last executing test programs: 30m37.961559569s ago: executing program 32 (id=760): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000540), &(0x7f00000015c0)=0x6e, 0x80800) bind$unix(r1, &(0x7f0000001600)=@file={0x0, './file0\x00'}, 0x6e) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000)="e6", 0x0}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000000206010800000000000000000000003f0500010006000000050005000200000005000400000000000900020073797a310020000013000300686173683a6e65742c6966616365"], 0x4c}}, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$kcm(r3, &(0x7f0000000480)={&(0x7f0000002140)=@l2tp={0x2, 0x0, @remote, 0xfffffffe}, 0x80, &(0x7f0000002240)=[{&(0x7f0000000c40)="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", 0x3f3}, {&(0x7f0000002b40)="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", 0x1c0}, {&(0x7f0000000200)="f2", 0x1}], 0x3}, 0x8400) sendmsg$inet(r3, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000640)="a1", 0x1}], 0x1}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005700)=ANY=[@ANYBLOB="580000000906010200000000000000000200fdff300007800c00018008000140e8000001140017006261746164765f736c6176655f3000000c00028008000140640101010900020073797a31000000000500010007"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00000007060500000000000000000001000002050001000700000041c8bd392a255666eaddd03c93d5073f55c1402b69a2027c3008a5d3d0ed740919ecefeeeab61055b405b4c64db290f5df61bf4fc038040862513982139abde86dab6f253e10c848a2590423ee5ac94f877f69d057842f7890544cb3f7a8"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r5, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000080)=""/29, 0x1d}, {&(0x7f0000000240)=""/116, 0x74}, {&(0x7f00000003c0)=""/155, 0x9b}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f0000000180)=""/69, 0x45}], 0x5}, 0x20) 25m54.940647292s ago: executing program 5 (id=1795): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r5, @ANYBLOB="1c005a80180001801400030024000700080001000800050002dd0f"], 0x38}}, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r1, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x1000, 0x6f}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x1}, @NL80211_ATTR_PMKID={0x14, 0x55, "90ee759f8965ca3762c1f4d992be1068"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x7fff}]}, 0x58}}, 0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x48}}, 0x6004014) 25m54.15793353s ago: executing program 5 (id=1800): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x7d4165c9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000711012000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) listen(r2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000170100000300000001"], 0x18, 0x40045}], 0x1, 0x0) recvmmsg(r7, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000280)=""/38, 0x26}], 0x1}, 0x3ff}], 0x1, 0x40002020, 0x0) listen(r5, 0x14) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r9, 0x0) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) 25m52.947930648s ago: executing program 5 (id=1802): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x8}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_OIF={0x8}}, @RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x30}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x2eb, @local, 0xa}, 0x1c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r4) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5}]}, 0x2c}}, 0x0) (async) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5}]}, 0x2c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="01002abd7000fcdbdf252600000008000300", @ANYRES32=r10], 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async) sendmsg$NL802154_CMD_NEW_SEC_DEV(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="01002abd7000fcdbdf252600000008000300", @ANYRES32=r10], 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r11) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r13, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r13, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x44, r12, 0x1, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r14}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x8}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x4}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x85}]}, 0x44}, 0x1, 0x0, 0x0, 0x48810}, 0x8000) r15 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r16, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) r18 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r18, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r15, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r17}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r8, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r17}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0xca33, @remote}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000280)="f4", 0xfdef}], 0x1) (async) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000280)="f4", 0xfdef}], 0x1) 25m50.623303631s ago: executing program 5 (id=1805): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, 0x0, 0x79) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet(r0, &(0x7f00000000c0)="035c30fcf227ded50ac5e44c8848", 0xe, 0x4001, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)={0x44, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x94d}]}]}, 0x44}}, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r3, 0x40106e80, &(0x7f0000000100)={0xffffffff}) write(r4, &(0x7f0000000000)="240000001a005f0214f9f4070009040080fffffffe280000000000000800040001000000", 0x24) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r5, 0x0, 0x138) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1800000040000703fcffffff00000100037c000004"], 0x18}, 0x1, 0x0, 0x0, 0x4008011}, 0xc000) 25m49.749893322s ago: executing program 5 (id=1809): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x41071, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4c011}, 0x8014) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001400090527bd7000fc045e3d23d7df25", @ANYRES32=r2, @ANYBLOB="08000400640101040800080000010000080002"], 0x30}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="4805000015", 0x5}], 0x1) r3 = socket$inet6(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) close(r4) r5 = socket$kcm(0x2, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003400)=ANY=[@ANYBLOB="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"], 0x10c}}, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20008814) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0f0000000400000004077660e04ca900001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000980)) sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001000000100000800130000000000080012"], 0x44}}, 0x4) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="44001d01", @ANYRES16=r8, @ANYBLOB="010000000000000000006700000008000300", @ANYRES32=r10, @ANYBLOB="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"], 0x70}}, 0x880) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xffff}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x4, 0x405}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048084}, 0x240cc080) 25m49.668986288s ago: executing program 4 (id=1810): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r0, 0x8) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e22, @broadcast}}}, &(0x7f0000000380)=0x84) socket$nl_rdma(0x10, 0x3, 0x14) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}], 0x60}, 0x122) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r4], 0xc4}}, 0x0) 25m49.017091669s ago: executing program 4 (id=1813): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r2) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xea}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r4, 0x6, 0x3, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x6) socket(0x28, 0x800, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x8}, 0x8) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000040), 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="230000006d0200000300000022bf000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r5, 0x0, 0xa002a0}, 0x38) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "12ad"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, &(0x7f0000000140)=""/184, &(0x7f0000000200), &(0x7f0000001540), 0x1, r5}, 0x38) 25m48.988805893s ago: executing program 5 (id=1814): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}}, 0x90) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r1, 0x9, 0x1000, 0x7}) getsockopt$inet6_tcp_int(r2, 0x6, 0x9, &(0x7f0000000040), &(0x7f0000000200)=0x4) 25m47.297196453s ago: executing program 4 (id=1816): r0 = socket(0xa, 0x5, 0x3a) getsockopt$MRT6(r0, 0x29, 0xcf, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x0) 25m45.188771638s ago: executing program 4 (id=1819): r0 = epoll_create1(0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) epoll_pwait(r0, &(0x7f0000000300)=[{}], 0x1, 0x1ff, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @local}], 0x10) (async) setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) (async) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @local}}}, 0x84) (async) epoll_pwait(r0, &(0x7f0000000480)=[{}], 0x1, 0xffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000011c0)={0x9}) 25m43.722142815s ago: executing program 4 (id=1823): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r2, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x14) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f00000000c0)={@val={0x8, 0xf5}, @val={0x7, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x9, 0x2f, 0x0, @local, @broadcast}, {{0x4e20, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0x36) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000100)=0x6, 0x4) getsockopt$packet_int(r1, 0x107, 0xa, 0x0, &(0x7f0000000140)) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000000)=@req3={0x9, 0x3ff, 0xc1, 0x6, 0x400, 0xffffffff, 0x4}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) 25m41.840700076s ago: executing program 4 (id=1827): socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet(0xa, 0x801, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r0, 0x0) (async) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) (async) mmap(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x300000c, 0x10, 0xffffffffffffffff, 0x0) (async) pselect6(0x40, &(0x7f0000000040)={0x5, 0x800007, 0x2, 0x6, 0x8, 0x8, 0x7, 0x4}, &(0x7f0000000080)={0x97, 0x8, 0x0, 0x1, 0x5, 0x4, 0x3, 0x4}, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="a80000002d0007012bbd7000fedbdf25057c0000080001"], 0xa8}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r2) (async) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000280)=0x2, 0x4) (async) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x4b, &(0x7f0000000ac0)={0x0}}, 0x4000) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x4) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="70000000100001000100000000dcdf2500000000", @ANYRES32=0x0, @ANYBLOB="06feae88000004004800128008000100677470003c00028008000100", @ANYRES32=r5, @ANYBLOB="08000700e000000208000700ac14143908000300070000000500050001000000080004000000000008000200", @ANYRES32=r5, @ANYBLOB="08000500", @ANYRES32=r9, @ANYBLOB="f4d24bdc231addc245b95b2a62ac34f49401ac0e583113f1f9eeaa68608c"], 0x70}}, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r4) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r10, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100a0}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r11, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xdd9e152}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) syz_emit_ethernet(0x4e, &(0x7f0000000800)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x18, 0x11, 0x0, @private0, @mcast2, {[], {0x0, 0x4e22, 0x18, 0x0, @wg=@data={0x3}}}}}}}, 0x0) 25m33.384961014s ago: executing program 33 (id=1814): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}}, 0x90) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r1, 0x9, 0x1000, 0x7}) getsockopt$inet6_tcp_int(r2, 0x6, 0x9, &(0x7f0000000040), &(0x7f0000000200)=0x4) 25m25.88849068s ago: executing program 34 (id=1827): socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet(0xa, 0x801, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r0, 0x0) (async) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) (async) mmap(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x300000c, 0x10, 0xffffffffffffffff, 0x0) (async) pselect6(0x40, &(0x7f0000000040)={0x5, 0x800007, 0x2, 0x6, 0x8, 0x8, 0x7, 0x4}, &(0x7f0000000080)={0x97, 0x8, 0x0, 0x1, 0x5, 0x4, 0x3, 0x4}, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="a80000002d0007012bbd7000fedbdf25057c0000080001"], 0xa8}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r2) (async) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000280)=0x2, 0x4) (async) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x4b, &(0x7f0000000ac0)={0x0}}, 0x4000) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x4) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="70000000100001000100000000dcdf2500000000", @ANYRES32=0x0, @ANYBLOB="06feae88000004004800128008000100677470003c00028008000100", @ANYRES32=r5, @ANYBLOB="08000700e000000208000700ac14143908000300070000000500050001000000080004000000000008000200", @ANYRES32=r5, @ANYBLOB="08000500", @ANYRES32=r9, @ANYBLOB="f4d24bdc231addc245b95b2a62ac34f49401ac0e583113f1f9eeaa68608c"], 0x70}}, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r4) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r10, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100a0}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r11, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xdd9e152}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) syz_emit_ethernet(0x4e, &(0x7f0000000800)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x18, 0x11, 0x0, @private0, @mcast2, {[], {0x0, 0x4e22, 0x18, 0x0, @wg=@data={0x3}}}}}}}, 0x0) 25m20.092776815s ago: executing program 0 (id=1850): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket(0x2b, 0x1, 0x0) listen(r1, 0x0) recvfrom(r1, 0x0, 0x0, 0x40000060, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000000280)=[{{&(0x7f0000000000), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000080)=""/133, 0x85}, {&(0x7f0000000140)=""/207, 0xcf}], 0x2}}], 0x1, 0x40, &(0x7f00000002c0)={0x77359400}) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x70bd27, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x41}, 0xdffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x0, 0x0, 0x0, 0xee00}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in=@local, @in=@private=0xa010101, @in6=@remote, 0x3c, 0x0, 0x0, 0x3500, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) 25m18.954517719s ago: executing program 0 (id=1852): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f000000f480), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f000000f740)={&(0x7f0000000100)={0x14, r2, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x44040) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000233f00001c0002800b000100627269f2ece57ffb01687b800500370008000000"], 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) listen(r5, 0x2) syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r5) sendmsg$AUDIT_TRIM(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x10, 0x3f6, 0x800, 0x70bd26, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x90) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000000)={0x4, [0x1, 0x4, 0x1, 0xf]}, &(0x7f0000000080)=0xc) 25m15.447072242s ago: executing program 0 (id=1854): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r2, r4, 0x25, 0x2, @val=@perf_event={0x5}}, 0x18) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r5, r6, 0x4, r2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310428bd7000ffffffff1600000018000180140002006e657464657673696d3000000000600005000200070000000500040001000000050003"], 0x44}}, 0x0) 25m14.416731265s ago: executing program 0 (id=1856): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@newlink={0x130, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x100, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xf0, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x401}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x130}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB="08000400b9080000"], 0x4c}, 0x1, 0xba01, 0x0, 0x4010}, 0x0) 25m13.146094693s ago: executing program 2 (id=1857): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000001000030529bd7000533dee0000000000000000", @ANYRESDEC, @ANYBLOB="0000000030620000280012800a000100767863616e000000180002801c00010100000000c4e044953c2d06279bbe4dc9e3f7cde647531125f87ea23512d459ef7049ca190ea6d0004a056b777a12bf680f0db22aeef211a2f66c429fc32d179430012a62bd0e0d52c84490de3e8b2f18eb7a004d19fe1bf8989c02977d10ea843e4b4c5df4ba8f7898aa937d9f46c712c43f262cf9493b70e53690317e6a", @ANYRES8=r0, @ANYBLOB="4c4400000000000008001b5d3bfe1dc9b4baf57e47d2d45aebd3c400640769557716cd30694ac22b3c41e86fd2d3bbfa29"], 0x50}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000001000030529bd7000533dee0000000000000000", @ANYRESDEC, @ANYBLOB="0000000030620000280012800a000100767863616e000000180002801c00010100000000c4e044953c2d06279bbe4dc9e3f7cde647531125f87ea23512d459ef7049ca190ea6d0004a056b777a12bf680f0db22aeef211a2f66c429fc32d179430012a62bd0e0d52c84490de3e8b2f18eb7a004d19fe1bf8989c02977d10ea843e4b4c5df4ba8f7898aa937d9f46c712c43f262cf9493b70e53690317e6a", @ANYRES8=r0, @ANYBLOB="4c4400000000000008001b5d3bfe1dc9b4baf57e47d2d45aebd3c400640769557716cd30694ac22b3c41e86fd2d3bbfa29"], 0x50}}, 0x0) (async) 25m12.053128311s ago: executing program 0 (id=1859): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$XFS_IOC_COMMIT_RANGE(r0, 0x40585883, &(0x7f0000000200)={r0, 0x0, 0x7f, 0x2c, 0x7, 0x1, [0x8000000000000000, 0x68, 0x3, 0x5, 0x0, 0x9]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xdc0, 0x0, &(0x7f0000000300)="0400000071a76d2688ca006588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) 25m9.029352348s ago: executing program 0 (id=1860): syz_emit_ethernet(0x46, &(0x7f0000000140)={@broadcast, @random="0000060000ff", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x0, @remote, @local, {[], {0x4e21, 0x4e21, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r3, 0x89e0, &(0x7f0000000100)={0x1}) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x22180, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6) close(r2) readv(r4, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/207, 0xcf}], 0x1) sendto$inet6(r1, &(0x7f0000000300)="8fbcd942f1b65eabf40eeb0fd8a61cec7dbc0129d52c09c884719dd76e0aca13f2384299d7d68bb5264bb018ae996601f8a49842de0af6bbcc2ea82c7e194af15b45942e587e96e174376b30eb7d93292a6d01eba3b0865e8d4bcbc2aa076ed2222b3355295189a65071c26a71199136fd912c13d1194ce58fd18c227a58f91f32ba68ff455be0e4714628bb01cb47d07e651ca3fe24e50fb67a4818dd5b57ff95239d0fdfa71c97a1b9d74a9b", 0xad, 0x4000000, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000080)=@newtaction={0x1038, 0x30, 0x1, 0x0, 0x0, {}, [{0x1024, 0x1, [@m_bpf={0x1020, 0x1, 0x0, 0x0, {{0x8}, {0xff8, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xff4, 0x6, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x1038}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a010400000000000000000200000048000480440001800c0001007061796c6f616400340002800800044000000000080005400000000008000340000000000900000000000000080006400000a40208000840000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b80)={0x0}, 0x1, 0x0, 0x0, 0x8051}, 0x8000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) bind$xdp(r8, &(0x7f0000000100)={0x2c, 0x4}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000200)={'veth1_to_bridge\x00', &(0x7f00000003c0)=@ethtool_stats}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) bind$l2tp6(r1, &(0x7f0000001140)={0xa, 0x0, 0x2c74000, @loopback, 0x81, 0x3}, 0x20) sendmsg$NFC_CMD_DISABLE_SE(r7, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000100", @ANYRES16=r10, @ANYBLOB="020026bd7000ffdbdf2512000000080015000200000008000100", @ANYRES32=r11, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 25m8.811624248s ago: executing program 2 (id=1861): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)={0x2c, r1, 0x6a98047402e98331, 0x70bd26, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}]}, 0x2c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b040400000000002000128008000100736974001400028008000200c00002000600080003"], 0x40}}, 0x0) 25m6.49876273s ago: executing program 1 (id=1863): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x1a, 0x1, 0x0, 0x0, {0x81}, [@FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0xfe}]}, 0x24}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=ANY=[@ANYBLOB="881200002f00090027bd7000fbdbdf25040000006c121880"], 0x1288}, 0x1, 0x0, 0x0, 0x42014}, 0x4088010) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x15}}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc040}, 0x0) r5 = socket(0x840000000002, 0x3, 0x100) setsockopt$WPAN_SECURITY(r5, 0x0, 0x32, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, 0x14, 0x8980}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}]}, 0x3c}}, 0x40000) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CHANNEL={0x5}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x17}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100003800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20044804}, 0x4000000) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="f5af25000200000000000e"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x700) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r8, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r11, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x4004) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x18}}, 0x0) 25m4.77609996s ago: executing program 2 (id=1864): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c7ec100000010000d0efcff00feffffffffffff0000", @ANYRES32=0x0, @ANYBLOB="cb840400000000001c00128009000100626f6e64000000000c00028008000f0006000000"], 0x3c}}, 0x40840) 25m3.57310485s ago: executing program 2 (id=1865): sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x60, 0x0, 0x1, 0x0, 0x0, {0x39}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x60}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000500)={'wpan0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r2, 0xa1d, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900"], 0x48}}, 0x0) 24m58.850718228s ago: executing program 1 (id=1866): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028005000e0040"], 0x44}}, 0x0) socket$inet(0x2, 0x5, 0x2) 24m58.525256161s ago: executing program 2 (id=1867): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x4, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001700)=@newtfilter={0x3d8, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x3ac, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x80000000}, @TCA_U32_SEL={0x384, 0x5, {0x5, 0x4, 0x37, 0x5, 0x97, 0x1, 0x1, 0x3, [{0x0, 0x3, 0x2, 0x80}, {0x2, 0x7, 0xa3, 0x9}, {0xef4, 0x401, 0x4, 0x9}, {0x7, 0x40, 0x12af, 0x101}, {0x5, 0x6, 0x4664, 0x5}, {0x800, 0x9a83, 0x1ff, 0x4e6}, {0xfad, 0x5, 0x1, 0x9}, {0x5, 0xb9, 0x2, 0xfffffff7}, {0x2, 0x2, 0x4, 0x7}, {0x4, 0x401, 0x8, 0x2}, {0x7, 0x400, 0x2, 0x2}, {0x3, 0x0, 0x3, 0x7}, {0x9, 0x58128040, 0x5, 0xa}, {0x6, 0x0, 0x2, 0x1}, {0x7000, 0x6, 0x0, 0x4}, {0x8, 0x1, 0x1000, 0x1}, {0x6, 0x5, 0x8, 0x5}, {0x8000, 0x2980000, 0x1, 0x7}, {0x4, 0x3, 0x0, 0x2}, {0x2d, 0x401, 0x3, 0xffff0fb9}, {0x0, 0x7, 0x8, 0x1}, {0x83604ef, 0x1, 0x2, 0x5}, {0xe00, 0x3, 0x2, 0x8}, {0x1, 0xffffffff, 0x7, 0x3}, {0x7, 0x7, 0x4, 0xf}, {0x80, 0xb, 0x8000, 0xb8}, {0x0, 0x1, 0x7, 0x8}, {0xfffffffb, 0x9, 0x6, 0x1}, {0xe6a7, 0xffffffdd, 0x4, 0x3}, {0x4, 0x7f, 0x3}, {0x4, 0xfffffff8, 0x8ec, 0x7}, {0xffff9d69, 0x0, 0xe}, {0x3, 0x3, 0x80000001, 0x81}, {0x2, 0x7}, {0x7ff, 0x1, 0x3, 0x8}, {0x9, 0x6, 0x7, 0x44b}, {0x1, 0xda3, 0x2, 0x6}, {0xfffffff9, 0x9, 0x7b, 0x92}, {0x7, 0xfffffff9, 0x9, 0xb581}, {0xcd08, 0xb1f, 0x8001, 0xd}, {0x5c, 0x3, 0x7, 0xa2c}, {0x2, 0x6, 0x5, 0x3}, {0xfffffffa, 0x7, 0x10001, 0x6}, {0x8, 0x80000001}, {0x0, 0x6, 0x8, 0x5}, {0x6, 0x9, 0x1, 0x2}, {0xded, 0x8, 0x1ff, 0xfffffff9}, {0x0, 0x4, 0x6d7fffa0, 0x3}, {0x1, 0x40, 0x4, 0xf}, {0x80, 0x7, 0x34, 0x9}, {0x5, 0x1ff, 0x4, 0x2}, {0x9, 0x9, 0xe, 0x5}, {0x2, 0x10000, 0xfffffffe, 0x6}, {0x3, 0xf61c, 0x2, 0x8}, {0x7, 0x1, 0x1, 0x4}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x9}}, @TCA_U32_INDEV={0x14, 0x8, 'batadv_slave_0\x00'}]}}]}, 0x3d8}}, 0x20000000) syz_emit_ethernet(0x82, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb0000000000000800450000740000000000019078ac1e0001ac1414aa05009078e00000e046000000000000000011000000000000ac1414000703000703005db337c327ba5c2900000000e0000001000000007f00000100000200ac1414aa000000000000000000000000ac1414000000000000000000000000000000cef6fc0fe0ba39a7b659dd9791ca82d4c82a9902b4b5ea3675978836e05e7f0e7db94597a19c624fe96ab8ae415cd175e5d3b50686785b12478b965e00ae0b3e9ff0b133bd22c8983a6b440b33c3e281e4d93913d3cbf915da8fb4781f6d01071c6d772bab4db11616f339b2ebedf93c"], 0x0) 24m54.412841659s ago: executing program 1 (id=1868): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.kill\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000a, 0x12, r0, 0x0) (async) ioctl$FIBMAP(r0, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040)=0x1) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e24, 0xdcdf, @loopback, 0xffff}]}, &(0x7f0000000100)=0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[@ANYBLOB="1400000027000100f60300"/20], 0x14}, 0x1, 0x0, 0x0, 0x4c805}, 0x20040080) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="56345019a17651af36e42acb9ea23b8f4a1dd27eb9eaa94af8826852e600a3dc321ea17e43ec71c61f11b98bc5fbfcc229e2057b37ae865a97205625dbe82efde3c456a45020570da79f8653352b1d64fd820fed221c0db1960451da53224f5c97b96d4bcdaf6ee7a1f3241151fba9df6e10c18b9c19da18276a47b086c56cb2fdb5e55505c3fcd1a6ab10f0a5"], 0x38}}, 0x0) (async) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000000c0)=ANY=[@ANYBLOB="297f4ebb0e0c82f60300c5af070000006600"], 0x12) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0xfffffffe, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) (async) sendmsg$key(r5, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x4000000) (async) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000080)=[@timestamp, @sack_perm, @window={0x3, 0x9, 0x3}, @mss={0x2, 0xa7}, @window={0x3, 0x2, 0x4}, @mss={0x2, 0x3}], 0x6) 24m52.763031473s ago: executing program 35 (id=1860): syz_emit_ethernet(0x46, &(0x7f0000000140)={@broadcast, @random="0000060000ff", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x0, @remote, @local, {[], {0x4e21, 0x4e21, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r3, 0x89e0, &(0x7f0000000100)={0x1}) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x22180, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6) close(r2) readv(r4, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/207, 0xcf}], 0x1) sendto$inet6(r1, &(0x7f0000000300)="8fbcd942f1b65eabf40eeb0fd8a61cec7dbc0129d52c09c884719dd76e0aca13f2384299d7d68bb5264bb018ae996601f8a49842de0af6bbcc2ea82c7e194af15b45942e587e96e174376b30eb7d93292a6d01eba3b0865e8d4bcbc2aa076ed2222b3355295189a65071c26a71199136fd912c13d1194ce58fd18c227a58f91f32ba68ff455be0e4714628bb01cb47d07e651ca3fe24e50fb67a4818dd5b57ff95239d0fdfa71c97a1b9d74a9b", 0xad, 0x4000000, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000080)=@newtaction={0x1038, 0x30, 0x1, 0x0, 0x0, {}, [{0x1024, 0x1, [@m_bpf={0x1020, 0x1, 0x0, 0x0, {{0x8}, {0xff8, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xff4, 0x6, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x1038}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a010400000000000000000200000048000480440001800c0001007061796c6f616400340002800800044000000000080005400000000008000340000000000900000000000000080006400000a40208000840000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b80)={0x0}, 0x1, 0x0, 0x0, 0x8051}, 0x8000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) bind$xdp(r8, &(0x7f0000000100)={0x2c, 0x4}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000200)={'veth1_to_bridge\x00', &(0x7f00000003c0)=@ethtool_stats}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) bind$l2tp6(r1, &(0x7f0000001140)={0xa, 0x0, 0x2c74000, @loopback, 0x81, 0x3}, 0x20) sendmsg$NFC_CMD_DISABLE_SE(r7, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000100", @ANYRES16=r10, @ANYBLOB="020026bd7000ffdbdf2512000000080015000200000008000100", @ANYRES32=r11, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 24m52.572181445s ago: executing program 1 (id=1870): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="b896a15f48052eec7bc7fe285f228824877bd9d7deef9ae32aa7eaa025f93fb406", 0x21}], 0x1}}], 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x41) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000002700090025bd7800fddbdf25100000001400010002"], 0x28}}, 0x4000080) 24m52.492924676s ago: executing program 2 (id=1871): r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="050000000000000000008510000002000000850000000000000095000000000000fbea00a50500000000613bbd946c03dec326508aef1094ad643c03d857e4a3b93f575724384e4dd1d3444d2a933df6accabd83705ac2f72dabb1e2fd93eb20c66818a60daf45700f30baf13973e7c617a172e79e749bfd32f97d6b995172ff89"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r2, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000200)) close(0x3) 24m51.201052931s ago: executing program 1 (id=1872): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x37}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf7}, 0x39) r0 = socket$igmp(0x2, 0x3, 0x2) recvmsg(r0, &(0x7f0000001680)={&(0x7f0000000080)=@tipc=@name, 0x80, &(0x7f0000001500)=[{&(0x7f0000000100)=""/209, 0xd1}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/146, 0x92}, {&(0x7f00000012c0)=""/237, 0xed}, {&(0x7f00000013c0)=""/173, 0xad}, {&(0x7f0000001480)=""/97, 0x61}], 0x6, &(0x7f0000001580)=""/210, 0xd2}, 0x10000) 24m48.515767937s ago: executing program 1 (id=1873): r0 = accept4$llc(0xffffffffffffffff, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000100)=0x10, 0x81000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x40000000) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f00000001c0)={'erspan0\x00', 0x0, 0x1, 0x0, 0x2, 0x7, {{0x29, 0x4, 0x2, 0xe, 0xa4, 0x67, 0x0, 0x2, 0x4, 0x0, @empty, @local, {[@cipso={0x86, 0x39, 0x2, [{0x0, 0x7, "da2f00950a"}, {0x0, 0x12, "2c7e7affe6edf4930daf62690220863a"}, {0xc, 0xc, "b9e892fa2b65d13c900b"}, {0x1, 0x7, "77d87c4e3b"}, {0x5, 0x7, "3bdd73caac"}]}, @lsrr={0x83, 0x7, 0x4e, [@dev={0xac, 0x14, 0x14, 0x39}]}, @timestamp={0x44, 0xc, 0x39, 0x0, 0x7, [0xfaf0, 0x7]}, @timestamp={0x44, 0x2c, 0x7, 0x0, 0x2, [0x7fffffff, 0x1, 0x800, 0xe3, 0x15a8, 0x7e05, 0x7fff, 0x4, 0x5, 0x0]}, @rr={0x7, 0x17, 0x90, [@loopback, @broadcast, @empty, @remote, @remote]}]}}}}}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="000004000000040000000a00b600000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000600)=0xa00, &(0x7f0000000640)}, 0x1c) (async, rerun: 64) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x7, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x48012}, 0x40001) (async, rerun: 64) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0xa2ec8b013dc0bd73, &(0x7f0000002580)=[{&(0x7f0000000180)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x5}]}, 0x14}], 0x1}, 0x0) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1600000000000000080000000200010000000000", @ANYRES32=0x1, @ANYBLOB="000900000000000000000000000063eab66c0b28919f4a287de8094aa23957201d2f83a7968ee4f6d36d97977298c62668eab5509b8197fa7bd99402b464ba66", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r4, &(0x7f0000000040)=ANY=[], 0x6) (async) socket$l2tp(0x2, 0x2, 0x73) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x4008800}, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a14002c"], 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) (rerun: 32) 24m37.032949697s ago: executing program 36 (id=1871): r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="050000000000000000008510000002000000850000000000000095000000000000fbea00a50500000000613bbd946c03dec326508aef1094ad643c03d857e4a3b93f575724384e4dd1d3444d2a933df6accabd83705ac2f72dabb1e2fd93eb20c66818a60daf45700f30baf13973e7c617a172e79e749bfd32f97d6b995172ff89"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r2, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000200)) close(0x3) 24m32.534789264s ago: executing program 37 (id=1873): r0 = accept4$llc(0xffffffffffffffff, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000100)=0x10, 0x81000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x40000000) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f00000001c0)={'erspan0\x00', 0x0, 0x1, 0x0, 0x2, 0x7, {{0x29, 0x4, 0x2, 0xe, 0xa4, 0x67, 0x0, 0x2, 0x4, 0x0, @empty, @local, {[@cipso={0x86, 0x39, 0x2, [{0x0, 0x7, "da2f00950a"}, {0x0, 0x12, "2c7e7affe6edf4930daf62690220863a"}, {0xc, 0xc, "b9e892fa2b65d13c900b"}, {0x1, 0x7, "77d87c4e3b"}, {0x5, 0x7, "3bdd73caac"}]}, @lsrr={0x83, 0x7, 0x4e, [@dev={0xac, 0x14, 0x14, 0x39}]}, @timestamp={0x44, 0xc, 0x39, 0x0, 0x7, [0xfaf0, 0x7]}, @timestamp={0x44, 0x2c, 0x7, 0x0, 0x2, [0x7fffffff, 0x1, 0x800, 0xe3, 0x15a8, 0x7e05, 0x7fff, 0x4, 0x5, 0x0]}, @rr={0x7, 0x17, 0x90, [@loopback, @broadcast, @empty, @remote, @remote]}]}}}}}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="000004000000040000000a00b600000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000600)=0xa00, &(0x7f0000000640)}, 0x1c) (async, rerun: 64) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x7, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x48012}, 0x40001) (async, rerun: 64) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0xa2ec8b013dc0bd73, &(0x7f0000002580)=[{&(0x7f0000000180)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x5}]}, 0x14}], 0x1}, 0x0) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1600000000000000080000000200010000000000", @ANYRES32=0x1, @ANYBLOB="000900000000000000000000000063eab66c0b28919f4a287de8094aa23957201d2f83a7968ee4f6d36d97977298c62668eab5509b8197fa7bd99402b464ba66", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r4, &(0x7f0000000040)=ANY=[], 0x6) (async) socket$l2tp(0x2, 0x2, 0x73) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x4008800}, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a14002c"], 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) (rerun: 32) 25.565229231s ago: executing program 8 (id=11179): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000003b00)="7800000018002507b9409b14ffff00000204be04020b06050e020909430005003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb12cea5a4bedb7a4b1fa9897a86d3add2db7208aa10343df8ff0f4d6325549c6e3d0f819ed23064e15279e9f5aa7113dc2542a54817c862c433f24c", 0x78, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x44000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000100)={r8, 0xbd24, 0x4, 0x8000, 0x8, 0x9, 0x0, 0x4, {0x0, @in6={{0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x1}}, 0x8, 0x545, 0x8, 0x7, 0x81}}, &(0x7f00000001c0)=0xb0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x50, r5, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x7fff}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x50}, 0x4, 0x700000000000000}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042dbd7000fedbdf251e0000000c000600020000000200000008000300", @ANYRES32=r10, @ANYBLOB="0c0006a1a6edae5af4f0ef000c1906000200000002000000"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4) socket(0x10, 0x3, 0x0) (async) sendto$inet6(r0, &(0x7f0000003b00)="7800000018002507b9409b14ffff00000204be04020b06050e020909430005003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb12cea5a4bedb7a4b1fa9897a86d3add2db7208aa10343df8ff0f4d6325549c6e3d0f819ed23064e15279e9f5aa7113dc2542a54817c862c433f24c", 0x78, 0x0, 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x44000) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket(0x2, 0x80805, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) (async) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000100)={r8, 0xbd24, 0x4, 0x8000, 0x8, 0x9, 0x0, 0x4, {0x0, @in6={{0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x1}}, 0x8, 0x545, 0x8, 0x7, 0x81}}, &(0x7f00000001c0)=0xb0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) (async) sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x50, r5, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x7fff}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x50}, 0x4, 0x700000000000000}, 0x0) (async) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042dbd7000fedbdf251e0000000c000600020000000200000008000300", @ANYRES32=r10, @ANYBLOB="0c0006a1a6edae5af4f0ef000c1906000200000002000000"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4) (async) 24.966411149s ago: executing program 8 (id=11183): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000200)="01154e000100445588fb0000892f", 0xe, 0x804, &(0x7f0000000040)={0x11, 0xf8, r2, 0x0, 0x0, 0x0}, 0x14) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r3, 0x890c, &(0x7f0000000300)=@add_del={0x2, 0x0}) r4 = socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x0, 0x9, r5, 0xe}, 0xc) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0xffffffff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x1c, 0x0}}], 0x1, 0x4000040) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, &(0x7f00000001c0)=0x8) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={r7, 0x4, 0x100, 0x3}, 0x10) 24.781236331s ago: executing program 8 (id=11185): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r0, &(0x7f0000000300)}, 0x20) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000001c40)=ANY=[@ANYRES64, @ANYRESDEC=r0, @ANYRESDEC, @ANYRES8, @ANYRESDEC=r1, @ANYRESDEC=r1], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r6 = syz_open_procfs$namespace(r3, &(0x7f0000001780)='ns/ipc\x00') r7 = getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r3, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="000000873673c900000000000100000002000000", @ANYRES32=r7, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r6, @ANYRES32], 0x58, 0x800}}], 0x2, 0x0) sendmsg$netlink(r1, &(0x7f0000001b00)={&(0x7f0000000400)=@kern={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001a80)=[{&(0x7f0000001980)=ANY=[@ANYBLOB="e80000004000000428bd7000fedbdf252400678004001680732d6165736e690000000400ad8004003b8008008c00080000001e38edd4bfd5f5d5be1ce906c5c92ef16497262a8580ae477a465e8f6e7d06fd44c6192885517a449fdaff3325385f03d4b74f033f0968b9db0b1c87170489b5a01c5957c9384f1bcf982ca8314ff99ac0856dffbd0c3c588138e62324749c37c677a55e9cdf90b782dd787bd0d910432d129e9be6e58411cc3976dfc599fe083cb4a73fb12a08a7640b53c87ee6ed7bf8f073ff5a2451ecf0b3a2d0bc84cb49bddfbfe750dfbb75b2190000"], 0xe8}], 0x1, &(0x7f0000001ac0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, r5}}}], 0x20, 0x40}, 0x80c0) setsockopt(r2, 0x84, 0x7d, &(0x7f0000000040)="020c0000098011e8", 0x8) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r8, 0x1, 0x12, &(0x7f0000002040)=0xe5, 0x4) r9 = socket$alg(0x26, 0x5, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2000000000000166, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) setsockopt$packet_rx_ring(r10, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYRESHEX], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2660004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bind$alg(r9, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) r13 = accept(r9, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f0000000180)=0x80) sendmsg$tipc(r13, &(0x7f0000001940)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x4, 0x4}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000240)="b72f6952dc438307d1548cf767402ca31e980d1ee64573194df633280b42b2a8c221e7c69a3f1b81fd6a95e93d702c903f2aaa9fa96fed7ab230422783c183ff27d30697123a6ccac709462769ce9d67c51c71552be55cd5412dfdc7bce086d296217d01708463cc2f687e24aa3c448dbf25fcf966aef40477a622865389692ffad519e562b0b6137ae419acf5b7a09a90e0920a1bcce78aa56e99031c5cd274f05af594b58c94f3f6baedbf01", 0xad}, {&(0x7f0000000340)="ab0e89591c7464b6568b43aa9ad177295014227ec3d3b9fd336877bee0d1dfb8946363a8a0944caf3f2ccd01fbb518eef08ab6fc4d31ce7150ae035d40ebb4e5be62f97524b78ef13420726f4210a719726365eb0216d2c00abb1b14af905628214d4c0488e0eb053d3808a52da30ab8df4b631cf2f0f40c4037ce28388b479d472f70d6d7dccff85cb549092500b225e909390e2ae0b06557f7f8", 0x9b}, {&(0x7f00000007c0)="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", 0x1000}, {&(0x7f00000017c0)="9b72dca5538e43a9ec6732d946f79c0404fe62d1385305e91e930c655449f3e019d8deb9cbe7babf22687a82bf3e47d32ad1b50b7ed207290bd1a6cdeb3e5d1ee565ecb3656d3888ba004e5cc223e3ff254e9df95eaf2a0e9dda20bc00daaa4e3a349ed6c4f3ef2bf30e209516773f4cd6b22166cdf3c1db37178ffd7a4d25b5fff2d7a8fd0e332a8030229974143fb6e1998ccae20433", 0x97}], 0x4, &(0x7f00000018c0)="736e948f589562a1681ec5f5dcc6979b99b2086340c993c9b9f22b115094079294340ca413614803c389dea154b6b5112412e9fefe1799a237eac3faa147d1dc4937048ba6fe73db8e2848a4188ecd3c7ffcf528a9aee94135fdb7b1254a8f0f5c2260630d", 0x65, 0x7561315ea2ce24d0}, 0x40) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd", 0x19) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c000000000101040000000000000000020000002c0001801400018008000100e000000108000200ac1414000c00028005000100000000000600034400040000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000002"], 0x6c}}, 0x0) 24.325015593s ago: executing program 8 (id=11188): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x36, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x2b0, 0x150, 0x150, 0x8, 0xf8010000, 0x380, 0x238, 0x238, 0x2b0, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000010c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="9feb010018000000000000009800000098000000090000000000000000000003000000000500000003000000c11d0000000000000a00000d0000000002000000010000000b0000000000000004000000050000000b0000000500000003000000010000000e00000005000000050000000000000002000000020000000c000000010000000f00000001d4514ca80000000000000804000000050000000000000c040000000500000061003000"/185], &(0x7f0000001040)=""/112, 0xb9, 0x70, 0x0, 0x4}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xfc, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) (async, rerun: 64) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 64) getsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async, rerun: 64) r3 = socket$packet(0x11, 0x2, 0x300) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@ipv4_deladdr={0x2c, 0x15, 0x1, 0xfffffffa, 0x20000000, {0x2, 0x18, 0x0, 0x0, r4}, [@IFA_LABEL={0x14, 0x3, 'veth0\x00'}]}, 0x2c}}, 0x4000850) (async) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x1, 0x1000, @vifc_lcl_ifindex=r4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$SIOCGSTAMP(r5, 0x8906, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000200000076000100250000009500000000000000184000000200000000000000000000009500000000000000438000"/64], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) 22.822485212s ago: executing program 8 (id=11198): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="33330000000100000000000086dd6000000000072c40fe800000000000000000000000000001ff020000000000000000000000000001"], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x71, &(0x7f00000002c0)="1a00000002000000", 0x8) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f00000001c0)="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") writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575", 0xe}, {&(0x7f0000000100)="00000005", 0x4}, {&(0x7f0000000800)="38c8114fa3", 0x5}], 0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x80200008}, 0x1c) listen(r6, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020005000c"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_eee={0x45, 0x4, 0x6, 0x80000001, 0x81, 0x5, 0x100, 0x7, [0xd9bb, 0xd]}}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_vlan={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x7c}}, 0x0) 21.600317581s ago: executing program 8 (id=11206): r0 = epoll_create1(0x80000) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)={0x50000006}) poll(&(0x7f0000000040)=[{r0, 0x140a}, {r1, 0x8100}, {r0, 0x4010}, {r1, 0x240}], 0x4, 0x1) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000080)={0x40000015}) r2 = epoll_create1(0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x7, &(0x7f0000000100)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x5}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}], &(0x7f0000000140)='syzkaller\x00', 0xe, 0xd4, &(0x7f0000000180)=""/212, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0x8, 0x7e5f, 0x9}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000340)=[{0x5, 0x1, 0xc, 0x3}, {0x4, 0x1, 0x6, 0xa}, {0x4, 0x1, 0x5, 0xa}, {0x2, 0x1, 0xb, 0x7}, {0x3, 0x3, 0x9, 0x9}], 0x10, 0x80000000}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000480)=@generic={&(0x7f00000000c0)='\x00', r3}, 0x18) sendto$inet(r1, &(0x7f00000004c0)="d545aa5bb0659f1970ee10eff371793565a2ef2b9b094f872ff6faa4b150094dc1c0157f6ecbbb6d350f77c964f51a66890973aab0efc7f9302d9102295d919dbb368ac3284ce644a5ee", 0x4a, 0x20000090, &(0x7f0000000540)={0x2, 0x4e21, @loopback}, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r4, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f0000000b40)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80082000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000740)={0x384, r6, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf23}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x767}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfa5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}]}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xea, 0x3, "f481b99cae58f4e06f922b0ba588719d44f21d13eb4cc0569b91932a84b9b380bb1e98d420a1f8742c4d972335e3a7adedffe1c0621733d324d91374887247b4ebf549265f7f5d9053bd3afd623a7e02ef38a1253332bd6b52508cc58661cc89e44969b5afa1cc17e445ee3bec36ae4f8d234f1d8cce497e508ce97c295757058f930715193c41f2e3dfbc3c5fc2c80c9808717f1855c1eaeebd3946710fe154a8e65d43c017aad92b37c0b6d115c2c250a8fe6d77621b7251ac7f3ab9bde0c2d11bc5547b6b54d8c531a094dba91ef59ae17d852fd4f6f25549b55c9cecb39ddc20ddae4c4c"}]}, @TIPC_NLA_BEARER={0x11c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x401}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'pim6reg1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @private=0xa010100}}, {0x14, 0x2, @in={0x2, 0x4e21, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10001}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x8000, @local, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xfffffffe, @remote, 0x7}}}}]}]}, 0x384}, 0x1, 0x0, 0x0, 0xc000}, 0x1) r7 = socket$igmp(0x2, 0x3, 0x2) accept$inet(r7, 0x0, &(0x7f0000000b80)) epoll_pwait(r2, &(0x7f0000000bc0)=[{}, {}, {}, {}, {}, {}], 0x6, 0x3, &(0x7f0000000c40)={[0xf7b]}, 0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000cc0), r5) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r8, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x1c, r9, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) socket$xdp(0x2c, 0x3, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind(r10, &(0x7f0000000dc0)=@ethernet={0x306, @remote}, 0x80) r11 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000e40)={'dummy0\x00'}) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r12, &(0x7f0000000e80)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x18}, 0x7}, 0x1c) sendmsg$TIPC_NL_KEY_FLUSH(r5, &(0x7f00000011c0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001180)={&(0x7f0000000f00)={0x254, r6, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2ca90a3a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x11c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x401}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x35}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7fffffff}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x3}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1c8a9c97}]}]}, 0x254}, 0x1, 0x0, 0x0, 0x4000004}, 0x4080) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001200)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x27}}}, 0x9, 0x8000, 0xc, 0x800, 0x51, 0xcdc, 0x5}, &(0x7f00000012c0)=0x9c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000001300)={r13, 0xfffffffd}, 0x8) 15.918863558s ago: executing program 9 (id=11231): r0 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000300)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xf32, 0x6, 0x7ff, 0xb1018802593101a1, 0x4, 0x85000300}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000108000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="b40200000000000008001b"], 0x28}}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4078, 0xfee}, {&(0x7f00000003c0)=""/207, 0xcf}, {&(0x7f0000000100)=""/120, 0x78}, {&(0x7f0000000180)=""/226, 0xe2}], 0x4}, 0x5}], 0x1, 0x2, 0x0) 9.858265575s ago: executing program 9 (id=11239): syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e8, 0xffffffff, 0xffffffff, 0x3e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000006000000000000000000000d00000000000000000000000d04000000800000000000000200000000040000000000000f03000000000000006100"], 0x0, 0x4e}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079100100000000000500000000fb00000101000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="10010000", @ANYRES16, @ANYBLOB="c88845e7e05ae52d00009300000008001317"], 0x1c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) syz_emit_ethernet(0xe0, &(0x7f00000007c0)={@random="14e31dcd85b6", @local, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "a6b400", 0xaa, 0x1e, 0xff, @private0={0xfc, 0x0, '\x00', 0x4}, @private2, {[@hopopts={0x0, 0x6, '\x00', [@hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0xaf}, @enc_lim, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @mcast1}]}, @srh={0x6c, 0x6, 0x4, 0x3, 0x2, 0x48, 0x2, [@private0={0xfc, 0x0, '\x00', 0x1}, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @srh={0x21, 0x2, 0x4, 0x1, 0x10, 0x40, 0x0, [@local]}], "0f469eef51e911318e7be2eacff0ba20bff7d7355e62f660a53b"}}}}}, &(0x7f00000008c0)={0x1, 0x4, [0xefe, 0x274, 0x294, 0x3ca]}) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r2, 0x215eb000) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) r3 = socket(0x27, 0x2, 0x0) bind$packet(r3, &(0x7f0000000100)={0x11, 0x7, 0x0, 0x1, 0x17}, 0x14) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000003060102000000000000000000000000a2ff3579d3bcd59c01211baa2b0d"], 0x14}}, 0x8081) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x49}], 0x2) openat$cgroup(r4, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) 9.575570649s ago: executing program 3 (id=11240): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r4) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000080)={r6, 0x808000}, 0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f00000006c0)={r6, 0x81}, 0x8) (async) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f00000006c0)={r6, 0x81}, 0x8) r7 = socket$packet(0x11, 0x2, 0x300) sendmsg$NFT_BATCH(r2, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x1c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x333e9b2858e11b51, 0x0, 0x6}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELOBJ={0x3c, 0x14, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}]}, @NFT_MSG_DELTABLE={0x1f8, 0x2, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x33, 0x6, "3e6fbfde6a90220b718d5201f7f83833c7e8f58e9036b7e967e7a7bcd1e29af0b8266f006b6f08b6b6e89918717f88"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x9c, 0x6, "eabb8e78ab9d3d480c410bad5d39db3891df4e4053797db2105a38ba9f52ed7052cc6d2517f65bbc51794ffd2a927c3bf219e0cf14f634bca9e268af64070ab3d70f7d25bb9c9dc39a62b7f4f532cf7b465963d2020bd75063cada0a529679842bc38b9e1eb96b39ceb3343d63ae4bb80e5c612f506f8ee214519d18674f56003207776d99a2bde1a15a1460d6f8c48e72d446c6dc11d2dc"}, @NFTA_TABLE_USERDATA={0xed, 0x6, "b9f214ad4058907133630aa3780e27fea6b83290ed33975e49b3e01d2a9ecf6f210e2c4738e1f690dadb81b1dffe8829a46198cdc1934edecfa4e82c76e57f6e986263a388b47c8c3f863209d8a71c54b3436935055ded700e12e4a7c14ad02b824beb1675b63dd3cfa8d2eaaaca6a9874e852a73e1324bab9ea875e962b70f2db2cea2aa6fd5cde76b51a186f735a2929cb413185d3e6c64bb8b7bdac5849c53529cb93b2b5d146ea50702857ecbb7c89445d58aecae06fdf355cd40141d0667b106f9c88e68e35dde34c45c035c3c9b9554ca98cc68de6203a6d1eb11331b0cdd5a193a9942d5bf4"}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x28, 0xc, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x2e0}, 0x1, 0x0, 0x0, 0x4040}, 0x40000) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0xc8, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x74, 0x2, [@TCA_HTB_INIT={0xf}, @TCA_HTB_INIT={0x18}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_DIRECT_QLEN={0x8}]}}, @qdisc_kind_options=@q_fq_codel={{}, {0x0, 0x2, [@TCA_FQ_CODEL_INTERVAL]}}]}, 0xc8}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r9}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}]}, 0x44}}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r10, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1080400}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x2}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000804}, 0x40) (async) sendmsg$IPCTNL_MSG_CT_GET_DYING(r10, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1080400}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x2}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000804}, 0x40) 9.336288022s ago: executing program 6 (id=11242): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)={0x14, 0x2a, 0x229, 0x70bd2b, 0x0, {0xa}}, 0x14}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x3}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {0x0, 0x0, 0x3d, 0x0, 0x20000}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x10}, {0x0, 0x404, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd, 0xf}, {0x42, 0x0, 0x400000, 0x0, 0x6}, {}, {0x0, 0x0, 0x80}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x400, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20, 0xfffffffc}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2000}, {}, {0x0, 0x7, 0x0, 0x1, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0xffffffff, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff, 0x10000000}, {}, {0x0, 0x0, 0xc, 0xfffffffe, 0x0, 0x6}, {0xffffffff}, {}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x29, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0x3}, {0x80}, {0x0, 0x28e, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x100000, 0x0, 0x0, 0x0, 0x3}, {0x1000000}, {0x0, 0x6, 0x3}, {0x0, 0x15, 0x0, 0x48510}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xcb}, {0x0, 0x0, 0x0, 0x0, 0x10000, 0x4000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {0x0, 0xfffffffe}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x2, 0x0, 0x88}, {0x5}, {}, {0x0, 0xfffffffc, 0x0, 0x3ff, 0x40000000}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x5}, {}, {0x0, 0x0, 0x0, 0x4000, 0x0, 0xfb4}, {0x0, 0x54e4}, {0x0, 0x101, 0x0, 0x4, 0x0, 0xffffffff}, {}, {0x2f, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {0x0, 0x0, 0xfffffffd, 0x80000, 0x3}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x6, 0x0, 0x4}, {0x0, 0x80}, {}, {0x0, 0xfffffffd}, {0x6, 0x0, 0x0, 0x0, 0x8}, {0x7f, 0x0, 0xfffffffe, 0xfffffffe}, {}, {}, {0xffffffff, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x8, 0x20000000}, {}, {0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x2000000}, {0x0, 0x80000000, 0x0, 0x0, 0x0, 0x101}, {0x5, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x10000000, 0x2e9c, 0x0, 0x0, 0x7, 0x7f53}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x4, 0x7fffffff}, {}, {0x0, 0x2, 0x0, 0x8}, {}, {0x0, 0x1}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000, 0x4000000, 0xfffffffc, 0x2}, {0x0, 0x80000000, 0x0, 0x7dff800}, {0x3, 0x0, 0x0, 0x0, 0xffffffff}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {}, {0x1}, {0x4, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x4}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {0x4}, {0x1}, {0x0, 0x1}, {}, {}, {0x2}, {0x0, 0x1}, {}, {0x4, 0x1}, {}, {0x1}, {0x4}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {0x5}, {}, {}, {0x4}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {}, {0x6}, {0x2, 0x1}, {}, {}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {}, {0x2}, {0x2}, {0x3}, {0x0, 0x1}, {0x4}, {0x3}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x16b9e}, [@IFLA_IFNAME={0x14, 0x3, 'erspan0\x00'}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1a, 0x0, 0x0, 0x1}]}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000884}, 0x4000) poll(&(0x7f0000000080)=[{r3}, {r3}], 0x2, 0xf45) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000240), 0x4) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/135}, 0x2042) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r1, 0x58, &(0x7f0000000600)}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001240)=ANY=[@ANYBLOB="54010000100033060000000000000000fc000000002c89fc010000000000000000000000000000000000000000ffff000000000000000078335390b91d1ea4441ebfda6fc41b968e302c5c6443b0de0f5519c9ecbb2c565997f59baeb70de5fe9e4c72d7ca8e2b77c6aa5fb1a433e7df8c6e4678dad21adc3c06588fe31765dd08e8f5f61aec6f3c1b1cf6bb383ab0f46313f27b96e1014ff8c24a3993f0ce0521880a10aedb8cbdffe2e6c8c45e88acd3a7b66194046077106297476fbf424bc5d88cfd9bdbbc4a7a0db808bfa73a2f2c56c078c80d3af219cbb9bd5e25b1c9b1d62ad30e0be651909500b288f7966163649f5849315c771906d63dd0c59c2f5ce289fbab317b3c435d61bc41ecd64ec5f7ad77fd1f39734127b0f19a7ef344682832e574e47efca4101e16", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000032000000fe8800000000000000000000000000010000000000000000feffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0020000000000000000000ac1e000100"/268], 0x154}}, 0x2000c080) 8.292881646s ago: executing program 3 (id=11244): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000001300)=@ethtool_rxfh={0x39, 0x8, 0x0, 0x9, 0x4, "226ac5", 0x5}}) close(0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) recvmmsg(r1, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008ac0)=[{{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, &(0x7f0000007340)=[{&(0x7f0000005ec0)=""/112, 0x70}, {&(0x7f0000005f40)=""/130, 0x82}, {&(0x7f0000006000)=""/4096, 0x1000}, {&(0x7f0000007000)=""/7, 0x7}, {&(0x7f0000007080)=""/129, 0x81}, {&(0x7f0000007140)=""/93, 0x5d}, {&(0x7f00000071c0)=""/165, 0xa5}, {&(0x7f0000007300)=""/34, 0x22}], 0x8}}], 0x2, 0x40, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x1, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x2c, &(0x7f00000000c0)=0x1, 0x4) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f00000001c0)={r2, &(0x7f0000000000)='\x00', 0xc8000, &(0x7f0000000080)={@_ha_fsid={[0x6, 0x6]}, {0x4, 0x5b, 0x9, 0x1}}, 0xce, &(0x7f0000000100), &(0x7f0000000140)=0x6}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000640)={&(0x7f0000000300), 0xc, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r4, @ANYBLOB="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"], 0x22c}, 0x1, 0x0, 0x0, 0x20000480}, 0x8050) sendto$inet(r2, 0x0, 0x0, 0x4048002, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079109000000000007b0ae8"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="c45c57ce395de5b289f07d637a223920f181c2e57d71483cfb2d075a3ff07258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e62c39ccf9ae9bfe54ee5887358d44f46337fbe090d7c7e55847edee8130ffd3d1e719e01a68b0e691c0d35b0b56e0b514036342fd56f08ac0083f3c2fe41a1295a3d23cf3d160d4fd90f66beba68860456ed41272e1e68d16c2564c85f5556e18784113c493d13253e14d6eb891707fba3c30d07d5ee8619e4426cafec4cf6a3723c455d09b586b248", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) close(0x3) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000001300)=@ethtool_rxfh={0x39, 0x8, 0x0, 0x9, 0x4, "226ac5", 0x5}}) (async) close(0x3) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) (async) recvmmsg(r1, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f0000008ac0)=[{{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, &(0x7f0000007340)=[{&(0x7f0000005ec0)=""/112, 0x70}, {&(0x7f0000005f40)=""/130, 0x82}, {&(0x7f0000006000)=""/4096, 0x1000}, {&(0x7f0000007000)=""/7, 0x7}, {&(0x7f0000007080)=""/129, 0x81}, {&(0x7f0000007140)=""/93, 0x5d}, {&(0x7f00000071c0)=""/165, 0xa5}, {&(0x7f0000007300)=""/34, 0x22}], 0x8}}], 0x2, 0x40, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) bind$inet(r2, &(0x7f0000000040)={0x2, 0x1, @local}, 0x10) (async) setsockopt$sock_int(r2, 0x1, 0x2c, &(0x7f00000000c0)=0x1, 0x4) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f00000001c0)={r2, &(0x7f0000000000)='\x00', 0xc8000, &(0x7f0000000080)={@_ha_fsid={[0x6, 0x6]}, {0x4, 0x5b, 0x9, 0x1}}, 0xce, &(0x7f0000000100), &(0x7f0000000140)=0x6}) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000640)={&(0x7f0000000300), 0xc, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r4, @ANYBLOB="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"], 0x22c}, 0x1, 0x0, 0x0, 0x20000480}, 0x8050) (async) sendto$inet(r2, 0x0, 0x0, 0x4048002, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079109000000000007b0ae8"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) (async) close(0x3) (async) 7.588652121s ago: executing program 6 (id=11245): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[], 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001e00010a29bd7000b9fb7c13c5705b10"], 0x14}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r9, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r9, 0x0) r10 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r10, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r11 = accept4(r9, 0x0, 0x0, 0x0) setsockopt$sock_timeval(r11, 0x1, 0x14, &(0x7f0000000600)={0x0, 0xea60}, 0x10) recvmsg$kcm(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x5}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0xfffffffffffffe52, 0x2, 0x7000000}]}}]}, 0x48}}, 0x0) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001300)=ANY=[@ANYRES32=r6, @ANYRES32=r13, @ANYBLOB="05"], 0x10) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r3, 0x118, 0x1, &(0x7f0000000100)=0x4eb, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) 7.134178899s ago: executing program 3 (id=11246): socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) write(r0, &(0x7f00000000c0)="c5684e3f654b54fd2926490eb4650f90543844b6", 0x14) listen(r1, 0x7) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = accept(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f00000001c0)={0x0, 0x50, "5ba34a849e8519d8b1c0cc7ced3fbc48c0a5462cd3736cdc6a932c6156b4f65f203e9e09ef0fabfed604612cf1e76897760a52a63ab8fb89e3cbb797c365c929147c8bde7ac46fb91b5ed75b2970efa9"}, &(0x7f0000000240)=0x58) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000280)={0xc5bb, 0x4, 0x208, 0x9, 0xffffff80, 0x1, 0x7a7, 0x1, r4}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000400)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x7, 0x20, 0x80000000, 0xffff, {{0xe, 0x4, 0x1, 0x3c, 0x38, 0x64, 0x0, 0x7, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x1c}, {[@timestamp={0x44, 0x4, 0xd1, 0x0, 0x2}, @lsrr={0x83, 0x17, 0xe2, [@multicast1, @dev={0xac, 0x14, 0x14, 0x20}, @empty, @remote, @broadcast]}, @rr={0x7, 0x7, 0x92, [@dev={0xac, 0x14, 0x14, 0x3c}]}]}}}}}) sendmsg$xdp(r3, &(0x7f0000000640)={&(0x7f0000000480)={0x2c, 0x1, r5, 0x1e}, 0x10, &(0x7f0000000600)=[{&(0x7f00000004c0)="cc35", 0x2}], 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x24008840}, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(r6, 0x1, 0x4d, 0x0, &(0x7f0000cab000)=0x2) 5.576124727s ago: executing program 6 (id=11248): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000046c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x0, 0x110, 0x1f8, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r1, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0) 5.548767499s ago: executing program 3 (id=11249): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00000001c0), 0x4) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000000)=0xff, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000440)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x1d0, 0x1d0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0xffffffff, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x101, 0xff]}}, {}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00', {}, {}, 0x0, 0x180}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x6, 0x7, 0x1}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0xfd, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0xc}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x4}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @dev={0xac, 0x14, 0x14, 0xe}, @multicast1, 0x4, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r3, &(0x7f00000000c0)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x6, 0xfdcd, 0x2f, 0x40}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x1c, 0x63, 0x0, 0x40, 0x11, 0x0, @private=0xa010104, @broadcast}, {0x4e26, 0x4e20, 0x8}}}, 0x2a) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x68}}, 0x0) 5.447392205s ago: executing program 9 (id=11250): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x11}}, 0x14}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f00000005c0), 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x1c, r2, 0x300, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20014004}, 0x20000000) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000003f000500010000000000000001010000000000000f0001006f76732d73797374656d00000800020000000000080009002a000000"], 0x38}}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000410005000200000000000000010100002a00000014000180100004000000000000000000000000000c0002800800010000000000"], 0x38}}, 0x0) ioctl$XFS_IOC_GETBMAPA(r3, 0xc020582c, &(0x7f00000000c0)={0x9, 0x9, 0x200, 0x9, 0x1}) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000410001030300000000000000030100002a000000"], 0x18}}, 0x0) socket(0x2a, 0x4, 0x7) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x10, 0x9, [0x3ff, 0x1ff, 0x2, 0x80, 0x10, 0x0, 0x0, 0x2, 0xff]}, &(0x7f0000000040)=0x1a) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000080)={r6, 0xfffffff7}, 0x8) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r3) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xb8, r7, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x8, @local, 0xc8d00000}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @private1, 0x4b7}}}}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x63}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000000}, 0x8800) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x42024, 0x8d85}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x4c}}, 0x0) 4.719742917s ago: executing program 7 (id=11251): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7040010000000f00000008000300", @ANYRES32=r2, @ANYBLOB="05002f0002"], 0x2c}}, 0x18) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r3) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="410000000000000001000603000014000300060afc04090300f006e8ffff00000001080007003a3a0909140002"], 0x44}, 0x1, 0x1000000}, 0x0) (async) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_RESP(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r5, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x89}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x6}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8844}, 0x10020044) 4.015258788s ago: executing program 6 (id=11252): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000010400d3ffff0200000000000000", @ANYRES32=0x0, @ANYBLOB="f6b2817dbcb5f31a20001280110001006272696467655f736c617665000000000800058004001800140003006272696467655f736c6176655f3000"], 0x54}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='net_prio.prioidx\x00', 0x0, 0x0) write$tun(r1, &(0x7f0000000240)={@val={0x0, 0x2}, @val={0x2, 0x3, 0x7fff, 0x9, 0x6, 0xc}, @mpls={[{0x6}, {0x1000, 0x0, 0x1}, {0x1}, {0x7, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x40, 0x0, 0x1}, {0x6}, {0x4}], @ipv6=@tipc_packet={0x7, 0x6, "33a4dc", 0x13d, 0x6, 0x1, @dev={0xfe, 0x80, '\x00', 0x20}, @ipv4={'\x00', '\xff\xff', @local}, {[@dstopts={0x1, 0x7, '\x00', [@calipso={0x7, 0x38, {0x3, 0xc, 0x1, 0x1, [0x8, 0x0, 0x85d9, 0x7, 0x8, 0x3]}}]}, @routing={0x2c, 0x0, 0x1, 0x5}, @hopopts={0x42, 0x6, '\x00', [@calipso={0x7, 0x18, {0x1, 0x4, 0x80, 0x4, [0x5, 0xc47e]}}, @jumbo={0xc2, 0x4, 0x5}, @enc_lim={0x4, 0x1, 0xaf}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, @dstopts={0x21, 0xe, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @jumbo, @calipso={0x7, 0x28, {0x2, 0x8, 0x5, 0x3, [0x1, 0x2, 0xff, 0x5]}}, @calipso={0x7, 0x20, {0x1, 0x6, 0x9, 0x200, [0x1, 0xc, 0x8]}}, @enc_lim={0x4, 0x1, 0x6}, @hao={0xc9, 0x10, @loopback}, @pad1, @ra={0x5, 0x2, 0x5}]}], @payload_mcast={{{{{{0x2d, 0x0, 0x1, 0x0, 0x0, 0xb, 0x2, 0x2, 0x7, 0x0, 0x0, 0x4, 0x1, 0x1, 0x1, 0x100, 0x2, 0x4e24, 0x4e21}, 0x1, 0x2}, 0x2, 0x2}, 0x4}}, [0x0]}}}}}, 0x193) 3.632779033s ago: executing program 9 (id=11253): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000380)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x78}}, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newtfilter={0x64, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x38, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_MARK={0x10, 0xa, {0x0, 0x8000}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x20, 0x1, 0x4, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFULA_CFG_MODE={0xa, 0x2, {0x102, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x400c4) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) close(0x4) syz_emit_ethernet(0x9a, &(0x7f0000000040)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "0f38658c432ae1d6778795efa7a386131cdfd6db9d693b149573b69e324dd518", "80f20b589ea815d390be3440806a3dfd", {"68e77bdc832e437bb8b8deadbfca96d4", "8ce907f941ed51d4a10806ad01d87602"}}}}}}}}, 0x0) 3.560506997s ago: executing program 7 (id=11254): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000009500000009000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff8a}, 0x90) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f00000000c0)='Y\x00\x00\x00\x00\x00', 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000000002010400000000000000000700000608000940ffffffff080004400000008108001840000000032000018006000340000200001400018008000100ac1414aa08000200ffffffff0800044000000056b1d50b1d04075c000a8008000140000000015000028014000180080001007f00000108000200640101000c000280050001002f0000002c0001801400030020"], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e"], 0x1c}}, 0x0) r2 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r3, &(0x7f0000000b00)=[{{&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="82d903bfcb8484b98931c6c599ed9c", 0xf}, {&(0x7f0000000980)="e865f05c7d89be06", 0x8}], 0x2}}], 0x1, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000840)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000800)={0x0}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0xb8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xb8, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0xff, 0x0, 'hsr0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) write$cgroup_devices(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="61202a3a2a20776d0069fee65d037e782d10467eb44df161bf3b8a8ed58f36662a849c7355eba24897eea6328144652a5ad4c7a660f3cfce1ac18ae33acc24037597fd59447c70361480912f54fbb0955191cb4d55fa6126f0e5eaf9c74ef32867dde148bb5ff7d13905d5766ec744afab84cea8181eaf0a14bae2725a40923d612a11188a83f5d530be78573972df9b"], 0x9) 3.179218864s ago: executing program 3 (id=11255): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000700), 0x101043, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000006800010000000000000000000a0000000400000004000b"], 0x1c}}, 0x0) 2.747934112s ago: executing program 7 (id=11256): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x7, [@restrict={0x0, 0x0, 0x0, 0xb, 0x4}, @var={0xa, 0x0, 0x0, 0xe, 0x4, 0xaf71cd8125dea3a3}, @typedef={0x9}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x4, 0x6}, @var={0xd, 0x0, 0x0, 0xe, 0x2}, @typedef={0xa, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x30, 0x5f, 0x61, 0x5f, 0x2e]}}, &(0x7f0000000300)=""/99, 0x73, 0x63, 0x1, 0x2}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000006c0000006c0000000c0000000c00000006000005030000000400000001000000070000000d000000030000000200000002000000010000000400000006000000020000000600000002000000050000000000f7020a000000030000000000000000000000000000030000040000000000000000003b04000000105f5f2e002e2e302e0000"], &(0x7f0000000140)=""/35, 0x90, 0x23, 0x0, 0x6, 0x10000}, 0x28) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000001c0)={r2, 0xfffffffffffffff8, 0x40000000000, 0x1}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x38, 0x2, 0x6, 0x5, 0x0, 0x2000000, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x38}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8a00fe00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ff8effb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000c5"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x7, [@restrict={0x0, 0x0, 0x0, 0xb, 0x4}, @var={0xa, 0x0, 0x0, 0xe, 0x4, 0xaf71cd8125dea3a3}, @typedef={0x9}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x4, 0x6}, @var={0xd, 0x0, 0x0, 0xe, 0x2}, @typedef={0xa, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x30, 0x5f, 0x61, 0x5f, 0x2e]}}, &(0x7f0000000300)=""/99, 0x73, 0x63, 0x1, 0x2}, 0x28) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000006c0000006c0000000c0000000c00000006000005030000000400000001000000070000000d000000030000000200000002000000010000000400000006000000020000000600000002000000050000000000f7020a000000030000000000000000000000000000030000040000000000000000003b04000000105f5f2e002e2e302e0000"], &(0x7f0000000140)=""/35, 0x90, 0x23, 0x0, 0x6, 0x10000}, 0x28) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000001c0)={r2, 0xfffffffffffffff8, 0x40000000000, 0x1}) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x38, 0x2, 0x6, 0x5, 0x0, 0x2000000, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x38}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8a00fe00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ff8effb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000c5"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)) (async) 2.295576889s ago: executing program 3 (id=11257): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {0xc, 0xfff1}, {}, {0x9, 0xffff}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x3, 0x8, 0x2}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x14004880}, 0x14) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$tun(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="000008000100000000003d00000046", @ANYBLOB], 0x4e) 2.06415601s ago: executing program 6 (id=11258): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x4000001) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x54}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000180)={0x3, 'team_slave_1\x00', {0x84a1}, 0x80}) 2.038495188s ago: executing program 9 (id=11259): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001080)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x8}], 0x30, 0x40040}], 0x1, 0x40) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x38}}, 0x0) recvmsg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), 0x38}, 0x40000061) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={@multicast2, 0x1, 0x0, 0xa0, 0x0, [{}, {@private}, {@remote}, {@broadcast}, {@multicast2}, {@initdev}, {@loopback}, {@empty}, {@dev}, {@loopback}]}}) sendmsg$inet(r0, &(0x7f0000000e80)={&(0x7f0000000800)={0x2, 0x6e21, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0}, 0x20000000) 1.773079339s ago: executing program 7 (id=11260): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071120e00000000008700000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 822.804567ms ago: executing program 9 (id=11261): socket$inet6(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a70000000180a05000000000000000000020000004400038040000380145b9bff94b9b88865ca8df2e604390001007727320000000000000000000000000014000100531d9095b65f746f5f620200000065616e0000000000000900020073797a3000000000090001007379000000000000000100001100010000000000000000000300000a00000000000000080000000000"], 0x98}, 0x1, 0x0, 0x0, 0x20004091}, 0x20008000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@ipv4_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_IN={0xc, 0x1, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}]}, 0x34}}, 0x0) syz_emit_ethernet(0x9b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)={0x0, 0x4, [0xd46, 0xbce, 0xfab, 0x4fc]}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) socket(0x3, 0x2, 0x5) syz_emit_ethernet(0x124a, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000640)={0x1, 0x2, [0x705, 0xa1, 0xd50, 0xe8e]}) 700.238738ms ago: executing program 7 (id=11262): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000380)="170000000200010000ffbe8c5ee17688a20033000301fcff000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf93150334769e106e7db76849d3c98bf79ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5d4af9477170d283f02ff030000ba000840024f0298e9e90539062a80e605007f71174aa961f3c63e5a1b47b63a6323ded223", 0xb8) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f7ff6e2a160000000000000000000000000061102c00000000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000020180c2000000810000000800450000300000000001019078ac1e00010500000005009078e00000e0450000000000000000110000ac1414aaac1414aa"], 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000080)=0x3, 0x4) 188.549717ms ago: executing program 7 (id=11263): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x41, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xd, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @generic="b2"]}, @nested={0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x3, &(0x7f0000000240)="a1b4ab4134445387828e178c12127151c3115aaacdb2f59002f407f0fede5c93a01d4687b25dd689c85b5ea327a9c4af31c8b28f1d9dde35e984eaecfaca7a8d58947640a4214fa22db9a73e2251c33ebba22e83a0419f659d38ea641f842f32786093d98d97e504cf8dffca48d793135bb8143d925c2914bfe05295befd19662124e934df76c7ec9a1c33415967abfbc27e7ec1e475036ab3fc76ba7982cc34dedafc4699b6efc8a1dee222fbcb1bfe514956a9601d28a03221a1d562a4ff4911f53d52fd1e154ec90743ca1669ce4102a909356a784c8a81d746f6ab32c4") (async) bind$inet6(r5, &(0x7f00000006c0)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) (async) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) sendto$inet6(r5, &(0x7f0000000840)="a6", 0xffffff1e, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x4}, 0x1c) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)={0x114, 0x2b, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0xfffd}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767fc734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x8, 0x6, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x10}, 0xe) (async) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000100)={r8, 0x8000}, 0x8) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='cdg', 0x3) (async) shutdown(r5, 0x1) r9 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r9, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x24) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0xfffffffc, 0x2344edab, 0x8000, 0x4, 0x6, 0xe8}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0xfe, 0xe, 0xfffffff6, 0x2, 0xffffffffffffc148}}]}}}]}, 0x78}}, 0x20000040) (async) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x1, 0x21e, [0x0, 0x200000000400, 0x2000000005be, 0x2000000005ee], 0x0, 0x0, &(0x7f0000000400)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{0x3, 0x14, 0x88fb, 'vxcan1\x00', 'veth1_macvtap\x00', 'veth0_to_bridge\x00', 'netdevsim0\x00', @local, [0xff, 0x0, 0xff], @empty, [0x0, 0x0, 0xff, 0xff, 0xff], 0xbe, 0x13e, 0x18e, [@nfacct={{'nfacct\x00', 0x0, 0x28}, {{'syz0\x00', 0x8}}}], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x7}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x3, 'syz0\x00', {0x3}}}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x9, 'syz0\x00', {0x8}}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1}]}, 0x296) 0s ago: executing program 6 (id=11264): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0xff1a) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000001d80)="16", 0x1}], 0x1}}], 0x1, 0x24008094) close(0x3) close(0x4) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000003c0)={0x14, r4, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x400c9}, 0x20000000) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) kernel console output (not intermixed with test programs): p_table_get+0x1e/0x260 [ 1797.790382][T12437] ? swap_table_get+0x216/0x260 [ 1797.790412][T12437] ? swap_cache_get_folio+0x2e7/0x2f0 [ 1797.790445][T12437] do_swap_page+0x455/0x5060 [ 1797.790486][T12437] ? __pte_offset_map+0x29/0x240 [ 1797.790520][T12437] ? __lock_acquire+0x683/0x2cf0 [ 1797.790553][T12437] ? do_swap_page+0x124/0x5060 [ 1797.790579][T12437] ? __pfx_do_swap_page+0x10/0x10 [ 1797.790601][T12437] ? __pte_offset_map+0x1ae/0x240 [ 1797.790633][T12437] ? pte_offset_map_rw_nolock+0xea/0x160 [ 1797.790664][T12437] handle_mm_fault+0x124c/0x3080 [ 1797.790707][T12437] ? handle_mm_fault+0xec/0x3080 [ 1797.790746][T12437] ? __pfx_handle_mm_fault+0x10/0x10 [ 1797.790769][T12437] ? lock_vma_under_rcu+0x45a/0x500 [ 1797.790832][T12437] do_user_addr_fault+0xa4d/0x1340 [ 1797.790882][T12437] ? trace_page_fault_user+0x84/0x1e0 [ 1797.790920][T12437] exc_page_fault+0x6a/0xc0 [ 1797.790954][T12437] asm_exc_page_fault+0x26/0x30 [ 1797.790978][T12437] RIP: 0033:0x7f71db79e0eb [ 1797.791002][T12437] Code: 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 <64> 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 [ 1797.791023][T12437] RSP: 002b:00007f71dc640028 EFLAGS: 00010217 [ 1797.791046][T12437] RAX: 000000000000000c RBX: 00007f71dba25fa0 RCX: ffffffffffffffe8 [ 1797.791063][T12437] RDX: 0000000000000048 RSI: 0000200000000640 RDI: 0000000000000000 [ 1797.791079][T12437] RBP: 00007f71db835024 R08: 0000000000000000 R09: 0000000000000000 [ 1797.791094][T12437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1797.791108][T12437] R13: 00007f71dba26038 R14: 00007f71dba25fa0 R15: 00007fff2e3941a8 [ 1797.791147][T12437] [ 1797.796200][T12437] memory: usage 307200kB, limit 307200kB, failcnt 196 [ 1798.189304][T12437] memory+swap: usage 307400kB, limit 9007199254740988kB, failcnt 0 [ 1798.366103][T12437] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 1798.402603][T12437] Memory cgroup stats for /syz9: [ 1798.403244][T12437] cache 0 [ 1798.449606][T12437] rss 0 [ 1798.462734][T12437] rss_huge 0 [ 1798.488080][T12437] shmem 0 [ 1798.504221][T12437] mapped_file 0 [ 1798.590498][T12437] dirty 0 [ 1798.618680][T12437] writeback 0 [ 1798.672305][T12437] workingset_refault_anon 0 [ 1798.743172][T12437] workingset_refault_file 0 [ 1798.802730][T12437] swap 204800 [ 1798.835049][T12437] swapcached 204800 [ 1798.878777][T12437] pgpgin 168980 [ 1798.918410][T12437] pgpgout 168980 [ 1798.975701][T12437] pgfault 291603 [ 1799.009725][T12437] pgmajfault 1 [ 1799.024372][T12437] inactive_anon 0 [ 1799.042368][T12437] active_anon 0 [ 1799.061688][T12437] inactive_file 0 [ 1799.080742][T12437] active_file 0 [ 1799.096286][T12437] unevictable 0 [ 1799.111400][T12437] hierarchical_memory_limit 314572800 [ 1799.133807][T12437] hierarchical_memsw_limit 9223372036854771712 [ 1799.158793][T12437] total_cache 0 [ 1799.177787][T12437] total_rss 0 [ 1799.232968][T12437] total_rss_huge 0 [ 1799.257723][T12437] total_shmem 0 [ 1799.278353][T12437] total_mapped_file 0 [ 1799.318639][T12437] total_dirty 0 [ 1799.350171][T12437] total_writeback 0 [ 1799.354548][T12494] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1799.384479][T12437] total_workingset_refault_anon 0 [ 1799.410193][T12437] total_workingset_refault_file 0 [ 1799.451045][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1799.463920][T12437] total_swap 204800 [ 1799.478914][T12437] total_swapcached 204800 [ 1799.490419][T12437] total_pgpgin 168982 [ 1799.501764][T12437] total_pgpgout 168982 [ 1799.518940][T12437] total_pgfault 291621 [ 1799.552188][T12437] total_pgmajfault 1 [ 1799.562484][T12437] total_inactive_anon 0 [ 1799.576535][T12437] total_active_anon 0 [ 1799.594379][T12437] total_inactive_file 0 [ 1799.606003][T12437] total_active_file 0 [ 1799.634229][T12437] total_unevictable 0 [ 1799.651634][T12437] anon_cost 0 [ 1799.660932][T12437] file_cost 0 [ 1799.664627][T12437] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.9975,pid=12436,uid=0 [ 1799.737418][T12437] Memory cgroup out of memory: Killed process 12437 (syz.9.9975) total-vm:102384kB, anon-rss:1256kB, file-rss:22740kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 1800.358961][T12565] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10010'. [ 1800.380739][T12565] netlink: 24 bytes leftover after parsing attributes in process `syz.9.10010'. [ 1800.392181][T12565] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10010'. [ 1800.423539][T12565] netlink: 24 bytes leftover after parsing attributes in process `syz.9.10010'. [ 1806.067704][T12554] lo: left promiscuous mode [ 1806.089085][T12554] erspan0: left promiscuous mode [ 1806.134808][T12554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1806.145200][T12554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1806.203055][T12554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1806.215075][T12554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1806.233067][T12554] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1806.244847][T12554] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1806.262916][T12554] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1806.273923][T12554] veth1_vlan: left promiscuous mode [ 1806.284430][T12554] veth0_vlan: left promiscuous mode [ 1806.293175][T12554] veth0_vlan: entered promiscuous mode [ 1806.303087][T12554] veth1_vlan: entered promiscuous mode [ 1806.316753][T12554] veth1_macvtap: left promiscuous mode [ 1806.325112][T12554] veth0_macvtap: left promiscuous mode [ 1806.341339][T12554] veth0_macvtap: entered promiscuous mode [ 1806.362231][T12554] veth1_macvtap: entered promiscuous mode [ 1806.374311][T12554] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 1806.382083][T12554] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1806.396550][T12554] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1806.406359][T12554] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1806.415860][T12554] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1806.432270][T12554] geneve2: left promiscuous mode [ 1806.437278][T12554] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 1806.484097][T27466] bridge0: port 3(veth0) entered blocking state [ 1806.490630][T27466] bridge0: port 3(veth0) entered forwarding state [ 1806.554949][T27466] bridge0: port 1(bridge_slave_0) entered blocking state [ 1806.562231][T27466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1806.579689][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1806.602726][T27466] bridge0: port 2(bridge_slave_1) entered blocking state [ 1806.609990][T27466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1806.742542][T12579] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10014'. [ 1806.818440][T12579] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10014'. [ 1806.851606][T12579] nbd: socks must be embedded in a SOCK_ITEM attr [ 1807.243000][T12593] netlink: 'syz.8.10018': attribute type 9 has an invalid length. [ 1807.767676][T12618] netlink: 32 bytes leftover after parsing attributes in process `syz.8.10023'. [ 1808.120595][T27463] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 1808.172761][T27463] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 1808.260077][T27478] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 1808.319299][T27478] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 1808.776398][ T30] audit: type=1804 audit(1785936813.884:20): pid=12660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.10032" name="/newroot/366/cgroup.controllers" dev="tmpfs" ino=1891 res=1 errno=0 [ 1808.911022][ T30] audit: type=1800 audit(1785936813.884:21): pid=12660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.10032" name="cgroup.controllers" dev="tmpfs" ino=1891 res=0 errno=0 [ 1809.036095][T12670] batman_adv: batadv0: Adding interface: dummy0 [ 1809.072555][T12670] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1809.119791][T12670] batman_adv: batadv0: Interface activated: dummy0 [ 1809.191179][T12672] batadv0: mtu less than device minimum [ 1809.205391][T12672] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1809.219683][T12672] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1809.231532][T12672] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1809.243491][T12672] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1809.255335][T12672] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1809.256126][T12682] netlink: 20 bytes leftover after parsing attributes in process `syz.9.10038'. [ 1809.269652][T12672] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1809.286765][T12672] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1809.298562][T12672] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1809.339235][T12682] netlink: 40 bytes leftover after parsing attributes in process `syz.9.10038'. [ 1809.410300][T12682] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1809.427235][T12682] bond7 (unregistering): Released all slaves [ 1811.086376][T12758] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10058'. [ 1811.168060][T12760] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10058'. [ 1811.246022][T12758] xfrm0: entered promiscuous mode [ 1811.276813][T12769] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10062'. [ 1811.297797][T12774] netlink: 'syz.9.10058': attribute type 2 has an invalid length. [ 1811.323703][T12758] xfrm0: entered allmulticast mode [ 1811.340359][T12774] netlink: 156 bytes leftover after parsing attributes in process `syz.9.10058'. [ 1811.426560][T12756] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10058'. [ 1811.493353][T12761] dvmrp1: entered allmulticast mode [ 1811.667755][T12768] syzkaller0: entered promiscuous mode [ 1811.706240][T12768] syzkaller0: entered allmulticast mode [ 1811.958084][T12800] __nla_validate_parse: 1 callbacks suppressed [ 1811.958104][T12800] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10066'. [ 1811.976443][T12804] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10066'. [ 1812.202653][T12810] netlink: 'syz.7.10070': attribute type 2 has an invalid length. [ 1812.215006][T12810] netlink: 'syz.7.10070': attribute type 8 has an invalid length. [ 1812.226522][T12810] netlink: 132 bytes leftover after parsing attributes in process `syz.7.10070'. [ 1812.435112][T12808] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10068'. [ 1813.035684][T12838] netlink: 'syz.3.10077': attribute type 10 has an invalid length. [ 1813.078802][T12838] net_ratelimit: 12 callbacks suppressed [ 1813.078822][T12838] openvswitch: netlink: Flow key attr not present in new flow. [ 1813.165826][T12845] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10077'. [ 1813.479609][T12858] netlink: 24 bytes leftover after parsing attributes in process `syz.9.10082'. [ 1813.524201][T12858] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10082'. [ 1813.631913][T12858] bond7: entered promiscuous mode [ 1813.637236][T12858] bond7: entered allmulticast mode [ 1813.643641][T12858] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1813.963448][T12876] netlink: 64 bytes leftover after parsing attributes in process `syz.7.10091'. [ 1813.978351][T12877] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10090'. [ 1813.998465][T12877] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10090'. [ 1814.152984][T12877] team0 (unregistering): Port device team_slave_0 removed [ 1814.277419][T12877] team0 (unregistering): Port device team_slave_1 removed [ 1815.025822][T12922] bridge0: port 2(bridge_slave_1) entered disabled state [ 1815.133556][T12928] netlink: 'syz.8.10104': attribute type 1 has an invalid length. [ 1815.303165][T12928] bond6: entered promiscuous mode [ 1815.308734][T12928] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1815.842591][T12947] bond8: entered allmulticast mode [ 1815.859631][T12947] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1816.326874][T12969] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1816.877654][T12991] gretap0: entered promiscuous mode [ 1816.937453][T12997] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1817.039441][T12997] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1817.048237][T13005] __nla_validate_parse: 4 callbacks suppressed [ 1817.048300][T13005] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10126'. [ 1817.324038][T13005] vlan3: entered promiscuous mode [ 1817.352857][T13005] gretap0: entered promiscuous mode [ 1817.613033][T13020] tunl0: left promiscuous mode [ 1817.632373][T13020] erspan0: left promiscuous mode [ 1817.713157][T13028] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10132'. [ 1817.787270][T13032] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10130'. [ 1817.815419][T13032] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10130'. [ 1817.836623][T13032] netlink: 'syz.6.10130': attribute type 14 has an invalid length. [ 1817.845708][T13020] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 1817.853373][T13020] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1817.871034][T13032] netlink: 'syz.6.10130': attribute type 13 has an invalid length. [ 1817.926112][T13020] gretap1: left promiscuous mode [ 1817.976679][T13020] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1817.997471][T13020] geneve2: left promiscuous mode [ 1818.006170][T13020] bond2: left promiscuous mode [ 1818.022552][T13020] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1818.065607][T13020] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1818.079495][T13020] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1818.133646][T13020] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1818.179125][T13020] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1818.205136][T13020] vlan1: left promiscuous mode [ 1818.212273][T13020] bond7: left promiscuous mode [ 1818.228691][T13020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1818.238485][T13020] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1818.249106][T13020] vlan3: left promiscuous mode [ 1818.286623][T27463] bridge0: port 2(bridge_slave_1) entered blocking state [ 1818.293949][T27463] bridge0: port 2(bridge_slave_1) entered listening state [ 1818.380568][T27479] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1818.429725][T12186] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1818.450317][T12186] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1818.504422][T27466] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1818.533148][T13044] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1818.630361][T27466] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1818.692095][T27466] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1818.909498][T27466] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:c5:6d:1c [ 1818.925515][T27466] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1819.164197][T13068] xt_hashlimit: size too large, truncated to 1048576 [ 1819.266668][T13067] bridge0: port 1(bridge_slave_0) entered disabled state [ 1819.345972][T13067] bridge_slave_0 (unregistering): left allmulticast mode [ 1819.440820][T13067] bridge_slave_0 (unregistering): left promiscuous mode [ 1819.491614][T13086] nbd: couldn't find a device at index -1637177238 [ 1819.508795][T13067] bridge0: port 1(bridge_slave_0) entered disabled state [ 1819.563106][T13090] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10143'. [ 1819.610703][T12186] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:c5:6d:1c [ 1819.625193][T12186] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1819.836203][T13073] bond0: invalid NS target ff00:0:2f74:756e:: specified for addition [ 1819.868907][T13073] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 1820.251929][T27475] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:c5:6d:1c [ 1820.269003][T27475] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1820.448496][T13107] netlink: 96 bytes leftover after parsing attributes in process `syz.9.10149'. [ 1820.452373][T13110] netlink: 24 bytes leftover after parsing attributes in process `syz.7.10150'. [ 1820.478682][T13107] tap0: tun_chr_ioctl cmd 1074025676 [ 1820.487692][T13111] netlink: 'syz.8.10151': attribute type 23 has an invalid length. [ 1820.512231][T13107] tap0: owner set to 0 [ 1820.714596][T13113] netlink: 'syz.6.10152': attribute type 1 has an invalid length. [ 1820.747092][T13113] netlink: 'syz.6.10152': attribute type 7 has an invalid length. [ 1820.785747][T13113] netlink: 'syz.6.10152': attribute type 8 has an invalid length. [ 1820.838078][T13113] netlink: 208 bytes leftover after parsing attributes in process `syz.6.10152'. [ 1820.885758][T13113] NCSI netlink: No device for ifindex 65584 [ 1820.933107][T27461] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:c5:6d:1c [ 1820.947559][T27461] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1821.182868][T13128] netlink: 36 bytes leftover after parsing attributes in process `syz.8.10155'. [ 1821.291096][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1821.452390][T13142] netlink: 'syz.6.10160': attribute type 12 has an invalid length. [ 1821.598342][T27479] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:c5:6d:1c [ 1821.800238][T13157] netlink: 9 bytes leftover after parsing attributes in process `syz.6.10162'. [ 1821.848982][T13158] 0ªî{X¹¦: renamed from gretap0 [ 1821.878225][T13158] 0ªî{X¹¦: left promiscuous mode [ 1821.909076][T13158] 0ªî{X¹¦: entered allmulticast mode [ 1821.962595][T13157] 0ªî{X¹¦: entered promiscuous mode [ 1821.968442][T13157] 0ªî{X¹¦: left allmulticast mode [ 1822.106397][T13169] __nla_validate_parse: 1 callbacks suppressed [ 1822.106421][T13169] netlink: 64 bytes leftover after parsing attributes in process `syz.7.10167'. [ 1822.409396][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1822.463220][T13179] netlink: 'syz.7.10172': attribute type 1 has an invalid length. [ 1822.514104][T13179] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1822.625446][T13190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1822.791640][T13180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1822.901285][T13190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1823.180030][T13208] netlink: 'syz.7.10178': attribute type 10 has an invalid length. [ 1823.195918][T13208] 8021q: adding VLAN 0 to HW filter on device team0 [ 1823.235665][T13208] bond0: (slave team0): Enslaving as an active interface with an up link [ 1823.396474][ T5647] block nbd9: Receive control failed (result -32) [ 1823.404867][ T5639] block nbd9: Receive control failed (result -32) [ 1823.715102][T12184] net_ratelimit: 9 callbacks suppressed [ 1823.715125][T12184] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:c5:6d:1c [ 1823.735944][T12184] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1823.823318][T13227] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10184'. [ 1824.148855][T13241] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10189'. [ 1824.234441][T13244] xt_TCPMSS: Only works on TCP SYN packets [ 1824.277261][T27479] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:c5:6d:1c [ 1824.293062][T27479] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1824.328688][T13246] tipc: Enabling of bearer rejected, failed to enable media [ 1824.346431][T13251] netlink: 24 bytes leftover after parsing attributes in process `syz.9.10191'. [ 1824.474795][T13257] netlink: 32 bytes leftover after parsing attributes in process `syz.8.10194'. [ 1824.867597][T13277] ip_tables: iptables: counters copy to user failed while replacing table [ 1824.902935][T21110] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:c5:6d:1c [ 1824.917388][T21110] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1825.131260][ T1620] block nbd7: Possible stuck request ffff888027d10000: control (read@0,1024B). Runtime 90 seconds [ 1825.143396][ T1632] block nbd8: Possible stuck request ffff888027d8e000: control (read@0,4096B). Runtime 90 seconds [ 1825.143406][ T1620] block nbd7: Possible stuck request ffff888027d101c0: control (read@1024,1024B). Runtime 90 seconds [ 1825.143440][ T1620] block nbd7: Possible stuck request ffff888027d10380: control (read@2048,1024B). Runtime 90 seconds [ 1825.178251][ T1620] block nbd7: Possible stuck request ffff888027d10540: control (read@3072,1024B). Runtime 90 seconds [ 1825.266394][T13284] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10202'. [ 1825.275767][T13284] netlink: 14 bytes leftover after parsing attributes in process `syz.9.10202'. [ 1825.386761][T13291] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10205'. [ 1825.540838][T21110] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:c5:6d:1c [ 1825.555809][T21110] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1825.586989][T13296] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10207'. [ 1825.601387][T13296] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10207'. [ 1825.947934][T13310] netlink: 'syz.3.10211': attribute type 5 has an invalid length. [ 1826.112983][T27461] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:c5:6d:1c [ 1827.306457][T13361] syzkaller1: entered promiscuous mode [ 1827.330229][T13361] syzkaller1: entered allmulticast mode [ 1827.432396][T13376] netlink: 'syz.3.10233': attribute type 1 has an invalid length. [ 1827.492534][T13375] syzkaller1: entered promiscuous mode [ 1827.498503][T13380] netlink: 'syz.3.10233': attribute type 1 has an invalid length. [ 1827.539606][T13375] syzkaller1: entered allmulticast mode [ 1828.041880][T13388] __nla_validate_parse: 8 callbacks suppressed [ 1828.041902][T13388] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10236'. [ 1828.070890][T13390] siw: device registration error -23 [ 1828.125028][T13398] netlink: 'syz.6.10236': attribute type 1 has an invalid length. [ 1828.208800][T13401] netlink: 64 bytes leftover after parsing attributes in process `syz.8.10239'. [ 1828.553237][T13411] netlink: 24 bytes leftover after parsing attributes in process `syz.8.10242'. [ 1828.563777][T13412] netlink: 272 bytes leftover after parsing attributes in process `syz.6.10243'. [ 1828.596680][T13407] macvtap3: entered promiscuous mode [ 1828.630624][T13407] macvtap3: entered allmulticast mode [ 1828.657398][T13407] veth1_vlan: entered allmulticast mode [ 1828.740818][T21110] net_ratelimit: 9 callbacks suppressed [ 1828.740838][T21110] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:c5:6d:1c [ 1828.764116][T21110] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1828.996230][T13426] netlink: 'syz.6.10245': attribute type 13 has an invalid length. [ 1829.053629][T13426] veth1_macvtap: left promiscuous mode [ 1829.095898][T13426] macsec0: entered allmulticast mode [ 1829.247928][T13442] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10249'. [ 1829.422326][T29352] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:c5:6d:1c [ 1829.437064][T29352] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1829.653368][T13453] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10252'. [ 1829.983618][T13466] team0: Port device syz_tun removed [ 1830.005341][T13466] bridge_slave_0: left allmulticast mode [ 1830.036609][T13466] bridge_slave_0: left promiscuous mode [ 1830.070367][T13466] bridge0: port 1(bridge_slave_0) entered disabled state [ 1830.083638][T27463] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:c5:6d:1c [ 1830.099685][T27463] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1830.123499][T13479] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10260'. [ 1830.167884][T13466] bridge_slave_1: left allmulticast mode [ 1830.198128][T13466] bridge_slave_1: left promiscuous mode [ 1830.215034][T13466] bridge0: port 2(bridge_slave_1) entered disabled state [ 1830.249617][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1830.291104][T13466] bond0: (slave bond_slave_0): Releasing backup interface [ 1830.332434][T13466] bond0: (slave bond_slave_1): Releasing backup interface [ 1830.375688][T13466] team0: Port device team_slave_0 removed [ 1830.386064][T13466] team0: Port device team_slave_1 removed [ 1830.392688][T13466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1830.403397][T13466] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1830.424576][T13471] netlink: 'syz.3.10258': attribute type 4 has an invalid length. [ 1830.735422][T27475] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:c5:6d:1c [ 1830.750064][T27475] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1830.830613][T13505] xt_nat: multiple ranges no longer supported [ 1831.088611][T13511] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10269'. [ 1831.295320][T29352] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:c5:6d:1c [ 1831.825053][T13537] netlink: 'syz.6.10276': attribute type 22 has an invalid length. [ 1831.844372][T13537] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10276'. [ 1832.033838][T13537] netlink: 'syz.6.10276': attribute type 22 has an invalid length. [ 1832.052722][T13537] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10276'. [ 1832.277983][T13557] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 1832.575268][T13566] IPVS: Error connecting to the multicast addr [ 1832.721039][T13577] netlink: 'syz.7.10288': attribute type 25 has an invalid length. [ 1833.274511][T13591] __nla_validate_parse: 1 callbacks suppressed [ 1833.274545][T13591] netlink: 28 bytes leftover after parsing attributes in process `syz.9.10293'. [ 1833.445740][T13600] netlink: 96 bytes leftover after parsing attributes in process `syz.8.10297'. [ 1833.459979][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 1833.481957][T13600] 8021q: VLANs not supported on gre0 [ 1833.797051][T13620] netlink: 56 bytes leftover after parsing attributes in process `syz.6.10304'. [ 1833.814704][T13619] net_ratelimit: 11 callbacks suppressed [ 1833.814724][T13619] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1833.936337][T27466] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:c5:6d:1c [ 1833.952324][T27466] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1834.188105][T13633] netlink: 'syz.3.10309': attribute type 21 has an invalid length. [ 1834.202348][T13634] netlink: 'syz.7.10308': attribute type 32 has an invalid length. [ 1834.234108][T13634] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10308'. [ 1834.261242][T13633] netlink: 156 bytes leftover after parsing attributes in process `syz.3.10309'. [ 1834.295645][T13637] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 1834.439735][T13651] netlink: 'syz.6.10310': attribute type 1 has an invalid length. [ 1834.457978][T13634] bond6: option coupled_control: invalid value (192) [ 1834.475979][T13634] bond6 (unregistering): Released all slaves [ 1834.496465][T29353] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:c5:6d:1c [ 1834.512724][T29353] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1834.546549][T13654] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10312'. [ 1834.762048][T13660] netlink: 'syz.6.10310': attribute type 10 has an invalid length. [ 1834.798438][T13660] netlink: 40 bytes leftover after parsing attributes in process `syz.6.10310'. [ 1834.821836][T13651] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1834.907505][T13667] netlink: 108 bytes leftover after parsing attributes in process `syz.7.10315'. [ 1834.953053][T13669] netlink: 20 bytes leftover after parsing attributes in process `syz.9.10316'. [ 1835.150468][T12184] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:c5:6d:1c [ 1835.166756][T12184] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1835.251122][T13683] netlink: 'syz.6.10319': attribute type 1 has an invalid length. [ 1835.318644][T13678] bond6: option packets_per_slave: invalid value (18446744073709551615) [ 1835.328073][T13678] bond6: option packets_per_slave: allowed values 0 - 65535 [ 1835.343539][T13678] bond6 (unregistering): Released all slaves [ 1835.383770][T13691] netlink: 20 bytes leftover after parsing attributes in process `syz.8.10321'. [ 1835.394856][T13691] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 1835.734928][T27460] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:c5:6d:1c [ 1835.837517][T13683] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1835.970903][T13711] netlink: 'syz.3.10324': attribute type 1 has an invalid length. [ 1836.002049][T13711] netlink: 'syz.3.10324': attribute type 1 has an invalid length. [ 1837.308888][T13766] netlink: 'syz.6.10344': attribute type 1 has an invalid length. [ 1837.359735][T13761] bond9: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1837.378335][T13761] bond9 (unregistering): Released all slaves [ 1837.754294][T13766] bond14: entered promiscuous mode [ 1837.800278][T13766] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1837.882365][T13779] bond14: (slave bridge6): making interface the new active one [ 1837.895121][T13779] bridge6: entered promiscuous mode [ 1837.903992][T13779] bond14: (slave bridge6): Enslaving as an active interface with an up link [ 1838.471340][T13813] syzkaller1: entered promiscuous mode [ 1838.483900][T13813] syzkaller1: entered allmulticast mode [ 1838.495432][T13813] __nla_validate_parse: 7 callbacks suppressed [ 1838.495453][T13813] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10357'. [ 1838.632474][T13817] netlink: 20 bytes leftover after parsing attributes in process `syz.9.10359'. [ 1838.847468][T13825] netlink: 'syz.6.10360': attribute type 1 has an invalid length. [ 1838.890764][T27463] net_ratelimit: 11 callbacks suppressed [ 1838.890788][T27463] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:c5:6d:1c [ 1838.912617][T27463] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1839.016124][T13825] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1839.122471][T13831] bond15: (slave veth7): Enslaving as a backup interface with a down link [ 1839.161998][T13836] netlink: 'syz.6.10360': attribute type 10 has an invalid length. [ 1839.173481][T13836] netlink: 40 bytes leftover after parsing attributes in process `syz.6.10360'. [ 1839.227462][T13832] bond6 (unregistering): Released all slaves [ 1839.403927][T13840] ksmbd: Unknown IPC event: 1, ignore. [ 1839.593349][T12184] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:c5:6d:1c [ 1839.609053][T12184] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1839.907278][T13859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10371'. [ 1840.074402][T13879] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10375'. [ 1840.270153][T27466] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:c5:6d:1c [ 1840.285022][T27466] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1840.317124][T13883] xt_hashlimit: size too large, truncated to 1048576 [ 1840.565203][T13890] netlink: 64 bytes leftover after parsing attributes in process `syz.3.10378'. [ 1840.894339][T13897] netlink: 'syz.7.10381': attribute type 1 has an invalid length. [ 1840.902767][T21980] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:c5:6d:1c [ 1840.918564][T21980] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1840.935949][T13898] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10380'. [ 1840.946736][T13898] netlink: 'syz.8.10380': attribute type 29 has an invalid length. [ 1840.956777][T13898] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10380'. [ 1840.967323][T13898] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10380'. [ 1840.977834][T13898] netlink: 'syz.8.10380': attribute type 29 has an invalid length. [ 1841.014112][T13898] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10380'. [ 1841.055327][T13902] tipc: MTU too low for tipc bearer [ 1841.513933][T27463] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:c5:6d:1c [ 1841.528512][T27463] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1841.556874][T13919] ip6gre4: entered promiscuous mode [ 1841.595787][T13816] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1841.738783][T13923] xt_bpf: check failed: parse error [ 1842.084728][T13937] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 1842.168656][T13944] netlink: 'syz.6.10393': attribute type 2 has an invalid length. [ 1842.405009][T13949] mac80211_hwsim hwsim74 wlan0: left allmulticast mode [ 1842.420519][T13951] netlink: 'syz.7.10395': attribute type 32 has an invalid length. [ 1842.427627][T13949] ipvlan2: left allmulticast mode [ 1842.438237][T13949] batadv_slave_1: left allmulticast mode [ 1842.445259][T13949] macvtap1: left allmulticast mode [ 1842.452278][T13949] macvtap2: left allmulticast mode [ 1842.458401][T13949] bond2: left allmulticast mode [ 1842.470860][T13949] bond4: left allmulticast mode [ 1842.478365][T13949] xfrm0: left allmulticast mode [ 1842.484613][T13949] bond7: left allmulticast mode [ 1842.492871][T13949] bond8: left allmulticast mode [ 1842.501920][T13949] macvtap3: left allmulticast mode [ 1842.508962][T13949] veth1_vlan: left allmulticast mode [ 1842.573423][T13952] can: request_module (can-proto-5) failed. [ 1842.616877][T13951] bond6: Setting coupled_control to off (0) [ 1844.179754][T27461] net_ratelimit: 8 callbacks suppressed [ 1844.179778][T27461] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:c5:6d:1c [ 1844.200912][T27461] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1844.734371][T21980] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:c5:6d:1c [ 1844.749838][T21980] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1845.290266][T27463] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:c5:6d:1c [ 1845.305135][T27463] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1845.830729][T27466] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:c5:6d:1c [ 1845.845427][T27466] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1846.249479][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1846.371976][T27466] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:c5:6d:1c [ 1846.386540][T27466] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1848.809452][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1848.817710][ C1] bridge0: topology change detected, propagating [ 1849.469498][T27463] net_ratelimit: 10 callbacks suppressed [ 1849.469526][T27463] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:c5:6d:1c [ 1849.491334][T27463] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1850.010451][T27461] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:c5:6d:1c [ 1850.024934][T27461] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1850.549856][T27461] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:c5:6d:1c [ 1850.564503][T27461] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1850.729890][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1851.091228][T21980] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:c5:6d:1c [ 1851.106195][T21980] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1851.631132][T27460] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:c5:6d:1c [ 1851.646389][T27460] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1854.731928][T27463] net_ratelimit: 10 callbacks suppressed [ 1854.731951][T27463] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:c5:6d:1c [ 1854.753525][T27463] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1855.213953][ T1632] block nbd8: Possible stuck request ffff888027d8e000: control (read@0,4096B). Runtime 120 seconds [ 1855.213977][ T1620] block nbd7: Possible stuck request ffff888027d10000: control (read@0,1024B). Runtime 120 seconds [ 1855.239445][ T1620] block nbd7: Possible stuck request ffff888027d101c0: control (read@1024,1024B). Runtime 120 seconds [ 1855.252372][ T1620] block nbd7: Possible stuck request ffff888027d10380: control (read@2048,1024B). Runtime 120 seconds [ 1855.263912][ T1620] block nbd7: Possible stuck request ffff888027d10540: control (read@3072,1024B). Runtime 120 seconds [ 1855.291404][T27466] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:c5:6d:1c [ 1855.305840][T27466] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1855.833143][T27461] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:c5:6d:1c [ 1855.847888][T27461] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1856.371916][T21980] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:c5:6d:1c [ 1856.386763][T21980] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1856.910164][T27463] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:c5:6d:1c [ 1856.924672][T27463] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1860.012565][T27466] net_ratelimit: 10 callbacks suppressed [ 1860.012589][T27466] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:c5:6d:1c [ 1860.032855][T27466] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1860.560123][T27463] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:c5:6d:1c [ 1860.575086][T27463] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1861.099543][T21980] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:c5:6d:1c [ 1861.114919][T21980] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1861.640745][T27463] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:c5:6d:1c [ 1861.656269][T27463] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1862.182128][T27479] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:c5:6d:1c [ 1862.198082][T27479] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1864.091929][T13969] sctp: [Deprecated]: syz.6.10399 (pid 13969) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1864.091929][T13969] Use struct sctp_sack_info instead [ 1864.121120][T13970] IPVS: Unknown mcast interface: vcan0 [ 1864.257826][T13969] geneve4: entered promiscuous mode [ 1864.711743][T13999] xt_bpf: check failed: parse error [ 1864.955569][T14009] __nla_validate_parse: 4 callbacks suppressed [ 1864.955593][T14009] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10409'. [ 1864.979811][T14008] netlink: 'syz.3.10411': attribute type 23 has an invalid length. [ 1865.218241][T14020] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10413'. [ 1865.269605][T27466] net_ratelimit: 10 callbacks suppressed [ 1865.269630][T27466] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:c5:6d:1c [ 1865.291938][T27466] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1865.309944][T14024] netlink: 72 bytes leftover after parsing attributes in process `syz.3.10415'. [ 1865.500306][T14024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10415'. [ 1865.518681][T14032] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10416'. [ 1865.526255][T14024] unsupported nla_type 216 [ 1865.584315][T14032] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10416'. [ 1865.921532][T29353] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:c5:6d:1c [ 1865.936422][T29353] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1866.051604][T14049] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1866.581705][T29352] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:c5:6d:1c [ 1866.596248][T29352] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1866.865942][T14069] netlink: 'syz.8.10426': attribute type 1 has an invalid length. [ 1866.929362][T14070] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10426'. [ 1866.978845][T14072] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10428'. [ 1866.987453][T14069] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10426'. [ 1867.032243][T14070] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10426'. [ 1867.233413][T29352] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:c5:6d:1c [ 1867.249443][T29352] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1867.337751][T14090] netlink: 'syz.3.10434': attribute type 14 has an invalid length. [ 1867.715337][T14104] netlink: 'syz.6.10441': attribute type 10 has an invalid length. [ 1867.728444][T14104] macsec0: left allmulticast mode [ 1867.763754][T14104] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 1867.872060][T27478] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:c5:6d:1c [ 1868.255915][T14128] : renamed from bond0 [ 1868.397110][T14132] syzkaller1: entered promiscuous mode [ 1868.406052][T14132] syzkaller1: entered allmulticast mode [ 1868.478369][T14133] netlink: 'syz.6.10446': attribute type 1 has an invalid length. [ 1868.512827][T14135] team0: entered promiscuous mode [ 1868.866830][T14133] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1869.008492][T14131] bond16: (slave gretap0): making interface the new active one [ 1869.078858][T14131] bond16: (slave gretap0): Enslaving as an active interface with an up link [ 1869.375988][T14160] netlink: 'syz.3.10454': attribute type 1 has an invalid length. [ 1869.446285][T14160] netlink: 'syz.3.10454': attribute type 1 has an invalid length. [ 1869.880076][T14183] bond9: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1869.902668][T14183] bond9 (unregistering): Released all slaves [ 1870.208682][T14190] bridge0: port 2(gretap0) entered blocking state [ 1870.245691][T14190] bridge0: port 2(gretap0) entered disabled state [ 1870.288626][T14190] gretap0: entered promiscuous mode [ 1870.335845][T14174] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1870.540570][T21110] net_ratelimit: 9 callbacks suppressed [ 1870.540591][T21110] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:c5:6d:1c [ 1870.560831][T21110] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1870.941404][T14186] __nla_validate_parse: 11 callbacks suppressed [ 1870.941427][T14186] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10460'. [ 1871.045932][T14218] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10466'. [ 1871.176480][T29352] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:c5:6d:1c [ 1871.191284][T29352] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1871.285152][T14224] FAULT_INJECTION: forcing a failure. [ 1871.285152][T14224] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1871.372568][T14224] CPU: 1 UID: 0 PID: 14224 Comm: syz.7.10469 Not tainted syzkaller #0 PREEMPT(full) [ 1871.372599][T14224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1871.372614][T14224] Call Trace: [ 1871.372624][T14224] [ 1871.372635][T14224] dump_stack_lvl+0xe8/0x150 [ 1871.372681][T14224] should_fail_ex+0x40c/0x560 [ 1871.372719][T14224] _copy_from_user+0x2d/0xb0 [ 1871.372744][T14224] smc_setsockopt+0x3c0/0xb00 [ 1871.372877][T14224] ? __pfx_smc_setsockopt+0x10/0x10 [ 1871.372908][T14224] ? aa_sock_opt_perm+0xff/0x1a0 [ 1871.372940][T14224] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1871.372965][T14224] ? __pfx_smc_setsockopt+0x10/0x10 [ 1871.372993][T14224] do_sock_setsockopt+0x17c/0x1b0 [ 1871.373026][T14224] __x64_sys_setsockopt+0x13d/0x1b0 [ 1871.373054][T14224] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1871.373080][T14224] do_syscall_64+0x174/0x580 [ 1871.373107][T14224] ? trace_irq_disable+0x3b/0x140 [ 1871.373138][T14224] ? clear_bhb_loop+0x40/0x90 [ 1871.373170][T14224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1871.373192][T14224] RIP: 0033:0x7f25e699e0d9 [ 1871.373212][T14224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1871.373231][T14224] RSP: 002b:00007f25e78f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1871.373255][T14224] RAX: ffffffffffffffda RBX: 00007f25e6c26090 RCX: 00007f25e699e0d9 [ 1871.373270][T14224] RDX: 2000000000000022 RSI: 0000000000000006 RDI: 0000000000000003 [ 1871.373285][T14224] RBP: 00007f25e78f8090 R08: 0000000000000004 R09: 0000000000000000 [ 1871.373299][T14224] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 1871.373313][T14224] R13: 00007f25e6c26128 R14: 00007f25e6c26090 R15: 00007ffccbff0338 [ 1871.373349][T14224] [ 1871.656981][T14229] veth1: entered promiscuous mode [ 1871.662535][T14229] veth1: entered allmulticast mode [ 1871.686904][T27463] bridge0: port 3(veth0) entered disabled state [ 1871.755473][T21110] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:c5:6d:1c [ 1871.771823][T21110] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1871.957580][T14235] netlink: 41 bytes leftover after parsing attributes in process `syz.8.10473'. [ 1871.967204][T14235] netlink: 128 bytes leftover after parsing attributes in process `syz.8.10473'. [ 1871.977083][T14235] netlink: 41 bytes leftover after parsing attributes in process `syz.8.10473'. [ 1872.000189][T14234] netlink: 24 bytes leftover after parsing attributes in process `syz.8.10473'. [ 1872.402077][T12186] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:c5:6d:1c [ 1872.417080][T12186] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1872.647358][T14256] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10481'. [ 1872.711289][T14265] netlink: 'syz.7.10482': attribute type 3 has an invalid length. [ 1872.808874][T14262] bond10: entered promiscuous mode [ 1872.842555][T14262] bond10: entered allmulticast mode [ 1872.848824][T14262] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1872.883081][T14261] macsec2: entered promiscuous mode [ 1872.980066][T27478] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:c5:6d:1c [ 1872.994639][T27478] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1873.013542][T14272] FAULT_INJECTION: forcing a failure. [ 1873.013542][T14272] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1873.030366][T14272] CPU: 0 UID: 0 PID: 14272 Comm: syz.3.10485 Not tainted syzkaller #0 PREEMPT(full) [ 1873.030397][T14272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1873.030410][T14272] Call Trace: [ 1873.030420][T14272] [ 1873.030429][T14272] dump_stack_lvl+0xe8/0x150 [ 1873.030470][T14272] should_fail_ex+0x40c/0x560 [ 1873.030506][T14272] _copy_to_user+0x31/0xb0 [ 1873.030532][T14272] simple_read_from_buffer+0xe1/0x170 [ 1873.030571][T14272] proc_fail_nth_read+0x1bb/0x230 [ 1873.030636][T14272] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1873.030673][T14272] ? rw_verify_area+0x24a/0x4c0 [ 1873.030698][T14272] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1873.030729][T14272] vfs_read+0x213/0xa80 [ 1873.030758][T14272] ? __pfx___mutex_lock+0x10/0x10 [ 1873.030796][T14272] ? __pfx_vfs_read+0x10/0x10 [ 1873.030820][T14272] ? __fget_files+0x2a/0x420 [ 1873.030857][T14272] ? __fget_files+0x3a2/0x420 [ 1873.030886][T14272] ? __fget_files+0x2a/0x420 [ 1873.030927][T14272] ksys_read+0x150/0x270 [ 1873.030951][T14272] ? __pfx_ksys_read+0x10/0x10 [ 1873.030987][T14272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1873.031012][T14272] do_syscall_64+0x174/0x580 [ 1873.031039][T14272] ? trace_irq_disable+0x3b/0x140 [ 1873.031069][T14272] ? clear_bhb_loop+0x40/0x90 [ 1873.031097][T14272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1873.031120][T14272] RIP: 0033:0x7f5e95f5e90e [ 1873.031140][T14272] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1873.031159][T14272] RSP: 002b:00007f5e96dfafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1873.031183][T14272] RAX: ffffffffffffffda RBX: 00007f5e96dfb6c0 RCX: 00007f5e95f5e90e [ 1873.031200][T14272] RDX: 000000000000000f RSI: 00007f5e96dfb0a0 RDI: 0000000000000004 [ 1873.031214][T14272] RBP: 00007f5e96dfb090 R08: 0000000000000000 R09: 0000000000000000 [ 1873.031229][T14272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1873.031242][T14272] R13: 00007f5e96226038 R14: 00007f5e96225fa0 R15: 00007ffd9d9c35a8 [ 1873.031280][T14272] [ 1873.348959][T14270] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10484'. [ 1873.690756][ T5639] Bluetooth: hci3: command 0x0405 tx timeout [ 1873.865454][T14295] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10492'. [ 1874.033890][T14304] netlink: 36 bytes leftover after parsing attributes in process `syz.8.10495'. [ 1874.624458][T14341] vlan0: entered promiscuous mode [ 1875.508430][T14381] syzkaller0: create flow: hash 1303415448 index 2 [ 1875.638392][T14388] netlink: 'syz.3.10519': attribute type 83 has an invalid length. [ 1875.644838][T14390] netlink: 'syz.6.10524': attribute type 1 has an invalid length. [ 1875.902588][T27478] syzkaller0: tun_net_xmit 76 [ 1875.935464][T27460] net_ratelimit: 8 callbacks suppressed [ 1875.935488][T27460] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:c5:6d:1c [ 1875.937686][T27478] syzkaller0: tun_net_xmit 48 [ 1875.944723][T27460] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1875.957757][ T3493] syzkaller0: tun_net_xmit 76 [ 1876.096860][T14375] syzkaller0: delete flow: hash 1303415448 index 2 [ 1876.121013][T14401] netlink: 'syz.8.10527': attribute type 1 has an invalid length. [ 1876.217330][T14403] SET target dimension over the limit! [ 1876.343792][T14413] netlink: 'syz.7.10530': attribute type 2 has an invalid length. [ 1876.377701][T14413] netlink: 'syz.7.10530': attribute type 2 has an invalid length. [ 1876.406053][T14413] netlink: 'syz.7.10530': attribute type 2 has an invalid length. [ 1876.511806][T27479] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:c5:6d:1c [ 1876.526739][T27479] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1876.547737][T14425] __nla_validate_parse: 14 callbacks suppressed [ 1876.547759][T14425] netlink: 16 bytes leftover after parsing attributes in process `syz.8.10527'. [ 1877.201481][T29352] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:c5:6d:1c [ 1877.216312][T29352] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1877.773283][T27479] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:c5:6d:1c [ 1877.788190][T27479] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1878.249936][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1878.312605][T12733] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:c5:6d:1c [ 1878.327992][T12733] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1880.960145][T21980] net_ratelimit: 8 callbacks suppressed [ 1880.960168][T21980] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:c5:6d:1c [ 1880.980185][T21980] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1881.517737][T27460] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:c5:6d:1c [ 1881.533183][T27460] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1882.108107][T12186] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:c5:6d:1c [ 1882.123110][T12186] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1882.561036][T14412] ipvlan3: entered allmulticast mode [ 1882.566449][T14412] team_slave_0: entered allmulticast mode [ 1882.590467][T14427] netlink: 16 bytes leftover after parsing attributes in process `syz.8.10527'. [ 1882.678060][T21980] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:c5:6d:1c [ 1882.692741][T21980] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1882.934353][T14450] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 1883.112421][T14454] netlink: 'syz.9.10538': attribute type 1 has an invalid length. [ 1883.287045][T14469] --map-set only usable from mangle table [ 1883.334705][T21980] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:c5:6d:1c [ 1883.685994][T14478] batman_adv: batadv0: Interface deactivated: dummy0 [ 1883.717681][T14478] batman_adv: batadv0: Removing interface: dummy0 [ 1883.787248][T14478] bridge_slave_1: left allmulticast mode [ 1883.813966][T14478] bridge_slave_1: left promiscuous mode [ 1883.820506][T14478] bridge0: port 2(bridge_slave_1) entered disabled state [ 1883.857848][T14478] bond0: (slave bond_slave_0): Releasing backup interface [ 1883.948657][T14478] bond0: (slave bond_slave_1): Releasing backup interface [ 1884.085799][T14493] netlink: 40 bytes leftover after parsing attributes in process `syz.6.10547'. [ 1884.087616][T14460] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 1884.361284][T14501] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10550'. [ 1884.797074][T14526] mac80211_hwsim hwsim79 syzkaller0: left promiscuous mode [ 1884.834799][T14526] mac80211_hwsim hwsim79 syzkaller0: left allmulticast mode [ 1884.866163][T14526] tipc: Resetting bearer [ 1885.173771][T14539] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10560'. [ 1885.211328][T14539] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10560'. [ 1885.298926][ T1632] block nbd8: Possible stuck request ffff888027d8e000: control (read@0,4096B). Runtime 150 seconds [ 1885.309674][ T1620] block nbd7: Possible stuck request ffff888027d10000: control (read@0,1024B). Runtime 150 seconds [ 1885.310013][ T1620] block nbd7: Possible stuck request ffff888027d101c0: control (read@1024,1024B). Runtime 150 seconds [ 1885.310048][ T1620] block nbd7: Possible stuck request ffff888027d10380: control (read@2048,1024B). Runtime 150 seconds [ 1885.310079][ T1620] block nbd7: Possible stuck request ffff888027d10540: control (read@3072,1024B). Runtime 150 seconds [ 1885.366552][T14545] set match dimension is over the limit! [ 1886.062938][T14573] netlink: 16 bytes leftover after parsing attributes in process `syz.9.10569'. [ 1886.561907][T14591] netlink: 81 bytes leftover after parsing attributes in process `syz.8.10573'. [ 1887.526541][T14632] netlink: 140 bytes leftover after parsing attributes in process `syz.9.10589'. [ 1887.548307][T14630] netlink: 'syz.8.10591': attribute type 10 has an invalid length. [ 1887.561610][T14630] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10591'. [ 1887.633933][T14638] net_ratelimit: 2 callbacks suppressed [ 1887.633957][T14638] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1887.660946][T14638] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10593'. [ 1887.791289][T14642] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10594'. [ 1887.822673][T14642] netlink: 20 bytes leftover after parsing attributes in process `syz.9.10594'. [ 1887.915903][T14642] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10594'. [ 1887.932309][T27463] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1887.968532][T14642] netlink: 20 bytes leftover after parsing attributes in process `syz.9.10594'. [ 1887.988432][T27463] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1888.047130][T27463] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1888.161298][T27479] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1888.814160][T14677] netlink: 'syz.8.10605': attribute type 3 has an invalid length. [ 1888.834981][T14677] netlink: 3 bytes leftover after parsing attributes in process `syz.8.10605'. [ 1888.913064][T14684] netlink: 52 bytes leftover after parsing attributes in process `syz.9.10606'. [ 1888.986468][T14689] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10606'. [ 1889.031945][T14688] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10607'. [ 1889.194956][T14694] netlink: 104 bytes leftover after parsing attributes in process `syz.9.10610'. [ 1889.257104][T14688] bond17: option xmit_hash_policy: invalid value (64) [ 1889.301128][T14688] bond17 (unregistering): Released all slaves [ 1889.320699][T14697] nftables ruleset with unbound chain [ 1889.555961][T14701] bridge_slave_0: default FDB implementation only supports local addresses [ 1889.854845][T14717] tipc: Enabling of bearer rejected, already enabled [ 1889.888941][T14717] mac80211_hwsim hwsim79 syzkaller0: entered promiscuous mode [ 1889.918349][T14717] mac80211_hwsim hwsim79 syzkaller0: entered allmulticast mode [ 1889.960576][T14717] tipc: Resetting bearer [ 1890.262975][T14734] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1891.415610][T14787] ipt_ECN: cannot use operation on non-tcp rule [ 1891.862254][T14801] netlink: 'syz.3.10641': attribute type 1 has an invalid length. [ 1891.952246][T14801] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1891.972362][T14804] netlink: 'syz.6.10642': attribute type 58 has an invalid length. [ 1892.056779][T14805] netlink: 'syz.3.10641': attribute type 10 has an invalid length. [ 1892.103736][T14801] bond11: (slave dummy0): Enslaving as a backup interface with an up link [ 1892.121181][T27463] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1892.128852][T14805] dummy0: entered promiscuous mode [ 1892.218966][T14805] bond11: (slave dummy0): Removing an active aggregator [ 1892.238176][T27463] bond11: (slave dummy0): link status up again after 0 ms [ 1892.258775][T14805] bond11: (slave dummy0): Releasing backup interface [ 1892.771455][T14811] __nla_validate_parse: 8 callbacks suppressed [ 1892.771478][T14811] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10643'. [ 1892.954237][T14838] netlink: 'syz.3.10651': attribute type 1 has an invalid length. [ 1893.011044][T14847] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10652'. [ 1893.021129][T14853] netlink: NAT attribute has 5 unknown bytes [ 1893.031561][T14853] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1893.057031][T14853] netlink: NAT attribute has 5 unknown bytes [ 1893.087760][T14853] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1893.133798][T14853] netlink: NAT attribute has 5 unknown bytes [ 1893.184063][T14838] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1893.214726][T14853] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1893.251737][T14853] netlink: NAT attribute has 5 unknown bytes [ 1893.267461][T14853] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1893.277488][T14853] netlink: NAT attribute has 5 unknown bytes [ 1893.285537][T14853] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1893.368443][T14842] bond12: (slave geneve4): making interface the new active one [ 1893.439598][T14842] bond12: (slave geneve4): Enslaving as an active interface with an up link [ 1893.595266][T14867] xt_socket: unknown flags 0x50 [ 1893.620030][T14866] xt_socket: unknown flags 0x50 [ 1893.667802][T14867] netlink: 196 bytes leftover after parsing attributes in process `syz.8.10657'. [ 1893.737904][T14870] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10658'. [ 1894.087107][T14884] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10663'. [ 1894.114171][T14887] netlink: 'syz.3.10664': attribute type 1 has an invalid length. [ 1894.134556][T14884] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10663'. [ 1894.428547][T14884] macvtap4: entered promiscuous mode [ 1894.443198][T14884] vlan0: entered promiscuous mode [ 1894.448823][T14884] macvtap4: entered allmulticast mode [ 1894.464932][T14884] vlan0: entered allmulticast mode [ 1894.497556][T14884] veth0_vlan: entered allmulticast mode [ 1894.553437][T14887] macvtap1: entered allmulticast mode [ 1894.613110][T14891] macvtap2: entered allmulticast mode [ 1894.673527][T14903] netlink: 199784 bytes leftover after parsing attributes in process `syz.9.10670'. [ 1894.683533][T14903] netlink: 'syz.9.10670': attribute type 1 has an invalid length. [ 1894.694786][T14895] bond13: (slave bridge8): making interface the new active one [ 1894.717952][T14895] bond13: (slave bridge8): Enslaving as an active interface with an up link [ 1895.368986][T14935] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10679'. [ 1895.440945][T14942] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10681'. [ 1895.487910][T14942] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10681'. [ 1896.411474][T14974] netlink: 'syz.6.10690': attribute type 1 has an invalid length. [ 1897.246378][T15013] ip6erspan1: entered allmulticast mode [ 1897.642000][T15000] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1898.530618][T15041] netlink: 'syz.6.10706': attribute type 7 has an invalid length. [ 1898.569866][T15041] netlink: 'syz.6.10706': attribute type 8 has an invalid length. [ 1898.983229][T15054] net_ratelimit: 201 callbacks suppressed [ 1898.983253][T15054] openvswitch: netlink: nsh attr 1 has unexpected len 16 expected 8 [ 1899.102905][T15052] veth1_macvtap: entered promiscuous mode [ 1899.229752][T15052] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 1899.278521][T27460] bridge0: port 3(veth0) entered blocking state [ 1899.285001][T27460] bridge0: port 3(veth0) entered forwarding state [ 1899.570404][T15062] netlink: 'syz.8.10715': attribute type 83 has an invalid length. [ 1899.593675][T15068] __nla_validate_parse: 7 callbacks suppressed [ 1899.593694][T15068] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10718'. [ 1899.639831][T15069] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10718'. [ 1899.887911][T15077] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1899.922975][T15079] netlink: 9 bytes leftover after parsing attributes in process `syz.3.10721'. [ 1899.935723][T15077] sit0: entered promiscuous mode [ 1899.956763][T15077] sit0: left allmulticast mode [ 1899.971907][T15077] netlink: 'syz.8.10720': attribute type 1 has an invalid length. [ 1899.994264][T15077] netlink: 1 bytes leftover after parsing attributes in process `syz.8.10720'. [ 1900.030893][T15079] 0·: renamed from hsr0 (while UP) [ 1900.065068][T15079] 0·: entered allmulticast mode [ 1900.080293][T15079] hsr_slave_0: entered allmulticast mode [ 1900.107392][T15079] hsr_slave_1: entered allmulticast mode [ 1900.142577][T15079] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 1900.215821][T15081] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10722'. [ 1900.216169][T15079] netlink: 9 bytes leftover after parsing attributes in process `syz.3.10721'. [ 1900.301260][T15079] 1·: renamed from c0· (while UP) [ 1900.331312][T15079] A link change request failed with some changes committed already. Interface c1· may have been left with an inconsistent configuration, please check. [ 1900.361992][T15079] netlink: 9 bytes leftover after parsing attributes in process `syz.3.10721'. [ 1900.401730][T15079] 0·: renamed from c1· (while UP) [ 1900.462614][T15079] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 1900.522921][T15095] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10724'. [ 1900.535831][T15095] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10724'. [ 1900.543072][T15079] netlink: 9 bytes leftover after parsing attributes in process `syz.3.10721'. [ 1900.597371][T15079] 1·: renamed from c0· (while UP) [ 1900.635247][T15079] A link change request failed with some changes committed already. Interface c1· may have been left with an inconsistent configuration, please check. [ 1900.706489][T15079] 0·: renamed from c1· (while UP) [ 1900.785971][T15079] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 1901.449546][ T5647] Bluetooth: hci3: command 0x0405 tx timeout [ 1902.368862][T15150] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1902.615534][T15160] veth0_macvtap: left promiscuous mode [ 1903.007825][T15172] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1903.086531][T15172] bond0 (unregistering): Released all slaves [ 1903.993269][T15215] netlink: 'syz.9.10760': attribute type 7 has an invalid length. [ 1904.421355][T15236] xt_ipcomp: unknown flags 1D [ 1904.452042][T15236] syzkaller0: entered promiscuous mode [ 1904.457785][T15236] syzkaller0: entered allmulticast mode [ 1904.532586][T15239] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20001 [ 1904.572741][T15241] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1904.952832][T15254] __nla_validate_parse: 9 callbacks suppressed [ 1904.952856][T15254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10767'. [ 1905.758278][T15262] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10770'. [ 1905.939048][T15268] veth0_to_bond: mtu less than device minimum [ 1907.027318][T15220] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1907.422531][T15291] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1907.641464][T15291] gre2: entered promiscuous mode [ 1908.067307][T15279] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1908.119639][T15318] netlink: 72 bytes leftover after parsing attributes in process `syz.7.10783'. [ 1908.852824][T15340] netlink: 'syz.6.10789': attribute type 1 has an invalid length. [ 1908.906237][T15344] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1908.964948][T15340] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1909.074660][T15342] netlink: 20 bytes leftover after parsing attributes in process `syz.9.10788'. [ 1909.609336][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1909.623384][T15373] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10795'. [ 1909.671071][T15373] netlink: 244 bytes leftover after parsing attributes in process `syz.7.10795'. [ 1909.694411][T15373] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10795'. [ 1910.013679][T15387] netlink: 256 bytes leftover after parsing attributes in process `syz.3.10799'. [ 1910.164041][T15397] bond14: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1910.253204][T15397] bond14 (unregistering): Released all slaves [ 1911.847763][T15341] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1912.325940][T15475] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10821'. [ 1912.366534][T15475] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10821'. [ 1912.427831][T15475] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10821'. [ 1912.455156][T15486] netlink: 48 bytes leftover after parsing attributes in process `syz.9.10824'. [ 1912.801646][T15492] dvmrp1: entered allmulticast mode [ 1912.888064][T15492] pimreg: entered allmulticast mode [ 1913.021537][T15505] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10830'. [ 1913.360375][T15527] syzkaller1: entered promiscuous mode [ 1913.375530][T15527] syzkaller1: entered allmulticast mode [ 1913.413225][T15527] netlink: 'syz.8.10834': attribute type 2 has an invalid length. [ 1913.461698][T15530] bridge0: entered promiscuous mode [ 1913.482760][T15530] bridge0: entered allmulticast mode [ 1915.370024][ T1620] block nbd7: Possible stuck request ffff888027d10000: control (read@0,1024B). Runtime 180 seconds [ 1915.382246][ T1620] block nbd7: Possible stuck request ffff888027d101c0: control (read@1024,1024B). Runtime 180 seconds [ 1915.393604][ T1620] block nbd7: Possible stuck request ffff888027d10380: control (read@2048,1024B). Runtime 180 seconds [ 1915.404842][ T1620] block nbd7: Possible stuck request ffff888027d10540: control (read@3072,1024B). Runtime 180 seconds [ 1915.430178][ T1632] block nbd8: Possible stuck request ffff888027d8e000: control (read@0,4096B). Runtime 180 seconds [ 1915.965519][T15505] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1916.248766][T15546] xt_ipcomp: unknown flags 1D [ 1916.277747][T15548] netlink: 24 bytes leftover after parsing attributes in process `syz.9.10840'. [ 1916.992622][ T5647] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1917.008478][ T5647] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1917.020869][ T5647] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1917.032088][ T5647] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1917.051430][ T5647] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1917.194128][T15574] netlink: 20 bytes leftover after parsing attributes in process `syz.8.10849'. [ 1917.704282][T15596] bond0: entered promiscuous mode [ 1917.729590][T15596] team0: entered promiscuous mode [ 1917.872214][T15601] xt_ipcomp: unknown flags 1D [ 1917.885565][T15567] lo speed is unknown, defaulting to 1000 [ 1917.908653][T15601] syzkaller0: entered promiscuous mode [ 1917.915962][T15601] syzkaller0: entered allmulticast mode [ 1918.007516][T15605] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1918.018868][T15603] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1918.339206][T15611] tipc: Trying to set illegal importance in message [ 1918.387307][T15607] vlan0 (unregistering): left allmulticast mode [ 1918.398149][T15607] veth0_vlan (unregistering): left allmulticast mode [ 1918.427567][T15607] vlan0 (unregistering): left promiscuous mode [ 1918.706571][T15621] netlink: 52 bytes leftover after parsing attributes in process `syz.7.10857'. [ 1918.811891][T15622] netlink: 52 bytes leftover after parsing attributes in process `syz.7.10857'. [ 1919.157246][ T5639] Bluetooth: hci4: command tx timeout [ 1920.130940][ T30] audit: type=1107 audit(1785936925.234:22): pid=15626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 1920.159164][T15574] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1920.170078][T15627] 0: reclassify loop, rule prio 0, protocol 03 [ 1920.670560][T15567] bridge0: port 1(bridge_slave_0) entered blocking state [ 1920.683054][T15567] bridge0: port 1(bridge_slave_0) entered disabled state [ 1920.695423][T15567] bridge_slave_0: entered allmulticast mode [ 1920.704460][T15567] bridge_slave_0: entered promiscuous mode [ 1920.717863][T15567] bridge0: port 2(bridge_slave_1) entered blocking state [ 1920.725453][T15567] bridge0: port 2(bridge_slave_1) entered disabled state [ 1920.749807][T15567] bridge_slave_1: entered allmulticast mode [ 1920.762916][T15567] bridge_slave_1: entered promiscuous mode [ 1920.948459][T15654] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10864'. [ 1920.961300][T15653] xt_ipcomp: unknown flags 1D [ 1920.986794][T15567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1921.033936][T15648] netlink: 'syz.9.10864': attribute type 1 has an invalid length. [ 1921.082477][T15648] netlink: 220 bytes leftover after parsing attributes in process `syz.9.10864'. [ 1921.211015][ T5639] Bluetooth: hci4: command tx timeout [ 1921.226194][T15567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1921.256179][T15656] netlink: 32 bytes leftover after parsing attributes in process `syz.6.10867'. [ 1921.288671][T15656] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10867'. [ 1921.301622][T15657] syzkaller0: entered promiscuous mode [ 1921.352061][T15657] syzkaller0: entered allmulticast mode [ 1921.788134][T15669] netlink: 20 bytes leftover after parsing attributes in process `syz.9.10870'. [ 1921.971374][T15567] team0: Port device team_slave_0 added [ 1921.987078][T15567] team0: Port device team_slave_1 added [ 1922.073144][T15681] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1922.115348][T15567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1922.146549][T15567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1922.214620][T15567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1922.254557][T15567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1922.275323][T15567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1922.369959][T15567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1922.567140][T15567] hsr_slave_0: entered promiscuous mode [ 1922.577381][T15567] hsr_slave_1: entered promiscuous mode [ 1922.597420][T15567] debugfs: 'hsr0' already exists in 'hsr' [ 1922.608972][T15567] Cannot create hsr debugfs directory [ 1922.954122][T15567] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1922.967523][T15567] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1922.997271][T15567] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1923.011263][T15567] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1923.165240][T15567] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1923.175599][T15567] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1923.186480][T15567] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1923.198228][T15567] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1923.327285][ T5639] Bluetooth: hci4: command tx timeout [ 1923.342103][T15567] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1923.352510][T15567] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1923.364870][T15567] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1923.375881][T15567] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1923.526572][T15567] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1923.558070][T15567] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1923.573539][T15567] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1923.584896][T15567] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1924.404838][T15671] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1924.520251][T15567] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1924.601162][T15567] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1924.643091][T15567] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1924.698987][T15567] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1924.732832][T15567] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1924.800869][T15567] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1924.842931][T15567] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1924.882673][T15567] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1924.998721][T15714] netlink: 'syz.8.10880': attribute type 1 has an invalid length. [ 1925.041774][T15721] xt_ipcomp: unknown flags 1D [ 1925.060804][T15714] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 1925.157996][T15721] syzkaller0: entered promiscuous mode [ 1925.231792][T15721] syzkaller0: entered allmulticast mode [ 1925.371002][ T5639] Bluetooth: hci4: command tx timeout [ 1925.512723][T15567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1925.600716][T15567] 8021q: adding VLAN 0 to HW filter on device team0 [ 1925.647656][T27475] bridge0: port 1(bridge_slave_0) entered blocking state [ 1925.656975][T27475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1925.687538][T27478] bridge0: port 2(bridge_slave_1) entered blocking state [ 1925.694749][T27478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1925.804522][T15745] erspan0: entered promiscuous mode [ 1925.811565][T15745] erspan0: left allmulticast mode [ 1925.822979][T15745] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10888'. [ 1925.868442][T15747] netlink: 20 bytes leftover after parsing attributes in process `syz.7.10887'. [ 1926.695526][T15567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1926.767318][T15567] veth0_vlan: entered promiscuous mode [ 1926.782630][T15567] veth1_vlan: entered promiscuous mode [ 1926.865568][T15567] veth0_macvtap: entered promiscuous mode [ 1926.877940][T15567] veth1_macvtap: entered promiscuous mode [ 1926.913672][T15567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1926.933724][T15567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1926.984762][T27460] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1927.050938][T29352] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1927.093282][T29352] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1927.114513][T29352] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1928.821777][T15747] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1929.076530][T15784] xt_ipcomp: unknown flags 1D [ 1929.144872][T15785] netlink: 'syz.9.10894': attribute type 34 has an invalid length. [ 1929.168205][T27466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1929.178974][T15785] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10894'. [ 1929.198721][T27466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1929.287476][T15792] IPv6: NLM_F_CREATE should be specified when creating new route [ 1929.454498][T15794] netlink: 104 bytes leftover after parsing attributes in process `syz.8.10897'. [ 1929.474931][T27463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1929.486505][T15796] veth1_macvtap: left promiscuous mode [ 1929.513042][T27463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1929.725710][T15804] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10900'. [ 1929.840536][T15809] xt_nfacct: accounting object `' does not exist [ 1929.981513][T15816] netlink: 'syz.9.10903': attribute type 1 has an invalid length. [ 1930.015889][T15815] netlink: 24 bytes leftover after parsing attributes in process `syz.8.10904'. [ 1930.137619][T15821] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10905'. [ 1930.153470][T15825] xt_ipcomp: unknown flags 1D [ 1930.312906][T15837] syzkaller0: entered promiscuous mode [ 1930.318615][T15837] syzkaller0: entered allmulticast mode [ 1933.008083][T15821] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1935.210774][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1936.176322][ T4994] udevd[4994]: worker [10168] /devices/virtual/block/nbd7 timeout; kill it [ 1936.190625][ T4994] udevd[4994]: seq 44251 '/devices/virtual/block/nbd7' killed [ 1936.198208][ T4994] udevd[4994]: worker [10167] /devices/virtual/block/nbd8 timeout; kill it [ 1936.207089][ T4994] udevd[4994]: seq 44255 '/devices/virtual/block/nbd8' killed [ 1945.449975][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1945.459998][ T1632] block nbd8: Possible stuck request ffff888027d8e000: control (read@0,4096B). Runtime 210 seconds [ 1945.460047][ T1620] block nbd7: Possible stuck request ffff888027d10000: control (read@0,1024B). Runtime 210 seconds [ 1945.483334][ T1620] block nbd7: Possible stuck request ffff888027d101c0: control (read@1024,1024B). Runtime 210 seconds [ 1945.494423][ T1620] block nbd7: Possible stuck request ffff888027d10380: control (read@2048,1024B). Runtime 210 seconds [ 1945.507179][ T1620] block nbd7: Possible stuck request ffff888027d10540: control (read@3072,1024B). Runtime 210 seconds [ 1951.892226][T15866] netlink: 7 bytes leftover after parsing attributes in process `syz.6.10915'. [ 1951.915744][T15869] netlink: 20 bytes leftover after parsing attributes in process `syz.7.10916'. [ 1952.036160][T15870] bond0: option fail_over_mac: invalid value (16) [ 1952.073303][T15870] bond0 (unregistering): Released all slaves [ 1952.458360][T15886] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 1952.477129][T15886] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1952.523905][T15890] xt_ipcomp: unknown flags 1D [ 1952.536126][T15891] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10922'. [ 1952.646292][T15890] syzkaller0: entered promiscuous mode [ 1952.672779][T15890] syzkaller0: entered allmulticast mode [ 1952.705846][T15896] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1952.744872][T15902] netlink: 40 bytes leftover after parsing attributes in process `syz.8.10924'. [ 1955.467876][T15891] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1955.743949][T15937] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10933'. [ 1955.830250][T15939] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10933'. [ 1956.084306][T15949] xt_ipcomp: unknown flags 1D [ 1956.162257][T15949] syzkaller0: entered promiscuous mode [ 1956.189783][T15949] syzkaller0: entered allmulticast mode [ 1956.297814][T15955] netlink: 'syz.9.10940': attribute type 16 has an invalid length. [ 1956.328632][T15955] netlink: 'syz.9.10940': attribute type 17 has an invalid length. [ 1956.362794][T15964] netlink: 420 bytes leftover after parsing attributes in process `syz.3.10942'. [ 1956.461269][T15955] erspan0: left promiscuous mode [ 1956.611976][T15955] bridge0: left promiscuous mode [ 1956.633916][T15955] bridge0: left allmulticast mode [ 1956.647398][T15955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1956.656821][T15955] team0: left promiscuous mode [ 1956.663772][T15955] 8021q: adding VLAN 0 to HW filter on device team0 [ 1956.675245][T15955] dummy0: left promiscuous mode [ 1956.688120][T15955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1956.777187][T15955] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1956.825520][T15955] veth1_macvtap: left promiscuous mode [ 1956.833653][T15955] veth0_macvtap: left promiscuous mode [ 1956.841892][T15955] veth0_macvtap: entered promiscuous mode [ 1956.855067][T15955] veth1_macvtap: entered promiscuous mode [ 1956.872132][T15955] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1956.881347][T15955] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1956.891569][T15955] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1956.905287][T15955] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1956.934244][T15955] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1957.269573][T27479] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1957.309046][T27479] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1957.349895][T27479] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1957.410711][T27479] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1958.095574][T16013] xt_ipcomp: unknown flags 1D [ 1958.245209][T16020] netlink: 808 bytes leftover after parsing attributes in process `syz.7.10958'. [ 1958.821810][ T3499] IPVS: starting estimator thread 0... [ 1958.920870][T16048] IPVS: using max 25 ests per chain, 60000 per kthread [ 1959.181856][T16064] xt_ipcomp: unknown flags 1D [ 1959.231704][T16064] syzkaller0: entered promiscuous mode [ 1959.255375][T16064] syzkaller0: entered allmulticast mode [ 1959.430965][T16070] veth0: entered promiscuous mode [ 1959.460852][T16066] netlink: 816 bytes leftover after parsing attributes in process `syz.7.10967'. [ 1959.502018][T16073] netlink: 1204 bytes leftover after parsing attributes in process `syz.3.10973'. [ 1959.677055][T16068] veth0: left promiscuous mode [ 1959.953454][T16085] netlink: 40 bytes leftover after parsing attributes in process `syz.8.10976'. [ 1960.018161][T16089] netlink: 'syz.6.10977': attribute type 1 has an invalid length. [ 1960.204461][T16057] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10968'. [ 1960.380321][T16089] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1960.403392][T16093] bond18: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 1960.550260][T16093] bond18: entered allmulticast mode [ 1960.758867][T16103] bond18: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1960.842965][T16105] ipvlan0: entered allmulticast mode [ 1960.861212][T16105] batadv_slave_1: entered allmulticast mode [ 1960.912704][T16105] batman_adv: batadv0: Adding interface: ipvlan0 [ 1960.953770][T16105] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1961.081276][T16105] batman_adv: batadv0: Interface activated: ipvlan0 [ 1961.219964][T16126] netlink: 76 bytes leftover after parsing attributes in process `syz.8.10981'. [ 1961.259622][T16127] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1961.765545][T16135] xt_ipcomp: unknown flags 1D [ 1961.818700][T16139] netlink: 'syz.8.10987': attribute type 9 has an invalid length. [ 1961.856302][T16141] netlink: 'syz.8.10987': attribute type 39 has an invalid length. [ 1961.915948][T16143] netlink: 'syz.7.10989': attribute type 11 has an invalid length. [ 1962.013382][T16147] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10992'. [ 1962.053555][T16147] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10992'. [ 1962.146627][T16150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10990'. [ 1962.252467][T16153] mac80211_hwsim hwsim75 syzkaller0: entered promiscuous mode [ 1962.272922][T16153] mac80211_hwsim hwsim75 syzkaller0: entered allmulticast mode [ 1962.283705][T16153] netlink: 24 bytes leftover after parsing attributes in process `syz.9.10993'. [ 1962.526081][T16164] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1963.453245][T16196] __nla_validate_parse: 1 callbacks suppressed [ 1963.453264][T16196] netlink: 16 bytes leftover after parsing attributes in process `syz.9.11007'. [ 1963.786829][T16205] tipc: MTU too low for tipc bearer [ 1963.933092][T16215] netlink: 132 bytes leftover after parsing attributes in process `syz.7.11011'. [ 1964.141654][T16222] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 1964.311343][T16231] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11017'. [ 1964.828602][T16242] netlink: 68 bytes leftover after parsing attributes in process `syz.9.11018'. [ 1964.863005][T16242] netlink: 68 bytes leftover after parsing attributes in process `syz.9.11018'. [ 1964.877231][T16242] netlink: 68 bytes leftover after parsing attributes in process `syz.9.11018'. [ 1964.921788][T16242] netlink: 68 bytes leftover after parsing attributes in process `syz.9.11018'. [ 1964.965593][T16242] netlink: 68 bytes leftover after parsing attributes in process `syz.9.11018'. [ 1965.014320][T16242] netlink: 68 bytes leftover after parsing attributes in process `syz.9.11018'. [ 1965.057420][T16242] netlink: 68 bytes leftover after parsing attributes in process `syz.9.11018'. [ 1965.864649][T16273] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1965.975725][T16275] netlink: 'syz.6.11028': attribute type 4 has an invalid length. [ 1966.209300][ T5647] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1966.226921][ T5647] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1966.253988][ T5647] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1966.264820][ T5647] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1966.275273][ T5647] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1966.532092][T16290] geneve3: entered promiscuous mode [ 1966.591019][T16290] geneve3: entered allmulticast mode [ 1966.910734][T27461] netdevsim netdevsim7 netdevsim1: set [1, 2] type 2 family 0 port 19999 - 0 [ 1966.975889][T12186] netdevsim netdevsim7 netdevsim2: set [1, 2] type 2 family 0 port 19999 - 0 [ 1967.079431][T12186] netdevsim netdevsim7 netdevsim3: set [1, 2] type 2 family 0 port 19999 - 0 [ 1967.191060][T12186] netdevsim netdevsim7 netdevsim0: set [1, 2] type 2 family 0 port 19999 - 0 [ 1968.026718][T27460] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1968.070916][T27460] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1968.250093][T16355] xt_ipcomp: unknown flags 1D [ 1968.341086][ T5639] Bluetooth: hci5: command tx timeout [ 1968.404229][T27460] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1968.415264][T27460] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1968.545725][T16365] __nla_validate_parse: 33 callbacks suppressed [ 1968.545747][T16365] netlink: 36 bytes leftover after parsing attributes in process `syz.7.11048'. [ 1968.564267][T16363] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11047'. [ 1968.683098][T27460] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1968.718425][T27460] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1968.805275][T16280] lo speed is unknown, defaulting to 1000 [ 1968.978185][T27460] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1969.010842][T27460] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1969.160977][T16361] syzkaller0: entered promiscuous mode [ 1969.179180][T16361] syzkaller0: entered allmulticast mode [ 1969.190618][T16375] netlink: 20 bytes leftover after parsing attributes in process `syz.8.11051'. [ 1969.331052][T16379] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11053'. [ 1969.348074][T16379] netlink: 'syz.7.11053': attribute type 15 has an invalid length. [ 1969.364118][T16379] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11053'. [ 1969.565361][T16379] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11053'. [ 1969.648273][T16379] netlink: 'syz.7.11053': attribute type 15 has an invalid length. [ 1969.674163][T29353] netdevsim netdevsim7 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 1969.691467][T16379] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11053'. [ 1969.759970][T27456] netdevsim netdevsim7 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 1969.802522][T16323] netdevsim netdevsim7 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 1969.825382][T16404] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11057'. [ 1969.878111][T16405] tipc: Enabling of bearer rejected, media not registered [ 1969.965411][T16406] xt_CT: No such helper "pptp" [ 1970.019791][ T6771] netdevsim netdevsim7 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 1970.240627][T16413] netlink: 'syz.7.11059': attribute type 1 has an invalid length. [ 1970.315380][T16415] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11060'. [ 1970.395419][T16413] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1970.413670][ T5639] Bluetooth: hci5: command tx timeout [ 1970.512134][T16426] xt_ipcomp: unknown flags 1D [ 1970.715517][T16434] netlink: 'syz.8.11065': attribute type 21 has an invalid length. [ 1970.731187][T16434] netlink: 128 bytes leftover after parsing attributes in process `syz.8.11065'. [ 1971.172325][T16431] syzkaller0: entered promiscuous mode [ 1971.194655][T16431] syzkaller0: entered allmulticast mode [ 1971.468660][T27460] pimreg: left allmulticast mode [ 1971.480627][T27460] dvmrp1: left allmulticast mode [ 1971.694138][T16461] openvswitch: netlink: Flow actions attr not present in new flow. [ 1972.489929][ T5639] Bluetooth: hci5: command tx timeout [ 1972.608353][T27460] bond1 (unregistering): (slave bridge2): Releasing active interface [ 1972.642589][T27460] bond0 (unregistering): Released all slaves [ 1972.703765][T27460] bond1 (unregistering): Released all slaves [ 1972.728192][T27460] bond2 (unregistering): Released all slaves [ 1972.751137][T27460] bond3 (unregistering): Released all slaves [ 1972.805568][T27460] bond4 (unregistering): Released all slaves [ 1972.857760][T27460] bond5 (unregistering): Released all slaves [ 1972.879229][T27460] bond6 (unregistering): Released all slaves [ 1972.898759][T27460] bond7 (unregistering): Released all slaves [ 1972.925878][T27460] bond8 (unregistering): Released all slaves [ 1972.954629][T27460] bond9 (unregistering): Released all slaves [ 1972.980627][T27460] bond10 (unregistering): Released all slaves [ 1973.018690][T27460] bond11 (unregistering): Released all slaves [ 1973.058483][T27460] bond12 (unregistering): Released all slaves [ 1973.216627][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1973.466890][T16498] nbd: couldn't find a device at index 1991962648 [ 1973.630472][T16280] bridge0: port 1(bridge_slave_0) entered blocking state [ 1973.645605][T16502] __nla_validate_parse: 6 callbacks suppressed [ 1973.645627][T16502] netlink: 64 bytes leftover after parsing attributes in process `syz.7.11081'. [ 1973.690468][T16280] bridge0: port 1(bridge_slave_0) entered disabled state [ 1973.751779][T16280] bridge_slave_0: entered allmulticast mode [ 1973.792318][T16280] bridge_slave_0: entered promiscuous mode [ 1973.851883][T16280] bridge0: port 2(bridge_slave_1) entered blocking state [ 1973.862511][T16280] bridge0: port 2(bridge_slave_1) entered disabled state [ 1973.882174][T16506] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11082'. [ 1973.888297][T16280] bridge_slave_1: entered allmulticast mode [ 1973.937583][T16280] bridge_slave_1: entered promiscuous mode [ 1973.944192][T16506] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1974.053976][T27460] : left promiscuous mode [ 1974.309620][T16524] netlink: 24 bytes leftover after parsing attributes in process `syz.8.11086'. [ 1974.569472][ T5639] Bluetooth: hci5: command tx timeout [ 1974.593183][T16520] netlink: 40 bytes leftover after parsing attributes in process `syz.8.11086'. [ 1974.629598][T29353] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1974.650580][T27460] tipc: Disabling bearer [ 1974.684117][T27460] tipc: Disabling bearer [ 1974.712742][T27460] tipc: Left network mode [ 1974.736538][T16280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1974.825320][T16280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1974.927303][T16544] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11090'. [ 1974.960774][T16544] netlink: 68 bytes leftover after parsing attributes in process `syz.7.11090'. [ 1974.973545][T16547] netlink: 20 bytes leftover after parsing attributes in process `syz.6.11091'. [ 1975.025140][T16545] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11091'. [ 1975.128640][T12186] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1975.270326][T16280] team0: Port device team_slave_0 added [ 1975.355340][T16550] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 1975.425288][T16550] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1975.448080][T16550] gretap2: entered promiscuous mode [ 1975.463155][T16564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11093'. [ 1975.476414][T16550] gretap2: entered allmulticast mode [ 1975.525121][ T6771] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1975.536489][ T1632] block nbd8: Possible stuck request ffff888027d8e000: control (read@0,4096B). Runtime 240 seconds [ 1975.537803][ T1620] block nbd7: Possible stuck request ffff888027d10000: control (read@0,1024B). Runtime 240 seconds [ 1975.559427][ T1620] block nbd7: Possible stuck request ffff888027d101c0: control (read@1024,1024B). Runtime 240 seconds [ 1975.572093][ T1620] block nbd7: Possible stuck request ffff888027d10380: control (read@2048,1024B). Runtime 240 seconds [ 1975.584160][ T1620] block nbd7: Possible stuck request ffff888027d10540: control (read@3072,1024B). Runtime 240 seconds [ 1975.648090][T16280] team0: Port device team_slave_1 added [ 1975.912146][T16578] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11096'. [ 1976.516979][T16280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1976.562515][T16280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1976.622558][T16280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1976.637297][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1976.707057][T16280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1976.763548][T16280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1976.876209][T16280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1977.340195][T16621] IPv6: Can't replace route, no match found [ 1977.370543][T16621] IPv6: Can't replace route, no match found [ 1977.506809][T27460] hsr_slave_0: left promiscuous mode [ 1977.556632][T27460] batman_adv: batadv0: Removing interface: ipvlan2 [ 1977.676712][T27460] veth1_macvtap: left promiscuous mode [ 1977.696574][T27460] veth0_macvtap: left promiscuous mode [ 1977.960373][T16646] xt_hashlimit: size too large, truncated to 1048576 [ 1978.961331][T16667] xt_ipcomp: unknown flags 1D [ 1979.353162][T27460] smc: removing net device team0 with user defined pnetid SYZ2 [ 1979.518480][T16280] hsr_slave_0: entered promiscuous mode [ 1979.525569][T16280] hsr_slave_1: entered promiscuous mode [ 1979.535575][T16280] debugfs: 'hsr0' already exists in 'hsr' [ 1979.562264][T16280] Cannot create hsr debugfs directory [ 1979.713997][T16671] bond19: option arp_all_targets: invalid value (18446744073709551613) [ 1979.730735][T16671] bond19 (unregistering): Released all slaves [ 1979.781586][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1979.793231][T16672] syzkaller0: entered promiscuous mode [ 1979.801308][T16672] syzkaller0: entered allmulticast mode [ 1979.880657][T27463] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1980.836454][T27460] IPVS: stop unused estimator thread 0... [ 1981.188486][T16720] netlink: 14 bytes leftover after parsing attributes in process `syz.7.11130'. [ 1981.277317][T16716] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 1981.478561][T16731] IPv6: NLM_F_CREATE should be specified when creating new route [ 1981.500443][T16731] netlink: 'syz.6.11131': attribute type 1 has an invalid length. [ 1981.770627][T16731] netlink: 20 bytes leftover after parsing attributes in process `syz.6.11131'. [ 1981.833551][T16735] x_tables: duplicate underflow at hook 1 [ 1982.107362][T16747] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1982.151310][T16752] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11135'. [ 1982.231432][T16752] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1982.240533][T16755] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11135'. [ 1982.318637][T16757] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11136'. [ 1982.408419][T16762] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11136'. [ 1982.475257][T16757] bond0: ARP target 8.4.0.0 is already present [ 1982.486255][T16757] bond0: option arp_ip_target: invalid value (1032) [ 1983.747209][T16802] netdevsim netdevsim8: Direct firmware load for ./file0 failed with error -2 [ 1983.853703][T16802] netdevsim netdevsim8: Falling back to sysfs fallback for: ./file0 [ 1983.964011][T16812] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1983.977431][T16817] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1984.315281][T16280] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1984.345659][T16280] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1984.391313][T16280] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1984.422767][T16280] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1984.646036][T16280] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1984.698832][T16280] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1985.012894][T16843] netlink: 'syz.8.11153': attribute type 1 has an invalid length. [ 1985.405276][T16851] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11154'. [ 1986.116172][ T5639] block nbd10: Receive control failed (result -32) [ 1990.116175][T16280] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1990.143938][T16280] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1990.162272][T16843] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 1990.425908][T16865] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11156'. [ 1990.586206][T16865] gre0: entered promiscuous mode [ 1990.603766][T16865] gre0: entered allmulticast mode [ 1990.857409][T16280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1991.038940][T16886] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11161'. [ 1991.152016][T16280] 8021q: adding VLAN 0 to HW filter on device team0 [ 1991.242557][T27472] bridge0: port 1(bridge_slave_0) entered blocking state [ 1991.249830][T27472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1991.340221][T27472] bridge0: port 2(bridge_slave_1) entered blocking state [ 1991.347482][T27472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1991.715620][T16904] netlink: 36 bytes leftover after parsing attributes in process `syz.8.11165'. [ 1992.173391][T16920] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11168'. [ 1993.381817][T16957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11176'. [ 1993.613395][T16971] netlink: 'syz.8.11179': attribute type 5 has an invalid length. [ 1993.655091][T16971] netlink: 24 bytes leftover after parsing attributes in process `syz.8.11179'. [ 1993.861912][T16977] netlink: 'syz.8.11179': attribute type 5 has an invalid length. [ 1993.915619][T16977] netlink: 24 bytes leftover after parsing attributes in process `syz.8.11179'. [ 1994.386632][T16280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1994.584663][T17009] netlink: 'syz.6.11186': attribute type 1 has an invalid length. [ 1994.619929][T17009] netlink: 224 bytes leftover after parsing attributes in process `syz.6.11186'. [ 1994.742650][T17009] ip6gre2: entered allmulticast mode [ 1994.777270][T12186] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1994.918773][T17021] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 1994.987518][T17021] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1995.174019][T17029] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11191'. [ 1995.246592][T17029] netlink: 72 bytes leftover after parsing attributes in process `syz.7.11191'. [ 1995.392175][T17032] SET target dimension over the limit! [ 1995.467668][T17036] ip_tables: iptables: counters copy to user failed while replacing table [ 1995.678372][T17045] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11194'. [ 1995.704134][T16280] veth0_vlan: entered promiscuous mode [ 1995.776798][T16280] veth1_vlan: entered promiscuous mode [ 1995.848955][T17045] netlink: 'syz.7.11194': attribute type 1 has an invalid length. [ 1995.981188][T16280] veth0_macvtap: entered promiscuous mode [ 1996.021866][T16280] veth1_macvtap: entered promiscuous mode [ 1996.108412][T16280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1996.173207][T16280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1996.222368][T17058] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11197'. [ 1996.347101][T17058] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11197'. [ 1996.374532][T29350] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1996.388783][T17061] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1996.566865][T21110] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1996.617925][T17068] netlink: Conntrack attr has 1 unknown bytes [ 1996.628574][T21110] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1996.693917][T21110] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1996.705701][T17068] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1996.928152][T17080] SET target dimension over the limit! [ 1997.005060][T27472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1997.035999][T27472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1997.313230][T21980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1997.370559][T21980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1998.256949][ T5647] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1998.276861][ T5647] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1998.297259][ T5647] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1998.307781][ T5647] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1998.345985][ T5647] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1998.552376][T17124] sctp: [Deprecated]: syz.6.11214 (pid 17124) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1998.552376][T17124] Use struct sctp_sack_info instead [ 1998.965610][T17136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11217'. [ 1998.969610][T17135] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11218'. [ 1999.005083][T17134] netlink: 144 bytes leftover after parsing attributes in process `syz.7.11216'. [ 1999.127774][T17141] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11216'. [ 1999.139412][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1999.521613][ T5647] block nbd11: Receive control failed (result -1) [ 1999.573960][T17145] netlink: 148 bytes leftover after parsing attributes in process `syz.6.11218'. [ 2000.409703][ T5647] Bluetooth: hci0: command tx timeout [ 2000.610899][T17148] netlink: 256 bytes leftover after parsing attributes in process `syz.6.11218'. [ 2002.326064][T17116] lo speed is unknown, defaulting to 1000 [ 2002.489830][ T5647] Bluetooth: hci0: command tx timeout [ 2003.826922][T17208] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2003.834367][T17208] IPv6: NLM_F_CREATE should be set when creating new route [ 2004.180018][T17209] lo: entered allmulticast mode [ 2004.295562][T17209] tunl0: entered allmulticast mode [ 2004.478661][T17209] gre0: entered allmulticast mode [ 2004.569269][ T5647] Bluetooth: hci0: command tx timeout [ 2004.713582][T17222] IPv6: NLM_F_CREATE should be specified when creating new route [ 2004.797679][T17209] gretap0: entered allmulticast mode [ 2004.917402][T17209] erspan0: entered allmulticast mode [ 2005.076589][T17209] ip_vti0: entered allmulticast mode [ 2005.240207][T17209] ip6_vti0: entered allmulticast mode [ 2005.299794][T17209] sit0: entered allmulticast mode [ 2005.382813][T17209] ip6tnl0: entered allmulticast mode [ 2005.406109][T17233] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 2005.482688][T17209] ip6gre0: entered allmulticast mode [ 2005.551611][T17233] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 2005.611341][ T1620] block nbd7: Possible stuck request ffff888027d10000: control (read@0,1024B). Runtime 270 seconds [ 2005.624442][ T1632] block nbd8: Possible stuck request ffff888027d8e000: control (read@0,4096B). Runtime 270 seconds [ 2005.624890][ T1620] block nbd7: Possible stuck request ffff888027d101c0: control (read@1024,1024B). Runtime 270 seconds [ 2005.647003][ T1620] block nbd7: Possible stuck request ffff888027d10380: control (read@2048,1024B). Runtime 270 seconds [ 2005.662014][ T1620] block nbd7: Possible stuck request ffff888027d10540: control (read@3072,1024B). Runtime 270 seconds [ 2005.717965][T17209] syz_tun: entered allmulticast mode [ 2005.916640][T17209] ip6gretap0: entered allmulticast mode [ 2006.015450][T17209] bridge0: port 2(bridge_slave_1) entered disabled state [ 2006.023328][T17209] bridge0: port 1(bridge_slave_0) entered disabled state [ 2006.078320][T17209] bridge0: entered allmulticast mode [ 2006.177307][T17209] vcan0: entered allmulticast mode [ 2006.203991][T17209] bond0: entered allmulticast mode [ 2006.236182][T17209] bond_slave_0: entered allmulticast mode [ 2006.261981][T17209] bond_slave_1: entered allmulticast mode [ 2006.288465][T17209] team0: entered allmulticast mode [ 2006.309313][T17209] team_slave_0: entered allmulticast mode [ 2006.348451][T17209] team_slave_1: entered allmulticast mode [ 2006.481228][T17209] dummy0: entered allmulticast mode [ 2006.642965][T17209] nlmon0: entered allmulticast mode [ 2006.649340][ T5647] Bluetooth: hci0: command tx timeout [ 2006.750558][T17209] batadv0: entered allmulticast mode [ 2006.859793][T17209] vxcan0: entered allmulticast mode [ 2006.936698][T17209] vxcan1: entered allmulticast mode [ 2007.033839][T17209] veth0: entered allmulticast mode [ 2007.137724][T17209] veth1: entered allmulticast mode [ 2007.184685][T17209] wg0: entered allmulticast mode [ 2007.292432][T17209] wg1: entered allmulticast mode [ 2007.339933][T17209] wg2: entered allmulticast mode [ 2007.362797][T17209] veth0_to_bridge: entered allmulticast mode [ 2007.416014][T17209] veth1_to_bridge: entered allmulticast mode [ 2007.436754][T17248] netlink: 'syz.6.11238': attribute type 1 has an invalid length. [ 2007.456155][T17209] veth0_to_bond: entered allmulticast mode [ 2007.526067][T17209] veth1_to_bond: entered allmulticast mode [ 2007.532419][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 2007.759411][T17209] veth0_to_team: entered allmulticast mode [ 2007.824605][T17209] veth1_to_team: entered allmulticast mode [ 2007.923631][T17209] veth0_to_batadv: entered allmulticast mode [ 2007.962719][T17209] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2007.981138][T17209] batadv_slave_0: entered allmulticast mode [ 2007.994798][T17209] veth1_to_batadv: entered allmulticast mode [ 2008.008258][T17209] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2008.029012][T17209] batadv_slave_1: entered allmulticast mode [ 2008.044805][T17209] xfrm0: entered allmulticast mode [ 2008.058692][T17209] veth0_to_hsr: entered allmulticast mode [ 2008.076043][T17209] hsr_slave_0: entered allmulticast mode [ 2008.087726][T17209] veth1_to_hsr: entered allmulticast mode [ 2008.155648][T17209] hsr_slave_1: entered allmulticast mode [ 2008.193360][T17209] hsr0: entered allmulticast mode [ 2008.203632][T17209] veth1_virt_wifi: entered allmulticast mode [ 2008.218383][T17209] veth0_virt_wifi: entered allmulticast mode [ 2008.232468][T17209] virt_wifi0: entered allmulticast mode [ 2008.238713][T17209] veth1_vlan: entered allmulticast mode [ 2008.280497][T17209] veth0_vlan: entered allmulticast mode [ 2008.313688][T17209] vlan0: entered allmulticast mode [ 2008.350138][T17209] vlan1: entered allmulticast mode [ 2008.367433][T17209] macvlan0: entered allmulticast mode [ 2008.404198][T17209] macvlan1: entered allmulticast mode [ 2008.432484][T17209] ipvlan0: entered allmulticast mode [ 2008.438063][T17209] ipvlan1: entered allmulticast mode [ 2008.446764][T17209] veth1_macvtap: entered allmulticast mode [ 2008.460483][T17209] veth0_macvtap: entered allmulticast mode [ 2008.475280][T17209] macvtap0: entered allmulticast mode [ 2008.518384][T17209] macsec0: entered allmulticast mode [ 2008.535025][T17209] geneve0: entered allmulticast mode [ 2008.548319][T17209] geneve1: entered allmulticast mode [ 2008.568001][T17209] netdevsim netdevsim9 netdevsim0: entered allmulticast mode [ 2008.706279][T17209] netdevsim netdevsim9 netdevsim1: entered allmulticast mode [ 2008.793044][T17209] netdevsim netdevsim9 netdevsim2: entered allmulticast mode [ 2008.846658][T17209] netdevsim netdevsim9 netdevsim3: entered allmulticast mode [ 2008.887573][T17209] mac80211_hwsim hwsim95 wlan0: entered allmulticast mode [ 2009.003722][T17209] mac80211_hwsim hwsim96 wlan1: entered allmulticast mode [ 2009.118048][T17247] bond0: option miimon: invalid value (18446744071829782528) [ 2009.159239][T17247] bond0: option miimon: allowed values 0 - 2147483647 [ 2009.195346][T29353] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2009.360807][T29352] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2009.499576][T29352] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2009.650566][T12733] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2010.187759][T17257] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11240'. [ 2010.352982][T17258] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 2010.604222][T17269] netlink: 100 bytes leftover after parsing attributes in process `syz.6.11242'. [ 2010.731432][T17266] erspan0: entered allmulticast mode [ 2011.586525][T17273] bond12: entered promiscuous mode [ 2011.666655][T17273] bond12: entered allmulticast mode [ 2013.605234][T17116] bridge0: port 1(bridge_slave_0) entered blocking state [ 2013.753731][T17312] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 2013.834830][T17116] bridge0: port 1(bridge_slave_0) entered disabled state [ 2013.972810][T17116] bridge_slave_0: entered allmulticast mode [ 2014.067889][T17318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11249'. [ 2014.123917][T17116] bridge_slave_0: entered promiscuous mode [ 2014.276473][T17116] bridge0: port 2(bridge_slave_1) entered blocking state [ 2014.382887][T17116] bridge0: port 2(bridge_slave_1) entered disabled state [ 2014.443054][T17116] bridge_slave_1: entered allmulticast mode [ 2014.558313][T17116] bridge_slave_1: entered promiscuous mode [ 2014.973632][T17325] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11251'. [ 2015.806332][T17116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2016.176891][T17116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2017.003474][T17116] team0: Port device team_slave_0 added [ 2017.127187][T17116] team0: Port device team_slave_1 added [ 2017.422763][T17353] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11258'. [ 2017.524727][T17353] netlink: 'syz.6.11258': attribute type 1 has an invalid length. [ 2017.648094][T17353] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11258'. [ 2017.836384][T17353] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11258'. [ 2017.876482][T17347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11257'. [ 2018.061367][T17353] netlink: 'syz.6.11258': attribute type 1 has an invalid length. [ 2018.217163][T17353] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11258'. [ 2018.562715][T17366] netlink: 24 bytes leftover after parsing attributes in process `syz.9.11261'. [ 2019.187742][T17373] [ 2019.190140][T17373] ====================================================== [ 2019.197247][T17373] WARNING: possible circular locking dependency detected [ 2019.204391][T17373] syzkaller #0 Not tainted [ 2019.208830][T17373] ------------------------------------------------------ [ 2019.215918][T17373] syz.7.11263/17373 is trying to acquire lock: [ 2019.222098][T17373] ffffffff8ec848e0 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x15b/0x650 [ 2019.231426][T17373] [ 2019.231426][T17373] but task is already holding lock: [ 2019.238908][T17373] ffff88802c9edcf8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 2019.248454][T17373] [ 2019.248454][T17373] which lock already depends on the new lock. [ 2019.248454][T17373] [ 2019.258883][T17373] [ 2019.258883][T17373] the existing dependency chain (in reverse order) is: [ 2019.267928][T17373] [ 2019.267928][T17373] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 2019.275648][T17373] __might_fault+0xcb/0x130 [ 2019.280718][T17373] _copy_from_user+0x28/0xb0 [ 2019.285892][T17373] csum_and_copy_from_iter_full+0x210/0x1fb0 [ 2019.292508][T17373] ip_generic_getfrag+0x149/0x2d0 [ 2019.298195][T17373] __ip6_append_data+0x3b26/0x40c0 [ 2019.303970][T17373] ip6_append_data+0x108/0x270 [ 2019.309299][T17373] rawv6_sendmsg+0x1298/0x18c0 [ 2019.314695][T17373] sock_sendmsg_nosec+0x10e/0x180 [ 2019.320292][T17373] ____sys_sendmsg+0x54e/0x850 [ 2019.325611][T17373] ___sys_sendmsg+0x2a5/0x360 [ 2019.330858][T17373] __x64_sys_sendmsg+0x1b1/0x290 [ 2019.336348][T17373] do_syscall_64+0x174/0x580 [ 2019.341493][T17373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2019.347935][T17373] [ 2019.347935][T17373] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 2019.355709][T17373] lock_sock_nested+0x41/0x100 [ 2019.361047][T17373] inet_shutdown+0x6a/0x390 [ 2019.366206][T17373] nbd_mark_nsock_dead+0x2cb/0x550 [ 2019.371985][T17373] recv_work+0x1cee/0x1e10 [ 2019.376975][T17373] process_scheduled_works+0xa8e/0x14e0 [ 2019.383112][T17373] worker_thread+0xa47/0xfb0 [ 2019.388265][T17373] kthread+0x388/0x470 [ 2019.392893][T17373] ret_from_fork+0x514/0xb70 [ 2019.398130][T17373] ret_from_fork_asm+0x1a/0x30 [ 2019.403444][T17373] [ 2019.403444][T17373] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 2019.411131][T17373] __mutex_lock+0x19d/0x1550 [ 2019.416282][T17373] nbd_queue_rq+0x373/0x1150 [ 2019.421420][T17373] blk_mq_dispatch_rq_list+0x499/0x1990 [ 2019.427651][T17373] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 2019.434617][T17373] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 2019.441158][T17373] blk_mq_run_work_fn+0x16c/0x300 [ 2019.446733][T17373] process_scheduled_works+0xa8e/0x14e0 [ 2019.452831][T17373] worker_thread+0xa47/0xfb0 [ 2019.457989][T17373] kthread+0x388/0x470 [ 2019.462622][T17373] ret_from_fork+0x514/0xb70 [ 2019.467782][T17373] ret_from_fork_asm+0x1a/0x30 [ 2019.473095][T17373] [ 2019.473095][T17373] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 2019.480355][T17373] __mutex_lock+0x19d/0x1550 [ 2019.485511][T17373] nbd_queue_rq+0xc1/0x1150 [ 2019.490565][T17373] blk_mq_dispatch_rq_list+0x499/0x1990 [ 2019.496694][T17373] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 2019.503593][T17373] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 2019.510142][T17373] blk_mq_run_work_fn+0x16c/0x300 [ 2019.515718][T17373] process_scheduled_works+0xa8e/0x14e0 [ 2019.521812][T17373] worker_thread+0xa47/0xfb0 [ 2019.526955][T17373] kthread+0x388/0x470 [ 2019.531589][T17373] ret_from_fork+0x514/0xb70 [ 2019.536747][T17373] ret_from_fork_asm+0x1a/0x30 [ 2019.542070][T17373] [ 2019.542070][T17373] -> #3 (set->srcu){.+.+}-{0:0}: [ 2019.549239][T17373] __synchronize_srcu+0xc9/0x2f0 [ 2019.554737][T17373] elevator_switch+0x1e8/0x7b0 [ 2019.560175][T17373] elevator_change+0x2fa/0x480 [ 2019.565763][T17373] elevator_set_default+0x375/0x440 [ 2019.571524][T17373] blk_register_queue+0x3f3/0x4e0 [ 2019.577160][T17373] __add_disk+0x6cb/0xe30 [ 2019.582080][T17373] add_disk_fwnode+0x100/0x3a0 [ 2019.587405][T17373] nbd_dev_add+0x733/0xb60 [ 2019.592381][T17373] nbd_init+0x15f/0x1e0 [ 2019.597177][T17373] do_one_initcall+0x250/0x870 [ 2019.602506][T17373] do_initcall_level+0x10a/0x1a0 [ 2019.608025][T17373] do_initcalls+0x59/0xa0 [ 2019.612915][T17373] kernel_init_freeable+0x29d/0x3e0 [ 2019.618693][T17373] kernel_init+0x1d/0x1d0 [ 2019.623589][T17373] ret_from_fork+0x514/0xb70 [ 2019.628748][T17373] ret_from_fork_asm+0x1a/0x30 [ 2019.634066][T17373] [ 2019.634066][T17373] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 2019.641931][T17373] __mutex_lock+0x19d/0x1550 [ 2019.647084][T17373] elevator_change+0x1af/0x480 [ 2019.652411][T17373] elevator_set_none+0xb5/0x140 [ 2019.657819][T17373] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 2019.664182][T17373] nbd_start_device+0x189/0xb30 [ 2019.669592][T17373] nbd_genl_connect+0x1597/0x1c10 [ 2019.675167][T17373] genl_family_rcv_msg_doit+0x233/0x340 [ 2019.681277][T17373] genl_rcv_msg+0x614/0x7a0 [ 2019.686344][T17373] netlink_rcv_skb+0x226/0x4a0 [ 2019.691674][T17373] genl_rcv+0x28/0x40 [ 2019.696226][T17373] netlink_unicast+0x7bb/0x940 [ 2019.701538][T17373] netlink_sendmsg+0x813/0xb40 [ 2019.706858][T17373] sock_sendmsg_nosec+0x13a/0x180 [ 2019.712442][T17373] ____sys_sendmsg+0x54e/0x850 [ 2019.717768][T17373] ___sys_sendmsg+0x2a5/0x360 [ 2019.723012][T17373] __x64_sys_sendmsg+0x1b1/0x290 [ 2019.728525][T17373] do_syscall_64+0x174/0x580 [ 2019.733682][T17373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2019.740135][T17373] [ 2019.740135][T17373] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 2019.748909][T17373] blk_alloc_queue+0x544/0x690 [ 2019.754256][T17373] __blk_mq_alloc_disk+0x194/0x390 [ 2019.759933][T17373] nbd_dev_add+0x494/0xb60 [ 2019.764898][T17373] nbd_init+0x15f/0x1e0 [ 2019.769610][T17373] do_one_initcall+0x250/0x870 [ 2019.774946][T17373] do_initcall_level+0x10a/0x1a0 [ 2019.780447][T17373] do_initcalls+0x59/0xa0 [ 2019.785336][T17373] kernel_init_freeable+0x29d/0x3e0 [ 2019.791101][T17373] kernel_init+0x1d/0x1d0 [ 2019.795999][T17373] ret_from_fork+0x514/0xb70 [ 2019.801158][T17373] ret_from_fork_asm+0x1a/0x30 [ 2019.806471][T17373] [ 2019.806471][T17373] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 2019.813741][T17373] __lock_acquire+0x1520/0x2cf0 [ 2019.819156][T17373] lock_acquire+0x106/0x350 [ 2019.824216][T17373] fs_reclaim_acquire+0x71/0x100 [ 2019.829712][T17373] prepare_alloc_pages+0x15b/0x650 [ 2019.835378][T17373] __alloc_frozen_pages_noprof+0x12f/0x380 [ 2019.841757][T17373] alloc_pages_mpol+0x212/0x380 [ 2019.847173][T17373] alloc_pages_noprof+0xac/0x2a0 [ 2019.852670][T17373] __pud_alloc+0x3a/0x460 [ 2019.857554][T17373] handle_mm_fault+0x1f85/0x3080 [ 2019.863054][T17373] do_user_addr_fault+0x744/0x1340 [ 2019.868731][T17373] exc_page_fault+0x6a/0xc0 [ 2019.873795][T17373] asm_exc_page_fault+0x26/0x30 [ 2019.879208][T17373] rep_movs_alternative+0x30/0xa0 [ 2019.884796][T17373] _copy_from_user+0x7a/0xb0 [ 2019.889945][T17373] rfcomm_dev_ioctl+0x28c/0x21c0 [ 2019.895541][T17373] sock_do_ioctl+0x101/0x320 [ 2019.900735][T17373] sock_ioctl+0x57a/0x7e0 [ 2019.905624][T17373] __se_sys_ioctl+0xfc/0x170 [ 2019.910820][T17373] do_syscall_64+0x174/0x580 [ 2019.915964][T17373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2019.922431][T17373] [ 2019.922431][T17373] other info that might help us debug this: [ 2019.922431][T17373] [ 2019.932711][T17373] Chain exists of: [ 2019.932711][T17373] fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock [ 2019.932711][T17373] [ 2019.945368][T17373] Possible unsafe locking scenario: [ 2019.945368][T17373] [ 2019.952843][T17373] CPU0 CPU1 [ 2019.958374][T17373] ---- ---- [ 2019.963810][T17373] rlock(&mm->mmap_lock); [ 2019.968262][T17373] lock(sk_lock-AF_INET6); [ 2019.975369][T17373] lock(&mm->mmap_lock); [ 2019.982249][T17373] lock(fs_reclaim); [ 2019.986269][T17373] [ 2019.986269][T17373] *** DEADLOCK *** [ 2019.986269][T17373] [ 2019.994498][T17373] 2 locks held by syz.7.11263/17373: [ 2019.999802][T17373] #0: ffffffff901dc800 (rfcomm_ioctl_mutex){+.+.}-{4:4}, at: rfcomm_dev_ioctl+0x25f/0x21c0 [ 2020.010019][T17373] #1: ffff88802c9edcf8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 2020.019998][T17373] [ 2020.019998][T17373] stack backtrace: [ 2020.025916][T17373] CPU: 0 UID: 0 PID: 17373 Comm: syz.7.11263 Not tainted syzkaller #0 PREEMPT(full) [ 2020.025944][T17373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2020.025960][T17373] Call Trace: [ 2020.025971][T17373] [ 2020.025983][T17373] dump_stack_lvl+0xe8/0x150 [ 2020.026020][T17373] print_circular_bug+0x2e1/0x300 [ 2020.026048][T17373] check_noncircular+0x12e/0x150 [ 2020.026076][T17373] __lock_acquire+0x1520/0x2cf0 [ 2020.026108][T17373] ? __kernel_text_address+0xd/0x30 [ 2020.026129][T17373] ? unwind_get_return_address+0x4d/0x90 [ 2020.026153][T17373] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2020.026183][T17373] ? arch_stack_walk+0xfb/0x150 [ 2020.026209][T17373] ? ima_match_policy+0x106/0x21c0 [ 2020.026247][T17373] ? prepare_alloc_pages+0x15b/0x650 [ 2020.026279][T17373] lock_acquire+0x106/0x350 [ 2020.026308][T17373] ? prepare_alloc_pages+0x15b/0x650 [ 2020.026340][T17373] ? __lock_acquire+0x683/0x2cf0 [ 2020.026376][T17373] fs_reclaim_acquire+0x71/0x100 [ 2020.026405][T17373] ? prepare_alloc_pages+0x15b/0x650 [ 2020.026434][T17373] prepare_alloc_pages+0x15b/0x650 [ 2020.026469][T17373] __alloc_frozen_pages_noprof+0x12f/0x380 [ 2020.026505][T17373] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2020.026539][T17373] ? __pfx_policy_nodemask+0x10/0x10 [ 2020.026580][T17373] alloc_pages_mpol+0x212/0x380 [ 2020.026625][T17373] alloc_pages_noprof+0xac/0x2a0 [ 2020.026647][T17373] __pud_alloc+0x3a/0x460 [ 2020.026675][T17373] handle_mm_fault+0x1f85/0x3080 [ 2020.026706][T17373] ? __pfx_mt_find+0x10/0x10 [ 2020.026738][T17373] ? handle_mm_fault+0xec/0x3080 [ 2020.026765][T17373] ? unwind_get_return_address+0x4d/0x90 [ 2020.026791][T17373] ? __pfx_handle_mm_fault+0x10/0x10 [ 2020.026823][T17373] ? __lock_acquire+0x683/0x2cf0 [ 2020.026857][T17373] ? lock_mm_and_find_vma+0xa7/0x340 [ 2020.026888][T17373] do_user_addr_fault+0x744/0x1340 [ 2020.026930][T17373] exc_page_fault+0x6a/0xc0 [ 2020.026959][T17373] asm_exc_page_fault+0x26/0x30 [ 2020.026981][T17373] RIP: 0010:rep_movs_alternative+0x30/0xa0 [ 2020.027017][T17373] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 63 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 2020.027037][T17373] RSP: 0018:ffffc90002547ab8 EFLAGS: 00050202 [ 2020.027059][T17373] RAX: 00007ffffffff001 RBX: 0000000000000018 RCX: 0000000000000018 [ 2020.027075][T17373] RDX: 0000000000000001 RSI: 0000200000000100 RDI: ffffc90002547c10 [ 2020.027092][T17373] RBP: ffffc90002547cb0 R08: ffffc90002547c27 R09: 1ffff920004a8f84 [ 2020.027109][T17373] R10: dffffc0000000000 R11: fffff520004a8f85 R12: ffff888053d43000 [ 2020.027127][T17373] R13: dffffc0000000000 R14: ffffc90002547c10 R15: 0000200000000100 [ 2020.027156][T17373] _copy_from_user+0x7a/0xb0 [ 2020.027178][T17373] rfcomm_dev_ioctl+0x28c/0x21c0 [ 2020.027210][T17373] ? kasan_quarantine_put+0xbb/0x1f0 [ 2020.027239][T17373] ? __pfx_rfcomm_dev_ioctl+0x10/0x10 [ 2020.027269][T17373] ? tomoyo_path_number_perm+0x219/0x5f0 [ 2020.027403][T17373] ? tomoyo_path_number_perm+0x219/0x5f0 [ 2020.027443][T17373] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 2020.027472][T17373] sock_do_ioctl+0x101/0x320 [ 2020.027505][T17373] ? __pfx_sock_do_ioctl+0x10/0x10 [ 2020.027534][T17373] ? hook_file_ioctl+0x1f0/0x5f0 [ 2020.027565][T17373] sock_ioctl+0x57a/0x7e0 [ 2020.027603][T17373] ? __pfx_sock_ioctl+0x10/0x10 [ 2020.027632][T17373] ? __fget_files+0x2a/0x420 [ 2020.027662][T17373] ? __fget_files+0x3a2/0x420 [ 2020.027692][T17373] ? __fget_files+0x2a/0x420 [ 2020.027723][T17373] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2020.027752][T17373] ? __pfx_sock_ioctl+0x10/0x10 [ 2020.027780][T17373] __se_sys_ioctl+0xfc/0x170 [ 2020.027803][T17373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2020.027827][T17373] do_syscall_64+0x174/0x580 [ 2020.027854][T17373] ? trace_irq_disable+0x3b/0x140 [ 2020.027883][T17373] ? clear_bhb_loop+0x40/0x90 [ 2020.027909][T17373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2020.027931][T17373] RIP: 0033:0x7f25e699e0d9 [ 2020.027953][T17373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2020.027971][T17373] RSP: 002b:00007f25e7919028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2020.027994][T17373] RAX: ffffffffffffffda RBX: 00007f25e6c25fa0 RCX: 00007f25e699e0d9 [ 2020.028011][T17373] RDX: 0000200000000100 RSI: 00000000400452c8 RDI: 0000000000000005 [ 2020.028027][T17373] RBP: 00007f25e6a35024 R08: 0000000000000000 R09: 0000000000000000 [ 2020.028041][T17373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2020.028056][T17373] R13: 00007f25e6c26038 R14: 00007f25e6c25fa0 R15: 00007ffccbff0338 [ 2020.028083][T17373] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2021.140508][T17373] openvswitch: netlink: Message has 1 unknown bytes. [ 2021.425424][T17116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2021.492454][T17116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2021.647646][T17116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2023.399734][T27463] gretap0: left promiscuous mode [ 2023.416939][T27463] bridge0: port 2(gretap0) entered disabled state [ 2023.448582][T27463] bridge_slave_0: left promiscuous mode [ 2023.469482][T27463] bridge0: port 1(bridge_slave_0) entered disabled state [ 2023.508274][T27463] dvmrp1: left allmulticast mode [ 2024.078391][T27463] bond2 (unregistering): (slave bridge3): Releasing active interface [ 2024.178913][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 2024.396195][T27463]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 2024.419634][T27463]  (unregistering): (slave bond5): Releasing backup interface [ 2024.492962][T27463] bond5 (unregistering): left allmulticast mode [ 2024.520022][T27463]  (unregistering): Released all slaves [ 2024.540128][T27463] bond1 (unregistering): Released all slaves [ 2024.616773][T27463] bond2 (unregistering): Released all slaves [ 2024.703548][T27463] bond3 (unregistering): Released all slaves [ 2024.752424][T27463] bond4 (unregistering): Released all slaves [ 2024.767054][T27463] bond5 (unregistering): Released all slaves [ 2024.784028][T27463] bond6 (unregistering): Released all slaves [ 2024.825931][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 2024.926198][T27463] : left promiscuous mode [ 2025.043786][T27463] tipc: Disabling bearer [ 2025.079214][T27463] tipc: Left network mode [ 2025.467854][T27463] hsr_slave_0: left promiscuous mode [ 2025.483394][T27463] hsr_slave_1: left promiscuous mode [ 2026.068952][T27463] team0 (unregistering): Port device team_slave_1 removed [ 2026.118616][T27463] team0 (unregistering): Port device team_slave_0 removed [ 2026.501570][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 2026.762067][T27463] IPVS: stop unused estimator thread 0... [ 2027.120571][T27463] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2027.194861][T27463] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2027.278791][T27463] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2027.309219][T27463] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2027.369397][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 2027.477577][T27463] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2027.543279][T27463] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2027.658704][T27463] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2027.699125][T27463] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2027.757010][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3 [ 2028.524266][T27463] bridge_slave_1: left allmulticast mode [ 2028.538313][T27463] bridge_slave_1: left promiscuous mode [ 2028.561839][T27463] bridge0: port 2(bridge_slave_1) entered disabled state [ 2028.599225][T27463] bridge_slave_0: left allmulticast mode [ 2028.608024][T27463] bridge_slave_0: left promiscuous mode [ 2028.616428][T27463] bridge0: port 1(bridge_slave_0) entered disabled state [ 2028.627799][T27463] bridge_slave_1: left allmulticast mode [ 2028.633741][T27463] bridge_slave_1: left promiscuous mode [ 2028.641997][T27463] bridge0: port 2(bridge_slave_1) entered disabled state [ 2028.655007][T27463] bridge_slave_0: left allmulticast mode [ 2028.662558][T27463] bridge_slave_0: left promiscuous mode [ 2028.668344][T27463] bridge0: port 1(bridge_slave_0) entered disabled state [ 2028.703980][T27463] bridge_slave_1: left promiscuous mode [ 2028.710470][T27463] bridge0: port 2(bridge_slave_1) entered disabled state [ 2028.719918][T27463] bridge_slave_0: left promiscuous mode [ 2028.725681][T27463] bridge0: port 1(bridge_slave_0) entered disabled state [ 2028.954635][T27463] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2029.096553][T27463] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2029.116188][T27463] bond0 (unregistering): Released all slaves