last executing test programs: 3m21.190890848s ago: executing program 1 (id=3389): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="2e0000000000000000000000000000002f110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000080000ff00000000000000000000000056fb80640a3f1e1eefc56f884b3e526e7543ab82d7a498394353683f99395344e5f3cac0754d6dfb6070b3a779f1013623ddcc1f69893a73a9f80ef2e3afb95d4ae692f057ae085d58875112756fefba1154c3fb7fdccce6c649d6bf8b10399f3858eee73749188dd3c40c86e08bdb659160c872c61cf978599f8146ee425b6a", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3m20.987857879s ago: executing program 1 (id=3390): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fedbdf252500000008000200", @ANYRES32=r3, @ANYBLOB="05002b00035b26f96ec3f6bd0b000000"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4) 3m20.75148789s ago: executing program 1 (id=3394): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@setneightbl={0x58, 0x43, 0x1, 0x4070bd29, 0x25dfdbff, {0xa}, [@NDTA_PARMS={0x38, 0x6, 0x0, 0x1, [@NDTPA_MCAST_REPROBES={0x8, 0x11, 0x54}, @NDTPA_UCAST_PROBES={0x8, 0xa, 0x401}, @NDTPA_PROXY_QLEN={0x8, 0xe, 0xea6}, @NDTPA_DELAY_PROBE_TIME={0xc, 0x7, 0x8}, @NDTPA_UCAST_PROBES={0x8, 0xa, 0x81}, @NDTPA_IFINDEX={0x8}]}, @NDTA_GC_INTERVAL={0xc, 0x8, 0x3}]}, 0x58}}, 0xc010) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1}, 0x4) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fddbdf25540000000800030003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000980)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) (async) socket$kcm(0x2, 0x3, 0x2) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a40)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a56", 0x3c}], 0x1}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r6, 0x0, 0x20000004) syz_genetlink_get_family_id$nfc(0x0, r6) (async) syz_genetlink_get_family_id$nl802154(0x0, r6) (async, rerun: 32) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, 0x0, 0x80) (async, rerun: 32) syz_genetlink_get_family_id$nl802154(0x0, r5) (async, rerun: 64) syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80), 0xffffffffffffffff) (rerun: 64) r7 = socket$kcm(0x10, 0x2, 0x0) (async) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000ac0), 0x10) sendmsg$kcm(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000b80)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)={0x14, r2, 0x1, 0x0, 0x25cfdbfc, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40010) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0x1}, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vxcan0\x00', 0x0}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000780), 0x4) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0xfffffffe}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@arena={0x21, 0x0, 0x0, 0x1f, 0x3ed7d2ea276588c0, 0x1, 0x3, '\x00', r9, 0xffffffffffffffff, 0x3, 0x1, 0x4, 0x0, @value=r3, @void, @value=r3}, 0x50) 3m18.234483417s ago: executing program 1 (id=3402): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bridge_slave_1\x00', 0x0}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000007c0)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000800)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000008c0)=""/81, 0x51}], 0x1}, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r5, &(0x7f0000000100)='^', 0x34000, 0x0, &(0x7f0000000140)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r5, 0xfff) r6 = accept4(r5, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r5, 0x84, 0x1c, &(0x7f0000000200), &(0x7f0000000500)=0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000010000000520040001000000050002000a0000009056bb22b10c134971507d0861258a82243db872363a08638ff5acd6ad4497bd2f6c9cf0f07b"], 0x24}}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x275a, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r10, &(0x7f00000005c0), 0xf000) r11 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r11, 0x0, 0x23, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r9, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x70, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e23, 0x2, @empty, 0x6b54}}, [0x7, 0x2, 0x925, 0xffffffff00000001, 0xc42, 0x200, 0x80000001, 0x2090c5d2, 0xffffffffffff77ae, 0x2, 0x4, 0x7, 0x100000003, 0x0, 0x9]}, &(0x7f0000000700)=0x100) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r2, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}, 0x1, 0x0, 0x0, 0x48840}, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r13) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r12) 3m13.534841813s ago: executing program 1 (id=3404): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x66}}, &(0x7f00000001c0)='GPL\x00'}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@jmp={0x4, 0x0, 0x6}]}, &(0x7f00000003c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) (async) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000200)={'wlan0\x00', 0xfffffffe}) (async) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000640)=@generic={&(0x7f0000000600)='./file0\x00', 0x0, 0x10}, 0x18) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000680)={@broadcast, @rand_addr, 0x0}, &(0x7f00000006c0)=0xc) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000700)={r0, 0x2, 0x6, 0x7ff}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x3a13, '\x00', r2, r3, 0x3, 0x3, 0x1}, 0x50) (async) r4 = socket$rxrpc(0x21, 0x2, 0xa) ioctl(r4, 0x8b23, &(0x7f00000002c0)) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xd, 0x10, &(0x7f0000000540)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x39}}]}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x64}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}}, 0x8040) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), r3) (async) getpeername$packet(r3, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000000a40)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)={0xc4, r7, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40000}, 0xcc891) 3m12.787732329s ago: executing program 1 (id=3411): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x6}}, 0x14}}, 0x4000080) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x6, [{0x0, 0x9}, {0x9, 0x100}, {0x6, 0xf}, {0x8001, 0x2}, {0x7fff, 0x5}, {0xff}]}}) 2m57.614839961s ago: executing program 32 (id=3411): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x6}}, 0x14}}, 0x4000080) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x6, [{0x0, 0x9}, {0x9, 0x100}, {0x6, 0xf}, {0x8001, 0x2}, {0x7fff, 0x5}, {0xff}]}}) 2m39.678130414s ago: executing program 2 (id=3599): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x54, 0x10, 0x503, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6230}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x44}}]}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x54}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0xf7fffffd, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000180), 0x0) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r2}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x7, [@type_tag={0x9, 0x0, 0x0, 0x12, 0x3}, @decl_tag={0x4, 0x0, 0x0, 0x11, 0x4, 0x7}, @float={0x2, 0x0, 0x0, 0x10, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0x4}}]}, {0x0, [0x30, 0x12908a729feddd7b, 0x30, 0x30, 0x0]}}, &(0x7f00000002c0)=""/23, 0x5f, 0x17, 0x1, 0x4, 0x10000, @value=r4}, 0x28) r5 = bpf$ITER_CREATE(0xb, &(0x7f00000001c0)={r3}, 0x8) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r5) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x4, 0x9, 0x0, 0x6, 0x40, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x700, 0x2, 0x2}}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x80, r6, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xfc}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0xfffffdef) write$cgroup_devices(r5, &(0x7f0000000240)=ANY=[], 0xffdd) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty=0xe0000001}, {0x4e24, 0x4e20, 0x8}}}}}, 0x0) 2m38.229403822s ago: executing program 2 (id=3600): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42082, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000480)=@nat={'nat\x00', 0x2, 0x5, 0x628, 0x0, 0x250, 0xffffffff, 0x380, 0x250, 0x6a0, 0x6a0, 0xffffffff, 0x6a0, 0x6a0, 0x5, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@common=@rt={{0x138}, {0x4, [0x3, 0x800], 0x0, 0xf23d8cefb056ae2b, 0x7, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @mcast2, @ipv4={'\x00', '\xff\xff', @loopback}, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @dev={0xfe, 0x80, '\x00', 0x2b}, @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1], 0x9}}, @common=@unspec=@pkttype={{}, {0x9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1b}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [0x0, 0xff000000], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@eui64, @common=@rt={{}, {0x7fff, [0xffffffff, 0x5], 0xf1a, 0x20, 0x0, [@empty, @empty, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, @remote, @ipv4={'\x00', '\xff\xff', @empty}, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, @mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}], 0x4}}]}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4cc) close(r5) socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000180)=ANY=[@ANYRES16=r5, @ANYRES16=r5]) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, 0x0, 0x0, 0x200740c0, &(0x7f0000000280)={0x11, 0x16, r8, 0x1, 0x2}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x2}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x45}]}, 0x54}}, 0x0) 2m37.034125625s ago: executing program 2 (id=3604): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000cc0)=[{{&(0x7f0000000e00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000e80)=[{&(0x7f0000000ec0)="723aa5669d6534e4069306556265a52d7b4979d14adbb3c76ab355fedcc87612f0f5", 0x25}, {&(0x7f0000000f00)="c23c31cc005949df9c3658d49469a5d9f7b75e57db1dd8e048dc77391e6f98f12d2ae5086ab922aa99faa10ab8c63a35cc1fcd2a91f1b5decaaae47dd93840897b55e1b7fc26f8dcec7273b7ef83a79295149a8a86df3b96136aa682dca6eb6d374e2f3f89566de2e177430bc165f6a00ea69cb9", 0x74}, {&(0x7f0000000f80)="9ef74240a0e15251771c6030011864e9be14f804b512ac5a70158b1f144755b19c9f249b59d8e99cea6177b28d0cf7", 0xffffffb3}], 0x3, 0x0, 0x0, 0x20084044}}, {{&(0x7f0000000fc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001040)=[{&(0x7f0000001080)="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", 0xfd}], 0x1}}, {{&(0x7f0000001180)=@abs, 0x6e, &(0x7f0000001200)=[{&(0x7f0000001240)="00a52754418d60845891f171de02b260178bb1c8bed61cf7d7c45894fed6c5128fb7860bdc03c3276d902a20fc0ff4796350bf2edbcf50c91ffc791b9588e666998c52ef9c0af37edd10731a1696e4f7a2955f25516f5012335c768acd9a9ee23898ed09cdb1abbd37c658e058f7c8", 0x6f}], 0x1, &(0x7f00000012c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001380)="dc5aa9bcbf900b50b49e70a29077f17300a74f1d185d09941f2e48690bd59f9a13dfe5925e763c6d6cf4dbc2dab1dbb08f6ab89c843b7f633364ca0ee12ccb26f93ae74cc85f72c5f15ecbe413bfc2745e0127dcf44628d27d7d1b5b0b3459cfb79e2583be041efd9ce2afb953813cbf2f29", 0x72}], 0x1, &(0x7f0000001400)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0xb8}}, {{&(0x7f00000014c0)=@abs, 0x6e, &(0x7f0000001540)=[{&(0x7f0000001580)="21abb9324d4bb0e142c60944b8f4722af52b9ab909390262a5d6c32aba6fe9eee6016da156e93e257e23ece67f6e74b254c75e76a74a", 0x36}, {&(0x7f00000015c0)="d92a4161e20fd18389f3347fc4a8db3900829b87945e91344d0c440a63262e30f6c1e1e39a527d22abceb7b783c115533e68681ca0ffbcfe4d04f890394456034e2f0f5e6259bc1119aceb1d2e079b8da4510a797c07685febda2c69cbc5533e701b1c5df2835bbb0e49697f72c19937f703fe94ae6ff9eb2ed9cb6d6e7fa72e64a6d4745413a1905f24acfeaeaf02a2f61575f13a824fbdfb1f15dd6563ff0971a07850a71f758f764333fc4a935df29c81f8f75bb9ae3a10d11e9e860b79d246866ee467fbbcaf52ce94aff48eed0b25357a507547b7949a6ab041764d3962878bbf66864d53560492cbd40c9d4ab0f450", 0xf2}, {&(0x7f00000016c0)="81c1cb152774ad5120d3269d2a892740ccc92b0f67e099aa80e62e5c0d7e3da5d7fa714dce56bcc5cd", 0x29}], 0x3, &(0x7f00000017c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="005c29a700f0198b34af0000002000220000e9ff88dddf42e830d6e0087f4602e76b24184cabf30e088ce027127dd8bd334efc68551f9870cdb8070eb433f4d19a90669940e262af6702f74c31ead5b111a8a7245edd20588d2c5a529d242875674f39f8d15ecd38272054c06697c25e0016a64b0d43faaff7f7fd479e3028f4ce2eb181945ca07c2144130194f24e931f5f49f3097489141abd650f8c330ac93284c508911013a79084fcc83b0869262bad4b10b197730a7cf50aceb8702be9a8c62da5157c91d3adabf0efb377eddf6753a705560f1a8932ae4ec24eeb1a5e24daf1d65eacd255c0c5ec4ff60500000000000000c61413f784ca0067c999712c5388", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x98}}], 0x5, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000020342b5746713e617e00000000000000900020000000005010000000800044000000001b4e6adb6220b54acdea44aa7e85bf6d104258181f409e1d595bcf6eb3a1eb925134030"], 0x28}, 0x1, 0x0, 0x0, 0x1004c081}, 0x280040c0) sendmsg$NFT_BATCH(r0, &(0x7f0000000a40)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0xf04, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x1ff}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x22}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x8c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x7}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x646}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0xae7f28833b779733, 0x0, 0x0, {0x1, 0x0, 0x1}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}, @NFT_MSG_DELTABLE={0xa0, 0x2, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_TABLE_USERDATA={0x5f, 0x6, "d3191f3af99130263fa1fdf6aa4140ae3641b8b1afadcef8bfafc90211a159a175f0d7dca83a201e9b9d3bb5e85f4e7c3389b1ee50be941a30d7e90a234c10517bcf7b89bd494b7054804acf64815b17c85094b8c5f6ca60a9b859"}, @NFTA_TABLE_USERDATA={0x20, 0x6, "99ac60b091213045a35f575c5e9959aecc947f1f34da88a20afb55e8"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x12}, @NFTA_SET_EXPRESSIONS={0x40, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x21}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x148, 0x14, 0xa, 0x201, 0x0, 0x0, {0x1f, 0x0, 0x7}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_USERDATA={0xee, 0x8, "9ce0ebbd9d6416563197dff1114951a6e75ff57144f08232d22dc9a632799b66edfe7779618fe9a8842459129c05543cafa63edeb77952635ef55776aff5a8f6baab3ebb1efb22fd599fa548d7c96b17d900a6ea93ae872dcee6adc18819ab88d1b03fd719aefc82f8e9bb1bab996d432ceb0d538f68fa137eca8ecacb2c7e46e83a634160e94b6b79456128c3645e8c1e0b20e4dab4f68c8dea36bbf82c0b67c8fcdfb954d45619bb0641d4a5cd0a38c557c58a1226f89ee0ccf12f662659724c0115fc519d0e011bf9d77851fa5693e142f8e170425b244cb7d1d5dc914ff180d99b9016aabd33697a"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3cc}}, 0x20040090) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x881}, 0x2404c810) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x5, 0x0, 0x0, &(0x7f0000000b40)='GPL\x00', 0x200005, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000b80)={'wlan1\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r2, 0x8b2a, &(0x7f0000000bc0)) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) write(0xca, &(0x7f0000001700)="040e24010310", 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=ANY=[@ANYBLOB="440000001400030400000000000000542d"], 0x44}}, 0x0) setsockopt(r3, 0x84, 0x81, &(0x7f0000000580)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000002c0)={0x0, 0xfffffffffffffefa, &(0x7f0000000440)={&(0x7f0000000480)={0x184, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x10, 0x0, 0x1, [@generic="25b57e35619bf20cb7f2934efacde0a223b473fe77f3e5ba76fb70fa1f414813a2a20005006f88d6e1db9b2b000000000000000000"]}, @nested={0x11e, 0x0, 0x0, 0x1, [@typed={0xdd, 0x0, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic="37c14f9a8ead341bf43ea3970236c74b2e318966b7420623d7f5c9fde55324d4c519e80f9f4d6b22b3f1b672c61240c38914eb560eb9ca62fa58"]}]}, 0x184}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x4, &(0x7f00000005c0)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x1f}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m36.210157213s ago: executing program 2 (id=3612): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x80000000, 0x504, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newtaction={0x9c, 0x30, 0xb, 0x0, 0x25dfdbfb, {}, [{0x88, 0x1, [@m_ct={0x84, 0x7, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0xffffffffffffffff}}, @TCA_CT_MARK={0x0, 0x5, 0x7}, @TCA_CT_NAT_IPV6_MIN={0x13, 0xb, @dev}, @TCA_CT_NAT_PORT_MIN={0x6}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0xffff}, @TCA_CT_MARK={0x8, 0x5, 0xfffff801}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0xfe, 0x6}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000d4}, 0x0) (async) listen(r1, 0x6f6) writev(r0, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r7 = getgid() (async) r8 = getgid() sendmsg$netlink(r2, &(0x7f0000005180)={&(0x7f0000000b80)=@proc={0x10, 0x0, 0x25dfdbfb, 0x80804400}, 0xc, &(0x7f0000001840)=[{&(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x380}, {&(0x7f0000000f80)={0x228, 0x33, 0x4, 0x70bd2b, 0x25dfdbfe, "", [@typed={0x14, 0xa8, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}}, @typed={0xc, 0xb, 0x0, 0x0, @u64=0x2}, @nested={0xed, 0x7, 0x0, 0x1, [@typed={0x8, 0x74, 0x0, 0x0, @u32=0x6}, @generic="eb63f184884ac96fb6862b865ece351fa91f3f47798483e1a665d07d4643d4c8893ee065fd0c9cabde3e56a1f6d48bc3db626cedc554a3894f934832a3ffb796a2045ee664f022a905be884be13b8d216377165a92ef98a18ed75e1786f3f5b2b0b782c1f664f44ac241dc93915287184e78bd0f919b139bbc33306837f3f8ff9f0db695205f6c417ca4d09bab84462dd80fde64344171d09be06b5dda4c0a5570dd7ada04abec13bb9dd266e93cac2831ac9850fc91fdbbdcbf0353e344562b7e7b81f53c42752bce176affd0b9fba98a132f923a8d32b53eb8f7d70678ce34f3"]}, @typed={0x4, 0x10f}, @generic="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", @typed={0x8, 0xa2, 0x0, 0x0, @pid}]}, 0x228}, {&(0x7f00000011c0)={0xd0, 0x1e, 0x20, 0x70bd25, 0x25dfdbfc, "", [@generic="3bb7f123", @typed={0xc, 0x9b, 0x0, 0x0, @u64=0x4}, @nested={0xad, 0x83, 0x0, 0x1, [@nested={0x4, 0x114}, @nested={0x4, 0x6b}, @nested={0x4, 0xbc}, @generic="341b4bb0bdd9c2f90bbde58c838dd7fbeac706e9100cf07657120fc8625d1b3da124be3eb5abed069cd808fcf944e5c89b7cbd53c6d65582543bf721903b9cec56d4ffbfa15cd20bb4cf29031b", @generic="63ac9a39d166c7c8e8a79b4b0f18c93db7f88517bcfaaec4da293e59c1563075d1250a6ad2a519f4a75e7590267e9b7be50f9be63d5faaabd6eb2609f862f18e3b4db0906965d6a4ba1f25327e206cb9"]}]}, 0xd0}, {&(0x7f0000001300)={0x504, 0x3c, 0x0, 0x70bd2b, 0x25dfdbfc, "", [@generic="415f9ababa17b1983d0f84b97a6fe8fab8c7c6fa67609ee832701e2d40ec462b39", @nested={0x170, 0xe7, 0x0, 0x1, [@nested={0x4, 0x154}, @generic="312e1d0e8fa0c233da9a4ab759fb878c195bdb21f9a05839e69d43e0202dcc6aff4333a44ce679429400e03314feb37c5b4ae7dcb320e7a2ad717c40fa9969b186ebbe2d146acc872c9911c73509352af370140101b1dc0c7ab36548e6d1020a3c55928e97f17c3f60e673f55099d0a4fb5baf0d0ebd9e0c393037d3ab6a6a35bdeae5695d9fdcb93cc09d63b2e769084d3cef2b69bc1c65157dbbf2165cc3ac198fb0240f52170890643c9bcd89836d4798c78da2fd37ea956bd44f0c5869bf0f8f9e5bd9ffd705fa55d177e713", @generic="83f4b21bf87f49484185ea72b0e44e4561b5a8c154df86fa72951c770eb30b7c5fb51c77ad6a708f3a12dda692f01e796c00b0db033b03ee7692f3aa6c67bea177ba5be70c51e4a480385ae75c7d8c8f9bade05db0917beb36950954078443d10cd81ee39b4dec08cfd371f6e611724faa234d9a9c823dbd45bbd839c07dc766e257cd427e01455c8975399a00f3089d780a", @typed={0x8, 0xf7, 0x0, 0x0, @fd=r5}]}, @generic="506cd7ea4c63a899065977ecae327cddc2e51d3d708373662f02d0ae04d95c307f131520b8eedf8b9989d9dc823ebbdb06714fc6a7e585c7c89f050087bcec50daf62c05847425cf7c5f6105459b824fa78f1a98293597c28066c0142cff0a41d79f6fc61e", @generic="32111f70982b936687a7eb31c15ed7ed46a85344e40f046fef60483ad79733e68a9ccb6f1939da79071c6ba5aab4ddeb5b9fdc294d768f6bdabd9f3ee225a2afa4b0ffbbc48fa06c05e5e0d214a2732f24ccaa329ad7207a76", @nested={0x10, 0x120, 0x0, 0x1, [@nested={0x4, 0xb2}, @nested={0x4, 0x32}, @nested={0x4, 0xe}]}, @typed={0x8, 0x10c, 0x0, 0x0, @pid}, @nested={0x6a, 0x5a, 0x0, 0x1, [@generic="319fece9ffe004e3ee352a0d96d42a4e3e2518d7d935fa52ed2fe418d16089ca90da4a29ee18d3fbad8ada8d5e4a368e6cba3698a9f0c21d5a2d9df103fc4d374deb7d9e5519202a2c6d70c3e4a8bc7fde63c503936b55ad66cf1db309b84601750222ae884e"]}, @nested={0xd3, 0x37, 0x0, 0x1, [@typed={0x8, 0xd0, 0x0, 0x0, @pid}, @generic="e5aea5fdc3c6003de92a8166bc9b4ba9e0e5f053011a1b14dfef8da33d2c1e6573f2d116a80b1761008e5a2cf57fa0", @generic="e14cecb4a6e0c95d49334be1ab92a0bcc4211abb2d6c26296b441603190736ea1f0739d2c488b7f285f321ed94dff919fc860452805e31842c52bc2046e7587e1c4b0f6f33f631a736a97e95870d539ac176cc8b4d1310475a6b6ff663cbfd6c6ed43461ed6f440e5f6fcaac6c13c0c3b28e348731e31ac40904451248a81bbafc92939024f23d74e4b4dadce76677fabbe110dacd66cd37", @generic]}, @nested={0xdb, 0xcd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @ipv4=@multicast2}, @generic="d5815a2d36eeeafb1a297e5efd333b4f085f57b52e1da90fe5d037f10462b65941db986ebbd1bfbebd8112f1cc264f04d1f1a3a06ba23cc0fce09f7f08bc3d2cc187e951609113371ff53304bcd3fd89bc94e660bf0e76c602bef82ec013fa7315761a82a23930e85866364f5b06a733a324f09390deb7b39df1af9cc8b2142c84e9d51c2e2777e8be93717640a78b79d51fe5d3a636adc70455598b1d1cf92b9a1b764c8b69d7d22416a8cb1c7f97d2598a71ea891d1b3f7e700a56af04ed81c7b7422e8923622f48b6310c253b78"]}, @nested={0x70, 0x9f, 0x0, 0x1, [@nested={0x4, 0x5}, @generic="3e0083480360b9aa7966522cddb4b82440b46dc03e9384439eae07e4325a4a3af6ca784054e960eb7c1192bf05acaf0c16436b2f6f349760785b9682ae3d4a1ee09c16f92de9e30064f2cd3e0cb73369db3de519da623013d98f0fda1d7024cf5f6d87ea", @nested={0x4, 0xa9}]}]}, 0x504}], 0x4, &(0x7f0000005000)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r6, r4, r6, r1, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r3, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r3, r0, r1, r5, r1, r2, r2]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [r3, 0xffffffffffffffff, r3, r4, r4, r3, r4]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r7}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, r8}}}], 0x150, 0x800}, 0x10) (async) shutdown(r6, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000880)=[@in6={0xa, 0x4e23, 0x0, @private2}]}, &(0x7f00000008c0)=0x10) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000900)=@assoc_value={0x0}, &(0x7f0000000940)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000980)={r10, @in6={{0xa, 0x4e21, 0x6, @empty, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0xd4, 0x1000}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000a40)={r10, @in6={{0xa, 0x4e23, 0x440, @private2, 0x4}}, 0x5b, 0x4}, 0x90) (async) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000b00)={r10, 0xa}, &(0x7f0000000b40)=0x8) bind$bt_hci(r5, &(0x7f0000000740)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r5, &(0x7f0000000780)="18000300010003", 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x10, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b400000000000000791048000000000071041d000000000095000000"], &(0x7f0000000580)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000640)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) (async) socketpair(0x2, 0x3, 0xfff, &(0x7f00000007c0)={0xffffffffffffffff}) bind$inet(r13, &(0x7f0000000800)={0x2, 0x4e22, @empty}, 0x10) (async) sendmsg$NL80211_CMD_GET_POWER_SAVE(r13, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r11, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c055}, 0x4000880) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) 2m35.619888712s ago: executing program 2 (id=3619): r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000040)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x42000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '*/'}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff9}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000004c0)={r0, &(0x7f00000003c0)='++$&*@^^#\x00', 0x0, &(0x7f0000000400)={@align=0xffffffffffffff0c, {0x33, 0x1000, 0x7, 0x3}}, 0x8, &(0x7f0000000440)={@_ha_fsid}, &(0x7f0000000480)=0x5}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000640)={&(0x7f0000000500), 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x98, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT={0x4}], @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x2}, @NL80211_ATTR_HE_BSS_COLOR={0x20, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x20}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x170c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffffe}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]]}, 0x98}, 0x1, 0x0, 0x0, 0x840}, 0x800) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), r1) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, r3, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_SHORT_ADDR={0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000090}, 0x20000005) sendmsg$NFT_BATCH(r2, &(0x7f0000000e40)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSETELEM={0x28, 0xe, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x8c, 0x2, 0xa, 0x0, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x64, 0x6, "8bcdc3e730783256efc70c8016ab1b09b72516db82ff375beb1644988e682ffe42599b0c4d5de2e87ad0aff1467e83ca996d2755f3d37c6848c3f07a890bd53046455a9f82d96fe8c171f801c1281cdd64a66f06db8897bca22e1404be94cd31"}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x3}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}, @NFT_MSG_NEWSETELEM={0x28, 0xc, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c4, 0x18, 0xa, 0xa00, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0x160, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9d9}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7f}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'team_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3ff}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x110, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xe105}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'dvmrp1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'macvtap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x184, 0x14, 0xa, 0x80, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_OBJ_USERDATA={0x21, 0x8, "0536ed386cf35ed096ca2b05a856f65737b054bec33cd35cde594e890f"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0xfd, 0x8, "c54acf5324351867dfdac54086806e5f1d9f37ba29e871c04647223afb478f02a0ef1aa98c60c1a22e5f92c57db982b44115696c9322592bfa0df55c68c0c7ad1b744d2cbcab8740b7334dbbfed5be5d3129e145dad2a7176a50b4041211f5235e4966dc48da021ccf2285ae9d95404b9c685cf6f7b927a859708c0a2d21101a950dcb3911c60c72ea619594768eea61296a3ecb4910473e85e2dc4234c88b1fd0f3359df49c49a7077879449660945fbf5cbebdd10573a855d0b44d9af89a471f9963ad3f49297e815457a42eb960c2496039ead4890b0e0b6b9ef92dab7735fd27e94d86bead3422e866583bb3ce3fd3c48668d7e4956665"}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWTABLE={0x5c, 0x0, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x6}}}, 0x5e4}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000000) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ec0), r1) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x2c, r4, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r2, 0x40106e80, &(0x7f0000000fc0)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000001040), r1) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x14, r5, 0x225, 0x70bd2b, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x80) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x14, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000001280)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000012c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000001300)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f00000013c0)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x38, r3, 0x300, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x2000c081) ioctl$AUTOFS_IOC_SETTIMEOUT(r2, 0x80049367, &(0x7f0000001400)=0xf) syz_genetlink_get_family_id$nl802154(&(0x7f0000001440), 0xffffffffffffffff) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000014c0), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x2c, r9, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008081}, 0x4050) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001600), r1) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r10, 0x300, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x20044081) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001740), r2) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000002a80)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002a40)={&(0x7f0000001780)={0x128c, r11, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}]}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_NODE={0x98, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "01364ba3523d17e0caf995aa1b956e1035f3d145eb89"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "a089e4120e68141e83b79cded3ac9842f4fd5291ae96cc6da6"}}]}, @TIPC_NLA_NODE={0x1008, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4d0}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x82e9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9e8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}, @TIPC_NLA_NODE={0x114, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xbd, 0x3, "b0438257b75324f0aa5b25050c199ba98471016c6b04f152130fca23b219e171e1d9de9ee762e4ba242840eda01f1838b8e3eeee13255109a3f9067562b60af9a0b27bedb5d647e8b3742e053aa600a7869889a375f72487c01e6a78dedf0c424f148de29443a4f059edd5cea918530004ae648c369f4f3aeb18bc0fbf6403829478a53959765b23068a36314016b2068f6375396a381d58b0c461388ac89a79d93976749d4d7e8033bba7b61a57936f5175a7068e7f72619f"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "9db32008a9632c24835133bc69889cb0f5ae317f73"}}]}]}, 0x128c}, 0x1, 0x0, 0x0, 0x44804}, 0x8800) ioctl$BTRFS_IOC_DEFRAG(r2, 0x50009402, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000002ac0)={@multicast2, @initdev, 0x0}, &(0x7f0000002b00)=0xc) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000002b40)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', r12}, 0x14) 2m34.269593032s ago: executing program 2 (id=3625): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0x7}}, 0x14}}, 0x4000880) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x74, 0x3, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x400}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xe}]}]}, @NFT_MSG_NEWRULE={0xb4, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x88, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x14, 0x1, "00000000000000000000000000000001"}]}]}}}, {0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "00000001"}]}]}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x170}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, &(0x7f0000000000)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 2m0.38973481s ago: executing program 33 (id=3625): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0x7}}, 0x14}}, 0x4000880) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x74, 0x3, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x400}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xe}]}]}, @NFT_MSG_NEWRULE={0xb4, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x88, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x14, 0x1, "00000000000000000000000000000001"}]}]}}}, {0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "00000001"}]}]}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x170}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, &(0x7f0000000000)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 1m58.603158739s ago: executing program 3 (id=3703): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xe, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000f80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000fc0), 0xfffffedf, 0x10, &(0x7f0000001000), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) (async, rerun: 64) sendmsg$unix(r0, &(0x7f00000001c0)={&(0x7f0000000040)=@abs={0x1, 0x2f, 0x2e}, 0x6e, 0x0}, 0x0) 1m57.468153564s ago: executing program 3 (id=3711): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0xffffffffffffff5e, &(0x7f0000000ac0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)=@gettfilter={0x64, 0x2e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x7, 0xa}, {0x5, 0xc}, {0xa, 0xffe0}}, [{0x8, 0xb, 0xe459}, {0x8, 0xb, 0x80000001}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x892}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x200}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000020}, 0x2404501c) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x403, 0x70bd27, 0x1, {0x0, 0x0, 0x0, 0x0, 0x90446}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0880000008440000300012800b00010067656e65766500001e0002801400070000000000000000000000000000000001050004000100000008000a00", @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m56.027888743s ago: executing program 3 (id=3715): r0 = socket$netlink(0x10, 0x3, 0x15) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd0000000c0001000d0c10000000000000000000", 0x58}], 0x1) 1m55.66621742s ago: executing program 3 (id=3718): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) close(0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="20020000300001002dbd70000000000007"], 0x220}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000280)={0xf4, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0xb5, 0xe, {{{}, {0x6}, @broadcast, @device_a, @from_mac=@device_b, {0x0, 0xff3}}, 0x0, @random=0x7ff, 0x1, @void, @void, @val={0x3, 0x1, 0xaf}, @val={0x4, 0x6, {0x7, 0x5, 0xb3e, 0x401}}, @val={0x6, 0x2, 0x1}, @val={0x5, 0x6e, {0xe, 0x50, 0x83, "b621bbab66202faa2fbdb0d0edbfedbbf5f8b8d9a9d0de1591cfae1fd569c20d1a35598ee4f003670b6a4adc049f169953009821b83890156cd23be8c86a9e3ae14114c71ea6f04020313d7aaf6396af3699de1e258c01b2e66dc24a51efc45f7ada5cb3a719799cbf3d6e"}}, @void, @void, @val={0x3c, 0x4, {0x0, 0x80, 0x2, 0x1}}, @void, @val={0x72, 0x6}, @void, @void}}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}, @NL80211_ATTR_P2P_OPPPS={0x5}]}, 0xf4}}, 0x0) 1m55.300964197s ago: executing program 3 (id=3721): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x14, r2, 0xcc071acbf25dbf8f}, 0x14}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}]}, &(0x7f0000000040)=0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x48, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x18}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x408}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x408}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x406c450}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r5, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) shutdown(r0, 0x2) 1m54.578559116s ago: executing program 3 (id=3723): write$tun(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="00006007034302a1a0c2e947f953dd2ca812ea9b09409ff99008a1e6e414efff67fefe11d8a3a6d75979897d8bd31997c86aec4c8b3aca8aa1aeb047bac7bede56134d506be522a38e733aeb7d3136e7eef0d01243d199d2821b9db045e93095c3f5c60787eb6d6f05f610c2676ac4c95a2f6246804c6c063aa37e2914b160857c2f59738fcec0af4335be43"], 0x31) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x11}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0xffff8000}]}, 0x1c}}, 0x4000080) write$tun(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="00006007034302a1a0c2e947f953dd2ca812ea9b09409ff99008a1e6e414efff67fefe11d8a3a6d75979897d8bd31997c86aec4c8b3aca8aa1aeb047bac7bede56134d506be522a38e733aeb7d3136e7eef0d01243d199d2821b9db045e93095c3f5c60787eb6d6f05f610c2676ac4c95a2f6246804c6c063aa37e2914b160857c2f59738fcec0af4335be43"], 0x31) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x11}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0xffff8000}]}, 0x1c}}, 0x4000080) (async) 1m39.435600811s ago: executing program 34 (id=3723): write$tun(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="00006007034302a1a0c2e947f953dd2ca812ea9b09409ff99008a1e6e414efff67fefe11d8a3a6d75979897d8bd31997c86aec4c8b3aca8aa1aeb047bac7bede56134d506be522a38e733aeb7d3136e7eef0d01243d199d2821b9db045e93095c3f5c60787eb6d6f05f610c2676ac4c95a2f6246804c6c063aa37e2914b160857c2f59738fcec0af4335be43"], 0x31) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x11}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0xffff8000}]}, 0x1c}}, 0x4000080) write$tun(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="00006007034302a1a0c2e947f953dd2ca812ea9b09409ff99008a1e6e414efff67fefe11d8a3a6d75979897d8bd31997c86aec4c8b3aca8aa1aeb047bac7bede56134d506be522a38e733aeb7d3136e7eef0d01243d199d2821b9db045e93095c3f5c60787eb6d6f05f610c2676ac4c95a2f6246804c6c063aa37e2914b160857c2f59738fcec0af4335be43"], 0x31) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x11}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0xffff8000}]}, 0x1c}}, 0x4000080) (async) 31.66228201s ago: executing program 0 (id=4156): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xc, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5, 0x3, 0x40}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x2}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="d800000019008111e0020f060d8107040a600200640f040b067c55a12a00090008000699e3ffffff14000500fe8081780c000567b8b7b940020000090a0016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a290457f0189b316277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b83ece0b42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x0) 31.335050231s ago: executing program 0 (id=4157): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1_to_team\x00', 0x10) (async) syz_emit_ethernet(0x36, &(0x7f0000000040)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x12, 0x0, 0x0, 0xe000, 0x2}}}}}, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="d850000044000701fefffffffcdbdf25037c000004004580c0500180bc506480b850cd80b450d680b05018800400f28004008d809f506a80cb84262700fc44f829e9ac5d2b0168d2ed51fbf02783ae7705c94d9468d49caa3fe7907450398014006d800500a4000000000008004d00ac14140c5950028037000180d01032234b706888b980d85f5def3c191ca34a6233501153013bfba3d086610cf508856addde7e5c76f43c436ca7ad24952a0b0085125080106436907b2a903f7e0157da1114736ba94b5dbf4f9c4f80f729a22252376abc3c07a20ec89bb97eb05c339e1274645639afd083cb636ee66d5c151197e89a6e61c57a8c6166ab600ed3768498f99189e39e1b69fc318fdf49ec5bb01f58252c64b18d56a5d340c13a8bc9079abfef0061800400d98004006b00ea11c6ebcf7daba729395ae46378a6c5ea317653ba1c9c415186a816e5b96d1bb170d08a0c3662a881ae356dd004bdcec0f7523da7ba2cca516faf18cc0f269d75b20e5b9a1ba0fe28c74d055c36a00d4055fe19f4d587c63364210d3ba1c9065fb993f13e48a2b2ae7f807b33ef09377821210240935f332253a7abc5a81e51fdf5a47c34d6b6735a1cfc8a2c08d27a668b14211d555addb43097e24d6122e4fd6eb36336a962c07465bbf558eda52d3381f3a8731316953ac9ec5a1621ddb5f93beacfaeb9a06ed666cd011e61d39471491d66ccdbacf99d42fcd8313f8e7625cc2700cf10c58006000d005b000000c41b098a50dda9bb69dd1b8fbc7e1d6a6d00426bb56a116f397aee87932d5a5dcaf58f5d35653926a46cfd0c7cae541dc5e9a0e092c7fe0373937164401ea504e79bea646aef3e0f16f82ba596e064bf2b2cc8528df217def0e6b8974ff2d7952dca23f00149d9b4189a26e057806a67f166922f06db4ce6e19cdaf26b1fa56a7b52b69794ca5624b7dee8f48eba85ae25559334a6af7439a0d58e3b238cb98d501cc026e13fc0269f68b83e006359e5a79f7916096d99fbe600a35a8b55205f631a0a2fe3f13938fdbe4cb259df8a7a69d00594b28249d1764d7b202230c0ca148f6efdfe3108fe38dfd34e5711df4bd741729e138c73faba648361fb53a772d70f8662818764f66302f3314ba96f7c175ec76242b5fb66ff2dd7e81a9bfddf8c58101b30c85fa65239218400300bb7cae9fe6dd4e5827af6c51f506a657aba798068b80283b55149491b49ea8db6c27ea283f0284410098268320e90a7a6508fa9d86f7cc74dfc42688d7e8281692b4f4a66654188f1ef99d1074291c751f57327c93bb1b411bab7e65aa8b26272e211367e80e903796ef0c705856941c9e14940f5925c6dfd7995d6769b7c788ad28125a487594560cd614132be9eb9f74b23f0412cc589ee152ed50adad3ad7722a0f67a3e523798e5fda6dd9eaf4e8407af3f8679efce7ed3fd7f1ff687ad45e2e769ea4cb12ec8eb4c9902b84cc5c4428181a4321379486852a809b0947c464fe5eb261c9d4b74bf0c85e0a92b87933e2bd0ff3538a882fc8460016c5964b963ac67040ab872c438d792c797a9cd57f0f6caea157c7866362dd4f41088f5d02e2bca6a07838a85f1cbef335e0e069641135b4c3e5a055f9fc501859c7c90ea1105faba48a9f6b5d58f6fc3ea487811c760b5848d0aae86fd6c482625087b6831873b26cdae442675fad68b5e904e4ba013fc9ae86f271290671b6c9b65ce00f40e11938384744bed5f4e6ec68e530eb89da516a6d032f979688821893f0920e8b2b51f47081270d0b209c875fa7817f375568e0e08a85b50c3e69a6c5935fda95c43732c2963071ea98cba4382403b95ffa88fcb8b7155685304d8021ba5ab6ce1fb98aea0ac742e69f6039506b4dbaa6af01a0a0dd683717d59373a88b602fc0f3165b1b7817af9490081239d1a2ecdf21b65023bc071fc18aae01ea888182f326969fda2f073219bb135ef632f67a83eb12deb8ee880e8f4bf217e077d83ae9fdbbd8ef4556c5ecd9de9a0387970766a1515ea10099d080eb0f3c31b542fdbb05e2359728c287cc38c98908a8335e2b2f0f32950639670be162075ec4711ca4396ecc32d803195f8992afd430c1e8f9de7810f4bd2708d55eccdf048f87e5e02040a572ec122934a6fcab35091fe94107bf1d1fc19cc28b60cb27ad86c5a2929f4d6781182164c18c86b04ae221746e952d5cf9a26dc9df51f2837bb0d13bdbba32fe810ec3fb6a985c277bc13f1ce5d23285e388ec1a30473d1d6437ed77ca1e42e6c41a6bb81185bf7e7880cbeb13c95ab547f3655787869f608d1e2fc1536dd67163104acbd961a632ce46dcb9ab1d79c7d77ea58c6caa462ca6caa7f4d9365cdcb3703a78d6ed4684c069bbcaf7f9e10f6377652f0bfce0a4204f1dc1dde6e1fcd5dd441749bd6479d90734426a59a749fd1d9c35651b79c21865bb261ad1cf776b4d6556160f1742e7c838824258fd547c98c1ff6967e36a68e2d1e238a582f2a0600a8fffd19d7166959bfdf1387911406b4bf8fdb7095d32eb9c286cf36499f15238ec7fe416b42c9240d6d25c4dd46a024127d688464d1d2ae1726587dd65a43e5133bec63e5b78bcac5b062d149ff1b0a65a73fcb0e0281ddfba3847d6b3170a85e74accce9cc4e5b724dd22ff236149df77f68b2c7511c86b51bf4b0c2d4b78755fe0433ac79480c77fbbdc6a8f388866cffc16f1c7fd28fdaac9649853c2aeb18c2bccd3a687f4854e93dae6fdba1ba7525e6a50ef1030897cbe0e44fc877b1709bf140f2a75c32bfcf3843705b8eced1591f7cf5f026a8a2768f0f98169044fa5e0787a70051ed03f013db08865e35bf492181707cacff3127ffe31ec99c35ebed947f1e6f20fea488399f424034a309b6b0f1dcf26a99346f3e36e004a02f31821c74012056649b7576c3609903ac934ddd1eb7578adaee500412870ac6d1ba0b179282a8def13eb50dd98c212cb4736928ba542eaf0a28c8b56c2977c13e9db017097e5f937f710c1f754e674a3dd014805e47c139a9849b41a9a704b82be90f48d3b6757334cd9f6dca805cfa93254b1e2d6a68865cca329eedafb9e0c73c158484e7d992c35e37cfbea8becaec8e1d358ea37ee757c4f5ce6b1bb1815c3c8d80dd8c97fec1b9d4618b38cfffcc2ae805e848c48a5847f5aca059a15f3b8b687483a8d95ef143544e2b8d0f00e90bc403695213aad03b9656e1a63f8905c22d1e89cd761768aeb0c610d95640ee26aabb9ec22261fc1c82f6596da0157518a48df88f6c65afbfda0ab3d6b1dd6485833ab895877b08c649916e39146f580ef33f524c33db12ff14e0d9595097e6c850894e3910d6fc14c80d3d049222d4b37182ffd0bd876ee93b4f46802f2c80cd7821acddad18560641436815648ad905cf56eba110e54617a9601ef04829cba95193aca589248a5a251c4324c4420ecf12ae04e4f5334c0c2c04e7eccac3466f7be1938668b68e67e2b43bef196729603bea1f5af2d959a49625c0a2304e79dba43f482ea91db3dcae842460f05754cb2f1cb26191d1015405bc5593e227cb3a4dd791027b69389ed99ed468b7fb19abc8923ed2d15bfeba7845c5bc47fafe2ba8d22c7ad17eaf348f9515d85108b08a17ebae461e5520cc54c667b4fc6ee6cf382082e8b51508264eeaa2c966f6d8c28d0be1b9e6757ef9d92499f5984a2ea22f75b0cef8320c3afff7fea3f68682d35cd0a8bd590e7a854e684f7e38362b8b63625ff13b56bbde27722f4b215e5e03e9ec22cc3312b4cb7d04a30118101e26e3ed0d432bead3971bbce729b619e3d6c0e41654837a633f68fea9655078b678f7cc023293ff5b14c1982d5fae0960f686855ff219e8289a865802a23a56383ee09931e0939b5ef5e63fcdc55b5b38882378f6bea2ddea534a7804815a847c9fe95c861be8ed9b34f2f26b0e74aa64e1bfd1be6a943fc7706e98469233a38a37e15635bcb9291ff488e460773ea4378cab865fc478923883961bcee5d71d329990ff3472d0779c1679f41f091437fa4e43bbc95c46a7585c747a77b2ca4f019cc5f65df463b7b0154fbacad87e9e0c5bc0b94227e661e1bd000fd154e4e4ac2d8ffb92cb1e562afd7ca8d5f093ad4ed0185bf1cb56ea1596e8da48e12885e4e13da282aa483cd8fd5cec3eb871711f12663539401f3deae877f51538c09de134600e1d262b808f2c4da5023c87252b27fbf79dbfb901e9966408195c8c2fd6d91833620d0b70ef69ddee6e672d135c0794cc3a42c6dab20756052f15ef26058a1cd01e7fe22d370f708d9dc8c369538e4eed407c4e34fac739dadf35d2ba19e0c25257272023a7aa25a9885ff95c03c52100b1289513cdb519498691c6b780dbcbf4b508e22c6ee708ba7bbe3c2ce961b54261c643d2cba2d2ce880231df714826d5bd45c57f4532fa48e22eade4fac92e03c92f506271285a157712d27dc9b42eed3314a59595705216e8225c946fc4193d42b1203f237fc3e35cd15e797d86f19a44a7e15f1064808ba4aed7004872ed1f5b691fc635b222f6e1d602a0134e87160432732b78e9df76980bbf42713e0508cc7635a605dd949d233a72b3b08f8a5ae9d81675df110993533abbea32c0c63b00961fbf3b6c6e80f086774b3a3ff4a210662d9a71cec43d2ee62ed2fdc56e3225a1f9466da00e1af3ed417ae24b5b5020d37ba949bc5f663a8d3f32b1a0662245711049bd2d03284bc2b6319be35e53e145c3f309b4f5e60ee2ecfe40a454c2b257e6cc80b8600d3bd642b8ccd2bd3c5d49b3de07be953dddfcac96c13019e53f52858defb4ca40da16d1371bdc2064c083586f56fa0dbb8cb6b60909753b8eb1aca6de192b8b21fbc0408f2effc44db01229bd559c74e3ed710859c8c142bbf78b4e3abb84dff73d6ffed99d0d694a13bf21cfdb856dedce5f740ffcd407ca3dea9354e978f8b1cb7cf06c70003997d3ebcd5fa38185698db7e8c184c8eb7b2640c22c0bc8ec51747cc0a0cc706349e548d2f8bd9858ac3962f8965da1742ee22fa31782e9c3d976ee8410075dd48b5850228872ba4510567a136ca1de43f810dad56440adc478c3c6bc160cc9d4c92f50e1ffb29a1c718f79d6123830b09995a71f76fb5fb925fcfd08f2885c74724195841edcf146fdd6ff3f96471ac0feb8ab7eaea640997573afb7c6768383710c60752c37155d52a0d472d4fd3ddcd18c559726257043944c536e36e5d569f09693d915c621e607df38ec29f0e4422613f4e5f45f286afde51f5079a1ee960000bc0a946cb5ccc225eb54f9a3cc113279642193f8369be5ffa1dd3dc42ac13bdee38029c53c8fe1d428116030893e7c49f42af0df6765e23aec30654875633023089fd3918b5390004c7d0812ba8fbfb2040e08abe08e39833c020ce5e5b77960565b1c0062605ce53530f54e0c65a0028df727660657694bc92dc3fc2b392cd0274fb576494118b37eb1efd6d304d45f4f101d6b211b0df806c411512dd2c0ffc3419144c09de70c2ad006b7f68e9a143bdbf2beeb0b3aeb177922e2a26be1d23355c76a05a6d303b2e16866dda6c8e21ca933593a3da91557050eb85c91bd175049a0da1b5651763951aeda3a971b477d6059ce262f21dd22f0b9fcae20a06fc7d3ecb3f56547fa92b512aabbd3d652854afa4837f6a7d8f72370d5c331d1b5d2d3788d05f1279bb5abe7b2ffb972e884c29954515d8aa114b74060f5d6ef8e72b1808c534b53534245f8278a315abb71425a5871839100ff261b167b04a37ed3d3ea8d18cd5d99f74bfee0edaff564f3ab4494f9132bd9d5a2a0f688a4398cd0ed9ba9ec6fe421338ab18ce8a7606c93535b7e629bb694741f7e5f3a1ce91c3248cdb5c4cd556ff09d22b2c65bb5f0a3dac47b089914d5903ad7638c82e6eb36c44dac04fc62b4fe841b01259a7cbba79895752f7e699ac0c8ee313aa6d618c41c5ccd76accc22eb693e3e69f5276537c645009340524f7f2bda0a4facd9b0cc9b3d4a152305211db838d3bdacd84cee76792c4c6ad9f6b1582b962d2ce037c8b2810fa589977b4bcc20adb295bd274df8f9e8d0993e7a0aec91bc1cef4f06c19a88bb3b583cc28e3ea824a21beae3736710a8f7513172a4bce7e6bd8a3117c606ae102533a97d54f8c9e727ae7e07a066cc2028fdccff77350f29a1288dd8e51d718024dae754eb35d32a3404ed2db6c0cc020fcfaad05199d227f019ca680b66e5e7d2f39c03117c3238eefacfed2b3af3ad43fd509172fc83076a40bc0b4bc0da26db657e4a068588e4c82d8574e25e2a53046e472be2c181463a516ba30a5d0fdfb64732e84baf9fc1360f052628e1877de983a4d3e7fdbb6c1029f5eaa7c90b059e7a4c7d2085e3d099e9c1158cbe5928554f0e1c9a3f9bdb3f9e7e0ca1b5e07fd31f6d8cd819bf093cf60ffce1fb0bbc4d4f9eee8159847c3f6fac0e71edd2143f221077ccb8c7cb543837cd661a68aeea5c365fb3473b5645428bb1b6601a060e3f4bc327b667a2ba94ddb761c14ee607cc0ca0a0c4ce8d19f86450da18f3d112509982aa5ee80ee21410129a7e72c2ddae7bfc0c2b95c80024935fde374d204e6223ed164ac05d584bd43caa66be566a63f39b0800de00", @ANYRES32, @ANYBLOB="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", @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x50d8}}, 0xc000) (async) close(0x3) (async) r6 = socket(0x10, 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x41071, 0xffffffffffffffff, 0x0) (async) ioctl$sock_SIOCBRDELBR(r6, 0x89a1, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) (async) sendmsg$NFC_CMD_FW_DOWNLOAD(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r3, 0x101, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x0) 30.806236003s ago: executing program 0 (id=4162): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x90, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0xfff1, 0xffff}, {0xfff1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x1fc16}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x3, 0x0, 0x3, 0x3, 0x8}, 0x5}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) (async) socket$inet(0x2, 0x5, 0x600000) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x34, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4) (async) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x40000) 27.628156977s ago: executing program 0 (id=4170): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x2, @private1, 0x28}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000040)="dc", 0x1}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="140000000000000029000000430000000800000000000000c80000000000000029000000040000002f150000000000000570d00e57facb7c88d46d46872602468f8835c7377b75ef0062fea10d356d1938ba00cc9ae797b9fe8a7737e2c88b1743c844fe8b2dc684a73e0c1183f753a151df98edaec2f969461b06d89f4b5225bdc49ac3c3d34ff18a2f64a3896af2152ff36d8d4cf7c9d527f4286146207446c8b904010f0738000000000c086b4b00000080000000000400000000000000010000000000000001000000000000000300000000000000010000000000000000140000000000000029000000340000000700000000000000280000000000000029000000390000002c02020900000000fe8000000000000000000000000000aa140000000000000029000000080000000300000000000000a80000000000000029000000360000008711000000000000050200090738000000020c02040009000000000000000100000000000000f2dd072e00000000090000000000000000000000000000000100000000000000c910fe800000000000000000000000000015002b00d15a0bd955e1288db6febfb75a1e9bb04b81de87f02e131ad30c1ac50a7e6d7522f3771c2499f37a87a1030001070000000000000000010000000000001400000000000000290000003400000003000000000000002000000000000000290000003600000011000000000000000502000800000000200000000000000029000000370000002b00000000000000c20400000e5a000048"], 0x280}}], 0x1, 0x880) shutdown(r0, 0x1) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ipvlan1\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x24040050) sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, 0x0, 0x40804) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000127bd7000fbdbdf250900000054000780080002000900000008000200fbffffff0c00040005000000000000000c000300020000000000000008000100080000000c00030200000000000000000c00751cc0cf7b12f05a00000800010000000000"], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x40040) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000b00)={0x0, 0x2}, &(0x7f0000000b40)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={r5, 0x8000, 0x6, 0x4, 0x4, 0x8}, 0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg0\x00'}) 26.895536793s ago: executing program 0 (id=4173): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x8, 0x4, 0x8, 0x1}, 0x48) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400ecff0f00ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1724000021200000240012800c0001006d6163766c616ef314000280080003000300000008"], 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000002) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c0009"], 0x4c}}, 0x4000040) sendmmsg(r0, &(0x7f0000000380), 0x4000000000001f2, 0xfc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010065727370616e000014000280050016000000000006000e0011"], 0x44}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x25000}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}]}]}, @IFLA_IFNAME={0x14, 0x3, 'sit0\x00'}]}, 0x44}}, 0x0) 20.757123849s ago: executing program 0 (id=4177): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2710, 0x0, &(0x7f0000000000)) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000004100010029bd70000400000003000000f5a419de100001800c001080050003"], 0x28}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x7ffffffe, 0x4, {0x0, 0x0, 0x0, 0x0, {0x5, 0x3}, {0x4, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x62f5}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000002700090025bd5cb881f28a200fd40000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 16.766499704s ago: executing program 6 (id=4201): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close(r2) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) socket(0x2a, 0x1, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, &(0x7f0000000480)="bad386dd", 0x4, 0x40, &(0x7f00000004c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @multicast}, 0x14) write(r0, &(0x7f00000000c0)="09000000010001", 0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ppoll(&(0x7f0000000540)=[{r6, 0x2002}, {r7, 0x1040}, {r8, 0x382}, {r2, 0x400}, {r2, 0x240}], 0x5, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0xfffffffffffffffb]}, 0x8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x28000, 0x0) ioctl$TUNSETVNETBE(r9, 0x400454de, &(0x7f0000000000)=0x1) 14.557587249s ago: executing program 6 (id=4208): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8bd2bd7df51170e6}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb4, r1, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}]}, @NL802154_ATTR_SEC_LEVEL={0x54, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x48800}, 0x44011) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002180)=ANY=[@ANYBLOB="b8000000290001000000000000080000ac1414bb000000000000000000000000fc00000000000000000000000000000000000000100000000200200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000ea4400000000000000000000000000000000000000000000000001000000000000000900000000000000020080ffffffffffffff000000000000010000000000000002"], 0xb8}, 0x1, 0x0, 0x0, 0x2404c831}, 0x0) 14.299881446s ago: executing program 6 (id=4210): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000900)=@filter={'filter\x00', 0xe, 0x4, 0x388, 0xffffffff, 0x1e8, 0xd0, 0x0, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1e8}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x5a38f54c, 0x3, 0x1, [0xd, 0x2, 0xe, 0x7fff, 0x4, 0x80, 0x9, 0x80, 0x4, 0xfffc, 0x5, 0x7ff, 0x4a7c, 0xfffe, 0x10, 0xfff9], 0x4}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1e8}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) socket$inet6(0xa, 0x3, 0xff) (async) r1 = socket$inet6(0xa, 0x3, 0xff) sendto$inet6(r1, &(0x7f0000000880)="60000000000800400000000000000000000000000000000100000000000000000000000000000001", 0x28, 0x0, &(0x7f00000008c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001c000100"/20, @ANYRES32=0x0, @ANYBLOB="f25cba91ffeb775900c487bfa39ec4eb0e3785c6f6765a173fa58290c42a7f8272f2d1a7f5368803e5590bfeb2b957066a534478443da87ce84e8e3e6a8f484860c54754c02ff5ce7e83a48ef345aee50460f33525ba70cecab955f844c2e57231c9c9f4ad9c477f793fbee6c3fa01713dcc28fd6b58c3eef719adf507"], 0x1c}}, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) (async) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) 13.744495272s ago: executing program 6 (id=4214): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="5c00000011006bec9e3be35c6e17ab31076b876c09000000ba0900ec150af3653c001ac0040002020800050003000a002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000200000000000000000800000000000000b00308ae6291211e5825279f68a752865b8bbd5781824f047566273a82dd17ec1f57572cb44bb51b8ccb02958f5503329505a5068668041a1af2f1015ce09ce73da6b4d03f07084942c816074fc0eb62a9138a0bf87f171452c313ca1cea7906ef7d43ffa01dad0ebd62e0a1e406f10a584373176987960032fd4b110ac38602c8298ce9bbaf"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x2000, @local}, 0x10) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000200)={r3, 0xff, 0x30}, 0xc) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x2000004, 0x200000006c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x10, 0xffffffffffffffff, 0xdfbd3000) 12.712648359s ago: executing program 6 (id=4224): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0x1d80, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e23}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061115c000000000006000000000000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x42, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) r4 = socket$inet(0xa, 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x63, &(0x7f0000000800)={'NETMAP\x00'}, &(0x7f0000000840)=0xfffffc2e) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r2, 0x139, 0x70bd22, 0x0, {{}, {@void, @val={0xffffff68, 0x99, {0xb9d4, 0x70}}}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x11d, 0x0, 0x1, [{0x4}]}]}, 0x30}}, 0x40090) (async) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg(r5, &(0x7f00000001c0)=[{{&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2, 0x4, {0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, 0xd19}}}, 0x80, &(0x7f00000002c0)}}, {{&(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3, 0x2, {0xa, 0x4e22, 0x4, @private2, 0x3}}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000003c0)="3ad88b5caf69ce0a43089f8336c001d3b28299e6b46fe8055150192e78bd8a5bf52c1d71f0d4cbfe77679141363d2f9abfdcaf7296d33140ba3572be83035403d4f811364d01f229677c76ba65c2228bf49e73dce29f0eee42b116630602c38399cdfd029495fa225a59f9f40ae60c56ea4146b0e2c0c73c4bd1f1030014143e", 0x80}], 0x1}}], 0x2, 0x4004000) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000080)={0x2, 0xffffffffffffffff}, &(0x7f00000000c0)=0xc) getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, &(0x7f0000000100)={'nat\x00', 0x0, [0x5, 0xfffffff8, 0x3, 0x8ceb, 0x40]}, &(0x7f0000000180)=0x54) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="2c000000520000a140b0f6c9640a9ce6", @ANYRES32=r1, @ANYBLOB="08000500f40a00000800020007000000000000"], 0x2c}}, 0x20040040) 12.308069213s ago: executing program 6 (id=4226): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x21, 0x0, 0x0, 0x5, 0x400, 0xffffffffffffffff, 0x26b, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x18000000}, 0x50) (async) socket$inet6(0xa, 0x3, 0xffffffff) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) (rerun: 32) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="ad43000000000000600004"], 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) (async, rerun: 64) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}]}, 0x24}}, 0x800) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711201000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 6.10260324s ago: executing program 7 (id=4250): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, 0x0, 0x4008001) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syzkaller1\x00', 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000380)=@broute={'broute\x00', 0x20, 0x5, 0x430, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000e80], 0x0, 0x0, &(0x7f0000000400)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x3, 0x7, 0x8914, 'vlan0\x00', 'veth0_to_team\x00', 'ip6gre0\x00', 'dvmrp0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, [0xff, 0x0, 0xff], @link_local, [0x0, 0xff, 0x0, 0xff, 0xff], 0x6e, 0x70, 0x70, 0xa8, [], [], @common=@dnat={'dnat\x00', 0x10, {{@broadcast, 0xffffffff}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x2, [{0x9, 0x0, 0x6004, 'pimreg0\x00', 'veth1_virt_wifi\x00', '\x00', 'team0\x00', @random="46aafcc3cd06", [0x0, 0x0, 0xff, 0xff, 0xff], @empty, [0xff, 0xff, 0xff, 0xff], 0x0, 0x70, 0x70, 0xc0, [], [], @common=@log={'log\x00', 0x28, {{0xc4, "0eda5d467cde600e4b09dcbb068dfecb4c27ea8d6481ec1680a6cb53e5c4", 0xb}}}}, {0x5, 0x8, 0x4305, 'veth0_to_batadv\x00', 'bridge_slave_1\x00', 'wlan1\x00', 'pimreg\x00', @multicast, [0x0, 0x0, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x0, 0x70, 0x70, 0xe8, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xcdb7, 0x7, 0x0, 0x0, "36699c45c98ea2561510bc5af0e8ab823a9815a16c24929eba27cc5ed8e8e1a5723cbd8352b08035b68c3bd52a5300b175ba19c69d9c5a5ed4b527f2f8717c9d"}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe, 0x2, [{0x3, 0x1, 0xc, 'veth0_to_batadv\x00', 'batadv_slave_1\x00', 'veth0\x00', 'veth0\x00', @empty, [0xff, 0x0, 0x0, 0xff, 0xff], @remote, [0xff, 0x0, 0x0, 0x0, 0x0, 0xff], 0x0, 0x70, 0x70, 0xa8, [], [], @common=@mark={'mark\x00', 0x10, {{0xffffffc0, 0xffffffffffffffff}}}}, {0x9, 0x21, 0x16, 'pimreg1\x00', 'batadv_slave_0\x00', 'virt_wifi0\x00', 'ip6erspan0\x00', @multicast, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], @remote, [0xff, 0x0, 0x0, 0x0, 0x0, 0xff], 0x0, 0x70, 0x70, 0xa8, [], [], @common=@dnat={'dnat\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, 0xffffffffffffffff}}}}]}]}, 0x4a8) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x3}, {0xffff, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8, 0xfff, 0x8, 0x7, 0xccb}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="0800080000030600cdfd2f00010045a3001c0063000040119078fd000104ffffff"], 0x2a) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002d00)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000003000000010000000000000e02000000000000000000000001000084000000000000000003000000000000210000000000000006040000000061"], 0x0, 0x4f, 0x0, 0x8}, 0x20) 5.29003288s ago: executing program 35 (id=4177): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2710, 0x0, &(0x7f0000000000)) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000004100010029bd70000400000003000000f5a419de100001800c001080050003"], 0x28}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x7ffffffe, 0x4, {0x0, 0x0, 0x0, 0x0, {0x5, 0x3}, {0x4, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x62f5}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000002700090025bd5cb881f28a200fd40000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.237868218s ago: executing program 4 (id=4255): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000004000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200"], 0x0}, 0x94) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.017989475s ago: executing program 7 (id=4256): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400001d000080000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1, @ANYBLOB="0800040036ee"], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) socket$unix(0x1, 0x1, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) sendmmsg$unix(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="42bba89254a0e5cc2a2a98c33962c947035520bb97519826718350a4ae69ce61e5463a87fffa28b71917521950e5dcd0576f65519717e0ef1d05e0b22e6cbd869f1a5fdb8078962d717e7692ab23", 0x4e}], 0x1, 0x0, 0x0, 0x4}}, {{&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)="87bd9e1664b66b5149d5dc139846438ee67b317460430790007c422545fe13d73bed326891fbf3b9fdc060dc7efd5104a7fcd92286742456d86e9339fdebb460bab56a9f6786037b3cb02d", 0x4b}, {&(0x7f0000000380)="f7f175784e2b63115b0eb61e15731a36c0a8fa9c8842f38c6afec11927cc94c2f06af97e8aef4267e0bdf80bc66fcdfb07a53d2fa30a977b2a12467714013615e7d210fc585caa417e9d2f9d6726c0707f3d20d106a03dca54505c9175c5b8b658338a2cefcb8139c2293aad0a6012851e7bdebdb830a64b0701e9e48e6b3a", 0x7f}, {0xffffffffffffffff}, {&(0x7f0000000400)="881220c7dc2d4f258d9556b8c0a3fb5ec4a78b9e35ea5afca661cfd76eb9d7d4561f73d0bfedeabd071afc9e5ea11d468e40b8820a761edf76061df0274f93e588b84773e6660c9aa154fa47af8b5ebd13aebef2c7e9d4f0a11e96c4a3e904fc45b12b11289e2492a06e347d575fa22f8deeaa343c36017f6658fcbcd7374d4bef5a0b919b3826162163c2208331604d01adf82d6460bbfaf5e2ec314387583a34b7a2f03a4d1dd528c839ea7bc1ddd9465760de352ff1bcdc9bd3a0eafadb92040a2fa125533a5829f02352a9cb9a2ffb4ed9559d0154348eb47dfdf25a1c7e9f49ebb968a109398befbe82273dff7cdb9937e2353c1f1b02ea0a1c", 0xfc}, {&(0x7f0000000500)="02655d9e63fede89f2eb2de35fb08a15ce9ce40cd26d36dc1ffc3ff3fc7fccbb66403df9d9e1f093ec5146469c0199529b0db8e8bad3140ea65458b22210e1f1c2f4f70f1a6750b1a5df712ed40a3ea2ac356e9417cb56cc5e31b835e965b46b11ec806b4492e149af711ab4c335225f97a7699a05deb297411195e117fd899a184b1806fa0f5fbbb611bb", 0x8b}], 0x5, 0x0, 0x0, 0xc004}}], 0x2, 0x4808) 3.755075689s ago: executing program 4 (id=4258): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x14, 0x0, &(0x7f0000000240)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0xffffffff, 0x0, 0x2, 0x0, &(0x7f00000002c0)="010a", 0x0}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="440000001f0001"], 0x44}], 0x1}, 0x0) 3.631571758s ago: executing program 7 (id=4259): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001040)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f00000011c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x3, 0x0, r1}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000380)=0x14) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuacct.usage_all\x00', 0x0, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f0000000480)=0x79, 0x4) bind$inet(r6, &(0x7f00000004c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000500)={0x1, &(0x7f0000000540)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000000580)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000005c0)='bbr', 0x3) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendmmsg(r6, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000840)="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", 0x105}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000009c0)="b826c4139a86353cbda69434b1660c9490c1dce0068251193a8d0bbe9ef1d234afe76884532fc1418ff5250c917485f0ff345b39a90da2123a68e59c81b4e1291b7fa7c753d100d8ac26326a5828673dbb1f284799a2655eb91a1d1d35f4adc7c85920b40ba4c90bcbe564bad4422f2c1df8aab220851f24feb537bc74c14c70c096f4", 0x83}, {0x0}, {&(0x7f0000000a80)="99ddc8b5582b558a3c0366c34c19fb5e63050b060f8c573ef4b40a4f91e798", 0x1f}], 0x3}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b45621ffc5c4e0f27078ec7e3c62ed7d3c068447411588cb9041b064e6a3f579102f0186", 0x24}, {&(0x7f0000000b40)="98b00967c5c7904da7c6a62237c944f98187705d27ec2e87121ee503bb029dec67124692e4438e228f72bcfae7e07eeaf3b852086a93b875080cf4181532b7d7685cc71acff78b2a50a8685f487267f1ad7e4197bf9ec3ffc2e57a8bd6bac61b0e09e610c92d57c7cd482583d053f748e1176b4c63df7f34e9985f66ab1a1b3195be50d2a1f75f67350c05a766b12b0a74a55af4d13421a740b7427e556eeb926f66fa51be722882b51a1d994a3d8399ea598d9426171d119f70f42e1808a18a9207264c57af29f2e43ae70110758d0184910d57ee7abe042be58159301a3fc51b4aa32a5e752d017b89ae8d70959b271345bd5a27d58659e5a8d858c1923c8821ffa65d235af453f86f810ffc61d45c658dac96d4f20335ab7edd445d52433b307d16478e3578d96cffaf3bdc40d9c3e2c67a892cce2e8409be7ff568cfba1b9ca5feead69388f90d986f45246000e48f83b1f8e363bd21a753067660057610e40ef5d87e095059a389718a772ef4205691bbe55e55d053c6c0bd599b0a27dcc5d1b9a327bd365f60ad8a880566ef5705a3a016fcffaab758235851456b8084cd5ea851e0cc214e468e1d2a6e882904bbc099a9b819c1826421e5f8e4c03c9cde98ccfacfb1f1a67084e1e1d5c9617fece7719dbf271f50e9a8bbf21bf0a194c34782726a2c61bd24816055e0a6dc3d1bd1942bb2d201ad6fe75796abe456a16b6c9533ab4e51d1d02da67c150f4792aa21c46b3e15cb6c4076ace3fd7a9edae0accfc21fa08245e51065803ad762733db70a8db608c62533a0892f900870bdf0c682ccfccf9f75ab2b47311143994bef6d69834406c2134385a0d1176241989498eb77bf74b164e84e763e3fa4fef898556c1cc5ad916377888d2c8d141a5c339d23a028ed785fc582bba53a19f51b9517d92337df333f6c55c69fbbbc3d58b3ccbd6f0e8729fa5fc083a0c4ad5d2e020ff668efa3cbe434c119f3e534a4370da2d062d60fe08ecb8aa5b54cdb091eb349e42fda4ee6db3fcfeb8cfcf0fbf73d3cba12941e8f545cef4f22a347fa15391d3b54a68cd3a2756700b5c4cc384ba31522539eda54b6c78c80a2d32e7e41fbf800bb4ac95ff141c45bbf84b79ada9ad06e1b1a6707afa62777bc598a7b236c", 0x331}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000ec0)="2931cdd6db6a31d8b5abff003588734eef29a71cd1663841ba199571cf69d1621805332a7bab7fcd740baf11ab77e8773cb58bc2c759e0050698a15af71f0c43d332aed4afb73d201ce71f6b9af56b7417571d0832afcf8754dc2c9c4c48cc17d20cb02fb4988fbb3e28fcab5d907429cce981b7395016301ccf0767219079ee35d9d558eef0bada638347ad45f2c8afb9451cb9d1", 0x95}], 0x1}}, {{0x0, 0x0, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=[{0x10, 0x1, 0x7}, {0x50, 0x1, 0x2, "dab4e380ed20154c266ae9f665adfeb4ca763f164e7dc2fb2cf99482ccd365df982b1ae68d1953de92daca1cedb1a0f28d61e0cba6b94a57e3301f9ab724a927"}, {0x18, 0x117, 0x3, "697a5c98"}], 0x78}}, {{0x0, 0x0, &(0x7f0000001040)}}, {{0x0, 0x0, &(0x7f0000001080)}}], 0x7, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@arena={0x21, 0x0, 0x0, 0x2f, 0x20400, r1, 0x2, '\x00', r4, r5, 0x5, 0x4}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000f80)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001040), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000001080)='net_prio.prioidx\x00', 0x0, 0x0) preadv(r8, &(0x7f00000010c0)=[{&(0x7f0000001100)=""/134, 0x86}], 0x1, 0x0, 0x0) sendmsg(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="5500000018007f03c0fe15b282a380930a50000248a8430b916d0200390009002300ff6c0200000015000500fc01ffdd070b566881b38432009b3100b125ca997b5fdf13090200fb572fbc100800000400240200e2", 0x55}], 0x1}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$kcm(0x2, 0xf, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000200)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000240)="0d1a000200000065581602720e1cd76e81e30f5da8b98541cce84453330b9ff2b966c2db25a6ed8d1867efd9804c7d3dbf8dfe53b78da18093cea1176bfbe9", 0x3f}], 0x2) 3.370870962s ago: executing program 4 (id=4261): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000400), r0) (async) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000440)=@req3={0x10000, 0x1, 0x100, 0x100, 0x100, 0x3, 0x4}, 0x1c) write(0xffffffffffffffff, &(0x7f0000000480)="050001", 0x3) (async, rerun: 32) sendmsg$NET_DM_CMD_START(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x1c, r1, 0x1, 0x0, 0x0, {0x2}}, 0x1c}}, 0x0) (async, rerun: 32) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x30, 0xffffffffffffffff, 0xe674c000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) socket(0x1b, 0x5, 0x80000001) (async, rerun: 64) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="580000001000030426bd7000fbdbdf2500000000266bf11d3bc23480619157bac523128960cd5f3b0577c41cdf33a0a2dbfb65fef8d193", @ANYRES32=0x0, @ANYBLOB="43110b00000000002400128009000100766c616e000000001400028006000100010000000600050088a8000008000500", @ANYRES32=r6, @ANYBLOB="0a000100aaaaaaaaaabb0000"], 0x58}, 0x1, 0x0, 0x0, 0x20000600}, 0x40) (async) r7 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@local, 0x4e23, 0x3, 0x4e21, 0x40, 0x0, 0x80, 0x4198883cdfb43ce3, 0x62, r6, r7}, {0x8000000000000000, 0x800, 0x5, 0x6, 0x8, 0x4, 0x8, 0x3}, {0x7fff, 0x0, 0x8}, 0x5e13a55e, 0x6e6bb0, 0x2, 0x1, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d5, 0x2b}, 0x2, @in=@multicast2, 0x3507, 0x0, 0x3, 0x5, 0x2c51, 0x9735295, 0x3}}, 0xe8) (async, rerun: 32) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async, rerun: 32) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @any, 0x2}, 0xc) 2.763059036s ago: executing program 7 (id=4262): setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000000)=0x1, 0x4) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@empty, @loopback, 0x0, "353d901793aa02ac198409f5dc6e449aabb4937b3b8c300827b196e62295f787", 0x8, 0xfffffffe, 0xfffffffc, 0x7}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0x0, "6a92cdb1fc7757e3c4111b635943e28164c773b1fc81a7a15c04cbde7ee390ef", 0x36ee6c20, 0x0, 0x0, 0x8}, 0x3c) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000001c0)={r0, &(0x7f00000000c0)='/\x00', 0x200043, &(0x7f0000000100)={@align=0xa, {0x8001, 0x3, 0x5, 0x31d}}, 0xa5ab, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0xcbed}) ioctl$SIOCGSKNS(r1, 0x894c, &(0x7f0000000200)={'pimreg1\x00', 0x600}) accept4$alg(r1, 0x0, 0x0, 0x80000) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000240), 0x4) ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f0000000280)=0x7) openat$cgroup_type(r1, &(0x7f00000002c0), 0x2, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000300), 0x4) r3 = getpid() write$cgroup_pid(r1, &(0x7f0000000340)=r3, 0x12) r4 = accept(r2, &(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @private0}, &(0x7f0000000400)=0x80) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r4, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r5, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2f, 0x1f}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000005}, 0x20000001) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x24000000) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000006c0)={0x0, {0x2, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e21, @private=0xa010102}, {0x2, 0x4e21, @local}, 0x89, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000680)='veth1_vlan\x00', 0x1, 0x1}) syz_80211_inject_frame(&(0x7f0000000740)=@broadcast, &(0x7f0000000780)=@ctrl_frame=@cts={{}, {0x4}}, 0xa) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f00000007c0)={@remote, @dev={0xac, 0x14, 0x14, 0x31}, 0xffffffffffffffff, "a8e4c3b1931eb6a89218f1d68fd388e6b749e25e1f8708b3515a8dedfa42c00b", 0x1, 0x4, 0x7ff, 0x9000000}, 0x3c) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0x98, r5, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x1e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x46, 0x33, @mgmt_frame=@action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x1}, {0xc}, @broadcast, @device_a, @from_mac=@broadcast, {0xc, 0x2}}, @sp_mp_open={0xf, 0x1, {0x4900, {0x1, 0x8, [{0x1}, {0x18, 0x1}, {0x9}, {0x36}, {0x48}, {0x1b}, {}, {0xc}]}, @void, @val={0x2d, 0x1a, {0x300, 0x2, 0x6, 0x0, {0x2, 0xec5, 0x0, 0x7, 0x0, 0x0, 0x1, 0x3}, 0x1, 0x2, 0x10}}}}}}]}, 0x98}, 0x1, 0x0, 0x0, 0x800}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000980)={'syz_tun\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000009c0)={'vlan1\x00'}) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000b00)={r2, &(0x7f0000000a00)='),\x00', 0x610643, &(0x7f0000000a40)={@align=0x6, {0x986, 0xc7e, 0x9, 0xfffffffffffffff8}}, 0x4cd20eee, &(0x7f0000000a80)={@_ha_fsid}, &(0x7f0000000ac0)=0x7}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r7, 0x8982, &(0x7f0000000b40)={0x8, 'pim6reg0\x00', {'macvtap0\x00'}, 0x40}) connect$llc(r4, &(0x7f0000000b80)={0x1a, 0x30c, 0x5, 0x2, 0x39, 0x0, @local}, 0x10) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r7, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x10, 0x1405, 0x800, 0x70bd2b, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x20000050) 2.570553739s ago: executing program 5 (id=4263): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40c0}, 0x44010) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"/3432], &(0x7f0000000340)='GPL\x00'}, 0x48) 2.19601843s ago: executing program 5 (id=4264): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[], 0x44}}, 0x0) 2.155005382s ago: executing program 4 (id=4265): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xe8001, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000380)=[{&(0x7f00000003c0)='*', 0x1}, {&(0x7f0000000400)="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", 0xf01}], 0x2, 0x1) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000001340)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001580)=@ipv6_newrule={0x38, 0x20, 0x2d2c6d60ea1da725, 0x70bd26, 0x25dfdbfc, {0xa, 0x0, 0x0, 0xcd, 0xfe, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}, @FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'team0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008005}, 0x44) splice(r2, 0x0, r5, 0x0, 0x10000000000066, 0xa) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000015c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r7, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xb}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24008001}, 0x800) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r9 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f00000000c0)={0x0, 'syzkaller1\x00'}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000001400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r10, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000014c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01022dbd7400febcc5b29500b4b608000300", @ANYRES32=r13, @ANYBLOB="34007a800c0003003084a0f95e235fa1"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x20008004) ioctl$TUNSETLINK(r1, 0x400454cd, 0x337) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000410001002a007000040000000100000004004480140001800d00108006000a003a000000e10000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x4060000}, 0x4008094) 1.85147076s ago: executing program 5 (id=4266): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@gettaction={0x54, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x4048801) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000680)='/', 0x1}, {&(0x7f00000006c0)='\f', 0x1}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) setsockopt$packet_int(r0, 0x107, 0x12, &(0x7f0000000700)=0x3, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x2a00}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x16, 0xc, &(0x7f00000009c0)=ANY=[], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000ac0)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="070000000000000000000800000008000200000000000c0099000300000002"], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000500)='./cgroup/cgroup.procs\x00', &(0x7f0000000540)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={r6, 0x20, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.727698405s ago: executing program 7 (id=4267): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) socket$netlink(0x10, 0x3, 0x5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="a80200003e000701feffffff00000000017c0000040042808802018006000600800a00007b02018020ef82972c4a888fa13836e811c4cd03b722b4ceca8be06b765000fcffffffffffff7eb6b5009a881fd61885956a03d9a9dc8452516454a3d167abf84c778c4df8237c0c0860693c5060dfea16df72653289de5ae7f1f3a2746c7e0900000011b9b91ed5687f850c00c8007d25212b2b4a2d000800a500", @ANYRES32=r3, @ANYBLOB="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"], 0x2a8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0xc, 0x3, &(0x7f0000000980)=@framed={{0x6e, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x82}}, &(0x7f00000009c0)='GPL\x00'}, 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x558}}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000004c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000580)={0x48, 0xd, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) ioctl$TUNSETLINK(r0, 0x400454cd, 0x337) 1.127510788s ago: executing program 4 (id=4268): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$phonet_pipe(0x23, 0x805, 0x2) connect$pppoe(r2, &(0x7f0000000640)={0x18, 0x0, {0x0, @random="76bcb3043713", 'caif0\x00'}}, 0x1e) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x40}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000140)={0x0, 'veth1_to_hsr\x00', {0x1}}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000440)={{r5, &(0x7f0000000200)='.*!\x00', 0x240080, &(0x7f0000000240)={@_ha_fsid={[0x9, 0x9]}, {0x1, 0x8000, 0x401, 0x800}}, 0x6a6, &(0x7f0000000280), &(0x7f00000002c0)=0x1}, {[0x2, 0x1, 0x80000001, 0x62]}, 0x3, 0xa5, &(0x7f0000000300)=""/165}) sendmsg$NFT_BATCH(r8, &(0x7f0000000a80)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x1d0}, 0x1, 0x0, 0x0, 0x4000080}, 0x10) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) write$tun(r1, &(0x7f00000001c0)={@val={0x0, 0x22f0}, @void, @arp=@generic={0x303, 0x8, 0x6, 0xb, 0x3, @random="dfea779a7f98", "46d07cdb0c761328f308aa", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, "b68759d03385"}}, 0x29) 1.044537713s ago: executing program 5 (id=4269): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) ioctl$XFS_IOC_FSGEOMETRY(r0, 0x8100587e, &(0x7f0000000000)) syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) ioctl$FIOCLEX(r0, 0x5451) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000140)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.io_merged\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r2, 0x300, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9, 0x13}}}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0xb}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x10) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$FS_IOC_SETFSLABEL(r4, 0x41009432, &(0x7f00000003c0)="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") ioctl$XFS_IOC_FSGROWFSDATA(r4, 0x4010586e, &(0x7f00000004c0)={0xf, 0x71}) ioctl$XFS_IOC_GET_RESBLKS(r1, 0x80105873, &(0x7f0000000500)) ioctl$XFS_IOC_FD_TO_HANDLE(r4, 0xc038586a, &(0x7f0000000640)={r4, &(0x7f0000000540)='\x01\x01\x01\x01\x01\x01', 0x208000, &(0x7f0000000580)={@align, {0x4, 0xe2a9, 0xb894, 0x40}}, 0xffffff6a, &(0x7f00000005c0), &(0x7f0000000600)=0x8000}) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000680), 0x4) ioctl$XFS_IOC_EXCHANGE_RANGE(r1, 0x40285881, &(0x7f00000006c0)={r6, 0x0, 0x6, 0x8, 0x4, 0xf}) pipe(&(0x7f0000000700)={0xffffffffffffffff}) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r7, 0x29, 0x37, &(0x7f0000000740)={0x21, 0x5, '\x00', [@ra={0x5, 0x2, 0x5}, @pad1, @calipso={0x7, 0x18, {0x0, 0x4, 0x9, 0x6, [0x2, 0x2]}}, @jumbo={0xc2, 0x4, 0x2}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, 0x38) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r7, 0x8983, &(0x7f0000000780)) ioctl$EXT4_IOC_CHECKPOINT(r5, 0x4004662b, &(0x7f00000007c0)=0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000800)=0x1, 0x4) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000840)={@private0, 0x0}, &(0x7f0000000880)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000008c0)={@mcast1, 0x7a, r8}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000900)={0x1, @in={{0x2, 0x4e21, @private=0xa010102}}, [0x8, 0xdbfd, 0x800, 0x9, 0x100000001, 0x5c, 0x4091, 0xd6b0, 0x6, 0x0, 0x2, 0x9, 0x2, 0x2, 0x85]}, &(0x7f0000000a00)=0x100) getsockopt$inet_sctp6_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000000a40)=@assoc_id=r9, &(0x7f0000000a80)=0x4) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000ac0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x49, r8}) ioctl$PPPIOCUNBRIDGECHAN(r4, 0x7434) 735.200073ms ago: executing program 7 (id=4270): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) (async, rerun: 64) r1 = socket$can_bcm(0x1d, 0x2, 0x2) (async, rerun: 64) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r2, &(0x7f0000000740)={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x63e6}, 0x1c) sendmsg$inet6(r2, &(0x7f0000000780)={&(0x7f00000007c0)={0xa, 0x4e21, 0x2, @mcast1, 0x49}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000840)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000880)=ANY=[], 0x28}, 0x400c000) (async) connect$can_bcm(r1, &(0x7f0000000380), 0x10) (async) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="0200000024000000040000e010000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="040000600100000001000060050200001c16338a1f503ff0"], 0x48}, 0x1, 0x0, 0x0, 0x4008800}, 0x4008001) (async, rerun: 32) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) (async, rerun: 32) r4 = socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3e, 0x2) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r6, 0x89ec, &(0x7f00000006c0)={0x4, 0x6}) (async, rerun: 64) r7 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0xc, &(0x7f0000000080)=0x4, 0x4) (async) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x890, &(0x7f0000000180)={0x11, 0x8100, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) r8 = socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f00000008c0)={0xa, 0x14e24, 0x1000}, 0x1c) (async) connect$inet6(r10, &(0x7f0000000900)={0xa, 0x4e24, 0x0, @rand_addr, 0x7fffffd}, 0x1c) sendmmsg$inet6(r10, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc8040) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x4040) (async) recvmmsg(r11, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f0000002a80)=""/193, 0xc1}, {&(0x7f0000002b80)=""/207, 0xcf}, {&(0x7f0000002c80)=""/98, 0x62}, {&(0x7f0000002d00)=""/57, 0x39}, {&(0x7f0000002d40)=""/196, 0xc4}, {&(0x7f0000002e40)=""/119, 0x77}, {&(0x7f0000002ec0)=""/191, 0xbf}, {&(0x7f0000002f80)=""/228, 0xe4}], 0x9}, 0xb}, {{0x0, 0x0, 0x0}}], 0x2, 0x40000102, 0x0) splice(r10, 0x0, r9, 0x0, 0x7ffff000, 0x6) write(r10, &(0x7f0000000980)="02ceb35c11dc56bd55c3bbdfa167c3299550e997c0ffbccf82b610c40dcc546c011243c04013dbe91e63bf4cba855526ed3cbca892396f8304f5ac00c49cc337ed769a5888ac6e89eb51", 0x4a) (async, rerun: 32) sendmsg$key(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="020f000015000000000000ee922c229f868e5f06b000000000000800120000000200000000000104000006000000000000000000000000000000ac1414aa000000000000000000000000fe80000000000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000aa000000000000000005000600000000000a00000100000000fe8000000000000000000000000000ff000000000000"], 0xa8}}, 0x0) (rerun: 32) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000042000106"], 0x1c}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f0000000c00)=ANY=[@ANYBLOB="180000004f0c0000000000010ebfffff81166e500000000095b3feb8dea4082539264554261f8ba18900000000000000e39d66697d0fdcc5897182491765e1bf0f457086735866a90bfe0db7794579c01308a3fbfcc1d8f42062cb5b2b000a34e07cc5dd7b11ee068f95152d0a1736ea0b49c46850edc40a2763c62f530b846e6004ed0ff73ebc2edd08d7cbc8795a7195"], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 680.392376ms ago: executing program 5 (id=4271): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000000540)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd22, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc, 0xf}, {}, {0xfff1, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x38, 0x2, [@TCA_FW_ACT={0x34, 0x4, [@m_ctinfo={0x30, 0xe, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet6_udp_encap(r0, 0x11, 0x68, &(0x7f0000000080)=0x5, 0x4) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x2, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000000540)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd22, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc, 0xf}, {}, {0xfff1, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x38, 0x2, [@TCA_FW_ACT={0x34, 0x4, [@m_ctinfo={0x30, 0xe, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x8848}, 0x80) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) (async) setsockopt$inet6_udp_encap(r0, 0x11, 0x68, &(0x7f0000000080)=0x5, 0x4) (async) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x2, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) (async) 247.716598ms ago: executing program 5 (id=4272): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000340)={'nat\x00', 0x0, 0x0, 0x90, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x600, 0x0, 0x0}, &(0x7f00000003c0)=0x108) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0xfffffffffffffe8e, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001c00010d000000000000000007000800", @ANYRES32=r4, @ANYBLOB="80000200080001007f0000010a0002"], 0x30}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0xffffffffffffffef, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x80}, 0x1, 0x0, 0x0, 0x20040851}, 0x4048100) socket$inet_tcp(0x2, 0x1, 0x0) 0s ago: executing program 4 (id=4273): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) accept4(r0, 0x0, 0x0, 0x80800) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x1437c0b97b9646a5, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15, 0x3028}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40000000100039040000000003000000000000000dc18caf37668a79ba5c6c5d4daf34952440a1b477fdb26ec9ec53a0335031f7f381895983619d78102d533f0e4e7dda6381c6647bec0b91ca4ba1ca858c94ff4d4cc475390d3be87eddc24c32cbc18a03d1b91a77e4e4546bdcb9045b7c7a516fae2151cb9d27850cea0e6645fc3ca3768b0890f8bbe6fa516ced5c5910", @ANYRES32=0x0, @ANYBLOB="01980000000000001800128008000100677265000c00028008000700ac1414aa0800040001010000"], 0x40}, 0x1, 0x0, 0x0, 0x2000c801}, 0x4) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="34010000", @ANYRES16=r4, @ANYBLOB="0100000000003fc14d7a0100000004000480080002000100000000000000000400088008010c8054000b800800090000000000080009000000000008000a0000000000080009000000000008000a00000000000800090000000009"], 0x134}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), r7) r9 = socket$kcm(0x23, 0x2, 0x0) r10 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000c00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x130, 0x1c8, 0x260, 0x2f8, 0x98, 0x130, 0x1c8, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) syz_emit_ethernet(0x6a, &(0x7f0000001000)={@broadcast, @random="e8344208f18e", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x7d, [0x4]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x803]}, {}, {0x8, 0x88be, 0x3, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x8}}}}}}}}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x541b, &(0x7f0000000440)) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x20, r8, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x20}}, 0x0) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r1) socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) r13 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r13, 0x800442d2, &(0x7f0000000500)={0x0, 0x0}) setsockopt$inet6_tcp_TCP_ULP(r12, 0x6, 0x1f, &(0x7f0000000140), 0x3) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="642e93df", @ANYRES16=r11, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) kernel console output (not intermixed with test programs): r parsing attributes in process `syz.3.3361'. [ 408.439585][T18612] netlink: 'syz.1.3364': attribute type 1 has an invalid length. [ 408.496749][ C1] net_ratelimit: 6474 callbacks suppressed [ 408.496772][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.498325][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.498784][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.499249][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.499715][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 408.500174][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 408.501808][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.503476][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.503949][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.504419][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.249219][T18623] nbd1: detected capacity change from 0 to 274877906944 [ 409.406905][T18634] nbd2: detected capacity change from 0 to 274877906944 [ 409.628083][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.634103][ T5617] block nbd1: Receive control failed (result -104) [ 409.651390][ T5637] block nbd2: Receive control failed (result -32) [ 409.778141][T15100] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.779809][T15010] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.779857][T15010] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.021028][T18646] syzkaller0: entered promiscuous mode [ 410.021067][T18646] syzkaller0: entered allmulticast mode [ 411.506774][T18701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3381'. [ 411.946625][T17934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.140608][T18713] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3384'. [ 412.201337][T17934] veth0_vlan: entered promiscuous mode [ 412.307155][T17934] veth1_vlan: entered promiscuous mode [ 412.607777][T17934] veth0_macvtap: entered promiscuous mode [ 412.641564][T17934] veth1_macvtap: entered promiscuous mode [ 412.794083][T17934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.833495][T17934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.848187][T18734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3390'. [ 413.000752][T15010] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.002255][T15008] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.002300][T15008] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.002335][T15008] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.352735][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.352760][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.505810][ C1] net_ratelimit: 6371 callbacks suppressed [ 413.505853][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 413.506307][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.506805][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.507250][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.507716][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 413.508145][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 413.509632][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.511120][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 413.511557][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.512037][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 415.484718][T18777] syzkaller0: entered promiscuous mode [ 415.484827][T18777] syzkaller0: entered allmulticast mode [ 415.512747][T15008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.512775][T15008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.734569][T18788] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3402'. [ 416.565739][T18793] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 418.519694][ C1] net_ratelimit: 7488 callbacks suppressed [ 418.519720][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 418.520116][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 418.521090][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.521363][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 418.522336][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 418.522634][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.522967][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.523371][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.523777][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 418.524156][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 420.586611][T18811] veth0: entered promiscuous mode [ 421.227663][ T5637] Bluetooth: hci5: Malformed Event: 0x13 [ 421.349416][T18835] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3413'. [ 421.352664][T18837] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3413'. [ 421.476053][T18808] veth0: left promiscuous mode [ 421.500959][T18835] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3413'. [ 421.525633][T18834] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3413'. [ 421.843125][T18843] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3414'. [ 421.875240][T18843] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3414'. [ 422.452769][T18857] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3420'. [ 422.791795][T18857] netlink: 'syz.0.3420': attribute type 5 has an invalid length. [ 423.068049][T18872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3423'. [ 423.154141][T18872] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3423'. [ 423.187986][T18878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3423'. [ 423.525643][ C1] net_ratelimit: 7482 callbacks suppressed [ 423.525670][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 423.527123][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 423.527556][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 423.528978][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 423.529402][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 423.529820][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 423.530284][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 423.530708][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 423.531146][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 423.532531][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 424.832895][T18916] netlink: 'syz.0.3433': attribute type 7 has an invalid length. [ 424.893569][T18916] netlink: 'syz.0.3433': attribute type 7 has an invalid length. [ 424.905888][T15009] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 424.907576][T15010] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 424.907620][T15010] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 424.907656][T15010] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.089076][T18944] 8021q: adding VLAN 0 to HW filter on device bond1 [ 426.207020][T18944] bond1 (unregistering): Released all slaves [ 426.554350][T18962] syzkaller0: entered promiscuous mode [ 426.554374][T18962] syzkaller0: entered allmulticast mode [ 427.431039][T18986] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 428.231725][T19003] __nla_validate_parse: 2 callbacks suppressed [ 428.231748][T19003] netlink: 404 bytes leftover after parsing attributes in process `syz.0.3456'. [ 428.231767][T19003] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3456'. [ 428.231786][T19003] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3456'. [ 428.231803][T19003] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3456'. [ 428.535722][ C1] net_ratelimit: 7382 callbacks suppressed [ 428.535747][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.536201][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.536655][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.537143][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 428.537603][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 428.540853][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.541268][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 428.542670][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 428.543048][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.543462][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 429.055378][T19020] syzkaller0: entered promiscuous mode [ 429.055403][T19020] syzkaller0: entered allmulticast mode [ 429.644993][T19028] pimreg2: entered allmulticast mode [ 429.756736][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 429.883331][T19041] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3468'. [ 430.211907][T19051] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3471'. [ 430.257806][T19051] bond0: (slave bond_slave_0): Releasing backup interface [ 430.511877][T19051] bond_slave_0: entered promiscuous mode [ 430.511905][T19051] bond_slave_0: entered allmulticast mode [ 430.757666][T19064] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3475'. [ 431.233015][T19074] syzkaller0: entered promiscuous mode [ 431.233054][T19074] syzkaller0: entered allmulticast mode [ 431.462070][T19081] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3479'. [ 432.864604][T19112] mac80211_hwsim hwsim43 wlan1: entered promiscuous mode [ 432.884564][T19120] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3489'. [ 433.444889][T19136] syzkaller0: entered promiscuous mode [ 433.444916][T19136] syzkaller0: entered allmulticast mode [ 433.545781][ C1] net_ratelimit: 7350 callbacks suppressed [ 433.545806][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.546268][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.546682][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.547130][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 433.547540][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 433.548953][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.549347][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 433.550755][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 433.551193][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.551583][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.615894][ C1] ip6_tunnel: ' xmit: Local address not yet configured! [ 433.858445][T19146] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 433.900283][T19142] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3496'. [ 433.900324][T19142] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3496'. [ 434.292592][T19160] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3501'. [ 434.344215][T19160] bridge0: port 3(syz_tun) entered blocking state [ 434.344364][T19160] bridge0: port 3(syz_tun) entered disabled state [ 434.344543][T19160] syz_tun: entered allmulticast mode [ 434.371203][T19160] syz_tun: entered promiscuous mode [ 434.390458][T19160] bridge0: port 3(syz_tun) entered blocking state [ 434.390586][T19160] bridge0: port 3(syz_tun) entered forwarding state [ 435.204239][T19178] digital: digital_start_poll: Unknown protocol [ 435.216624][T19181] netlink: 'syz.3.3507': attribute type 15 has an invalid length. [ 435.216648][T19181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3507'. [ 435.316672][T15100] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 435.316767][T15100] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 435.318118][T19181] netlink: 'syz.3.3507': attribute type 15 has an invalid length. [ 435.319338][T19181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3507'. [ 435.334607][ T12] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 435.334657][ T12] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 435.719621][T19194] netlink: 'syz.3.3512': attribute type 21 has an invalid length. [ 435.719729][T19194] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3512'. [ 435.818353][T19197] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3513'. [ 436.445409][T19214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3519'. [ 437.033752][T19227] syzkaller0: left promiscuous mode [ 437.033809][T19227] syzkaller0: left allmulticast mode [ 437.151487][ T5617] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 437.172227][ T5617] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 437.173771][ T5617] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 437.198697][ T5617] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 437.220642][ T5617] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 437.563706][T19235] syzkaller0: entered promiscuous mode [ 437.563733][T19235] syzkaller0: entered allmulticast mode [ 437.997901][T19246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3527'. [ 438.169714][T19248] netlink: 'syz.2.3528': attribute type 10 has an invalid length. [ 438.208081][T19248] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.258114][T19248] bond0: (slave team0): Enslaving as an active interface with an up link [ 438.556666][ C1] net_ratelimit: 7299 callbacks suppressed [ 438.556694][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.557115][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 438.558518][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 438.558974][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.559365][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.559784][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.560372][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 438.560908][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 438.562463][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.562886][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 439.120612][T19268] trusted_key: syz.2.3531 sent an empty control message without MSG_MORE. [ 439.275935][ T5637] Bluetooth: hci1: command tx timeout [ 439.370266][ T1704] block nbd1: Possible stuck request ffff888027f15080: control (read@0,4096B). Runtime 30 seconds [ 439.905302][T19285] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3536'. [ 440.006212][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.007878][ T1704] block nbd2: Possible stuck request ffff888027f3e000: control (read@0,4096B). Runtime 30 seconds [ 440.111826][T19283] tipc: Started in network mode [ 440.111858][T19283] tipc: Node identity ac14142f, cluster identity 4711 [ 440.112108][T19283] tipc: New replicast peer: 0.0.0.0 [ 440.112444][T19283] tipc: Enabled bearer , priority 10 [ 440.113203][T19284] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3536'. [ 440.349439][T19226] wlan1 speed is unknown, defaulting to 1000 [ 440.893571][T19295] syzkaller0: entered promiscuous mode [ 440.893596][T19295] syzkaller0: entered allmulticast mode [ 441.355814][ T5637] Bluetooth: hci1: command tx timeout [ 441.435663][T19309] netlink: 'syz.4.3541': attribute type 10 has an invalid length. [ 441.501700][T12888] tipc: Node number set to 2886997039 [ 441.520334][T19308] netlink: 'syz.4.3541': attribute type 1 has an invalid length. [ 441.551989][T19309] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.579109][T19309] bond0: (slave team0): Enslaving as an active interface with an up link [ 441.851137][T19317] bond1: (slave bridge3): making interface the new active one [ 441.852336][T19317] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 441.914819][T19323] xt_CT: You must specify a L4 protocol and not use inversions on it [ 442.192392][ T12] IPVS: starting estimator thread 0... [ 442.276683][T19331] IPVS: using max 25 ests per chain, 60000 per kthread [ 442.648958][T19342] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3548'. [ 442.867183][T19226] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.869421][T19226] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.869608][T19226] bridge_slave_0: entered allmulticast mode [ 442.873590][T19226] bridge_slave_0: entered promiscuous mode [ 442.920223][T19226] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.920338][T19226] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.920488][T19226] bridge_slave_1: entered allmulticast mode [ 442.925039][T19226] bridge_slave_1: entered promiscuous mode [ 443.057368][T19226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.063819][T19226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.185096][T19226] team0: Port device team_slave_0 added [ 443.217257][T19226] team0: Port device team_slave_1 added [ 443.308546][T19226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.308565][T19226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.308593][T19226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.312896][T19226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.312912][T19226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.312941][T19226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.435806][ T5637] Bluetooth: hci1: command tx timeout [ 443.486450][T19226] hsr_slave_0: entered promiscuous mode [ 443.487608][T19226] hsr_slave_1: entered promiscuous mode [ 443.488449][T19226] debugfs: 'hsr0' already exists in 'hsr' [ 443.488470][T19226] Cannot create hsr debugfs directory [ 443.566911][ C1] net_ratelimit: 7186 callbacks suppressed [ 443.566933][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 443.567335][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 443.567738][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 443.568183][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 443.568564][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 443.568967][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 443.570288][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 443.570735][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 443.572102][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 443.572529][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 444.015081][T19359] syzkaller0: entered promiscuous mode [ 444.015108][T19359] syzkaller0: entered allmulticast mode [ 444.419698][T19363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3555'. [ 444.435238][T19311] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 444.523364][T19321] workqueue: Failed to create a rescuer kthread for wq "nbd105-recv": -EINTR [ 444.531503][T19321] block (null): Could not allocate knbd recv work queue. [ 444.598756][T19321] nbd: failed to add new device [ 444.620079][T19226] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 444.676102][T19226] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 444.680483][T19226] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 444.750894][T19226] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 444.764790][T19226] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 444.819001][T19226] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 444.836959][T19226] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 444.918101][T19226] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 445.136398][T19380] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3559'. [ 445.214269][T19385] netlink: 'syz.2.3560': attribute type 1 has an invalid length. [ 445.234435][T19385] netlink: 'syz.2.3560': attribute type 1 has an invalid length. [ 445.516007][ T5637] Bluetooth: hci1: command tx timeout [ 445.564982][T19403] netlink: 'syz.4.3563': attribute type 1 has an invalid length. [ 445.679690][T19403] bond2: entered promiscuous mode [ 445.680203][T19403] 8021q: adding VLAN 0 to HW filter on device bond2 [ 446.119088][T19226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.225925][T19410] syzkaller0: entered promiscuous mode [ 446.225951][T19410] syzkaller0: entered allmulticast mode [ 446.503606][T19420] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3567'. [ 446.634883][T19426] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3568'. [ 446.683940][T19226] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.735425][ T1391] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.735539][ T1391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.778972][T19422] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3568'. [ 446.848580][ T501] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.848699][ T501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.192644][T19440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3571'. [ 447.217391][ T5637] Bluetooth: hci5: command 0x0406 tx timeout [ 448.576364][ C1] net_ratelimit: 7055 callbacks suppressed [ 448.576389][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 448.576813][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.577296][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.577725][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.578159][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 448.578584][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 448.580042][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.580468][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 448.581907][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 448.582351][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.904012][T19480] netlink: 'syz.4.3577': attribute type 1 has an invalid length. [ 449.143741][T19480] bond3: entered promiscuous mode [ 449.151814][T19480] 8021q: adding VLAN 0 to HW filter on device bond3 [ 449.306518][T19483] 8021q: adding VLAN 0 to HW filter on device bond3 [ 449.306934][T19483] bond3: (slave xfrm0): The slave device specified does not support setting the MAC address [ 449.306955][T19483] bond3: (slave xfrm0): Setting fail_over_mac to active for active-backup mode [ 449.394883][T19496] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3578'. [ 449.395089][T19489] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3578'. [ 449.424346][T19483] bond3: (slave xfrm0): making interface the new active one [ 449.424373][T19483] xfrm0: entered promiscuous mode [ 449.479809][T19483] xfrm0: left promiscuous mode [ 449.692956][T19487] bond3: (slave xfrm0): The slave device specified does not support setting the MAC address [ 449.716914][T19487] bond3: (slave xfrm0): making interface the new active one [ 450.018722][T19496] 8021q: adding VLAN 0 to HW filter on device bond1 [ 450.092655][T19226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.296988][T19534] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 451.914236][T19226] veth0_vlan: entered promiscuous mode [ 451.943752][T19226] veth1_vlan: entered promiscuous mode [ 452.288711][T19226] veth0_macvtap: entered promiscuous mode [ 452.337133][T19226] veth1_macvtap: entered promiscuous mode [ 452.512686][T19226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 452.610202][T19226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 452.725850][ T1109] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.725900][ T1109] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.725937][ T1109] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.725974][ T1109] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.839458][T19583] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3593'. [ 453.585867][ C1] net_ratelimit: 7123 callbacks suppressed [ 453.585895][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.586319][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.586720][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 453.587129][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 453.588470][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.588899][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 453.590256][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 453.590653][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.591058][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.591460][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 454.651460][T19622] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 455.007295][T19624] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3598'. [ 455.561154][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.561183][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.895203][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.895228][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.923548][T19628] syzkaller0: entered promiscuous mode [ 455.923572][T19628] syzkaller0: entered allmulticast mode [ 456.761795][T19645] netlink: 'syz.0.3605': attribute type 1 has an invalid length. [ 456.761822][T19645] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3605'. [ 456.798266][ T5637] Bluetooth: hci4: unexpected cc 0x1003 length: 0 < 9 [ 456.838312][T19649] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3604'. [ 456.891332][T19649] netlink: 288 bytes leftover after parsing attributes in process `syz.2.3604'. [ 456.970957][T19650] IPv6: sit2: Disabled Multicast RS [ 457.220649][T19657] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3608'. [ 458.045348][T19683] netlink: 'syz.5.3615': attribute type 2 has an invalid length. [ 458.251196][T19689] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3617'. [ 458.467342][T19692] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 458.508934][T19698] vxcan2: entered allmulticast mode [ 458.596695][ C1] net_ratelimit: 7172 callbacks suppressed [ 458.596718][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 458.597142][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 458.597568][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 458.598002][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 458.598443][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 458.598917][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 458.600290][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 458.600707][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 458.602101][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 458.602558][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 458.796930][ T5637] Bluetooth: hci0: command 0x0c24 tx timeout [ 458.797080][ T5617] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 460.052450][T19699] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3618'. [ 460.054346][T19695] syzkaller1: entered promiscuous mode [ 460.054378][T19695] syzkaller1: entered allmulticast mode [ 460.122330][T19732] geneve2: entered promiscuous mode [ 460.375656][T19742] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3626'. [ 460.843836][T19758] set match dimension is over the limit! [ 460.862855][T19758] syzkaller0: entered promiscuous mode [ 460.862880][T19758] syzkaller0: entered allmulticast mode [ 462.684907][T19781] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 463.050116][T19808] netlink: 'syz.3.3641': attribute type 2 has an invalid length. [ 463.134602][T19808] : entered promiscuous mode [ 463.605690][ C1] net_ratelimit: 7521 callbacks suppressed [ 463.605715][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 463.606116][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 463.606519][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 463.606924][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 463.607317][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 463.608617][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 463.609018][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 463.611174][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 463.611602][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 463.612018][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 463.835161][T19823] bond1: entered promiscuous mode [ 463.835237][T19823] bond1: entered allmulticast mode [ 463.849624][T19823] 8021q: adding VLAN 0 to HW filter on device bond1 [ 463.997156][ T5617] Bluetooth: hci0: command 0x0c24 tx timeout [ 464.003837][T19829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3650'. [ 464.275296][T19838] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3652'. [ 464.377690][T19840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3653'. [ 464.558748][T19844] netlink: 'syz.4.3655': attribute type 1 has an invalid length. [ 464.659571][T19844] 8021q: adding VLAN 0 to HW filter on device bond4 [ 464.767784][T19844] bond4: (slave geneve3): making interface the new active one [ 464.788681][T19844] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 464.856165][T19844] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3655'. [ 465.720200][T19865] netlink: 'syz.4.3660': attribute type 1 has an invalid length. [ 465.871171][T19870] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3661'. [ 466.381945][T19882] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3666'. [ 467.252772][T19903] xt_HMARK: spi-set and port-set can't be combined [ 467.254218][T19903] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3672'. [ 467.362263][T19915] xt_HMARK: spi-set and port-set can't be combined [ 467.363373][T19916] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3672'. [ 467.394312][T19919] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3673'. [ 467.492408][T19906] netlink: 404 bytes leftover after parsing attributes in process `syz.5.3672'. [ 467.682157][ T5637] Bluetooth: hci2: command 0x0406 tx timeout [ 468.582836][T19943] syzkaller1: entered promiscuous mode [ 468.582862][T19943] syzkaller1: entered allmulticast mode [ 468.615567][ C1] net_ratelimit: 7733 callbacks suppressed [ 468.615594][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.615998][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.616396][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.616785][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 468.617173][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 468.617601][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.617985][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.619353][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.619765][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 468.621165][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 469.439193][ T1704] block nbd1: Possible stuck request ffff888027f15080: control (read@0,4096B). Runtime 60 seconds [ 470.079348][ T1704] block nbd2: Possible stuck request ffff888027f3e000: control (read@0,4096B). Runtime 60 seconds [ 470.732134][ T4985] udevd[4985]: worker [18631] /devices/virtual/block/nbd1 is taking a long time [ 470.732204][ T4985] udevd[4985]: worker [18637] /devices/virtual/block/nbd2 is taking a long time [ 473.625568][ C1] net_ratelimit: 9451 callbacks suppressed [ 473.625592][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.626075][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.626507][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 473.626961][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 473.627354][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.627771][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.629275][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.629583][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 473.630779][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 473.631062][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 477.926229][ T5617] Bluetooth: hci0: command 0x0c24 tx timeout [ 478.635757][ C1] net_ratelimit: 10475 callbacks suppressed [ 478.635775][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 478.637170][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 478.637463][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 478.638358][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 478.638633][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 478.638899][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 478.639194][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 478.639482][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 478.639750][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 478.640015][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 483.036773][ T5617] Bluetooth: hci3: command 0x040f tx timeout [ 483.645615][ C1] net_ratelimit: 11056 callbacks suppressed [ 483.645644][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 483.645933][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 483.646196][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 483.646435][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 483.647757][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 483.647996][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 483.648809][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 483.649057][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 483.649296][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 483.649535][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 488.655498][ C1] net_ratelimit: 11532 callbacks suppressed [ 488.655516][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 488.656701][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 488.656928][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 488.657686][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 488.657894][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 488.658102][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 488.658348][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 488.658630][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 488.658876][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 488.659122][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 493.666159][ C1] net_ratelimit: 11224 callbacks suppressed [ 493.666184][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 493.666591][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 493.667004][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 493.667390][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 493.667789][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 493.668170][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 493.668558][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 493.668973][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 493.669401][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 493.671657][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 494.146865][T20008] __nla_validate_parse: 8 callbacks suppressed [ 494.146886][T20008] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3699'. [ 494.584553][T20021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3700'. [ 494.730445][T20024] netlink: 'syz.4.3701': attribute type 8 has an invalid length. [ 494.882716][ T5617] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 494.894019][ T5617] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 494.894830][ T5617] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 494.918862][ T5617] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 494.923005][ T5617] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 495.255821][T20027] bond2: Removing last ns target with arp_interval on [ 495.768903][T20046] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 495.845123][T20049] Bluetooth: MGMT ver 1.23 [ 495.862851][T20049] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3705'. [ 496.015129][T20054] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3709'. [ 496.025347][T20055] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3709'. [ 496.163223][T20059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3710'. [ 496.219426][T20060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 496.270049][T20063] netlink: 'syz.3.3711': attribute type 1 has an invalid length. [ 497.035691][ T5617] Bluetooth: hci6: command tx timeout [ 497.308847][T20063] 8021q: adding VLAN 0 to HW filter on device bond8 [ 497.436607][T20065] bond8: (slave geneve2): making interface the new active one [ 497.461893][T20065] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 497.896912][T20082] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3715'. [ 497.917213][ T5617] Bluetooth: hci5: command 0x0406 tx timeout [ 497.917400][ T5637] Bluetooth: hci5: Opcode 0x0c3a failed: -110 [ 498.029410][T20085] sctp: [Deprecated]: syz.0.3717 (pid 20085) Use of int in maxseg socket option. [ 498.029410][T20085] Use struct sctp_assoc_value instead [ 498.194098][T20087] netlink: 524 bytes leftover after parsing attributes in process `syz.3.3718'. [ 498.229669][T20022] wlan1 speed is unknown, defaulting to 1000 [ 498.301736][T20090] netlink: 'syz.0.3719': attribute type 2 has an invalid length. [ 498.301762][T20090] netlink: 'syz.0.3719': attribute type 2 has an invalid length. [ 498.675742][ C1] net_ratelimit: 7577 callbacks suppressed [ 498.675767][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 498.676173][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 498.676634][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 498.677031][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 498.677448][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 498.679606][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 498.680013][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 498.681463][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 498.681876][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 498.682286][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 498.871268][T20107] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3721'. [ 499.115571][ T5637] Bluetooth: hci6: command tx timeout [ 499.516782][ T1704] block nbd1: Possible stuck request ffff888027f15080: control (read@0,4096B). Runtime 90 seconds [ 499.996722][T20140] xt_TPROXY: Can be used only with -p tcp or -p udp [ 500.059621][T20143] Cannot find add_set index 0 as target [ 500.193054][ T1704] block nbd2: Possible stuck request ffff888027f3e000: control (read@0,4096B). Runtime 90 seconds [ 500.413227][T20148] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3730'. [ 500.493829][T20151] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3732'. [ 500.556730][T20153] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3731'. [ 500.609306][T20155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3731'. [ 500.614578][T20151] team0 (unregistering): Port device team_slave_0 removed [ 500.649661][T20151] team0 (unregistering): Port device team_slave_1 removed [ 500.893669][T20022] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.893835][T20022] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.893998][T20022] bridge_slave_0: entered allmulticast mode [ 500.922711][T20022] bridge_slave_0: entered promiscuous mode [ 500.951210][T20022] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.953926][T20022] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.954095][T20022] bridge_slave_1: entered allmulticast mode [ 500.982893][T20022] bridge_slave_1: entered promiscuous mode [ 501.031959][T20160] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3733'. [ 501.116613][T20022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 501.166907][T20022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 501.195594][ T5637] Bluetooth: hci6: command tx timeout [ 501.322225][T20165] xt_recent: Unsupported userspace flags (000000b1) [ 501.324053][T20022] team0: Port device team_slave_0 added [ 501.372717][T20022] team0: Port device team_slave_1 added [ 501.443751][ C1] ip6_tunnel: ' xmit: Local address not yet configured! [ 501.456659][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.607475][T20022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 501.607495][T20022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 501.607525][T20022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 501.669117][T20022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 501.669137][T20022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 501.669166][T20022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 501.993383][T20184] netlink: 'syz.0.3738': attribute type 29 has an invalid length. [ 502.091850][T20022] hsr_slave_0: entered promiscuous mode [ 502.103595][T20022] hsr_slave_1: entered promiscuous mode [ 502.118092][T20022] debugfs: 'hsr0' already exists in 'hsr' [ 502.118117][T20022] Cannot create hsr debugfs directory [ 502.403275][T20189] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3740'. [ 502.876486][T20199] tunl0: entered promiscuous mode [ 502.876675][T20199] netlink: 'syz.0.3743': attribute type 3 has an invalid length. [ 502.876693][T20199] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3743'. [ 503.278446][ T5617] Bluetooth: hci6: command tx timeout [ 503.520091][ T5617] Bluetooth: hci4: command 0x0406 tx timeout [ 503.660757][T20209] syzkaller0: entered promiscuous mode [ 503.660782][T20209] syzkaller0: entered allmulticast mode [ 503.686851][ C1] net_ratelimit: 7364 callbacks suppressed [ 503.686876][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 503.687315][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 503.688654][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 503.689087][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 503.689479][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 503.689859][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 503.690262][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 503.690681][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 503.691452][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 503.691863][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 503.919055][T20212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3748'. [ 503.919083][T20212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3748'. [ 504.242761][T20204] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3745'. [ 504.273187][T20204] block nbd0: Unsupported socket: should be TCP or UNIX. [ 504.313088][T20022] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 504.344349][T20022] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 504.360319][T20022] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 504.407762][T20022] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 504.411995][T20022] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 504.448449][T20022] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 504.491574][T20022] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 504.528887][T20022] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 504.601057][T20225] netlink: 'syz.4.3750': attribute type 1 has an invalid length. [ 504.718314][T20225] 8021q: adding VLAN 0 to HW filter on device bond6 [ 504.808201][T20229] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 505.237898][T20022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.330283][T20022] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.400487][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.400606][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.474063][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.474172][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 508.217650][T20311] __nla_validate_parse: 3 callbacks suppressed [ 508.217672][T20311] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3769'. [ 508.417351][T20022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 508.515740][T20320] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3770'. [ 508.696599][ C1] net_ratelimit: 8237 callbacks suppressed [ 508.696624][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 508.697016][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 508.698330][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 508.699425][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 508.699860][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 508.700267][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 508.700695][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 508.701109][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 508.701541][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 508.701938][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 509.284971][T20336] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3774'. [ 509.314138][T20336] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3774'. [ 509.314173][T20336] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3774'. [ 509.460019][T20341] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 509.804671][T20345] netlink: 'syz.5.3778': attribute type 21 has an invalid length. [ 509.804694][T20345] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3778'. [ 509.874633][T20022] veth0_vlan: entered promiscuous mode [ 509.973972][T20022] veth1_vlan: entered promiscuous mode [ 510.192807][T20022] veth0_macvtap: entered promiscuous mode [ 510.249969][T20022] veth1_macvtap: entered promiscuous mode [ 510.322415][T20357] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3779'. [ 510.361153][T20022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 510.383570][T20357] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3779'. [ 510.420009][T20357] netlink: 'syz.4.3779': attribute type 1 has an invalid length. [ 510.420037][T20357] netlink: 'syz.4.3779': attribute type 1 has an invalid length. [ 510.599764][T20022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 510.773040][T15010] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.773088][T15010] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.773123][T15010] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.773157][T15010] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.140783][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.140808][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.184286][T20362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3781'. [ 511.412827][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.412854][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.712720][T20378] netlink: 'syz.4.3784': attribute type 11 has an invalid length. [ 511.712744][T20378] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3784'. [ 512.105926][T20388] xt_IDLETIMER: label is empty or not nul-terminated [ 512.220595][T20390] netlink: 'syz.0.3789': attribute type 83 has an invalid length. [ 513.372154][T20420] __nla_validate_parse: 4 callbacks suppressed [ 513.372177][T20420] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3799'. [ 513.417169][T20416] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3798'. [ 513.417208][T20416] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3798'. [ 513.487484][T20416] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3798'. [ 513.487519][T20416] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3798'. [ 513.496850][ T1109] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.496924][ T1109] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.496963][ T1109] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.497000][ T1109] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.707905][ C1] net_ratelimit: 7432 callbacks suppressed [ 513.707928][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.708365][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 513.709791][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 513.710203][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 513.710625][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.711038][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.711434][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.711874][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 513.712300][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 513.712725][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 514.496054][T20440] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3804'. [ 515.207986][ T5617] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 515.212208][ T5617] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 515.214436][ T5617] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 515.259442][ T5617] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 515.260366][ T5617] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 516.576840][T20428] infiniband s”z0: set active [ 516.576865][T20428] infiniband s”z0: added bond_slave_1 [ 516.912880][T20428] smbdirect: ib_dev[s”z0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 516.912922][T20428] smbdirect: ib_dev[s”z0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 516.912965][T20428] smbdirect: ib_dev[s”z0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 517.253778][T20428] RDS/IB: s”z0: added [ 517.261934][T20428] smc: adding ib device s”z0 with port count 1 [ 517.262199][T20428] smc: ib device s”z0 port 1 has no pnetid [ 517.360128][ T5617] Bluetooth: hci7: command tx timeout [ 517.634265][T20506] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3817'. [ 517.919675][T20509] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3818'. [ 517.919714][T20509] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3818'. [ 517.971116][T20509] ip6gretap0: entered promiscuous mode [ 517.990702][T20509] syz_tun: entered promiscuous mode [ 518.715577][ C1] net_ratelimit: 7312 callbacks suppressed [ 518.715603][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 518.716065][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 518.716531][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.716981][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.717406][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.717888][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 518.718323][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 518.718747][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.719181][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.719719][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 519.436086][ T5617] Bluetooth: hci7: command tx timeout [ 519.510146][T20524] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3822'. [ 519.530615][T20524] x_tables: duplicate underflow at hook 2 [ 519.562774][T20520] bond7: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 519.637078][T20525] ip6t_hbh: unknown flags 38 [ 519.779185][T20520] bond7 (unregistering): Released all slaves [ 521.515781][ T5617] Bluetooth: hci7: command tx timeout [ 521.804171][T20535] netlink: 'syz.0.3826': attribute type 83 has an invalid length. [ 521.919922][T20535] netlink: 'syz.0.3826': attribute type 4 has an invalid length. [ 522.458860][T20546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3828'. [ 522.494881][T20546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3828'. [ 523.596552][ T5617] Bluetooth: hci7: command tx timeout [ 523.647651][T20565] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3833'. [ 523.726611][ C1] net_ratelimit: 7437 callbacks suppressed [ 523.726635][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.727069][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.727474][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 523.729552][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.729977][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 523.731369][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 523.731789][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 523.732204][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.732650][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.733060][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 524.016802][T20569] x_tables: duplicate entry at hook 4 [ 524.181554][T20452] wlan1 speed is unknown, defaulting to 1000 [ 524.489566][T20577] sctp: [Deprecated]: syz.5.3837 (pid 20577) Use of struct sctp_assoc_value in delayed_ack socket option. [ 524.489566][T20577] Use struct sctp_sack_info instead [ 525.590398][T20604] netlink: 'syz.6.3842': attribute type 1 has an invalid length. [ 525.657709][T20604] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3842'. [ 525.984179][T20620] netlink: 'syz.4.3846': attribute type 4 has an invalid length. [ 526.634536][T20641] netlink: 'syz.5.3851': attribute type 2 has an invalid length. [ 526.691018][T20452] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.691244][T20452] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.691405][T20452] bridge_slave_0: entered allmulticast mode [ 526.703829][T20452] bridge_slave_0: entered promiscuous mode [ 526.788592][T20641] : entered promiscuous mode [ 526.789119][T20452] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.789224][T20452] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.789417][T20452] bridge_slave_1: entered allmulticast mode [ 526.830348][T20452] bridge_slave_1: entered promiscuous mode [ 527.091833][T20647] netlink: 768 bytes leftover after parsing attributes in process `syz.6.3852'. [ 527.124784][T20452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 527.157796][T20452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 527.251062][T20654] xt_NETMAP: bad rangesize 37. [ 527.400147][T20452] team0: Port device team_slave_0 added [ 527.425728][T20452] team0: Port device team_slave_1 added [ 527.681196][T20452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 527.681217][T20452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.681246][T20452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.742571][T20452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.742590][T20452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.742618][T20452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.854927][T20664] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3857'. [ 527.866426][T20664] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3857'. [ 528.125195][T20452] hsr_slave_0: entered promiscuous mode [ 528.143696][T20452] hsr_slave_1: entered promiscuous mode [ 528.154829][T20452] debugfs: 'hsr0' already exists in 'hsr' [ 528.154895][T20452] Cannot create hsr debugfs directory [ 528.218311][T20671] ip6erspan0: entered allmulticast mode [ 528.735557][ C1] net_ratelimit: 7237 callbacks suppressed [ 528.735581][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 528.736070][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 528.736498][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 528.736917][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 528.739040][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 528.739450][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 528.740886][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 528.741336][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 528.741754][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 528.742137][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 529.209427][T20685] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3863'. [ 529.599156][ T1704] block nbd1: Possible stuck request ffff888027f15080: control (read@0,4096B). Runtime 120 seconds [ 530.238138][ T1704] block nbd2: Possible stuck request ffff888027f3e000: control (read@0,4096B). Runtime 120 seconds [ 530.635066][T20718] sctp: [Deprecated]: syz.6.3870 (pid 20718) Use of struct sctp_assoc_value in delayed_ack socket option. [ 530.635066][T20718] Use struct sctp_sack_info instead [ 530.666259][T20721] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3872'. [ 532.148281][T20452] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 532.196832][T20452] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 532.230089][T20452] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 532.232966][T20763] IPVS: set_ctl: invalid protocol: 103 10.1.1.0:20000 [ 532.262516][T20452] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 532.341303][T20764] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3881'. [ 532.464462][T20452] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 532.492436][T20452] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 532.504814][T20452] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 532.531002][T20452] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 532.703237][T20781] netlink: 'syz.5.3884': attribute type 1 has an invalid length. [ 533.093804][T20786] 8021q: adding VLAN 0 to HW filter on device bond4 [ 533.115272][T20786] bond3: (slave bond4): making interface the new active one [ 533.143340][T20786] bond3: (slave bond4): Enslaving as an active interface with an up link [ 533.184903][T20802] netlink: 'syz.6.3886': attribute type 1 has an invalid length. [ 533.222933][T20781] netlink: 'syz.5.3884': attribute type 1 has an invalid length. [ 533.270563][T20787] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 533.746533][ C1] net_ratelimit: 7543 callbacks suppressed [ 533.746560][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 533.747041][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 533.748326][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 533.748719][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 533.749104][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 533.749482][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 533.749874][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 533.750256][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 533.750650][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 533.751070][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 534.078443][T20820] netlink: 27 bytes leftover after parsing attributes in process `syz.5.3889'. [ 534.456127][T20832] x_tables: unsorted entry at hook 3 [ 534.613121][T20834] Cannot find del_set index 0 as target [ 534.869686][T20452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 534.942690][T20452] 8021q: adding VLAN 0 to HW filter on device team0 [ 535.080432][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.080579][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 535.113959][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.114073][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 535.750887][T20854] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3900'. [ 535.816551][T20853] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3901'. [ 536.160211][T20859] xt_policy: neither incoming nor outgoing policy selected [ 536.161267][T20859] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 536.224666][T20861] xt_policy: neither incoming nor outgoing policy selected [ 536.864624][T20876] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3905'. [ 537.151232][T20883] bond7: option fail_over_mac: invalid value (16) [ 537.220941][T20883] bond7 (unregistering): Released all slaves [ 537.993364][T20910] Bluetooth: hci0: unsupported parameter 5135 [ 537.993390][T20910] Bluetooth: hci0: unsupported parameter 8192 [ 537.993405][T20910] Bluetooth: hci0: unsupported parameter 5135 [ 537.993418][T20910] Bluetooth: hci0: unsupported parameter 8192 [ 538.273147][T20452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 538.755673][ C1] net_ratelimit: 7358 callbacks suppressed [ 538.755696][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 538.758069][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 538.758561][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 538.760063][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 538.760526][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 538.760969][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 538.761410][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 538.761904][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 538.762342][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 538.762786][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 539.348273][T20452] veth0_vlan: entered promiscuous mode [ 539.385172][T20452] veth1_vlan: entered promiscuous mode [ 539.513638][T20452] veth0_macvtap: entered promiscuous mode [ 539.558343][T20452] veth1_macvtap: entered promiscuous mode [ 539.611752][T20452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 539.637872][T20452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 540.030046][T15100] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.030417][T15100] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.030739][T15100] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.031074][T15100] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.545207][T20943] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3919'. [ 541.179454][T20950] veth0_macvtap: left promiscuous mode [ 541.874284][T15010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 541.874308][T15010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.139684][T15010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.139709][T15010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.055922][T21003] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3929'. [ 543.107577][T21009] Cannot find add_set index 0 as target [ 543.114473][T21003] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3929'. [ 543.194401][T21010] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3806'. [ 543.252436][T21009] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 543.290300][T21014] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3806'. [ 543.419043][T21017] x_tables: ip6_tables: tcp match: only valid for protocol 6 [ 543.574874][T21011] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3931'. [ 543.608136][T21011] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3931'. [ 543.759838][T20979] Bluetooth: hci7: command 0x0405 tx timeout [ 543.768852][ C1] net_ratelimit: 7209 callbacks suppressed [ 543.768919][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 543.770018][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 543.771173][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 543.772075][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 543.772441][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 543.772858][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 543.773687][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 543.779221][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 543.779670][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 543.783011][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 544.310215][T21028] vti0: entered allmulticast mode [ 544.344122][T21033] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3936'. [ 544.672130][T21035] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.714012][T21043] netlink: 'syz.5.3939': attribute type 4 has an invalid length. [ 544.862598][T21047] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3941'. [ 545.002954][T21054] netlink: 316 bytes leftover after parsing attributes in process `syz.0.3941'. [ 545.002985][T21054] netlink: 316 bytes leftover after parsing attributes in process `syz.0.3941'. [ 545.145152][T21061] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 545.331516][T21070] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 545.461561][T21071] lo: entered allmulticast mode [ 545.461774][T21071] lo: left allmulticast mode [ 546.172165][T21080] syz_tun (unregistering): left promiscuous mode [ 546.893427][T21116] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 546.986197][T21116] bond7: (slave lo): Enslaving as an active interface with an up link [ 548.502619][T21158] ieee802154 phy1 wpan1: encryption failed: -22 [ 548.775404][ C1] net_ratelimit: 7395 callbacks suppressed [ 548.775426][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 548.775834][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 548.776246][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 548.776645][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 548.777027][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 548.777390][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 548.777756][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 548.778145][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 548.780261][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 548.780602][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 549.021299][T21170] __nla_validate_parse: 3 callbacks suppressed [ 549.021322][T21170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3966'. [ 549.811219][T21195] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3973'. [ 549.811847][T21194] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3971'. [ 550.043063][T21205] bond1: entered promiscuous mode [ 550.043091][T21205] bond1: entered allmulticast mode [ 550.043641][T21197] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3974'. [ 550.283182][T21210] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 551.005947][T21238] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3984'. [ 551.802151][T21268] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3989'. [ 551.802177][T21268] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3989'. [ 551.802191][T21268] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3989'. [ 552.038305][T21270] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3989'. [ 552.038332][T21270] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3989'. [ 552.387910][T21296] netlink: 'syz.4.3995': attribute type 2 has an invalid length. [ 552.387934][T21296] netlink: 'syz.4.3995': attribute type 11 has an invalid length. [ 553.017222][T21320] netlink: 'syz.7.3998': attribute type 1 has an invalid length. [ 553.083640][T21320] bridge1: entered promiscuous mode [ 553.785559][ C1] net_ratelimit: 7735 callbacks suppressed [ 553.785586][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 553.785914][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 553.786218][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 553.786557][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 553.786934][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 553.788651][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 553.789010][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 553.790084][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 553.790390][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 553.790724][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 554.893082][T21272] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 555.351344][T21332] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 555.351385][T21332] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 555.351425][T21332] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 555.572282][T21340] __nla_validate_parse: 2 callbacks suppressed [ 555.572316][T21340] netlink: 235 bytes leftover after parsing attributes in process `syz.7.4005'. [ 555.572333][T21340] netlink: 'syz.7.4005': attribute type 2 has an invalid length. [ 556.401951][T21348] ip6t_hbh: too many supported opts specified [ 556.402258][T21351] netlink: 'syz.5.4006': attribute type 15 has an invalid length. [ 556.402278][T21351] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4006'. [ 556.549973][T21350] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4007'. [ 556.575281][T21350] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4007'. [ 556.666060][T21354] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4009'. [ 556.666166][T21353] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4009'. [ 558.795702][ C1] net_ratelimit: 9232 callbacks suppressed [ 558.795726][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 558.796135][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 558.796562][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 558.796983][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 558.799010][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 558.799395][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 558.800376][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 558.800677][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 558.800971][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 558.801250][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 559.679612][ T1704] block nbd1: Possible stuck request ffff888027f15080: control (read@0,4096B). Runtime 150 seconds [ 559.836220][T20979] Bluetooth: hci1: command 0x0406 tx timeout [ 560.317585][ T1704] block nbd2: Possible stuck request ffff888027f3e000: control (read@0,4096B). Runtime 150 seconds [ 560.832199][T21364] syzkaller0: entered promiscuous mode [ 560.832224][T21364] syzkaller0: entered allmulticast mode [ 560.898295][T21364] netlink: 'syz.6.4012': attribute type 23 has an invalid length. [ 561.210805][T21371] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 561.495154][T21380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 561.744617][T21385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4019'. [ 561.992409][T21389] netlink: 'syz.6.4020': attribute type 58 has an invalid length. [ 561.992434][T21389] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4020'. [ 562.800707][T21411] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4027'. [ 562.881181][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 562.892740][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.956908][T21412] tipc: Started in network mode [ 562.956945][T21412] tipc: Node identity eea24da1d003, cluster identity 4711 [ 562.957110][T21412] tipc: Enabled bearer , priority 0 [ 562.980145][T21412] syzkaller0: MTU too low for tipc bearer [ 562.980169][T21412] tipc: Disabling bearer [ 563.066427][ T5617] Bluetooth: hci3: unexpected event for opcode 0x8600 [ 563.090981][T21414] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4029'. [ 563.301090][T21414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4029'. [ 563.806472][ C1] net_ratelimit: 8013 callbacks suppressed [ 563.806499][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 563.806982][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 563.808491][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 563.808955][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 563.809422][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 563.809883][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 563.810386][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 563.810850][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 563.811325][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 563.811793][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 564.233501][T21439] netlink: 92 bytes leftover after parsing attributes in process `syz.7.4036'. [ 564.483190][T21446] Bluetooth: hci0: unsupported parameter 5161 [ 564.483219][T21446] Bluetooth: hci0: unsupported parameter 8192 [ 564.483235][T21446] Bluetooth: hci0: unsupported parameter 5161 [ 564.483249][T21446] Bluetooth: hci0: unsupported parameter 8192 [ 564.603561][T21452] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4039'. [ 564.996006][T21460] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4041'. [ 565.154345][T21464] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4043'. [ 565.916277][T21480] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4050'. [ 566.254824][T21488] netlink: 'syz.7.4052': attribute type 2 has an invalid length. [ 566.438058][T21491] ip6gre1: entered allmulticast mode [ 566.925097][T21503] Bluetooth: hci0: load_link_keys: too big key_count value 5120 [ 567.116441][ T5617] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 567.116506][ T5617] Bluetooth: hci3: Injecting HCI hardware error event [ 567.118859][ T5617] Bluetooth: hci3: hardware error 0x00 [ 567.190038][T21509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4058'. [ 567.190070][T21509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4058'. [ 567.190140][T21509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4058'. [ 567.801502][T21523] xt_SECMARK: invalid mode: 9 [ 567.914280][T21530] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4063'. [ 567.914307][T21530] netlink: 'syz.5.4063': attribute type 1 has an invalid length. [ 567.914329][T21530] bond0: option mode: unable to set because the bond device has slaves [ 568.082602][T21530] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4063'. [ 568.082631][T21530] netlink: 'syz.5.4063': attribute type 1 has an invalid length. [ 568.082653][T21530] bond0: option mode: unable to set because the bond device has slaves [ 568.551152][T21549] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 568.588082][T21549] netlink: 'syz.7.4065': attribute type 2 has an invalid length. [ 568.588105][T21549] netlink: 244 bytes leftover after parsing attributes in process `syz.7.4065'. [ 568.649829][T21546] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 568.697952][T21546] bond2: (slave lo): Enslaving as an active interface with an up link [ 568.815740][ C1] net_ratelimit: 7269 callbacks suppressed [ 568.815765][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 568.816217][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 568.816666][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 568.817119][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 568.817606][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 568.818111][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 568.821203][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 568.821702][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 568.823283][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 568.823744][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 569.146555][T21555] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4068'. [ 569.239011][T21559] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4069'. [ 569.274656][T21561] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4068'. [ 569.292008][ T5617] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 569.454636][T21570] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4069'. [ 571.292476][T21627] netlink: 'syz.7.4083': attribute type 3 has an invalid length. [ 571.308263][T21627] netlink: 'syz.7.4083': attribute type 33 has an invalid length. [ 571.477580][T21627] bond4: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 571.534574][T21627] bond4 (unregistering): Released all slaves [ 571.817767][T21642] xt_nat: multiple ranges no longer supported [ 572.166128][T21652] netlink: 'syz.6.4090': attribute type 142 has an invalid length. [ 572.214950][T21650] __nla_validate_parse: 5 callbacks suppressed [ 572.214973][T21650] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4089'. [ 572.364738][T21656] geneve4: entered promiscuous mode [ 572.580525][T21660] nft_compat: unsupported protocol 5 [ 573.471193][T21682] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4099'. [ 573.507682][T21682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4099'. [ 573.603278][T21682] netlink: 71 bytes leftover after parsing attributes in process `syz.4.4099'. [ 573.825450][ C1] net_ratelimit: 7426 callbacks suppressed [ 573.825472][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.825869][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 573.828009][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.828430][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 573.829798][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 573.830274][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 573.830702][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.831123][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.831549][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.831943][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 574.257585][T21703] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4103'. [ 575.417314][T21739] tunl0: left promiscuous mode [ 575.761178][T21745] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4113'. [ 575.761216][T21745] netlink: 'syz.6.4113': attribute type 30 has an invalid length. [ 575.877333][T21749] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4113'. [ 575.877358][T21749] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4113'. [ 576.419027][T21760] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4116'. [ 576.629266][T21768] syzkaller0: entered promiscuous mode [ 576.629292][T21768] syzkaller0: entered allmulticast mode [ 576.686058][T21768] netlink: 224 bytes leftover after parsing attributes in process `syz.7.4118'. [ 576.789099][T21761] simple: /dev/video#_3 [ 576.789120][T21761] simple: /dev/video#_6 [ 576.789132][T21761] simple: /dev/video#_9 [ 576.789143][T21761] simple: /dev/video#_12 [ 576.789154][T21761] simple: /dev/video#_15 [ 576.789165][T21761] simple: /dev/video#_18 [ 576.789176][T21761] simple: /dev/video#_21 [ 576.789187][T21761] simple: /dev/video#_24 [ 576.789198][T21761] simple: /dev/video#_27 [ 576.789208][T21761] simple: /dev/video#_30 [ 576.789220][T21761] simple: /dev/video#_33 [ 576.789230][T21761] simple: /dev/video#_36 [ 576.789241][T21761] simple: /dev/video#_39 [ 576.789252][T21761] simple: /dev/video#_42 [ 576.789263][T21761] simple: /dev/video#_45 [ 576.789273][T21761] simple: /dev/video#_48 [ 576.789284][T21761] simple: /dev/video#_51 [ 576.789296][T21761] simple: /dev/video#_54 [ 576.789306][T21761] simple: /dev/video#_57 [ 576.789317][T21761] simple: /dev/video#_60 [ 576.789328][T21761] simple: /dev/video#_63 [ 576.789339][T21761] simple: /dev/video#_66 [ 576.789350][T21761] simple: /dev/video#_69 [ 576.789361][T21761] simple: /dev/video#_72 [ 576.789371][T21761] simple: /dev/video#_75 [ 576.789382][T21761] simple: /dev/video#_78 [ 576.789393][T21761] simple: /dev/video#_81 [ 576.789404][T21761] simple: /dev/video#_84 [ 576.789421][T21761] simple: /dev/video#_87 [ 576.789432][T21761] simple: /dev/video#_90 [ 576.789443][T21761] simple: /dev/video#_93 [ 576.789453][T21761] simple: /dev/video#_96 [ 577.263726][T21782] IPv6: sit1: Disabled Multicast RS [ 578.076497][T20979] Bluetooth: hci0: command 0x0c24 tx timeout [ 578.076570][ T5617] Bluetooth: hci0: Opcode 0x0c13 failed: -110 [ 578.139579][T21815] netlink: 'syz.5.4126': attribute type 4 has an invalid length. [ 578.186050][T21805] netlink: 'syz.5.4126': attribute type 4 has an invalid length. [ 578.545907][T21818] __nla_validate_parse: 3 callbacks suppressed [ 578.545928][T21818] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4129'. [ 578.835705][ C1] net_ratelimit: 7413 callbacks suppressed [ 578.835741][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 578.836164][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 578.836561][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 578.836947][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 578.837358][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 578.837762][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 578.838208][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 578.838611][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 578.840835][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 578.841254][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 579.301324][T21829] netlink: 'syz.7.4133': attribute type 1 has an invalid length. [ 579.403536][T21834] xt_policy: output policy not valid in PREROUTING and INPUT [ 579.557575][T21829] 8021q: adding VLAN 0 to HW filter on device bond4 [ 579.792687][T21840] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4135'. [ 579.880303][T21844] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4137'. [ 579.906698][T21835] tipc: Started in network mode [ 579.906733][T21835] tipc: Node identity ac141441, cluster identity 4711 [ 579.955110][T21835] tipc: Enabled bearer , priority 10 [ 580.036606][T21845] dvmrp0: entered allmulticast mode [ 580.305676][T21838] dvmrp0: left allmulticast mode [ 580.577496][T21861] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4140'. [ 580.660947][T21859] syzkaller0: entered promiscuous mode [ 580.660973][T21859] syzkaller0: entered allmulticast mode [ 581.022598][T21872] netlink: 'syz.0.4142': attribute type 5 has an invalid length. [ 581.055774][T21878] netlink: 'syz.7.4145': attribute type 4 has an invalid length. [ 581.066603][ T5352] tipc: Node number set to 2886997057 [ 581.400764][T21884] vlan2: entered allmulticast mode [ 581.400789][T21884] bond0: entered allmulticast mode [ 581.400803][T21884] bond_slave_1: entered allmulticast mode [ 581.400822][T21884] dummy0: entered allmulticast mode [ 581.896653][T21901] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4153'. [ 582.049947][T21903] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4152'. [ 582.049984][T21903] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4152'. [ 582.126412][T21915] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4155'. [ 582.179734][T21916] tipc: MTU too low for tipc bearer [ 582.288410][T21913] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4156'. [ 582.780581][T21940] sctp: [Deprecated]: syz.7.4161 (pid 21940) Use of int in max_burst socket option. [ 582.780581][T21940] Use struct sctp_assoc_value instead [ 582.785183][T21940] netlink: 400 bytes leftover after parsing attributes in process `syz.7.4161'. [ 583.352217][T21955] smc: net device team0 applied user defined pnetid SYZ2 [ 583.386536][T21953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 583.478030][T21967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 583.541306][T21953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 583.845490][ C1] net_ratelimit: 8434 callbacks suppressed [ 583.845511][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 583.845953][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 583.846380][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 583.846798][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 583.847233][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 583.847645][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 583.848055][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 583.848476][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 583.848882][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 583.851161][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 584.801188][T21982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 586.482337][T21980] __nla_validate_parse: 2 callbacks suppressed [ 586.482359][T21980] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4167'. [ 586.809846][T22001] syzkaller0: entered allmulticast mode [ 588.865162][ C1] net_ratelimit: 9071 callbacks suppressed [ 588.865187][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 588.865656][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 588.866034][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 588.866409][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 588.869516][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 588.870488][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 588.871460][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 588.872479][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 588.873378][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 588.874499][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 589.763445][ T1704] block nbd1: Possible stuck request ffff888027f15080: control (read@0,4096B). Runtime 180 seconds [ 590.287387][ T4985] udevd[4985]: worker [18631] /devices/virtual/block/nbd1 timeout; kill it [ 590.287510][ T4985] udevd[4985]: seq 20029 '/devices/virtual/block/nbd1' killed [ 590.287556][ T4985] udevd[4985]: worker [18637] /devices/virtual/block/nbd2 timeout; kill it [ 590.287627][ T4985] udevd[4985]: seq 20032 '/devices/virtual/block/nbd2' killed [ 590.400667][ T1704] block nbd2: Possible stuck request ffff888027f3e000: control (read@0,4096B). Runtime 180 seconds [ 593.192127][T22026] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4176'. [ 593.213197][T22026] netlink: 148 bytes leftover after parsing attributes in process `syz.6.4176'. [ 593.389491][T22034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4177'. [ 593.647573][T22038] netlink: 'syz.4.4182': attribute type 4 has an invalid length. [ 593.654322][T22038] netlink: 'syz.4.4182': attribute type 4 has an invalid length. [ 593.783735][T22034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4177'. [ 593.875505][ C1] net_ratelimit: 9316 callbacks suppressed [ 593.875539][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 593.878625][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 593.879036][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 593.879495][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 593.879901][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 593.881203][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 593.881619][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 593.882051][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 593.882440][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 593.883077][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 594.160240][T22053] netlink: 112 bytes leftover after parsing attributes in process `syz.6.4186'. [ 594.782954][T22070] wlan1 speed is unknown, defaulting to 1000 [ 595.104304][T22081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4193'. [ 595.121913][T22082] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4193'. [ 595.541745][T22087] xt_hashlimit: overflow, try lower: 3/0 [ 595.839915][T22108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4196'. [ 596.593040][T22117] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4199'. [ 596.644224][T22092] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4195'. [ 596.922132][T22092] bond5: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 596.964997][T22092] bond5 (unregistering): Released all slaves [ 597.544404][T22125] syzkaller0: entered promiscuous mode [ 597.544433][T22125] syzkaller0: entered allmulticast mode [ 597.561041][T22130] netlink: 'syz.4.4202': attribute type 1 has an invalid length. [ 598.673630][T22143] tc_dump_action: action bad kind [ 598.871268][T22145] netlink: 'syz.7.4206': attribute type 1 has an invalid length. [ 598.887160][ C1] net_ratelimit: 7341 callbacks suppressed [ 598.887193][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 598.887624][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 598.895210][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 598.895840][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 598.896262][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 598.896723][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 598.898066][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 598.898462][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 598.898872][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 598.899276][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 599.055238][T22145] __nla_validate_parse: 2 callbacks suppressed [ 599.055259][T22145] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4206'. [ 599.285937][T22150] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4208'. [ 599.342958][T22151] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4209'. [ 599.447819][T22154] x_tables: duplicate underflow at hook 2 [ 599.854414][T22163] netlink: 88 bytes leftover after parsing attributes in process `syz.7.4213'. [ 599.854522][T22163] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4213'. [ 599.855145][T22163] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4213'. [ 600.541861][T22177] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4218'. [ 600.858737][T22184] ovs0: entered promiscuous mode [ 601.154658][T22200] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4223'. [ 601.177822][T22202] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4223'. [ 601.221465][T22199] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4224'. [ 601.502423][T22210] netlink: 'syz.4.4225': attribute type 1 has an invalid length. [ 603.895503][ C1] net_ratelimit: 7188 callbacks suppressed [ 603.895538][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 603.895957][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 603.896371][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 603.896784][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 603.898208][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 603.898648][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 603.899082][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 603.899498][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 603.899940][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 603.900350][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 604.890836][T22221] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 605.298341][T22255] __nla_validate_parse: 2 callbacks suppressed [ 605.298362][T22255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4237'. [ 605.298487][T22255] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 605.405571][T22261] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4237'. [ 605.451921][T22255] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 605.619994][T22261] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4237'. [ 605.649547][T22265] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.689191][T22261] netlink: 'syz.4.4237': attribute type 8 has an invalid length. [ 605.689216][T22261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4237'. [ 605.727815][T22261] bridge0: port 3(syz_tun) entered disabled state [ 605.728845][T22261] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.731068][T22261] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.343638][T22278] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4241'. [ 606.653111][T22283] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4243'. [ 607.117121][T22290] x_tables: duplicate underflow at hook 3 [ 607.135376][T22290] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4246'. [ 607.155102][T22292] x_tables: duplicate underflow at hook 3 [ 607.198768][T22295] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4246'. [ 607.534096][T22300] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4249'. [ 607.534128][T22300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4249'. [ 608.905766][ C1] net_ratelimit: 7260 callbacks suppressed [ 608.905792][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 608.906226][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 608.906671][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 608.907060][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 608.907470][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 608.911508][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 608.912332][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 608.912760][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 608.913191][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 608.914621][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 609.236452][ T5617] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 609.239197][ T5617] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 609.241837][ T5617] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 609.282018][ T5617] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 609.282750][ T5617] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 609.909834][T22336] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 610.471895][T22346] __nla_validate_parse: 1 callbacks suppressed [ 610.471919][T22346] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4260'. [ 610.471936][T22346] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4260'. [ 610.598677][T22352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4261'. [ 610.598820][T22352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4261'. [ 610.598927][T22352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4261'. [ 610.599034][T22352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4261'. [ 610.599138][T22352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4261'. [ 610.599242][T22352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4261'. [ 610.599346][T22352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4261'. [ 610.599460][T22352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4261'. [ 611.311912][T22365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 611.356280][ T5617] Bluetooth: hci8: command tx timeout [ 611.594393][T22327] wlan1 speed is unknown, defaulting to 1000 [ 612.847955][T22385] syzkaller0: entered promiscuous mode [ 612.847981][T22385] syzkaller0: entered allmulticast mode [ 613.213313][T22395] netlink: 'syz.5.4271': attribute type 83 has an invalid length. [ 613.309214][T22397] netlink: 'syz.5.4271': attribute type 83 has an invalid length. [ 613.436312][ T5617] Bluetooth: hci8: command tx timeout [ 613.915568][ C1] net_ratelimit: 7347 callbacks suppressed [ 613.915590][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 613.915998][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 613.916413][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 613.916833][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 613.917270][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 613.917671][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 613.918123][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 613.918544][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:3e:15:18:38:6d, vlan:0) [ 613.921656][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 613.922111][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 614.081994][ T32] INFO: task syz.2.3625:19733 blocked for more than 143 seconds. [ 614.082024][ T32] Not tainted syzkaller #0 [ 614.082037][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 614.082048][ T32] task:syz.2.3625 state:D stack:27136 pid:19733 tgid:19731 ppid:17934 task_flags:0x400040 flags:0x00080002 [ 614.082128][ T32] Call Trace: [ 614.082141][ T32] [ 614.082157][ T32] __schedule+0x17db/0x58f0 [ 614.082220][ T32] ? __pfx___schedule+0x10/0x10 [ 614.082256][ T32] ? schedule+0x90/0x2b0 [ 614.082282][ T32] schedule+0x164/0x2b0 [ 614.082308][ T32] schedule_preempt_disabled+0x13/0x30 [ 614.082331][ T32] __mutex_lock+0x7c1/0x1550 [ 614.082363][ T32] ? __mutex_lock+0x5d4/0x1550 [ 614.082393][ T32] ? nfsd_nl_listener_get_doit+0x104/0x610 [ 614.082432][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 614.082466][ T32] ? __nlmsg_put+0xef/0x1b0 [ 614.082497][ T32] ? genlmsg_put+0x137/0x2e0 [ 614.082541][ T32] nfsd_nl_listener_get_doit+0x104/0x610 [ 614.082577][ T32] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 614.082613][ T32] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 614.082659][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 614.082702][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 614.082765][ T32] genl_rcv_msg+0x614/0x7a0 [ 614.082807][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 614.082841][ T32] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 614.082892][ T32] netlink_rcv_skb+0x226/0x4a0 [ 614.082922][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 614.082958][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 614.083004][ T32] ? down_read+0x2be/0x330 [ 614.083070][ T32] genl_rcv+0x28/0x40 [ 614.083103][ T32] netlink_unicast+0x8ef/0xa80 [ 614.083149][ T32] netlink_sendmsg+0x813/0xb40 [ 614.083191][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 614.083230][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 614.083265][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 614.083292][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 614.083328][ T32] ____sys_sendmsg+0x54e/0x850 [ 614.083360][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 614.083395][ T32] ? import_iovec+0x73/0xa0 [ 614.083434][ T32] ___sys_sendmsg+0x2a5/0x360 [ 614.083457][ T32] ? __lock_acquire+0x747/0x2de0 [ 614.083487][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 614.083516][ T32] ? futex_wait+0x2a2/0x390 [ 614.083590][ T32] ? __fget_files+0x2a/0x420 [ 614.083612][ T32] ? __fget_files+0x3a2/0x420 [ 614.083646][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 614.083674][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 614.083725][ T32] do_syscall_64+0x166/0x520 [ 614.083750][ T32] ? trace_irq_disable+0x3b/0x140 [ 614.083775][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.083799][ T32] ? clear_bhb_loop+0x70/0xc0 [ 614.083828][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.083851][ T32] RIP: 0033:0x7f4c6359e2d9 [ 614.083872][ T32] RSP: 002b:00007f4c6453b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 614.083897][ T32] RAX: ffffffffffffffda RBX: 00007f4c63825fa0 RCX: 00007f4c6359e2d9 [ 614.083914][ T32] RDX: 0000000004000880 RSI: 0000200000000040 RDI: 0000000000000003 [ 614.083930][ T32] RBP: 00007f4c63635888 R08: 0000000000000000 R09: 0000000000000000 [ 614.083945][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 614.083959][ T32] R13: 00007f4c63826038 R14: 00007f4c63825fa0 R15: 00007fff185aed18 [ 614.083997][ T32] [ 614.084043][ T32] [ 614.084043][ T32] Showing all locks held in the system: [ 614.084053][ T32] locks held by kworker/u8:1/13: 2, on CPU#0: [ 614.084070][ T32] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 614.084140][ T32] #1: ffffc90000127c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 614.084205][ T32] locks held by pr/ttyS0/16: 1, last CPU#0: [ 614.084220][ T32] #0: ffffffff8fc364d8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 614.084284][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 614.084300][ T32] #0: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 614.084356][ T32] locks held by kworker/u8:2/43: 3, last CPU#0: [ 614.084384][ T32] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 614.084445][ T32] #1: ffffc90000b37c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 614.084509][ T32] #2: ffff888056792258 (&devlink->lock_key#11){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 614.084583][ T32] locks held by kworker/u8:6/501: 3, last CPU#0: [ 614.084599][ T32] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 614.084660][ T32] #1: ffffc900040bfc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 614.084723][ T32] #2: ffff888077a13258 (&devlink->lock_key#9){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 614.084800][ T32] locks held by getty/5375: 2, on CPU#1: [ 614.084815][ T32] #0: ffff8880368b90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 614.084872][ T32] #1: ffffc900032432e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 614.084961][ T32] locks held by kworker/1:10/12862: 3, last CPU#1: [ 614.084989][ T32] #0: ffff88801c069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 614.085051][ T32] #1: ffffc90006597c40 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 614.085111][ T32] #2: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3de/0x18b0 [ 614.085175][ T32] locks held by kworker/u8:14/15007: 2, on CPU#0: [ 614.085191][ T32] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 614.085252][ T32] #1: ffffc900049ffc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 614.085313][ T32] locks held by kworker/u8:16/15009: 4, last CPU#0: [ 614.088203][ T32] #0: ffff888033174940 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 614.088286][ T32] #1: ffffc900049dfc40 ((work_completion)(&(&bat_priv->mcast.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 614.088348][ T32] #2: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: batadv_mcast_mla_update+0x186/0x3750 [ 614.088406][ T32] #3: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 614.088471][ T32] locks held by udevd/18631: 1, on CPU#0: [ 614.088485][ T32] #0: ffff88802664e350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 614.088552][ T32] locks held by udevd/18637: 1, on CPU#0: [ 614.088566][ T32] #0: ffff888021b9a350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 614.088623][ T32] locks held by syz.1.3411/18829: 2, on CPU#0: [ 614.088638][ T32] #0: ffffffff912c6648 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 614.088699][ T32] #1: ffffffff9009f740 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 614.088764][ T32] locks held by syz.2.3625/19733: 2, on CPU#0: [ 614.088779][ T32] #0: ffffffff912c6648 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 614.088838][ T32] #1: ffffffff9009f740 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x104/0x610 [ 614.088919][ T32] locks held by syz.3.3723/20122: 2, on CPU#0: [ 614.088934][ T32] #0: ffffffff912c6648 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 614.088996][ T32] #1: ffffffff9009f740 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_unlock_filesystem_doit+0x2af/0x410 [ 614.089091][ T32] locks held by syz.3.3723/20124: 2, on CPU#0: [ 614.089106][ T32] #0: ffffffff912c6648 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 614.089166][ T32] #1: ffffffff9009f740 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_unlock_filesystem_doit+0x2af/0x410 [ 614.089233][ T32] locks held by syz.0.4177/22022: 2, on CPU#0: [ 614.089248][ T32] #0: ffffffff912c6648 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 614.089307][ T32] #1: ffffffff9009f740 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 614.089369][ T32] locks held by syz.6.4226/22211: 2, last CPU#0: [ 614.089385][ T32] #0: ffff8880579cbbc0 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 614.089449][ T32] #1: ffffffff9058d4c0 (fill_pool_map-wait-type-override){+.+.}-{3:3}, at: debug_object_activate+0x364/0x420 [ 614.089513][ T32] locks held by syz.7.4270/22389: 3, on CPU#0: [ 614.089535][ T32] #0: ffff8880579b7b00 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 614.089597][ T32] #1: ffff888029ec8260 (sk_lock-AF_CAN){+.+.}-{0:0}, at: bcm_release+0x1d4/0xa30 [ 614.089653][ T32] #2: ffffffff8fd62c68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 614.089734][ T32] locks held by syz.7.4270/22390: 1, on CPU#0: [ 614.274895][ T32] #0: ffff888040e05060 (&pipe->mutex){+.+.}-{4:4}, at: splice_file_to_pipe+0x3e/0x6b0 [ 614.274969][ T32] locks held by modprobe/22409: 1, last CPU#0: [ 614.274986][ T32] #0: ffffffff904f28f8 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 614.275048][ T32] locks held by modprobe/22411: 1, last CPU#0: [ 614.275064][ T32] #0: ffff88807a849bc0 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 614.275144][ T32] [ 614.275151][ T32] ============================================= [ 614.275151][ T32] [ 614.275178][ T32] NMI backtrace for cpu 0 [ 614.275202][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 614.275226][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 614.275239][ T32] Call Trace: [ 614.275249][ T32] [ 614.275259][ T32] dump_stack_lvl+0xe8/0x150 [ 614.275293][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 614.275330][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 614.275370][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 614.275406][ T32] sys_info+0x135/0x170 [ 614.275435][ T32] watchdog+0xfd7/0x1030 [ 614.275469][ T32] ? watchdog+0x1c7/0x1030 [ 614.275501][ T32] kthread+0x38b/0x480 [ 614.275533][ T32] ? __pfx_watchdog+0x10/0x10 [ 614.275555][ T32] ? __pfx_kthread+0x10/0x10 [ 614.275579][ T32] ret_from_fork+0x514/0xb70 [ 614.275606][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 614.275628][ T32] ? __switch_to+0xc89/0x1420 [ 614.275662][ T32] ? __pfx_kthread+0x10/0x10 [ 614.275687][ T32] ret_from_fork_asm+0x1a/0x30 [ 614.275727][ T32] [ 614.275914][ T32] Sending NMI from CPU 0 to CPUs 1: [ 614.276048][ C1] NMI backtrace for cpu 1 [ 614.276062][ C1] CPU: 1 UID: 0 PID: 12862 Comm: kworker/1:10 Not tainted syzkaller #0 PREEMPT(full) [ 614.276084][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 614.276096][ C1] Workqueue: events_power_efficient neigh_periodic_work [ 614.276129][ C1] RIP: 0010:unwind_next_frame+0x0/0x2550 [ 614.276154][ C1] Code: cc cc 89 d9 80 e1 07 80 c1 03 38 c1 7c 92 48 89 df e8 14 de c0 00 eb 88 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 83 ec 70 49 89 fe 49 [ 614.276170][ C1] RSP: 0018:ffffc90000a17f40 EFLAGS: 00000202 [ 614.276185][ C1] RAX: 0000000000000001 RBX: ffffc90000a18000 RCX: 8000000000000100 [ 614.276199][ C1] RDX: dffffc0000000000 RSI: ffffffff818913c6 RDI: ffffc90000a17f48 [ 614.276213][ C1] RBP: ffffc90000a17fd0 R08: ffffc90000a18010 R09: 000000000000000e [ 614.276227][ C1] R10: ffffc90000a17f98 R11: ffffffff81b2c4a0 R12: ffff888036189f40 [ 614.276242][ C1] R13: ffffffff822d0536 R14: ffffffff81b2c4a0 R15: ffffc90000a17f48 [ 614.276256][ C1] FS: 0000000000000000(0000) GS:ffff888123bbf000(0000) knlGS:0000000000000000 [ 614.276272][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 614.276285][ C1] CR2: 00007f7609027dac CR3: 000000000fb48000 CR4: 00000000003526f0 [ 614.276301][ C1] Call Trace: [ 614.276308][ C1] [ 614.276315][ C1] arch_stack_walk+0x11b/0x150 [ 614.276341][ C1] ? handle_softirqs+0x226/0x860 [ 614.276368][ C1] ? skb_clone+0x212/0x3a0 [ 614.276388][ C1] stack_trace_save+0xa9/0x100 [ 614.276411][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 614.276434][ C1] ? neigh_periodic_work+0xc23/0xe40 [ 614.276464][ C1] kasan_save_track+0x3e/0x80 [ 614.276486][ C1] ? kasan_save_track+0x3e/0x80 [ 614.276507][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 614.276531][ C1] ? kmem_cache_alloc_noprof+0x2b9/0x600 [ 614.276551][ C1] ? skb_clone+0x212/0x3a0 [ 614.276569][ C1] ? br_flood+0x3c0/0x8d0 [ 614.276589][ C1] ? br_handle_frame_finish+0x1119/0x1950 [ 614.276612][ C1] ? br_nf_hook_thresh+0x3dd/0x4c0 [ 614.276635][ C1] ? br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 614.276660][ C1] ? br_nf_pre_routing_ipv6+0x382/0x6f0 [ 614.276685][ C1] ? br_handle_frame+0x1329/0x1600 [ 614.276708][ C1] ? __netif_receive_skb_core+0x989/0x30c0 [ 614.276734][ C1] ? process_backlog+0x727/0x18b0 [ 614.276760][ C1] ? __napi_poll+0xaa/0x330 [ 614.276783][ C1] ? net_rx_action+0x61d/0xf50 [ 614.276808][ C1] ? handle_softirqs+0x226/0x860 [ 614.276857][ C1] __kasan_slab_alloc+0x6c/0x80 [ 614.276882][ C1] kmem_cache_alloc_noprof+0x2b9/0x600 [ 614.276901][ C1] ? skb_clone+0x212/0x3a0 [ 614.276920][ C1] ? kmem_cache_alloc_noprof+0x156/0x600 [ 614.276939][ C1] ? skb_clone+0x212/0x3a0 [ 614.276962][ C1] skb_clone+0x212/0x3a0 [ 614.276984][ C1] br_flood+0x3c0/0x8d0 [ 614.277018][ C1] br_handle_frame_finish+0x1119/0x1950 [ 614.277050][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 614.277075][ C1] ? ip6t_do_table+0x1d1/0x15b0 [ 614.277105][ C1] ? __pfx_ip6t_do_table+0x10/0x10 [ 614.277134][ C1] ? nf_hook_slow+0x176/0x220 [ 614.277161][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 614.277185][ C1] br_nf_hook_thresh+0x3dd/0x4c0 [ 614.277209][ C1] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 614.277238][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 614.277262][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 614.277287][ C1] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 614.277316][ C1] br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 614.277342][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 614.277370][ C1] br_nf_pre_routing_ipv6+0x382/0x6f0 [ 614.277397][ C1] ? br_nf_pre_routing_ipv6+0x43d/0x6f0 [ 614.277423][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 614.277451][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 614.277477][ C1] ? br_nf_pre_routing+0x720/0x14b0 [ 614.277505][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 614.277529][ C1] br_handle_frame+0x1329/0x1600 [ 614.277560][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 614.277585][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 614.277608][ C1] ? kasan_quarantine_put+0xbb/0x1f0 [ 614.277630][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 614.277654][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 614.277676][ C1] __netif_receive_skb_core+0x989/0x30c0 [ 614.277713][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 614.277738][ C1] ? ip6_rcv_finish+0x265/0x280 [ 614.277760][ C1] ? NF_HOOK+0x336/0x3c0 [ 614.277791][ C1] ? process_backlog+0x3de/0x18b0 [ 614.277817][ C1] ? process_backlog+0x3de/0x18b0 [ 614.277846][ C1] process_backlog+0x727/0x18b0 [ 614.277874][ C1] ? call_timer_fn+0xd5/0x5f0 [ 614.277899][ C1] ? process_backlog+0x3de/0x18b0 [ 614.277933][ C1] __napi_poll+0xaa/0x330 [ 614.277960][ C1] net_rx_action+0x61d/0xf50 [ 614.277993][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 614.278042][ C1] handle_softirqs+0x226/0x860 [ 614.278069][ C1] ? do_softirq+0x77/0xd0 [ 614.278096][ C1] ? neigh_periodic_work+0xc23/0xe40 [ 614.278124][ C1] do_softirq+0x77/0xd0 [ 614.278148][ C1] [ 614.278154][ C1] [ 614.278160][ C1] __local_bh_enable_ip+0x100/0x140 [ 614.278186][ C1] neigh_periodic_work+0xc23/0xe40 [ 614.278218][ C1] ? process_scheduled_works+0x97a/0x1630 [ 614.278244][ C1] process_scheduled_works+0xc3d/0x1630 [ 614.278287][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 614.278316][ C1] ? assign_work+0x3cf/0x5d0 [ 614.278343][ C1] worker_thread+0xa47/0xfb0 [ 614.278377][ C1] ? __kthread_parkme+0x71/0x1f0 [ 614.278410][ C1] kthread+0x38b/0x480 [ 614.278429][ C1] ? __pfx_worker_thread+0x10/0x10 [ 614.278453][ C1] ? __pfx_kthread+0x10/0x10 [ 614.278472][ C1] ret_from_fork+0x514/0xb70 [ 614.278491][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 614.278510][ C1] ? __switch_to+0xc89/0x1420 [ 614.278538][ C1] ? __pfx_kthread+0x10/0x10 [ 614.278557][ C1] ret_from_fork_asm+0x1a/0x30 [ 614.278583][ C1] [ 614.692536][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 615.823361][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 615.832511][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 615.842616][ T32] Call Trace: [ 615.845940][ T32] [ 615.848907][ T32] vpanic+0x56d/0xa60 [ 615.852945][ T32] ? __pfx___schedule+0x10/0x10 [ 615.857832][ T32] ? __pfx_vpanic+0x10/0x10 [ 615.862405][ T32] panic+0xc5/0xd0 [ 615.866177][ T32] ? __pfx_panic+0x10/0x10 [ 615.870638][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 615.876160][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 615.881575][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 615.887781][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 615.893989][ T32] watchdog+0x1030/0x1030 [ 615.898362][ T32] ? watchdog+0x1c7/0x1030 [ 615.902828][ T32] kthread+0x38b/0x480 [ 615.906955][ T32] ? __pfx_watchdog+0x10/0x10 [ 615.911678][ T32] ? __pfx_kthread+0x10/0x10 [ 615.916312][ T32] ret_from_fork+0x514/0xb70 [ 615.920952][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 615.926095][ T32] ? __switch_to+0xc89/0x1420 [ 615.930822][ T32] ? __pfx_kthread+0x10/0x10 [ 615.935446][ T32] ret_from_fork_asm+0x1a/0x30 [ 615.940260][ T32] [ 615.943926][ T32] Kernel Offset: disabled [ 615.948271][ T32] Rebooting in 86400 seconds..