last executing test programs: 3m49.36215557s ago: executing program 0 (id=2329): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) listen(0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000400)="e4e647c9e0b8e9a2f2ab3026da58", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fdffffff00000000880000009111880000000000950000000000006f18d3fb978e5f3d410828bfd757210000"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r2}, 0x8) close(0x3) 3m48.413866501s ago: executing program 0 (id=2341): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES64=r2, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002"], 0x3c}, 0x1, 0x0, 0x0, 0x4005}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000940)={0x20, 0x1, 0x3, 0x3, 0x0, 0x0, {0x1}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x1ff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x4040840) sendmsg$nl_generic(r3, &(0x7f0000002cc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002c80)={&(0x7f0000001b00)=ANY=[@ANYBLOB="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"], 0x117c}, 0x1, 0x0, 0x0, 0x4040880}, 0x800) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x40) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000780)={0x2c, r7, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4044014) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, r7, 0x200, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x4) 3m48.003081337s ago: executing program 0 (id=2344): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x20000, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) 3m47.862522432s ago: executing program 0 (id=2345): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=@newqdisc={0x34, 0x24, 0x1, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xe, 0xfff1}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40080b0) (async) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, &(0x7f0000000400)={0x2000201c}) (async) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000080)}}, {{&(0x7f0000000000)={0xa, 0x4e28, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1002}, 0x1c, &(0x7f0000000040), 0x3e}}], 0x2, 0x20001840) (async) shutdown(r0, 0x1) 3m47.690409889s ago: executing program 0 (id=2348): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000003feffff720a00fef8ffffff71a4f1ff0000000071302000000000001d400500000000004704000001ed000007030000030000001d44000000000000620a00ff040400007203020100200000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) r1 = socket$l2tp(0x2, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f00000008c0)) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000009c0), r2) sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010027bd700000000000000000000000000000000000d7831fe445b35e61289d27fd65cdf3b1e19239239c6bf0a7c6544c11f2e5d19ecd7fb9a32a233b88b8fdeda358cd8f76d28ab36cc9be7111bb11ceb2f885f4cc6de3a671d3c6"], 0x1c}, 0x1, 0x0, 0x0, 0x8405d22596f37403}, 0x4054) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, r3, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4c000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) syz_extract_tcp_res(&(0x7f00000005c0)={0x41424344}, 0xffffff0d, 0x3) syz_emit_ethernet(0x17a, &(0x7f0000000600)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@mpls_mc={0x8848, {[{0x80000}, {0x0, 0x0, 0x1}, {0xf8, 0x0, 0x1}], @ipv6=@tcp={0x9, 0x6, "814587", 0x138, 0x6, 0x0, @empty, @dev={0xfe, 0x80, '\x00', 0x14}, {[@hopopts={0x33, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x1}]}, @hopopts={0xff, 0x4, '\x00', [@calipso={0x7, 0x20, {0x0, 0x6, 0x7, 0x7, [0xff, 0xfffffffffffff801, 0x10000]}}]}, @routing={0x5c, 0x4, 0x6, 0xf8, 0x0, [@remote, @mcast2]}], {{0x4e23, 0x4e20, 0x41424344, r5, 0x1, 0x0, 0x14, 0x40, 0x8, 0x0, 0xb0e0, {[@mptcp=@capable={0x1e, 0xc, 0x7, 0x8, 0x6, 0x7fff}, @generic={0x2, 0x10, "659ec50a6fe8f9f97b11a0daef4c"}, @sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa, 0x5, 0x8}, @fastopen={0x22, 0x2}, @exp_smc={0xfe, 0x6}, @generic={0x0, 0x9, "d87f847b8eabb5"}, @sack_perm={0x4, 0x2}, @eol]}}, {"64772e6651e54e125b80eb4a34617c077de73da24e7643f022c14af3d56b592a3da546aa6b90ada0f6ce8ceb730aa5abed55fb0c9475408e688eac4087f203b74cb09d83305143da0bd066a481af9fc6bcf9125a3b4ce17b71de7ae8321c9a88d88d5fa80aa65c2e03e0b9394fe4d19b103eaff387c10dfd7bbe0740237806de"}}}}}}}}, &(0x7f00000007c0)={0x1, 0x1, [0x72b, 0x5ef, 0x20, 0xba3]}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r4], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215, 0x100000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x3c}, 0x1, 0xba01}, 0x0) sendmsg$inet(r7, &(0x7f0000002580)={&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000002440)=[{&(0x7f0000001480)="979554e6ce2855abaea417b941f1afad657776ea55081ab6a6c660158f042b2f5553dce6d9cb97432b1cfc06968035b2cca8e3f42cf422404b613cc7c8d168c4a489cd7df6996cca75982ae4584bbec6c01f4f3680d16305d6181512b00a1c857e04f2f97b0fa9311ec13862269e16aa1d2e9e90640a7b9f05ae17510b84718727b1a20b0d9d582ae9b7b52993180cdaf96559f0d3f0cd9c40a603dd1852ae888a34b04e8bba65115ed7616cdb9b76b921586b6b8ec23cb8dbe4716b61bbc4cf7f1ba8423b605e8d6ba0f903a4d4e3d45c17735074b262dc0f014b4958d03dc63f06af3cf6fc9a5224d2de36cc14320073cbe29bb0d1dd", 0xf7}, {&(0x7f0000001580)="663dcd681316feda7d4a0b26d412ad2e7cba4882faa4e3c26c95730a29bf55d7c0c59dd1566f4bcd7582e73ca857464cd40003411677a7b5598bb3d12bbd9da86d7fd8cc2cea732e90c5b7d168acd9036b7eb9f9476b1731d573f58bdf9077d33cc723b7516b429de44c7bce4b64f76b96b6368880f7e1d47825c04620c0b1e5db33d0553e1ca7deee69c96f3f66f905421348b82041aac15572c796ca0e89", 0x9f}, {&(0x7f0000001640)="7a1850d54d973a00546feefa98f0c3cce2316482ce770a6663a4a4f18b770d870dc83d02c4bff34fe76f556498c4bbb5ac29c894458156ce328548ad6a62e26197fc969dac3b217d5d40c9", 0x4b}, {&(0x7f00000016c0)="0a8ee1186857317851a2c395a421c2d2d5e02bfa3e56da8c4c4f5696fcb786516d94391344a9abe4f8545f6982944bc9e043fa5a7b708bfc08c332a477e59a3850d26d1bdd27ec31d7f62bb2f40c33fcf9b46d6e50f840c753477d3956a80c0d0f1f", 0x62}, {&(0x7f0000001740)="ca92e78e8966b994d0521e8bab1facf0df006c17a39c4a378e358f8d7db9d265b6e3b8883a549685f12a578025ba61b8d54abdba51f058894cdcadec72b405080bc48bd21a5eebb08bc836cd0ae5b17dc4cb773f4b0c346040a6b3d400", 0x5d}, {&(0x7f00000022c0)="10f49dcebad2b775c512ad0274d7ffb6e287c17086750dd5c2b2c4d9342523735b30624f5759630e5a12af16c6391db1f045e78c636c8ab03265208c767aa4d69002062cf46e2bdc0a9f984023e08fa0f28be1c7dd5d29a603f9243fb17ba2b35faf46f7da12934fd89cf7bcce4ffee2c4c5542633b4bdf7ee3445cd8417de2fd788fe4d7c76948087e6e682a8a2aae11c2e9c6ecdf3c60419df1233c6c8a06fc3c4236204185a5f7d47734add87610f5ca40f3199b03bcc42ffced9d32e1a50d3a26c018aaec50a8c65f5542a4f0f41b183593b7076fcedcc3dfe578367", 0xde}, {&(0x7f00000023c0)="8ba4486e221c1526f54a2cc53ee0f07b3a555189ecc697898e33b586032c1c94f5a1eb34d7ecc4d714e27af7b7e8a421aed9e94a891d1b6c31a86439fc57f698b7ffe631cc96cd86a88ef7aa8964401b3a1ecc18c799ca085f54c35e7f5a5f", 0x5f}], 0x7, &(0x7f00000024c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfffffffd}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @broadcast, @rand_addr=0x64010102}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x498}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}], 0xb0}, 0x40000) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r10, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000000)="b9ff03030018698cb89e40f086dd6000000e00002f00630677", 0x0, 0xfa, 0x2000000, 0x3f, 0xc0, &(0x7f0000000440), &(0x7f0000000080), 0x4}, 0x50) 3m47.273032504s ago: executing program 0 (id=2353): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) unshare(0x2040600) openat$cgroup_ro(r1, &(0x7f00000001c0)='memory.current\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}, @IFLA_BOND_MIIMON={0x8, 0x3, 0x10}, @IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x4c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x2f, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbff, {0x6}}, 0x14}}, 0x0) 3m32.128868738s ago: executing program 32 (id=2353): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) unshare(0x2040600) openat$cgroup_ro(r1, &(0x7f00000001c0)='memory.current\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}, @IFLA_BOND_MIIMON={0x8, 0x3, 0x10}, @IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x4c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x2f, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbff, {0x6}}, 0x14}}, 0x0) 2m35.593316427s ago: executing program 2 (id=2647): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000180)) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x3ffe, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x6}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r3, {0xe}, {0xffff, 0xffff}, {0xe, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) (async, rerun: 32) r7 = socket$unix(0x1, 0x2, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r8, {0x4}, {}, {0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040091}, 0x0) 2m35.071125724s ago: executing program 2 (id=2650): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r2], 0x7c}, 0x1, 0x0, 0x0, 0x84050}, 0x40040) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYRES64=r5, @ANYRES32=r1, @ANYRESDEC=r5, @ANYRESHEX=r1, @ANYRESDEC=r3, @ANYRESHEX=r4, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4004}, 0x4) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYRES64=r5, @ANYRES32=r1, @ANYRESDEC=r5, @ANYRESHEX=r1, @ANYRESDEC=r3, @ANYRESHEX=r4, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4004}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r6, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0200000058032d9a3945ceb06092bb466032c1922afd81881feaafb27b04b57f6740914f9bb073f11f6673372c3174e1ac99ff", @ANYRES16=0x0, @ANYBLOB="020029bd7000fbdbdf251800000008000300", @ANYRES32=r7, @ANYBLOB="0a001a00ffffffffffff0000"], 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000851) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r8, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000140)=0x4) socket$inet(0x2, 0x4000000000000001, 0x31) (async) socket$inet(0x2, 0x4000000000000001, 0x31) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f0000000280)="96fa2c0bff2099297e1c1ea6d53ff4c2f69b32d385f14857ae25047e39555bbacdb216aa20b99d21a3aa5e5775e86006778ec677400377670a3422aa5184ed400cf452f14ef81d20a792091e037ed82c9ee401f0f428bd4951eab88952d04fd3c2201db3378816", 0xfffffdce) (async) write(r10, &(0x7f0000000280)="96fa2c0bff2099297e1c1ea6d53ff4c2f69b32d385f14857ae25047e39555bbacdb216aa20b99d21a3aa5e5775e86006778ec677400377670a3422aa5184ed400cf452f14ef81d20a792091e037ed82c9ee401f0f428bd4951eab88952d04fd3c2201db3378816", 0xfffffdce) close(r9) socket$packet(0x11, 0x3, 0x300) (async) r11 = socket$packet(0x11, 0x3, 0x300) socket$inet_mptcp(0x2, 0x1, 0x106) (async) socket$inet_mptcp(0x2, 0x1, 0x106) r12 = socket(0x840000000002, 0x3, 0x100) bind$rds(r12, 0x0, 0x0) setsockopt$packet_fanout(r11, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4) (async) setsockopt$packet_fanout(r11, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4) setsockopt$packet_int(r11, 0x107, 0xc, &(0x7f00000003c0)=0x3, 0x4) (async) setsockopt$packet_int(r11, 0x107, 0xc, &(0x7f00000003c0)=0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000006340), 0xffffffffffffffff) 2m34.568026706s ago: executing program 2 (id=2653): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x18) (async, rerun: 32) r1 = socket$inet(0x2, 0x3, 0x101) (rerun: 32) sendmsg$inet(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10, &(0x7f0000000140)=[{&(0x7f00000004c0)='\b', 0x1}, {0x0}], 0x2}, 0x24008004) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@fallback=r0, 0x34, 0x0, 0x7, &(0x7f0000000040)=[0x0], 0x1, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) write(r0, &(0x7f00000001c0)="6de1da62b5bc0d9bf9812fe661302a8330db521682d6c824a5adc79df7bf77a7834a1c6da730cc66ecacc0d58ab752c77bc97de5006cf5da64923e637779b1c6975e4589499e01e6b97b495a3b6ca11ac82922b181301cc3f0a188025065396767ad4b6296f9af95d7968f16f45dfebbefb320f3dc7f04", 0x77) 2m33.805664357s ago: executing program 2 (id=2661): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x5, &(0x7f00000000c0)=@framed={{}, [@map_fd={0x18, 0x8, 0x1, 0x0, r0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x0, 0x401}, 0xc) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000000)={'pim6reg\x00', 0x2}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xd9, @dev={0xfe, 0x80, '\x00', 0x35}, 0x5}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000a80)={r4, 0x18, "132bf2b2631e4a669e5ab545f4df3af85ad7e43ec2b12936"}, &(0x7f0000000180)=0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r5, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f00000006c0)}, 0x20) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000740)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(r5, 0xc4009420, &(0x7f0000000ac0)={0x12, 0x3, {0x2, @struct={0x7ff, 0xc2e7}, 0x0, 0x0, 0x100000001, 0x5, 0x7, 0x2, 0x10, @usage=0x3, 0x32, 0x30000000, [0x4, 0x10, 0x54, 0x6, 0x9, 0x3]}, {0x8000, @struct={0x6, 0x2}, 0x0, 0x1, 0xf335, 0x9, 0x3, 0x4, 0x10, @struct={0x800, 0x38}, 0x4, 0xe2c1, [0x1, 0x8001, 0x4, 0x9, 0x3beb, 0xfffffffffffffff7]}, {0x8000000000000000, @usage=0x7ff, 0x0, 0x80000001, 0x8, 0x3, 0xe, 0xffff, 0x92, @struct={0x10000, 0x4f8}, 0x1, 0x800, [0x8000000000000001, 0x1800, 0xfffffffffffffffc, 0x9, 0x1, 0xfffffffffffffff6]}, {0x3, 0x2, 0x8681}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r6, 0x5000943f, &(0x7f0000002380)={{r6}, r7, 0xa, @unused=[0x9, 0x8, 0x0, 0x5], @devid=r8}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f00000002c0)={0x1, 0x6, {0xd03, @usage=0x100, 0x0, 0x3, 0x1ff, 0xe, 0x0, 0x7fffffffffffffff, 0x34, @struct={0x9, 0x9}, 0x194b, 0xfffffff9, [0x191, 0x100000000, 0x6, 0x4, 0x2, 0x30e0]}, {0xe, @usage=0x9, 0x0, 0x3, 0x40, 0x6, 0x46fc, 0x7, 0x7c, @struct={0x9, 0x5}, 0x40, 0x80, [0xffffffffffffffff, 0x9, 0xfffffffffffffff7, 0x3, 0x5, 0x2]}, {0x7, @struct={0xa, 0x7fffffff}, 0x0, 0xdc91, 0x1, 0x3, 0x3, 0x93, 0x4, @struct={0x5, 0x6}, 0x1, 0x3ac, [0x8, 0xfffffffffffffffc, 0x7fffffff, 0x7ff, 0x7, 0x7]}, {0x10001, 0x4, 0x6}}) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f00000006c0)={{r1}, r7, 0x8, @unused=[0x1ff, 0x2, 0x5, 0x590], @devid=r9}) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r10, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r11, 0x8, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) 2m32.797153912s ago: executing program 2 (id=2672): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0), &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000002c0)={r2, @in6={{0xa, 0x4e23, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, [0xff, 0x3ff, 0x400, 0xc, 0x9cb, 0x9, 0x48f, 0x6, 0x7, 0x2, 0xab, 0x3, 0x6, 0x10, 0x2]}, &(0x7f00000003c0)=0x100) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip_vti0\x00'}) 2m32.674377712s ago: executing program 2 (id=2674): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000004000a98000000060a0b040000000000000000020000006c00048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000042c0001800a0001006c696d69740000001c0002800c00014000000000000000230c00024000000000000000010900010073797a3000000000090002"], 0xc0}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00"/50], 0xfdef) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000002c0)={0x40, 0x0, 0x1}, 0x10) r4 = socket(0x10, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)={0x14, 0x4, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000004) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x6, 0x2}, 0x10) write(r4, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r4, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x50, 0x140b, 0x100, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4000080) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x2270bd24, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000140)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff010}, {0x6, 0xba, 0x2, 0xefff}]}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbb8b5cbbbb0800450000a70000000200119078000000000000000000000000010000000000060080000000"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001f00)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xd, 0xa}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r10, 0x1, 0xd8, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000b00)={'ip6_vti0\x00', &(0x7f0000000a80)={'syztnl0\x00', 0x0, 0x2f, 0x3, 0x40, 0xdd, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x7800, 0x7800, 0xbf, 0x9}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x14c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x404c000}, 0x20000000) 2m17.610991023s ago: executing program 33 (id=2674): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000004000a98000000060a0b040000000000000000020000006c00048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000042c0001800a0001006c696d69740000001c0002800c00014000000000000000230c00024000000000000000010900010073797a3000000000090002"], 0xc0}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00"/50], 0xfdef) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000002c0)={0x40, 0x0, 0x1}, 0x10) r4 = socket(0x10, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)={0x14, 0x4, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000004) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x6, 0x2}, 0x10) write(r4, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r4, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x50, 0x140b, 0x100, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4000080) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x2270bd24, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000140)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff010}, {0x6, 0xba, 0x2, 0xefff}]}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbb8b5cbbbb0800450000a70000000200119078000000000000000000000000010000000000060080000000"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001f00)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xd, 0xa}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r10, 0x1, 0xd8, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000b00)={'ip6_vti0\x00', &(0x7f0000000a80)={'syztnl0\x00', 0x0, 0x2f, 0x3, 0x40, 0xdd, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x7800, 0x7800, 0xbf, 0x9}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x14c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x404c000}, 0x20000000) 1m43.957837259s ago: executing program 3 (id=3032): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xb, 0x8, 0x20, 0xffffffff, 0x1, 0x1, 0x800, '\x00', 0x0, r1}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000040000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000003000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x92}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'ipvlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000540)={@rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000, 0x4, 0x7, 0x100, 0x80, 0x80300000, r6}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000980)={{r4, 0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)='%-5lx \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x18, 0x1f, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffb, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@jmp={0x5, 0x0, 0x4, 0x3, 0x8, 0x50}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000740)='syzkaller\x00', 0x29, 0x2f, &(0x7f0000000840)=""/47, 0x41100, 0x2, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x5, 0x9, 0x9, 0x8001}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000009c0)=[r7, r3, 0x1, r2], &(0x7f0000000a00)=[{0x1, 0x2, 0xa}, {0x0, 0x5, 0x0, 0xa}, {0x1, 0x5, 0xa, 0x3}, {0x3, 0x4, 0xe, 0x5}]}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000005f00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010028bd7000fbdbdf256a00000008000300", @ANYRES32=r11], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5}, 0xc) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0x42, 0x4, 0x2e8, 0xffffffff, 0x98, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x250, 0x250, 0x250, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x3e020000, 0x70, 0x98, 0x0, {0x88000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0x70, 0xd0, 0x0, {0x122}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}}}, {{@ip={@rand_addr=0x64010101, @empty, 0xffffffff, 0xffffffff, 'batadv_slave_1\x00', 'veth1_to_batadv\x00', {0xff}, {}, 0x4, 0x2, 0x47}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) 1m43.582217837s ago: executing program 3 (id=3035): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e20, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}}, 0x0, 0x0, 0x4d, 0x0, "e8eb94e33628290046228c8db144b8974951c8357aa975414eacd02afb6c0bd70e1d2b12f90e4aed00ac34713c534c814626d9fafd1e198c36aa24ecc1595e19bf9ebf5e34227a0655e74e27e1c35eea"}, 0xd8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket(0x400000000010, 0x5, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x80800) epoll_create1(0x80000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20c080, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000380)={'dummy0\x00', 0x200}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f00000000c0)={0x7, &(0x7f0000000480)=[{0x0, 0x8}, {0x60, 0x7, 0xff, 0x8000000}, {0x15, 0x0, 0x8, 0x1b67e8b0}, {0x11, 0x1, 0x3, 0x6000}, {0x6, 0x3, 0x80, 0x6d}, {0xc58, 0x5, 0xf1, 0x4}, {0x401, 0x1, 0xcb, 0x6}]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x8) r7 = socket(0x21, 0x4, 0x2) ioctl$SIOCX25GSUBSCRIP(r7, 0x89e0, &(0x7f0000000280)={'veth0_to_bond\x00', 0xa3a9, 0x3}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0x1e, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r10, 0x6, 0xd, 0x0, &(0x7f0000000000)) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r3, @ANYBLOB, @ANYRESDEC=r2, @ANYRESHEX=r1, @ANYRES32=r6, @ANYRES8=r3], 0x1c}, 0x1, 0x0, 0x0, 0x24048000}, 0x240080d0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="220000000451a108000000"], 0x48) 1m43.273431438s ago: executing program 3 (id=3037): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r1, 0x1, 0x70bd27, 0x6, {{}, {@void, @val={0xc, 0x99, {0x2, 0x3}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x72}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040}, 0x80) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x850) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, &(0x7f0000000700), 0x0, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000000)=""/4102, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048014}, 0x20048804) writev(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848130000", 0x17}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x42013, 0x2020e}}, 0x20}, 0x1, 0x0, 0x0, 0x20000886}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYRES16=0x0], 0x70}, 0x1, 0x0, 0x0, 0x40005}, 0x40) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendto$inet6(r2, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f0000000380)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={0x0, 0x568}, 0x8) ioctl$NILFS_IOCTL_GET_CPINFO(r2, 0x80186e82, &(0x7f0000000100)={&(0x7f0000000080)=[{0x2, 0x0, 0x100000000, 0x9, 0xfffffffffffffff9, 0x3, 0xa1f9, 0xda9}, {0x3, 0x0, 0x7, 0x9, 0x7, 0xfffffffffffffffc, 0x8, 0xfc}], 0x2, 0x38, 0x1, 0xb8ad}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000003c0)={0x0, 0x41, "13a5d0b8267cdd9d0124d8ddcb19e3db8bb436067df3e90d9ce659f6710c12fb6c8ae00d9ca7bbccb30665378d8aec9a858aa8a9c631972627513108e667ed0b57"}, &(0x7f0000000440)=0x49) 1m40.920080946s ago: executing program 3 (id=3049): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800400001"], 0x50) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x4c}}, 0x0) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={0x0, &(0x7f0000000180)=""/142, &(0x7f0000000340), &(0x7f0000000440), 0x1, r0}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000002200000000000000160000008500000061000000850000005000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x0, 0x36, 0x0, &(0x7f0000000100)="f4b84de4115d64244a0e839e86dd4bd0b7eb56c48d27623c5fafa3a3e86992e48ceb41e1bd8ede5ea5378c07bd37057dbe0f2e0d9938", 0x0, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 1m40.61785301s ago: executing program 3 (id=3052): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00'}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xd8, r2, 0x400, 0x70bd25, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20004000}, 0x84) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000680)="5a6a672ed6cfb0394a0d08a11d86624fe2dcce48e4fdcc11e00380738c82091e1dbaa4a0a04eaf4c5f5a010a1a90cd587555853b23dfa84a3da05fa79062148e739e3ecb181627c5735498846dec5ce7859624d49dade48a3fd63f3f8e7f135234a223ce0ddc4922f155111a29c59d866bb1ced85e5e28abc26bb72a9d206759cee06badc667bff028507260faae1fc60ed7228e30cae963018b53d11857692451f7bca538f0f599ea237cdb64226c639ec04cea69ca27e9a6c78940c84c72", 0xbf) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r8) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x20, r10, 0x1, 0x0, 0x1, {0x29}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r13, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xfffffffd, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56561, 0x70bd2a, 0x25dfdbfa, {0x0, 0x0, 0x0, r13, {0x0, 0xd}, {0x0, 0x8}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0xfffffffe}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048090) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1m39.407602515s ago: executing program 3 (id=3061): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000005000000050000000020000000b0000000000001104000000070000000a0000000000000203000000000000000500000d00404500020000000100000000000000000000000d000000feffffff100000000000000001000000030010"], 0x0, 0x6a, 0x0, 0x0, 0x1}, 0x28) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000640)={'filter\x00', 0x5, 0x4, 0x3f0, 0x110, 0x110, 0x110, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x0, 0x4, 0x4, {@mac=@remote, {[0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x3, 0x8, 0x7, 0x9, 0x6, 0x4, 'veth0_to_batadv\x00', 'ipvlan0\x00', {0xff}, {0xff}, 0x0, 0x2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty, 0xa}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private=0x1000, 0x0, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000}, 0x4000058) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000006c0)=@security={'security\x00', 0x44, 0x4, 0x578, 0xffffffff, 0x390, 0x240, 0x240, 0xffffffff, 0xffffffff, 0x4a8, 0x4a8, 0x4a8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x203, 0x1f8, 0x240, 0x8502, {}, [@common=@inet=@hashlimit2={{0x150}, {'ip6erspan0\x00', {0x3ff, 0x2, 0x0, 0x2, 0x2fff, 0x849a, 0x1, 0x18, 0x18}, {0x8}}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x9, 'syz0\x00', {0x2}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0xff, 0xff, 0xff], [0xffffffff, 0xff, 0x0, 0xffffff00], 'erspan0\x00', 'caif0\x00', {0x80}, {}, 0x2c, 0x0, 0x4, 0x50}, 0x0, 0x128, 0x150, 0x0, {0x0, 0x11}, [@common=@eui64={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'batadv_slave_0\x00', {0x8, 0x7, 0x101, 0x3, 0x4, 0x4, 0xfffffff8, 0x0, 0x78}, {0x9}}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x7, 0x81, 0x1, 0x0, "d13aea835ab25d2af06d2a594bd55044f3f8f4a6ee1c3d886408088b5319e5294d4192982093b0f1e78cdb4585b98822e00d4b509e74d3ebb43b153f2481c6e3"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) close(r4) socket$nl_sock_diag(0x10, 0x3, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000080)=@newnexthop={0x30, 0x68, 0x53e94e145082ecb3, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x4, 0x0, 0x4}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_NH4={0x8, 0x4, @private=0xa010101}}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x4}, @NHA_FDB={0x4}]}, 0x30}}, 0x4000000) r7 = socket$igmp(0x2, 0x3, 0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000000270001031dbd5002fadbdf2501"], 0x14}}, 0x0) setsockopt$MRT_TABLE(r7, 0x0, 0xcf, 0x0, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x800, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f00000002c0)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000300)=[{0x2, 0x1, 0x7, 0x8}], 0x10, 0x80000000}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r10 = socket(0x2, 0x2, 0x1) bind$unix(r10, &(0x7f0000000000)=@abs, 0x6e) connect$unix(r10, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x2010, r10, 0x18755000) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r9, 0xf505, 0x0) 1m36.960089283s ago: executing program 5 (id=3076): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x40080, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000001c0)={0x0, 0x22, &(0x7f0000000180)={&(0x7f0000000040)={0x38, 0x1, 0x1, 0x301, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast1}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x42}]}]}, 0x38}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x40, r2, 0x1, 0x3, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc}, @GTPA_NET_NS_FD={0x8}]}, 0x40}}, 0x0) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000001980)=0x3) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000019c0)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYBLOB="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", @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRESHEX=r1], 0x4c}}, 0x0) 1m36.673929497s ago: executing program 5 (id=3078): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20048000}, 0x20040880) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0x59ca020b}) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x3, @loopback}, 0xfffffffffffffea8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0xfffffffc, @empty}, 0x1c) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000) 1m36.431504442s ago: executing program 5 (id=3081): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x14, 0x23, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffff9}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@snprintf, @call={0x85, 0x0, 0x0, 0xb7}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, @map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0xd, 0x4, 0x6}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000200)=[{0x3, 0x4, 0x3, 0xa}, {0x2, 0x1, 0xa, 0x6}, {0x5, 0x3, 0xf, 0x9}, {0x0, 0x5, 0x3}, {0x0, 0x2, 0xd, 0x5}, {0x2, 0x2, 0xf}], 0x10, 0x5}, 0x94) r1 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x10) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000004c0)={r1, &(0x7f00000003c0)='}+-\'[\x00', 0x101000, &(0x7f0000000400)={@align=0x9, {0x3, 0x3, 0x8, 0x5}}, 0x8, &(0x7f0000000440)={@_ha_fsid}, &(0x7f0000000480)=0x5}) getsockopt$inet_int(r2, 0x0, 0x18, &(0x7f0000000500), &(0x7f0000000540)=0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000580), &(0x7f00000005c0)=0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000640)={0x1, &(0x7f0000000600)=[{0x4c, 0x3, 0x2, 0xcbef}]}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000006c0), r2) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x58, r4, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x9, 0x200, 0x9, 0x132]}]}, 0x58}, 0x1, 0x0, 0x0, 0x80040}, 0x40000) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), r2) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000940)={'gre0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x7800, 0x7, 0x6, 0x0, {{0x19, 0x4, 0x3, 0x3, 0x64, 0x68, 0x0, 0x3e, 0x2f, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x2f}, {[@end, @ra={0x94, 0x4}, @cipso={0x86, 0x39, 0x3, [{0x6, 0x3, "83"}, {0x6, 0x4, '2)'}, {0x5, 0xa, "ed2fda858964ae45"}, {0x2, 0x4, "c8a5"}, {0x1, 0x5, "46165f"}, {0x7, 0xc, "5d7af9d7940d35b7a9ab"}, {0x0, 0xd, "411205d09fd78c30f66f00"}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0xc, 0x6a, 0x3, 0x8, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffff9}]}]}}}}}) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000980)={@multicast1, @empty, 0x0}, &(0x7f00000009c0)=0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a80)={r2, 0x58, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000ac0)={'veth0_vlan\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000c00)={'erspan0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x8000, 0x8, 0xffffff00, 0xd9, {{0x30, 0x4, 0x2, 0x6, 0xc0, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @rand_addr=0x64010102, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x44, 0x3a, 0x1, 0x7, [{@local, 0xd56}, {@remote, 0x1}, {@local, 0x9}, {@loopback, 0x9c}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x401}, {@rand_addr=0x64010102}, {@local, 0x9}, {@remote}]}, @timestamp={0x44, 0x24, 0x78, 0x0, 0x3, [0x401, 0x16, 0x6, 0x8, 0x9, 0x7, 0x10, 0x44ec8890]}, @cipso={0x86, 0x3e, 0x2, [{0x2, 0xe, "49fb196604a87810d86182eb"}, {0x5, 0x11, "9218b17884231420b30341b4df7246"}, {0x6, 0xe, "e421b5c4208cc1c3eed8449c"}, {0x5, 0x5, 'V7t'}, {0x509636fbf17fe9f5, 0x6, "f853aa53"}]}]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000dc0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c40)={0x140, r5, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x11}, 0x48094) connect$can_bcm(r2, &(0x7f0000000e00), 0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000e40)={0x0, 0x33, "a6bf669efd61a8b0c595b8fbff53a803b3df3f398325a84a8fb0f861c7d7954e185c5555b6c0a57827038604f897df822bb01a"}, &(0x7f0000000e80)=0x3b) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000ec0)={r11, 0x1}, 0x8) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x34, r5, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x5}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0xa}, @ETHTOOL_A_LINKMODES_SPEED={0x8}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4008080) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000001000)={r11, 0xec}, 0x8) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r12, 0x84, 0x12, &(0x7f0000001040), 0x4) openat$cgroup_int(r2, &(0x7f0000001080)='memory.oom.group\x00', 0x2, 0x0) unshare(0x14000000) r13 = accept$inet(r2, &(0x7f00000010c0)={0x2, 0x0, @remote}, &(0x7f0000001100)=0x10) setsockopt$sock_attach_bpf(r13, 0x1, 0x32, &(0x7f0000001140)=r0, 0x4) bpf$ENABLE_STATS(0x20, &(0x7f0000001180), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000011c0)={r11, 0xb}, &(0x7f0000001200)=0x8) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f00000016c0)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001680)={&(0x7f0000001340)={0x320, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, [{{0x8, 0x1, r8}, {0x74, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}]}}, {{0x8, 0x1, r9}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r7}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r7}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}]}, 0x320}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) 1m36.229613174s ago: executing program 5 (id=3083): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) sendmmsg$inet(r2, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x6e1d, @multicast1}, 0x10, 0x0}}], 0x13, 0x2000c044) sendto$inet(r2, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000000)={0x0, 'bond_slave_0\x00', {0x4}, 0x1}) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0xce0, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0x2f, 0x9, 0x70bd2d, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 1m35.613870938s ago: executing program 5 (id=3085): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xe) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x14, 0x30, 0x13f}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESOCT=r0, @ANYRES16=r1], 0x60}, 0x1, 0x7}, 0x48044) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f00000004c0)=@req={0x8, 0x9, 0x4, 0x5ca}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000140)=[{0x30, 0x0, 0x0, 0xfffff03c}, {0x6, 0x0, 0x4}]}, 0x10) sendmsg$key(r6, &(0x7f0000000040)={0x9, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYRES16=0x0], 0xe0}, 0x1, 0x7}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000000090000000000000000000000000000080005400000001f080005400000001708000340000000080c00048008000140000000080c00048008000140000010060000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40081) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2000c802, &(0x7f0000000180)={0x2, 0x4e1e, @local}, 0xffffffffffffff63) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000080)='GPL\x00', 0x200000, &(0x7f0000000140)={@_ha_fsid={[0x2, 0x2]}, {0x7, 0x6, 0x6, 0x76a7}}, 0x4, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0x401}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r8, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(r8, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) listen(r8, 0x97) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 1m34.797006532s ago: executing program 5 (id=3091): socket$inet6(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000080)=ANY=[], 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x18}, 0x94) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000140)=0x8, 0x4) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={0x0}, 0x1, 0x0, 0x0, 0x20001010}, 0x20000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x0) 1m24.268990775s ago: executing program 34 (id=3061): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000005000000050000000020000000b0000000000001104000000070000000a0000000000000203000000000000000500000d00404500020000000100000000000000000000000d000000feffffff100000000000000001000000030010"], 0x0, 0x6a, 0x0, 0x0, 0x1}, 0x28) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000640)={'filter\x00', 0x5, 0x4, 0x3f0, 0x110, 0x110, 0x110, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x0, 0x4, 0x4, {@mac=@remote, {[0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x3, 0x8, 0x7, 0x9, 0x6, 0x4, 'veth0_to_batadv\x00', 'ipvlan0\x00', {0xff}, {0xff}, 0x0, 0x2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty, 0xa}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private=0x1000, 0x0, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000}, 0x4000058) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000006c0)=@security={'security\x00', 0x44, 0x4, 0x578, 0xffffffff, 0x390, 0x240, 0x240, 0xffffffff, 0xffffffff, 0x4a8, 0x4a8, 0x4a8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x203, 0x1f8, 0x240, 0x8502, {}, [@common=@inet=@hashlimit2={{0x150}, {'ip6erspan0\x00', {0x3ff, 0x2, 0x0, 0x2, 0x2fff, 0x849a, 0x1, 0x18, 0x18}, {0x8}}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x9, 'syz0\x00', {0x2}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0xff, 0xff, 0xff], [0xffffffff, 0xff, 0x0, 0xffffff00], 'erspan0\x00', 'caif0\x00', {0x80}, {}, 0x2c, 0x0, 0x4, 0x50}, 0x0, 0x128, 0x150, 0x0, {0x0, 0x11}, [@common=@eui64={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'batadv_slave_0\x00', {0x8, 0x7, 0x101, 0x3, 0x4, 0x4, 0xfffffff8, 0x0, 0x78}, {0x9}}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x7, 0x81, 0x1, 0x0, "d13aea835ab25d2af06d2a594bd55044f3f8f4a6ee1c3d886408088b5319e5294d4192982093b0f1e78cdb4585b98822e00d4b509e74d3ebb43b153f2481c6e3"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) close(r4) socket$nl_sock_diag(0x10, 0x3, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000080)=@newnexthop={0x30, 0x68, 0x53e94e145082ecb3, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x4, 0x0, 0x4}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_NH4={0x8, 0x4, @private=0xa010101}}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x4}, @NHA_FDB={0x4}]}, 0x30}}, 0x4000000) r7 = socket$igmp(0x2, 0x3, 0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000000270001031dbd5002fadbdf2501"], 0x14}}, 0x0) setsockopt$MRT_TABLE(r7, 0x0, 0xcf, 0x0, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x800, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f00000002c0)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000300)=[{0x2, 0x1, 0x7, 0x8}], 0x10, 0x80000000}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r10 = socket(0x2, 0x2, 0x1) bind$unix(r10, &(0x7f0000000000)=@abs, 0x6e) connect$unix(r10, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x2010, r10, 0x18755000) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r9, 0xf505, 0x0) 1m19.685010042s ago: executing program 35 (id=3091): socket$inet6(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000080)=ANY=[], 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x18}, 0x94) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000140)=0x8, 0x4) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={0x0}, 0x1, 0x0, 0x0, 0x20001010}, 0x20000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x0) 3.345179746s ago: executing program 7 (id=3813): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x34, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x2a}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_SEQ={0x8, 0xa, "107f3c36"}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000008000000070000000300000001"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r6) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000002b80)={0x34, r7, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'net/l2cap\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f00000006c0), 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0xe, &(0x7f0000000240)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0x36, 0xfffffeb2, &(0x7f0000000500)="b9ff03076804268cb89e14f086dd47e0ffff2000002800000000ac141416e000000129a130112b92121f9ae0dd972fa104edcce40d8d", 0x0, 0x2800, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r9, 0x917, 0x0, 0xffffffe4, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x44}}, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_ATM={0x8, 0x4, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) r14 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r14, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) 2.985957154s ago: executing program 1 (id=3816): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000880)={0xffffffffffffffff, &(0x7f0000000740)='%{[[\xbe--*\x00', 0x4629c0, &(0x7f0000000780)={@align=0x2, {0x5, 0x8001, 0xe2d8, 0x10000}}, 0x1ff, &(0x7f00000007c0)={@_ha_fsid}, &(0x7f0000000800)=0x9}) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000900)=@generic={&(0x7f00000008c0)='./file0\x00', 0x0, 0x18}, 0x18) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xc94, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000009c0)={0x1, 0xffffffffffffffff}, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x1, 0x40, 0x40, 0x41, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000840)="ac17a905bf7bb1b16516", &(0x7f00000003c0), 0x1003, r5}, 0x38) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000b80)={r5, &(0x7f00000005c0), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x15, 0x1a, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x2}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffa}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000540)='GPL\x00', 0xd, 0xd7, &(0x7f00000005c0)=""/215, 0x40f00, 0x30, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000700)={0x2, 0x7, 0xf, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000a00)=[0xffffffffffffffff, r1, r2, r3, r4, r5], &(0x7f0000000a40)=[{0x3, 0x5, 0x5, 0xb}, {0x2, 0x2, 0x1, 0x9}, {0x5, 0x2, 0x6, 0xa}, {0x1, 0x5, 0x0, 0x6}, {0x1, 0x4, 0x5, 0xb}], 0x10, 0x4}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x1d, 0x10, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000580)='GPL\x00', 0x5, 0x0, 0x0, 0x62cf590242879d3, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x1, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000600)=[0xffffffffffffffff], &(0x7f0000000640)=[{0x2, 0x5, 0xc, 0x2}], 0x10, 0x6}, 0x94) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000780)=@o_path={&(0x7f0000000740)='./file0\x00', 0x0, 0x18, r0}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{0x1, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX=r2], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r9) r10 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r11, @ANYRES32=r10, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r11}, &(0x7f0000000000), &(0x7f0000000080)=r9}, 0x20) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x11, 0xa551, 0xa154, 0x9, 0x2023, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1}, 0x50) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r13}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x16, 0x11, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='syzkaller\x00', 0xb, 0x9a, &(0x7f00000003c0)=""/154, 0x41000, 0xc, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0x10, 0x5, 0xb94}, 0x10, 0x0, r6, 0x1, &(0x7f0000000900)=[r7, r8, r11, r12, r13, 0xffffffffffffffff], &(0x7f0000000940)=[{0x4, 0x3, 0x9, 0x4}], 0x10, 0x9}, 0x94) bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc) r14 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r14, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r15, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xa1aef281da0db0b0}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) r16 = socket$netlink(0x10, 0x3, 0x4) writev(r16, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 2.891379465s ago: executing program 8 (id=3818): socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x30, 0x5, 0x0, 0xfffff038}, {0x6, 0x20, 0x2}]}, 0x10) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000140)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e21, @rand_addr=0x64010101}, {0x2, 0x4e22, @remote}, 0x120, 0x0, 0x0, 0x0, 0x8b81, &(0x7f0000000100)='ip6_vti0\x00', 0x8000000000000001, 0x2, 0x6}) 2.695307334s ago: executing program 1 (id=3820): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000008000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="690000000000000069105c000000000004000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b80)={r0, &(0x7f0000000a80), 0x0}, 0x20) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) (async) r2 = accept$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) (async) sendmsg$alg(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000024c0)="438dc77642449e6e17553493f7aeb57e36375ae9e2b947bee5b08bc1af2ca68b357310dce47d455f52765e1a97c5da42a110cfc487f25a4407c4ba", 0x3b}], 0x1, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4008011}, 0x4040004) recvmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/11, 0xb}], 0x1}, 0x2}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/4, 0x4}, {&(0x7f0000000780)=""/248, 0xf8}], 0x2}, 0xfff}], 0x2, 0x2021, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r5 = socket$inet6(0x10, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) (rerun: 32) setsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000400)={r7, 0x3a9817ee}, 0x8) (async) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000640)={'vxcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000340)={0x1d, r9, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r8, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000380)="ef8a561e07173f1a4d", 0x9}], 0x1}}], 0x4000000000001cc, 0x20040891) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) connect$can_j1939(r8, &(0x7f00000000c0)={0x1d, r10, 0x1, {0x1, 0xf0, 0x1}, 0xfe}, 0x18) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0x4a, &(0x7f0000000000)=0xffff2652, 0x4) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@random="b39325b29998", @multicast, @void, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x40, 0x68, 0x0, 0x0, 0x2f, 0x0, @private=0xa010101, @local, {[@generic={0x44, 0xd, "0aee36024d07db023fc0d6"}]}}, @time_exceeded={0x80, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000100f9ffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000200000001c001a801800028014000180080020000100000008000e000500000008001b"], 0x44}, 0x1, 0x0, 0x0, 0x24048091}, 0x0) 2.645329076s ago: executing program 8 (id=3821): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x334, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x81, 0x4e}}, @TCA_STAB={0x1bc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0xf8, 0x1, 0x4, 0x1, 0x7fff, 0x7fff, 0x2}}, {0x8, 0x2, [0x9, 0x800]}}, {{0x1c, 0x1, {0x0, 0x4, 0xc62f, 0x4, 0x1, 0x40c69824, 0x2, 0x7}}, {0x12, 0x2, [0x4, 0x9, 0x4, 0xb, 0xf, 0xc381, 0x0]}}, {{0x1c, 0x1, {0xdf, 0x0, 0x100, 0x8, 0x0, 0x9, 0x7, 0x8}}, {0x14, 0x2, [0x1ff, 0x8, 0x280, 0x7f, 0x40, 0x0, 0x7fff, 0x1]}}, {{0x1c, 0x1, {0x20, 0x80, 0xa, 0x5, 0x1, 0x2, 0x200, 0x7}}, {0x12, 0x2, [0x8, 0x5, 0xde21, 0x5, 0x11, 0x6, 0x5]}}, {{0x1c, 0x1, {0x2, 0x5, 0x3, 0x5, 0x1, 0x6, 0x1ff, 0x5}}, {0xe, 0x2, [0x7, 0x1, 0x0, 0x80, 0x2]}}, {{0x1c, 0x1, {0x7, 0x0, 0x6, 0xd, 0x0, 0xff, 0x3, 0x9}}, {0x16, 0x2, [0xf86, 0xc, 0x33d, 0x7, 0x1, 0x1, 0x54d2, 0x5, 0xfffa]}}, {{0x1c, 0x1, {0x9, 0x5, 0x3, 0x1000, 0x0, 0x7, 0x2, 0x1}}, {0x6, 0x2, [0x7]}}, {{0x1c, 0x1, {0x3, 0x5, 0xc3c9, 0x8162, 0x2, 0x3ff, 0x100, 0x4}}, {0xc, 0x2, [0x0, 0x6, 0xbb31, 0xfff]}}, {{0x1c, 0x1, {0x46, 0x2, 0x6, 0x3, 0x2, 0x5eb717e8, 0x1, 0x5}}, {0xe, 0x2, [0x25, 0x9, 0x101, 0x2, 0x1cde]}}, {{0x1c, 0x1, {0xb, 0x7, 0x0, 0xb, 0x2, 0x0, 0xa, 0x6}}, {0x10, 0x2, [0x7, 0x3, 0x3, 0x7, 0x7582, 0xdf]}}]}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x7}}, @TCA_STAB={0x138, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x80, 0x8, 0x10000, 0x0, 0xc, 0x8, 0x7}}, {0x12, 0x2, [0x5, 0x0, 0x8, 0x9, 0x400, 0x3, 0x3]}}, {{0x1c, 0x1, {0x4e, 0x5, 0x9, 0x9, 0x1, 0x5, 0x0, 0x6}}, {0x10, 0x2, [0x712, 0x9, 0x8, 0xbbd2, 0x7ff, 0xefb]}}, {{0x1c, 0x1, {0x9, 0x65, 0x0, 0x8, 0x2, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x9, 0x3ff, 0xe, 0x7f, 0x9, 0xaa, 0x6]}}, {{0x1c, 0x1, {0x8, 0x7, 0x4, 0x1ff, 0x2, 0x4c538813, 0x9, 0x4}}, {0xc, 0x2, [0x0, 0x9813, 0x6, 0xd178]}}, {{0x1c, 0x1, {0x2, 0x5, 0xa, 0xf, 0x0, 0x3, 0x6, 0x4}}, {0xc, 0x2, [0x33, 0xc, 0x4bb, 0x3]}}, {{0x1c, 0x1, {0x0, 0x81, 0x8, 0x9, 0x1, 0x1, 0x6, 0x6}}, {0x10, 0x2, [0x9f, 0x900, 0x43, 0x392, 0x1, 0x81a]}}, {{0x1c, 0x1, {0x7, 0x4, 0x8, 0xffff8001, 0x1, 0x4, 0x0, 0x6}}, {0x10, 0x2, [0x8, 0x6, 0xffff, 0x6, 0x1, 0x0]}}]}]}, 0x334}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x6}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x326d}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, &(0x7f00000005c0)="ba", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14) 2.392786712s ago: executing program 4 (id=3823): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd29, 0x25dfdbfb, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_TABLE={0x8, 0xf, 0xffffff7f}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f00000013c0)=""/4096, 0x5}], 0x3f, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="d00000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="911f0100000000003000128009000100766c616e0000000020000280040003800600010002000000040004800c0002001a0000001a000000400034801400350076657468305f746f5f7465616d000000140035006970766c616e300000000000000000001400350064766d7270300000000000000000000008002c000700000008000d00090000000a000200"], 0xd0}, 0x1, 0x0, 0x0, 0x28001}, 0x2400c000) socket$inet_mptcp(0x2, 0x1, 0x106) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd29, 0x25dfdbfb, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_TABLE={0x8, 0xf, 0xffffff7f}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) (async) preadv(r2, &(0x7f0000000040)=[{&(0x7f00000013c0)=""/4096, 0x5}], 0x3f, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="d00000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="911f0100000000003000128009000100766c616e0000000020000280040003800600010002000000040004800c0002001a0000001a000000400034801400350076657468305f746f5f7465616d000000140035006970766c616e300000000000000000001400350064766d7270300000000000000000000008002c000700000008000d00090000000a000200"], 0xd0}, 0x1, 0x0, 0x0, 0x28001}, 0x2400c000) (async) 2.173819396s ago: executing program 6 (id=3824): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) (async) close(0xffffffffffffffff) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xc6da5938055fa6fd, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x1}, @IFLA_GTP_FD1={0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x51}, 0x2000c000) 2.062382064s ago: executing program 4 (id=3825): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) unshare(0x22020600) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32=r2], 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000540)={r2, &(0x7f0000000300)='bond0\x00', 0x0, &(0x7f0000000480)={@align=0xfffffffffffffffd, {0x6fa3, 0x1, 0x5, 0xb}}, 0x1, &(0x7f00000004c0)={@_ha_fsid}, &(0x7f0000000500)=0x81}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000000)="56d9f0bf26", &(0x7f0000000580)=@udp6=r6, 0xa635c4ca7f0a3408}, 0x20) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r4, 0x0, 0x0, 0x80000) sendto$inet(r7, &(0x7f0000000000)='\x00', 0x1, 0x24008800, 0x0, 0x0) accept4$tipc(r7, 0x0, 0x0, 0x800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000003c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x3, 0x0}}]}, &(0x7f0000000340)=0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x32b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r10}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x890) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r8, 0x5}, &(0x7f00000001c0)=0x8) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r7, 0x5000943f, &(0x7f00000007c0)={{r1}, 0x0, 0x10, @inherit={0x78, &(0x7f0000000240)={0x0, 0x6, 0x7, 0xffffffff, {0x0, 0xffffffffffffffff, 0x3, 0x7fff, 0x2}, [0x1, 0x0, 0xd47c, 0x86c, 0x400, 0x5]}}, @subvolid=0x3}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r10, 0x25, 0x1, @void}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000780)=ANY=[@ANYBLOB="000088640000030000000100000011"], 0xfce) 2.027625595s ago: executing program 8 (id=3826): socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x42, 0x4, 0x348, 0xffffffff, 0x1e0, 0x2b0, 0x110, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0xffffff00, 0x0, 'veth0_to_batadv\x00', 'vlan0\x00', {0x100}, {0xff}, 0x84, 0x0, 0x2}, 0x0, 0xe8, 0x110, 0x0, {0x100000000000000}, [@common=@inet=@multiport={{0x50}, {0x1, 0xb, [0x4e23, 0x4e21, 0x4e20, 0x4e21, 0x4e20, 0x4e22, 0x4e24, 0x4e23, 0x4e21, 0x4e20, 0x4e24, 0x4e20, 0x4e20, 0x4e20, 0x4e22], [0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1]}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x0, 0x4}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x3, 0x3, [0x2, 0x2c, 0x4, 0x2, 0x12, 0x22, 0x16, 0x10, 0x3b, 0x1a, 0x0, 0x3e, 0x9, 0x2, 0x24, 0x39], 0x1, 0x6, 0xa}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xffffff00, 'team0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x2, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xd, 0x8, [0xa, 0x26, 0x2a, 0xa, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0xa, 0x20, 0x28, 0x18, 0x22, 0xa], 0x1, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20142}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2400c090}, 0x24048044) close(r0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f00000010c0)=0x3, 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) socket$packet(0x11, 0x2, 0x300) (async) r6 = socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r9, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r7], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r6, 0x0, 0x0, 0x4004004, &(0x7f0000000180)={0xc9, 0x4, r9, 0x1, 0x2, 0x6, @broadcast}, 0x14) (async) sendto$packet(r6, 0x0, 0x0, 0x4004004, &(0x7f0000000180)={0xc9, 0x4, r9, 0x1, 0x2, 0x6, @broadcast}, 0x14) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') 1.869239596s ago: executing program 6 (id=3827): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f00000012c0)={{r0, &(0x7f0000000080)='-[\x00', 0x301483, &(0x7f00000000c0)={@align=0x5, {0x2b91, 0x6, 0x1, 0x1}}, 0x1, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0xc3}, 0x2, &(0x7f0000001280)=[{0x1, 0xfffffffa, &(0x7f0000000180)='\x00', &(0x7f00000001c0)="1dd2b9238656d13e617af696e636d71dd3a8a2f93725a5b2e229854594a205560a79b2e1292218dc58d7b83463e1734600db6fe26a4663afa66602d31580d550ad85", 0x42}, {0x86dfe4ca5d6f87d3, 0xf, &(0x7f0000000240)='/\x00', &(0x7f0000000280)="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", 0x1000, 0x10}]}) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000001340)={r1, 0x6, 0x8, 0x100}, 0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000001380)={r1, 0xe}, &(0x7f00000013c0)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000001400)={r3, 0x3, 0x9, 0x7, 0x1}, 0x14) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000001440)={r1, 0x7fff}, 0x8) r4 = socket$l2tp(0x2, 0x2, 0x73) ioctl$AUTOFS_IOC_PROTOVER(r4, 0x80049363, &(0x7f0000001480)) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000014c0)={r1, 0x9, 0x7, 0x52, 0xffff, 0x6, 0x4, 0x2, {r3, @in6={{0xa, 0x4e23, 0x3, @mcast1, 0x6}}, 0xfffffffd, 0x2, 0x4, 0x7, 0x7}}, &(0x7f0000001580)=0xb0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001780)={r2, 0x0, 0x6f, 0x3b, &(0x7f00000015c0)="8f6bac26dc88052c21248baa2644f6fb482a9a237a508ece49f2b60f2e63b986e4eb98610e5d9fdaede1f0d2352ca393eee8fd9ce3c9e37d59393c9e41b1ad779595e84ce0694c74bcf4d383a0bbaac8a1b6fab91fc6360f5191fce8f65e4eb4922f88111f228ce64c88670820bed2", &(0x7f0000001640)=""/59, 0x5, 0x0, 0x57, 0x80, &(0x7f0000001680)="eb6b27a2678e3ae6f2125aa049cdf7054e0764562a7b2c2ef2ea860b59a040b3cb9656c7ba4ba1301bc1745fe917d84d5ad6c99ca9b35931ee684d37cc9a4e6a5a1f0b3dd389bf9edfd230abe7fc826c0d6a2af8bbb78c", &(0x7f0000001700)="965d3ad2a7d6fbfae1e74c167f646967bf3eca9bbc16ccfd7c06fb8b649183039e86a7b200ad9927960ff63b38e26060a07707bbbea61875d5db2d5ea308ed6b54a400a12c6234caa8b2b136b21b771ca7d3a5e6beb7d6b9f788853d0bd65196fc93547a7955d568063f0e992e287e553ce05346dd8c692004a21509d6c75a65", 0x3, 0x0, 0x7}, 0x50) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001840), r2) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x80000018}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x24, r6, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x24}}, 0x40005) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000019c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r7, &(0x7f0000001ac0)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x105c7a9f00c640cd}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)={0x78, r8, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x80000001, 0x30}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "a81ea9b7ce"}]}, 0x78}, 0x1, 0x0, 0x0, 0x444}, 0x40040) syz_genetlink_get_family_id$tipc2(&(0x7f0000001b00), r7) r10 = accept4$inet(r0, &(0x7f0000001b40)={0x2, 0x0, @multicast1}, &(0x7f0000001b80)=0x10, 0x40000) getsockopt$inet_sctp_SCTP_RTOINFO(r10, 0x84, 0x0, &(0x7f0000001bc0)={r5, 0x4, 0x8001, 0x9}, &(0x7f0000001c00)=0x10) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000001d00)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x2c, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x9}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xa0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008080}, 0x8000010) recvmsg$qrtr(r2, &(0x7f0000002000)={&(0x7f0000001d40), 0xc, &(0x7f0000001f40)=[{&(0x7f0000001d80)=""/242, 0xf2}, {&(0x7f0000001e80)=""/167, 0xa7}], 0x2, &(0x7f0000001f80)=[{0x58, 0x0, 0x0, ""/68}], 0x58, 0x2000}, 0x38, 0x40000020) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000002040)={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x304, @local}, 0x10, {0x2, 0x4e23, @remote}, 'lo\x00'}) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000002100), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r7, &(0x7f00000021c0)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002180)={&(0x7f0000002140)={0x2c, r11, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9d3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4000001) r12 = accept4(r10, &(0x7f0000002200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, &(0x7f0000002280)=0x80, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r12, 0x89f1, &(0x7f0000002340)={'syztnl2\x00', &(0x7f00000022c0)={'ip6_vti0\x00', 0x0, 0x4, 0xcf, 0xf8, 0x101, 0x2, @remote, @empty, 0x7800, 0x8, 0xfff, 0x10}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f00000023c0)={'erspan0\x00', &(0x7f0000002380)={'erspan0\x00', r13, 0x700, 0x40, 0x1db, 0xffff1fb9, {{0x8, 0x4, 0x3, 0x1d, 0x20, 0x67, 0x0, 0x3, 0x29, 0x0, @broadcast, @empty, {[@ssrr={0x89, 0xb, 0x62, [@dev={0xac, 0x14, 0x14, 0x28}, @broadcast]}, @noop]}}}}}) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000002400), 0x4) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000002580)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002540)={&(0x7f00000024c0)={0x70, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r14}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1}, @FOU_ATTR_PEER_V6={0x14, 0x9, @remote}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x32}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}]}, 0x70}, 0x1, 0x0, 0x0, 0x44}, 0x4068844) 1.709296452s ago: executing program 8 (id=3828): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000380)={'gre0\x00', 0x0, 0x7800, 0x7800, 0x4, 0x0, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x65, 0x0, 0x5, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x7, 0xec, [@remote]}, @timestamp={0x44, 0x8, 0xea, 0x0, 0xe, [0x10]}]}}}}}) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x23, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffff9}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @jmp={0x5, 0x0, 0x8, 0x7, 0x2, 0xfffffffffffffff8, 0xffffffffffffffff}, @exit, @map_fd={0x18, 0xa, 0x1, 0x0, r0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @jmp={0x5, 0x0, 0x1a, 0x1, 0x0, 0x10, 0xfffffffffffffffc}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.707286641s ago: executing program 4 (id=3829): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff}, 0x6) write(r0, &(0x7f0000000140)="4900f800", 0x4) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0x209d, 0x0, 0x4, 0x1f}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0200001000850600"/20, @ANYRES32=r4, @ANYBLOB="0100134500000000000012000c000100626f6e64000000000c0002000800010006d358fc20e423af0b38ff84c93828858a40448458a887be6b612bf02192889142c790e99d0c9c2f08d50f68ea8cf6de63c00aef6d61e67561068a1fa4ba69aec627beaaf8dde2824c4f06048639d197bcbb1356771bde2cd5fada6fc79cbe88d66f9c4547e3b596c5093e79fa9fe6dfb4aa7b81f3144d1a57cc0957c097efac4ba717f3aa93f39fcdad16ad08b411be04ec7dfd59c5ee26f300d4978c6fc76f660962c25cbc0e30d1f46894a491183882864eb3bca74f7aa0db9b580acc6c9b96de451aa0f13b71f26806d2e1b4527a286da98503fbb124c3ab203bacea39eb5dc2bc31a2a741c2323d1af6ef6fc0f6bc090396aa846c16d995cb0e468edbcc265a10c15e8813650e9b3d63f959f673c7ec63734709d7bf8698bfb39629268f3b7c677d2d19f2d8ca8a42e233972dee8cf4837b1e6f7c489892c75d2d51a921eec888163e2a159583f9fe3ca5144c475fa4033f4ba85e158ddc22446ac05e7b70a8066b444b2a8efd15dfc140b3866c4eba83ff33624d4620d625d0950b202653e6e6e24825366e1ceb03248f2c77e4b04042fed47dd10000"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0xf) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="06060900000000002400128009000100766c616e000000003c0002800600010001000000060005008100000008000500", @ANYRES32=r8, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x40800) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB='%\x00\x009', @ANYRES32=0x0, @ANYRES64=r5, @ANYRES32=r4, @ANYRESDEC=r2], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000854) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002f00), r9) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x2, 0x12, 0x0, 0x0, 0x9, 0x0, 0x4200, 0xfffffffd, [@sadb_x_nat_t_port={0x1, 0x15, 0x4e23}, @sadb_lifetime={0x4, 0x4, 0xb, 0x80, 0x7fffffff, 0x80}, @sadb_x_sa2={0x2, 0x13, 0x59, 0x0, 0x0, 0x70bd27, 0x3506}]}, 0x48}}, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(r9, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000440)={0x28, r10, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @local}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20044040}, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r13, 0x8933, &(0x7f0000000100)={'wpan3\x00', 0x0}) r15 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r12) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, 0x0) sendmsg$IEEE802154_LLSEC_LIST_KEY(r12, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r15, 0x764927f8a7d3d5b3, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x34, r15, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r14}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x9}]}, 0x34}}, 0x814) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r15, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x891}, 0x10) 1.706765264s ago: executing program 6 (id=3830): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x78, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCAN_SSIDS={0x58, 0x2d, 0x0, 0x1, [{0x10, 0x0, @random="5462f24b758a3c7f990a82a5"}, {0x5, 0x0, @random=']'}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4080}, 0x4002089) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x439, 0x70bd2b, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x13, 0x618c4}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vti={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x27}}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0x3}, @IFLA_VTI_LINK={0x8}], @IFLA_VTI_REMOTE={0x8, 0x5, @rand_addr=0x64010101}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c044) 1.554422252s ago: executing program 1 (id=3831): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002fff300851000000600000018020000", @ANYRES32, @ANYBLOB="000000000000000166000200f3ffffff180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r0], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) socket$igmp(0x2, 0x3, 0x2) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x3, 0x1f, 0x0, &(0x7f0000000380)='GPL\x00'}, 0x94) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x24, 0x5b09, 0x7, 0x2, 0x3, 0x5, 0x7, 0x8, 0x5, 0x9, [0xce, 0x5, 0x2005, 0x40, 0x4, 0x3, 0x400e, 0xfb]}}) (async) socket$packet(0x11, 0x3, 0x300) (async) r4 = socket$alg(0x26, 0x5, 0x0) (async, rerun: 64) r5 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x348, 0x1d0, 0x348, 0x348, 0x0, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@uncond, 0x0, 0xc0, 0x100, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0xe}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x2ab, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0xff, 'macvlan0\x00', 'veth1_virt_wifi\x00', {}, {}, 0xc, 0x2, 0x71}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="5370bd4294c1", 0x200, 0xe, [0x25, 0x1e, 0x18, 0x2f, 0x38, 0x40, 0x11, 0x23, 0x16, 0x1f, 0x30, 0x38, 0x18, 0x27, 0x15, 0x1], 0x2, 0x0, 0x9}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x23}, 0x0, 0xffffffff, 'vlan1\x00', 'nr0\x00', {0xff}}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0x2, 0x1}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x2, 0x2}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'ipvlan0\x00', 'batadv_slave_1\x00', {}, {}, 0x11}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xc, 0x7a}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000005c0)={'vcan0\x00', 0x0}) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x9, 0x10}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@map_idx={0x18, 0xb, 0x5, 0x0, 0x1}]}, &(0x7f0000000240)='syzkaller\x00', 0x7, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x3, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000680)=[r7], &(0x7f0000000a80)=[{0x2, 0x5, 0xe, 0x8}, {0x3, 0x5, 0xb, 0xa}, {0x5, 0x5, 0x5, 0xb}, {0x1, 0x4, 0x4, 0x4}], 0x10, 0x2}, 0x94) (async) r8 = socket(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) (async, rerun: 64) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r8) (rerun: 64) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f00000009c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0x50, r10, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x1]}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x6000]}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1200}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1118}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x4e8}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x24044041}, 0x48040) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async, rerun: 32) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a00)=ANY=[@ANYBLOB="240000001800dd8d00000000000000000200100002000000826b56e55d697b3cede171266f760322718ce11b60630aadde36c9c1f4e09c12bc6c4ff708c85782fba5b3a257f659452102730419022c0000000051a3b2277428e5a60cb8d32b93473f31953d43e260337b73860ef278d600701d9e98"], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) (async) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="000000001a00200028bd7000ffdbdf250a808002fd00fd000013000000000500fe8000000000000000000000000000400000150005000080e77ad36429e545e769654e71c6422bb2f6750883f31099b698adb0ccc49245765a6ef5225c75953497549356b8bdbee64b530661c959f98223f26727d600000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x20040885) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="28000000100001000100"/20, @ANYRES32=0x0, @ANYBLOB="20030000000000007d66c508001b0000000000"], 0x28}, 0x1, 0xc3ffffffffffffff}, 0x0) 1.517086528s ago: executing program 8 (id=3832): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x6e, 0x8}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2}, 0x94) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000003a00)=[{{&(0x7f0000000580)={0xa, 0x20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000200)="c5df6a3b", 0x34000}], 0x1}}, {{&(0x7f0000000b40)={0xa, 0x4e21, 0x900000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000000e40)="af", 0x1}], 0x1}}], 0x2, 0xc0c0) 1.502706151s ago: executing program 6 (id=3833): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000380)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='b 75:*\tw\nr'], 0xa) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r2) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)={0x14, r3, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x404c857}, 0x20060000) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x9, 0x28, &(0x7f0000000800)=ANY=[@ANYBLOB="1806000001000000000000000000001fb7ff000000000000cd8af8ff00000000961c188e700900267b02f8ff00000000bfa10000000000000701a3ac09d9dfcd8984f02bea25639faf200000f8ffffffbf", @ANYRES32], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x94) bind$inet6(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xfffffffb, 0x3, 0x1}, 0xf) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, 0x0, 0x40800c1) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) (async) sendto$inet6(r4, &(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00', 0xffffffffffffff06, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0xfffffffc, @rand_addr=' \x01\x00', 0xffffffff}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x20008065) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x2e, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) (async) syz_genetlink_get_family_id$nbd(0x0, r2) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) (async) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='nv', 0x5d) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, 0x0, 0x0) (async) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) 1.313733548s ago: executing program 1 (id=3834): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff}) getsockopt$sock_int(r3, 0x1, 0x22, 0x0, &(0x7f0000000040)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x884) socket(0x10, 0x803, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) (async) getsockopt$sock_int(r3, 0x1, 0x22, 0x0, &(0x7f0000000040)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x884) (async) 1.223913183s ago: executing program 8 (id=3835): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES8=r0, @ANYRESOCT=r1], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x10, r3}, 0x18) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000003c0)={'sit0\x00', 0x0}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) r4 = epoll_create1(0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) ppoll(&(0x7f0000000000)=[{r5}, {r4, 0xf401}], 0x2, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_devices(r6, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(r7) close(0x4) sendmsg$xdp(0xffffffffffffffff, 0x0, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x1, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) 1.213539609s ago: executing program 6 (id=3836): syz_emit_ethernet(0x46, &(0x7f0000000600)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x5, 0x7}, @window={0x3, 0xa, 0x7}, @mss={0x2, 0x8007}, @window={0x3, 0x0, 0xb}, @mss={0x2, 0x2}, @timestamp, @window={0x3, 0xfffe, 0x4000}, @mss={0x2, 0xff}], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r0, &(0x7f0000000080)='<', 0xffffffffffffffef, 0x4805, 0x0, 0xfe8d) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40), 0x0, 0x20000044) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0xac, &(0x7f0000000740)=[@in6={0xa, 0x4e22, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7f}, @in6={0xa, 0x4e21, 0x7, @remote, 0xfffffffe}, @in6={0xa, 0x4e21, 0x1, @remote, 0x7}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e22, 0x80000001, @remote, 0xebd}, @in6={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x29}, 0x9}, @in={0x2, 0x4e24, @broadcast}]}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000640)={0x0, 0x2f, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbff, {0x6}}, 0x14}}, 0x0) 1.097951517s ago: executing program 4 (id=3837): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0x8, 0x0, 0x1000, 0x0, 0x400000, 0x7ff, 0x40004, 0xc0000000, 0x402, 0x9, 0x4, 0x5, 0x3, 0x4006, 0x84, 0xfffffffc, 0x0, 0x37e9, 0x80000004, 0x1, 0x5, 0x424f, 0x3}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x100, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x1, 0x9, 0x4, 0x2, 0x2, 0x1}, 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, 0x19, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 1.048534936s ago: executing program 7 (id=3838): unshare(0x22020600) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xe, 0x12, r0, 0x952de000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)={0x1019}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1, 0xffffffffffffffff}, 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x20, 0x12, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x11f}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7ff}, @ldst={0x7, 0x3, 0x3, 0x9, 0x6, 0x10, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x0, 0x7, 0x200}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000400)=[r2, 0xffffffffffffffff, r1, r1, r1, r1, r1], &(0x7f0000000440)=[{0x2, 0x2, 0x1, 0xa}, {0x2, 0x3, 0xd, 0xb}, {0x3, 0x2, 0xa, 0x3}, {0x3, 0x1, 0x10, 0xc}], 0x10, 0x5}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000540)=r4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000018000000000000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000067283a21af1eb45c00000000350b0100000000009500000000000000bf98000000000000560800200246183262655b676f65cabb0dc80000000000000007000000b70000f219129319de3d2fa8a8eff793d036382e68ee84199bb909c933ff59b86aa6fe2c2044856d01f2235b8a80d5f95aa22f1400"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 987.905101ms ago: executing program 4 (id=3839): r0 = socket(0x11, 0x3, 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94", 0x79}], 0x1}], 0x1, 0x40004) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000280)={@fallback=r0, 0xe, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) socket$inet(0x2, 0xa, 0x8) write$tun(r1, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x8016, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @broadcast}, {{0xa200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x1}}}}, 0xfdef) recvmsg(r0, &(0x7f00000001c0)={&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000100)=""/13, 0xd}], 0x1, &(0x7f0000000180)=""/10, 0xa}, 0x12000) 753.762972ms ago: executing program 7 (id=3840): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x3, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r2, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x20008090) 648.114909ms ago: executing program 1 (id=3841): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) (rerun: 32) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$kcm(0x2, 0xa, 0x2) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x322) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_ATM={0x8, 0x4, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) 622.574943ms ago: executing program 7 (id=3842): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x2c, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 457.897136ms ago: executing program 4 (id=3843): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0xce, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@getsadinfo={0x88, 0x23, 0x200, 0x70bd2b, 0x5dfdbff, 0x0, [@etimer_thresh={0x8, 0xc, 0x5}, @XFRMA_SET_MARK={0x8, 0x1d, 0x2}, @replay_esn_val={0x30, 0x17, {0x5, 0x70bd27, 0x70bd24, 0x70bd26, 0x70bd2d, 0x9, [0x80000001, 0x9, 0xbd93, 0x6bca, 0x800]}}, @policy_type={0xa, 0x10, {0x1}}, @coaddr={0x14, 0xe, @in=@broadcast}, @srcaddr={0x14, 0xd, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e000000180002801400"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000044c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)="a204756c1c11215ceeeb08b6b9aecaf73554f794aba384", 0x17}, {&(0x7f00000002c0)="fd652b9c5199a508f5bc328c99588dcb4a9c66c0bf6f7cb937b9802c5100750790b8971232476c669d279420c823f82e9c188221e0ef85f60ca75851de1a2527bfb7d7f817db36ec10cbb5dbc77c3fc0c566ef5aeb41bbc03b7a8613fd0da338db9bd0", 0x63}], 0x2}, 0x4000) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$packet(0x11, 0x2, 0x300) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x5, 0x14, 0x0, &(0x7f0000000240)="259a53f271a76d2608004c6588a80a3888ca2f15", 0x0, 0xd15, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x50) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r8, 0x400452c9, &(0x7f0000000100)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000000)={'wg0\x00'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x2, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x10001}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r10, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) 421.655575ms ago: executing program 7 (id=3844): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000640)={'ipvlan0\x00', 0x8000}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x5e202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)="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", 0x241}], 0x1}}], 0x1, 0x4000001) shutdown(r0, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x2020600) r3 = socket$inet(0xa, 0x3, 0x86) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a60000000060a010400000000000000000a0000010900010073797a31000000003400048018000180080001006c6f67000c00028008000540ff5cc762a34ed351b6a01b300cbf2c02f3ffff081800018007000100727400000c00028008000240000000010900020073797a3200000000140000001100010000000000000000000100000a"], 0x88}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r4 = socket(0x15, 0x5, 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000100)=@assoc_value, &(0x7f0000000000)=0x8) sendmsg$tipc(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000001c0)="0e47b3", 0x3}, {&(0x7f0000000380)="6a6e0e1f3d19a3916d0c1e870310f621e2fc372f09a8f3cd76f3118c2d5556f786f770590b5303486b93bf84dcd1f0fb9de1fd5d7cc2aaff22bf2ff40e4a55baa8050d4b99516871daae3e32f0103680ba53d142a0499b0ddedee4b104352e6d7d5c90528a18e6f45482e726c657c63c0be831e4d815e310a908329299d5ac18d49195dad71db646df221925dc49cd773c0edae537c65f8289c0b5e01a0729acf054c76553736198cbda3bf28bd36e304984884f765c568147a9ddaca3e00e49859b4e3aab1feb8ffa7e85d6c04344d498735839b08cb1ac71537b883e48fa3508af30ed06fb25733c0d7d146a3881", 0xef}, {&(0x7f0000000480)="149e619498d328303f98533295b30273bf46f6e162a154d2", 0x18}, {&(0x7f0000000540)="e0bd22e063470c15397627c912367b9db9bf0f2f28c21feb2c795af0e879b8f594dbf712d435f96bf3491398add1d2f3a250166890ed0de6d6828efd7855a80c16ccd943d8835d1929cbd87cb53add09f33cbb64d9b2693dbed9fd55bb7c86e30c61899fee675daec03de005251d9cf3be49aa061d0768548514b9ac89344ac3d2a250188d31e85bf916c0fdbc123100b6c1bc34863a65d94aaf4393824261d41b4e42a16397d127eac01c086802976b44823c101c5bcb185552c8910abdeb4b3c08419c8805ee2349b63c111f32f43c2d4913a5", 0xd4}, {&(0x7f0000000940)="fa6d1b5a11ed8ead729b55f1b39ca02e06d58463866460b20da772d23e92f4397c6e67871eeb668561529f4e25348534265dd115ea4494abe62bb4fb8acbf20f334b8cce", 0x44}, {&(0x7f00000009c0)="0a2a9ab20a3e7ebf9c2c684cfb88520c32f8fafa", 0x14}, {&(0x7f0000000a00)="a1776a2f6a2fa415a39aa0c4c64b787bf56b52953604910cbf09633d06374752f7c076bcba38e59b3c3eee00141eb79c09bc11308c4f", 0x36}, {&(0x7f0000000a40)="aadc3903e881104773b0b208a973c5a9f96de4bae78c037a842aff843778dc7d4294198d4a5526d8ca3ac36bf06f3cef034137367b1006c9dbaf75588d22773447960289cc9f31b6", 0x48}, {&(0x7f0000000ac0)="de149ef08ec8ef31808d244101", 0xd}], 0x9, 0x0, 0x0, 0x49fbb9fc1175fbae}, 0x8000) getsockopt(r4, 0x200000000114, 0x271f, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000100)={0x3, [0x4, 0x6, 0x1ff]}, 0xa) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000000)=0x5) 281.783419ms ago: executing program 1 (id=3845): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000240)=0x4080, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000150001030000000000ccb3c414ad54113a01f85c355f8a86284f3236c05427407467895b717e798e94d292b7356950779993da105b1e0613328ff84d91f7db6a10c10f6808a0d656c35ba23878a04c30ddcfa0fe4d1d403f7469c3dd88bfc6650137b1d6a2f34da6281bf7b5bb6d1b1316db077f749f456be531ce5d104463b6ce25146c20b1cc8ab254201d2b459520584256953e474fce888e3439a1d79a7552c295527a953df1212b687ad56b2ee49d6533aa803d973fb5428a7b8c55a8d3b9"], 0x14}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r5) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x1c, r7, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4883}, 0x4894) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3400}, [@RTA_NH_ID={0x8, 0x1e, 0x8}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_HWID={0x5, 0x4, 0xa}}}}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYBLOB="6f60b6595ef7a44a1b905e21c1ec0df8f07163552527033b467093e3edbe146cf48a58551d30ccf59da521e703112687adc8de6297b15136209a8eaab77d324a90ba9e3af3042a787d5365e29a0d6d95efa65587b193de0e7b060a55", @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r8, @ANYRES32], 0x40}}, 0x0) 141.913515ms ago: executing program 6 (id=3846): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000480)=@assoc_value, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) socket(0x2, 0x80805, 0x0) (async) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}}], 0x2, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f0000000300)={r4, 0x1}, 0x8) socket$netlink(0x10, 0x3, 0x9) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x4c, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MASK={0x8, 0x6, 0x6}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x884}, 0x2) 0s ago: executing program 7 (id=3847): bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) socketpair(0x1d, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1200000004000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000006a900fb7f00000000e5ce1dcbb400000000000000fd5219ffd5de832f859b5a0dfe289194fde656fedf8b6b58420a93cf1ec3ceda790215d3a20359664e575cfea4a2f9dcb8fec03d869d3d37bbe58c5fb1f21f0978846938ad796cd9018173d647553aee698be062ea1ba793d08542a2f677afdaa1bf7a21ef48521c6a9642e76339c27ec6c69f3560260741e2216fd4b5cb8ed45f5a036907c081821c52093b7c34fd69a2b27d25650d8f964c9d9a09d26b9832b9ff5232a0a0ac92969a2e21927253f21ad9a4143dd1ad247985d4981893557f6d3d1405bb50ec4c6d24cef6d11a5c53828a42f974edeff0"], 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000003040000000004000008000000000000", @ANYRES32=0x0, @ANYBLOB="b57dad88ca080000180012800e00010069703665727370616e000000040002800a000100ffffffffffff0000"], 0x44}}, 0x44) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000003040000000004000008000000000000", @ANYRES32=0x0, @ANYBLOB="b57dad88ca080000180012800e00010069703665727370616e000000040002800a000100ffffffffffff0000"], 0x44}}, 0x44) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000070000000000000008000009000000004500000085000000a40000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000070000000000000008000009000000004500000085000000a40000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x1e) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) (async) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xc}, {0xffff, 0xb}, {0xe, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0xffffffff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f00000002c0)="05031600d3fc1400e8034788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) sendto$packet(r7, &(0x7f00000002c0)="05031600d3fc1400e8034788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) accept$alg(r0, 0x0, 0x0) (async) r9 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmsg$alg(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000200)="be", 0xfffffd0c}], 0x1, 0x0, 0x0, 0x4080}, 0x8000) (async) sendmsg$alg(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000200)="be", 0xfffffd0c}], 0x1, 0x0, 0x0, 0x4080}, 0x8000) accept4(r9, 0x0, 0x0, 0x800) recvmmsg(r9, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40010000, 0x0) kernel console output (not intermixed with test programs): unnel: - xmit: Local address not yet configured! [ 498.383430][ T5757] ip6_tunnel: - xmit: Local address not yet configured! [ 498.485953][T17346] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.494808][T17346] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.506468][T17346] bridge_slave_0: entered allmulticast mode [ 498.516488][T17346] bridge_slave_0: entered promiscuous mode [ 498.527557][T17346] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.537721][T17346] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.545638][T17346] bridge_slave_1: entered allmulticast mode [ 498.555320][T17346] bridge_slave_1: entered promiscuous mode [ 498.626192][ T66] net_ratelimit: 180 callbacks suppressed [ 498.626215][ T66] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 498.702196][ T6371] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 498.721054][ T12] bond2: (slave bridge1): failed to get link speed/duplex [ 498.753780][ T6371] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 498.777544][T17346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 498.803016][ T6371] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 498.826865][T17346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 498.843062][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 498.850886][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 498.864869][ T9508] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 498.893505][ T6371] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 498.926244][ T12] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 498.934591][ T5757] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 498.937040][T17474] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2816'. [ 498.982950][ T12] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 499.003208][ T5757] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 499.044181][ T6371] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 499.071269][T17346] team0: Port device team_slave_0 added [ 499.104878][T17346] team0: Port device team_slave_1 added [ 499.339121][T17346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 499.346712][T17346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 499.386706][T17346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 499.420529][T17346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 499.455808][T17346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 499.522772][T17346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 499.559542][T17496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2823'. [ 499.617901][T17498] xt_TCPMSS: Only works on TCP SYN packets [ 499.643231][T17496] xt_TCPMSS: Only works on TCP SYN packets [ 499.721381][T17346] hsr_slave_0: entered promiscuous mode [ 499.752009][T17346] hsr_slave_1: entered promiscuous mode [ 499.765648][T17346] debugfs: 'hsr0' already exists in 'hsr' [ 499.781656][T17346] Cannot create hsr debugfs directory [ 499.895358][ T5622] Bluetooth: hci6: command tx timeout [ 500.244575][T17534] syzkaller0: entered promiscuous mode [ 500.251018][T17534] syzkaller0: entered allmulticast mode [ 500.287919][T17534] tipc: Enabled bearer , priority 0 [ 500.316195][T17533] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2830'. [ 500.340060][T17533] netlink: 'syz.4.2830': attribute type 7 has an invalid length. [ 500.352416][T17533] netlink: 'syz.4.2830': attribute type 8 has an invalid length. [ 500.360910][T17533] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2830'. [ 500.506498][T17542] tipc: Resetting bearer [ 500.520547][T17532] tipc: Resetting bearer [ 500.552366][T17532] tipc: Disabling bearer [ 500.577884][T17547] syzkaller0: entered promiscuous mode [ 500.584831][T17547] syzkaller0: entered allmulticast mode [ 501.075562][T17569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 501.100244][T17346] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 501.115642][T17346] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 501.221768][T17575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 501.376178][T17566] 8021q: adding VLAN 0 to HW filter on device bond11 [ 501.390752][T17566] ip6gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 501.391149][ T9] ip6_tunnel: - xmit: Local address not yet configured! [ 501.428582][T17346] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 501.459873][T17346] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 501.486977][T17346] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 501.508566][T17346] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 501.529483][T17346] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 501.549777][T17346] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 501.604213][T17592] syzkaller0: entered promiscuous mode [ 501.610108][T17592] syzkaller0: entered allmulticast mode [ 501.731748][T17346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.758727][T17346] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.767578][T17603] netlink: 'syz.1.2847': attribute type 6 has an invalid length. [ 501.781659][ T6371] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.788939][ T6371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.809287][ T7322] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.816560][ T7322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.967180][ T5622] Bluetooth: hci6: command tx timeout [ 502.115513][T17612] netlink: 'syz.5.2848': attribute type 4 has an invalid length. [ 502.126349][T17612] netlink: 3581 bytes leftover after parsing attributes in process `syz.5.2848'. [ 502.878766][T17641] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2854'. [ 502.940876][T17346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.990610][T17642] netlink: 'syz.1.2853': attribute type 5 has an invalid length. [ 503.206878][T17657] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2853'. [ 503.254678][T17647] syzkaller0: entered promiscuous mode [ 503.260429][T17647] syzkaller0: entered allmulticast mode [ 503.344555][T17663] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2857'. [ 503.398223][T17663] bond7: (slave dummy0): Releasing active interface [ 503.430203][T17663] netlink: 'syz.4.2857': attribute type 10 has an invalid length. [ 503.442236][T17663] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2857'. [ 503.452420][T17663] dummy0: entered promiscuous mode [ 503.656541][ T7322] net_ratelimit: 201 callbacks suppressed [ 503.656565][ T7322] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 503.704605][ T9504] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 503.713358][ T66] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 503.753106][ T66] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 503.765246][T17674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2860'. [ 503.793433][ T9503] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 503.823981][ T9503] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 503.853814][ T9503] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 503.889502][ T7322] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 503.898143][ T9503] bond2: (slave bridge1): failed to get link speed/duplex [ 503.940989][T17679] netlink: 'syz.3.2862': attribute type 1 has an invalid length. [ 503.953710][ T7322] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 503.988040][T17346] veth0_vlan: entered promiscuous mode [ 504.022189][T17346] veth1_vlan: entered promiscuous mode [ 504.051464][ T5622] Bluetooth: hci6: command tx timeout [ 504.148071][T17346] veth0_macvtap: entered promiscuous mode [ 504.164724][T17346] veth1_macvtap: entered promiscuous mode [ 504.205093][T17346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 504.237150][T17346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 504.302346][ T7322] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.328171][ T7322] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.432712][ T7322] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.452763][ T7322] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.737335][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.760811][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.859162][ T9504] wlan1: Trigger new scan to find an IBSS to join [ 504.931825][T17713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2869'. [ 504.959667][ T7322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.985933][ T7322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.414763][T17736] netlink: 'syz.5.2875': attribute type 1 has an invalid length. [ 505.574773][T17736] 8021q: adding VLAN 0 to HW filter on device bond4 [ 505.643053][ C0] ip6_tnl_xmit_ctl: 6 callbacks suppressed [ 505.643075][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 506.303504][T17766] Cannot find add_set index 2 as target [ 506.321363][ T5627] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 506.336947][ T5627] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 506.345237][ T5627] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 506.355224][ T5627] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 506.370509][ T5627] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 506.718596][T17762] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2881'. [ 506.764051][ T9503] wlan1: Trigger new scan to find an IBSS to join [ 506.772765][T17762] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2881'. [ 506.975215][T17773] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2883'. [ 507.177964][T17772] ip6gre3: entered promiscuous mode [ 507.199882][T17772] ip6gre3: entered allmulticast mode [ 507.439976][ T6371] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 507.460500][ T6371] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 507.468461][ T7015] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 507.558865][T17804] tun0: tun_chr_ioctl cmd 1074812117 [ 507.806780][ T9503] wlan1: Trigger new scan to find an IBSS to join [ 507.818730][T17818] netlink: 'syz.4.2888': attribute type 13 has an invalid length. [ 507.856633][T17818] netlink: 'syz.4.2888': attribute type 17 has an invalid length. [ 507.901453][T17825] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2888'. [ 507.968077][T17818] sit0: left promiscuous mode [ 508.019804][T17818] dummy0: left promiscuous mode [ 508.066466][T17818] veth1_to_hsr: left promiscuous mode [ 508.117410][T17818] macvtap0: left promiscuous mode [ 508.124120][T15047] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 508.227786][T17832] bond12: Removing last ns target with arp_interval on [ 508.364017][T15047] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 508.435600][T17842] netlink: 'syz.1.2894': attribute type 1 has an invalid length. [ 508.452994][ T5627] Bluetooth: hci7: command tx timeout [ 508.503953][T17842] 8021q: adding VLAN 0 to HW filter on device bond13 [ 508.590628][T17844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2894'. [ 508.615288][T17844] netlink: 'syz.1.2894': attribute type 2 has an invalid length. [ 508.626782][T17844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2894'. [ 508.636718][T17844] netlink: 'syz.1.2894': attribute type 2 has an invalid length. [ 508.743065][ T7322] net_ratelimit: 200 callbacks suppressed [ 508.743085][ T7322] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 508.793130][ T7322] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 508.811287][ T7322] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 508.830040][T17849] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2895'. [ 508.908147][T17854] dummy0: entered allmulticast mode [ 508.925462][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 508.935604][ T7322] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 508.965338][T17854] dummy0: left allmulticast mode [ 508.983408][ T7322] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 509.013914][ T12] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 509.060989][ T9508] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 509.085169][ T12] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 509.111101][T17765] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.118808][ T6371] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 509.129041][T17765] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.136628][T17765] bridge_slave_0: entered allmulticast mode [ 509.145727][T17765] bridge_slave_0: entered promiscuous mode [ 509.157269][T17765] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.166466][T17765] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.174283][T17765] bridge_slave_1: entered allmulticast mode [ 509.182498][T17765] bridge_slave_1: entered promiscuous mode [ 509.205736][T17868] netlink: 276 bytes leftover after parsing attributes in process `syz.6.2898'. [ 509.226577][T17765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.238823][T17765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.279790][T17765] team0: Port device team_slave_0 added [ 509.288780][T17765] team0: Port device team_slave_1 added [ 509.319453][T17765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.327241][T17765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.353698][T17765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.366204][T17765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 509.373283][T17765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.400116][T17765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 509.450497][T17765] hsr_slave_0: entered promiscuous mode [ 509.457268][T17765] hsr_slave_1: entered promiscuous mode [ 509.463924][T17765] debugfs: 'hsr0' already exists in 'hsr' [ 509.469685][T17765] Cannot create hsr debugfs directory [ 509.648371][T17765] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.660753][T17765] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.772386][T17765] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.785168][T17765] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.813692][ T9508] wlan1: Trigger new scan to find an IBSS to join [ 509.881949][T17765] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.894336][T17765] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.524964][ T5627] Bluetooth: hci7: command tx timeout [ 510.576796][T17815] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 510.661741][T17765] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 510.729527][T17765] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 510.764408][ T6371] wlan1: Trigger new scan to find an IBSS to join [ 510.779148][T17765] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 510.816627][T17765] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 510.856126][T17765] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 510.870416][T17765] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 510.882417][T17877] netlink: 'syz.4.2902': attribute type 1 has an invalid length. [ 510.895806][T17765] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 510.909706][T17765] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 511.018085][T17881] 8021q: adding VLAN 0 to HW filter on device bond12 [ 511.028510][T17881] bond11: (slave bond12): making interface the new active one [ 511.036734][T17881] bond11: (slave bond12): Enslaving as an active interface with an up link [ 511.053267][T17881] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2902'. [ 511.069721][T17877] bond11: (slave gretap2): Enslaving as a backup interface with an up link [ 511.087212][T17881] 8021q: adding VLAN 0 to HW filter on device bond11 [ 511.222195][T17765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 511.260595][T17765] 8021q: adding VLAN 0 to HW filter on device team0 [ 511.274728][ T9503] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.281968][ T9503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 511.317016][ T7322] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.324404][ T7322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 511.703825][ T9508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.815016][ T30] audit: type=1804 audit(1784486998.753:9): pid=17911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2907" name="/newroot/601/cgroup.controllers" dev="tmpfs" ino=3097 res=1 errno=0 [ 511.883548][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 511.886115][ T30] audit: type=1800 audit(1784486998.753:10): pid=17911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2907" name="cgroup.controllers" dev="tmpfs" ino=3097 res=0 errno=0 [ 511.944114][T17915] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2909'. [ 511.971256][T17915] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2909'. [ 512.001638][T17915] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2909'. [ 512.278919][T17925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2911'. [ 512.445122][T17937] macvlan3: entered promiscuous mode [ 512.451321][T17937] batadv0: entered promiscuous mode [ 512.459626][T17937] macvlan3: entered allmulticast mode [ 512.477877][T17937] batadv0: entered allmulticast mode [ 512.497009][T17937] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 512.511911][T17937] batadv0: left allmulticast mode [ 512.519076][T17937] batadv0: left promiscuous mode [ 512.576215][T17765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 512.606891][T17948] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2918'. [ 512.620789][ T5627] Bluetooth: hci7: command tx timeout [ 512.643778][T17943] block nbd4: server does not support multiple connections per device. [ 512.656901][T17948] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 512.667472][T17943] block nbd4: shutting down sockets [ 512.686163][T17949] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 512.726627][T17765] veth0_vlan: entered promiscuous mode [ 512.788056][T17765] veth1_vlan: entered promiscuous mode [ 512.846480][ T12] wlan1: Trigger new scan to find an IBSS to join [ 512.919761][T17765] veth0_macvtap: entered promiscuous mode [ 512.924680][ C1] ip6_tunnel: - xmit: Local address not yet configured! [ 512.978576][T17765] veth1_macvtap: entered promiscuous mode [ 513.018278][T17963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2923'. [ 513.080974][T17963] hsr_slave_1 (unregistering): left promiscuous mode [ 513.147117][T17967] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2923'. [ 513.161789][T17765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 513.197315][T17765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 513.234636][ T9508] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.246177][ T9508] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.260610][ T9508] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.282410][ T9508] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.434009][T17978] netlink: 'syz.6.2926': attribute type 16 has an invalid length. [ 513.448362][T17981] bond0: (slave ip6tnl0): refused to change device type [ 513.466529][T17978] netlink: 'syz.6.2926': attribute type 17 has an invalid length. [ 513.563294][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 513.617543][ T7322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.641195][ T7322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.763936][ T7322] net_ratelimit: 183 callbacks suppressed [ 513.763956][ T7322] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 513.791376][ T7322] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 513.791709][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.913501][ T12] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 513.927810][ T9503] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.937420][ T12] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 513.944127][ T9503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.043883][ T7322] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 514.063840][ T7322] bond2: (slave bridge1): failed to get link speed/duplex [ 514.071078][ T6357] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 514.086986][ T6357] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 514.173157][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 514.196408][ T7322] bond2: (slave bridge1): failed to get link speed/duplex [ 514.203887][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 514.204347][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 514.683091][ T5627] Bluetooth: hci7: command tx timeout [ 514.717731][ T5622] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 514.728938][ T5622] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 514.740639][ T5622] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 514.755902][ T5622] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 514.772276][ T5622] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 515.231138][T18031] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2939'. [ 515.667146][T18048] netlink: 'syz.3.2942': attribute type 1 has an invalid length. [ 515.820889][T18052] sctp: [Deprecated]: syz.3.2942 (pid 18052) Use of struct sctp_assoc_value in delayed_ack socket option. [ 515.820889][T18052] Use struct sctp_sack_info instead [ 516.011670][T18058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2944'. [ 516.296863][T18071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2949'. [ 516.607952][T18086] IPVS: set_ctl: invalid protocol: 7 12.0.0.0:0 [ 516.686521][T18019] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.703125][T18019] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.720991][T18019] bridge_slave_0: entered allmulticast mode [ 516.755799][T18019] bridge_slave_0: entered promiscuous mode [ 516.777184][T18019] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.789813][T18019] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.802221][T18019] bridge_slave_1: entered allmulticast mode [ 516.810349][T18019] bridge_slave_1: entered promiscuous mode [ 516.843914][ T5622] Bluetooth: hci2: command tx timeout [ 516.891629][T18019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 516.979422][T18019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 517.013844][T18096] netlink: 268 bytes leftover after parsing attributes in process `syz.3.2952'. [ 517.025601][T18096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2952'. [ 517.227113][T18019] team0: Port device team_slave_0 added [ 517.308881][T18019] team0: Port device team_slave_1 added [ 517.320158][T18102] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2955'. [ 517.375273][T18104] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2955'. [ 517.445948][ T7012] IPVS: starting estimator thread 0... [ 517.468854][T18019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 517.495876][T18019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 517.553007][T18110] IPVS: using max 30 ests per chain, 72000 per kthread [ 517.584738][T18019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 517.618083][T18019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 517.633545][T18019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 517.705165][T18019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 517.959278][T18124] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2962'. [ 518.000242][T18019] hsr_slave_0: entered promiscuous mode [ 518.035686][T18019] hsr_slave_1: entered promiscuous mode [ 518.047687][T18019] debugfs: 'hsr0' already exists in 'hsr' [ 518.064685][T18019] Cannot create hsr debugfs directory [ 518.257811][T18132] netlink: 'syz.3.2965': attribute type 4 has an invalid length. [ 518.265800][T18132] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2965'. [ 518.783137][ T9504] net_ratelimit: 191 callbacks suppressed [ 518.783160][ T9504] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 518.833400][ T7322] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 518.883796][ T7322] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 518.913010][ T9508] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 518.923573][T18122] Bluetooth: hci2: command tx timeout [ 518.943161][ T9508] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 518.973313][ T9503] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 519.022909][ T9503] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 519.062938][ T12] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 519.093792][ T6371] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 519.141825][ T6371] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 519.688407][T18019] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.887536][ T5622] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 519.955205][T18158] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2970'. [ 519.973823][T18019] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.067957][T18019] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.181843][T18019] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.498759][T18189] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2977'. [ 520.516401][T18188] netlink: 'syz.6.2976': attribute type 1 has an invalid length. [ 520.533131][T18189] vlan2: entered promiscuous mode [ 520.543832][T18189] veth0: entered promiscuous mode [ 520.555454][T18188] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2976'. [ 521.004643][ T5622] Bluetooth: hci2: command tx timeout [ 521.045039][T18019] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 521.082643][T18019] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 521.093112][T18019] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 521.105942][T18019] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 521.156184][T18019] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 521.188756][T18019] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 521.205057][T18019] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 521.241733][T18019] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 521.249209][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 521.424502][T18019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 521.448714][T18019] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.469948][ T9504] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.477199][ T9504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.498636][ T6371] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.505921][ T6371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 522.104115][T18260] bond14: invalid ARP target 0.0.0.0 specified for addition [ 522.111547][T18260] bond14: option arp_ip_target: invalid value (0) [ 522.136640][T18260] bond14 (unregistering): Released all slaves [ 522.445532][T18019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 522.507712][T18274] __nla_validate_parse: 2 callbacks suppressed [ 522.507734][T18274] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2995'. [ 522.555880][T18274] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2995'. [ 522.636205][T18274] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2995'. [ 522.651022][ T9504] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.668384][T18274] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2995'. [ 522.680823][ T9504] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.711537][ T9504] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.742518][ T9504] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.979791][T18292] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3000'. [ 523.010677][T18294] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2998'. [ 523.020071][T18292] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3000'. [ 523.063944][T18294] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2998'. [ 523.070797][T18292] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3000'. [ 523.095473][ T5622] Bluetooth: hci2: command tx timeout [ 523.204110][T18292] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3000'. [ 523.443858][T18019] veth0_vlan: entered promiscuous mode [ 523.521437][T18019] veth1_vlan: entered promiscuous mode [ 523.726923][T18019] veth0_macvtap: entered promiscuous mode [ 523.794281][ T9504] net_ratelimit: 193 callbacks suppressed [ 523.794302][ T9504] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 523.853538][ T9504] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 523.855318][ T6371] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 523.893873][ T12] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 523.906572][T18019] veth1_macvtap: entered promiscuous mode [ 523.928161][ T7322] bond2: (slave bridge1): failed to get link speed/duplex [ 523.936193][ T12] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 523.972995][ T12] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 523.996627][T18019] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 524.013228][ T6371] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 524.037967][T18019] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 524.055617][ T9504] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 524.075496][ T12] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 524.103722][ T6371] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.130153][ T6371] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.177317][ T6371] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.202284][ T6371] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.368490][T18323] syzkaller1: entered promiscuous mode [ 524.430329][T18323] syzkaller1: entered allmulticast mode [ 524.805800][T18332] x_tables: duplicate underflow at hook 1 [ 524.815123][ T7322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 524.841992][ T7322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.961974][ T6357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 524.987114][ T6357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.145121][T18338] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.152996][T18338] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.173670][T18338] bridge0: entered allmulticast mode [ 525.185893][T18339] bridge_slave_1: left allmulticast mode [ 525.191796][T18339] bridge_slave_1: left promiscuous mode [ 525.202529][T18339] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.234483][T18339] bridge_slave_0: left allmulticast mode [ 525.247962][T18339] bridge_slave_0: left promiscuous mode [ 525.266517][T18339] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.530766][T18346] syzkaller1: entered promiscuous mode [ 525.544305][T18346] syzkaller1: entered allmulticast mode [ 525.788627][T18349] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.796540][T18349] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.890977][T18122] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 525.913077][T18122] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 525.921970][T18122] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 525.934471][T18122] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 525.942381][T18122] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 526.437923][T18374] xt_hl: Unknown TTL match mode: 237 [ 527.445079][ T9503] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.478496][T18384] netlink: 'syz.4.3023': attribute type 27 has an invalid length. [ 527.545651][T18384] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 527.569955][T18384] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 527.891869][T18388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 527.901096][T18388] 8021q: adding VLAN 0 to HW filter on device team0 [ 527.917938][T18388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 527.952549][T18388] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.959734][T18388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 527.980609][T18388] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 527.993555][T18388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 528.012376][T18388] veth1_vlan: left promiscuous mode [ 528.020410][T18388] veth0_vlan: left promiscuous mode [ 528.028311][T18388] veth0_vlan: entered promiscuous mode [ 528.037053][T18388] veth1_vlan: entered promiscuous mode [ 528.042987][T18122] Bluetooth: hci1: command tx timeout [ 528.053814][T18388] veth1_macvtap: left promiscuous mode [ 528.060199][T18388] veth0_macvtap: left promiscuous mode [ 528.067851][T18388] veth0_macvtap: entered promiscuous mode [ 528.075510][T18388] veth1_macvtap: entered promiscuous mode [ 528.088005][T18388] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 528.097376][T18388] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 528.105804][T18388] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 528.114429][T18388] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 528.178865][ T9504] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.186244][ T9504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 528.208776][ T9503] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.399506][T18406] netlink: 'syz.4.3029': attribute type 4 has an invalid length. [ 528.420351][ T9503] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.450997][T18408] netlink: 'syz.4.3029': attribute type 4 has an invalid length. [ 528.503322][T18410] __nla_validate_parse: 29 callbacks suppressed [ 528.503343][T18410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3029'. [ 528.607791][T18408] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3029'. [ 528.736350][ T9503] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.803730][ T9504] net_ratelimit: 214 callbacks suppressed [ 528.803751][ T9504] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 528.864653][ T6357] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 528.893445][T18417] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 528.915284][T18430] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3031'. [ 528.933713][ T6371] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 528.953352][ T6370] bond2: (slave bridge1): failed to get link speed/duplex [ 528.993046][ T6371] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 529.035114][ T6371] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 529.074240][ T9508] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 529.074387][ T6371] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 529.124063][ T6371] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 529.183521][T18434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3032'. [ 529.229805][T18434] ipt_REJECT: ECHOREPLY no longer supported. [ 529.984594][ T9503] pimreg: left allmulticast mode [ 530.123157][T18122] Bluetooth: hci1: command tx timeout [ 530.203256][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 530.488212][ T9503] bond6 (unregistering): (slave gretap1): Releasing active interface [ 530.614532][ T9503] bond10 (unregistering): (slave gretap2): Releasing active interface [ 530.668462][ T9503] bond0 (unregistering): (slave geneve4): Releasing active interface [ 530.676940][ T9503] geneve4 (unregistering): left allmulticast mode [ 530.696115][ T9503] bond2 (unregistering): (slave geneve2): Releasing active interface [ 530.737047][ T9503] team0: Port device bridge2 removed [ 530.752404][ T9503] team0: Port device bridge3 removed [ 530.769192][ T9503] bond1 (unregistering): Released all slaves [ 530.788731][ T9503] bond2 (unregistering): Released all slaves [ 530.809211][ T9503] bond3 (unregistering): Released all slaves [ 530.828239][ T9503] bond4 (unregistering): Released all slaves [ 530.849634][ T9503] bond5 (unregistering): Released all slaves [ 530.868880][ T9503] bond6 (unregistering): Released all slaves [ 530.890456][ T9503] bond7 (unregistering): Released all slaves [ 530.913578][ T9503] bond8 (unregistering): Released all slaves [ 530.932060][ T9503] bond9 (unregistering): Released all slaves [ 530.971925][ T9503] bond0 (unregistering): Released all slaves [ 530.991913][ T9503] bond10 (unregistering): Released all slaves [ 531.008336][ T9503] bond11 (unregistering): Released all slaves [ 531.031563][ T9503] bond12 (unregistering): Released all slaves [ 531.052028][ T9503] bond13 (unregistering): Released all slaves [ 531.389037][T18456] bond0 (unregistering): Released all slaves [ 531.525963][T18477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3042'. [ 531.580393][ T9503] ¿: left promiscuous mode [ 531.795259][ T9503] tipc: Left network mode [ 532.203910][T18122] Bluetooth: hci1: command tx timeout [ 532.335311][T18359] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.361207][T18359] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.381471][T18359] bridge_slave_0: entered allmulticast mode [ 532.394235][T18359] bridge_slave_0: entered promiscuous mode [ 532.512241][T18359] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.545423][T18359] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.568792][T18359] bridge_slave_1: entered allmulticast mode [ 532.606862][T18359] bridge_slave_1: entered promiscuous mode [ 533.018764][T18359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 533.042029][T18554] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3057'. [ 533.055233][T18359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 533.121295][T18523] syzkaller0: entered promiscuous mode [ 533.133288][T18523] syzkaller0: entered allmulticast mode [ 533.176688][T18554] dummy0: entered promiscuous mode [ 533.410025][T18359] team0: Port device team_slave_0 added [ 533.460219][T18359] team0: Port device team_slave_1 added [ 533.700093][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1 [ 533.710108][T18577] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3060'. [ 533.731614][T18578] x_tables: duplicate underflow at hook 2 [ 533.816056][ T10] IPVS: starting estimator thread 0... [ 533.823977][T18581] xt_NFQUEUE: number of total queues is 0 [ 533.840000][T18575] bridge1: entered promiscuous mode [ 533.845670][ T6370] net_ratelimit: 217 callbacks suppressed [ 533.845689][ T6370] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 533.871349][T18575] bridge1: entered allmulticast mode [ 533.886368][T18575] team0: Port device bridge1 added [ 533.894032][ T9508] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 533.905949][T18359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 533.914763][T18359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 533.941252][T18580] IPVS: using max 23 ests per chain, 55200 per kthread [ 533.949068][ T9508] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 533.961597][T18359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 533.984511][ T12] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 533.994040][T18359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 534.013726][T11901] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 534.024411][T18359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.057892][ T12] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 534.074182][T18359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 534.116143][ T9508] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 534.168841][T18566] bridge2: entered promiscuous mode [ 534.184229][ T9504] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 534.197982][T18566] bridge2: entered allmulticast mode [ 534.224191][ T9504] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 534.236620][T18566] team0: Port device bridge2 added [ 534.265687][ T12] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 534.284127][T18122] Bluetooth: hci1: command tx timeout [ 534.371420][T18598] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 534.385118][T18598] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 534.399391][T18598] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 534.723088][T18359] hsr_slave_0: entered promiscuous mode [ 534.732948][T18359] hsr_slave_1: entered promiscuous mode [ 534.739400][T18359] debugfs: 'hsr0' already exists in 'hsr' [ 534.749495][T18359] Cannot create hsr debugfs directory [ 534.925148][ T9503] hsr_slave_0: left promiscuous mode [ 534.934660][ T9503] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 534.946801][ T9503] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 535.429375][ T9503] team0 (unregistering): Port device team_slave_1 removed [ 535.462679][ T9503] team0 (unregistering): Port device team_slave_0 removed [ 535.691706][ T5283] 8021q: adding VLAN 0 to HW filter on device eth2 [ 535.749410][T18644] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3073'. [ 535.969385][T18646] syzkaller0: entered promiscuous mode [ 535.976133][T18646] syzkaller0: entered allmulticast mode [ 536.219910][ T9503] IPVS: stop unused estimator thread 0... [ 536.756526][T18687] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3082'. [ 537.120806][T18696] netlink: 'syz.4.3084': attribute type 1 has an invalid length. [ 537.133733][T18696] netlink: 'syz.4.3084': attribute type 4 has an invalid length. [ 537.166285][T18696] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.3084'. [ 537.499446][T18703] xt_CT: You must specify a L4 protocol and not use inversions on it [ 537.642013][T18359] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 537.696176][T18359] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 537.720438][T18359] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 537.788824][T18359] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 537.819584][T18359] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 537.842241][T18359] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 537.870372][T18359] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 537.904006][T18359] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 538.225646][T18359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 538.299625][T18734] syzkaller1: entered promiscuous mode [ 538.306061][T18734] syzkaller1: entered allmulticast mode [ 538.334232][T18359] 8021q: adding VLAN 0 to HW filter on device team0 [ 538.356807][ T6370] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.364069][ T6370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 538.419548][T18740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3092'. [ 538.451082][ T6370] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.458359][ T6370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 538.858538][ T6370] net_ratelimit: 194 callbacks suppressed [ 538.858559][ T6370] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 538.909887][ T7322] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 538.918476][ T9504] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 538.953432][ T6370] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 538.953725][ T9504] bond2: (slave bridge1): failed to get link speed/duplex [ 538.973957][ T7322] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 539.009374][ T7322] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 539.044582][ T7322] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 539.114751][ T9503] bond2: (slave bridge1): failed to get link speed/duplex [ 539.144296][ T9504] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 539.665517][T18783] syzkaller0: entered promiscuous mode [ 539.671650][T18783] syzkaller0: entered allmulticast mode [ 539.697239][T18359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 539.880003][T18359] veth0_vlan: entered promiscuous mode [ 539.944965][T18359] veth1_vlan: entered promiscuous mode [ 540.070266][T18359] veth0_macvtap: entered promiscuous mode [ 540.102714][T18359] veth1_macvtap: entered promiscuous mode [ 540.142426][T18805] geneve1: entered promiscuous mode [ 540.218408][T18359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 540.248679][T18359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 540.278601][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.311685][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.338611][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.356670][T18809] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3101'. [ 540.364828][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.443890][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 540.576865][T18813] sctp: [Deprecated]: syz.6.3101 (pid 18813) Use of int in maxseg socket option. [ 540.576865][T18813] Use struct sctp_assoc_value instead [ 540.598579][ T6370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.621386][ T6370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.692712][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.707121][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.788559][T18817] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3102'. [ 541.017366][T18823] pimreg1: renamed from bridge0 (while UP) [ 541.037619][T18823] pimreg1: entered allmulticast mode [ 541.615454][T18843] xt_hashlimit: size too large, truncated to 1048576 [ 541.723734][ C1] ip6_tunnel: - xmit: Local address not yet configured! [ 541.839460][T18856] atomic_op ffff888079002198 conn xmit_atomic 0000000000000000 [ 541.948002][T15047] IPVS: starting estimator thread 0... [ 542.065625][T18863] IPVS: using max 24 ests per chain, 57600 per kthread [ 542.358497][T18873] netlink: 316 bytes leftover after parsing attributes in process `syz.6.3110'. [ 543.644012][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 543.966674][ T12] net_ratelimit: 186 callbacks suppressed [ 543.966696][ T12] bond2: (slave bridge1): failed to get link speed/duplex [ 543.969341][ T7322] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 543.993391][ T6370] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 544.026207][ T6370] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 544.043502][ T6370] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 544.093671][ T7322] bond2: (slave bridge1): failed to get link speed/duplex [ 544.113225][ T9508] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 544.163031][ T7322] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 544.204815][ T7322] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 544.205719][T18902] dvmrp0: entered allmulticast mode [ 544.243073][ T7322] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 544.286243][ T7322] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 544.700410][T18956] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3120'. [ 544.927316][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 545.008595][T18963] ip6tnl1: entered allmulticast mode [ 545.019884][ T6370] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 545.035355][ T6370] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 545.043334][ T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 545.112402][T18963] syzkaller1: entered promiscuous mode [ 545.138112][T18963] syzkaller1: entered allmulticast mode [ 545.158484][T18963] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 545.429197][T18972] veth1_vlan: entered allmulticast mode [ 545.650258][T18984] netlink: 'syz.6.3126': attribute type 2 has an invalid length. [ 545.672340][T18984] netlink: 'syz.6.3126': attribute type 8 has an invalid length. [ 545.692735][T18984] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3126'. [ 545.887891][ T7003] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 545.964256][ T7003] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 546.210240][ T6370] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 546.334596][ T12] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 546.365449][ T12] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 546.389340][ T12] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 546.412159][ T12] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 547.079582][T19028] netlink: 'syz.4.3136': attribute type 1 has an invalid length. [ 547.327215][T19038] netlink: 'syz.6.3137': attribute type 4 has an invalid length. [ 547.414249][T19038] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3137'. [ 547.529140][T19032] netlink: 'syz.6.3137': attribute type 7 has an invalid length. [ 547.649416][T19048] team0: Device tunl0 is of different type [ 547.814266][T19054] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3143'. [ 547.824351][T19054] hsr_slave_0: left promiscuous mode [ 547.831087][T19054] hsr_slave_1: left promiscuous mode [ 548.388789][T19073] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3148'. [ 548.526316][T19080] netlink: 'syz.4.3150': attribute type 1 has an invalid length. [ 548.544831][T19080] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3150'. [ 548.814487][T19085] tc action pedit 'at' offset 5 out of bounds [ 548.822242][T19085] tc action pedit 'at' offset 5 out of bounds [ 548.828451][T19085] tc action pedit 'at' offset 5 out of bounds [ 548.834598][T19085] tc action pedit 'at' offset 5 out of bounds [ 548.840708][T19085] tc action pedit 'at' offset 5 out of bounds [ 548.846872][T19085] tc action pedit 'at' offset 5 out of bounds [ 548.853023][T19085] tc action pedit 'at' offset 5 out of bounds [ 548.859184][T19085] tc action pedit 'at' offset 5 out of bounds [ 548.865380][T19085] tc action pedit 'at' offset 5 out of bounds [ 548.871500][T19085] tc action pedit 'at' offset 5 out of bounds [ 548.973477][ T6370] net_ratelimit: 172 callbacks suppressed [ 548.973502][ T6370] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 548.993236][ T12] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 549.006678][ T12] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 549.032896][ T12] bond2: (slave bridge1): failed to get link speed/duplex [ 549.074061][ T5622] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 549.101055][ T5622] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 549.110739][ T5622] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 549.116629][ T9508] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 549.127014][ T5622] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 549.134914][ T5622] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 549.143216][ T12] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 549.163183][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 549.173566][ T6357] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 549.202960][ T9503] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 549.210752][T19095] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3155'. [ 549.256162][ T9503] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 549.268966][T19100] netlink: 'syz.4.3157': attribute type 1 has an invalid length. [ 549.279460][T19101] vxcan0: tx address claim with different name [ 549.283510][ T6370] bond2: (slave bridge1): failed to get link speed/duplex [ 549.308291][T19100] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3157'. [ 550.544055][T15047] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 550.800013][T19094] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.808140][T19094] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.815998][T19094] bridge_slave_0: entered allmulticast mode [ 550.824621][T19094] bridge_slave_0: entered promiscuous mode [ 550.834908][T19094] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.842410][T19094] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.850249][T19094] bridge_slave_1: entered allmulticast mode [ 550.860793][T19094] bridge_slave_1: entered promiscuous mode [ 550.925918][T19094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 550.949603][T19094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.009617][T19094] team0: Port device team_slave_0 added [ 551.031800][T19094] team0: Port device team_slave_1 added [ 551.069101][T19149] syzkaller0: entered promiscuous mode [ 551.081539][T19149] syzkaller0: entered allmulticast mode [ 551.114679][T19149] netlink: 232 bytes leftover after parsing attributes in process `syz.6.3165'. [ 551.176802][T19094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 551.193436][T19094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.246995][ T5622] Bluetooth: hci4: command tx timeout [ 551.248346][T19094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 551.324667][ T5757] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 551.395085][T19094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 551.410944][T19094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.437427][T19094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 551.615287][T19094] hsr_slave_0: entered promiscuous mode [ 551.622060][T19094] hsr_slave_1: entered promiscuous mode [ 551.634362][T19094] debugfs: 'hsr0' already exists in 'hsr' [ 551.647115][T19094] Cannot create hsr debugfs directory [ 551.770299][T19174] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3172'. [ 551.904178][T19180] netlink: 'syz.6.3174': attribute type 1 has an invalid length. [ 551.996703][T19180] bond1: entered promiscuous mode [ 552.001891][T19180] bond1: entered allmulticast mode [ 552.007928][T19180] 8021q: adding VLAN 0 to HW filter on device bond1 [ 552.549247][T19200] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3180'. [ 552.739138][T19203] sctp: [Deprecated]: syz.6.3181 (pid 19203) Use of struct sctp_assoc_value in delayed_ack socket option. [ 552.739138][T19203] Use struct sctp_sack_info instead [ 552.837245][T19094] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 552.886049][T19094] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 552.921281][T19215] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 552.951245][T19215] syzkaller1: linktype set to 1 [ 552.970533][T19094] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 552.988354][T19094] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 553.005706][T19094] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 553.035241][T19094] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 553.068835][T19094] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 553.122501][T19094] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 553.160707][T19227] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3186'. [ 553.323911][ T5622] Bluetooth: hci4: command tx timeout [ 553.510409][T18122] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 553.529840][T18122] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 553.544152][T18122] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 553.556545][T18122] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 553.564747][T18122] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 553.583486][T19241] netlink: 766 bytes leftover after parsing attributes in process `syz.1.3190'. [ 553.611844][T19244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3189'. [ 553.654749][T19244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3189'. [ 553.704615][T19094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 553.759488][T19244] tun0: tun_chr_ioctl cmd 1074812117 [ 553.851731][T19094] 8021q: adding VLAN 0 to HW filter on device team0 [ 553.895692][ T6370] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.903006][ T6370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.950973][ T6370] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.958258][ T6370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 553.989523][ T9503] net_ratelimit: 235 callbacks suppressed [ 553.989543][ T9503] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 554.023317][ T6370] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 554.043512][ T6370] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 554.097589][ T6357] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 554.158018][ T9508] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 554.177134][T19259] mac80211_hwsim hwsim37 wlan0: entered promiscuous mode [ 554.191147][T19259] mac80211_hwsim hwsim37 wlan0: entered allmulticast mode [ 554.203537][T19259] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 554.215935][ T9503] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 554.243007][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 554.269536][ T6370] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 554.296725][ T6371] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 554.501574][T19270] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 554.520874][T19270] syzkaller1: Linktype set failed because interface is up [ 554.537446][ T10] syzkaller1: tun_net_xmit 90 [ 555.080044][T19291] netlink: 'syz.1.3196': attribute type 6 has an invalid length. [ 555.413695][ T5622] Bluetooth: hci4: command tx timeout [ 555.479024][T19315] bond1: option primary_reselect: invalid value (6) [ 555.494405][T19315] bond1 (unregistering): Released all slaves [ 555.509826][T19318] xt_TCPMSS: Only works on TCP SYN packets [ 555.538003][T19318] netlink: 'syz.4.3199': attribute type 10 has an invalid length. [ 555.622407][T19318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 555.644414][ T5622] Bluetooth: hci8: command tx timeout [ 555.896366][T19094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 556.389329][T19242] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.422416][T19242] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.447046][T19242] bridge_slave_0: entered allmulticast mode [ 556.456683][T19242] bridge_slave_0: entered promiscuous mode [ 556.469532][T19352] tipc: Started in network mode [ 556.489479][T19352] tipc: Node identity 4294b2941052, cluster identity 4711 [ 556.502238][T19352] tipc: Enabled bearer , priority 0 [ 556.512673][T19242] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.534006][T19242] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.541317][T19242] bridge_slave_1: entered allmulticast mode [ 556.566005][T19242] bridge_slave_1: entered promiscuous mode [ 556.596105][T19355] syzkaller0: entered promiscuous mode [ 556.615620][T19355] syzkaller0: entered allmulticast mode [ 556.684699][T19242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 556.708274][T19242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 556.741366][T19368] netlink: 'syz.1.3206': attribute type 6 has an invalid length. [ 556.779217][T19242] team0: Port device team_slave_0 added [ 556.802078][T19351] tipc: Resetting bearer [ 556.861486][T19351] tipc: Disabling bearer [ 556.900379][T19242] team0: Port device team_slave_1 added [ 556.969721][T19242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 556.978949][T19242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.010279][T19242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 557.054640][T19242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 557.081277][T19242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.113111][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 557.149307][T19242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 557.359887][T19094] veth0_vlan: entered promiscuous mode [ 557.390836][T19242] hsr_slave_0: entered promiscuous mode [ 557.398637][T19242] hsr_slave_1: entered promiscuous mode [ 557.409544][T19242] debugfs: 'hsr0' already exists in 'hsr' [ 557.415839][T19242] Cannot create hsr debugfs directory [ 557.422617][T19384] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3210'. [ 557.458969][T19385] syzkaller1: entered promiscuous mode [ 557.471383][T19385] syzkaller1: entered allmulticast mode [ 557.492922][ T5622] Bluetooth: hci4: command tx timeout [ 557.539749][T19094] veth1_vlan: entered promiscuous mode [ 557.680408][T19389] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3212'. [ 557.726098][ T5622] Bluetooth: hci8: command tx timeout [ 557.735770][T19390] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3212'. [ 557.874410][T19094] veth0_macvtap: entered promiscuous mode [ 557.930617][T19094] veth1_macvtap: entered promiscuous mode [ 557.975142][T19094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 557.987827][T19242] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 558.010822][T19242] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 558.023508][T19242] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 558.035868][T19396] x_tables: duplicate underflow at hook 1 [ 558.041582][T19242] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 558.054921][T19242] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 558.068423][T19242] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 558.078645][T19094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 558.091099][T19242] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 558.103522][T19242] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 558.121923][ T9503] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.135285][ T9503] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.150163][ T9503] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.159472][ T9503] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.413436][ T9503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.428254][ T9503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 558.544584][ T6371] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.564255][ T6371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 558.599486][T19242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 558.698903][T19242] 8021q: adding VLAN 0 to HW filter on device team0 [ 558.718471][T11901] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.725714][T11901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 558.777185][T11901] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.784410][T11901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 559.013943][ T7322] net_ratelimit: 217 callbacks suppressed [ 559.013965][ T7322] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 559.055282][ T9503] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 559.085335][ T9503] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 559.101884][T19431] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3220'. [ 559.118766][ T9503] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 559.144141][T19431] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3220'. [ 559.163833][ T6357] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 559.204087][ T12] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 559.251415][ T6357] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 559.313054][ T6357] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 559.353691][ T6357] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 559.385124][ T6357] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 559.394262][T19438] netlink: 232 bytes leftover after parsing attributes in process `syz.7.3221'. [ 559.438410][T19431] veth3: entered allmulticast mode [ 559.538685][T19438] veth1_to_batadv: entered promiscuous mode [ 559.792163][T19451] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3224'. [ 559.803270][ T5622] Bluetooth: hci8: command tx timeout [ 560.070457][T19458] netlink: 'syz.4.3226': attribute type 29 has an invalid length. [ 560.966850][T19481] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3228'. [ 561.174693][T19478] syzkaller0: entered promiscuous mode [ 561.198521][T19478] syzkaller0: entered allmulticast mode [ 561.887601][ T5622] Bluetooth: hci8: command tx timeout [ 562.213884][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 564.023019][ T6357] net_ratelimit: 205 callbacks suppressed [ 564.023044][ T6357] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 564.053070][ T6357] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 564.085881][ T12] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 564.119905][ T12] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 564.175839][ T6357] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 564.205117][ T6357] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 564.243045][ T9503] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 564.268615][ T6371] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 564.292913][ T6371] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 564.322931][ T6371] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 564.530883][T19242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 564.801509][T19550] syzkaller0: entered promiscuous mode [ 564.819064][T19550] syzkaller0: entered allmulticast mode [ 564.849908][T19550] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3242'. [ 565.065803][T19559] netlink: 420 bytes leftover after parsing attributes in process `syz.6.3244'. [ 565.165307][T19561] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3245'. [ 565.186322][T19242] veth0_vlan: entered promiscuous mode [ 565.230606][T19562] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3245'. [ 565.241885][T19242] veth1_vlan: entered promiscuous mode [ 565.320138][T19567] geneve1: entered promiscuous mode [ 565.349395][T19242] veth0_macvtap: entered promiscuous mode [ 565.383820][T19242] veth1_macvtap: entered promiscuous mode [ 565.561621][T19242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 565.755159][T19242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 565.822285][T19581] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 565.870331][ T6357] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.902736][ T6357] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.960807][ T6357] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.009217][ T6357] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.390891][ T6370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.413804][ T6370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.436457][T19604] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 566.517827][T19577] dvmrp0: entered allmulticast mode [ 566.541787][ T7322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.571540][ T7322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.609549][ T6371] dvmrp0: left allmulticast mode [ 567.176915][T19619] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3259'. [ 567.191429][T19624] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3260'. [ 567.301559][T19623] bridge0: entered promiscuous mode [ 567.343581][T19623] bridge0: entered allmulticast mode [ 567.354986][T19623] team0: Port device bridge0 added [ 567.380584][T19626] bridge0: port 1(team0) entered blocking state [ 567.396877][T19626] bridge0: port 1(team0) entered disabled state [ 567.421374][T19626] team0: entered allmulticast mode [ 567.428027][T19626] team_slave_0: entered allmulticast mode [ 567.444513][T19626] team_slave_1: entered allmulticast mode [ 567.471256][T19626] team0: left allmulticast mode [ 567.496112][T19626] team_slave_0: left allmulticast mode [ 567.515055][T19626] team_slave_1: left allmulticast mode [ 567.694673][T19625] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3258'. [ 567.784384][T19642] team0: Device vlan2 is already an upper device of the team interface [ 568.248359][ T6357] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 568.696409][T19688] vlan2: entered promiscuous mode [ 568.701671][T19688] bridge0: entered promiscuous mode [ 568.781159][T19688] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.788996][T19688] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.887016][T19688] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 568.899898][T19688] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 569.034887][ T7322] net_ratelimit: 187 callbacks suppressed [ 569.034909][ T7322] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 569.067348][T19688] vlan2: left promiscuous mode [ 569.072197][T19688] bridge0: left promiscuous mode [ 569.086737][ T7322] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 569.097373][ T6370] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.111044][ T6370] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.121035][ T6370] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.130769][ T9508] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 569.140942][ T6370] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.163714][ T7322] bond2: (slave bridge1): failed to get link speed/duplex [ 569.171060][ T6370] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 569.180104][ T6370] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 569.202939][ T9508] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 569.283357][ T6370] bond2: (slave bridge1): failed to get link speed/duplex [ 569.303204][ T6370] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 569.312290][ T6370] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 571.037638][T19656] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 571.303599][T19717] xt_policy: neither incoming nor outgoing policy selected [ 571.325941][T19715] netlink: 13 bytes leftover after parsing attributes in process `syz.8.3280'. [ 571.326912][T19714] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3282'. [ 571.469940][T19726] syzkaller0: entered promiscuous mode [ 571.493180][T19726] syzkaller0: entered allmulticast mode [ 571.691601][T19738] netlink: 92 bytes leftover after parsing attributes in process `syz.8.3289'. [ 572.011513][T19747] netlink: 'syz.7.3292': attribute type 5 has an invalid length. [ 572.202925][T19763] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3297'. [ 572.445020][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 573.057767][T19792] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3304'. [ 573.472624][T19802] ip6tnl2: entered allmulticast mode [ 573.519832][T19810] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3309'. [ 573.615024][ T6371] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 573.656481][ T7012] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 573.665983][ T6371] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 573.694416][T19819] netlink: 'syz.6.3309': attribute type 10 has an invalid length. [ 573.765559][T19819] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3309'. [ 573.831434][T19826] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3312'. [ 573.883357][ T7012] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 573.883732][T19810] 8021q: adding VLAN 0 to HW filter on device bond2 [ 573.918617][T19812] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 574.000235][T19819] dummy0: entered promiscuous mode [ 574.016189][T19819] bond2: (slave dummy0): Releasing backup interface [ 574.053463][ T12] net_ratelimit: 194 callbacks suppressed [ 574.053483][ T12] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 574.122965][ T12] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 574.135492][T19838] netlink: 'syz.7.3314': attribute type 83 has an invalid length. [ 574.153504][ T12] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 574.173952][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 574.213673][ T12] bond2: (slave bridge1): failed to get link speed/duplex [ 574.273326][ T7322] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 574.296890][ T7322] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 574.309080][T19844] netlink: 820 bytes leftover after parsing attributes in process `syz.4.3316'. [ 574.330084][T19844] netlink: 820 bytes leftover after parsing attributes in process `syz.4.3316'. [ 574.343002][ T7322] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 574.374814][T19845] batadv1: entered promiscuous mode [ 574.390183][T19845] batadv1: entered allmulticast mode [ 574.404171][T19845] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 574.426548][ T6370] bond2: (slave bridge1): failed to get link speed/duplex [ 574.434485][ T6371] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 574.683372][ T7012] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 574.696965][T19859] netlink: 'syz.4.3320': attribute type 6 has an invalid length. [ 575.313017][T19880] syzkaller0: entered promiscuous mode [ 575.318747][T19880] syzkaller0: entered allmulticast mode [ 575.336611][T19880] tcf_pedit_act: 7 callbacks suppressed [ 575.336630][T19880] tc action pedit offset must be on 32 bit boundaries [ 575.350233][T19880] tc action pedit offset must be on 32 bit boundaries [ 575.357068][T19880] tc action pedit offset must be on 32 bit boundaries [ 575.363999][T19880] tc action pedit offset must be on 32 bit boundaries [ 575.370797][T19880] tc action pedit offset must be on 32 bit boundaries [ 575.377651][T19880] tc action pedit offset must be on 32 bit boundaries [ 575.384475][T19880] tc action pedit offset must be on 32 bit boundaries [ 575.391265][T19880] tc action pedit offset must be on 32 bit boundaries [ 575.398104][T19880] tc action pedit offset must be on 32 bit boundaries [ 575.404970][T19880] tc action pedit offset must be on 32 bit boundaries [ 575.469477][T19884] netlink: 'syz.1.3327': attribute type 6 has an invalid length. [ 575.796307][T19900] macvlan0: entered promiscuous mode [ 576.288076][ T9508] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 576.506254][T19930] netlink: 'syz.6.3339': attribute type 1 has an invalid length. [ 576.706269][T19930] 8021q: adding VLAN 0 to HW filter on device bond3 [ 576.729160][T19933] bond3: (slave gretap1): making interface the new active one [ 576.737999][T19933] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 576.800117][T19927] syzkaller0: entered promiscuous mode [ 576.823799][T19927] syzkaller0: entered allmulticast mode [ 577.065154][T19921] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 577.119710][T19921] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 577.121568][T19946] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 577.139437][T19946] pim6reg0: persist disabled [ 577.882964][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 578.085504][T19956] netlink: 'syz.8.3345': attribute type 1 has an invalid length. [ 578.207834][ T9503] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 578.572331][T19964] __nla_validate_parse: 9 callbacks suppressed [ 578.572351][T19964] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3347'. [ 578.686433][T19967] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3348'. [ 579.063613][ T66] net_ratelimit: 197 callbacks suppressed [ 579.063634][ T66] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 579.096320][ T66] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 579.123373][ T66] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 579.152949][T11901] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 579.174350][ T7322] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 579.193165][T11901] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 579.221379][ T66] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 579.247140][ T7322] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 579.280137][ T9503] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 579.306315][ T66] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 579.484343][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 580.976971][T19921] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 580.992572][T19921] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 581.111467][T19983] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3351'. [ 581.303605][T19965] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.311252][T19965] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.699088][T19965] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 581.732083][T19965] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 581.895547][T19965] veth1_vlan: left allmulticast mode [ 581.953610][T19965] macvlan0: left promiscuous mode [ 582.082730][T19965] geneve1: left promiscuous mode [ 582.174663][T19965] bridge1: left promiscuous mode [ 582.183228][T19965] bridge1: left allmulticast mode [ 582.197281][T19965] bridge2: left promiscuous mode [ 582.207762][T19965] bridge2: left allmulticast mode [ 582.269269][T19987] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 582.340058][ T7322] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.358849][T19921] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 582.373178][T19921] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 582.427225][ T7322] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.439950][T19992] syzkaller1: entered promiscuous mode [ 582.457002][T19992] syzkaller1: entered allmulticast mode [ 582.469648][ T7322] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.509758][T19999] x_tables: unsorted entry at hook 2 [ 582.549654][T19999] x_tables: unsorted entry at hook 2 [ 582.562563][T19992] tipc: Started in network mode [ 582.575599][T19992] tipc: Node identity ac14140f, cluster identity 4711 [ 582.590948][T19992] tipc: New replicast peer: 255.255.255.255 [ 582.618552][T19992] tipc: Enabled bearer , priority 10 [ 582.634028][ T7322] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.700018][T19921] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 582.727587][T19921] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 582.819470][T19921] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 582.841630][T19921] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 583.078969][T19921] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 583.094156][T19921] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 583.200972][T20024] netlink: 392 bytes leftover after parsing attributes in process `syz.4.3362'. [ 583.224398][T19921] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 583.257825][T19921] Bluetooth: hci8: Error when powering off device on rfkill (-4) [ 583.338326][T20012] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3354'. [ 583.389636][T20024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3362'. [ 583.701603][T20043] vlan0: entered promiscuous mode [ 583.748949][ T29] tipc: Node number set to 2886997007 [ 583.757541][T20043] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3365'. [ 583.980819][T20051] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3367'. [ 584.018045][T20027] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 584.133772][ T9508] net_ratelimit: 218 callbacks suppressed [ 584.133794][ T9508] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 584.147559][ T6357] bond2: (slave bridge1): failed to get link speed/duplex [ 584.184120][ T6357] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 584.224218][ T6357] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 584.256524][ T6357] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 584.280625][T20059] netlink: 264 bytes leftover after parsing attributes in process `syz.7.3369'. [ 584.300319][ T9508] bond2: (slave bridge1): failed to get link speed/duplex [ 584.314261][T20065] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3372'. [ 584.331158][T20061] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3371'. [ 584.353293][ T7322] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 584.367931][T20059] netlink: 'syz.7.3369': attribute type 1 has an invalid length. [ 584.376718][T20067] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3372'. [ 584.410285][T20059] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3369'. [ 584.435646][ T66] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 584.444861][ T6371] bond2: (slave bridge1): failed to get link speed/duplex [ 584.483616][ T66] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 584.510806][T20065] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3372'. [ 584.567592][T20067] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.575479][T20067] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.645777][T20067] bridge0: entered allmulticast mode [ 584.718898][T20067] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3372'. [ 584.955856][T20086] macvlan0: entered promiscuous mode [ 585.483553][T20105] netlink: 'syz.7.3380': attribute type 15 has an invalid length. [ 585.518459][T20105] netlink: 666 bytes leftover after parsing attributes in process `syz.7.3380'. [ 585.832454][T20123] netlink: 'syz.8.3384': attribute type 9 has an invalid length. [ 586.522965][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 586.724717][T20150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 586.749393][T20150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 586.797520][T20150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 586.827223][T20150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 586.902199][T20165] netlink: 'syz.4.3395': attribute type 8 has an invalid length. [ 589.128719][T20257] tipc: Started in network mode [ 589.143197][ T12] net_ratelimit: 178 callbacks suppressed [ 589.143217][ T12] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 589.152084][T20257] tipc: Node identity 5eff41accee, cluster identity 4711 [ 589.173726][ T12] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 589.193429][T20257] tipc: Enabled bearer , priority 0 [ 589.203281][ T66] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 589.212858][ T66] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 589.223971][ T6370] bond2: (slave bridge1): failed to get link speed/duplex [ 589.253505][ T66] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 589.275728][ T66] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 589.313181][T20257] tipc: Disabling bearer [ 589.319056][ T66] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 589.349262][T20265] netlink: 'syz.7.3421': attribute type 1 has an invalid length. [ 589.359100][ T66] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 589.383147][ T6370] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 589.493718][T20265] veth3: entered allmulticast mode [ 589.585549][T20275] __nla_validate_parse: 12 callbacks suppressed [ 589.585570][T20275] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3424'. [ 589.899068][T20292] netlink: 'syz.1.3430': attribute type 49 has an invalid length. [ 590.866015][T20328] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3439'. [ 591.019460][T20340] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3441'. [ 591.058189][T20340] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3441'. [ 591.691993][T20372] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3448'. [ 591.756174][T20373] netlink: 'syz.1.3449': attribute type 9 has an invalid length. [ 592.011502][T20390] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3453'. [ 592.033428][T20385] pim6reg: entered allmulticast mode [ 592.157611][T20391] pim6reg: left allmulticast mode [ 592.196461][T20401] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3457'. [ 592.237031][T20401] veth0_macvtap: left promiscuous mode [ 592.512568][ T7003] bridge0: entered promiscuous mode [ 592.778940][T20420] (: renamed from bridge_slave_0 (while UP) [ 592.787841][T20421] netlink: 'syz.7.3461': attribute type 1 has an invalid length. [ 593.112114][T20429] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3464'. [ 593.409906][T20445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3466'. [ 593.456746][T20448] xt_hashlimit: max too large, truncated to 1048576 [ 593.485487][T20448] xt_hashlimit: overflow, try lower: 137438953472/8 [ 593.766969][T20462] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3471'. [ 594.177786][T20492] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:20002 [ 594.225230][ T66] net_ratelimit: 186 callbacks suppressed [ 594.225251][ T66] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 594.225923][ T12] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 594.303394][ T6370] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 594.313358][ T12] bond2: (slave bridge1): failed to get link speed/duplex [ 594.343062][ T6370] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 594.352680][ T6370] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 594.404692][ T6370] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 594.453297][ T66] bond2: (slave bridge1): failed to get link speed/duplex [ 594.492969][ T12] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 594.504584][ T12] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 594.795305][T20517] __nla_validate_parse: 4 callbacks suppressed [ 594.795326][T20517] netlink: 820 bytes leftover after parsing attributes in process `syz.4.3484'. [ 594.823037][T20517] netlink: 820 bytes leftover after parsing attributes in process `syz.4.3484'. [ 594.915491][T20524] netlink: 'syz.8.3486': attribute type 1 has an invalid length. [ 594.924849][T20525] netlink: 'syz.4.3484': attribute type 4 has an invalid length. [ 594.979132][T20526] netlink: 'syz.4.3484': attribute type 4 has an invalid length. [ 595.065146][T20528] gretap1: entered allmulticast mode [ 595.101263][T20528] bond1: (slave gretap1): making interface the new active one [ 595.125355][T20528] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 595.544451][T20545] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3491'. [ 595.592339][T20545] netlink: 904 bytes leftover after parsing attributes in process `syz.6.3491'. [ 595.749613][T20554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3494'. [ 595.785726][T20558] IPVS: set_ctl: invalid protocol: 98 100.1.1.1:20002 [ 595.906514][T20566] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 595.961702][T20568] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3495'. [ 596.372455][T20583] netlink: 'syz.1.3503': attribute type 3 has an invalid length. [ 596.380939][T20583] netlink: 'syz.1.3503': attribute type 3 has an invalid length. [ 596.398208][T20583] tipc: Enabled bearer , priority 0 [ 596.406366][T20583] syzkaller0: entered promiscuous mode [ 596.412009][T20583] syzkaller0: entered allmulticast mode [ 596.518658][T20583] tipc: Resetting bearer [ 596.534035][T20582] tipc: Resetting bearer [ 596.576633][T20582] tipc: Disabling bearer [ 596.617141][T20585] syzkaller0: entered promiscuous mode [ 596.629905][T20585] syzkaller0: entered allmulticast mode [ 596.664666][T20591] tipc: Started in network mode [ 596.695449][T20591] tipc: Node identity d2e0b3d82268, cluster identity 4711 [ 596.713191][T20591] tipc: Enabled bearer , priority 0 [ 596.841002][T20584] tipc: Resetting bearer [ 596.961856][T20584] tipc: Disabling bearer [ 597.182682][T20606] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3511'. [ 597.388660][T20606] 8021q: adding VLAN 0 to HW filter on device bond2 [ 597.427916][T20613] bond2: option mode: unable to set because the bond device is up [ 597.537803][T20626] netlink: 'syz.7.3515': attribute type 83 has an invalid length. [ 597.578028][T20627] tipc: Enabling of bearer rejected, failed to enable media [ 597.818550][T20631] syzkaller0: entered promiscuous mode [ 597.834607][T20631] syzkaller0: entered allmulticast mode [ 597.889912][T20631] netlink: 204 bytes leftover after parsing attributes in process `syz.6.3516'. [ 597.938917][T20637] netlink: 232 bytes leftover after parsing attributes in process `syz.6.3516'. [ 598.340262][T20657] netlink: 'syz.6.3520': attribute type 2 has an invalid length. [ 598.384843][T20657] IPVS: set_ctl: invalid protocol: 2 224.0.0.2:20001 [ 598.557702][T20657] bond4: entered promiscuous mode [ 598.590655][T20657] bond4: entered allmulticast mode [ 598.631915][T20657] 8021q: adding VLAN 0 to HW filter on device bond4 [ 598.894541][T20676] tls_set_device_offload_rx: netdev not found [ 598.904265][T20675] veth1_to_hsr: entered promiscuous mode [ 598.973807][T20675] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3524'. [ 599.129812][T20680] syzkaller0: entered promiscuous mode [ 599.152525][T20680] syzkaller0: entered allmulticast mode [ 599.244191][ T6371] net_ratelimit: 191 callbacks suppressed [ 599.244212][ T6371] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 599.273015][ T9508] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 599.302157][T20692] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 599.325359][ T9508] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 599.355558][ T12] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 599.384366][ T6371] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 599.415911][T20682] erspan0: entered promiscuous mode [ 599.422178][T20682] erspan0: entered allmulticast mode [ 599.429620][ T9508] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 599.453887][ T9508] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 599.497602][T20691] 8021q: adding VLAN 0 to HW filter on device team0 [ 599.515063][ T12] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 599.525880][ T9503] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 599.978643][T20714] netlink: 'syz.6.3537': attribute type 1 has an invalid length. [ 600.210110][T20714] bond5: entered promiscuous mode [ 600.239476][T20714] bond5: entered allmulticast mode [ 600.271577][T20714] 8021q: adding VLAN 0 to HW filter on device bond5 [ 600.298810][T20721] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3541'. [ 600.342380][T20719] erspan1: entered allmulticast mode [ 600.366854][T20719] bond5: (slave erspan1): making interface the new active one [ 600.386436][T20719] erspan1: entered promiscuous mode [ 600.434861][T20719] bond5: (slave erspan1): Enslaving as an active interface with an up link [ 600.500836][T20732] syz.6.3537 (20732) used obsolete PPPIOCDETACH ioctl [ 600.555243][T20739] vlan3: entered promiscuous mode [ 600.582736][T20739] bridge0: entered promiscuous mode [ 601.251422][T20775] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3550'. [ 601.467935][T20789] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3555'. [ 601.616865][T20792] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3550'. [ 601.636474][T20787] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3554'. [ 602.232460][T20813] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 602.263898][T20813] syzkaller1: linktype set to 823 [ 602.283741][T20816] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3562'. [ 602.523121][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 602.937420][T20847] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3568'. [ 603.048779][T20850] netlink: 'syz.1.3567': attribute type 1 has an invalid length. [ 603.325539][T20850] 8021q: adding VLAN 0 to HW filter on device bond1 [ 603.411473][T20852] 8021q: adding VLAN 0 to HW filter on device team0 [ 603.458034][T20852] bond1: (slave team0): making interface the new active one [ 603.469955][T20868] netlink: 'syz.8.3572': attribute type 1 has an invalid length. [ 603.489352][T20852] bond1: (slave team0): Enslaving as an active interface with an up link [ 603.803168][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 603.811750][ C1] ip6_tunnel: - xmit: Local address not yet configured! [ 603.821979][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 604.220225][T20892] syzkaller1: entered promiscuous mode [ 604.255049][ T9504] net_ratelimit: 186 callbacks suppressed [ 604.255072][ T9504] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 604.274714][T20892] syzkaller1: entered allmulticast mode [ 604.318656][ T9504] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 604.364260][ T6363] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 604.467315][ T6370] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 604.476885][ T6363] bond2: (slave bridge1): failed to get link speed/duplex [ 604.514273][ T6363] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 604.576287][ T9508] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 604.616287][ T6370] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 604.643679][ T6363] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 604.675090][ T6370] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 604.709768][T20898] netlink: 'syz.4.3578': attribute type 6 has an invalid length. [ 605.178117][T20923] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3583'. [ 605.198448][T20923] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3583'. [ 605.219702][T20923] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3583'. [ 605.522478][T20929] syzkaller0: entered promiscuous mode [ 605.544098][T20929] syzkaller0: entered allmulticast mode [ 605.560493][T20928] tipc: Enabled bearer , priority 0 [ 605.678577][T20928] tipc: Resetting bearer [ 605.711958][T20928] __nla_validate_parse: 12 callbacks suppressed [ 605.711979][T20928] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3584'. [ 605.761083][T20918] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3582'. [ 605.858293][T20927] tipc: Resetting bearer [ 605.948136][T20927] tipc: Disabling bearer [ 606.100207][T20940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3586'. [ 606.214561][T20942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3587'. [ 606.350564][T20952] netlink: 'syz.1.3589': attribute type 1 has an invalid length. [ 606.479167][T20948] tipc: Enabling of bearer rejected, already enabled [ 606.499267][T20932] tipc: Enabling of bearer rejected, already enabled [ 606.832926][T20968] bridge6: entered promiscuous mode [ 606.863599][T20968] bridge6: entered allmulticast mode [ 607.217226][T20982] netlink: 'syz.7.3596': attribute type 6 has an invalid length. [ 607.622195][T21000] netlink: 'syz.1.3601': attribute type 13 has an invalid length. [ 607.659981][T21000] netlink: 'syz.1.3601': attribute type 17 has an invalid length. [ 607.691733][T20993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3601'. [ 607.865024][T21000] pimreg1: left allmulticast mode [ 608.090780][T21008] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 608.120640][T21008] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3607'. [ 608.229856][T21018] netlink: 'syz.8.3607': attribute type 10 has an invalid length. [ 608.276807][T21018] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3607'. [ 608.297869][T21013] bridge2: port 1(dummy0) entered blocking state [ 608.321056][T21013] bridge2: port 1(dummy0) entered disabled state [ 608.348956][T21013] dummy0: entered allmulticast mode [ 608.391712][T21013] dummy0: entered promiscuous mode [ 608.431742][T21024] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3611'. [ 608.445703][T21018] bridge2: port 1(dummy0) entered blocking state [ 608.453543][T21018] bridge2: port 1(dummy0) entered forwarding state [ 608.499402][T21018] dummy0: left allmulticast mode [ 608.514853][T21018] bridge2: port 1(dummy0) entered disabled state [ 608.922675][T21038] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3616'. [ 608.932150][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 609.043812][T21044] netlink: 'syz.6.3617': attribute type 8 has an invalid length. [ 609.068911][T21044] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3617'. [ 609.176229][T21044] bond0: entered promiscuous mode [ 609.222469][T21044] bond_slave_0: entered promiscuous mode [ 609.251503][T21044] bond_slave_1: entered promiscuous mode [ 609.262978][ T6370] net_ratelimit: 178 callbacks suppressed [ 609.263000][ T6370] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 609.305674][T21044] gretap0: entered promiscuous mode [ 609.334559][ T9504] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 609.373105][ T9504] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 609.433705][T21044] bond0: left promiscuous mode [ 609.443012][ T6370] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 609.453121][T21044] bond_slave_0: left promiscuous mode [ 609.484263][ T9504] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 609.489879][T21044] bond_slave_1: left promiscuous mode [ 609.523544][ T9508] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 609.561062][T21044] gretap0: left promiscuous mode [ 609.573115][ T9504] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 609.625557][ T7322] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 609.684219][ T9508] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 609.743043][ T66] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 609.930626][T21049] 8021q: adding VLAN 0 to HW filter on device bond3 [ 610.135056][ T7013] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 610.709659][T21083] netlink: 'syz.4.3629': attribute type 6 has an invalid length. [ 610.890225][ T9508] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 611.085073][ T7013] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 611.770799][T21110] __nla_validate_parse: 2 callbacks suppressed [ 611.772477][T21110] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3635'. [ 612.142348][ T9504] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 612.183646][ T9504] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 612.333949][ T9] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 612.842374][T21149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3643'. [ 612.984867][ T7013] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 613.077247][T21131] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.084529][T21131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 613.092159][T21131] bridge0: port 1(() entered blocking state [ 613.098390][T21131] bridge0: port 1(() entered forwarding state [ 613.159846][ T29] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 613.292265][T21161] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3645'. [ 613.326769][T21161] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3645'. [ 613.426761][T21163] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3647'. [ 613.760693][T21171] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3649'. [ 614.029203][T21165] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3648'. [ 614.085399][T21165] netlink: 'syz.6.3648': attribute type 9 has an invalid length. [ 614.126422][T21165] netlink: 'syz.6.3648': attribute type 6 has an invalid length. [ 614.276208][ T9504] net_ratelimit: 198 callbacks suppressed [ 614.276230][ T9504] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 614.345024][ T6363] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 614.366292][ T66] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 614.384588][ T6363] bond2: (slave bridge1): failed to get link speed/duplex [ 614.414150][ T6363] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 614.446998][ T6363] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 614.468411][T21201] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3653'. [ 614.493181][ T6370] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 614.534880][ T6370] bond2: (slave bridge1): failed to get link speed/duplex [ 614.586938][T21209] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3658'. [ 614.597092][ T7322] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 614.632942][ T7322] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 615.068594][T21226] xt_NFQUEUE: number of total queues is 0 [ 615.105218][T21226] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3661'. [ 615.571059][T21235] geneve0: entered promiscuous mode [ 615.592577][T21235] geneve0: left promiscuous mode [ 616.107680][T21251] netlink: 'syz.4.3671': attribute type 2 has an invalid length. [ 616.227998][T21248] syzkaller0: entered promiscuous mode [ 616.242504][T21248] syzkaller0: entered allmulticast mode [ 616.287828][T21248] tipc: Enabled bearer , priority 0 [ 616.345191][T21246] tipc: Resetting bearer [ 616.395880][T21246] tipc: Disabling bearer [ 616.603117][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 616.698816][T21282] x_tables: duplicate underflow at hook 2 [ 616.756498][T21286] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 616.781739][T21289] __nla_validate_parse: 6 callbacks suppressed [ 616.781758][T21289] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3680'. [ 616.890697][T21288] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3678'. [ 616.978861][T21288] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3678'. [ 617.009486][T21285] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3678'. [ 617.019582][T21291] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3681'. [ 617.371310][T21307] batadv_slave_0: entered promiscuous mode [ 617.417588][T21310] netlink: 'syz.6.3685': attribute type 11 has an invalid length. [ 617.437977][T21310] netlink: 'syz.6.3685': attribute type 4 has an invalid length. [ 617.457250][T21310] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3685'. [ 617.685713][T21314] bridge0: port 3(vlan3) entered blocking state [ 617.708327][T21314] bridge0: port 3(vlan3) entered disabled state [ 617.725426][T21314] vlan3: entered allmulticast mode [ 617.739322][T21314] geneve0: entered allmulticast mode [ 617.765048][T21314] vlan3: entered promiscuous mode [ 617.778185][T21314] geneve0: entered promiscuous mode [ 618.054599][T21329] netlink: 336 bytes leftover after parsing attributes in process `syz.8.3691'. [ 618.071602][T21301] batadv_slave_0: left promiscuous mode [ 618.093033][T21329] netlink: 336 bytes leftover after parsing attributes in process `syz.8.3691'. [ 618.195630][T21335] netlink: 292 bytes leftover after parsing attributes in process `syz.1.3692'. [ 618.225157][T21335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3692'. [ 618.401757][T21339] team0: Device tunl0 is of different type [ 618.589059][T21351] netlink: 'syz.6.3694': attribute type 10 has an invalid length. [ 618.687727][T21362] bridge5: entered promiscuous mode [ 618.693249][T21362] bridge5: entered allmulticast mode [ 618.707526][T21362] team0: Port device bridge5 added [ 618.964070][T21365] netlink: 'syz.7.3701': attribute type 3 has an invalid length. [ 619.040677][T21365] gretap1: entered allmulticast mode [ 619.231836][T21378] sctp: [Deprecated]: syz.4.3704 (pid 21378) Use of int in maxseg socket option. [ 619.231836][T21378] Use struct sctp_assoc_value instead [ 619.262372][T21378] syzkaller0: entered promiscuous mode [ 619.303298][T21378] syzkaller0: entered allmulticast mode [ 619.333430][ T9504] net_ratelimit: 186 callbacks suppressed [ 619.333449][ T9504] bond2: (slave bridge1): failed to get link speed/duplex [ 619.333460][ T7322] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 619.356202][ T9503] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 619.394014][ T7322] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 619.536923][ T9504] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 619.583218][ T9504] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 619.624359][ T6363] bond2: (slave bridge1): failed to get link speed/duplex [ 619.633116][ T9508] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 619.665559][T11901] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 619.693365][ T9508] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 619.891890][T21412] netlink: 'syz.8.3714': attribute type 1 has an invalid length. [ 620.013437][T21422] netlink: 'syz.7.3716': attribute type 9 has an invalid length. [ 620.093782][T21412] 8021q: adding VLAN 0 to HW filter on device bond4 [ 620.113562][T21412] bond4: entered allmulticast mode [ 620.287248][T21419] bond4: (slave veth3): Enslaving as an active interface with a down link [ 620.395228][T21423] bond4: (slave veth5): Enslaving as an active interface with a down link [ 620.743482][T21454] sctp: [Deprecated]: syz.8.3722 (pid 21454) Use of struct sctp_assoc_value in delayed_ack socket option. [ 620.743482][T21454] Use struct sctp_sack_info instead [ 621.210823][T21459] syzkaller1: entered promiscuous mode [ 621.231805][T21459] syzkaller1: entered allmulticast mode [ 621.834968][T21497] __nla_validate_parse: 8 callbacks suppressed [ 621.834988][T21497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3731'. [ 621.884652][T21499] netlink: 256 bytes leftover after parsing attributes in process `syz.8.3732'. [ 621.898890][T21499] netlink: 64587 bytes leftover after parsing attributes in process `syz.8.3732'. [ 622.323411][ T29] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 622.399444][T21517] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3736'. [ 622.812994][ T29] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 622.842211][T21534] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3740'. [ 623.176706][T21549] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 623.361826][T21559] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 623.403801][T21559] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 623.442653][T21559] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 623.455498][T21559] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 623.489828][T21559] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 623.513838][T21559] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 623.549935][T21559] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 623.583346][T21559] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 623.613287][T21559] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 623.650745][T21559] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 623.665014][T21557] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.679745][T21557] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 623.775084][T21565] syzkaller1: entered promiscuous mode [ 623.788439][T21565] syzkaller1: entered allmulticast mode [ 623.842631][T21572] xt_CT: You must specify a L4 protocol and not use inversions on it [ 623.939648][T21576] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3752'. [ 623.986584][T21577] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3752'. [ 624.052331][T21577] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3752'. [ 624.223495][T21557] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.260538][T21557] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 624.354740][ T9508] net_ratelimit: 187 callbacks suppressed [ 624.354759][ T9508] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 624.383607][ T9508] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 624.393001][T21595] netlink: 'syz.8.3756': attribute type 1 has an invalid length. [ 624.417036][ T9504] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 624.424078][ T9503] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 624.455574][T21577] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3752'. [ 624.465314][ T6353] bond2: (slave bridge1): failed to get link speed/duplex [ 624.465359][ T6353] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 624.465383][ T6353] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 624.475066][T21577] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3752'. [ 624.573997][ T9503] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.592875][ T9503] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.619002][ T7322] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 624.674325][ T6363] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 624.735116][ T6363] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 624.792614][T21557] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.805345][T21557] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 624.825564][ T9503] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.836883][ T9503] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.881872][T21611] bond5: (slave veth0_to_bond): making interface the new active one [ 624.893939][T21611] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 624.915254][T21591] bond5: (slave veth0_to_bond): Releasing active interface [ 625.100209][T21557] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.119529][T21557] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 625.314669][T21621] bond2: entered promiscuous mode [ 625.319926][T21621] bond2: entered allmulticast mode [ 625.326267][T21621] 8021q: adding VLAN 0 to HW filter on device bond2 [ 625.355787][T21622] bond3: entered promiscuous mode [ 625.360861][T21622] bond3: entered allmulticast mode [ 625.366780][T21622] 8021q: adding VLAN 0 to HW filter on device bond3 [ 625.383867][T21617] team0: Port device syz_tun added [ 625.548152][T21643] tipc: Enabled bearer , priority 10 [ 625.573231][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 625.785574][T21647] bond4: Unable to set up delay as MII monitoring is disabled [ 625.806517][T21647] bond4 (unregistering): Released all slaves [ 626.038169][ T9503] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 626.078920][ T9503] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 626.219381][T21666] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1452) ! [ 626.296293][T21670] tipc: Invalid UDP bearer configuration [ 626.296350][T21670] tipc: Enabling of bearer rejected, failed to enable media [ 626.332456][ T9504] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 626.352157][ T9504] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 626.388507][ T9503] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 626.401306][ T9503] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 626.506530][ T6353] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 626.526982][ T6353] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 626.665589][ T7004] tipc: Node number set to 1388753556 [ 627.762045][T21730] __nla_validate_parse: 3 callbacks suppressed [ 627.762091][T21730] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3789'. [ 627.981472][T21739] x_tables: unsorted underflow at hook 4 [ 628.050464][T21743] netlink: 284 bytes leftover after parsing attributes in process `syz.6.3791'. [ 628.078243][T21742] netlink: 284 bytes leftover after parsing attributes in process `syz.6.3791'. [ 628.261795][T21750] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3794'. [ 628.282572][T21750] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3794'. [ 628.312254][T21753] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3795'. [ 628.341993][T21751] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3793'. [ 629.353891][T21788] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 629.407466][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 629.428916][ T9503] net_ratelimit: 184 callbacks suppressed [ 629.428936][ T9503] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 629.447126][ T7322] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 629.484983][ T9503] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 629.492922][ T6363] bond2: (slave bridge1): failed to get link speed/duplex [ 629.541447][ T9503] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 629.604599][ T9503] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 629.643448][ T9503] bond2: (slave bridge1): failed to get link speed/duplex [ 629.695029][ T9503] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 629.731432][ T9503] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 629.764318][ T9503] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 629.923667][T21811] netlink: 'syz.6.3814': attribute type 3 has an invalid length. [ 630.550755][T21844] vxcan0: tx drop: invalid da for name 0x0000000000000001 [ 630.685579][T21864] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3823'. [ 630.740283][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807a78b400: rx timeout, send abort [ 630.872311][T21871] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3824'. [ 630.908328][T21873] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3824'. [ 630.980483][T21874] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 631.240515][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88805f7d2800: rx timeout, send abort [ 631.249244][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807a78b400: abort rx timeout. Force session deactivation [ 631.728000][T21907] netlink: 'syz.1.3834': attribute type 1 has an invalid length. [ 631.748901][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88805f7d2800: abort rx timeout. Force session deactivation [ 631.858667][T21907] 8021q: adding VLAN 0 to HW filter on device bond3 [ 631.886432][T21909] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 631.956326][T21915] macvlan2: entered promiscuous mode [ 631.966920][T21915] macvlan2: entered allmulticast mode [ 631.991724][T21915] bond3: entered promiscuous mode [ 632.016569][ T30] audit: type=1800 audit(1784487118.963:11): pid=21926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3838" name="memory.events" dev="tmpfs" ino=625 res=0 errno=0 [ 632.038734][T21915] veth0_to_bond: entered promiscuous mode [ 632.047156][T21915] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 632.063825][T21915] bond3: left promiscuous mode [ 632.073903][T21915] veth0_to_bond: left promiscuous mode [ 632.256147][T21929] syzkaller1: entered promiscuous mode [ 632.273766][T21929] syzkaller1: entered allmulticast mode [ 632.348438][T21939] netlink: 'syz.1.3841': attribute type 58 has an invalid length. [ 632.532479][T21948] netlink: 'syz.4.3843': attribute type 13 has an invalid length. [ 632.580857][ T9503] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.592895][ T9503] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.602206][ T9503] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.618272][ T9503] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.627438][T21951] netlink: 'syz.7.3844': attribute type 5 has an invalid length. [ 633.082578][T21969] can: request_module (can-proto-0) failed. [ 634.439510][ T9503] net_ratelimit: 190 callbacks suppressed [ 634.439534][ T9503] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 634.473071][ T6363] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 634.494039][ T6363] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 634.513145][ T9503] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 634.537732][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 634.547928][ T6353] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 634.618796][ T12] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 634.657481][ T6370] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 634.687098][ T12] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 634.715535][ T12] bond5: (slave ip6gretap0): link status up, enabling it in 0 ms [ 635.163915][ T31] INFO: task syz.2.2674:16893 blocked for more than 143 seconds. [ 635.180411][ T31] Not tainted syzkaller #0 [ 635.186754][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 635.195810][ T31] task:syz.2.2674 state:D stack:24064 pid:16893 tgid:16892 ppid:5635 task_flags:0x400140 flags:0x00080002 [ 635.207963][ T31] Call Trace: [ 635.211284][ T31] [ 635.214435][ T31] __schedule+0x17d9/0x56c0 [ 635.219008][ T31] ? __lock_acquire+0x683/0x2cf0 [ 635.224293][ T31] ? __lock_acquire+0x683/0x2cf0 [ 635.229309][ T31] ? __pfx___schedule+0x10/0x10 [ 635.235831][ T31] ? schedule+0x90/0x2b0 [ 635.240173][ T31] schedule+0x164/0x2b0 [ 635.244664][ T31] schedule_preempt_disabled+0x13/0x30 [ 635.250210][ T31] __mutex_lock+0x7bf/0x1550 [ 635.255265][ T31] ? __mutex_lock+0x5d4/0x1550 [ 635.260100][ T31] ? nfsd_nl_expkey_get_reqs_dumpit+0xfd/0xd40 [ 635.266496][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 635.271595][ T31] ? net_generic+0x1e/0x240 [ 635.276291][ T31] ? net_generic+0x1e/0x240 [ 635.280872][ T31] nfsd_nl_expkey_get_reqs_dumpit+0xfd/0xd40 [ 635.287275][ T31] ? rcu_is_watching+0x15/0xb0 [ 635.292097][ T31] ? trace_kmalloc+0x2a/0xf0 [ 635.297860][ T31] ? __pfx_nfsd_nl_expkey_get_reqs_dumpit+0x10/0x10 [ 635.304754][ T31] ? __kmalloc_node_track_caller_noprof+0x4e1/0x730 [ 635.311401][ T31] ? kmem_cache_alloc_node_noprof+0x1f5/0x610 [ 635.317611][ T31] ? __kmalloc_node_track_caller_noprof+0x2fd/0x730 [ 635.324582][ T31] ? netlink_dump+0x1e7/0xee0 [ 635.329335][ T31] ? netlink_dump+0x1e7/0xee0 [ 635.334277][ T31] genl_dumpit+0x10b/0x1b0 [ 635.338779][ T31] netlink_dump+0x711/0xee0 [ 635.344984][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 635.350114][ T31] ? genl_start+0x497/0x6d0 [ 635.355135][ T31] __netlink_dump_start+0x589/0x7b0 [ 635.360394][ T31] genl_family_rcv_msg_dumpit+0x213/0x310 [ 635.367388][ T31] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 635.373838][ T31] ? __pfx_genl_start+0x10/0x10 [ 635.378755][ T31] ? __pfx_genl_dumpit+0x10/0x10 [ 635.384299][ T31] ? __pfx_genl_done+0x10/0x10 [ 635.389127][ T31] ? bpf_lsm_capable+0x9/0x20 [ 635.394125][ T31] ? security_capable+0x7e/0x2c0 [ 635.399110][ T31] genl_rcv_msg+0x5e1/0x7a0 [ 635.405093][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 635.410204][ T31] ? __pfx_nfsd_nl_expkey_get_reqs_dumpit+0x10/0x10 [ 635.416884][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 635.422597][ T31] netlink_rcv_skb+0x226/0x4a0 [ 635.427822][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 635.433145][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 635.438535][ T31] ? down_read+0x2be/0x330 [ 635.443269][ T31] genl_rcv+0x28/0x40 [ 635.447302][ T31] netlink_unicast+0x7bb/0x940 [ 635.452102][ T31] netlink_sendmsg+0x813/0xb40 [ 635.457777][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 635.463427][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 635.468451][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 635.473952][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 635.479027][ T31] ____sys_sendmsg+0x54e/0x850 [ 635.486127][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 635.496804][ T31] ? import_iovec+0x73/0xa0 [ 635.505473][ T31] ___sys_sendmsg+0x2a5/0x360 [ 635.510229][ T31] ? __lock_acquire+0x683/0x2cf0 [ 635.515412][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 635.520677][ T31] ? futex_wait+0x2a2/0x390 [ 635.525557][ T31] ? __fget_files+0x2a/0x420 [ 635.530290][ T31] ? __fget_files+0x3a2/0x420 [ 635.535203][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 635.540284][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 635.546050][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.552211][ T31] do_syscall_64+0x174/0x580 [ 635.557008][ T31] ? trace_irq_disable+0x3b/0x140 [ 635.562130][ T31] ? clear_bhb_loop+0x40/0x90 [ 635.567425][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.573472][ T31] RIP: 0033:0x7f648239de99 [ 635.577932][ T31] RSP: 002b:00007f64831e9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 635.586574][ T31] RAX: ffffffffffffffda RBX: 00007f6482625fa0 RCX: 00007f648239de99 [ 635.594823][ T31] RDX: 0000000004044810 RSI: 0000200000000180 RDI: 000000000000000b [ 635.602929][ T31] RBP: 00007f6482433eaf R08: 0000000000000000 R09: 0000000000000000 [ 635.610938][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 635.619251][ T31] R13: 00007f6482626038 R14: 00007f6482625fa0 R15: 00007ffd598421e8 [ 635.627508][ T31] [ 635.630739][ T31] [ 635.630739][ T31] Showing all locks held in the system: [ 635.638809][ T31] 1 lock held by khungtaskd/31: [ 635.645724][ T31] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 635.655977][ T31] 3 locks held by kworker/u8:4/66: [ 635.661153][ T31] #0: ffff88801b06c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 635.675324][ T31] #1: ffffc900015f7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 635.686461][ T31] #2: ffffffff9002c340 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 635.698748][ T31] 2 locks held by getty/5376: [ 635.704500][ T31] #0: ffff88803284e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 635.716046][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 635.727180][ T31] 4 locks held by kworker/u8:14/6357: [ 635.732613][ T31] #0: ffff88801c28e140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 635.744010][ T31] #1: ffffc9000757fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 635.754793][ T31] #2: ffffffff9001d7a8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 635.764418][ T31] #3: ffffffff9002c340 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x28e/0x8d0 [ 635.773782][ T31] 3 locks held by kworker/u8:33/9508: [ 635.779201][ T31] #0: ffff888032070940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 635.791114][ T31] #1: ffffc9000514fc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 635.806137][ T31] #2: ffffffff9002c340 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 [ 635.815859][ T31] 2 locks held by syz.0.2353/15539: [ 635.821160][ T31] #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 635.831079][ T31] #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 635.841704][ T31] 3 locks held by syz.2.2674/16893: [ 635.847036][ T31] #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 635.855434][ T31] #1: ffff888069f4a6e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 635.866312][ T31] #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_expkey_get_reqs_dumpit+0xfd/0xd40 [ 635.877023][ T31] 3 locks held by syz.3.3061/18581: [ 635.882263][ T31] #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 635.890663][ T31] #1: ffff88802a6256e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 635.901386][ T31] #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdc/0x13b0 [ 635.912065][ T31] 2 locks held by syz.5.3091/18737: [ 635.917347][ T31] #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 635.925762][ T31] #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 635.936398][ T31] 2 locks held by syz.8.3835/21910: [ 635.941652][ T31] #0: ffffffff9002c340 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 635.951902][ T31] #1: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 635.963330][ T31] 1 lock held by syz.4.3843/21947: [ 635.968501][ T31] #0: ffffffff9002c340 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 635.977687][ T31] 1 lock held by syz.1.3845/21955: [ 635.982955][ T31] #0: ffffffff9002c340 (rtnl_mutex){+.+.}-{4:4}, at: xsk_bind+0x13a/0x1290 [ 635.991750][ T31] 3 locks held by syz.1.3845/21958: [ 635.997090][ T31] #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 636.005425][ T31] #1: ffffffff9009c9e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 636.014524][ T31] #2: ffffffff9002c340 (rtnl_mutex){+.+.}-{4:4}, at: nl802154_pre_doit+0xbc/0x9c0 [ 636.024112][ T31] 2 locks held by syz.1.3845/21964: [ 636.029372][ T31] #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 636.037706][ T31] #1: ffffffff9009c9e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 636.047447][ T31] 1 lock held by syz.6.3846/21960: [ 636.052621][ T31] #0: ffffffff9002c340 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3da/0x1e70 [ 636.073068][ T31] 1 lock held by syz.6.3846/21961: [ 636.078414][ T31] #0: ffffffff9002c340 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3da/0x1e70 [ 636.094852][ T31] 1 lock held by syz.7.3847/21972: [ 636.100153][ T31] #0: ffffffff9002c340 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3da/0x1e70 [ 636.110298][ T31] 1 lock held by dhcpcd/21975: [ 636.115746][ T31] #0: ffff8880562f9940 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x82/0x220 [ 636.137845][ T31] [ 636.140385][ T31] ============================================= [ 636.140385][ T31] [ 636.151676][ T31] NMI backtrace for cpu 1 [ 636.151694][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 636.151717][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 636.151730][ T31] Call Trace: [ 636.151738][ T31] [ 636.151746][ T31] dump_stack_lvl+0xe8/0x150 [ 636.151784][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 636.151812][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 636.151846][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 636.151877][ T31] sys_info+0x135/0x170 [ 636.151898][ T31] watchdog+0xfd7/0x1030 [ 636.151927][ T31] ? watchdog+0x1c7/0x1030 [ 636.151957][ T31] kthread+0x388/0x470 [ 636.151987][ T31] ? __pfx_watchdog+0x10/0x10 [ 636.152010][ T31] ? __pfx_kthread+0x10/0x10 [ 636.152041][ T31] ret_from_fork+0x514/0xb70 [ 636.152075][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 636.152110][ T31] ? __switch_to+0xc89/0x1420 [ 636.152149][ T31] ? __pfx_kthread+0x10/0x10 [ 636.152181][ T31] ret_from_fork_asm+0x1a/0x30 [ 636.152221][ T31] [ 636.152264][ T31] Sending NMI from CPU 1 to CPUs 0: [ 636.264782][ C0] NMI backtrace for cpu 0 [ 636.264807][ C0] CPU: 0 UID: 0 PID: 5608 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 636.264829][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 636.264841][ C0] RIP: 0010:dequeue_entities+0x6ad/0x3bd0 [ 636.264875][ C0] Code: ff df 80 3c 08 00 74 08 4c 89 e7 e8 fd 53 9c 00 4d 8b 3c 24 48 85 ed 75 0a eb 36 45 31 ff 48 85 ed 74 2e 48 83 c5 40 48 89 e8 <48> c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 [ 636.264891][ C0] RSP: 0018:ffffc9000385f888 EFLAGS: 00000086 [ 636.264908][ C0] RAX: ffff88801dea00c0 RBX: 00000039c36ff556 RCX: dffffc0000000000 [ 636.264922][ C0] RDX: 0000000000000000 RSI: ffffffff8c4bd360 RDI: ffff8880b863b1e0 [ 636.264935][ C0] RBP: ffff88801dea00c0 R08: ffffffff905776f7 R09: 1ffffffff20aeede [ 636.264949][ C0] R10: dffffc0000000000 R11: fffffbfff20aeedf R12: ffff888032203f10 [ 636.264963][ C0] R13: ffff8880b863b1c0 R14: ffff888032203ed8 R15: 0000000000155cc0 [ 636.264977][ C0] FS: 0000555563abb540(0000) GS:ffff888124f5e000(0000) knlGS:0000000000000000 [ 636.264994][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 636.265006][ C0] CR2: 00007f7cf5407e80 CR3: 000000007479a000 CR4: 00000000003526f0 [ 636.265022][ C0] Call Trace: [ 636.265030][ C0] [ 636.265041][ C0] ? sched_clock_cpu+0x74/0x440 [ 636.265068][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 636.265099][ C0] dequeue_task_fair+0xc1/0x3d0 [ 636.265129][ C0] __schedule+0x6e1/0x56c0 [ 636.265154][ C0] ? __lock_acquire+0x683/0x2cf0 [ 636.265184][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 636.265213][ C0] ? __pfx___schedule+0x10/0x10 [ 636.265244][ C0] ? schedule+0x90/0x2b0 [ 636.265270][ C0] schedule+0x164/0x2b0 [ 636.265302][ C0] do_nanosleep+0x21e/0x6a0 [ 636.265325][ C0] ? do_nanosleep+0x7e/0x6a0 [ 636.265347][ C0] ? __pfx_do_nanosleep+0x10/0x10 [ 636.265369][ C0] ? __asan_memset+0x22/0x50 [ 636.265390][ C0] ? __hrtimer_setup+0x1b7/0x260 [ 636.265408][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 636.265432][ C0] hrtimer_nanosleep+0x18f/0x3a0 [ 636.265454][ C0] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 636.265478][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 636.265508][ C0] __se_sys_clock_nanosleep+0x35b/0x3b0 [ 636.265532][ C0] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 636.265559][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.265579][ C0] do_syscall_64+0x174/0x580 [ 636.265608][ C0] ? clear_bhb_loop+0x40/0x90 [ 636.265630][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.265649][ C0] RIP: 0033:0x7f5043359017 [ 636.265664][ C0] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 636.265680][ C0] RSP: 002b:00007fff71c9fe60 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 636.265698][ C0] RAX: ffffffffffffffda RBX: 0000555563abb540 RCX: 00007f5043359017 [ 636.265712][ C0] RDX: 00007fff71c9fea0 RSI: 0000000000000000 RDI: 0000000000000000 [ 636.265723][ C0] RBP: 00007fff71ca0380 R08: 0000000000000000 R09: 0000000000000000 [ 636.265735][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000004 [ 636.265746][ C0] R13: 00007fff71c9fedc R14: 00007fff71c9ff70 R15: 0000000000000000 [ 636.265771][ C0] [ 636.445222][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 636.597711][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 636.604602][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 636.613749][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 636.623838][ T31] Call Trace: [ 636.627250][ T31] [ 636.630234][ T31] vpanic+0x56c/0xa60 [ 636.634300][ T31] ? __pfx___schedule+0x10/0x10 [ 636.639226][ T31] ? __pfx_vpanic+0x10/0x10 [ 636.643776][ T31] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 636.649978][ T31] panic+0xc5/0xd0 [ 636.653750][ T31] ? __pfx_panic+0x10/0x10 [ 636.658202][ T31] ? preempt_schedule_common+0x82/0xd0 [ 636.663684][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 636.669097][ T31] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 636.675267][ T31] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 636.681436][ T31] watchdog+0x1030/0x1030 [ 636.685825][ T31] ? watchdog+0x1c7/0x1030 [ 636.690298][ T31] kthread+0x388/0x470 [ 636.694420][ T31] ? __pfx_watchdog+0x10/0x10 [ 636.699218][ T31] ? __pfx_kthread+0x10/0x10 [ 636.703847][ T31] ret_from_fork+0x514/0xb70 [ 636.708467][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 636.713613][ T31] ? __switch_to+0xc89/0x1420 [ 636.718322][ T31] ? __pfx_kthread+0x10/0x10 [ 636.722945][ T31] ret_from_fork_asm+0x1a/0x30 [ 636.727730][ T31] [ 636.730975][ T31] Kernel Offset: disabled [ 636.735337][ T31] Rebooting in 86400 seconds..