond26: (slave veth23): link status definitely up, 10000 Mbps full duplex [ 459.566607][ T13] bond26: (slave veth23): making interface the new active one [ 459.614184][ T13] bond26: active interface up! [ 459.649295][T18569] bond1: entered promiscuous mode [ 459.655585][T18569] 8021q: adding VLAN 0 to HW filter on device bond1 [ 459.680498][ T80] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 459.743879][ T80] bond27: (slave veth25): link status definitely up, 10000 Mbps full duplex [ 459.820481][ T80] bond27: (slave veth27): link status definitely up, 10000 Mbps full duplex [ 459.853154][ T80] bond27: (slave veth25): making interface the new active one [ 459.861990][ T5644] Bluetooth: hci2: command 0x041b tx timeout [ 459.877990][ T80] bond27: active interface up! [ 460.018307][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 460.162989][T18596] netlink: 'syz.3.3098': attribute type 10 has an invalid length. [ 460.213063][T18597] netlink: 'syz.3.3098': attribute type 10 has an invalid length. [ 460.275318][T18600] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3098'. [ 460.309242][T18600] netlink: 35 bytes leftover after parsing attributes in process `syz.3.3098'. [ 460.362906][T18596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 460.401022][T18596] team0: Port device netdevsim1 added [ 460.446456][T18597] team0: Port device netdevsim1 removed [ 460.496949][T18597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 460.572943][T18597] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 460.976261][T18355] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 461.003773][T18616] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3102'. [ 461.027909][T18355] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 461.069782][T18355] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 461.112466][T18355] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 461.135177][T18355] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 461.167527][T18355] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 461.189249][T18355] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 461.212721][T18355] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 461.395134][T18629] netlink: 'syz.4.3104': attribute type 1 has an invalid length. [ 461.528095][T18635] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 461.555260][T18629] 8021q: adding VLAN 0 to HW filter on device bond28 [ 461.634809][T18633] bond28: (slave geneve4): making interface the new active one [ 461.647185][T18633] bond28: (slave geneve4): Enslaving as an active interface with an up link [ 461.741519][T18355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.819753][T18355] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.847880][T18645] bond0: Error: CAN devices cannot be enslaved [ 461.873684][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.881202][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.928331][T10545] net_ratelimit: 11 callbacks suppressed [ 461.928349][T10545] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 461.944209][ T5644] Bluetooth: hci2: command 0x041b tx timeout [ 462.001883][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.009196][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.098311][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 462.259582][ T8878] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 462.378990][T10545] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 462.518726][ T5801] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 462.604134][T18666] openvswitch: netlink: EtherType 50a is less than min 600 [ 462.642929][ T80] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 462.779387][ T13] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 462.938632][T10545] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 462.951369][T18686] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3119'. [ 463.059704][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 463.122828][T18698] xt_TCPMSS: Only works on TCP SYN packets [ 463.138989][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 463.236996][T18709] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3121'. [ 463.511581][T18720] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3126'. [ 463.611296][T18355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.807766][T18355] veth0_vlan: entered promiscuous mode [ 463.848984][T18355] veth1_vlan: entered promiscuous mode [ 463.955988][T18735] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3130'. [ 463.997273][T18355] veth0_macvtap: entered promiscuous mode [ 464.018377][ T5644] Bluetooth: hci2: command 0x041b tx timeout [ 464.063307][T18355] veth1_macvtap: entered promiscuous mode [ 464.072709][T18738] netlink: 'syz.1.3131': attribute type 3 has an invalid length. [ 464.093180][T18355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 464.131160][T18355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 464.142245][T18742] netlink: 'syz.4.3132': attribute type 1 has an invalid length. [ 464.198986][T18742] 8021q: adding VLAN 0 to HW filter on device bond29 [ 464.220479][T18738] netlink: 372 bytes leftover after parsing attributes in process `syz.1.3131'. [ 464.446194][T18745] veth29: entered allmulticast mode [ 464.460504][T18745] bond29: (slave veth29): Enslaving as an active interface with an up link [ 464.470885][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.513045][T18742] bond29 (unregistering): (slave veth29): Releasing backup interface [ 464.533979][T18742] bond29 (unregistering): Released all slaves [ 464.572066][T18748] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3133'. [ 464.764739][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.776225][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.871292][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.133400][T18762] lo speed is unknown, defaulting to 1000 [ 465.162238][T10545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.187779][T10545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.336738][ T8878] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.364933][ T8878] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.814485][T18791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3142'. [ 466.336407][T18807] lo speed is unknown, defaulting to 1000 [ 466.417326][T18814] netlink: 'syz.0.3148': attribute type 1 has an invalid length. [ 466.560353][ T5638] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 466.577814][ T5638] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 466.593536][ T5638] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 466.613014][ T5638] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 466.622355][ T5638] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 467.089684][T10545] net_ratelimit: 26 callbacks suppressed [ 467.089703][T10545] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 467.269714][ T5632] bond0: (slave syz_tun): Releasing backup interface [ 467.298305][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 467.316584][ T5632] syz_tun (unregistering): left allmulticast mode [ 467.352811][T10547] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 467.479248][ T146] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 467.662436][ T8876] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 467.807284][T18863] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3156'. [ 467.874123][T18873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3156'. [ 468.068810][ T146] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 468.199562][ T146] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 468.216482][T18886] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3160'. [ 468.338383][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 468.677518][T18907] netlink: 'syz.0.3165': attribute type 1 has an invalid length. [ 468.738773][ T5644] Bluetooth: hci4: command tx timeout [ 468.771944][T10547] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 468.796448][T18907] workqueue: Failed to create a rescuer kthread for wq "bond23": -EINTR [ 468.796924][T18822] lo speed is unknown, defaulting to 1000 [ 468.912926][T10547] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 469.177887][T18932] netlink: 'syz.1.3170': attribute type 1 has an invalid length. [ 469.358999][T18942] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3170'. [ 469.429980][T18929] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3170'. [ 469.449583][T18932] 8021q: adding VLAN 0 to HW filter on device bond1 [ 469.486635][T18936] bond1: (slave veth3): Enslaving as an active interface with a down link [ 469.497625][T18942] bond1: entered allmulticast mode [ 469.506647][T18929] bond1: left allmulticast mode [ 469.516807][T18929] 8021q: adding VLAN 0 to HW filter on device bond1 [ 469.676402][T18949] syzkaller1: entered promiscuous mode [ 469.683811][T18949] syzkaller1: entered allmulticast mode [ 469.718941][T18949] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3174'. [ 470.010572][T18822] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.028639][T18822] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.040016][T18822] bridge_slave_0: entered allmulticast mode [ 470.058520][T18822] bridge_slave_0: entered promiscuous mode [ 470.072218][T18963] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 470.072218][T18963] Please contact the netfilter-devel mailing list or update your nftables rules. [ 470.097894][T18822] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.118388][T18822] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.131873][T18822] bridge_slave_1: entered allmulticast mode [ 470.140453][T18822] bridge_slave_1: entered promiscuous mode [ 470.281435][T18822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.307590][T18822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.380910][T18822] team0: Port device team_slave_0 added [ 470.390551][T18822] team0: Port device team_slave_1 added [ 470.445542][T18822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.467499][T18822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.503120][T18822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.531943][T18822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.540759][T18822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.573675][T18822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.614654][T18973] netlink: 'syz.2.3179': attribute type 41 has an invalid length. [ 470.656054][T18822] hsr_slave_0: entered promiscuous mode [ 470.665086][T18822] hsr_slave_1: entered promiscuous mode [ 470.672662][T18822] debugfs: 'hsr0' already exists in 'hsr' [ 470.680934][T18822] Cannot create hsr debugfs directory [ 470.687756][T18973] syzkaller0: entered promiscuous mode [ 470.695261][T18973] syzkaller0: entered allmulticast mode [ 470.818350][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 470.819441][ T5644] Bluetooth: hci4: command tx timeout [ 471.081898][T18977] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3180'. [ 471.105612][T18977] netlink: 'syz.2.3180': attribute type 10 has an invalid length. [ 471.200631][T18822] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 471.213297][T18822] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.354821][T18979] netlink: 'syz.1.3181': attribute type 39 has an invalid length. [ 471.370577][T18822] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 471.381883][T18822] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.408983][T18980] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3181'. [ 471.469826][T18982] netlink: 'syz.2.3182': attribute type 4 has an invalid length. [ 471.492272][T18982] netlink: 'syz.2.3182': attribute type 4 has an invalid length. [ 471.539516][T18822] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 471.551372][T18822] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.587611][T18983] veth1_to_bond: entered allmulticast mode [ 471.611812][T18982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3182'. [ 471.671468][T18822] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 471.683902][T18822] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.720650][T18982] veth1_to_bond (unregistering): left allmulticast mode [ 471.745226][T18982] bond0: (slave bond_slave_1): Releasing backup interface [ 472.105153][T10547] net_ratelimit: 13 callbacks suppressed [ 472.105173][T10547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.147937][T18822] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 472.161728][T18822] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 472.170024][T10547] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 472.178533][T18822] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 472.204085][T18822] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 472.229604][T18822] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 472.254108][T19000] netlink: 124 bytes leftover after parsing attributes in process `syz.2.3189'. [ 472.270115][T18822] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 472.297271][T18822] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 472.314757][T18822] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 472.347928][ T80] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 472.498221][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 472.523475][ T8878] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 472.695609][T18822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.743326][T18822] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.762577][ T8876] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.771593][ T8876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.806763][ T8876] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.818017][ T8876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.899015][ T5644] Bluetooth: hci4: command tx timeout [ 472.905460][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.959227][ T8876] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 473.118969][T10547] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 473.140344][T19036] __nla_validate_parse: 6 callbacks suppressed [ 473.140362][T19036] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3195'. [ 473.249594][ T8876] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 473.370763][T10547] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 473.482090][T19041] lo speed is unknown, defaulting to 1000 [ 473.839650][T19057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3196'. [ 473.840397][T18822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.892833][T19057] 8021q: adding VLAN 0 to HW filter on device bond1 [ 474.206485][T18822] veth0_vlan: entered promiscuous mode [ 474.219702][T18822] veth1_vlan: entered promiscuous mode [ 474.254295][T18822] veth0_macvtap: entered promiscuous mode [ 474.266298][T18822] veth1_macvtap: entered promiscuous mode [ 474.287264][T18822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 474.303336][T18822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.317548][T10545] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.328216][ T8878] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.337715][ T8878] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.351516][ T8878] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.978967][ T5644] Bluetooth: hci4: command tx timeout [ 475.426155][T19010] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 475.600844][T10547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.625676][T10547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.710601][T10547] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.725107][T19074] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 475.748816][T10547] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.900299][T19092] netlink: 748 bytes leftover after parsing attributes in process `syz.3.3202'. [ 475.934331][T19092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3202'. [ 476.015627][T19098] netlink: 'syz.3.3202': attribute type 2 has an invalid length. [ 476.045230][T19098] netlink: 'syz.3.3202': attribute type 1 has an invalid length. [ 476.054018][T19098] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3202'. [ 476.186865][T19103] tipc: Started in network mode [ 476.201479][T19103] tipc: Node identity a63d18b52832, cluster identity 4711 [ 476.240506][T19103] tipc: Enabled bearer , priority 0 [ 476.279198][T19090] syzkaller0: entered promiscuous mode [ 476.300623][T19090] syzkaller0: entered allmulticast mode [ 476.326930][T19096] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 476.340869][T19109] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 476.405059][T19106] tipc: Enabling not permitted [ 476.416306][T19106] tipc: Enabling of bearer rejected, failed to enable media [ 476.430730][T19113] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3208'. [ 476.465472][T19113] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3208'. [ 476.480319][T19113] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3208'. [ 476.535079][T19110] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3205'. [ 476.551575][T19096] tipc: Resetting bearer [ 476.645961][T19110] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3205'. [ 476.725743][ T5638] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 476.767339][ T5638] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 476.780856][ T5638] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 476.791614][ T5638] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 476.801506][ T5638] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 476.966431][T10547] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.978098][T10547] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.015820][T19106] lo speed is unknown, defaulting to 1000 [ 477.033698][T19088] tipc: Resetting bearer [ 477.137526][T19088] tipc: Disabling bearer [ 477.160886][T10547] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.171183][T10547] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.182241][T10547] net_ratelimit: 25 callbacks suppressed [ 477.182273][T10547] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 477.560120][T19149] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 477.698296][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 477.727283][T19162] x_tables: unsorted entry at hook 2 [ 477.741183][ T8876] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 477.839785][T19168] : renamed from bond0 (while UP) [ 477.860666][ T8876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.955088][T19119] lo speed is unknown, defaulting to 1000 [ 478.337874][T14447] bridge0: entered promiscuous mode [ 478.415612][T19191] __nla_validate_parse: 2 callbacks suppressed [ 478.415630][T19191] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3228'. [ 478.608767][T10545] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 478.664100][T19203] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3231'. [ 478.691837][T19203] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 478.700885][T19203] IPv6: NLM_F_CREATE should be set when creating new route [ 478.708264][T19203] IPv6: NLM_F_CREATE should be set when creating new route [ 478.738318][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 478.904430][ T5644] Bluetooth: hci3: command tx timeout [ 478.979640][T14448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.006174][T19215] netlink: 15672 bytes leftover after parsing attributes in process `syz.4.3233'. [ 479.019934][T19215] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3233'. [ 479.030207][T19215] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3233'. [ 479.040913][T19215] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3233'. [ 479.059771][ T8976] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 479.084393][ T146] bridge_slave_1: left allmulticast mode [ 479.092455][ T146] bridge_slave_1: left promiscuous mode [ 479.102354][ T146] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.391328][ T146] bond11 (unregistering): (slave erspan1): Releasing active interface [ 479.400379][ T146] erspan1 (unregistering): left promiscuous mode [ 479.452671][ T146] bond0 (unregistering): (slave gretap0): Releasing backup interface [ 479.484391][T19203] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 479.660187][T19231] netlink: 'syz.1.3237': attribute type 1 has an invalid length. [ 479.668689][T19231] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3237'. [ 479.714057][ T146] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 479.788769][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 479.886312][ T146] bond1 (unregistering): Released all slaves [ 479.918371][ T146] bond2 (unregistering): (slave veth3): Releasing active interface [ 479.927810][ T146] bond2 (unregistering): Released all slaves [ 479.955574][ T146] bond3 (unregistering): (slave veth5): Releasing active interface [ 479.965136][ T146] bond3 (unregistering): Released all slaves [ 479.991363][ T146] bond4 (unregistering): Released all slaves [ 480.015105][ T146] bond5 (unregistering): (slave veth9): Releasing active interface [ 480.032151][ T146] bond5 (unregistering): Released all slaves [ 480.055338][ T146] bond6 (unregistering): (slave veth11): Releasing active interface [ 480.065063][ T146] bond6 (unregistering): Released all slaves [ 480.083887][ T146] bond7 (unregistering): Released all slaves [ 480.113096][ T146] bond8 (unregistering): (slave veth13): Releasing active interface [ 480.122857][ T146] bond8 (unregistering): Released all slaves [ 480.147966][ T146] bond9 (unregistering): (slave veth15): Releasing active interface [ 480.163657][ T146] bond9 (unregistering): Released all slaves [ 480.184560][ T146] bond10 (unregistering): Released all slaves [ 480.211715][ T146] bond11 (unregistering): Released all slaves [ 480.234566][ T146] bond12 (unregistering): (slave veth17): Releasing active interface [ 480.245038][ T146] bond12 (unregistering): Released all slaves [ 480.275081][ T146] bond13 (unregistering): Released all slaves [ 480.299148][ T146] bond14 (unregistering): Released all slaves [ 480.326008][ T146] bond15 (unregistering): Released all slaves [ 480.361817][ T146] bond16 (unregistering): Released all slaves [ 480.383358][ T146] bond17 (unregistering): Released all slaves [ 480.405557][ T146] bond18 (unregistering): Released all slaves [ 480.436060][ T146] bond19 (unregistering): Released all slaves [ 480.464992][ T146] bond0 (unregistering): (slave bond20): Releasing backup interface [ 480.477686][ T146] bond0 (unregistering): Released all slaves [ 480.507235][ T146] bond20 (unregistering): Released all slaves [ 480.531811][ T146] bond21 (unregistering): Released all slaves [ 480.555311][ T146] bond22 (unregistering): (slave veth25): Releasing active interface [ 480.568954][ T146] bond22 (unregistering): Released all slaves [ 480.598926][ T8876] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 480.673108][T19224] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 480.693242][T19224] batadv_slave_1: entered promiscuous mode [ 480.772528][T19224] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 480.979343][ T5644] Bluetooth: hci3: command tx timeout [ 481.011315][ T146] tipc: Disabling bearer [ 481.063915][ T146] tipc: Left network mode [ 481.161085][T19251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3242'. [ 481.290620][T19260] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3243'. [ 481.313766][T19119] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.321503][T19119] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.331120][T19119] bridge_slave_0: entered allmulticast mode [ 481.339901][T19119] bridge_slave_0: entered promiscuous mode [ 481.351474][T19119] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.364216][T19119] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.366805][T19260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3243'. [ 481.372825][T19119] bridge_slave_1: entered allmulticast mode [ 481.391122][T19119] bridge_slave_1: entered promiscuous mode [ 481.429306][T19119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.444184][T19119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.540828][ T146] IPVS: stopping master sync thread 13950 ... [ 481.594401][ T146] IPVS: stopping backup sync thread 10901 ... [ 481.595464][T19119] team0: Port device team_slave_0 added [ 481.677136][T19119] team0: Port device team_slave_1 added [ 482.294856][T19298] tipc: Enabling of bearer rejected, failed to enable media [ 482.361924][T19119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.390666][T19119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.517049][T19119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.614631][T19119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.669238][T19119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.788751][T19119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.871067][ T8976] net_ratelimit: 7 callbacks suppressed [ 482.871121][ T8976] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 482.886936][T19305] x_tables: duplicate underflow at hook 1 [ 483.002909][ T5292] 8021q: adding VLAN 0 to HW filter on device eth1 [ 483.061709][ T5644] Bluetooth: hci3: command tx timeout [ 483.182469][T19119] hsr_slave_0: entered promiscuous mode [ 483.211518][T19119] hsr_slave_1: entered promiscuous mode [ 483.223052][T19119] debugfs: 'hsr0' already exists in 'hsr' [ 483.233980][T19119] Cannot create hsr debugfs directory [ 483.259266][ T5801] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 483.304266][T19341] bond0: entered promiscuous mode [ 483.310208][T19341] bond_slave_0: entered promiscuous mode [ 483.324576][T19341] bond_slave_1: entered promiscuous mode [ 483.345622][T19341] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 483.619511][ T8876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.649100][ T8876] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 484.018066][T19386] netlink: 'syz.2.3264': attribute type 1 has an invalid length. [ 484.156516][T19386] __nla_validate_parse: 2 callbacks suppressed [ 484.156537][T19386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3264'. [ 484.222015][T19395] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3264'. [ 484.253729][T19395] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3264'. [ 484.333672][T19403] geneve3: entered promiscuous mode [ 484.384368][T19404] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3269'. [ 484.385198][T19407] netlink: 'syz.1.3270': attribute type 1 has an invalid length. [ 484.494682][T19412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3271'. [ 484.690000][T19407] 8021q: adding VLAN 0 to HW filter on device bond2 [ 484.986539][ T146] veth1_to_team: left promiscuous mode [ 485.076740][T10668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.099640][T19438] netlink: 'syz.4.3276': attribute type 1 has an invalid length. [ 485.138871][ T5644] Bluetooth: hci3: command tx timeout [ 485.457452][T19448] netlink: 'syz.3.3279': attribute type 13 has an invalid length. [ 485.515110][T19449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3279'. [ 485.862100][ T8879] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 485.960648][T10547] smbdirect: ib_dev[syz2] removed [ 486.036703][T19452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3281'. [ 486.047295][T19452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3281'. [ 486.182319][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 486.261124][T19448] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.277456][T19448] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.100424][ T5364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.264998][T19448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 489.300923][T19448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.381369][ T80] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.830519][T19454] vlan2: entered promiscuous mode [ 489.906770][ T8876] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.951615][ T8876] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.997175][ T8876] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 490.027349][ T8876] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.096863][T19474] bond2: Unable to set up delay as MII monitoring is disabled [ 490.112702][T19474] bond2 (unregistering): Released all slaves [ 490.271651][ T8976] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 490.304533][ T8876] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 490.340499][ T8876] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.362910][ T8876] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 490.402073][ T8876] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.686581][ T8976] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 490.921608][T19532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3290'. [ 490.952532][T19529] xt_CT: You must specify a L4 protocol and not use inversions on it [ 491.118826][T19516] tipc: Started in network mode [ 491.130755][T19516] tipc: Node identity , cluster identity 4711 [ 491.154634][T19516] tipc: Failed to obtain node identity [ 491.162080][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.162814][T19516] tipc: Enabling of bearer rejected, failed to enable media [ 491.250111][ T146] IPVS: stop unused estimator thread 0... [ 491.460928][T19543] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 491.567216][T19544] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 491.611230][T19544] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3297'. [ 491.621216][ T8879] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 491.689080][T19554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3298'. [ 491.806677][ T30] audit: type=1804 audit(1780959991.007:12): pid=19552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3299" name="/newroot/89/cgroup.controllers" dev="tmpfs" ino=471 res=1 errno=0 [ 491.912407][ T30] audit: type=1800 audit(1780959991.007:13): pid=19552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3299" name="cgroup.controllers" dev="tmpfs" ino=471 res=0 errno=0 [ 492.455145][T19584] IPVS: set_ctl: invalid protocol: 59 172.30.1.2:20001 [ 492.650130][T19596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3305'. [ 492.674506][T10545] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 492.723678][T19119] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 492.742456][T19599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3305'. [ 492.766831][T19119] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 492.785273][T19119] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 492.832012][T19119] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 492.910429][ T8876] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 492.925508][T19119] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 492.959824][T19119] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 492.996888][T19119] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 493.122709][T19119] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 493.139464][ T8876] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 493.352041][ T8976] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 493.366792][T19642] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3311'. [ 493.393930][T19642] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3311'. [ 493.413800][T19641] syzkaller0: entered promiscuous mode [ 493.419646][T19642] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3311'. [ 493.431550][T19641] syzkaller0: entered allmulticast mode [ 493.572534][T19641] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3310'. [ 493.586888][ T146] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 493.690323][T19653] netlink: 'syz.3.3313': attribute type 1 has an invalid length. [ 493.753112][T19654] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3313'. [ 493.906538][T19665] Cannot find add_set index 0 as target [ 493.979046][ T8876] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 494.180011][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.282875][T10545] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 494.414922][T19119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.429535][T10545] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 494.502811][T10545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.526599][T19119] 8021q: adding VLAN 0 to HW filter on device team0 [ 494.572323][T10547] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.579701][T10547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.643747][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.651225][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 494.859782][ T8878] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 494.904380][T19703] netlink: 'syz.4.3325': attribute type 1 has an invalid length. [ 495.048423][T19713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 495.079901][ T5801] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 495.099298][T19715] netlink: 'syz.3.3328': attribute type 4 has an invalid length. [ 495.111776][T19705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 495.231079][T19709] bond1: (slave veth3): Enslaving as an active interface with a down link [ 495.253293][T19711] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 496.059352][T19742] __nla_validate_parse: 3 callbacks suppressed [ 496.059369][T19742] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3334'. [ 496.380054][T19119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 496.541914][T19119] veth0_vlan: entered promiscuous mode [ 496.555271][T19762] netlink: 'syz.3.3338': attribute type 1 has an invalid length. [ 496.560526][T19119] veth1_vlan: entered promiscuous mode [ 496.586515][T19765] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3339'. [ 496.606224][T19765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3339'. [ 496.724184][T19766] bond3: (slave veth3): Enslaving as an active interface with a down link [ 496.749449][T19765] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3339'. [ 496.758016][T19770] bond3: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 496.760730][T19765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3339'. [ 496.807321][ T8878] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.817132][ T8878] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.845783][ T8878] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.903518][ T8878] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.984710][T19119] veth0_macvtap: entered promiscuous mode [ 497.020240][T19119] veth1_macvtap: entered promiscuous mode [ 497.081416][T19119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 497.084269][T19787] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3344'. [ 497.126993][T19119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 497.187499][ T146] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.215547][ T146] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.267370][ T146] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.279354][ T146] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.510659][T19801] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3350'. [ 497.543993][T19801] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3350'. [ 497.564046][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.581142][T19806] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3351'. [ 497.596047][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.598958][T19801] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3350'. [ 497.682973][ T8878] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.705713][ T8878] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.037041][T19824] bridge0: port 1(vlan0) entered blocking state [ 498.050453][T19824] bridge0: port 1(vlan0) entered disabled state [ 498.067677][T19824] vlan0: entered allmulticast mode [ 498.075462][T19824] geneve0: entered allmulticast mode [ 498.289617][ T146] net_ratelimit: 20 callbacks suppressed [ 498.289638][ T146] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 498.390694][T19838] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 498.459426][ T5801] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 498.591002][ T8879] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 498.673427][T19815] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 498.719168][ T146] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 498.848714][ T5801] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 498.979879][ T5801] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 499.118378][ T8878] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 499.169061][T19874] netlink: 'syz.2.3369': attribute type 1 has an invalid length. [ 499.258604][ T8879] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 499.426387][T19880] bond4: (slave bond_slave_1): Device is not our slave [ 499.435568][T19880] bond4: option active_slave: invalid value (bond_slave_1) [ 499.450954][T19880] bond4 (unregistering): Released all slaves [ 499.502364][ T8879] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 499.646466][T19889] netlink: 'syz.1.3374': attribute type 19 has an invalid length. [ 499.676790][T19889] netlink: 'syz.1.3374': attribute type 20 has an invalid length. [ 499.761904][T19888] ip6erspan0: entered allmulticast mode [ 499.942016][ T5644] Bluetooth: hci0: command 0x0c1a tx timeout [ 500.076628][T19906] netlink: 'syz.2.3382': attribute type 1 has an invalid length. [ 500.087714][T19907] netlink: 'syz.0.3379': attribute type 4 has an invalid length. [ 500.153266][T19913] netlink: 'syz.0.3379': attribute type 4 has an invalid length. [ 500.166381][T19906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 500.203625][T19912] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 500.532549][T19928] netlink: 'syz.1.3387': attribute type 2 has an invalid length. [ 500.567819][T19928] netlink: 'syz.1.3387': attribute type 1 has an invalid length. [ 500.685324][T19937] netlink: 'syz.2.3390': attribute type 1 has an invalid length. [ 500.780312][T19937] 8021q: adding VLAN 0 to HW filter on device bond2 [ 500.928848][T19937] bond2: (slave geneve2): making interface the new active one [ 500.953524][T19937] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 501.321336][T19968] __nla_validate_parse: 13 callbacks suppressed [ 501.321355][T19968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3398'. [ 501.494116][T19977] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3400'. [ 501.563227][T19979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3401'. [ 501.581346][T19979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3401'. [ 501.676549][T19992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3403'. [ 502.665810][T20029] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20003 [ 502.709695][T20029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3414'. [ 502.733719][T20035] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3415'. [ 502.757868][T20029] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3414'. [ 502.809500][T20029] 0ªX¹¦À: renamed from batadv0 (while UP) [ 502.826111][T20029] 0ªX¹¦À: entered allmulticast mode [ 503.302249][ T5801] net_ratelimit: 30 callbacks suppressed [ 503.302269][ T5801] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 503.319667][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.439072][ T5801] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 503.568773][ T8876] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 503.649140][T20064] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3422'. [ 503.676719][T20066] netlink: 'syz.4.3423': attribute type 8 has an invalid length. [ 503.699059][ T5801] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 503.725158][T20066] netlink: 209840 bytes leftover after parsing attributes in process `syz.4.3423'. [ 503.818453][ T8879] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 503.968928][ T8876] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 504.064534][T20080] erspan1: entered promiscuous mode [ 504.082347][T20080] erspan1: entered allmulticast mode [ 504.108807][ T8879] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 504.239432][ T8876] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 504.424725][ T8878] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 504.686285][T20109] syzkaller1: entered promiscuous mode [ 504.709868][T20109] syzkaller1: entered allmulticast mode [ 504.741610][T20109] veth0_macvtap: left promiscuous mode [ 505.171022][T20124] netlink: 'syz.0.3438': attribute type 10 has an invalid length. [ 505.264774][T20124] team0: Port device dummy0 added [ 505.385339][T20124] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 506.090801][T20163] netlink: 'syz.0.3450': attribute type 1 has an invalid length. [ 506.181876][T20166] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 506.284081][T20169] xt_TCPMSS: Only works on TCP SYN packets [ 506.550999][T20179] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 506.570473][T20179] bond3: (slave lo): Enslaving as an active interface with an up link [ 507.089113][T20204] tipc: Enabling of bearer rejected, failed to enable media [ 507.368642][T20220] tap0: tun_chr_ioctl cmd 2148553947 [ 507.387970][T20223] __nla_validate_parse: 5 callbacks suppressed [ 507.387989][T20223] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3464'. [ 507.432205][T20223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3464'. [ 507.693186][T20232] netlink: 'syz.3.3470': attribute type 7 has an invalid length. [ 507.807439][T20224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3468'. [ 507.807700][T20241] netlink: 136 bytes leftover after parsing attributes in process `syz.1.3471'. [ 507.841649][T20217] mac80211_hwsim hwsim45 syzkaller0: entered promiscuous mode [ 507.859651][T20217] mac80211_hwsim hwsim45 syzkaller0: entered allmulticast mode [ 507.942309][T20217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3465'. [ 507.966400][T20234] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3471'. [ 507.995858][T19456] IPVS: starting estimator thread 0... [ 508.020293][T20232] netlink: 'syz.3.3470': attribute type 7 has an invalid length. [ 508.034237][ T8976] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.054439][ T8976] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.085221][ T8976] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.088817][T20243] IPVS: using max 31 ests per chain, 74400 per kthread [ 508.096100][ T8976] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.217422][T20251] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3474'. [ 508.324264][T20251] bond0: left promiscuous mode [ 508.330454][T20251] bond_slave_0: left promiscuous mode [ 508.358764][T20251] bond_slave_1: left promiscuous mode [ 508.368472][T20251] syz_tun: left promiscuous mode [ 508.374669][T20251] netdevsim netdevsim3 netdevsim1: left promiscuous mode [ 508.386927][T20251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.395705][T20251] 8021q: adding VLAN 0 to HW filter on device team0 [ 508.410419][T20251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 508.473143][T20251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 508.482936][T20251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 508.495072][T20251] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 508.506572][T20251] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 508.529792][T20251] veth1_vlan: left promiscuous mode [ 508.539656][T20251] veth0_vlan: left promiscuous mode [ 508.556098][T20251] veth0_vlan: entered promiscuous mode [ 508.584683][T20251] veth1_vlan: entered promiscuous mode [ 508.607969][T20251] veth1_macvtap: left promiscuous mode [ 508.616039][T20251] veth0_macvtap: left promiscuous mode [ 508.626418][T20251] veth0_macvtap: entered promiscuous mode [ 508.635441][T20251] veth1_macvtap: entered promiscuous mode [ 508.648339][T20251] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 508.656988][T20251] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 508.666359][T20251] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 508.675803][T20251] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 508.692534][T20251] mac80211_hwsim hwsim39 wlan0: entered promiscuous mode [ 508.704460][T20251] bond1: left promiscuous mode [ 508.709791][T20251] 8021q: adding VLAN 0 to HW filter on device bond1 [ 508.722649][T20251] net_ratelimit: 28 callbacks suppressed [ 508.722663][T20251] A link change request failed with some changes committed already. Interface > may have been left with an inconsistent configuration, please check. [ 508.752424][ T8879] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.759986][ T8879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 508.780002][ T8879] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.788675][ T8879] bridge0: port 2(bridge_slave_1) entered forwarding state [ 508.848655][ T146] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 509.031381][T20261] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 509.065082][ T8878] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.192900][ T8878] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.210727][ T8878] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.250257][ T8878] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.336162][ T146] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 509.380337][T14449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.412700][T20288] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3482'. [ 509.446228][T20291] netlink: 'syz.3.3481': attribute type 1 has an invalid length. [ 509.451882][T20288] bond1: entered promiscuous mode [ 509.461637][T20288] 8021q: adding VLAN 0 to HW filter on device bond1 [ 509.471571][ T8879] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 509.543979][T20291] 8021q: adding VLAN 0 to HW filter on device bond4 [ 509.562824][T20295] 8021q: adding VLAN 0 to HW filter on device bond4 [ 509.571445][T20295] bond4: (slave gre1): The slave device specified does not support setting the MAC address [ 509.587805][T20295] bond4: (slave gre1): Error -95 calling set_mac_address [ 509.610400][T20285] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3481'. [ 509.619035][ T8879] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 509.749581][ T8976] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 509.803994][T20302] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3485'. [ 509.889324][ T8976] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 510.038311][ T8976] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 510.097726][T20316] netlink: 'syz.3.3489': attribute type 10 has an invalid length. [ 510.126910][T20316] team0: Port device veth1_to_hsr added [ 510.148964][ T8976] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 510.643355][T20227] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 510.887021][T20344] netlink: 'syz.1.3492': attribute type 3 has an invalid length. [ 510.960036][T20344] nbd: nbd1 already in use [ 510.985126][T20344] block nbd1: NBD_DISCONNECT [ 511.001261][T20344] block nbd1: Send disconnect failed -32 [ 511.008594][T20344] block nbd1: shutting down sockets [ 511.117262][T20356] siw: device registration error -23 [ 511.147126][T20358] sctp: [Deprecated]: syz.0.3495 (pid 20358) Use of int in maxseg socket option. [ 511.147126][T20358] Use struct sctp_assoc_value instead [ 511.365701][T20374] netlink: 'syz.2.3499': attribute type 1 has an invalid length. [ 511.386335][T10547] vlan8: left allmulticast mode [ 511.400219][T10547] dummy0: left allmulticast mode [ 511.417370][T10547] bridge0: port 1(vlan8) entered disabled state [ 511.530069][T10547] tipc: Resetting bearer [ 512.649661][T10547] bond22 (unregistering): (slave gretap4): Releasing active interface [ 512.705656][T10547] bond28 (unregistering): (slave geneve4): Releasing active interface [ 512.730549][T10547] bond14 (unregistering): (slave geneve2): Releasing active interface [ 512.873503][T10547] tipc: Disabling bearer [ 512.896696][T10547] bond24 (unregistering): (slave bridge10): Releasing backup interface [ 512.912504][T10547] bridge10 (unregistering): left allmulticast mode [ 512.966808][T10547] bond0 (unregistering): Released all slaves [ 512.980534][T10547] bond1 (unregistering): Released all slaves [ 513.003329][T10547] bond2 (unregistering): (slave veth3): Releasing active interface [ 513.015953][T10547] bond2 (unregistering): Released all slaves [ 513.040354][T10547] bond3 (unregistering): Released all slaves [ 513.056005][T10547] bond4 (unregistering): (slave veth7): Releasing active interface [ 513.076218][T10547] bond4 (unregistering): Released all slaves [ 513.092247][T10547] bond5 (unregistering): Released all slaves [ 513.107062][T10547] bond6 (unregistering): Released all slaves [ 513.125275][T10547] bond7 (unregistering): (slave veth11): Releasing active interface [ 513.136670][T10547] bond7 (unregistering): Released all slaves [ 513.156287][T10547] bond8 (unregistering): Released all slaves [ 513.170822][T10547] bond9 (unregistering): Released all slaves [ 513.185648][T10547] bond10 (unregistering): Released all slaves [ 513.201841][T10547] bond11 (unregistering): (slave veth17): Releasing active interface [ 513.223861][T10547] bond11 (unregistering): Released all slaves [ 513.240405][T10547] bond12 (unregistering): Released all slaves [ 513.256356][T10547] bond13 (unregistering): Released all slaves [ 513.274607][T10547] bond14 (unregistering): Released all slaves [ 513.302299][T10547] bond15 (unregistering): (slave veth19): Releasing active interface [ 513.312827][T10547] bond15 (unregistering): Released all slaves [ 513.336607][T10547] bond16 (unregistering): (slave batadv3): Releasing active interface [ 513.351595][T10547] bond16 (unregistering): Released all slaves [ 513.366806][T10547] bond17 (unregistering): Released all slaves [ 513.386306][T10547] bond18 (unregistering): Released all slaves [ 513.402275][T10547] bond19 (unregistering): Released all slaves [ 513.417425][T10547] bond20 (unregistering): Released all slaves [ 513.434074][T10547] bond21 (unregistering): Released all slaves [ 513.464100][T10547] bond22 (unregistering): Released all slaves [ 513.477887][T10547] bond23 (unregistering): Released all slaves [ 513.497250][T10547] bond24 (unregistering): Released all slaves [ 513.512824][T10547] bond25 (unregistering): (slave veth21): Releasing active interface [ 513.523411][T10547] bond25 (unregistering): Released all slaves [ 513.539125][T10547] bond26 (unregistering): (slave veth23): Releasing active interface [ 513.557699][T10547] bond26 (unregistering): Released all slaves [ 513.577008][T10547] bond27 (unregistering): (slave veth25): Releasing active interface [ 513.588067][T10547] bond27 (unregistering): (slave veth27): Releasing active interface [ 513.600395][T10547] bond27 (unregistering): Released all slaves [ 513.614393][T10547] bond28 (unregistering): Released all slaves [ 513.641187][T20374] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 513.645129][ T5746] dummy0: left promiscuous mode [ 514.133181][T20414] veth0_to_bridge: entered promiscuous mode [ 514.196473][T20414] macvtap1: entered allmulticast mode [ 514.218714][T20414] veth0_to_bridge: entered allmulticast mode [ 514.307884][T20426] __nla_validate_parse: 8 callbacks suppressed [ 514.307904][T20426] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3511'. [ 514.309172][T20414] veth0_to_bridge: left allmulticast mode [ 514.340862][T20414] veth0_to_bridge: left promiscuous mode [ 514.440221][ T8976] net_ratelimit: 12 callbacks suppressed [ 514.440242][ T8976] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 514.471428][T10547] tipc: Disabling bearer [ 514.494896][T10547] tipc: Left network mode [ 514.631496][ T146] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 514.717837][T20431] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3512'. [ 514.759222][ T146] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 514.934663][ T8879] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 514.975778][T20436] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3512'. [ 515.101969][ T146] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 515.154898][T20440] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 515.252363][T20453] netlink: 'syz.1.3518': attribute type 1 has an invalid length. [ 515.302337][T20440] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 515.476812][T14449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.684295][T20467] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3520'. [ 515.828625][T20456] bond3: (slave veth5): Enslaving as an active interface with a down link [ 515.843997][T20471] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 515.854742][T19475] udevd[19475]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 515.892572][T19475] udevd[19475]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 515.927162][T20457] bond3: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 515.952680][T19475] udevd[19475]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 516.063173][T19475] udevd[19475]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 516.154161][T20480] netlink: 'syz.4.3522': attribute type 9 has an invalid length. [ 516.174895][T20480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3522'. [ 516.507354][T20490] syzkaller1: entered promiscuous mode [ 516.539327][T20490] syzkaller1: entered allmulticast mode [ 516.588792][ T146] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 516.611721][T20506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3528'. [ 516.632189][T20506] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3528'. [ 516.654685][T20508] netlink: 320 bytes leftover after parsing attributes in process `syz.2.3531'. [ 516.888817][ T8879] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 516.927091][T10545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.030509][T20523] Cannot find del_set index 4 as target [ 517.044472][T20522] Cannot find del_set index 4 as target [ 517.134222][T20514] mac80211_hwsim hwsim42 wlan0: entered promiscuous mode [ 517.158547][T20514] mac80211_hwsim hwsim42 wlan0: entered allmulticast mode [ 517.476841][T20522] žÿ: renamed from team_slave_1 (while UP) [ 517.704855][T20538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3538'. [ 517.765123][T10547] veth1_macvtap: left promiscuous mode [ 517.769911][T20545] netlink: 34 bytes leftover after parsing attributes in process `syz.2.3541'. [ 517.774946][T10547] veth0_macvtap: left promiscuous mode [ 517.793738][T10547] veth1_vlan: left promiscuous mode [ 517.800055][T10547] veth0_vlan: left promiscuous mode [ 518.282436][T10547] team0 (unregistering): Port device batadv1 removed [ 518.610768][ T146] smbdirect: ib_dev[syz0] removed [ 518.866262][T14449] infiniband syz0: ib_query_port failed (-19) [ 519.450146][T10545] net_ratelimit: 4 callbacks suppressed [ 519.450181][T10545] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 519.501226][T20585] syzkaller0: entered promiscuous mode [ 519.573201][T20585] syzkaller0: entered allmulticast mode [ 519.619337][T10545] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 519.694755][T20590] netlink: 'syz.0.3553': attribute type 3 has an invalid length. [ 519.708954][T20599] netlink: 'syz.2.3554': attribute type 15 has an invalid length. [ 519.782832][ T8879] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 519.833581][T20602] __nla_validate_parse: 5 callbacks suppressed [ 519.833601][T20602] netlink: 192 bytes leftover after parsing attributes in process `syz.3.3555'. [ 520.062822][T20605] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3556'. [ 520.084331][ T8976] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 520.101946][T20605] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3556'. [ 520.169592][T20605] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3556'. [ 520.254346][ T146] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 520.496461][T10547] IPVS: stop unused estimator thread 0... [ 520.499510][ T8878] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 520.533470][T20619] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 520.638738][ T5801] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 520.930387][T20631] xt_CT: No such helper "netbios-ns" [ 521.060314][T10545] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 521.197580][T20649] netlink: 'syz.1.3566': attribute type 1 has an invalid length. [ 521.199919][T10545] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 521.216888][T20650] netlink: 'syz.1.3566': attribute type 1 has an invalid length. [ 521.305802][T20649] bond4: entered promiscuous mode [ 521.321036][T20649] 8021q: adding VLAN 0 to HW filter on device bond4 [ 521.608961][T20660] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3568'. [ 522.130171][T20677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3572'. [ 522.156995][T10547] dvmrp0: left allmulticast mode [ 522.169444][T10547] pimreg9: left allmulticast mode [ 522.176873][T10547] batman_adv: batadv0: Interface deactivated: gretap1 [ 522.410418][T10547] bond4 (unregistering): (slave ip6gretap1): Releasing backup interface [ 522.601236][T10547] bond14 (unregistering): (slave vti0): Releasing backup interface [ 522.612089][T10547] vti0 (unregistering): left promiscuous mode [ 522.720577][T10547] batman_adv: batadv0: Removing interface: gretap1 [ 522.960061][T10547] bond0 (unregistering): Released all slaves [ 522.981722][T10547] bond1 (unregistering): (slave veth5): Releasing active interface [ 522.995581][T10547] bond1 (unregistering): Released all slaves [ 523.017863][T10547] bond2 (unregistering): (slave veth11): Releasing active interface [ 523.030914][T10547] bond2 (unregistering): Released all slaves [ 523.055584][T10547] bond3 (unregistering): (slave veth13): Releasing active interface [ 523.066828][T10547] bond3 (unregistering): Released all slaves [ 523.095669][T10547] bond4 (unregistering): Released all slaves [ 523.117314][T10547] bond5 (unregistering): Released all slaves [ 523.136441][T10547] bond6 (unregistering): Released all slaves [ 523.166239][T10547] bond7 (unregistering): Released all slaves [ 523.185059][T10547] bond8 (unregistering): Released all slaves [ 523.207875][T10547] bond9 (unregistering): (slave veth1): Releasing active interface [ 523.222434][T10547] bond9 (unregistering): Released all slaves [ 523.243609][T10547] bond10 (unregistering): (slave veth15): Releasing active interface [ 523.253540][T10547] bond10 (unregistering): Released all slaves [ 523.282167][T10547] bond11 (unregistering): (slave veth17): Releasing active interface [ 523.293506][T10547] bond11 (unregistering): Released all slaves [ 523.325029][T10547] bond12 (unregistering): (slave veth19): Releasing active interface [ 523.338925][T10547] bond12 (unregistering): Released all slaves [ 523.358607][T10547] bond13 (unregistering): (slave veth23): Releasing active interface [ 523.367969][T10547] bond13 (unregistering): Released all slaves [ 523.392232][T10547] bond14 (unregistering): Released all slaves [ 523.418591][T10547] bond15 (unregistering): Released all slaves [ 523.439206][T10547] bond16 (unregistering): (slave veth25): Releasing backup interface [ 523.448904][T10547] bond16 (unregistering): Released all slaves [ 523.467961][T10547] bond17 (unregistering): Released all slaves [ 523.494644][T10547] bond18 (unregistering): Released all slaves [ 523.514973][T10547] bond19 (unregistering): Released all slaves [ 523.536742][T10547] bond20 (unregistering): (slave veth31): Releasing backup interface [ 523.556234][T10547] bond20 (unregistering): (slave batadv1): Releasing backup interface [ 523.571786][T10547] bond20 (unregistering): Released all slaves [ 523.594448][T10547] bond21 (unregistering): Released all slaves [ 524.180669][T20693] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3576'. [ 524.253661][T10547] tipc: Disabling bearer [ 524.263682][T10547] tipc: Left network mode [ 524.287300][T20693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3576'. [ 524.454137][T20696] bond3 (unregistering): Released all slaves [ 524.491587][T20702] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3578'. [ 524.521840][T20702] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3578'. [ 524.555225][T10547] IPVS: stopping backup sync thread 9954 ... [ 524.965582][T20711] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 524.996274][T20711] net_ratelimit: 2 callbacks suppressed [ 524.996294][T20711] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 525.324075][T20718] __nla_validate_parse: 1 callbacks suppressed [ 525.324098][T20718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3582'. [ 525.329984][T20719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3581'. [ 525.343409][T20718] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3582'. [ 525.449256][T20718] geneve2: entered promiscuous mode [ 525.458505][T20718] geneve2: entered allmulticast mode [ 525.586078][T20722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3581'. [ 525.733415][T20730] netlink: 'syz.0.3586': attribute type 1 has an invalid length. [ 525.767817][T20733] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3587'. [ 526.032523][T20730] 8021q: adding VLAN 0 to HW filter on device bond2 [ 526.072169][T20736] bond2: (slave geneve3): making interface the new active one [ 526.090756][T20736] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 527.770015][T20806] x_tables: unsorted underflow at hook 4 [ 528.101224][T10547] veth1_vlan: left promiscuous mode [ 528.108833][T10547] veth0_vlan: left promiscuous mode [ 528.119568][T20814] xt_socket: unknown flags 0x4 [ 528.199708][T20814] sctp: [Deprecated]: syz.1.3603 (pid 20814) Use of int in maxseg socket option. [ 528.199708][T20814] Use struct sctp_assoc_value instead [ 528.230569][T20817] xt_socket: unknown flags 0x4 [ 528.462935][T20827] netlink: 'syz.1.3606': attribute type 1 has an invalid length. [ 529.064034][T20813] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 529.074390][T20813] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 529.084747][T20813] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 529.230634][ T5638] Bluetooth: hci5: command 0x040f tx timeout [ 529.384034][T20848] netlink: 'syz.2.3610': attribute type 6 has an invalid length. [ 529.409243][T20828] bond5: (slave veth9): Enslaving as an active interface with a down link [ 529.482109][T20849] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3610'. [ 529.527516][T20832] bond5: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 529.685723][T20858] netlink: 'syz.0.3612': attribute type 1 has an invalid length. [ 529.770288][T20858] netlink: 'syz.0.3612': attribute type 1 has an invalid length. [ 529.835857][T20858] netlink: 'syz.0.3612': attribute type 2 has an invalid length. [ 529.897111][T20858] netlink: 'syz.0.3612': attribute type 2 has an invalid length. [ 529.928013][T20858] netlink: 'syz.0.3612': attribute type 2 has an invalid length. [ 529.950978][T20868] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3614'. [ 529.995474][T20868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3614'. [ 530.041250][T20868] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3614'. [ 530.116455][T20868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3614'. [ 530.182554][T10547] IPVS: stop unused estimator thread 0... [ 530.329765][T20881] __nla_validate_parse: 1 callbacks suppressed [ 530.329783][T20881] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3616'. [ 530.435422][T20881] veth1_to_team: entered promiscuous mode [ 530.453405][T20884] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3618'. [ 530.456603][T20880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3617'. [ 530.482622][T20881] veth1_to_team: left promiscuous mode [ 530.520870][T20880] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3617'. [ 530.854208][T20897] openvswitch: netlink: Key 10 has unexpected len 2 expected 4 [ 530.881319][T20892] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3621'. [ 531.030261][T20900] netlink: 'syz.0.3622': attribute type 21 has an invalid length. [ 531.060034][T20900] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3622'. [ 531.185346][T20904] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3623'. [ 531.203629][T20907] netlink: 'syz.4.3624': attribute type 1 has an invalid length. [ 531.246636][T20910] netlink: 'syz.3.3623': attribute type 3 has an invalid length. [ 531.292299][T20910] netlink: 'syz.3.3623': attribute type 11 has an invalid length. [ 531.353882][T20913] bond4: (slave veth5): Enslaving as an active interface with a down link [ 531.410669][T20907] bond4: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 532.017599][T20942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3632'. [ 532.046251][T20932] bond6: option packets_per_slave: invalid value (1048582) [ 532.055504][T20932] bond6: option packets_per_slave: allowed values 0 - 65535 [ 532.065895][T20932] bond6 (unregistering): Released all slaves [ 532.227385][T20953] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3634'. [ 533.217687][T21004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3652'. [ 533.973391][T21041] netlink: 'syz.2.3663': attribute type 4 has an invalid length. [ 534.107794][T21044] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 534.291704][T21058] sctp: [Deprecated]: syz.1.3667 (pid 21058) Use of int in max_burst socket option. [ 534.291704][T21058] Use struct sctp_assoc_value instead [ 536.740732][T21032] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 536.776235][T21058] netlink: 'syz.1.3667': attribute type 1 has an invalid length. [ 536.800747][T21058] __nla_validate_parse: 2 callbacks suppressed [ 536.800767][T21058] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3667'. [ 537.078054][T21069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3669'. [ 537.091626][T21068] Cannot find set identified by id 0 to match [ 537.101232][T21071] tipc: Started in network mode [ 537.110303][T21070] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3671'. [ 537.146475][T21074] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3672'. [ 537.152621][T21071] tipc: Node identity ac14140f, cluster identity 4711 [ 537.202612][T21074] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3672'. [ 537.246429][T21074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3672'. [ 537.301909][T21071] tipc: Enabled bearer , priority 10 [ 537.734887][T21088] netlink: 'syz.0.3674': attribute type 9 has an invalid length. [ 537.744070][T21088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3674'. [ 537.784235][T21088] gretap0: entered promiscuous mode [ 537.804772][T21088] macvlan0: entered promiscuous mode [ 537.824205][T21088] macvlan0: entered allmulticast mode [ 537.852859][T21088] gretap0: entered allmulticast mode [ 537.972064][T21106] netlink: 'syz.3.3678': attribute type 1 has an invalid length. [ 538.120926][T21116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3674'. [ 538.257376][T21126] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.3681'. [ 538.275428][T21111] bond5: (slave veth5): Enslaving as an active interface with a down link [ 538.328052][T21115] bond5: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 538.476544][T19455] tipc: Node number set to 2886997007 [ 539.014753][T21158] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 539.156720][T21163] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3691'. [ 539.579817][T21176] netlink: 'syz.0.3695': attribute type 1 has an invalid length. [ 539.713783][T21181] bond3: (slave veth3): Enslaving as an active interface with a down link [ 539.778964][T21176] bond3: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 540.082216][T21200] team0 (unregistering): Port device team_slave_0 removed [ 540.113005][T21200] team0 (unregistering): Port device 76žÿ removed [ 540.145657][T21200] team0 (unregistering): Port device dummy0 removed [ 540.519979][T21185] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 541.107130][T21234] netlink: 'syz.4.3706': attribute type 32 has an invalid length. [ 541.283687][T21241] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 541.623844][T21252] netlink: 'syz.2.3710': attribute type 11 has an invalid length. [ 541.692900][T21229] syzkaller0: entered promiscuous mode [ 541.721709][T21229] syzkaller0: entered allmulticast mode [ 548.691279][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 548.706455][T21253] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 548.794518][T21257] __nla_validate_parse: 5 callbacks suppressed [ 548.794569][T21257] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3711'. [ 548.850675][T21257] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 549.109518][T21278] xt_hl: Unknown TTL match mode: 237 [ 549.310873][T21276] netlink: 518 bytes leftover after parsing attributes in process `syz.4.3715'. [ 549.624749][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 549.750907][T21293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 549.865344][T21290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3719'. [ 550.972766][T21303] xt_nat: multiple ranges no longer supported [ 551.424357][T21315] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3727'. [ 551.512575][T21316] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3727'. [ 551.701189][T21320] netlink: 324 bytes leftover after parsing attributes in process `syz.2.3727'. [ 556.265322][T21315]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 556.319051][T21315]  (unregistering): Released all slaves [ 556.590148][T21330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3730'. [ 556.969822][ T5638] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 556.992194][ T5638] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 557.020140][ T5638] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 557.037444][ T5638] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 557.051802][ T5638] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 557.228981][T21351] netlink: 'syz.2.3732': attribute type 3 has an invalid length. [ 557.560245][ T8879] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 557.608612][ T8879] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 557.652943][T10547] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 557.704887][T21358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3736'. [ 557.808969][T10547] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 558.133471][T21365] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3738'. [ 558.186303][T21365] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3738'. [ 558.423609][T21375] IPVS: ip_vs_add_dest(): server weight less than zero [ 558.492787][T21379] IPVS: rr: FWM 3 0x00000003 - no destination available [ 558.745822][T21385] Bluetooth: MGMT ver 1.23 [ 558.771821][T21238] syz_tun (unregistering): left allmulticast mode [ 558.800594][T21238] bond0: (slave syz_tun): Releasing backup interface [ 559.150653][ T5644] Bluetooth: hci1: command tx timeout [ 559.510462][T21398] netlink: 'syz.4.3745': attribute type 10 has an invalid length. [ 559.556145][T21398] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3745'. [ 559.639172][T21406] Bluetooth: MGMT ver 1.23 [ 559.693338][T21398] team0: Port device geneve1 added [ 559.754919][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880477e7400: rx timeout, send abort [ 559.835406][T21398] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3745'. [ 559.938678][ T5644] Bluetooth: hci0: command 0x0c1a tx timeout [ 560.240759][T21424] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3751'. [ 560.315460][T21424] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3751'. [ 561.006534][T21440] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20002 [ 561.219791][ T5638] Bluetooth: hci1: command tx timeout [ 561.574741][T21338] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.623868][T21338] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.659085][T21338] bridge_slave_0: entered allmulticast mode [ 561.675565][T21338] bridge_slave_0: entered promiscuous mode [ 561.737970][T21338] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.769042][T21338] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.803798][T21338] bridge_slave_1: entered allmulticast mode [ 561.827220][T21338] bridge_slave_1: entered promiscuous mode [ 562.034261][T21338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 562.075614][T21338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 562.261151][T21338] team0: Port device team_slave_0 added [ 562.351498][T21461] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3757'. [ 562.490666][T21338] team0: Port device team_slave_1 added [ 562.733462][T21338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 562.772391][T21338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 562.913623][T21338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 562.970604][T21471] veth0: entered promiscuous mode [ 563.012909][T21477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3760'. [ 563.035885][T21338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 563.047874][T21338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 563.122850][T21338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 563.147457][T21475] syz_tun: entered allmulticast mode [ 563.195985][T21477] syz_tun (unregistering): left allmulticast mode [ 563.244034][T21480] §: renamed from sit0 (while UP) [ 563.252246][T21472] veth0: left promiscuous mode [ 563.300100][ T5638] Bluetooth: hci1: command tx timeout [ 563.490384][T21485] syzkaller1: entered promiscuous mode [ 563.503721][T21485] syzkaller1: entered allmulticast mode [ 563.561626][T21338] hsr_slave_0: entered promiscuous mode [ 563.584565][T21338] hsr_slave_1: entered promiscuous mode [ 563.606101][T21338] debugfs: 'hsr0' already exists in 'hsr' [ 563.633720][T21338] Cannot create hsr debugfs directory [ 563.877289][T21494] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3762'. [ 564.396947][T21506] lo: entered allmulticast mode [ 564.420069][T21506] lo: left allmulticast mode [ 564.435046][T21509] netlink: 81 bytes leftover after parsing attributes in process `syz.1.3768'. [ 564.945863][T21516] macsec1: entered promiscuous mode [ 564.952272][T21516] mac80211_hwsim hwsim43 wlan1: entered promiscuous mode [ 564.969966][T21516] mac80211_hwsim hwsim43 wlan1: left promiscuous mode [ 565.381182][ T5638] Bluetooth: hci1: command tx timeout [ 565.721135][T21532] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3774'. [ 565.805935][T21535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3773'. [ 566.061546][T21536] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3775'. [ 566.197431][T21338] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 566.337062][T21338] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 566.367440][T21338] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 566.499339][T21338] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 566.517482][T21338] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 566.582014][T21338] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 566.610747][T21563] xt_hashlimit: size too large, truncated to 1048576 [ 566.647449][T21338] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 566.715146][T21338] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 567.468019][T21591] netlink: 'syz.2.3785': attribute type 21 has an invalid length. [ 567.510348][T21591] netlink: 'syz.2.3785': attribute type 21 has an invalid length. [ 567.572975][T21591] netlink: 'syz.2.3785': attribute type 21 has an invalid length. [ 567.604951][T21591] netlink: 'syz.2.3785': attribute type 21 has an invalid length. [ 567.616325][T21591] netlink: 'syz.2.3785': attribute type 21 has an invalid length. [ 567.627788][T21591] netlink: 'syz.2.3785': attribute type 21 has an invalid length. [ 567.649623][T21591] netlink: 'syz.2.3785': attribute type 21 has an invalid length. [ 567.673193][T21591] netlink: 'syz.2.3785': attribute type 21 has an invalid length. [ 567.684178][T21591] netlink: 'syz.2.3785': attribute type 21 has an invalid length. [ 567.695660][T21591] netlink: 'syz.2.3785': attribute type 21 has an invalid length. [ 568.037710][T21338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 568.337874][T21338] 8021q: adding VLAN 0 to HW filter on device team0 [ 568.460234][ T8879] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.468914][ T8879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 568.583074][T21605] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3790'. [ 568.595291][T10547] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.603517][T10547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 570.052048][T21641] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3797'. [ 570.601544][T21661] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3802'. [ 570.616695][T21657] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3801'. [ 570.697433][T21662] 8021q: VLANs not supported on ip_vti0 [ 571.835702][T21685] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3809'. [ 572.220573][T21338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 572.838531][T21710] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3814'. [ 573.391936][T21716] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3814'. [ 573.426197][T21716] nbd: nbd64 already in use [ 574.060977][T21737] sctp: [Deprecated]: syz.2.3817 (pid 21737) Use of int in maxseg socket option. [ 574.060977][T21737] Use struct sctp_assoc_value instead [ 574.138726][T21343] udevd[21343]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 574.173262][T21734] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3817'. [ 574.394059][T21338] veth0_vlan: entered promiscuous mode [ 574.483992][T21338] veth1_vlan: entered promiscuous mode [ 574.519503][T21744] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3819'. [ 574.625248][T21338] veth0_macvtap: entered promiscuous mode [ 574.637709][T21745] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3819'. [ 574.649600][T21745] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3819'. [ 574.684433][T21338] veth1_macvtap: entered promiscuous mode [ 574.770356][T21338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 574.819577][T21338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 574.897669][ T8878] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.922396][ T8878] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.945741][ T8878] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.040567][ T8878] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.579416][T21757] netlink: 'syz.4.3823': attribute type 11 has an invalid length. [ 575.590402][ T5801] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.629040][T21757] netlink: 'syz.4.3823': attribute type 11 has an invalid length. [ 575.633195][ T5801] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.671824][T21757] netlink: 204 bytes leftover after parsing attributes in process `syz.4.3823'. [ 576.010098][T21768] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3825'. [ 576.220965][T10547] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 576.252960][T10547] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 576.329115][T21786] syzkaller0: entered promiscuous mode [ 576.368362][T21786] syzkaller0: entered allmulticast mode [ 576.416860][T21787] tipc: Started in network mode [ 576.437305][T21791] netlink: 181256 bytes leftover after parsing attributes in process `syz.2.3828'. [ 576.470640][T21787] tipc: Node identity 4205a91a24c5, cluster identity 4711 [ 576.520147][T21787] tipc: Enabled bearer , priority 0 [ 577.060448][T21785] tipc: Resetting bearer [ 577.200577][T21785] tipc: Disabling bearer [ 577.214359][T21802] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3830'. [ 577.673258][T21814] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3834'. [ 577.681320][T21808] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3833'. [ 578.548915][T21835] veth0_vlan: entered allmulticast mode [ 579.368820][T21856] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3846'. [ 579.433612][T21856] Unsupported ieee802154 address type: 0 [ 579.458839][T21860] validate_nla: 55 callbacks suppressed [ 579.458900][T21860] netlink: 'syz.1.3847': attribute type 1 has an invalid length. [ 579.510971][T21863] netlink: 'syz.1.3847': attribute type 1 has an invalid length. [ 579.712996][T21860] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 579.734064][T21863] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 580.419066][ T5644] Bluetooth: hci2: command 0x041b tx timeout [ 583.466883][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 594.218114][ C1] sched: DL replenish lagged too much [ 615.012048][ T5644] Bluetooth: hci4: command tx timeout [ 700.328047][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 700.335647][ C1] rcu: (detected by 1, t=10502 jiffies, g=115913, q=1339 ncpus=2) [ 700.343829][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 4860 (4295007144-4295002284), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 700.359352][ C1] rcu: rcu_preempt kthread starved for 4862 jiffies! g115913 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 700.370930][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 700.381615][ C1] rcu: RCU grace-period kthread stack dump: [ 700.387699][ C1] task:rcu_preempt state:R running task stack:27536 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 700.401821][ C1] Call Trace: [ 700.405221][ C1] [ 700.409475][ C1] __schedule+0x1821/0x5740 [ 700.414541][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 700.420446][ C1] ? __pfx___schedule+0x10/0x10 [ 700.425323][ C1] ? schedule+0x90/0x360 [ 700.429844][ C1] schedule+0x164/0x360 [ 700.434488][ C1] schedule_timeout+0x158/0x2c0 [ 700.439705][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 700.446291][ C1] ? __pfx_process_timeout+0x10/0x10 [ 700.452784][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 700.460897][ C1] ? prepare_to_swait_event+0x340/0x370 [ 700.467195][ C1] rcu_gp_fqs_loop+0x312/0x11d0 [ 700.473776][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 700.481055][ C1] ? rcu_gp_init+0x1315/0x15b0 [ 700.487538][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 700.494516][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 700.500094][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 700.505739][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 700.510798][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 700.516098][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 700.522276][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 700.528005][ C1] ? __kthread_parkme+0x19c/0x1f0 [ 700.533729][ C1] kthread+0x389/0x470 [ 700.538175][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 700.543666][ C1] ? __pfx_kthread+0x10/0x10 [ 700.548460][ C1] ret_from_fork+0x514/0xb70 [ 700.553605][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 700.558739][ C1] ? __switch_to+0xc79/0x1410 [ 700.564058][ C1] ? __pfx_kthread+0x10/0x10 [ 700.568759][ C1] ret_from_fork_asm+0x1a/0x30 [ 700.573819][ C1] [ 700.576943][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 700.583534][ C1] CPU: 1 UID: 0 PID: 5644 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) [ 700.593843][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 700.604497][ C1] Workqueue: hci1 hci_cmd_sync_work [ 700.612904][ C1] RIP: 0010:lock_acquire+0x221/0x350 [ 700.618395][ C1] Code: ff ff ff e8 31 0f 08 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 0b aa 97 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 18 56 92 [ 700.638580][ C1] RSP: 0018:ffffc90000a07e00 EFLAGS: 00000286 [ 700.645504][ C1] RAX: 40d36d0a06dfbb00 RBX: 0000000000000000 RCX: 0000000080000100 [ 700.654371][ C1] RDX: 000000007f45ee1d RSI: ffffffff8e2239f3 RDI: ffffffff8c28b9e0 [ 700.662666][ C1] RBP: ffffffff8a0ab2c6 R08: ffffffff8a0ab2c6 R09: ffffffff8e95cc20 [ 700.673213][ C1] R10: ffffc90000a07f60 R11: fffff52000140ff2 R12: 0000000000000002 [ 700.683063][ C1] R13: ffffffff8e95cc20 R14: 0000000000000000 R15: 0000000000000246 [ 700.693942][ C1] FS: 0000000000000000(0000) GS:ffff88812538b000(0000) knlGS:0000000000000000 [ 700.705913][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 700.714666][ C1] CR2: 00007fea26cd9eb8 CR3: 000000007f850000 CR4: 00000000003526f0 [ 700.724867][ C1] Call Trace: [ 700.729193][ C1] [ 700.732574][ C1] fib_lookup+0x96/0x440 [ 700.737791][ C1] ? fib_lookup+0x76/0x440 [ 700.742779][ C1] ? fib_lookup+0x76/0x440 [ 700.747969][ C1] ip_route_output_key_hash_rcu+0x32e/0x25d0 [ 700.754182][ C1] ? ip_route_output_key_hash+0xd8/0x2a0 [ 700.759995][ C1] ? ip_route_output_key_hash+0xd8/0x2a0 [ 700.767400][ C1] ip_route_output_key_hash+0x18d/0x2a0 [ 700.773635][ C1] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 700.780941][ C1] ? lock_acquire+0x106/0x350 [ 700.787935][ C1] ip_route_output_flow+0x2a/0x150 [ 700.794839][ C1] ? ip_route_me_harder+0x730/0xf90 [ 700.800800][ C1] ip_route_me_harder+0x742/0xf90 [ 700.806044][ C1] ? worker_thread+0xa53/0xfc0 [ 700.811004][ C1] ? kthread+0x389/0x470 [ 700.815453][ C1] ? ret_from_fork+0x514/0xb70 [ 700.820501][ C1] ? __pfx_ip_route_me_harder+0x10/0x10 [ 700.826708][ C1] ? __cookie_v4_init_sequence+0x25d/0x500 [ 700.832721][ C1] synproxy_send_tcp+0x34c/0x670 [ 700.838398][ C1] synproxy_send_client_synack+0x8c1/0xe30 [ 700.844503][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 700.850944][ C1] ? nft_log_dump+0x2f8/0x4e0 [ 700.856578][ C1] ? synproxy_pernet+0x45/0x270 [ 700.862244][ C1] nft_synproxy_eval_v4+0x34a/0x4e0 [ 700.868244][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 700.874182][ C1] ? nf_ip_checksum+0x13c/0x510 [ 700.879421][ C1] nft_synproxy_do_eval+0x305/0x580 [ 700.885492][ C1] ? __ip_vs_conn_in_get+0xa6/0x10f0 [ 700.891286][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 700.897849][ C1] ? __pfx___ip_vs_conn_in_get+0x10/0x10 [ 700.903701][ C1] nft_do_chain+0x48d/0x1ae0 [ 700.908768][ C1] ? ip_vs_service_find+0x152/0x3c0 [ 700.914254][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 700.919681][ C1] ? nf_nat_inet_fn+0x95b/0xbf0 [ 700.924749][ C1] nft_do_chain_inet+0x360/0x4b0 [ 700.930251][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 700.935975][ C1] ? nf_nat_ipv4_local_in+0x223/0x720 [ 700.941929][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 700.947512][ C1] nf_hook_slow+0xc5/0x220 [ 700.952050][ C1] NF_HOOK+0x21f/0x3c0 [ 700.956148][ C1] ? ip_rcv_finish_core+0xf8a/0x1c00 [ 700.961790][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 700.968708][ C1] ? NF_HOOK+0x9e/0x3c0 [ 700.973748][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 700.978549][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 700.984828][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 700.991903][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 700.997259][ C1] NF_HOOK+0x336/0x3c0 [ 701.003944][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 701.013479][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 701.022058][ C1] ? NF_HOOK+0x9e/0x3c0 [ 701.028723][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 701.036556][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 701.044415][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 701.050790][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 701.059388][ C1] ? process_backlog+0x3eb/0x1950 [ 701.066900][ C1] process_backlog+0xaa3/0x1950 [ 701.075717][ C1] __napi_poll+0xae/0x340 [ 701.082984][ C1] ? skb_defer_free_flush+0x233/0x260 [ 701.093813][ C1] net_rx_action+0x627/0xf70 [ 701.100294][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 701.109830][ C1] ? xfrm_dev_backlog+0x24b/0x3c0 [ 701.119793][ C1] ? net_tx_action+0x5b6/0xc30 [ 701.127682][ C1] ? net_tx_action+0xbfb/0xc30 [ 701.137467][ C1] handle_softirqs+0x22a/0x840 [ 701.147875][ C1] ? __irq_exit_rcu+0xca/0x220 [ 701.159651][ C1] __irq_exit_rcu+0xca/0x220 [ 701.168757][ C1] irq_exit_rcu+0x9/0x30 [ 701.177388][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 701.187480][ C1] [ 701.195298][ C1] [ 701.198793][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 701.206034][ C1] RIP: 0010:lock_acquire+0x221/0x350 [ 701.212578][ C1] Code: ff ff ff e8 31 0f 08 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 0b aa 97 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 18 56 92 [ 701.235489][ C1] RSP: 0018:ffffc900045b76a8 EFLAGS: 00000282 [ 701.244930][ C1] RAX: 40d36d0a06dfbb00 RBX: 0000000000000000 RCX: 0000000000000046 [ 701.255176][ C1] RDX: 0000000000000004 RSI: ffffffff8e2239f3 RDI: ffffffff8c28b9e0 [ 701.265977][ C1] RBP: ffffffff8225729a R08: ffffc900045b74c8 R09: 0000000000000020 [ 701.276283][ C1] R10: dffffc0000000000 R11: ffffffff81a21250 R12: 0000000000000000 [ 701.287849][ C1] R13: ffffffff8ea85580 R14: 0000000000000001 R15: 0000000000000246 [ 701.296683][ C1] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 701.304315][ C1] ? __pfx_hlock_conflict+0x10/0x10 [ 701.310053][ C1] fs_reclaim_acquire+0x71/0x100 [ 701.318594][ C1] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 701.325664][ C1] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 701.331947][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 701.338047][ C1] ? __alloc_skb+0x1d0/0x7d0 [ 701.342849][ C1] __alloc_skb+0x1d0/0x7d0 [ 701.348209][ C1] mgmt_send_event+0x46/0x190 [ 701.353805][ C1] ? mgmt_connect_failed+0x157/0x4c0 [ 701.359994][ C1] mgmt_connect_failed+0x322/0x4c0 [ 701.365408][ C1] ? hci_abort_conn_sync+0xa6f/0x1190 [ 701.372132][ C1] ? __pfx_mgmt_connect_failed+0x10/0x10 [ 701.381451][ C1] ? hci_abort_conn_sync+0xa7b/0x1190 [ 701.390287][ C1] hci_conn_failed+0xda/0x340 [ 701.396068][ C1] ? hci_abort_conn_sync+0xa7b/0x1190 [ 701.404354][ C1] hci_abort_conn_sync+0xdd0/0x1190 [ 701.412007][ C1] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 701.419348][ C1] ? abort_conn_sync+0x26/0x210 [ 701.425643][ C1] ? abort_conn_sync+0x26/0x210 [ 701.430972][ C1] ? abort_conn_sync+0x19c/0x210 [ 701.436203][ C1] ? __pfx_abort_conn_sync+0x10/0x10 [ 701.442342][ C1] hci_cmd_sync_work+0x213/0x400 [ 701.448402][ C1] ? process_scheduled_works+0xa70/0x1860 [ 701.455124][ C1] process_scheduled_works+0xb5d/0x1860 [ 701.461868][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 701.468500][ C1] ? assign_work+0x3d5/0x5e0 [ 701.473127][ C1] worker_thread+0xa53/0xfc0 [ 701.478277][ C1] kthread+0x389/0x470 [ 701.482569][ C1] ? __pfx_worker_thread+0x10/0x10 [ 701.487872][ C1] ? __pfx_kthread+0x10/0x10 [ 701.492575][ C1] ret_from_fork+0x514/0xb70 [ 701.498470][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 701.503888][ C1] ? __switch_to+0xc79/0x1410 [ 701.511259][ C1] ? __pfx_kthread+0x10/0x10 [ 701.517294][ C1] ret_from_fork_asm+0x1a/0x30 [ 701.522640][ C1]