last executing test programs: 9m47.77164416s ago: executing program 0 (id=5642): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0xc, &(0x7f0000001180)="b5748806d710b673c0b01cae3df1a70d08404cf46425386cae6f0caf926ed1f485840c741fe85118d3aa638b56f6ef3973333acae1f0be59ddb9c744097128539f7e9873a2370753b854d87c1be89398f8d83e87e7bb6d8bdc45e78b71515f879c26460e6497100817468f7bcb1d17f4d1061d872b67ce29787fb41de78a2b8c208853040ab2314f6315fe014ddfc1b0fdb468f13e8fdeffaecd66963302b0d3e8b8f2eb01d9b5bc520ae3b7f04c755edea0773897258eebe98bce3c6fa55463968eef438e174e0f31d5b9994e4263f9d167ec1e8dc3981c97ef8ac7269b1cea741fda7ce7", 0xe5) (async) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) r1 = socket$rxrpc(0x21, 0x2, 0xa) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000000c0)={{0x0, 0xfffffffffffffeff, 0x2, 0xffffffff, 0xffffffffffffffff, 0x6, 0xb6, 0x0, 0x4, 0x4, 0x2, 0x7, 0x7, 0x1, 0x2}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000000180)={r2, 0x10001}) (async) bind$rxrpc(r1, &(0x7f0000000080)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x8, @empty, 0x5}}, 0x24) 9m47.666632612s ago: executing program 0 (id=5644): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000040)={0x0, 0x54, "6ff72784af6a89de209d8397928a2b657760f06406c93dec7b8b1a4c0a12107e08eaf4e63299726b1fbb14cc1a5b6ed9f59fcd7cef2be3c4ddda4750f89a233a69a25d0951f8234f6143363745d5059767696abd"}, &(0x7f00000000c0)=0x5c) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000100)={r2, 0x2b16, 0x30, 0x3, 0x8000000000000001}, &(0x7f0000000140)=0x18) tee(r1, r0, 0x101, 0x5) bind$l2tp6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6659, 0x4}, 0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000001c0)={0x40, 0x8009, 0x8, 0x9, r2}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) ioctl$XFS_IOC_FSGETXATTRA(r4, 0x801c582d, &(0x7f0000000240)) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r5, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x48, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xd}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xf}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb6}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffffffc}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x87}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x88d0}, 0x723d243e8d0c65bc) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000500)={0x2, 0x9, 0xd4, &(0x7f0000000400)=""/212}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x2f, 0x9, 0x0, 0x6, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x700, 0x40, 0x7}}) sendmsg$nl_route_sched(r0, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=@gettclass={0x24, 0x2a, 0x1, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x34c53dc4ec878acd, 0xa}, {0xd, 0x10}, {0xe, 0xffe0}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4090}, 0x4) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), r0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x58, r7, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x83fe0157a3c8742a}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x91}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x48894}, 0x8040) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000008c0)={'batadv_slave_1\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={r1, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x30, &(0x7f00000009c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000a00), &(0x7f0000000a40), 0x8, 0xdf, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000cc0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x68, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x10000004) bind$xdp(r1, &(0x7f0000000d00)={0x2c, 0x8, r9, 0xa}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000ec0)={0x0, 0x0}, &(0x7f0000000f00)=0xc) r11 = getpid() r12 = getpid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001280)={0x0, 0x0}, &(0x7f00000012c0)=0xc) r14 = getpid() ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000001300)=0x0) r16 = getuid() getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001a80)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f0000001b80)=0xe8) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000001bc0)=0x0) sendmsg$netlink(r1, &(0x7f0000001d40)={&(0x7f0000000d40)=@proc={0x10, 0x0, 0x25dfdbfd, 0x40000000}, 0xc, &(0x7f0000001a00)=[{&(0x7f0000000d80)={0x140, 0x2d, 0x200, 0x70bd26, 0x25dfdbfc, "", [@nested={0x87, 0x1, 0x0, 0x1, [@generic="e4739d3ab4f23a8a09e0e74aba0233f75bbcc70a015d3a9944701aa20b7da70cfb46ac4cd5e4451cc6f3459f27a4329c40def3e6b2f241d01683bf12749c8bee17074486a733895cb180b82462906439af5c249c3fa8e4f807d9018a6f59021fe5bc20d77cd918aa46e9bb4914bc811188686c1752ddabb878b9c002592bcbb30e1656"]}, @generic="2112fab36820b3502542a829bb720c8bac8d4790f1b1100a3b1be5b1b54291e08b15d329019ef9b56cef172072c687a5381112564795fb335673f388d9a99aaa51048831b8119b7a33a92c4f58d81177382818bcefa512cbab124a859721f2495b43a8155635b8e2940ebcb115f30412a03786dc130ed1c2e94af2f0e14c35cf86402d06e5d25b54ff0b13594b10e2606ae87e2da046f331b799e20be0d2d68c0b0d523e8a"]}, 0x140}, {&(0x7f0000000f40)={0x338, 0x35, 0x800, 0x70bd2b, 0x25dfdbfc, "", [@nested={0xe8, 0x111, 0x0, 0x1, [@nested={0x4, 0xbf}, @generic="8e42e64994cde0ab2db9dec664ffa712649be23304afbd4185a77a411d4d3f974d685f5d0dafc9dc6d5cf68d2a431ecc97e751a2cbcbaba365e220e69fb0d705fb3f6723efeef333615b959d2d4bd6d19e9858b1bd5e672b2937c76c7d0bd356b7871773bbfa74f62273f9b97d532ee26f904e30264cad1207c6c655e9950eb8a9bdb3c7df12608bc9ee714e5208432d72405b663ae72a48f02316e3822f5adaddfaaca50d10442555d4133eac33d290dca51e7f46d3a0f7dc26db46fac1ea5d57c7fea2c77a7b5a05a1e8667efd50b0a63089bae7158ed1b62b165da2a395aa"]}, @nested={0xd5, 0x147, 0x0, 0x1, [@generic="32b23ba0aacd5fca1af1729a8af90efb32f79f185c78fea34a1e42c9b44fa42c3ec9dc2bbaaf70ec28d4c5da0c114b7cf6a9b8a826494fe4e5b844bb201134f18a8f3976e0cdc13d78f84a0d956fcac6ff2144032283ef0e34ca1ccf42c34d17ade0376ffcf079628c637b7a5a4d2352abb6429e9a78a77ce7aa4950d4e9232634633f8f2c7bfdcd22ed2608cfd3aff55e35b2f3523847617b287a167a2c3d38741bca3e746d5af07c7bff7c8a6dedf5e2b4d13bf24fba54498e1dcc5072477b4da38251dd1f229a6debcf469420265b69"]}, @typed={0x8, 0xf5, 0x0, 0x0, @u32=0x5}, @nested={0x155, 0x4, 0x0, 0x1, [@generic="22d2162bbda427ebe4f9f1b05f47bf6a740fc6c232e17346485681debb9bb37fe70a26ebfb65b0ec4cc69a950d684742daff8245f72b43911174804e32b00d109f6836c702ae7724629a9103ee4f0d9af065ec1402ed4315a5760d8a82f954b19ee3ca80e3972b2e0fa6e1dcaf87da0f9dd4b70bccda58a1c3a36a6da4db5a9429cc3cdd9ba61b6b29e07a026088ee8dea474e58b92d2461ec679e1481718e93c14d3ef5576a2a187b504beda046dcb0d77ebffddcac449b0e1ac752313877db3eb92d67a1bc4c", @typed={0x8, 0xfb, 0x0, 0x0, @u32}, @nested={0x4, 0x6}, @typed={0xc, 0x61, 0x0, 0x0, @str='syztnl2\x00'}, @generic="157f5e63987643abeb885c97f769f8b9893b7b5d27bbf805bc54beba15a32e5cba4073adc73ecf66294c8b3c426c0f81200be888b58784f58a546e9740d2ff2edec6e2d78c8b33468885f3653046e5a17afea0fccd2cf79072d0fed8e096ca877dc498b8da8e", @typed={0x8, 0x4a, 0x0, 0x0, @uid=r10}, @nested={0x4, 0xe2}]}, @typed={0x8, 0x104, 0x0, 0x0, @pid=r11}]}, 0x338}, {&(0x7f0000001340)={0x274, 0x20, 0x200, 0x70bd2a, 0x25dfdbfb, "", [@nested={0x13f, 0xeb, 0x0, 0x1, [@nested={0x4, 0x9d}, @typed={0x8, 0x117, 0x0, 0x0, @pid=r12}, @generic="e0d98b138cbed728c1d0b3c1a86c27e42cf7d826388273a949a16fe7de20ab7594bd3ce40a20d870c8d8e0c4bdeda142a5557384cd1815b0afd81d819bd079399892c54de1adea77bfa9960abdc0910e36eaa680e00821baa645a003", @nested={0x4, 0x11d}, @generic="3318873f43d1e980ae2e2e17fb530f35939a7834ac8ffbead464642fae5720245979aa3f44e1f3a70a10ebc625bfa7f2439ef6ab7d5a41e9de7cd739df158cf1210b2225938b81b48bdf2a97fbcb5abe9eabd422fe975eff721b06ed6f9d8eaf05f56a05ce8964b23a04d6be82efc474427b8619464ee59849a80675da74a1772c172959c070fac37a3cffe4066cd9902390313910b34950ae84ba62c0909411a21e6b067c0925759a2d5411086139acf27bd6d4c8a07909f15300e2b235d7dcd576797a265920ce377fe244a16fcb"]}, @typed={0x8, 0xcb, 0x0, 0x0, @uid=r13}, @typed={0x8, 0xc9, 0x0, 0x0, @pid=r14}, @typed={0x8, 0x3e, 0x0, 0x0, @pid=r15}, @generic="40ae1f9f9a82bcc4fea03dbdca1bba433535cf6be3b9fee844d595b29e1d139bcdf15962c41fe3f3b177ea0fe75cfd6dfc1ffcc80cbcf6c5511c09d7ff4320b5e582001db3f7e5586494fa3326f732e30bcac7de7f9acdf431a548ae3da9c6965f5664df87b4d2ea126ca19ac5ab316ce016be75bf44d01660f8b5c59c201a118c8185e1eb0b687be879e8f62d267d9ef6c0419564ceec959c78a7b7d67cbb5187e7f6300704de8f9dd20f303bba525feebbe72a8bf1b19279113b3cdc870d31b1284495c7cff5f718c278bbfbeb2a28044384de21f846a780e4a3c7f00b97b5", @typed={0x4, 0x36}, @typed={0x9, 0x91, 0x0, 0x0, @str='syz0\x00'}, @nested={0x1c, 0xb4, 0x0, 0x1, [@nested={0x4, 0x113}, @nested={0x4, 0x12c}, @nested={0x4, 0x82}, @typed={0xc, 0x8c, 0x0, 0x0, @u64=0x7fffffff}]}]}, 0x274}, {&(0x7f00000015c0)={0x38, 0x17, 0x100, 0x70bd2b, 0x25dfdbfe, "", [@generic="f5a843b5b979e28022c753d1633d521814e2430a1eaf9d44d10b4c6ee7aac9cbe088da7cac"]}, 0x38}, {&(0x7f0000001600)={0x28c, 0x2e, 0x8, 0x70bd2b, 0x25dfdbfd, "", [@nested={0x27b, 0xea, 0x0, 0x1, [@generic="3230ec0a4b692df5a06274cb06a93f6a6ce4eeb141278ab359a7e203175626c271e9d8d85630c4b4f392d0b4caa10e35d7df04ab7c7f5db919406a31f0d6b25d95ecd99f915357b177a10c0d04ec3756dca7f8d1afcfef85fe2d55134e09b3536235", @generic="5edf38566ac69a6e3d7185b49c059bb21ef36e03c8bfa23f54034e19089fdb301f31f4bfe7cd042c6bf55243411362aecce41accfdc7338ea9f0040f4e165d7ed64c8070772c1fc8b0c82c2792c53e1c443c15a3b5e416aac2f5608cfdb4a1beb816d46571e4ff0a437176a663ed1260142fe0", @typed={0x14, 0x147, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x8, 0xae, 0x0, 0x0, @u32=0x397c5d16}, @generic="4b6d898469cfda067fc2e368a7c79c82b02aeae702d61db80ac8bb4c94e1ac1d68b429b0b5041239dc4f507ac1f49098dc07ae7c5254c1d019bae21a106eaa8ae3a39aa6cc9a47f426149096fcbcb9d8cce26499cb683d636388ec31f46cfcc0d362e2ce588b4bc10a2b62863b86c4774e481a322af86535d69b344194ef9eb1c150a7ade2ad1c97c1bb5e0e5f748664690de2172927", @typed={0xc, 0x106, 0x0, 0x0, @u64=0xcf}, @nested={0x4, 0x131}, @generic="686f4bfd7a0ceaaedfc8d4e4d02748bbe8e2b3200b081a84b64c40255422f8d3c2c40f42d2c98458", @typed={0xb7, 0x58, 0x0, 0x0, @binary="6810b2f9be8edd29d5d001c2577a00316a3b7651ff61b38666e89f400149c4d4bab5d03d506e3e8f2243fd4c4ffdcdd39447a5f9dfb064f4340997a01beec35736a2f65dac8ca64231d66424a92336887ff269656bd05466be5709aa951e8c7e372987dcf23994cd40744e2cd15c9ae6f5c0d32808033afe1350a316d26b5903ea61fdfa153b2a3f47d0809ab2d57464d2458a52dcea39bf32f30b812929e9ca2d04f55f90ade6992fab585e2c7951dbfcc940"}]}]}, 0x28c}, {&(0x7f00000018c0)={0x13c, 0x26, 0x100, 0x70bd2b, 0x25dfdbfc, "", [@typed={0x14, 0x29, 0x0, 0x0, @ipv6=@mcast2}, @nested={0x116, 0x107, 0x0, 0x1, [@typed={0x14, 0x15a, 0x0, 0x0, @ipv6=@private1}, @typed={0xd, 0x66, 0x0, 0x0, @str='\xf1}](:*]-\x00'}, @nested={0x4, 0x7a}, @nested={0x4, 0x38}, @generic="33447846b03d50260b57221bf7b54acfb700a2f79e4674353bd9a54869af570b3376cf493d8ce22dc3e85b5afb97d0ae6fd9e754ff723ea71e51aa432933501f7d4f9c876faab82d25e61627c1cedc33144f7e42a9187df054f0fcd492d38f25c4de943a1beab9f2e83c8548cc5142e4cbe43d739fea7451813ffb459f53528ee172f885f928171a2698c525f41eded5873e5f3a2028c61aa52234f41a1b20dc4767cafbdf74f7d946a7bac8c85bf4a395006e01369a0bacdc4046869c1a07f787fa0be749afc62ab5e77e06f76ed7f28997", @typed={0x8, 0x33, 0x0, 0x0, @uid=r16}, @typed={0xc, 0xff, 0x0, 0x0, @u64=0x759}]}]}, 0x13c}], 0x6, &(0x7f0000001cc0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r17, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r18}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r3, r0, r1]}}], 0x80}, 0x4) 9m47.553890498s ago: executing program 0 (id=5648): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rthdr={{0x18, 0x29, 0x5, {0x0, 0x0, 0x2}}}], 0x18}}], 0x1, 0x0) (async) r0 = socket(0x1, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x2, 0x12, 0x8, 0xffffffffffffffff, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x2f, 0x1, 0x4, 0x0, 0x41, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x1, 0x10, 0xfffffff7, 0x1}}) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000003c0)={'erspan0\x00', &(0x7f00000002c0)={'ip_vti0\x00', 0x0, 0x0, 0x7, 0x9, 0x9683, {{0x36, 0x4, 0x0, 0x8, 0xd8, 0x67, 0x0, 0x7, 0x29, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x2a}, {[@rr={0x7, 0x1b, 0xc9, [@empty, @multicast2, @multicast1, @local, @multicast2, @multicast2]}, @cipso={0x86, 0x13, 0x3, [{0x1, 0xd, "a17afedfc911aeefb0e72b"}]}, @cipso={0x86, 0x58, 0x1, [{0x7, 0xe, "2c0cd64f733f165851b45612"}, {0x6, 0x9, "4b74a7651117c8"}, {0x5, 0x6, "fde78666"}, {0x2, 0x5, "d05d9f"}, {0x6, 0xa, "7d241cbab84731e2"}, {0x0, 0x3, 'P'}, {0x1, 0xb, "554b104399e1975989"}, {0x0, 0xa, "28c0c0d48f7f13a7"}, {0x2, 0xe, "9922d3ddffe09d44c0b453e5"}]}, @timestamp_addr={0x44, 0x24, 0xa1, 0x1, 0x6, [{@local, 0x2}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x7}, {@broadcast, 0x9}, {@local, 0x6acf}]}, @end, @lsrr={0x83, 0x17, 0xdb, [@multicast2, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x2d}, @rand_addr=0x64010100, @local]}]}}}}}) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000400)={'ip6_vti0\x00', 0x0, 0x4, 0x7f, 0x1, 0x8001, 0x8, @loopback, @dev={0xfe, 0x80, '\x00', 0x40}, 0x7800, 0x40, 0x8, 0xfffff1ed}}) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010000217fffff0080030c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r9, @ANYBLOB="080003"], 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x8000) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r1, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000500)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7e, &(0x7f00000005c0)=[{}], 0x8, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x32, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000880)={'ip6_vti0\x00', &(0x7f0000000800)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x2, 0x1, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x700, 0x10, 0xfffff000}}) (async) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) r14 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="05030200157e0000140012800c0001006d616376746170000400028008000500", @ANYRES32=r13, @ANYBLOB="080004004440"], 0x44}, 0x1, 0x0, 0x0, 0x8840}, 0x48094) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000008c0)={'batadv_slave_1\x00', 0x0}) (async) r16 = socket(0x2a, 0x2, 0x0) getsockname$packet(r16, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r17, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r17, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x73}]}}]}, 0x44}}, 0x24000000) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000980)={'syztnl0\x00', &(0x7f0000000900)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x8, 0x40, 0x1, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x10, 0x8000, 0x100, 0xfffff801}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000009c0)={0x0, @initdev, @private}, &(0x7f0000000a00)=0xc) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000ac0)={'ip_vti0\x00', &(0x7f0000000a40)={'tunl0\x00', 0x0, 0x10, 0x700, 0x6, 0x1000, {{0xe, 0x4, 0x1, 0x4, 0x38, 0x65, 0x0, 0xd8, 0x4, 0x0, @multicast2, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0xfc, 0x3, 0x1, [{@multicast2, 0x400}, {@multicast2, 0x10000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@remote, 0x3}]}]}}}}}) (async) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000b00)={0x0, @multicast1, @dev}, &(0x7f0000000b40)=0xc) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000000d80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d40)={&(0x7f0000000b80)={0x1a4, r4, 0x100, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r21}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x810}, 0x40d5) 9m47.377961049s ago: executing program 0 (id=5651): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r1, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x66}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3fc}]}, 0x30}, 0x1, 0x0, 0x0, 0x40005}, 0x20000004) socket$pppl2tp(0x18, 0x1, 0x1) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000001c0)={'nr0\x00', &(0x7f0000000180)=@ethtool_rxfh={0x47, 0x3, 0x0, 0x6, 0x7, "11e949", 0x3, [0x1, 0x170000, 0x8]}}) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000000200)='geneve1\x00') sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffff8000}, 0x1c, &(0x7f0000001580)=[{&(0x7f0000000280)="83fab8ec5cc83a310decf4383faf47a820db4428c24b13ef852340859a8f0f7cd48329b14987f644a18082aca02d49270516f3dbe48e37cad06b70aa983e8f84fc790ed92b7dfc71e837c32ab3ec1d80284f37277b4057d7e165adde6bba54be527194d9ffcedf4fa41e082859ffa54e796bdd4d1cfba73ffb8d162bb89b34ef1660523d04e6e703b98af153b1ce5075960e4bc6490fb93f4d0437780546cf95e3ac36169ab2bac25237aa00abdb6d22afc8a6514b517067704d08ba95b7be891402ddcf13b3d9ca0a6e4e05fc76b3537de522d1", 0xd4}, {&(0x7f0000000380)="372a7909fcfb82ba64bc810cc0215f90bb16c953307dbae822357b4b4e685ba29b054c26362660955a063364b4d7968b2daae38d54f59e9179faeba0562ba50af3eaccc093f32f400a7f6ad97cd2dd356a866e24eebcaa2a5782770c47c407191a1c500004", 0x65}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="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", 0xfc}, {&(0x7f0000001500)="628d52fd56074331ac47895d3250a9025cb734099bc249460fa8b39907671543b4357008e8f46ee1c314f327c1361431b09fab2880c61d6bb6af3a110cbc4004f3170dd62164861de3d7ae7274cd41b2fdee0a5ceb8a5fd362", 0x59}], 0x5, &(0x7f0000001600)=[@rthdr={{0x58, 0x29, 0x39, {0x2e, 0x8, 0x1, 0x81, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1]}}}], 0x58}}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001680)="5ea326aabea16a52d2eb0a5b5417ee76b884bf4433655dc9fb912ffc37e079f24bd0e83fefc202b5249a14fccb56cd9ada5920eec4b491556bd74ef8bdf1ee43f8ac92c23bca55a8ac7fcdac8f0c7cbdfe1be5a3c4952cc1f2053ee42506840202d63fbe834f82b9eb7333497bdd9d81553499dc7b2b89f981b8b9a408242184be40fc97ac5c2a2c6888fccc45835937f4fc5124d1d98e0f32098af3ce31c97a94be6268a6058add8de51a290488520c6241c14ece060b406a4bbd3ffb6c5f4b954a979531d2afc7aa35fe64cef9dd1f82d68a27007f08cf138a160ac33e7b96", 0xe0}, {&(0x7f0000001780)}, {&(0x7f00000017c0)="02ab1e25a2f5b21c44569f4dcb698bd5c0f7eee471170847cad60e09a04b423a8f09ad12a3004afb835a6fdd39e28701832f3bec697fc642c1ef0e9c0e27bcb74c80641379c7e71c49c0c1403a4abc7574662cf678b0d872569aa71bcfbdcb62e737694f4432daacc9fa457d0a8ba118497e4ee25c2897bf2f9b4e752776e0ecbadc6c5a853d8feb071c08ba14e3bb4dd963af8f", 0x94}, {&(0x7f0000001880)="2ee11b6b1da432ebf263ecf9ef220fd026da4b5290babce887f0639371a84bed552dcb2d613a728dbb442eef60c2289a202e5efe8c694fec043b3c2611962116839ce33543869697577764a275f3f7700ffc610c95b97ddf0d197f4024e95abe3187301dd8ddcd59acc7922c45dbbf0d1ff5afa0e5679a3a7d3db545268db8386651b55f88413a4b4ee9b31fb01b8648b8e675fe8fcfbdb7f9e9ca1bb9cee3053d1291319141c0006ad831a1afb9aa31c431cc4cf9266dfb1eb809a2ca114684d82465dc2bd79b40448241976e882f0601c490efff43318a0c2b8cb68973ea11088c289d6b28c92c0b6b1b6a593db1408535e8200e", 0xf5}, {&(0x7f0000001980)="3eb5b66e9b56bd1e08de52edf0f903a6bd03fefdc48c274ac2c9bb748b0c69e67c48cfc347e7df00bf69d3f7e453f5863e2f9ce3611e38586a132be61204fe07b97c36342d44e72e1f2231353d4bec9e6fbe27af5a5b11feb305f217cf2002c22051f81d5c19fc1b9293baa1092d65da093981083cf02edd17687c2c6ffdafa6e7bcfa9cb738aaf1d69a896d024e0ea0c45bca9b5f4f91408b73b4f620d70f40568e54ffddef16f3a7047bbf9524019066c094ff191e9ddde25d9567bbb94240083aebbbb8ba7ce8ad5a7b709ded9402fec9d72e44bfc362c82ec3b2", 0xdc}], 0x5, &(0x7f0000001b00)=[@hopopts_2292={{0x100, 0x29, 0x36, {0x1, 0x1c, '\x00', [@generic={0x0, 0x8f, "4b866c1916d89e5989bee59463fc05d74eafcab03ba607d3d804f4017544842f35761328be1ac9e7633dd967c89f92273ab6791a242ff576746499a05d70d64449d7cccdb4b11e087ac28ccab9ae500270f40ecfbc7e7f3f8ab6f7880662a10e89e5ebc296e891ba6ad3d3353b2aec4a21063978d26db70b4d513fdfcf700fbc010bf4250c4be73f6be922f6dde64b"}, @ra={0x5, 0x2, 0x4}, @calipso={0x7, 0x40, {0x0, 0xe, 0x7, 0xa, [0x40, 0x8000000000000001, 0x5, 0x2, 0x4, 0x9, 0x7f]}}, @jumbo={0xc2, 0x4, 0x4}, @pad1, @pad1]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @tclass={{0x14, 0x29, 0x43, 0x555f}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x32, 0x4, 0x0, 0x6, 0x0, [@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3a}}, @remote]}}}, @rthdr={{0x88, 0x29, 0x39, {0x3b, 0xe, 0x2, 0x7, 0x0, [@ipv4={'\x00', '\xff\xff', @loopback}, @private0, @private2, @remote, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, @rand_addr=' \x01\x00']}}}], 0x1f0}}, {{&(0x7f0000001d00)={0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x7fff}, 0x1c, &(0x7f0000001ec0)=[{&(0x7f0000001d40)="7da67b665e314c701a76d3e4f75a6a3a92f28bca18f2571a79cb9d0079eb26d7bdf1ca3c2d7026705b696524a1780484e77789dcb287291ae64dc8c43c76d03143339714089b43fb1b25e8883cf4d092cf1f6ca98cc9d5ca9e514c531d68502f12e9e0499836c9a8e266e944e7214bd99f460ef2ec516bd661c4f0a9d003b0db37437f191acf8678177e798fb8b0d88de4eef0f1baaaaa1a3fdeee0e482b", 0x9e}, {&(0x7f0000001e00)="1751f436e13eea6bf52ff9ac02371e6941699e3668cafdb0e6d7ec6c0a4f6e4c4d3e839d6974ae220323363fafb339105882754dd9056b876bdd6940e9e34ab00a1b71598d8d50468ad857548e9c94103d67b723a13e5f2c3e9f2f5ea360a6a49e90b045c17f4d5fcc347c386d83c4230d1c4b3d32cbdcbca1e2edfad0f9c4c450d81f2e14f82f6828964d3b20f3fab0c2e5ccb272f455a6d17c8ee3bc41ece72550f1a5521a50559c", 0xa9}], 0x2, &(0x7f0000001f00)=[@dontfrag={{0x14, 0x29, 0x3e, 0xa07}}, @dontfrag={{0x14, 0x29, 0x3e, 0x81}}, @hopopts_2292={{0x1b0, 0x29, 0x36, {0x3c, 0x32, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @enc_lim={0x4, 0x1, 0x1}, @generic={0x80, 0xd7, "31c851abdad0b305447319442e173db5f868fe687c3ebabc2988835fe88adf427a23739f9c039718f9ce11e6cfa0f505e055ccb97b161e9fc6889c5bd6ccbfa5cbf6601a10585d96fe3d0b89d4cf7ea24febf9b4eeede680efb2631bf24760f165906bdbf2707aa60e6f7f717e5fea7e7f8c7a875041a2cbbe8cd88083d4fcd3d9587ae0f2bbbf340cd8d945141e0216965450dfe36da01ca39dc8452ed30c73303f7d8f30948ec453f2577a9213953529bf2137d02b626602524cd045c3a13fc7b742392f1876b379ba8a0b9973b09ff2d76648bf44a1"}, @jumbo={0xc2, 0x4, 0xfffffffb}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x2}, @generic={0x3, 0xe, "2b69bdea8cfe19d7e910a628a6cb"}, @generic={0x8, 0x93, "a3d992d9063773a58183050ed9756a334097ecf323df549b7ccd50cccb57322402c02c3bdf4d6ffeefc19c8bfa2c86fb6862abb0936c96673866779db0a56b93562ca9e921cc453089a7d13492a075a10bb53a473c5b31fddc0c30f8db3fa6e0663f95cab79fc91dc46ecb7deb78bf7870df20238bcbfe5e95ff61391c28792a5d6d9ac3b23e7f4ce30f800f62c2be68c80952"}]}}}], 0x1e0}}, {{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000002100)="767710aedf1cb3fc6e41bce932dced6ae12166aea2812f775476bc3fe4ce9f1dd667a453977f1ca106296121b37612711dc3a55ed314e8ca9f0e97c8cbac87f1e071aeacd8d2ddde9107c4eb1feb46baab7f800e3d987c51484dd030c3692ef70a6d4c5e3499a62ee006d2b90a6aecf6a3b88bd822", 0x75}, {&(0x7f0000002180)="3926cef9f93223676750b780cecb1004bd25d0af65cc3cc0ccbef51ee6a887c0c9a415a74b9415a6bcf90d056db4ccee5a18e79ea745a3f8e49dd9d8cb7da626b648b984095cfff96a10212e6977a6695d611517ef607670f6505e0f19f49e4864a81108715bf3a547ceb307cbbb399be37ebc2723e3f82ca7e531da112e5a7f292616dad0de46d57f6b57dc21688a5e2823627f40c1d86681004be02d816c9ef5222faacfb3cb9fcdfd13ad0f93e7c0e22f682cb98bdd0f9c47e604", 0xbc}, {&(0x7f0000002240)="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", 0xfe}, {&(0x7f0000002340)="e006bb332b1721dc70d6640f7e68736b43df40b8231163451f59000938c36ef6936a632b2cb17530d7dcd465e962ebd873eb5a1d0e79a57005e89e4fd54b281c328a1763335ea59288f3d897df100aca8eb03a8a752ee28a03e9d3d063622c4f83963a2192f79f8b4fa11ec2fe0e4c4eef30f10400963b918a7d29bad8b8bb06a629bda722df2c8ca301469664962892ec99fc34f8b344b4f3e081ea7ceb1b59a6878948231b1746d3b6f8b861a9a175642500eac0a84baa02b6e0025fc9fdc1038947d3f48d", 0xc6}, {&(0x7f0000002440)="4fd836945ab57eb52e32b96e608300fc7d1c6153eccc3bcfe197523f1ffad1fec8e2676ff82cd1a0ad87501f26af9436f589f47f25564d5445c84b2a6793bf081e52b448a723e7459d2dde172344c8c2a2b0753dd8e89d9259b9109769e7e2b077352271c221961af5eaa4ec0518f63022bc01e65500e1faa39529d1da18736d1996aee3bd0b0b4c9bb7d0ee116d42da6ef717addeb826580854fe0aaacd2c294a632e7750a370cf84e8c2214c", 0xad}, {&(0x7f0000002500)="d56ecdb067407abfd9627d408e7abd8237d1456ba1748ade248e7c2fdf007b11a261390027fb78abc39718a566f38828f12ffb4c2c601acbfc6df9f6cef909b8bde129251f910d7b493a506ba7b347c47ef61c6d1c21564ee843f90876c3cbef0f1ac831463f7cc1dfbcf9077e9cd8a9c4104ac0736c85cb1ed290021da2f94ae85f7b032836812225a2f4dbfc6a705652acca317684caeddba440bb761bd592d1fee07a6c436a7b57c6eb693381e70c59", 0xb1}, {&(0x7f00000025c0)="c25f10b0db3cd912fe578e97ae6f86e5e501ba067bb39ae28aeaaf", 0x1b}], 0x7, &(0x7f0000002680)=[@rthdr={{0xa8, 0x29, 0x39, {0x3a, 0x12, 0x1, 0x1, 0x0, [@private1, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast2, @mcast1, @local, @private0, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty]}}}, @rthdr_2292={{0x18, 0x29, 0x39, {0xff, 0x0, 0x2, 0x2}}}, @hopopts={{0x30, 0x29, 0x36, {0x4, 0x2, '\x00', [@pad1, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}, @dstopts={{0x78, 0x29, 0x37, {0x62, 0xb, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x9}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x28}}, @calipso={0x7, 0x10, {0x3, 0x2, 0x7, 0x9, [0x10001]}}, @pad1, @calipso={0x7, 0x28, {0x1, 0x8, 0x8, 0x1, [0x8, 0x100, 0x0, 0x5]}}, @enc_lim]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x2}}], 0x198}}], 0x4, 0x44880) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f0000002940)=0x715f) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000002a80)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a40)={&(0x7f00000029c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x48}, 0x1, 0x0, 0x0, 0x11}, 0x4000000) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000002a80)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a40)={&(0x7f00000029c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x48}, 0x1, 0x0, 0x0, 0x11}, 0x4000000) r4 = getpid() ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000002ac0)=r4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000002bc0)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002b80)={&(0x7f0000002b40)={0x20, 0x2, 0x6, 0x600, 0x0, 0x0, {0x6, 0x0, 0x3}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x29}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc080}, 0x8000) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000002c40)={'caif0\x00', &(0x7f0000002c00)=@ethtool_modinfo={0x42, 0x9334, 0x6}}) sendmsg$NFNL_MSG_ACCT_DEL(r5, &(0x7f0000002d80)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002d40)={&(0x7f0000002cc0)={0x5c, 0x3, 0x7, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xc2a}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x401}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xefc}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3400}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP6T_SO_GET_REVISION_TARGET(r7, 0x29, 0x45, &(0x7f0000002dc0)={'IDLETIMER\x00'}, &(0x7f0000002e00)=0x1e) syz_genetlink_get_family_id$ipvs(&(0x7f0000002e80), r0) (async) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002e80), r0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000002f80)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002f40)={&(0x7f0000002ec0)={0x44, r8, 0x400, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4c8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000000}, 0x4) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002fc0)={0x0, 0x0, 0x100000000, 0xfffffffffffffff9}) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f00000030c0)={&(0x7f0000003000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003080)={&(0x7f0000003040)={0x20, 0x13, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x20}}, 0x40) (async) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f00000030c0)={&(0x7f0000003000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003080)={&(0x7f0000003040)={0x20, 0x13, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x20}}, 0x40) ioctl$sock_FIOSETOWN(r7, 0x8901, &(0x7f0000003100)=r4) shutdown(r5, 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000003180), r0) (async) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003180), r0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f00000032c0)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003280)={&(0x7f00000031c0)={0xc0, r9, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xa2e0}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x340}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e21, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x2400c080}, 0x40) (async) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f00000032c0)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003280)={&(0x7f00000031c0)={0xc0, r9, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xa2e0}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x340}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e21, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x2400c080}, 0x40) bpf$OBJ_GET_PROG(0x7, &(0x7f0000003340)=@generic={&(0x7f0000003300)='./file0\x00', 0x0, 0x8}, 0x18) (async) r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000003340)=@generic={&(0x7f0000003300)='./file0\x00', 0x0, 0x8}, 0x18) r11 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000033c0)={0xffffffffffffffff, 0x0, 0x25, 0x1, @val=@tracing={0xffffffffffffffff, 0x7fffffffffffffff}}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000003380)={@fallback=r3, r10, 0x28, 0x2000, 0x0, @value=r11}, 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000003380)={@fallback=r3, r10, 0x28, 0x2000, 0x0, @value=r11}, 0x20) 9m47.143764634s ago: executing program 0 (id=5652): syz_emit_ethernet(0x11dc0, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x4, 0x5}}}}}}}, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xba}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async, rerun: 64) r1 = accept4(r0, 0x0, 0x0, 0x80800) (rerun: 64) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) (async, rerun: 32) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async, rerun: 32) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 9m46.932739877s ago: executing program 0 (id=5655): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, 0x0, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) ioctl$sock_ax25_SIOCDELRT(r3, 0x890c, &(0x7f0000000900)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null]}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) write$tun(0xffffffffffffffff, 0x0, 0x4e) (async) syz_genetlink_get_family_id$SEG6(0x0, r2) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$inet(0x2, 0x3, 0x33) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) getsockopt$inet_mreqsrc(r5, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) (async, rerun: 64) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400}) (rerun: 64) ioctl$TUNGETIFF(r4, 0x800454d2, &(0x7f0000000b40)={'hsr0\x00'}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xc080, 0x0) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r4, 0x8924, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r6 = socket$l2tp(0x2, 0x2, 0x73) (rerun: 64) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) (async, rerun: 32) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[], 0x214}}, 0x0) (rerun: 32) 9m31.955050744s ago: executing program 32 (id=5655): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, 0x0, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) ioctl$sock_ax25_SIOCDELRT(r3, 0x890c, &(0x7f0000000900)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null]}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) write$tun(0xffffffffffffffff, 0x0, 0x4e) (async) syz_genetlink_get_family_id$SEG6(0x0, r2) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$inet(0x2, 0x3, 0x33) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) getsockopt$inet_mreqsrc(r5, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) (async, rerun: 64) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400}) (rerun: 64) ioctl$TUNGETIFF(r4, 0x800454d2, &(0x7f0000000b40)={'hsr0\x00'}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xc080, 0x0) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r4, 0x8924, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r6 = socket$l2tp(0x2, 0x2, 0x73) (rerun: 64) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) (async, rerun: 32) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[], 0x214}}, 0x0) (rerun: 32) 11.7003492s ago: executing program 4 (id=12194): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x713a, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, 0x1c) sendmsg(r2, &(0x7f00000002c0)={&(0x7f0000000180)=@ieee802154={0x24, @none={0x0, 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)="6cbe8d35361dc205a38bbae21349fd8608cb8c9c4943d747221592003d24d6171587ddde8f466b4e033ca679e5fc9b9bb81f26d8e645e83d06765ac607290a14e0512a4359d5264168da35117b3a9edf1cb465f22fb2cfe92a26efc4d549181c40d2fb679adb5348d3c4764a5587", 0x6e}], 0x1}, 0x20000040) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000340)={0x0, 0x1e, "92fca7816966a2910d4f471f1de2ccbbfcd1fd2c2a74b8382745f01b6092"}, &(0x7f0000000380)=0x26) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000400)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, r1, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x4800}, 0x40040) sendmsg$inet6(r2, &(0x7f0000000d80)={&(0x7f0000000540)={0xa, 0x4e20, 0x9, @mcast1, 0x3}, 0x1c, &(0x7f0000000a80)=[{&(0x7f0000000580)="31c3639ac638f58513adff950b332603b6fda9234a9c014f6ea14d166255a4cac590a78d3becd3584c7c85137516a8bfc2a8e5701dd9bc2c12cdeefc00325846c96b52031071fe47939c0bbabc", 0x4d}, {&(0x7f0000000600)="efaa4227dd52339a9f02a0a103c2c25097a1eb78a03337f620666064e1dd63a7541d48ed1e6b5c2e1f77c4b96b3d08277bcf5604795f1d73b873b486bcb1310262bca28277cd7b01b6d35fafbdeb40586343ebe58d1281e088f128b300f5c2547f82ba5c68168a78ca25977c220aa4ea521c11542f2f5d3ce1d0c3819e49c8ae8326c252c3a9ede9a944fcf757b4578ea84aa039f2c0ead97afe5368a84dfd576fca300c5f9712af66d422ce7d2e8f0175808d656b0d2df4017415494a3207f76e3831cf5853", 0xc6}, {&(0x7f0000000700)="d6b3a221c5153a4cb384b1eed6384b9245e9702cf555e1ef9ca7bd1518cb629fb7ca894f1b908dbb5d439e9044b1a371fb0af5735bf96070d48033543ab5571cb9dd7394f2f9f9008d895fdc4245624c6febcbc8f287979aafbe2c4b9b9ad1d273ae34295827b82ebe2c59c5bb8befc5ca0838b3df26a2abd77638f856e19771c192adb06a1208a6b9da347e1f4ee56859656dff050b5e3a30fee8b68b3fab54412a", 0xa2}, {&(0x7f00000007c0)="1022e69edb55b5c40d2a639c506078d1544e0ab41d5a6ba62cf9e293d7a54bde60babef22d60045a331358fdea9153a0227a9d41d10466b5de37ba7e797d08f111dddf2819d3b7a226e2e85b11dee1daf611c15e2f474b05e5fe90f673e8b74f8cf6063585f35288328153b1aeb6bd93fe8a0798795fc1cf5682f8fa240f067b182147760c4a0fee639802cec1a9ceb017dded0a57479ee3f15f3daee6bc4400a82a23d36e466c4abfc9051c4fe8a6bbf5b0f7aab0d4fbde91b3049a854e206dbd4c27413df9181ef3e74e5787234ad217e960142f4a3282e79dbdb4c6086a0c25ef0efeda87a9f69e74337c7b4f952f", 0xf0}, {&(0x7f00000008c0)="e9e0b787b2b9eee709fa6930c155a20026a99e1ced825f12b5a60c2c5c98643f2f8cfac011f32da12755bb9d81f9cf1e61b896ba881ae56c971a94577ce0c2766074a52e7f5beae7b8ada77d94f986bd89275f16e8956629e2327972cb4591609a8481ea421af0077fd733e985c5482ed3b25e76a942c7ce5377113180fe101cc888489d4072dbc650a8066b1422a7d4a8d16c1faca8d0804b63cc5c04d388ec77826ce2229ec96d259c3fd85db18c5e7b6fc3", 0xb3}, {&(0x7f0000000980)="f2d453f831ee4cf7176354a2c799da75629fb8be70aebcf541647b5c9fab342924f9ed0ab143764eade8ceff5212e381929e18e1d63fdb5fd247a3b3bf8ee4255998c7a93964636c95c38e312fc25e4dba2e10ef10418e28328f3c49bdfacc14055dd3d4c35bb758ef52be52f43ab7bf54d3c0e9cf645414c7236c8852b54b01b8f7aa60099ac323a4a79599b1ed9b1f8ba6ff44cbfe6985877b5195f3c47d64c4434c25acac89f334b6bc72deea5593eaa854322b6a83ed2c2f3bef3945f76c7e8d57df50053dd4d0fc4b2e1d05a3a2245aa6f9c3ef923a", 0xd8}], 0x6, &(0x7f0000000b00)=[@tclass={{0x14, 0x29, 0x43, 0x4}}, @flowinfo={{0x14, 0x29, 0xb, 0x98}}, @hopopts={{0x48, 0x29, 0x36, {0x2b, 0x5, '\x00', [@hao={0xc9, 0x10, @remote}, @hao={0xc9, 0x10, @mcast2}, @jumbo={0xc2, 0x4, 0x2}]}}}, @rthdr_2292={{0x78, 0x29, 0x39, {0x87, 0xc, 0x2, 0xe, 0x0, [@private1, @loopback, @remote, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty]}}}, @rthdr={{0x38, 0x29, 0x39, {0x2b, 0x4, 0x0, 0x9, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast2}, @private0={0xfc, 0x0, '\x00', 0x1}]}}}, @rthdr_2292={{0x18, 0x29, 0x39, {0x6, 0x0, 0x1, 0x6}}}, @hoplimit={{0x14, 0x29, 0x34, 0x80000001}}, @dstopts_2292={{0xd8, 0x29, 0x4, {0x5c, 0x17, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @pad1, @calipso={0x7, 0x18, {0x0, 0x4, 0x4, 0x1, [0x0, 0x9]}}, @jumbo={0xc2, 0x4, 0x2}, @ra={0x5, 0x2, 0x6}, @calipso={0x7, 0x50, {0x2, 0x12, 0x0, 0x1, [0xf, 0x6, 0xfffffffffffffff8, 0x7, 0x7, 0x6, 0x3, 0x8, 0x1]}}, @calipso={0x7, 0x30, {0x3, 0xa, 0x6, 0x8, [0x2, 0xec, 0xffffffffffffffff, 0x0, 0x78]}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x8}}], 0x248}, 0x48000) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x28, r3, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40884}, 0x8080) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000f80)={'tunl0\x00', &(0x7f0000000ec0)={'tunl0\x00', 0x0, 0x0, 0x10, 0x80000001, 0x10000, {{0x1a, 0x4, 0x0, 0x1e, 0x68, 0x64, 0x0, 0x2, 0x2f, 0x0, @local, @broadcast, {[@rr={0x7, 0x17, 0x40, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @local, @multicast2, @multicast1]}, @end, @end, @ssrr={0x89, 0x17, 0xaf, [@initdev={0xac, 0x1e, 0x89, 0x0}, @empty, @remote, @broadcast, @broadcast]}, @rr={0x7, 0x1b, 0x86, [@empty, @private=0xa010102, @multicast1, @multicast2, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x8, 0x90, 0x0, 0x4, [0x0]}]}}}}}) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000fc0)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f00000010c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000001100)={{{@in6=@mcast1, @in6=@rand_addr=' \x01\x00', 0x4e20, 0x144, 0x4e22, 0x8, 0x2, 0x80, 0x40, 0x0, r7, r8}, {0x7, 0x9, 0x10000, 0x5, 0x8000, 0x6, 0x1800, 0x4}, {0x101, 0x2, 0x7ff, 0x4}, 0x1000, 0x6e6bb0, 0x2, 0x1, 0x2, 0x2}, {{@in=@multicast2, 0x4d5, 0x6c}, 0x0, @in=@broadcast, 0x3504, 0x4, 0x3, 0x7, 0x5b, 0x7, 0x81}}, 0xe8) r9 = socket$igmp(0x2, 0x3, 0x2) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000001240), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001280)=0x0) sendmsg$NFC_CMD_LLC_SDREQ(r0, &(0x7f00000014c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001480)={&(0x7f00000012c0)={0x18c, r10, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_LLC_SDP={0x170, 0x13, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [{0x11, 0x1, '802.15.4 MAC\x00'}, {0xc, 0x1, '& {\'#[\\*'}, {0x5, 0x1, '\\'}, {0x5, 0x1, '^'}]}, {0x5c, 0x0, 0x0, 0x1, [{0x17, 0x1, '{-]\\&@%-(#$,&-%)!,\''}, {0x7, 0x1, ' \x01\x00'}, {0x7, 0x1, ' \x01\x00'}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0xe, 0x1, ',[\\$^-{%)$'}, {0xa, 0x1, 'wpan1\x00'}]}, {0x4}, {0x38, 0x0, 0x0, 0x1, [{0x5, 0x1, '%'}, {0xe, 0x1, 'NLBL_MGMT\x00'}, {0x6, 0x1, '\xff\xff'}, {0xa, 0x1, 'wpan0\x00'}, {0x7, 0x1, ' \x01\x00'}]}, {0x54, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x00'}, {0xa, 0x1, 'wpan1\x00'}, {0x7, 0x1, ' \x01\x00'}, {0x5, 0x1, '\x00'}, {0xe, 0x1, 'NLBL_MGMT\x00'}, {0xa, 0x1, 'wpan1\x00'}, {0x10, 0x1, '\x84-*@^\xa7/)@(*,'}]}, {0x2c, 0x0, 0x0, 0x1, [{0x4}, {0x7, 0x1, '[@&'}, {0xe, 0x1, 'NLBL_MGMT\x00'}, {0xa, 0x1, 'wpan0\x00'}]}, {0x20, 0x0, 0x0, 0x1, [{0xe, 0x1, 'NLBL_MGMT\x00'}, {0x6, 0x1, ':)'}, {0x4}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4820}, 0x0) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000001540), r0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000001580)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r0, &(0x7f0000001680)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x4c, r12, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44000}, 0x80) r14 = accept(r2, &(0x7f00000016c0)=@nfc_llcp, &(0x7f0000001740)=0x80) getsockopt$inet_sctp_SCTP_MAXSEG(r14, 0x84, 0xd, &(0x7f0000001780)=@assoc_id=r4, &(0x7f00000017c0)=0x4) r15 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001840), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001880)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000018c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000019c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001980)={&(0x7f0000001900)={0x54, r15, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r16}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r17}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x81}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000003}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x4000041) recvfrom(r9, &(0x7f0000001a00)=""/232, 0xe8, 0x22, &(0x7f0000001b00)=@xdp={0x2c, 0x2, r7, 0x1d}, 0x80) 10.779425258s ago: executing program 4 (id=12208): r0 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) bind$nfc_llcp(r0, &(0x7f0000000100)={0x27, r1, 0xffffffffffffffff, 0x4, 0x7, 0xd, "ac7dd171e420b2e613ff41a4eb393d74061b10deb4efde6976c9234f5e7bd9052a97f1e3d5db3a9bfb4169023ec162c72354674850874e87de794a9cd8e354", 0x27}, 0x60) 10.672646495s ago: executing program 4 (id=12212): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000000)=@raw=[@ringbuf_query], &(0x7f0000000040)='syzkaller\x00', 0x9, 0xed, &(0x7f0000000080)=""/237, 0x41100, 0x22, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0xa, 0x3, 0x5}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f0000000200)=[0xffffffffffffffff], &(0x7f0000000240)=[{0x2, 0x2, 0xf, 0x8}, {0x2, 0x1, 0x4, 0x3}, {0x2, 0x1, 0x7, 0x6}], 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0xa5, 0x6a, &(0x7f0000000340)="0e7ef106e89a79caeb7a58647dd9565866034478c68405e679d2ec12fd863b513dc0efba90a6b0bec17693f5c59ee13dea81067413541b6b4f5f66726b7b7bd7fcc56c293a0fc3ccc5b2155e5e1ba842a2b9ffb3c478b0d930f06a1e8e77a35432facb3f69c2e953da16c5a9a574aa1f98be3755debc9445c639fdb402bf6982113df631b2e38cd0c8c716eaccbd30d4a093fe44a6058f42477cc6bb6adfc177c0a5ad8d7e", &(0x7f0000000400)=""/106, 0xa65, 0x0, 0x1b, 0x78, &(0x7f0000000480)="c039b400f778b03355e64cccffca4c1cd095456ab594d0f63735e2", &(0x7f00000004c0)="ec04eb73cc012aafbc4d3a25a1d6ceac1bc0ebcb0063012fb1b47a4390cc9de92e02fde8c30b5d9ff86e74dab54296be18441561d26e254dcccb45bb61c5af200856e755ea9e0929bfc72f0f4a4d4b75dc8de455d6b6b97e502b8c047234226badfdb7c2997c4c450c161414ea526b572ce244454f23272c", 0x0, 0x0, 0x7fffffff}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getroute={0x14, 0x1a, 0x800, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x48, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x62}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0xd0}, 0x40809) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r1) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x34, r3, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x1) (async) ioctl$XFS_IOC_INUMBERS(r0, 0x80405880, &(0x7f0000000980)={{0x1cbf, 0xa, 0x3ff, 0x3, 0xe}, [{0x480000, 0x1, 0x8, 0x7}, {0x2, 0xb, 0x1, 0x33}]}) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x70, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x7}}]}, 0x70}, 0x1, 0x0, 0x0, 0x44000}, 0x20040004) (async) r4 = socket$inet6(0xa, 0x6, 0x325972bc) connect$inet6(r4, &(0x7f0000000b40)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}, 0xe}, 0x1c) setsockopt$MRT6_PIM(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000b80), 0x4) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000cc0)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=""/91, 0x5b, 0x0, &(0x7f0000000c40)=""/82, 0x52}, &(0x7f0000000d00)=0x40) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000dc0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000d40), &(0x7f0000000d80)='%-010d \x00'}, 0x20) (async) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000e00)={0x0, 0xd, 0x18}, 0xc) (async) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000f80)={@private2, 0x0}, &(0x7f0000000fc0)=0x14) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x4}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000011c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001140), &(0x7f0000001180)='%pi6 \x00'}, 0x20) (async) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001240)=@generic={&(0x7f0000001200)='./file0\x00'}, 0x18) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001280)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xffff8001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x1}, 0x50) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001300)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xb, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001400)={0x6, 0x17, &(0x7f0000000e40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @ldst={0x2, 0x3, 0x3, 0x7, 0x4, 0xfffffffffffffff0}, @map_val={0x18, 0x8, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}]}, &(0x7f0000000f00)='syzkaller\x00', 0x5, 0x3e, &(0x7f0000000f40)=""/62, 0x41000, 0x10, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001000)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000001040)={0x4, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001380)=[r9, r10, r11, r12, r13, r14], &(0x7f00000013c0)=[{0x0, 0x2, 0xe, 0xc}], 0x10, 0x800}, 0x94) (async) r15 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001500), r1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000001640)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001600)={&(0x7f0000001540)={0x8c, r15, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xaa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x48}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x8c}, 0x1, 0x0, 0x0, 0x28080}, 0x8040) (async) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x20, r2, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x8}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x2040041) r16 = socket$kcm(0x29, 0xa, 0x0) recvmsg(r16, &(0x7f0000001cc0)={&(0x7f0000001780)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001800)=""/32, 0x20}, {&(0x7f0000001840)=""/97, 0x61}, {&(0x7f00000018c0)=""/249, 0xf9}, {&(0x7f00000019c0)=""/249, 0xf9}, {&(0x7f0000001ac0)=""/209, 0xd1}], 0x5, &(0x7f0000001c40)=""/110, 0x6e}, 0x40000000) 10.551382562s ago: executing program 4 (id=12214): r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$FIOCLEX(r0, 0x5451) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000400)={{r0, &(0x7f0000000280)='/+/^:\x00', 0x393340, &(0x7f00000002c0)={@_ha_fsid={[0x4, 0xfffff80e]}, {0xf9c9, 0x7, 0xfffffffe, 0x1000}}, 0x6, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000340)=0x85c}, {[0x800, 0x4, 0x3, 0x8]}, 0x0, 0x5e, &(0x7f0000000380)=""/94}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0xd, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf7b79536, 0x0, 0x0, 0x0, 0x6540}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000500)='syzkaller\x00', 0x3ff, 0xe6, &(0x7f0000000540)=""/230, 0x41100, 0x1, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000640)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0xf, 0x84e9, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[r1, r1, r1, r1]}, 0x94) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f00000007c0)={'icmp6\x00'}, &(0x7f0000000800)=0x1e) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000840)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000a40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0xb4, r2, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x6ca9, 0x3e}}}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffc7dd}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}]}, @NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x902}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1a}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffa4}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xe}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5e}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x0, 0x4, 0x9]}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x484}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x2, 0x7f, 0x81]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x200]}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4040000}, 0x40) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a80), 0x28001, 0x0) ioctl$PPPIOCGDEBUG(r4, 0x80047441, &(0x7f0000000ac0)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(r5, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x34, r6, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0xfb}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x7}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xfffe}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x24008004) clock_gettime(0x0, &(0x7f0000000d00)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000c40)={0x10, 0x7, 0x1, 0x7, 0x0, 0x4, 0x7, 0x8000000000000000}, &(0x7f0000000c80)={0x0, 0x3, 0x9, 0x2, 0x4, 0x3ff, 0x0, 0x7}, &(0x7f0000000cc0)={0x3, 0xdfc, 0x4, 0x2, 0xffffffffffffff27, 0x8, 0xb9, 0xe6}, &(0x7f0000000d40)={r7, r8+60000000}, &(0x7f0000000dc0)={&(0x7f0000000d80)={[0x5]}, 0x8}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000e80)={r1, 0x58, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000ec0), &(0x7f0000000f00)=0x40) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r5, &(0x7f0000001000)={&(0x7f0000000f40), 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x24, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000}, 0x10) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x2c, r2, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x45}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040811}, 0x4000100) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001180), r1) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x8000c018}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x1c, r10, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48014}, 0x1) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f00000012c0), r1) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f00000013c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x78, r11, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xc0}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8e}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x401}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x8895) syz_80211_inject_frame(&(0x7f0000001400)=@device_b, &(0x7f0000001440)=@ctrl_frame=@pspoll={{}, @random=0x5, @from_mac=@device_b, @broadcast}, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000014c0), r5) sendmsg$NLBL_CALIPSO_C_LISTALL(r12, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x1c, r13, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x80) 9.164908027s ago: executing program 4 (id=12250): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r5, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 8.879800327s ago: executing program 4 (id=12257): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x9, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x3, 0x6) bind$inet(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r0, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x3, 0x1, 0x5, 0x10, @loopback, @mcast2, 0x7, 0x700, 0x10, 0xd75e}}) sendto$inet(r0, &(0x7f00000023c0), 0x0, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$qrtr(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000700)=""/192, 0xc0}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x9, 0x3032, 0xffffffffffffffff, 0x0) (async) socket(0x2, 0x3, 0x6) (async) bind$inet(r0, 0x0, 0x0) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) (async) sendto$inet(r0, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x3, 0x1, 0x5, 0x10, @loopback, @mcast2, 0x7, 0x700, 0x10, 0xd75e}}) (async) sendto$inet(r0, &(0x7f00000023c0), 0x0, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) (async) accept4(r1, 0x0, 0x0, 0x800) (async) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg$qrtr(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000700)=""/192, 0xc0}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x2) (async) 2.839477276s ago: executing program 3 (id=12316): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfe79578e51bc53099e90f4580d760551b5b342f7cbdb9cd38bdb2209c676b2ac2deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f132020000002cbe7bc04b82d2789cb1b2b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c41146dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a42b359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780c70014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e506d1387b63112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece08ac772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2ef0ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a3f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099bdae7ed04935c2c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adeb988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ffa3c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe4a3ced846891180604b6dd2499d16d7d9158ffffff069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb0814040000007874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dbae3428d2129ecfce1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296c6a298c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f050000000000000026049fe86e09623524f390bf79b441b75fc790c58e273cd905deb28c13c1ed1c0d9cae846b03008cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc48f97496079654f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b4749c28eb5167e9936ed327fb237a56224e49d9ea956d1798571b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecf743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be182724d95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd0403a099f32468f1561f058960d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b656dc0e32384f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bbe3e8ef76f57a2d0e69115d33394e86e4b83c0f3c2a34635f3eee4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cd082027c641ec4355eb4acff90756d1a1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8cc3fe28bc3586844f5fecb92aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a5906002fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128ab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0afd9ae134400f70b5e6aefb7eee403502732df858a2ea033b6c91c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80ffb8f386bb79f5589829b6b0679b5d65a00000000000000e6ff00000000000000000000faff0000bab50bc8508a9644d3e7c328b0ff22035c8073f8c1f0e3da7339fc81d4ab3ef2857ef70a81d8a1628da28c942571880e22df7cabae56d5ff5e483c9c1f5a258b8f1f34cc300312f76a374a6e9b3f9dbd7f538a80b00f97e47895b3201c5126feca0888956a7d768198d9c2109ac508a47ebb99c539ef45af7d87b308117a9e321a3861bc42cf41942c31268a4020221d7b1622585094eddd83c7f4acdd7f5c23d8b730bf03118261edada8b8487a3b1b7548a4687a91f12bf70bb1df3bfe7d4b92ad6fcbf401efd6eb004cf20016ad8d1dad136dd856ffca238b39482811f9c8524bf182f1956a3d044423927df28880bbd11c06407220df8e1d1d483d947d990dc175803d765ca14a915a0040b641959ad3e776b4bb4852fea12983dc18b7404914a6137dc4a78f1e0d331c60a9019c21698cd18753491df962f496f2395563e9c3d7b1228d0e488cf7e50a29541aa757f2e2ee9ff4433d65db0de5a123d569e39dce481156cbec584c9a32a8e3b032fa003192c891d83119bc950abac9147b9fcb0acd9a207b5ceb7e8ed1d91c000000000000000000000000000000141258373281153fa27e586ea82650f070d8851ac9e7ac07b37a6479d4017b5b5af3ff4c91235df4f657d77e386a329aec4d766369c86b62b01ceb028c6fcf206883633cb143016b9f5351a45a8cb4ea110ba700000000000000883416b6eff6a793c71deb7d780c4f51d86ece127c0714144916f397d398ad2fe72b710b932c15c2369cb5d2d2f6ae420672c4a626195a891ac51825077fbc286aa3866bbf18a4a8b836ea8c90af0d5f0aff55b50bc18c27875ed2628b91224b7fa9fd10ccd7c1b1a92bac529df981a6d30100e68555553625c0e91a51000000000000000000fe030f85b294f3ea1fce314a9dcefbe3b64e83c35c5e95734786ca78315793cc0e6e776d2ec07c55cd89541ec25e074e840287011cab538d79e1569df321282071d49a4dc5fb2d7da1d05249d0e153fd04aca2", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r2, &(0x7f0000006380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r1, 0x0, 0xb, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x4e, 0x0, &(0x7f0000000600)="06ff03076844268cb89e14f008004ee0ffff00febabec41177fb860200080000030c62079f4b4d2f87e5feca6aab055013f2325f1a3901050b038da1880b25181aa59d943be30043d50ea5a6b868", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @empty}, &(0x7f0000000140)=0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0xc, &(0x7f0000000740)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.359761949s ago: executing program 3 (id=12317): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffd, @empty}, 0x1c) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) shutdown(r5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000100)="7d1068a421f05f384340d34be65ac0bbe72925ab1a8aa3", 0x17) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100fdfffffffcdbdf250200000008000300", @ANYRES32=r2, @ANYBLOB="0c009900b2cc00005d0000000800b2926a0f7daa1191570005000000"], 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280dbc0e}, 0x20000840) 1.706781827s ago: executing program 3 (id=12321): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x14, 0x229, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r2 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r2, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000280)={0x0, @local, @local}, &(0x7f0000000500)=0x50) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@remote, 0x0, r3}) r5 = socket(0xa, 0x1, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x28, 0x1, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x200080dc}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) ioctl(r4, 0x8916, &(0x7f0000000000)) ioctl(r5, 0x8936, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="840000001000f5a400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000006400128009000100626f6e640000000054000280050001000500000005000d000200000008000200", @ANYRESHEX], 0x84}}, 0x0) 1.367891787s ago: executing program 2 (id=12326): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="14000000100035", 0x7}], 0x1}, 0x0) socket(0x2d, 0x2, 0x0) (async) r0 = socket(0x2d, 0x2, 0x0) pselect6(0x40, &(0x7f0000000180), 0x0, 0xfffffffffffffffc, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001300)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001300)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) r4 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0080bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000c40)={@map=0x1, 0x32, 0x0, 0xff, &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000b80)=[0x0], &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000c80)={@fallback=r1, r3, 0x19, 0x8, 0x0, @void, @value=r3, @void, @void, r5}, 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000c80)={@fallback=r1, r3, 0x19, 0x8, 0x0, @void, @value=r3, @void, @void, r5}, 0x20) write(r4, &(0x7f0000000040)="1c00000021002551071c0165ff00fc020200000003100f000ee1000c", 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000580)={0x0, @multicast2}, &(0x7f00000005c0)=0xc) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x20, &(0x7f0000000800)={&(0x7f00000006c0)=""/29, 0x1d, 0x0, &(0x7f0000000700)=""/236, 0xec}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x0, 0xffff, 0x5, 0x0, 0x40, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1}, 0x50) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x0, 0xffff, 0x5, 0x0, 0x40, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000980)={{}, &(0x7f0000000900), &(0x7f0000000940)='%+9llu \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000980)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)='%+9llu \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_lsm={0x1d, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0x2, 0x3, 0xa, 0x100}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x5}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc4}], &(0x7f0000000380)='syzkaller\x00', 0x7, 0x80, &(0x7f0000000400)=""/128, 0x40f00, 0x2, '\x00', r6, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0xe, 0x200}, 0x10, r7, 0x0, 0x8, &(0x7f00000009c0)=[0xffffffffffffffff, r8, r9], &(0x7f0000000a00)=[{0x0, 0x3, 0x3ff, 0xc}, {0x0, 0x5, 0x5, 0xc}, {0x5, 0x5, 0x0, 0xc}, {0x4, 0x3, 0x2, 0x5}, {0x4, 0x1, 0x10, 0xa}, {0x4, 0x3, 0x8, 0x6}, {0x4, 0x5, 0x9}, {0x2, 0x4, 0x7, 0x8}], 0x10, 0x7}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) (async) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000cc0)={0xffffffffffffffff, r6, 0x25, 0x3, @val=@perf_event={0x2}}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000640)=@framed={{0x18, 0x2, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x3b}}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r12, r11}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa, 0x0, 0x101}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x10}]}, &(0x7f0000000280)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r12}, 0x94) (async) r13 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa, 0x0, 0x101}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x10}]}, &(0x7f0000000280)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r12}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000080), &(0x7f00000000c0)=r13}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000080), &(0x7f00000000c0)=r13}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) (async) r14 = socket$alg(0x26, 0x5, 0x0) bind$alg(r14, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) accept$alg(r14, 0x0, 0x0) 1.270020179s ago: executing program 3 (id=12328): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11}, 0x94) 1.095825935s ago: executing program 2 (id=12329): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xa}}}, 0x24}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="953a04"], 0x24}}, 0x0) recvmmsg$unix(r3, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000008c0)=""/200, 0xc8}, {&(0x7f0000000640)=""/249, 0xf9}, {&(0x7f0000004480)=""/4098, 0x1002}, {&(0x7f0000000740)=""/13, 0xd}, {&(0x7f00000007c0)=""/97, 0x61}, {&(0x7f00000001c0)=""/104, 0x68}, {&(0x7f0000000540)=""/130, 0x82}, {&(0x7f00000009c0)=""/133, 0x85}], 0x8}}], 0x1, 0x2080, 0x0) write(r3, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x220008e8}, 0x804) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0xe) 1.095019399s ago: executing program 3 (id=12330): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1e, 0xa01}, 0x14}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000000202010800000000000000000a0000004400028006000340000000000c0002d905000100000000002c00018014000300fe88000000000000000000001a000001090004"], 0x58}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a80)={0x24, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0xc010) 1.024138655s ago: executing program 3 (id=12331): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000001900030000000000000000001d010400080005000500fd00150001000000000000000000e31db80000d3382f0b000000"], 0x34}}, 0x50) (async) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000001900030000000000000000001d010400080005000500fd00150001000000000000000000e31db80000d3382f0b000000"], 0x34}}, 0x50) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bond0\x00'}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) (async) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x50}, 0x1, 0x7}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYBLOB="14140000", @ANYRES16=r5, @ANYBLOB="200028bd7000fedbdf2512000000f40006800400050004000500040002003d00040067636d2861657329000000000000000000000000000000000000000000000000150000001c4c3b8d0bd7ca19b8956787e2c01edc923fe38fac0000004c00040067636d286165732900000000000000000000000000000000000000000000000024000000c2459bccf06ccaa1e25b7d56dae858bb1bbfebc2c54988b001a60e1c5cefa30367ed302a4a00040067636d2861657329000000000000000000000000000000000000000000000000220000001c91c84a421e4ed379068b81bab932bb0f2ceb5d0177addd89df09aeb85bf70837e80000080001000400000004000500740106807b0003008bd359dc5259f51af5155c7d115a0ad7e7ee54db61f4269a5ca8b759cb5448c309f978bc26f1d60f1dc40a3ea3b5a7ba2421bddbe6c2fd4f7365091053c62dd053c3d0e6d21f038dd0b5aad767157c3c4fc905d05db5c038d643ebd787ef51ef3ece5251b818d53a80d6aed4bd03fee0fff06011d803ea00ed00030058f81d2ab382ca4a4a274feedc8bae9a777a062061f16dc7d6a1f5d1fb926347c9f9d317976f500697c906690ac4eb832c2f926dd343b851776fd5172fc6fcef9a0a9b0ca757057a729593eda2811f166cd339427568a6522c8b321b9da64df6f576d14f277a0f05e76c2cb74573dfb6b6190c91c9b83795c2476646201ebb5353886fb0f5a1ec65475bcedc9b9e9b02a4fb6648388da18b855835cf48b81ca84c08e73950419b5b327bf11932039b9086ddf84d6a0db05b844c9ac9f062b4b07689c4ed23d3864c318f72817a140f6d625d485173415d6880dd1dfa266186bc5fb689ba4ea0345d1000000004000500400007800c000400050000000000000008000200070000000c000300a79a00000000000008000200020000000c000300040000000000000008000100000001005400078008000200050000000c00040007000000000000000c00030004000000000000000c00030002000000000000000c000400ea0700000000000008000100ca030000080002008d00000008000100018000000411068004000200e6000300e305db048916bf12fedb084ac3bb0cc5149c2e34d06e308eaa3354d09a531e1b312334cec2a06c0b51c8478f7c68c7108d7b9a35955444724499336d61e2b6000e3c5906c86490d424e7866dfacbf2073f66b2d9e81cab5094b75e9ad23256a372e1c7379d780f29012884aa0215a29ac47be4781db82919d596551bcd3fb3efc2b8643c2fac1e4178fb2cdfe31fe60bfe591718562b589d5e5dea91e326d8cc81a395e87082c2770b362da603d95a48785e0973709c404ec2eddcb6ed449c4275a4c58cc9fc0698bb5c752880e1dfe587479a6c6a54b13b0a9dfca3b60a0d7d5a45000004100300f4d4afd0e047e35b78ae2959b9f373b8a3d4c6bce239373f94907a12c4d0acc7720a8eaa9592ec2dd27e107711306dc48c71719c37663d2bdb816f687746d6d6e0d6be87ec38f96b11279a051de91b7b1139357347c2dba6c64394a6c75f0d7b0806e09ab38200725361c4c9b6bd067c396c43544996698e0ae462192120a94cdb1a0f936a1beb734cbfe9ae70edbaab8534a376c435193e2a4a58ddc588c5d9755ae3f0e4bda2689f384129295380a58daa8a9f605d34f67960b6606aca6db605de3a078c0a875f89e0591ea3be22f7d51bdc9b9244d181e42c73c824cd4be5cdce9d575f9e639f00f7ae51ed2e8e3ec74acc30047c8c71cfcf4b02f521e0ef220eb16dd0aa249b9505668e683fba76366201454051375213fce0f647b6fd48bf1e4134ab51f0d706405a86b84bb2055399dc30110a30dbcf22beb1a581f0c199e0399f1f06250b867ff91a6bd373d4e4bbe50ad8e468de9b98c8f60885865878c7b263e69bd33ff2469b900fd680a09bf68443c1e465e4782f664ee075cf055842b70710555b7e2b3918338752af537f30ebaae688371c97808dab4fddf80b73ccc320de8b45a6b9c480ee310afb0a72a9c744d29bbdb0a4f93f098db927a58d1317846a5365735c2c3a9e7d151a016e63780d3ae2adfa405018f796b2e8241f5ac6dfb034de95fcc9a590814de7217c23e96b97138d25576533ddfe0c6f0639f329af50eb878bcbe7e7a22d4ebe3e4c0ca09593a977a53f2aedd6102ab7c5ac6409051e9b99afb01d6f50938704bf369bd52f794794667ccccc2383bee46d62c9c15d12f0efb8236a8e280657bdfb5f9683efaa2c8380515c2a9126619c67a8948bc551bb40e08dc5f182e97b3d292c3e84959d1dda68d06c595f61bb9ef2aa2aa11ad5ad11376288a6777e4e3a5c76cadfef6d4d8137ff9ba18f795e29902a3eb7d7e2e0f349443185ab956a580a45a8400ae2ba320bea4e6b474e3f85031153437ac6d30d111268c3f5c794366011d067611bd4e16f57bf455cbf2761f61c7ef6e2282556f9b929fe88e4505d6d58c3d08b14ca7308e055a66b1947275c7b5f13ce28397b2d5e998e5c307fb1fcb1c4928a0d84e101ec8148516c9a04c31d86142c9f1b0800869949919532228de189ff9b49f01c7edc23e5931edf6dd28ed4f334cddde7945d2a1dba5111fdacb82ef9c6d99f62bf876e6d844ae646df091004549acec81985b7ea92d1e1d7d3caaad9cc16890d53dd6ebc3838e7c4fd476e732fe78df5e1a92af311ab13c1f18b875ab2240689e159213a4cf96f0fd43cb069fef5935908b7f8b50d63ec330e4b0f498fbb4bbf8fe10c278e301bc2d0d2f80c26a6b6fa245285de7a1dcfdf20fa9696045f2bb8864078b6a36b97998ea3c8d877b677520da870f2cdae6e7ae1260728dd6a6042ee7947d54e66dd5cd13a1be3af1659712dcd6144d87514519a0542a4e669e6ea1f279da21c1658243f0fc848fddd72f83d2d2720c566879c732796944e0f4c1548509e90e0437e5641e8a768b0d02886194782b466e00500e9f5773f8a475a023efa90081bc6c118369fe2de4ab1612b2da66e109ad2082592ecaaa597fd11730843738efabd89a78438d3b0f867b039be714cbe4fc03da7fb991c9ded777bf471ad764e77d0908123ba4de46da314bfac4ce84a40a3b66a6e6bc09f142b7913aa64e28adc6eff54dca2d7d49a4afc2c4c54d28f110a6e44ef0f568ea944811fca91abe53f36bbc28a4a9bb06cb270631a0fe7f035f1a5f3105883b745c538af52a849006b2cd8fea520ddde0bbd5ea9861ffff26ab9bee7a27a7a26c56949655b7b38a89317fa1763ed49bd6ab977f8fd88ea936ab04cb8350f772964d1bfe250fc7383dfecc87eb8f11e78bd746646ce724f277530a1ecae05b9327c7b4330676eeeedcdad07627c49084568c4c38761d888ed399a78bdc9fa326cebce926217afeec07d34d7cc431900d744b30511f9a18c04232ddf16880d386ff9e8832e16e256dfdc2e2d0f35d08c516aca5e10519cca309f88cd3c3a51b413bd0d06d3461ab96c9427ea95747f6f1439e2f49299614e755bbe45d31f867ca3eb23585009ba100bc7f8ce6b8c5d838675373a62c8f585bc9153f7ad4d11a54ed5733b52bc3c4933e9a5017a30c0c281add91f40664a5e5663585fe649b4696c9a577ced8a93478d22867b8fb99b87a1cc7c636db7e15ab3c662f61b12f9834e1c9672fd38763f8efe0149db5cfee8efe0db24cc8ac1ef40324e67aaa4c019fbe31db654c015479d8d538d7226cae86849d6ec70fdc8b3c662e2ffa167bfedefaf4fafe3aeff7aa40391beb7cd92432f4a5ec7d08f3fcfb42704d14af3d9ae4fe791c84e6298326c48a28321fe3076e93f216f9d759896bdbfe22f1705ad101799c5cd9d0ae1a4e6f760a004dc1c30fec51e383479b52a533f9c4d7d821f2507124b56fcd50def4932e465ca0cf336750a9b5d16c155795fcc05a0ca04a9fa70fdf12bab0f3e43fc8d22d51b689bf513f2e932e79ea5868ad79f1070e5f05fd6ad26edc9a449d43bc463ac3b89218903b79683c9415d22599790cb6b9e102930e54d9b2efe63c79aea82248166adaaf0008df98c0c20667580a4f55934dfb62db4188a7675d4c15a6d0b4c0cca829e25b942c63d73c007b2564b3a30eda1f1aed2923c48eb367046dd5dfa628fb17d58a82647ac6b9992e555504af4c744bba8010a4017cd03c3afa0ef838a3b11516bc34dd897c0b1bfa89de98e3226b863f2648252d60b6385646bc744ab600ef378db5d4d2f7593cfde806f1e6aff0e891bcd578050e36876a8881668909782f66aba175c509e6212137612fbedd74462305d8ec973f91735558ef915d59b90fb653b5c017c48da6ee3855a5e0f6d1daeb220f8bc790157111ab2c23584f0540599b9a1b8862bf3be30f90a37cbc205c475270fe68d835269ea5266fb57c822969f681fb06324842058ede12f72920bfc7f633bdfb6c95654501b811e261af6616307d459f1c1d32a25b2ccf196c034ef397c362f50d1bb4d2a38d2dbf4cb7442bd2a3600f42a45ea36a8d4780c5c13ff99ee1b248022ab2791e69f2ca6f3af339c8325d6cad8bc43f5fd079a274a550d35887aa199ad074f4cfb2b5cb5fc0f20acc951f3509ebf2ae8466b69ac6b4efda2c78b40fc2ef037d26f3f27ecfc433ed37a9428108fb31c9dad59605b6945d2ddfc8266bfe8d1cf5ab6fa34fa1d4d2da152cc2b3f0b90d5f438bd111a83aba7942a09fa0c5eecc06544265f3b2b9d1b74d1582c362e2c9250b6ff40b7a3155b17e40f9e8e941b3df1145ed443bef97acf108526a8e3fdb235f0f2310001c393949094cbc0a16880ad7ac3fc980d881fee6895227e5b4fe02cef2bf2031779cd0f8af49efe3a950eef885f087bb84a38a7d000ff71aef314e5ba033e7a05f5a5270bc565ff57f1dfd4b8cd56dfba0603ff26e8a831a08921a735dcf96086a9dde8b50d9c4c9e9a17b0004a1365aae97ac6774fb71559b5b9a698365c4956edbef23f059ade870e05084540cdf85de8a6a6c90f37ac95c1d58c23b933ef30b8eb3fddbaacf6135263bd8d30e49c6dbbb0952bd41a2670a8796d44442c5ab280409224a5a337a391f441bc7c687129762383f17738709f2dca41d563905e4ab5b9e9cc51a9109fa5d434671f8fd73a9a7f162f41603df0a62fb303104cac872129d85ddaf820c01852402f05c8cc90fc28cff19210139a104c0508d9d269b5bc3a3fe7240e24d66d6992ee25b0e2571c1286b0427bcaf2f9c608fac02bcb807cbf60b7b78d83c317de674cb65b069c9b940d47bb298983774acdb5e83fe8eab685663b069e7187f4d93c2953021356e70de5bc0eff5d1fc9bfca7df2e1d4999a22f6fca7a088d0a7dff278732b27bd98abe82940f9c4247145addcbe4d290c5c8195c1ee8f5a57bd52bc2b4f60269f64546e65b48585b3574861c427582ef17af13910cc6dc72ebff47499a1fa296ad22d0ae317f541f6cd7a3bac2628d3c02619eb0e32736760d7003a80fc4f8ca28988337ef46239c3bb42828ec77bf91c0c787c989600490ec001e5ae370a6afab5c27ba5891a04b0950d8bfd40204b77389053d8eb9f6f005b76912b6815fe07d1300c98135b3d5181bd20922edc54f7b334f7964fd00fe52feadb67cf03eac4fb4bd0e5de5f7080764cce597db65cc9303024a1127bcbf20325c590b2804d7009a5edfc5e84fac06821c9671b57198c23f697d95b0c39f32eb9482a866d991fd141f3f6fc184e7ce58c9af6b6ed301c62c0b7ae8e3f51b50445fe7b329d07300f5ba87d691f2fe47864889824afe7d07c4d097c0100241fca0849abd88c02176b406888c7e1c77ce8668dabf5ea501628c56d0f7df57c50fbd5c07c7a1e85bb66cde2fa46de0928366424f4b3ec80448dc866ee2bea768b2779cfb27263e8b4cda1a350b3bc71f1882d452ada92bceb3b47e62148c0bd96a5d6c90766b249c19bbc82cb115b3f9dcb9c4bf4bbc65fb4c0bafc5d4124fae226b6243f210616ee77c96438f68cc1b615e3eeebb37c8b0bedd4a9abdefe1f88d3b67cd422494758f2ff21b7b22616db3e092e9f631c350aab498c120b825b6729fb0fee17fdaf359faaa7da5525fe33b937b3085551ee16de31f8aa847fdc655b4dd85051bd8acbb1700872d718c2c900d2fbe6bb1b88beb57697af1cdaa724beb58edc9b3806cede610a187b5f20eedf95863c8dad259d3a623d0f2850b26e5cdbde00d61ca8e9c211efad09411aed96a9b27fc9a32be23dfb8fd089a136c67bf3907355da8be499fc2e1b74b09eced4883df60aa05562a507b170be7aeb31e5fcc6e62403fc8f18452bfd168ab78b10e083ef303a7270da86cbb43e78bc169d051c48444869e83df339f1c07ae8b525a844ecba1b222367f362fa383f9b81b7fb9125f51d7640ce697a32c5e2aeb4955eb4bcf56dc180e945d70c5621267151d03496b46224073ab8e1a06d48d4dc244a8d3ecb6bf4626a9640f7aa650b2d1d949e820c4015ea62af17d609f4ff52b22aa65507ae87bafbd6111beea20bc6eec562ae66088c9263a372f534169b0f46871ca933b4c429c5753b6524b5524fa727bf0ca926ccf7de2d59392877cd98faf6d195ee06390aaa79bf7dec5bf71e339425e51dd1d43a3ee679f8f0b985ae2b038cb5233cab0831a2792f1c98d068d61e3316830db8c0a30e90795185f7d39772a7bbd1751a25558655a8f393dbb261d05dfd0eb6f6d93ebd80119248a0f27bc1fad034c48cf6b1a3e264dc37060f2ff45ab650a3cff0c50a4415b7aa3023affd256bb8b209b288b48ac3f38378538b5f661b6f3f2f5c3c6c10e86895bff10d9dc4f05c1416e4c2371623c4672bfa93498aaf44e25a6c2ccece37836c1b20110b8052ff974b03bf0b5af5d4287dd2092effc99f4e0779b91c8dc441047e4acf1d64c6cb9c1338dcf0b67e788f7dc50a557634a7e2ea63d36d4f918a23e80c865b30145d983cab29d7d7ddb804dc29e5d347235378d1ea7bb2ec9795af25f8f02e7ae001a58f89b1d59596d397de4364b9df27ed290b896a3bbaf48f3d87affd5d5ac0c4a9aaf223e01eb9ca04f353ae76737ed8795edd3644335fea0e81715c144f27a1399834d5cd8e0ab3c80e1be60c354faac0a825f3e0bf56157a05db976deb6457a50575f8777a0290a2db161f76e4496fb54122f8b3b2a14eaa0f89340e4e9755e2b009e208214f6024ac5cf62ae50838c6fd5304000500040005000800060004000000"], 0x1414}, 0x1, 0x0, 0x0, 0x1}, 0x20000010) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r7 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4001) syz_init_net_socket$ax25(0x3, 0x2, 0x0) (async) r8 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r8, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) connect$ax25(r8, &(0x7f0000000200)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @default, @null]}, 0x48) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d0003000204", 0x26}], 0x1}, 0x48000) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, 0x0) (async) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r10, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) (async) connect$rose(r10, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(r10, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) (async) connect$rose(r10, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, &(0x7f0000000600), 0x4) (async) setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, &(0x7f0000000600), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_coalesce={0x33, 0x0, 0x7f2e, 0x0, 0xfffffffd, 0x40000000, 0x80000000, 0xfffffffe, 0xffff2ee0, 0xfffffffd, 0x8, 0x4, 0x0, 0x40000044, 0x0, 0x80000001, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x3ff}}) socket$inet_udp(0x2, 0x2, 0x0) 1.00571063s ago: executing program 1 (id=12332): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)='~', 0x1}, {&(0x7f0000000100)="8a40c5c69c3c20d0b3ab136cfc9b1316187964d5e0a9e30196a3ed80ce3e", 0x1e}], 0x2) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000080)={0x2, 'bond_slave_1\x00', {0x6488730}, 0x7}) 883.48229ms ago: executing program 5 (id=12333): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRESDEC=r1, @ANYRES32=r0], 0xa) 814.152503ms ago: executing program 1 (id=12334): syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd6002000000080000fe808968032f6d0f00000000000000000000000000aafe8000000000000000000000000000aa3200"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e000000000400028008000a"], 0x3c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=@newtaction={0x5c, 0x30, 0x7, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYRES16=r1], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfffffffe}, 0x10}, 0x94) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00"/36, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1000000000000000007000000ff0f"], 0x254}}, 0x0) connect$can_bcm(r2, &(0x7f0000000240), 0x10) r4 = socket(0x10, 0x803, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x70, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x70}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$can_bcm(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x1d, r6}, 0x10, &(0x7f0000000100)={&(0x7f0000000400)={0x6, 0x0, 0xfffffffe, {0x77359400}, {0x0, 0x2710}, {0x4}, 0x1, @canfd={{0x1, 0x1, 0x0, 0x1}, 0x2d, 0x2, 0x0, 0x0, "002be08f19b0fbf941fa2fc0c45421089c61caead11d4d426c158d4f60da8adabac06e82b8218156e615eda10f3e5ed6f1af6154f76d3420376c06f53c86ee89"}}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x20000854) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6(0xa, 0x3, 0xa) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000018c0)=@security={'security\x00', 0xe, 0x4, 0x4a0, 0xffffffff, 0x0, 0x0, 0x2d8, 0xffffffff, 0xffffffff, 0x3d0, 0x3d0, 0x3d0, 0xffffffff, 0x4, &(0x7f00000002c0), {[{{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x7a5, [0x0, 0x4a1], 0xe, 0x10, 0x4, [@loopback, @mcast2, @loopback, @local, @private1, @mcast1, @empty, @local, @loopback, @mcast1, @remote, @dev={0xfe, 0x80, '\x00', 0x2f}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, @mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}], 0x4}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x0, 'NFQUEUE\x00', 0x1, {0x5, 0x6}}}, {{@ipv6={@loopback, @dev={0xfe, 0x80, '\x00', 0x24}, [0xffffff00, 0xff], [0xff, 0xffffff00, 0xff000000, 0xff], 'veth0\x00', 'team0\x00', {0xff}, {0xff}, 0x67, 0x1, 0x2, 0x12}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0x12, "b192", 0x1}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xfcf5) write(r7, &(0x7f0000000300)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800828001000000", 0x24) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d000010000000000000000000000008001200020002000000000000000000100032001e000000000000000000000010003300000000000000000000000000fc02000000000000000000000000000003000500000000000200000dac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_OKEY={0x8, 0x18}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x50}}, 0x0) 802.208086ms ago: executing program 5 (id=12335): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x6}) (async) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x6}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x38, 0x2c, 0xd2b, 0x801, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x9}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) sendmsg(r1, &(0x7f00000014c0)={&(0x7f0000001100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2, 0x3, {0xa, 0x4e20, 0x7, @mcast2, 0x6}}}, 0x80, 0x0}, 0x20008000) 739.306654ms ago: executing program 2 (id=12336): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f00000003c0)={{0xffffffffffffffff, 0x0, 0x44600, 0x0, 0xffffffff, 0x0, 0x0}, 0x1, &(0x7f0000000380)=[{0x2, 0x7, 0x0, &(0x7f0000000280)="75b5c7f0b69915401e2693a01b3bf7509b33764d78d6d21b64552fbc551335b53be0528d8f4674ce16ce52aef337f890e20f5f86bb09712028728d6cbfa0069995e964dc9caa42e52bc18a9549d77bcd9de16c23779cc7e10db8a65576", 0x5d, 0x2}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14001a001000010000000000000000070000000a14000000110001"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000007c40)={'filter\x00', 0x0, [0x5, 0xfffff801, 0x7f]}, &(0x7f0000007cc0)=0x44) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xed27c9fa5277b9b7}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x24048000) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'macvlan0\x00', 0x1000}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r4, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = accept4$vsock_stream(r0, &(0x7f00000001c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x800) writev(r7, &(0x7f0000000240), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r8, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0202}}}, 0x14) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc) write$tun(r1, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], 0x30a) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r10, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012bbd7000fcdbdf25040000000c00018005000200fb00000008000300080000001c0006800800060008000000060005004e2400000800060002000000040201801400068008000300ac1e0101060005004e2300000800040004000000050005000c0000000800040007000000"], 0x74}, 0x1, 0x0, 0x0, 0x8004}, 0x50) write$tun(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="016f080001002700000027000000450000405d40f5aa59dbd7d649dfc300000000008490783fffffffac1414aa00000000e65ca8a0a7c48be6cc4121a526c99b9158b95ca31a35274d1ad2021daa80e19d31322233094460ff86efa24f2fea7404b9a267c651f52885493b95dca9000000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba00030090780028090302050a00000000000007000008d58838000391000000"], 0x4e) 646.987356ms ago: executing program 1 (id=12337): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x4c, r3, 0x4, 0x0, 0x1000000, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}}]}, 0x4c}}, 0x0) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000040)) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYRESDEC=r1, @ANYRES32=r1], 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x0) 586.288883ms ago: executing program 5 (id=12338): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x0, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x11e}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x20e, 0xe40, 0xfd000004, &(0x7f0000000380)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x22a}, 0x28) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtaction={0x48, 0x30, 0xffff, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x1, [[]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x48}}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0x18, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x11}, [{0x4}]}, 0x18}}, 0x0) 486.563915ms ago: executing program 2 (id=12339): r0 = socket$rxrpc(0x21, 0x2, 0x2) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x30, r0, 0xbc5fe000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x80, 0xbb}, [@NDA_LLADDR={0xa, 0x2, @dev}]}, 0x28}}, 0x0) 486.30723ms ago: executing program 1 (id=12340): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b040400000000002000128008000100736974001400028008000200c00002000600080003"], 0x40}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000000080)=[{&(0x7f0000000200)="c9fe00001d008104e00f80ecdb4cb9f207c804a01000000088080efb0a000200250ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00'}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110ac000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000140081044e81f782db46b904021d000025000000040000a118000200ff02000100000e1208000f0100810401a80316ea1f000b40032a5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc0000000000000080bb9ad809d5e1cace81b341139fe3cd4032ecedb12d1d2eb0c0ed0bffa29954e5413f017fe491", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@ipv4={""/10, ""/2, @multicast2}, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@dev}}, &(0x7f0000000180)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@local, @in6=@mcast2, 0x4e23, 0x101, 0x4e21, 0xff5d, 0x2, 0xa0, 0x20, 0x21, 0x0, r4}, {0x8, 0x1, 0x1, 0x612, 0x8, 0x6, 0x9, 0xfffffffffffffff0}, {0x7, 0x3, 0x4, 0x6}, 0x9, 0x6e6bb7, 0x1, 0x0, 0x3, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x1c}, 0x4d4, 0xff}, 0x2, @in=@empty, 0x3507, 0x3, 0x2, 0x9, 0x0, 0xe1, 0x4}}, 0xe8) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000300)={{}, 0x100, 0x3, 0x45}) 411.871683ms ago: executing program 5 (id=12341): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x3d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = socket(0x11, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x891e, &(0x7f0000000000)={'syztnl0\x00', 0x0}) 342.984241ms ago: executing program 2 (id=12342): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a5c000000060a010400000000000000000a00040509f386870f1924bdcaca579200010073797a3100000000300004802c0001800b00010065787468647200001c000280080001400000000e0500020007000000080003400000003b0900020073797a3200000000140000001100010000"], 0x84}}, 0x24000000) ioctl$XFS_IOC_GET_RESBLKS(r0, 0x80105873, &(0x7f0000000300)) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000)=0x1662cd33, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x280, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x1e8, 0xffffff7a, 0xffffffff, 0x1e8, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x130, 0x150, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x88, 0x88, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x80, 0x3, {0x4}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0xff000000, 'team_slave_0\x00', 'ip6gre0\x00', {0xff}, {}, 0x6, 0x3}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x4}, {0x4, 0x5, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) 223.610588ms ago: executing program 5 (id=12343): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)="991347c388249d2e", 0x8}, 0x1, 0x0, 0x0, 0x40000c0}, 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000002040)=0xe5, 0x4) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0xa, 0x1f}]}, 0x34}}, 0x0) 218.645804ms ago: executing program 1 (id=12344): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000080)="441f0800000000e8c94ef56491ee", 0xe) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="120000001a000100002000fc00000400"/28], 0x1c}}, 0x20000000) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000702000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b7000000000000009500001000000000a80501363034fdb117168bd07ba00af739d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945f105d802f5132143c0a9fc7a84452569957c1002ed7d4d8e17f791f4798c8eb483e9973320d046c3126c6afcfd84de03352c69b3edff5be26f8ffa5f8f2879021c2ea53ea79acd7fb38dd1abb75aa393cea26d465637d11f705000000473e7b7c4ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a057844f226ef4e912f01a201e694e3806e8c70e8b69524cd19f7525d8d66bb766f7f3f918c86a70252236800001897133af94a5a4cfc794d8b9d7c33632152c48eaf302f0b2e0c252b00000000000000006f1bbefbe08de65e3762e194ba4cae8b13535d7d11ee917bca4885bbf597a14ab2458efce78510d86272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36bed435000025ecd201d2ffb0a7fa4f5d11060cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b9d86329bd5b4697336112b0b8754ce3574046bf6114d1a88597850b77378fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f3faf37ebdfccea0c002ad2b42047c9ec43193ccf617dbf8a12b4f189edbf9fb7c42b1f435ccd4d96822e6b70100912c92e3943e9c4f45d8bcd528fa8a3ea847f10e9b2506f3bb506f1d7fbde8010000000000a073d0de5538ab42e170b3baae34c35987b0dda497ac3f5e97e6e6aeea15c6d5ed24310100000003bb6030f84b63aaf8690db0221b1705c501f802ff59b4e683efa4b6e77e042072bd2ac37d413008ec9eb8166f6e28b49a77ed91befc65315896f88a8fb1dd679fb4c515f8b7a5b7aca6a251a89d47b728502f7e621cc0e3ba04000000c149ee6601728c750d304197c22da8650579475afd96187d881e93b42a5fdfd686d8900c44c67133dad58037fda65885a15a429edfe3027a5ebf95254744f10fd607bc3300b94932b8d944e0b083bbd86b19cb074577a25ff581d92af08a06f857310a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6a1def886c95676dce6a8194479700a02b92bdc8d05eae1f24fdd7b80d1bb404c22f681594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4c2d7acf1dfe79d6771903b76e21190c22d641030e1ddacf006c3116e1803af20a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f0001000077339b4200000000108a3c87b19d5b9a00c75d84a92d6dcf00ba96edf35ede0e2b57c26e94801b498924166bde57d5f24258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548971d5d16296dd08e020000007a27310d5d01f8a8a0f5212d7f628f554afea715ccbc66cbb1016490f5d579308cb3188cf2fcaf67e0c16443d526ba4b968f07ae362c2133c168313e84beb871203880dd453c45d0a137d7f5a8b039dbfa62fb2b4214f8e69f967bf1fbd89e77fcca110000000800000000000000f8877994ebdc35f7efd41e3babd9b3782edd6776d5b6cb4ecd72c9de9b5503747d71440378cf2c2c7ea2dc5febb654a867f853713cf4c0bb322fbbe446d18dee4c821275ef18259cafc346c8b3b9fb0f3adcf6ea310a6b9a3f59e29a5909ea047fb61affb4bc8bbea1fb761b8933795b1a91358a7791aa843d07020e8bb6fc18458c49ac6313e7165b7d9f65e94a62b69f1011b94340cdb7303f01e5cdb5682ddf73d65c3de1d88dd7496d6345d5b9de0223988056a53e19a8b96b9640bc6c09d3c2ff894d626b57c776ed53f94d5e22ff148061b37f72bd92924cb1d0a725e19b264346b7cae0251a850de78316503f3c3d395c7e3f04fc8d52583327cd2341ce4b2d092815376299686f41353b2823814563011a2223b9dd00000000000000000000003a131374a3371cb3e2a9bb4d798b91cefa444501f40b7c9589e8c0bb6c82123d2b45ce905d0903b32ecf30e828c71a07a83f3275f3d661d1af0ffbd5d7f0"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) (async) recvmmsg(r0, &(0x7f0000005c40)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000d40)=""/213, 0xd5}, {&(0x7f0000000500)=""/266, 0x10a}, {&(0x7f0000000f40)=""/239, 0xef}, {&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000000040)=""/56, 0x38}, {&(0x7f0000001140)=""/242, 0xf2}, {&(0x7f0000001240)=""/166, 0xa6}], 0x7}, 0x9}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}], 0x4, 0x2120, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4004088}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) (async, rerun: 64) socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b80)=@mangle={'mangle\x00', 0x2, 0x6, 0x578, 0x0, 0x3d8, 0xd0, 0x3d8, 0x3d8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv0\x00', {}, {0xff}, 0x11, 0x5, 0x1, 0x18}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xffffff00], [0xffffff00], 'ip6gre0\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x7], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv6=@mcast1, 0x6, 0x27, 0xd}}}, {{@ipv6={@loopback, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'ip6erspan0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) (async) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$unix(r4, 0x0, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r9], 0x1c}}, 0x840) (async, rerun: 64) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r7) (async, rerun: 64) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d00), r5) (async, rerun: 32) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x8044) (rerun: 64) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5400ffff050a0b040000000000000000020000002800048024000180090001006d6574610000000014000280080002400000000800000140000000000900010073797a30000000000900020073797a320000000014feffff1000010000000000000000000000000a"], 0x7c}}, 0x0) (async, rerun: 32) sendmsg$NFC_CMD_ACTIVATE_TARGET(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010028cd7000fddbdf251c000000080003000300000008000400001000000800010080"], 0x2c}, 0x1, 0x0, 0x0, 0x24040084}, 0x4008) (rerun: 32) socket$inet6(0xa, 0x2, 0x0) 185.938255ms ago: executing program 2 (id=12345): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x2a, 0x1, 0x7ff) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0xc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90c1, 0x5c81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}}, 0x48010) 124.932154ms ago: executing program 5 (id=12346): r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r0, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x9}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8014) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}]}], {0x14}}, 0xdc}}, 0x0) 0s ago: executing program 1 (id=12347): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0xa, r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) kernel console output (not intermixed with test programs): 9][T11966] hsr1: entered promiscuous mode [ 1085.437021][T11966] hsr1: entered allmulticast mode [ 1085.459208][T11966] bond0: entered allmulticast mode [ 1085.464706][T11966] batadv0: entered allmulticast mode [ 1085.471368][T11966] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1085.482052][T11966] bond0: left promiscuous mode [ 1085.495267][T11966] batadv0: left promiscuous mode [ 1085.496747][T11979] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10467'. [ 1085.546005][T11975] syzkaller1: entered promiscuous mode [ 1085.551667][T11975] syzkaller1: entered allmulticast mode [ 1086.069135][T12017] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1086.518401][T12044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10486'. [ 1086.816466][T12060] Cannot find add_set index 0 as target [ 1086.831333][T12061] Cannot find add_set index 0 as target [ 1086.851831][T12064] netlink: 1 bytes leftover after parsing attributes in process `syz.2.10494'. [ 1087.226958][T12088] netlink: 'syz.1.10505': attribute type 1 has an invalid length. [ 1087.250587][T12086] netlink: 'syz.2.10503': attribute type 10 has an invalid length. [ 1087.287481][T12093] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10505'. [ 1087.306202][T12086] netlink: 228 bytes leftover after parsing attributes in process `syz.2.10503'. [ 1087.345763][T12088] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10505'. [ 1087.366079][T12088] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1087.497167][T12093] bond5: (slave veth7): Enslaving as an active interface with a down link [ 1087.499919][T12110] netlink: 64 bytes leftover after parsing attributes in process `syz.4.10506'. [ 1087.603683][T12102] syzkaller1: entered promiscuous mode [ 1087.618885][T12102] syzkaller1: entered allmulticast mode [ 1087.876394][T12129] openvswitch: netlink: IP tunnel dst address not specified [ 1087.976500][T12140] netlink: 'syz.1.10515': attribute type 12 has an invalid length. [ 1088.012729][T12140] netlink: 'syz.1.10515': attribute type 11 has an invalid length. [ 1088.684919][T12179] wg1 speed is unknown, defaulting to 1000 [ 1089.643387][T12248] __nla_validate_parse: 9 callbacks suppressed [ 1089.643407][T12248] netlink: 44 bytes leftover after parsing attributes in process `syz.5.10545'. [ 1089.644097][T12245] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10543'. [ 1089.685690][T12249] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10546'. [ 1089.807768][T12265] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10550'. [ 1089.867849][T12265] openvswitch: netlink: Flow actions attr not present in new flow. [ 1089.918120][T12271] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10552'. [ 1089.989165][T12279] netlink: 'syz.1.10555': attribute type 1 has an invalid length. [ 1090.089847][T12278] bond6: (slave bridge1): Enslaving as a backup interface with an up link [ 1090.097672][T12286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10557'. [ 1090.107957][T12286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10557'. [ 1090.119006][T12286] netlink: 'syz.3.10557': attribute type 15 has an invalid length. [ 1090.136119][T23834] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 1090.136253][T12286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10557'. [ 1090.159245][T12286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10557'. [ 1090.168300][T12286] netlink: 'syz.3.10557': attribute type 15 has an invalid length. [ 1090.203381][T23834] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 1090.228396][T23834] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 1090.240472][T23834] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 1090.318532][T12294] syzkaller0: entered promiscuous mode [ 1090.324474][T12294] syzkaller0: entered allmulticast mode [ 1090.365791][T12294] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10559'. [ 1090.686890][T12316] netlink: 'syz.2.10567': attribute type 1 has an invalid length. [ 1090.695539][T12316] netlink: 'syz.2.10567': attribute type 1 has an invalid length. [ 1090.846249][T12326] bridge_slave_1: default FDB implementation only supports local addresses [ 1090.924891][T12329] nbd: couldn't find a device at index 0 [ 1091.031486][T12342] netlink: 'syz.5.10575': attribute type 8 has an invalid length. [ 1091.312859][T12360] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1091.381751][T12370] openvswitch: netlink: IP tunnel dst address not specified [ 1091.549084][T12386] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1091.625474][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1091.634490][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1091.648180][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1091.675469][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1091.802536][T12399] syzkaller0: entered promiscuous mode [ 1091.808178][T12399] syzkaller0: entered allmulticast mode [ 1091.854129][T12403] PKCS7: Unknown OID: [4] (bad) [ 1091.859063][T12403] PKCS7: Only support pkcs7_signedData type [ 1091.966696][T12405] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1091.987993][T12409] bond7: (slave bridge2): making interface the new active one [ 1091.998269][T12409] bond7: (slave bridge2): Enslaving as an active interface with an up link [ 1092.010515][T12414] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 1092.196264][T12431] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 1092.610414][T12467] validate_nla: 3 callbacks suppressed [ 1092.610432][T12467] netlink: 'syz.5.10614': attribute type 9 has an invalid length. [ 1092.966078][T12494] Unknown options in mask b7f2 [ 1092.986733][T12496] netlink: 'syz.3.10623': attribute type 48 has an invalid length. [ 1093.160622][T12512] netlink: 'syz.4.10629': attribute type 83 has an invalid length. [ 1093.175627][T12509] netlink: 'syz.3.10627': attribute type 3 has an invalid length. [ 1093.421866][T12534] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1093.898559][T12570] wg1 speed is unknown, defaulting to 1000 [ 1094.209476][T12592] netlink: 'syz.3.10651': attribute type 1 has an invalid length. [ 1094.468674][T12606] netlink: 'syz.4.10656': attribute type 1 has an invalid length. [ 1094.503916][T12606] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1094.537436][T12606] bond5: (slave veth9): Enslaving as an active interface with a down link [ 1094.577413][T12606] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1094.584929][T12606] bond5: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1094.943106][T12632] __nla_validate_parse: 34 callbacks suppressed [ 1094.943125][T12632] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10662'. [ 1095.084602][T12642] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10664'. [ 1095.211245][T12644] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1095.223088][T12649] syzkaller0: entered promiscuous mode [ 1095.228568][T12649] syzkaller0: entered allmulticast mode [ 1095.256875][T12642] netlink: 'syz.5.10664': attribute type 7 has an invalid length. [ 1095.275699][T12655] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1095.396320][T12662] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10669'. [ 1095.418652][T12662] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10669'. [ 1095.448581][T12667] netlink: 'syz.1.10671': attribute type 4 has an invalid length. [ 1095.465358][T12666] syzkaller0: entered promiscuous mode [ 1095.470869][T12666] syzkaller0: entered allmulticast mode [ 1095.479427][T12667] netlink: 'syz.1.10671': attribute type 16 has an invalid length. [ 1095.491882][T12667] netlink: 'syz.1.10671': attribute type 17 has an invalid length. [ 1095.516548][T12669] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10672'. [ 1095.532690][T12667] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1095.766764][T12687] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10676'. [ 1095.794218][T23832] veth0_to_bond: left promiscuous mode [ 1095.819987][T12687] netlink: 2 bytes leftover after parsing attributes in process `syz.5.10676'. [ 1096.159367][T12711] tipc: Enabling of bearer rejected, failed to enable media [ 1096.218094][T12715] syzkaller0: entered promiscuous mode [ 1096.225156][T12715] syzkaller0: entered allmulticast mode [ 1096.456996][T12737] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10691'. [ 1096.609930][T12745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10694'. [ 1096.764282][T12758] netlink: 184 bytes leftover after parsing attributes in process `syz.3.10696'. [ 1097.680516][T12780] validate_nla: 3 callbacks suppressed [ 1097.680537][T12780] netlink: 'syz.1.10703': attribute type 2 has an invalid length. [ 1099.694114][T12798] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1099.930282][ T29] audit: type=1800 audit(1773087706.534:11): pid=12812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.10708" name="memory.events" dev="tmpfs" ino=1876 res=0 errno=0 [ 1100.035358][T12824] __nla_validate_parse: 5 callbacks suppressed [ 1100.035375][T12824] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10713'. [ 1100.198246][T12823] bond5: Unable to set up delay as MII monitoring is disabled [ 1100.212481][T12823] bond5 (unregistering): Released all slaves [ 1100.350767][T12835] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10716'. [ 1100.447542][T12835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1100.517085][T12832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1100.868641][T12869] netlink: 212336 bytes leftover after parsing attributes in process `syz.5.10723'. [ 1101.041289][T12882] netlink: 'syz.1.10728': attribute type 4 has an invalid length. [ 1101.080258][T12882] netlink: 'syz.1.10728': attribute type 1 has an invalid length. [ 1101.108663][T12882] netlink: 228 bytes leftover after parsing attributes in process `syz.1.10728'. [ 1101.110682][T12887] netlink: 228 bytes leftover after parsing attributes in process `syz.3.10729'. [ 1101.300139][T12902] sctp: [Deprecated]: syz.3.10736 (pid 12902) Use of int in max_burst socket option. [ 1101.300139][T12902] Use struct sctp_assoc_value instead [ 1101.423391][T12912] xt_hashlimit: size too large, truncated to 1048576 [ 1101.484273][T12918] netlink: 294 bytes leftover after parsing attributes in process `syz.1.10738'. [ 1101.496095][T12918] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1101.661116][T12927] netlink: 'syz.2.10743': attribute type 64 has an invalid length. [ 1101.920797][T12947] netlink: 104 bytes leftover after parsing attributes in process `syz.2.10745'. [ 1101.943686][T12949] x_tables: duplicate entry at hook 1 [ 1101.951907][T12949] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1101.959181][T12949] IPv6: NLM_F_CREATE should be set when creating new route [ 1102.338840][T12977] netlink: 48 bytes leftover after parsing attributes in process `syz.5.10760'. [ 1104.744413][T12932] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1104.996430][T12995] netlink: 11 bytes leftover after parsing attributes in process `syz.2.10768'. [ 1105.143588][T13005] netlink: 244 bytes leftover after parsing attributes in process `syz.5.10769'. [ 1105.340177][T13037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10778'. [ 1105.389003][T13040] syzkaller0: entered promiscuous mode [ 1105.405350][T13040] syzkaller0: entered allmulticast mode [ 1105.472518][ T166] veth5: left allmulticast mode [ 1105.483698][ T166] veth5: left promiscuous mode [ 1105.488592][ T166] bridge2: port 1(veth5) entered disabled state [ 1105.517082][T13053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10783'. [ 1105.729822][ T166] erspan0 (unregistering): left promiscuous mode [ 1105.751546][ T166] gretap0 (unregistering): left promiscuous mode [ 1105.774756][ T166] dvmrp1 (unregistering): left allmulticast mode [ 1105.791251][ T166] bond4 (unregistering): (slave geneve2): Releasing active interface [ 1106.176837][ T166] .` (unregistering): Released all slaves [ 1106.190680][ T166] bond1 (unregistering): Released all slaves [ 1106.202981][ T166] bond0 (unregistering): left promiscuous mode [ 1106.212583][ T166] bond0 (unregistering): Released all slaves [ 1106.229034][ T166] bond2 (unregistering): Released all slaves [ 1106.249435][ T166] bond3 (unregistering): (slave veth9): Releasing active interface [ 1106.260078][ T166] bond3 (unregistering): Released all slaves [ 1106.273960][ T166] bond4 (unregistering): Released all slaves [ 1106.286876][ T166] bond5 (unregistering): Released all slaves [ 1106.302784][ T166] bond6 (unregistering): Released all slaves [ 1106.329428][ T166] bond7 (unregistering): Released all slaves [ 1106.341617][ T166] bond8 (unregistering): Released all slaves [ 1106.354783][ T166] bond9 (unregistering): Released all slaves [ 1106.376196][ T166] bond10 (unregistering): Released all slaves [ 1106.390088][ T166] bond11 (unregistering): Released all slaves [ 1106.402670][ T166] bond12 (unregistering): Released all slaves [ 1106.415292][ T166] bond13 (unregistering): Released all slaves [ 1106.434785][T13048] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1106.543715][T13062] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1106.610329][ T166] tipc: Left network mode [ 1106.638881][T13067] 8021q: VLANs not supported on gre0 [ 1106.657832][T13065] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10785'. [ 1106.738334][T13065] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10785'. [ 1106.807763][T13076] IPVS: length: 119 != 24 [ 1106.906303][T13065] netlink: 60 bytes leftover after parsing attributes in process `syz.5.10785'. [ 1106.931676][T13080] netlink: 60 bytes leftover after parsing attributes in process `syz.5.10785'. [ 1107.190368][T13099] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10797'. [ 1107.207158][T13095] syzkaller0: entered promiscuous mode [ 1107.212643][T13095] syzkaller0: entered allmulticast mode [ 1108.830939][T13097] syzkaller0: entered promiscuous mode [ 1108.836693][T13097] syzkaller0: entered allmulticast mode [ 1109.048321][T13125] netlink: 52 bytes leftover after parsing attributes in process `syz.4.10803'. [ 1109.076398][ T166] hsr_slave_0: left promiscuous mode [ 1109.124191][ T166] veth0_macvtap: left promiscuous mode [ 1109.145850][T13135] netlink: 52 bytes leftover after parsing attributes in process `syz.4.10803'. [ 1109.406649][ T166] pim6reg527 (unregistering): left allmulticast mode [ 1109.673457][T13140] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1109.724428][T13155] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1109.740767][T13140] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1109.810959][T13140] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1109.849735][T13162] syzkaller0: entered promiscuous mode [ 1109.855540][T13162] syzkaller0: entered allmulticast mode [ 1110.138096][T13179] netlink: 'syz.4.10814': attribute type 4 has an invalid length. [ 1110.166158][T13178] __nla_validate_parse: 3 callbacks suppressed [ 1110.166170][T13178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10815'. [ 1110.249428][T13181] netlink: 'syz.1.10816': attribute type 9 has an invalid length. [ 1111.569707][T13185] netlink: 32 bytes leftover after parsing attributes in process `syz.5.10818'. [ 1111.642012][T13190] netlink: 'syz.4.10819': attribute type 32 has an invalid length. [ 1111.651031][T13190] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10819'. [ 1111.669943][T13189] netlink: 'syz.2.10820': attribute type 3 has an invalid length. [ 1111.677951][T13189] netlink: 'syz.2.10820': attribute type 1 has an invalid length. [ 1111.686048][T13189] netlink: 212 bytes leftover after parsing attributes in process `syz.2.10820'. [ 1111.696154][T13189] NCSI netlink: No device for ifindex 813332851 [ 1111.709454][T13190] bond6: option coupled_control: invalid value (52) [ 1111.718857][T13190] bond6 (unregistering): Released all slaves [ 1111.774699][T13191] lo: entered allmulticast mode [ 1111.795140][T13186] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1111.848335][T13197] netlink: 'syz.1.10822': attribute type 10 has an invalid length. [ 1111.883090][T13199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10823'. [ 1111.905753][T13197] bond0: (slave wlan1): Opening slave failed [ 1111.959388][T13203] netlink: 'syz.1.10822': attribute type 10 has an invalid length. [ 1112.114100][T13203] bond0: (slave wlan1): Opening slave failed [ 1112.350288][T13218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10828'. [ 1112.401096][T13220] netlink: 'syz.3.10829': attribute type 1 has an invalid length. [ 1112.458438][T13220] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10829'. [ 1112.500025][T13220] netlink: 658 bytes leftover after parsing attributes in process `syz.3.10829'. [ 1112.532718][T13220] netlink: 'syz.3.10829': attribute type 1 has an invalid length. [ 1112.611153][T23805] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 1112.668439][T13244] netlink: 216 bytes leftover after parsing attributes in process `syz.3.10834'. [ 1112.692171][T13244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10834'. [ 1112.911038][T13255] netlink: 'syz.5.10836': attribute type 61 has an invalid length. [ 1113.048080][T13264] xt_hashlimit: size too large, truncated to 1048576 [ 1113.067930][T13266] syzkaller0: entered promiscuous mode [ 1113.075199][T13266] syzkaller0: entered allmulticast mode [ 1114.182812][T13341] erspan0: entered promiscuous mode [ 1114.189416][T13341] erspan0: entered allmulticast mode [ 1114.603883][T13367] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1114.713401][T13356] bond_slave_0: entered promiscuous mode [ 1114.760176][T13372] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 1115.151335][T13392] validate_nla: 3 callbacks suppressed [ 1115.151355][T13392] netlink: 'syz.2.10880': attribute type 2 has an invalid length. [ 1115.218101][T13392] v: entered promiscuous mode [ 1115.407840][T13409] __nla_validate_parse: 8 callbacks suppressed [ 1115.407860][T13409] netlink: 288 bytes leftover after parsing attributes in process `syz.5.10885'. [ 1115.606135][T13416] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.10887'. [ 1115.670713][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 1115.745226][T13422] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10890'. [ 1115.836082][T13424] bond10: (slave bond_slave_1): Device is not our slave [ 1115.855641][T13428] netlink: 'syz.5.10891': attribute type 1 has an invalid length. [ 1115.881141][T13424] bond10: option active_slave: invalid value (bond_slave_1) [ 1115.976285][T13433] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10892'. [ 1116.175096][T13424] bond10 (unregistering): Released all slaves [ 1116.351518][T13428] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1116.385055][T13431] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1116.425392][T13434] bond5: entered promiscuous mode [ 1116.430447][T13434] bond5: entered allmulticast mode [ 1116.431397][T13439] netlink: 'syz.1.10894': attribute type 1 has an invalid length. [ 1116.449863][T13439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10894'. [ 1116.535772][T13437] syzkaller0: entered promiscuous mode [ 1116.546124][T13437] syzkaller0: entered allmulticast mode [ 1116.645746][T13452] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10896'. [ 1116.668505][T13452] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10896'. [ 1116.703635][T13452] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10896'. [ 1116.729946][T13452] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10896'. [ 1116.997416][T13474] netlink: 'syz.3.10901': attribute type 4 has an invalid length. [ 1117.216042][T13488] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 1117.274096][T13488] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1117.289243][T13488] gretap2: entered promiscuous mode [ 1117.298788][T13488] gretap2: entered allmulticast mode [ 1117.327297][T13495] bridge3: entered promiscuous mode [ 1117.347919][T13495] bridge3: entered allmulticast mode [ 1117.777883][T13537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10919'. [ 1117.933451][T13546] policy can only be matched on NF_INET_PRE_ROUTING [ 1117.933473][T13546] unable to load match [ 1118.165471][T13561] netlink: 'syz.3.10928': attribute type 1 has an invalid length. [ 1118.346374][T13575] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1118.517952][T23834] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1118.547747][T23834] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1118.577219][T13595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1118.583581][T23834] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1118.638814][T23834] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1118.666024][T13597] netlink: 'syz.5.10940': attribute type 14 has an invalid length. [ 1118.670978][T13607] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1118.725695][ T29] audit: type=1107 audit(1773087725.334:12): pid=13596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1119.328783][T13656] bridge_slave_1: left allmulticast mode [ 1119.448561][T13656] bridge_slave_1: left promiscuous mode [ 1119.468031][T13656] bridge0: port 2(bridge_slave_1) entered disabled state [ 1119.491778][T13656] bridge_slave_0: left allmulticast mode [ 1119.511463][T13656] bridge_slave_0: left promiscuous mode [ 1119.521512][T13656] bridge0: port 1(bridge_slave_0) entered disabled state [ 1119.781999][T13673] netlink: 'syz.5.10960': attribute type 3 has an invalid length. [ 1120.092160][T13690] netlink: 'syz.4.10965': attribute type 10 has an invalid length. [ 1120.294457][T13671] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1120.683017][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1120.691059][ C1] lec:lec_tx_timeout: lec0 [ 1120.849821][T13712] __nla_validate_parse: 4 callbacks suppressed [ 1120.849840][T13712] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10967'. [ 1120.888998][T13701] syzkaller0: entered promiscuous mode [ 1120.894777][T13701] syzkaller0: entered allmulticast mode [ 1120.911121][T23834] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1121.158395][T13736] netlink: set zone limit has 4 unknown bytes [ 1121.166020][T13739] netlink: zone id is out of range [ 1121.171165][T13739] netlink: zone id is out of range [ 1121.388353][T13744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10973'. [ 1122.647465][T23834] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1122.656151][T23834] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1122.664832][T13717] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10969'. [ 1122.675699][T13719] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1122.820648][T23834] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1122.833164][T13753] netlink: 72 bytes leftover after parsing attributes in process `syz.4.10976'. [ 1122.934200][T13763] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1122.952027][T13765] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10979'. [ 1123.239397][T13794] netlink: 56 bytes leftover after parsing attributes in process `syz.4.10988'. [ 1123.432973][T13805] IPVS: set_ctl: invalid protocol: 68 10.1.1.2:20004 [ 1123.826211][T13826] netlink: 216 bytes leftover after parsing attributes in process `syz.5.10995'. [ 1123.853016][T13826] netlink: 'syz.5.10995': attribute type 2 has an invalid length. [ 1123.940411][T13833] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1124.111460][T13837] delete_channel: no stack [ 1124.369333][T13843] bond10: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 1124.386635][T13843] bond10 (unregistering): Released all slaves [ 1124.712543][T13868] netlink: 'syz.5.11004': attribute type 33 has an invalid length. [ 1124.815075][T13868] bond6: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1124.816126][T13863] netlink: 'syz.4.11005': attribute type 3 has an invalid length. [ 1124.840790][T13863] netlink: 'syz.4.11005': attribute type 1 has an invalid length. [ 1124.849846][T13863] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.11005'. [ 1124.872697][T13868] bond6 (unregistering): Released all slaves [ 1124.930231][T13871] wg1 speed is unknown, defaulting to 1000 [ 1124.937239][T13875] netlink: 'syz.5.11004': attribute type 29 has an invalid length. [ 1124.955461][T13875] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11004'. [ 1125.015035][T13883] veth0: entered promiscuous mode [ 1125.021806][T13878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11007'. [ 1125.045550][T13878] veth0 (unregistering): left promiscuous mode [ 1125.144085][T13887] sctp: [Deprecated]: syz.3.11009 (pid 13887) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1125.144085][T13887] Use struct sctp_sack_info instead [ 1125.170092][T13885] bond6: option resend_igmp: invalid value (32767) [ 1125.176802][T13885] bond6: option resend_igmp: allowed values 0 - 255 [ 1125.185206][T13885] bond6 (unregistering): Released all slaves [ 1125.356397][T13897] netlink: 'syz.1.11011': attribute type 11 has an invalid length. [ 1125.394870][T13897] netlink: 'syz.1.11011': attribute type 11 has an invalid length. [ 1125.884258][T13924] tls_set_device_offload: netdev not found [ 1125.982257][T13924] !: renamed from dummy0 [ 1126.366477][T13943] netlink: 'syz.5.11022': attribute type 11 has an invalid length. [ 1126.443309][T13943] __nla_validate_parse: 1 callbacks suppressed [ 1126.443326][T13943] netlink: 199828 bytes leftover after parsing attributes in process `syz.5.11022'. [ 1126.499474][T13946] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.11024'. [ 1126.523376][T13946] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1126.765774][T13960] sctp: [Deprecated]: syz.1.11023 (pid 13960) Use of int in max_burst socket option. [ 1126.765774][T13960] Use struct sctp_assoc_value instead [ 1126.841263][T13967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11029'. [ 1126.851741][T13967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11029'. [ 1126.883002][T13967] netlink: 'syz.4.11029': attribute type 15 has an invalid length. [ 1126.896966][T25882] lec:lec_start_xmit: lec0:No lecd attached [ 1126.915845][T23829] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 1126.924827][T23829] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 1126.938110][T13967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11029'. [ 1126.961877][T13967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11029'. [ 1126.986987][T23829] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 1127.003110][T13967] netlink: 'syz.4.11029': attribute type 15 has an invalid length. [ 1127.003275][T23829] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 1127.056332][T13981] netlink: 'syz.5.11035': attribute type 12 has an invalid length. [ 1127.065187][T13981] netlink: 'syz.5.11035': attribute type 12 has an invalid length. [ 1127.158276][T13986] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1127.186222][T13986] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1127.196012][T13986] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1127.207472][T13991] netlink: 'syz.1.11038': attribute type 10 has an invalid length. [ 1127.219635][T13991] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1127.229742][T13986] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1127.239105][T13986] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1127.250994][T13986] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1127.260060][T13986] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1127.269125][T13986] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1127.297395][T13999] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11040'. [ 1127.445906][T14010] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11045'. [ 1127.521706][T14013] netlink: 228 bytes leftover after parsing attributes in process `syz.1.11047'. [ 1127.650347][T14023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11050'. [ 1128.168754][T14056] syzkaller0: entered promiscuous mode [ 1128.183112][T14056] syzkaller0: entered allmulticast mode [ 1128.272728][T14056] tipc: Enabled bearer , priority 0 [ 1128.298146][T14054] tipc: Resetting bearer [ 1128.364676][T14054] tipc: Disabling bearer [ 1128.650529][T21231] IPVS: starting estimator thread 0... [ 1128.694092][T14090] SET target dimension over the limit! [ 1128.746428][T14089] IPVS: using max 31 ests per chain, 74400 per kthread [ 1128.921836][T14108] vlan1: entered promiscuous mode [ 1128.976894][T14110] syzkaller0: entered promiscuous mode [ 1128.987295][T14110] syzkaller0: entered allmulticast mode [ 1129.125954][T14129] xt_bpf: check failed: parse error [ 1129.210799][T14138] syzkaller0: entered promiscuous mode [ 1129.217591][T14138] syzkaller0: entered allmulticast mode [ 1129.237179][T14139] nbd: couldn't find a device at index 0 [ 1129.267092][T14141] validate_nla: 1 callbacks suppressed [ 1129.267108][T14141] netlink: 'syz.4.11085': attribute type 25 has an invalid length. [ 1129.368905][T14141] netlink: 'syz.4.11085': attribute type 25 has an invalid length. [ 1129.379840][T14149] IPVS: set_ctl: invalid protocol: 94 172.20.20.170:20000 [ 1129.838351][T14188] netlink: 'syz.3.11101': attribute type 9 has an invalid length. [ 1130.120947][T14199] bond10: option all_slaves_active: invalid value (222) [ 1130.129755][T14199] bond10 (unregistering): Released all slaves [ 1130.245337][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88803351b400: rx timeout, send abort [ 1130.376510][T14228] gretap3: entered promiscuous mode [ 1130.392233][T14228] gretap3: entered allmulticast mode [ 1130.423381][T14231] net_ratelimit: 26 callbacks suppressed [ 1130.423396][T14231] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1130.745501][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88803351a400: rx timeout, send abort [ 1130.754001][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88803351b400: abort rx timeout. Force session deactivation [ 1130.948422][T14262] netlink: Unknown conntrack attr (type=2304, max=9) [ 1131.009830][T14267] x_tables: unsorted underflow at hook 4 [ 1131.053820][T14267] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1131.253886][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88803351a400: abort rx timeout. Force session deactivation [ 1131.272314][T14288] netlink: 'syz.1.11127': attribute type 10 has an invalid length. [ 1131.939868][T14334] netlink: 'syz.1.11136': attribute type 1 has an invalid length. [ 1132.032835][T14334] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1132.056134][T14342] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1132.072693][T14339] bond10: (slave bridge0): making interface the new active one [ 1132.091640][T14339] bond10: (slave bridge0): Enslaving as an active interface with an up link [ 1132.140199][T14343] tipc: Started in network mode [ 1132.152747][T14343] tipc: Node identity 52a66dce08ae, cluster identity 4711 [ 1132.168429][T14343] tipc: Enabled bearer , priority 0 [ 1132.200291][T14348] syzkaller0: entered promiscuous mode [ 1132.229121][T14348] syzkaller0: entered allmulticast mode [ 1132.272019][T14343] __nla_validate_parse: 18 callbacks suppressed [ 1132.272035][T14343] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11137'. [ 1132.307005][T14343] tipc: Resetting bearer [ 1132.623584][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5720 ms [ 1132.631601][ C1] lec:lec_tx_timeout: lec0 [ 1132.680338][T14384] netlink: 'syz.1.11149': attribute type 10 has an invalid length. [ 1132.757406][T14389] netlink: 'syz.1.11151': attribute type 4 has an invalid length. [ 1132.816671][T14336] tipc: Resetting bearer [ 1132.837007][T14336] tipc: Disabling bearer [ 1135.392417][T14364] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1135.554331][T14402] netlink: 84 bytes leftover after parsing attributes in process `syz.1.11155'. [ 1135.570060][T14402] netlink: 84 bytes leftover after parsing attributes in process `syz.1.11155'. [ 1135.580043][T14402] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1135.633279][T14407] macvtap0: entered promiscuous mode [ 1135.638719][T14407] macvtap0: entered allmulticast mode [ 1135.647779][T14407] veth1_vlan: entered allmulticast mode [ 1135.673954][T14402] netdevsim netdevsim1: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 1135.746902][T14421] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11161'. [ 1135.979020][T14443] xt_hashlimit: overflow, try lower: 3/0 [ 1135.988361][T14443] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11170'. [ 1135.997713][T14443] IPVS: Unknown mcast interface: vcan0 [ 1136.024816][T14445] netlink: 'syz.5.11169': attribute type 1 has an invalid length. [ 1136.033003][T14445] netlink: 'syz.5.11169': attribute type 2 has an invalid length. [ 1136.041043][T14445] netlink: 'syz.5.11169': attribute type 1 has an invalid length. [ 1136.049847][T14445] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11169'. [ 1136.134402][T14449] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11171'. [ 1136.434358][T14469] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11176'. [ 1136.475152][T14471] netlink: 48 bytes leftover after parsing attributes in process `syz.3.11177'. [ 1136.560310][T14477] netlink: 72 bytes leftover after parsing attributes in process `syz.3.11178'. [ 1136.611649][T14479] netlink: 'syz.1.11179': attribute type 1 has an invalid length. [ 1136.765173][T14481] syzkaller0: entered promiscuous mode [ 1136.772208][T14481] syzkaller0: entered allmulticast mode [ 1137.116354][T14501] netlink: 'syz.2.11184': attribute type 26 has an invalid length. [ 1138.423614][T14501] __nla_validate_parse: 2 callbacks suppressed [ 1138.423637][T14501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11184'. [ 1138.472227][T14501] netlink: 'syz.2.11184': attribute type 26 has an invalid length. [ 1138.483265][T14501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11184'. [ 1138.667626][T14511] netem: change failed [ 1138.678720][T14513] wg1 speed is unknown, defaulting to 1000 [ 1139.055054][T14553] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11200'. [ 1139.102311][ T29] audit: type=1800 audit(1773087745.704:13): pid=14552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.11198" name="memory.events" dev="tmpfs" ino=1664 res=0 errno=0 [ 1139.211725][T14561] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.11203'. [ 1139.485273][T14570] syzkaller0: entered promiscuous mode [ 1139.491289][T14570] syzkaller0: entered allmulticast mode [ 1139.563861][T14584] netlink: 'syz.1.11207': attribute type 39 has an invalid length. [ 1139.568546][T14588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11208'. [ 1139.586103][T14589] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11208'. [ 1139.635775][T14592] bond11: invalid ARP target 0.0.0.0 specified for addition [ 1139.644958][T14592] bond11: option arp_ip_target: invalid value (0) [ 1139.667775][T14592] bond11 (unregistering): Released all slaves [ 1139.864314][T14602] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11213'. [ 1139.932670][T14611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11212'. [ 1139.932773][T14602] syzkaller1: entered promiscuous mode [ 1139.949062][T14602] syzkaller1: entered allmulticast mode [ 1140.326317][T14632] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11219'. [ 1140.417944][T14636] syzkaller1: entered promiscuous mode [ 1140.423984][T14646] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11225'. [ 1140.434033][T14636] syzkaller1: entered allmulticast mode [ 1140.453273][T14636] netlink: 'syz.4.11222': attribute type 10 has an invalid length. [ 1140.698776][T14662] netlink: 'syz.1.11227': attribute type 10 has an invalid length. [ 1140.870623][T14671] openvswitch: netlink: Flow key attr not present in new flow. [ 1140.896833][T14671] netlink: 'syz.1.11229': attribute type 1 has an invalid length. [ 1141.037802][T14677] bond11: (slave gretap1): making interface the new active one [ 1141.046276][T14677] bond11: (slave gretap1): Enslaving as an active interface with an up link [ 1141.586243][T14724] validate_nla: 2 callbacks suppressed [ 1141.586264][T14724] netlink: 'syz.1.11245': attribute type 1 has an invalid length. [ 1141.875419][T14745] openvswitch: netlink: Flow key attribute not present in set flow. [ 1142.160669][ T135] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1142.181606][ T135] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1142.208819][ T135] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1142.231872][ T135] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1142.245748][T14767] veth0_to_team: entered allmulticast mode [ 1142.458225][T14778] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 1142.616685][T14794] tipc: Started in network mode [ 1142.635777][T14794] tipc: Node identity ac141441, cluster identity 4711 [ 1142.645016][T14794] tipc: Enabled bearer , priority 10 [ 1142.752083][T14801] netlink: 'syz.2.11273': attribute type 5 has an invalid length. [ 1143.049152][T14827] syzkaller1: entered promiscuous mode [ 1143.057592][T14827] syzkaller1: entered allmulticast mode [ 1143.206014][T14843] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1143.206014][T14844] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1143.353051][T14854] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1143.569431][T14876] netlink: 'syz.3.11292': attribute type 142 has an invalid length. [ 1143.609705][T14874] __nla_validate_parse: 22 callbacks suppressed [ 1143.609723][T14874] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11294'. [ 1143.669498][T14874] netlink: 556 bytes leftover after parsing attributes in process `syz.5.11294'. [ 1143.679303][T14874] openvswitch: netlink: Flow key attr not present in new flow. [ 1143.696275][T14888] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11298'. [ 1143.763004][ T2252] tipc: Node number set to 2886997057 [ 1143.801271][T14890] netlink: 'syz.2.11299': attribute type 1 has an invalid length. [ 1143.812199][T14890] netlink: 224 bytes leftover after parsing attributes in process `syz.2.11299'. [ 1143.880331][T14897] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11302'. [ 1143.911484][T14901] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1143.964763][T14902] netlink: 52 bytes leftover after parsing attributes in process `syz.4.11302'. [ 1144.002146][T14904] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11304'. [ 1144.679219][T14911] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11307'. [ 1144.841344][T14928] netlink: 'syz.2.11311': attribute type 1 has an invalid length. [ 1144.984993][T14928] syzkaller1: entered promiscuous mode [ 1145.001142][T14928] syzkaller1: entered allmulticast mode [ 1145.405990][T14949] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1145.625389][T14965] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11322'. [ 1145.665543][T14965] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11322'. [ 1145.934590][T14981] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1146.078511][T14990] xt_connbytes: Forcing CT accounting to be enabled [ 1146.316836][T15002] IPv6: NLM_F_CREATE should be specified when creating new route [ 1146.622650][T15014] openvswitch: netlink: Message has 1 unknown bytes. [ 1146.660837][T15014] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1146.761825][T15017] netlink: 'syz.2.11342': attribute type 10 has an invalid length. [ 1146.799464][T15017] wlan1: mtu less than device minimum [ 1146.829889][T15017] .`: (slave wlan1): Error -22 calling dev_set_mtu [ 1146.995951][T15034] x_tables: unsorted underflow at hook 3 [ 1147.407068][T15066] wlan1: mtu greater than device maximum [ 1147.434702][T15071] tipc: Enabling of bearer rejected, failed to enable media [ 1147.508879][T15075] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1147.598202][T15079] netlink: 'syz.3.11359': attribute type 1 has an invalid length. [ 1147.729809][T15086] syz_tun: entered allmulticast mode [ 1147.750490][T15086] netlink: 'syz.2.11364': attribute type 1 has an invalid length. [ 1147.816465][T15086] bond6: entered promiscuous mode [ 1147.830581][T15086] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1147.921535][T15098] wg1 speed is unknown, defaulting to 1000 [ 1148.003938][T15093] block nbd8: server does not support multiple connections per device. [ 1148.015079][T15093] block nbd8: shutting down sockets [ 1148.031833][T15102] netlink: 'syz.2.11367': attribute type 21 has an invalid length. [ 1148.399088][T15117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1148.447229][T15120] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1148.466173][T15117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1148.478869][T15121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1148.541973][T15121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1148.609277][T15119] netlink: 'syz.2.11373': attribute type 29 has an invalid length. [ 1148.683702][T15122] netlink: 'syz.2.11373': attribute type 29 has an invalid length. [ 1148.773152][T15133] netlink: 'syz.4.11375': attribute type 1 has an invalid length. [ 1148.783724][T15135] __nla_validate_parse: 17 callbacks suppressed [ 1148.783740][T15135] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.11377'. [ 1148.804931][T15138] netlink: 'syz.5.11378': attribute type 1 has an invalid length. [ 1148.822162][T15133] netlink: 'syz.4.11375': attribute type 11 has an invalid length. [ 1148.831145][T15133] netlink: 224 bytes leftover after parsing attributes in process `syz.4.11375'. [ 1148.842321][T15139] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1148.875914][T15138] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1149.007560][T15152] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11382'. [ 1149.070719][T15159] bond7: (slave bond_slave_1): Device is not our slave [ 1149.077963][T15159] bond7: option active_slave: invalid value (bond_slave_1) [ 1149.088390][T15159] bond7 (unregistering): Released all slaves [ 1149.334864][T15184] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11389'. [ 1149.356534][T15184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11389'. [ 1149.367362][T15184] netlink: 'syz.4.11389': attribute type 14 has an invalid length. [ 1149.617389][T15217] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1149.714663][T15207] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11396'. [ 1149.776283][T15226] netlink: 44 bytes leftover after parsing attributes in process `syz.5.11401'. [ 1149.960428][T15240] IPVS: set_ctl: invalid protocol: 1 224.0.0.2:20002 [ 1149.986074][T15244] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20002 [ 1150.033850][T15251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11403'. [ 1150.041571][T15250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11406'. [ 1150.056931][T15251] netlink: zone id is out of range [ 1150.062202][T15251] netlink: zone id is out of range [ 1150.083574][T15251] netlink: zone id is out of range [ 1150.091637][T15251] netlink: zone id is out of range [ 1150.100444][T15254] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11407'. [ 1150.127417][T15251] netlink: zone id is out of range [ 1150.393257][ T5823] Bluetooth: hci4: link tx timeout [ 1150.400187][ T5823] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1150.415139][ T5823] Bluetooth: hci4: link tx timeout [ 1150.420364][ T5823] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1150.717932][T15299] syzkaller0: entered promiscuous mode [ 1150.727009][T15299] syzkaller0: entered allmulticast mode [ 1150.839132][T15304] wg1 speed is unknown, defaulting to 1000 [ 1152.003954][T15385] xfrm2: entered allmulticast mode [ 1152.118071][T21231] IPVS: starting estimator thread 0... [ 1152.210687][T15390] erspan0: entered promiscuous mode [ 1152.224901][T15394] IPVS: using max 33 ests per chain, 79200 per kthread [ 1152.470358][ T5823] Bluetooth: hci4: command 0x040f tx timeout [ 1152.907831][T15445] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1152.934105][T15445] bridge0: entered allmulticast mode [ 1153.143280][T15460] syzkaller0: entered promiscuous mode [ 1153.148854][T15460] syzkaller0: entered allmulticast mode [ 1153.178570][T15473] IPVS: Error connecting to the multicast addr [ 1154.825424][T15487] syz_tun: left allmulticast mode [ 1154.959235][T15505] __nla_validate_parse: 18 callbacks suppressed [ 1154.959253][T15505] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11475'. [ 1154.993643][T15505] validate_nla: 2 callbacks suppressed [ 1154.993659][T15505] netlink: 'syz.2.11475': attribute type 1 has an invalid length. [ 1155.017199][T15508] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11477'. [ 1155.017277][T15505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11475'. [ 1155.069914][T15505] IPVS: length: 24 != 43032 [ 1155.114709][T15508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11477'. [ 1155.233541][T15523] netlink: 'syz.3.11482': attribute type 33 has an invalid length. [ 1155.276001][T15527] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11483'. [ 1155.285588][T15527] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11483'. [ 1155.858671][T15575] net_ratelimit: 8 callbacks suppressed [ 1155.858690][T15575] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1155.982756][T15587] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11502'. [ 1156.038358][T15588] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11502'. [ 1156.065337][T15594] 8021q: adding VLAN 0 to HW filter on device team0 [ 1156.088959][T15594] team0: Cannot enslave team device to itself [ 1156.128634][T15595] team0: Cannot enslave team device to itself [ 1156.150328][T15587] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1156.151413][T15588] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1156.174086][T15590] wg1 speed is unknown, defaulting to 1000 [ 1156.217963][T15594] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11505'. [ 1157.300558][T15648] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11519'. [ 1157.509085][ T135] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1157.518098][T15658] netlink: 'syz.3.11523': attribute type 2 has an invalid length. [ 1157.522993][ T135] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1157.534169][T15658] netlink: 'syz.3.11523': attribute type 2 has an invalid length. [ 1157.565692][ T135] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1157.579044][ T135] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1157.811940][T15671] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1158.075260][T15671] bond5: (slave vcan0): refused to change device type [ 1158.403826][T15706] netlink: 'syz.4.11535': attribute type 83 has an invalid length. [ 1158.544076][T15712] netlink: 'syz.2.11537': attribute type 88 has an invalid length. [ 1158.574538][T15714] SET target dimension over the limit! [ 1158.655652][T15724] !: renamed from dummy0 (while UP) [ 1158.735995][T15730] netlink: 'syz.4.11542': attribute type 4 has an invalid length. [ 1158.754278][T15729] netlink: 'syz.4.11542': attribute type 4 has an invalid length. [ 1158.806905][T15729] erspan0: left promiscuous mode [ 1158.826205][T15738] netlink: 'syz.3.11545': attribute type 1 has an invalid length. [ 1158.897261][T15729] bridge3: left promiscuous mode [ 1158.902336][T15729] bridge3: left allmulticast mode [ 1159.016494][T15729] gretap3: left promiscuous mode [ 1159.034436][T15729] gretap3: left allmulticast mode [ 1159.100373][T23828] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1159.113057][T23828] netdevsim netdevsim4 netdevsim0: unset [0, 1] type 1 family 0 port 256 - 0 [ 1159.135369][T23828] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1159.147547][T23828] netdevsim netdevsim4 netdevsim1: unset [0, 1] type 1 family 0 port 256 - 0 [ 1159.178185][T15752] netlink: 'syz.1.11548': attribute type 9 has an invalid length. [ 1159.184361][T23828] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1159.215294][T23828] netdevsim netdevsim4 netdevsim2: unset [0, 1] type 1 family 0 port 256 - 0 [ 1159.246633][T23828] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1159.283354][T23828] netdevsim netdevsim4 netdevsim3: unset [0, 1] type 1 family 0 port 256 - 0 [ 1159.700472][T15793] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1160.180820][T15838] wg1 speed is unknown, defaulting to 1000 [ 1160.217108][T15844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1160.236516][T15847] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1160.238894][T15844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1160.260744][T15844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1160.272546][T15844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1160.284833][T15844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1160.296474][T15844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1160.321366][T15844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1160.340508][T15844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1160.352635][T15844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1160.373962][T15844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1160.420194][T15844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1160.437385][T15844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1160.464662][T15844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1160.505017][T15844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1160.525868][T15844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1160.547034][T15844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1160.590926][T15844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1160.614752][T15844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1160.657237][T15844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1160.685879][T15844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1160.709722][T15863] __nla_validate_parse: 26 callbacks suppressed [ 1160.709737][T15863] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11575'. [ 1160.747040][T15844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1160.758605][T15844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1160.769920][T15844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1160.782183][T15844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1160.796366][T15844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1160.808245][T15844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1160.819742][T15844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1160.831494][T15844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1160.843377][T15844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1160.854709][T15844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1160.866346][T15844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1160.878236][T15844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1160.889896][T15844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1160.905654][T15844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1160.917372][T15844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1160.930790][T15844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1160.943503][T15844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1160.970363][T15844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1160.982148][T15844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1160.993862][T15844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1161.006027][T15844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1161.019009][T15844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1161.035803][T15844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1161.046099][T15842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1161.057549][T15844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1161.069725][T15844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1161.101130][T15844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1161.116721][T15844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1161.127966][T15844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1161.158451][T15844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1161.170147][T15844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1161.171333][T15873] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11578'. [ 1161.181570][T15844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1161.200569][T15844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1161.211918][T15844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1161.227727][T15844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1161.239626][T15844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1161.267793][T15877] validate_nla: 4 callbacks suppressed [ 1161.267812][T15877] netlink: 'syz.2.11579': attribute type 3 has an invalid length. [ 1161.296471][T15844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1161.303145][T15877] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11579'. [ 1161.325227][T15877] netlink: 'syz.2.11579': attribute type 23 has an invalid length. [ 1161.347907][T15844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1161.383996][T15844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1161.404394][T15844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1161.465278][T15844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1161.486406][T15844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1161.554187][T15844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1161.582520][T15888] netlink: 'syz.2.11583': attribute type 13 has an invalid length. [ 1161.584034][T15844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1161.609373][T15844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1161.633876][T15901] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11587'. [ 1161.657168][T15903] xt_hashlimit: max too large, truncated to 1048576 [ 1161.994121][T15924] wg1 speed is unknown, defaulting to 1000 [ 1162.092761][T15931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11595'. [ 1162.095264][T15934] netlink: 'syz.5.11598': attribute type 7 has an invalid length. [ 1162.277569][T15947] netlink: 'syz.1.11602': attribute type 1 has an invalid length. [ 1162.285593][T15947] netlink: 224 bytes leftover after parsing attributes in process `syz.1.11602'. [ 1162.330323][T15952] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.11600'. [ 1162.342562][T15952] netlink: Conntrack attr has 3 unknown bytes [ 1162.470899][T15960] netlink: 'syz.1.11607': attribute type 14 has an invalid length. [ 1162.487146][T15964] netlink: 'syz.3.11608': attribute type 1 has an invalid length. [ 1162.513103][T15960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11607'. [ 1162.513839][T15964] netlink: 224 bytes leftover after parsing attributes in process `syz.3.11608'. [ 1162.551457][T15960] netlink: 'syz.1.11607': attribute type 14 has an invalid length. [ 1162.580469][T15960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11607'. [ 1162.660265][T15971] netlink: 'syz.4.11610': attribute type 1 has an invalid length. [ 1162.676783][T15973] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1162.869272][T15989] netlink: 'syz.2.11616': attribute type 10 has an invalid length. [ 1162.918187][T15989] wlan1: mtu less than device minimum [ 1162.933812][T15989] .`: (slave wlan1): Error -22 calling dev_set_mtu [ 1163.103923][T16005] ip6tnl0: Caught tx_queue_len zero misconfig [ 1163.442637][T16032] wg2: entered promiscuous mode [ 1166.976952][T16076] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1166.988717][T16097] __nla_validate_parse: 8 callbacks suppressed [ 1166.988731][T16097] netlink: 412 bytes leftover after parsing attributes in process `syz.2.11651'. [ 1167.242778][T16129] pim6reg1: entered promiscuous mode [ 1167.257540][T16129] pim6reg1: entered allmulticast mode [ 1167.354906][T16142] netlink: 9 bytes leftover after parsing attributes in process `syz.3.11665'. [ 1167.371700][T16142] 1: renamed from c0 (while UP) [ 1167.417018][T16142] A link change request failed with some changes committed already. Interface c1 may have been left with an inconsistent configuration, please check. [ 1167.451003][T16148] sch_fq: defrate 0 ignored. [ 1167.648154][T16170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11670'. [ 1167.695783][T16173] netlink: 'syz.3.11673': attribute type 11 has an invalid length. [ 1167.842127][T16178] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11674'. [ 1167.852668][T16178] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11674'. [ 1167.862784][T16178] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11674'. [ 1168.022298][T16182] syzkaller0: entered promiscuous mode [ 1168.027911][T16182] syzkaller0: entered allmulticast mode [ 1168.233190][T16203] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11681'. [ 1168.499903][T16214] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1169.001002][T16198] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1169.673319][ T5826] Bluetooth: hci4: command 0x040f tx timeout [ 1169.736226][T16196] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1169.867669][T16217] 8021q: VLANs not supported on ip6_vti0 [ 1169.882690][T16225] vcan1: entered promiscuous mode [ 1169.901622][T16225] vcan1: entered allmulticast mode [ 1170.089242][T16224] vcan1: entered promiscuous mode [ 1170.120584][T16224] vcan1: entered allmulticast mode [ 1170.340284][T16256] syzkaller0: entered promiscuous mode [ 1170.346167][T16256] syzkaller0: entered allmulticast mode [ 1170.444010][T16267] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 1170.668052][T16283] bond0: entered allmulticast mode [ 1170.781595][T16277] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11697'. [ 1170.823341][T16277] netlink: 43 bytes leftover after parsing attributes in process `syz.2.11697'. [ 1170.832396][T16277] validate_nla: 3 callbacks suppressed [ 1170.832410][T16277] netlink: 'syz.2.11697': attribute type 6 has an invalid length. [ 1170.835599][T16289] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.11701'. [ 1170.869499][T16277] netlink: 'syz.2.11697': attribute type 5 has an invalid length. [ 1171.116213][ T5823] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1171.150554][ T5823] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1171.160163][ T5823] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1171.172257][ T5823] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1171.180834][ T5823] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1171.271007][T16303] wg1 speed is unknown, defaulting to 1000 [ 1171.665127][T16338] netlink: 'syz.1.11714': attribute type 1 has an invalid length. [ 1171.696906][T16338] netlink: 'syz.1.11714': attribute type 1 has an invalid length. [ 1171.727643][T16337] bond12 (unregistering): Released all slaves [ 1171.777176][T16338] bridge5: entered promiscuous mode [ 1171.792596][T16338] bridge5: entered allmulticast mode [ 1171.845624][T16345] syzkaller1: entered promiscuous mode [ 1171.851195][T16345] syzkaller1: entered allmulticast mode [ 1171.992219][T16303] chnl_net:caif_netlink_parms(): no params data found [ 1172.058438][T16355] lo: Caught tx_queue_len zero misconfig [ 1172.067251][T16356] netlink: 'syz.1.11720': attribute type 10 has an invalid length. [ 1172.076744][T16356] __nla_validate_parse: 2 callbacks suppressed [ 1172.076759][T16356] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11720'. [ 1172.104481][T16356] dummy0: entered promiscuous mode [ 1172.120732][T16356] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1172.133661][T16361] netlink: 104 bytes leftover after parsing attributes in process `syz.1.11720'. [ 1172.140825][T16360] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11721'. [ 1172.153975][T16361] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11720'. [ 1172.167109][T16360] netlink: 'syz.4.11721': attribute type 7 has an invalid length. [ 1172.177225][T16360] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11721'. [ 1172.235121][T16303] bridge0: port 1(bridge_slave_0) entered blocking state [ 1172.242587][T16303] bridge0: port 1(bridge_slave_0) entered disabled state [ 1172.251488][T16303] bridge_slave_0: entered allmulticast mode [ 1172.261101][T16303] bridge_slave_0: entered promiscuous mode [ 1172.274786][T16303] bridge0: port 2(bridge_slave_1) entered blocking state [ 1172.292227][T16303] bridge0: port 2(bridge_slave_1) entered disabled state [ 1172.294948][T16371] netlink: 256 bytes leftover after parsing attributes in process `syz.2.11724'. [ 1172.306231][T16303] bridge_slave_1: entered allmulticast mode [ 1172.327293][T16372] netlink: 6336 bytes leftover after parsing attributes in process `syz.2.11724'. [ 1172.327304][T16303] bridge_slave_1: entered promiscuous mode [ 1172.363670][T16372] openvswitch: netlink: Flow key attr not present in new flow. [ 1172.457631][T16377] xt_connbytes: Forcing CT accounting to be enabled [ 1172.699219][T16395] netlink: 68 bytes leftover after parsing attributes in process `syz.5.11731'. [ 1172.709456][T16395] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11731'. [ 1172.754033][T16398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11730'. [ 1173.267822][ T5826] Bluetooth: hci5: command tx timeout [ 1174.251411][T16303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1174.260819][T16391] syz_tun: entered allmulticast mode [ 1174.271285][T16303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1174.297662][T16398] syz_tun (unregistering): left allmulticast mode [ 1174.340812][T16405] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1174.356049][T16405] bond7 (unregistering): Released all slaves [ 1174.456114][T16303] team0: Port device team_slave_0 added [ 1174.464529][T16424] netlink: 'syz.4.11736': attribute type 1 has an invalid length. [ 1174.482249][T16303] team0: Port device team_slave_1 added [ 1174.581180][T16303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1174.588990][T16303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1174.628337][T16303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1174.676037][T16303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1174.694673][T16303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1174.731814][T16303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1174.745658][T16437] syzkaller0: entered promiscuous mode [ 1174.751136][T16437] syzkaller0: entered allmulticast mode [ 1174.815229][T16303] hsr_slave_0: entered promiscuous mode [ 1174.826415][T16442] netlink: 'syz.1.11743': attribute type 7 has an invalid length. [ 1174.835169][T16303] hsr_slave_1: entered promiscuous mode [ 1174.841456][T16303] debugfs: 'hsr0' already exists in 'hsr' [ 1174.847345][T16303] Cannot create hsr debugfs directory [ 1174.986076][T16451] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1175.177632][T16456] udevd[16456]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1175.236639][T16454] udevd[16454]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1175.279486][T23834] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1175.297248][T23834] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1175.317766][T16472] tipc: New replicast peer: 255.255.255.255 [ 1175.325103][T16472] tipc: Enabled bearer , priority 10 [ 1175.331311][ T135] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1175.343260][ T5826] Bluetooth: hci5: command tx timeout [ 1175.478251][T16303] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1175.489620][T16303] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.507986][T16469] syzkaller0: entered promiscuous mode [ 1175.514398][T16469] syzkaller0: entered allmulticast mode [ 1175.522517][ T135] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1175.636226][T16303] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1175.680236][T16303] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.778710][T16496] netlink: 'syz.4.11758': attribute type 1 has an invalid length. [ 1175.779828][T16303] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1175.799943][T16303] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.844130][T16493] netlink: 'syz.1.11757': attribute type 4 has an invalid length. [ 1175.887946][T16303] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1175.905920][T16303] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.151199][T16303] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1176.181774][T16303] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1176.214298][T16303] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1176.267872][T16303] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1176.337130][ T2252] tipc: Node number set to 1510501838 [ 1176.567071][T16303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1176.615101][T16303] 8021q: adding VLAN 0 to HW filter on device team0 [ 1176.654236][ T135] bridge0: port 1(bridge_slave_0) entered blocking state [ 1176.661400][ T135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1176.704547][ T166] bridge0: port 2(bridge_slave_1) entered blocking state [ 1176.711681][ T166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1176.726509][T16552] delete_channel: no stack [ 1176.929364][T16560] netlink: 'syz.4.11773': attribute type 1 has an invalid length. [ 1176.986930][T16565] netlink: 'syz.2.11777': attribute type 21 has an invalid length. [ 1177.119859][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 1177.152633][T16303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1177.238306][T16303] veth0_vlan: entered promiscuous mode [ 1177.276686][T16586] block nbd1: NBD_DISCONNECT [ 1177.279660][T16303] veth1_vlan: entered promiscuous mode [ 1177.281398][T16586] block nbd1: Send disconnect failed -32 [ 1177.335383][T16586] block nbd1: shutting down sockets [ 1177.393184][T16594] __nla_validate_parse: 19 callbacks suppressed [ 1177.393201][T16594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11782'. [ 1177.423336][ T5826] Bluetooth: hci5: command tx timeout [ 1177.461441][T16303] veth0_macvtap: entered promiscuous mode [ 1177.556094][T16303] veth1_macvtap: entered promiscuous mode [ 1177.589422][T16303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1177.647340][ T166] bridge_slave_0: left allmulticast mode [ 1177.666137][ T166] bridge0: port 1(bridge_slave_0) entered disabled state [ 1177.697263][T16615] netlink: 48 bytes leftover after parsing attributes in process `syz.5.11787'. [ 1177.722469][ T166] veth0_to_bond: left allmulticast mode [ 1177.734931][ T166] veth0_to_bond: left promiscuous mode [ 1177.741141][ T166] bridge4: port 2(veth0_to_bond) entered disabled state [ 1177.765216][T16619] netlink: 'syz.4.11786': attribute type 1 has an invalid length. [ 1177.777843][ T166] veth9: left allmulticast mode [ 1177.782779][ T166] veth9: left promiscuous mode [ 1177.788556][ T166] bridge4: port 1(veth9) entered disabled state [ 1178.117210][ T166] bond8 (unregistering): (slave bridge3): Releasing backup interface [ 1178.347142][ T166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1178.357853][ T166] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1178.367700][ T166] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1178.377279][ T166] bond0 (unregistering): Released all slaves [ 1178.395072][ T166] bond1 (unregistering): Released all slaves [ 1178.407627][ T166] bond2 (unregistering): Released all slaves [ 1178.419896][ T166] bond3 (unregistering): Released all slaves [ 1178.433803][ T166] bond4 (unregistering): (slave vcan1): Releasing backup interface [ 1178.441702][ T166] vcan1: left promiscuous mode [ 1178.457043][ T166] bond4 (unregistering): Released all slaves [ 1178.476742][ T166] bond5 (unregistering): Released all slaves [ 1178.489490][ T166] bond6 (unregistering): Released all slaves [ 1178.502013][ T166] bond7 (unregistering): Released all slaves [ 1178.515441][ T166] bond8 (unregistering): Released all slaves [ 1178.531174][ T166] bond9 (unregistering): (slave veth3): Releasing active interface [ 1178.554533][ T166] bond9 (unregistering): (slave veth5): Releasing active interface [ 1178.564069][ T166] bond9 (unregistering): Released all slaves [ 1178.577495][ T166] bond10 (unregistering): (slave vcan2): Releasing backup interface [ 1178.585622][ T166] vcan2: left promiscuous mode [ 1178.591569][ T166] bond10 (unregistering): Released all slaves [ 1178.604201][ T166] bond11 (unregistering): Released all slaves [ 1178.620622][ T166] bond12 (unregistering): Released all slaves [ 1178.634059][ T166] bond13 (unregistering): Released all slaves [ 1178.647463][ T166] bond14 (unregistering): Released all slaves [ 1178.660254][ T166] bond15 (unregistering): Released all slaves [ 1178.673844][ T166] bond16 (unregistering): Released all slaves [ 1178.687995][ T166] bond17 (unregistering): Released all slaves [ 1178.703397][ T166] bond18 (unregistering): Released all slaves [ 1178.717345][ T166] bond19 (unregistering): (slave veth15): Releasing active interface [ 1178.727343][ T166] bond19 (unregistering): Released all slaves [ 1178.752451][T16612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11786'. [ 1178.866531][T16303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1178.949477][T16627] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11789'. [ 1178.986632][ T135] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.997713][ T135] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.066325][T16628] bond7 (unregistering): Released all slaves [ 1179.138341][T16648] netlink: 'syz.4.11790': attribute type 10 has an invalid length. [ 1179.154319][T16629] bond7 (unregistering): Released all slaves [ 1179.249494][T16657] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11792'. [ 1179.264238][ T166] : left promiscuous mode [ 1179.343315][ T135] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.352121][ T135] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.405603][T16648] .`: (slave bridge0): Enslaving as an active interface with an up link [ 1179.414499][T16665] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11796'. [ 1179.433622][T16666] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11796'. [ 1179.434983][T16646] syzkaller1: entered promiscuous mode [ 1179.451457][T16646] syzkaller1: entered allmulticast mode [ 1179.469739][T16660] syzkaller0: entered allmulticast mode [ 1179.478102][ T166] tipc: Left network mode [ 1179.504243][ T5826] Bluetooth: hci5: command tx timeout [ 1179.583956][T16674] atomic_op ffff888083926198 conn xmit_atomic 0000000000000000 [ 1179.781333][T16677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11797'. [ 1180.033401][T16625] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1180.052526][T16625] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1180.156917][ T135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1180.166012][ T135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1180.727496][T16714] netlink: 68 bytes leftover after parsing attributes in process `syz.1.11806'. [ 1180.728481][T16708] dvmrp0: left allmulticast mode [ 1180.742360][T16708] syz_tun: left allmulticast mode [ 1180.785429][T16702] x_tables: unsorted underflow at hook 4 [ 1180.799993][T16719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11806'. [ 1180.823100][T16720] netlink: 'syz.2.11808': attribute type 1 has an invalid length. [ 1180.887388][ T5823] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1180.899100][ T5823] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1180.909671][ T5823] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1180.918304][ T5823] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1180.946995][ T5823] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1180.959288][ T166] hsr_slave_0: left promiscuous mode [ 1181.865507][T16768] openvswitch: netlink: EtherType 50a is less than min 600 [ 1181.959556][ T166] IPVS: stop unused estimator thread 0... [ 1182.121664][T16724] chnl_net:caif_netlink_parms(): no params data found [ 1182.206447][ T166] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1182.349876][ T166] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1182.365017][T16724] bridge0: port 1(bridge_slave_0) entered blocking state [ 1182.372205][T16724] bridge0: port 1(bridge_slave_0) entered disabled state [ 1182.379865][T16724] bridge_slave_0: entered allmulticast mode [ 1182.392075][T16724] bridge_slave_0: entered promiscuous mode [ 1182.401098][T16724] bridge0: port 2(bridge_slave_1) entered blocking state [ 1182.408388][T16724] bridge0: port 2(bridge_slave_1) entered disabled state [ 1182.416208][T16724] bridge_slave_1: entered allmulticast mode [ 1182.433612][T16724] bridge_slave_1: entered promiscuous mode [ 1182.489370][T16812] syzkaller0: entered promiscuous mode [ 1182.492301][T16819] __nla_validate_parse: 6 callbacks suppressed [ 1182.492317][T16819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11829'. [ 1182.498057][T16812] syzkaller0: entered allmulticast mode [ 1182.544214][ T166] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1182.625555][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5500 ms [ 1182.633593][ C1] lec:lec_tx_timeout: lec0 [ 1182.685026][ T166] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1182.702677][T16724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1182.705463][T16831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11833'. [ 1182.717853][T16724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1182.742445][T16833] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11832'. [ 1182.763562][T16833] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11832'. [ 1182.831979][T16724] team0: Port device team_slave_0 added [ 1182.855160][T16724] team0: Port device team_slave_1 added [ 1182.935535][T16724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1182.942582][T16724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1182.970492][T16724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1182.998560][T16724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1183.011858][T16724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1183.038353][ T5826] Bluetooth: hci2: command tx timeout [ 1183.077934][T16724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1183.124541][T16849] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11838'. [ 1183.153961][ T49] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1183.174438][ T49] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1183.217366][T16724] hsr_slave_0: entered promiscuous mode [ 1183.224122][T16724] hsr_slave_1: entered promiscuous mode [ 1183.230159][T16724] debugfs: 'hsr0' already exists in 'hsr' [ 1183.236476][T16724] Cannot create hsr debugfs directory [ 1183.288525][T23830] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1183.320066][T23830] netdevsim netdevsim5 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 1183.425469][ T166] bond3 (unregistering): (slave gretap1): Releasing active interface [ 1183.459425][ T166] dvmrp6 (unregistering): left allmulticast mode [ 1183.766889][ T166] bond0 (unregistering): Released all slaves [ 1183.777978][ T166] bond1 (unregistering): Released all slaves [ 1183.790355][ T166] bond2 (unregistering): Released all slaves [ 1183.802662][ T166] bond3 (unregistering): Released all slaves [ 1183.821117][ T166] bond4 (unregistering): Released all slaves [ 1183.835740][ T166] bond5 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1183.846257][ T166] bond5 (unregistering): Released all slaves [ 1183.861947][ T166] bond6 (unregistering): Released all slaves [ 1184.062261][T16868] netlink: 'syz.2.11844': attribute type 1 has an invalid length. [ 1184.142746][ T166] tipc: Disabling bearer [ 1184.150284][ T166] tipc: Left network mode [ 1184.221884][T16868] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1184.353412][T16884] netlink: 'syz.2.11844': attribute type 1 has an invalid length. [ 1184.527829][T16874] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1184.560134][T16874] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1184.571413][T16874] bond7: (slave vxcan1): Error -95 calling set_mac_address [ 1185.103113][ T5826] Bluetooth: hci2: command tx timeout [ 1187.158968][T16878] ipip0: entered promiscuous mode [ 1187.164970][T16878] bond7: (slave ipip0): The slave device specified does not support setting the MAC address [ 1187.178908][T16878] bond7: (slave ipip0): Error -95 calling set_mac_address [ 1187.186572][ T5826] Bluetooth: hci2: command tx timeout [ 1187.212005][T16887] vlan4: entered allmulticast mode [ 1187.217301][T16887] bond7: entered allmulticast mode [ 1187.388717][T16724] netdevsim netdevsim5 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1187.565312][T16724] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1187.648101][T16911] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11852'. [ 1187.715001][T16911] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1187.724440][T16724] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1187.769982][T16925] netlink: 64 bytes leftover after parsing attributes in process `syz.2.11853'. [ 1187.954443][T16921] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1187.973412][T16921] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1188.011632][T16921] bond8: (slave vxcan1): Error -95 calling set_mac_address [ 1188.137325][T16948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11857'. [ 1188.149051][ T166] hsr_slave_0: left promiscuous mode [ 1188.167516][ T166] veth1_vlan: left allmulticast mode [ 1188.479175][ T166] veth0_to_team (unregistering): left allmulticast mode [ 1188.588128][ T166] lo (unregistering): left allmulticast mode [ 1188.630313][T16724] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1188.755760][T16949] syzkaller0: entered promiscuous mode [ 1188.761266][T16949] syzkaller0: entered allmulticast mode [ 1189.269964][ T5826] Bluetooth: hci2: command tx timeout [ 1190.627554][T16995] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11864'. [ 1190.719946][T17002] netlink: 'syz.1.11867': attribute type 1 has an invalid length. [ 1190.740529][T16724] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1190.748895][T16998] netlink: 'syz.4.11866': attribute type 1 has an invalid length. [ 1190.750814][T17004] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11868'. [ 1190.797627][T17004] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11868'. [ 1190.894019][T16998] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11866'. [ 1190.925954][T17017] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11871'. [ 1190.949924][T17006] bond9: (slave bridge7): making interface the new active one [ 1190.959230][T17006] bond9: (slave bridge7): Enslaving as an active interface with an up link [ 1190.968396][T16724] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1191.057580][T16998] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1191.154736][T16724] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1191.242313][T17014] syzkaller1: entered promiscuous mode [ 1191.247908][T17014] syzkaller1: entered allmulticast mode [ 1191.256541][T17031] netlink: 'syz.3.11872': attribute type 1 has an invalid length. [ 1191.365696][ T166] IPVS: stop unused estimator thread 0... [ 1191.371532][T16724] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1191.375276][T17034] netlink: 68 bytes leftover after parsing attributes in process `syz.3.11872'. [ 1191.408216][T25882] lec:lec_start_xmit: lec0:No lecd attached [ 1191.681063][T16724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1191.692496][T17054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11877'. [ 1191.720684][T16724] 8021q: adding VLAN 0 to HW filter on device team0 [ 1191.748715][T17056] x_tables: unsorted entry at hook 2 [ 1191.756386][T16625] bridge0: port 1(bridge_slave_0) entered blocking state [ 1191.763569][T16625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1191.819926][T16625] bridge0: port 2(bridge_slave_1) entered blocking state [ 1191.827087][T16625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1192.121487][T17088] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1192.149440][T17088] sctp: [Deprecated]: syz.2.11886 (pid 17088) Use of int in max_burst socket option. [ 1192.149440][T17088] Use struct sctp_assoc_value instead [ 1192.154402][T17091] syzkaller1: entered promiscuous mode [ 1192.176942][T17091] syzkaller1: entered allmulticast mode [ 1192.297013][T17097] dvmrp0: entered allmulticast mode [ 1192.353646][T16724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1192.400362][T17101] netlink: 'syz.3.11889': attribute type 1 has an invalid length. [ 1192.458156][T17101] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1192.898214][T16724] veth0_vlan: entered promiscuous mode [ 1192.930393][T16724] veth1_vlan: entered promiscuous mode [ 1193.014634][T16724] veth0_macvtap: entered promiscuous mode [ 1193.046070][T16724] veth1_macvtap: entered promiscuous mode [ 1193.096171][T16724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1193.134558][T16724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1193.166242][T23829] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1193.182092][T23829] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1193.207836][T17147] netlink: 'syz.3.11900': attribute type 5 has an invalid length. [ 1193.227695][ T135] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1193.238156][ T135] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1193.390001][T17156] __nla_validate_parse: 8 callbacks suppressed [ 1193.390019][T17156] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11903'. [ 1193.409958][T23829] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1193.430760][T23829] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1193.446338][T17163] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11903'. [ 1193.476156][T17161] IPVS: Error connecting to the multicast addr [ 1193.485351][T17161] netlink: 56 bytes leftover after parsing attributes in process `syz.2.11906'. [ 1193.522681][T17162] mac80211_hwsim hwsim99 wlan0: entered promiscuous mode [ 1193.547219][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1193.594031][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1193.609819][T17171] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1193.727836][T17179] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11910'. [ 1193.820276][T17188] netlink: 7 bytes leftover after parsing attributes in process `syz.5.11807'. [ 1193.837925][T17189] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11912'. [ 1193.854093][T17189] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11912'. [ 1193.875167][T17187] IPVS: length: 139 != 8 [ 1193.887155][T17189] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11912'. [ 1194.155879][T17204] syzkaller0: entered promiscuous mode [ 1194.156766][ T5823] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1194.173959][ T5823] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1194.182557][ T5823] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1194.191733][ T5823] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1194.198952][T17204] syzkaller0: entered allmulticast mode [ 1194.199783][ T5823] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1194.351403][T17219] tipc: Started in network mode [ 1194.388162][T17219] tipc: Node identity 4, cluster identity 4711 [ 1194.432919][T17219] tipc: Node number set to 4 [ 1194.498484][T17226] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1194.639878][T17234] ip6gre0: entered allmulticast mode [ 1194.654184][T17234] syz_tun: entered allmulticast mode [ 1196.317638][ T5823] Bluetooth: hci3: command tx timeout [ 1196.594796][T17243] syzkaller0: entered promiscuous mode [ 1196.600396][T17243] syzkaller0: entered allmulticast mode [ 1196.612776][T17259] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1196.628076][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5210 ms [ 1196.628106][ C1] lec:lec_tx_timeout: lec0 [ 1196.642282][T17233] ip6gre0: left allmulticast mode [ 1196.719838][T17266] netlink: 'syz.1.11928': attribute type 1 has an invalid length. [ 1196.731799][T17266] netlink: 'syz.1.11928': attribute type 7 has an invalid length. [ 1196.743756][T17266] netlink: 'syz.1.11928': attribute type 8 has an invalid length. [ 1196.751590][T17266] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11928'. [ 1196.829329][T17271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11928'. [ 1198.383695][ T5823] Bluetooth: hci3: command tx timeout [ 1198.489628][T17215] chnl_net:caif_netlink_parms(): no params data found [ 1198.528799][T17293] netlink: 'syz.1.11934': attribute type 1 has an invalid length. [ 1198.553451][T17293] __nla_validate_parse: 1 callbacks suppressed [ 1198.553469][T17293] netlink: 232 bytes leftover after parsing attributes in process `syz.1.11934'. [ 1198.806234][T17306] syzkaller0: entered promiscuous mode [ 1198.811801][T17306] syzkaller0: entered allmulticast mode [ 1198.955644][T17215] bridge0: port 1(bridge_slave_0) entered blocking state [ 1198.970708][T17215] bridge0: port 1(bridge_slave_0) entered disabled state [ 1198.989723][T17326] netlink: 'syz.1.11942': attribute type 1 has an invalid length. [ 1198.993507][T17215] bridge_slave_0: entered allmulticast mode [ 1199.020207][T17215] bridge_slave_0: entered promiscuous mode [ 1199.050763][T17215] bridge0: port 2(bridge_slave_1) entered blocking state [ 1199.073018][T17215] bridge0: port 2(bridge_slave_1) entered disabled state [ 1199.080227][T17215] bridge_slave_1: entered allmulticast mode [ 1199.114689][T17215] bridge_slave_1: entered promiscuous mode [ 1199.121144][T17334] IPVS: set_ctl: invalid protocol: 31322 172.20.20.170:20003 [ 1199.219333][T17329] bond12: (slave ip6gretap1): making interface the new active one [ 1199.242579][T17329] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1199.260782][T17329] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1199.280993][T17329] bond12: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1199.293973][T17339] netlink: 76 bytes leftover after parsing attributes in process `syz.5.11946'. [ 1199.323296][T17347] nbd: illegal input index 2958377 [ 1199.332614][T17215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1199.349141][T17215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1199.461884][T17351] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11950'. [ 1199.471923][T17215] team0: Port device team_slave_0 added [ 1199.480632][T17215] team0: Port device team_slave_1 added [ 1199.481652][T17358] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 1199.517466][T17351] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 1199.557802][T17215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1199.617820][T17215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1199.688469][T17215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1199.739070][T17215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1199.747988][T17215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1199.775686][T17215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1199.840925][T17215] hsr_slave_0: entered promiscuous mode [ 1199.847164][T17367] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1199.851788][T17215] hsr_slave_1: entered promiscuous mode [ 1199.862441][T17215] debugfs: 'hsr0' already exists in 'hsr' [ 1199.868616][T17215] Cannot create hsr debugfs directory [ 1199.888215][T17378] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1200.013697][T17387] syz_tun: entered allmulticast mode [ 1200.039019][T17387] syz_tun: left allmulticast mode [ 1200.041778][T17393] netlink: 52 bytes leftover after parsing attributes in process `syz.4.11957'. [ 1200.187222][T17215] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1200.266065][T17215] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1200.344589][T17215] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1200.447312][T17215] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1200.463944][ T5823] Bluetooth: hci3: command tx timeout [ 1200.557158][T17419] netlink: 44 bytes leftover after parsing attributes in process `syz.3.11966'. [ 1200.631272][T17421] netlink: 240 bytes leftover after parsing attributes in process `syz.1.11967'. [ 1200.730871][T17215] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1200.766099][T17215] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1200.800795][T17215] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1200.807927][T17428] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 1200.826059][T17215] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1201.069852][T17450] openvswitch: netlink: Message has 592 unknown bytes. [ 1201.092542][T17450] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1201.111765][T17215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1201.153588][T17215] 8021q: adding VLAN 0 to HW filter on device team0 [ 1201.167635][T23832] bridge0: port 1(bridge_slave_0) entered blocking state [ 1201.174781][T23832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1201.197485][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 1201.204643][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1201.301985][T17458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11979'. [ 1201.313205][T17461] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11979'. [ 1201.323324][T17462] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11979'. [ 1201.470644][T17469] bridge_slave_0: left allmulticast mode [ 1201.490472][T17469] bridge_slave_0: left promiscuous mode [ 1201.510006][T17469] bridge0: port 1(bridge_slave_0) entered disabled state [ 1201.538785][T17469] bridge_slave_1: left allmulticast mode [ 1201.544939][T17469] bridge_slave_1: left promiscuous mode [ 1201.550789][T17469] bridge0: port 2(bridge_slave_1) entered disabled state [ 1201.575486][T17469] bond0: (slave bond_slave_0): Releasing backup interface [ 1201.593698][T17469] bond0: (slave bond_slave_1): Releasing backup interface [ 1201.623413][T17469] team0: Port device team_slave_0 removed [ 1201.646074][T17469] team0: Port device team_slave_1 removed [ 1201.657091][T17469] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1201.659707][T17476] netlink: 'syz.5.11986': attribute type 1 has an invalid length. [ 1201.665223][T17469] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1201.684452][T17469] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1201.691924][T17469] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1201.701827][T17469] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1201.844232][T17215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1201.882332][T17477] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1201.901099][T17477] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1201.922156][T17477] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 1201.963467][T17476] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 1201.980415][T17476] bond1: (slave vcan1): making interface the new active one [ 1201.997525][T17476] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 1202.102439][T17215] veth0_vlan: entered promiscuous mode [ 1202.145056][T17215] veth1_vlan: entered promiscuous mode [ 1202.230058][T17215] veth0_macvtap: entered promiscuous mode [ 1202.262746][T17215] veth1_macvtap: entered promiscuous mode [ 1202.311191][T17215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1202.394176][T17215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1202.419793][T17518] netlink: 'syz.3.11997': attribute type 1 has an invalid length. [ 1202.436210][T16625] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1202.443010][T17518] netlink: 'syz.3.11997': attribute type 1 has an invalid length. [ 1202.466245][T16625] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1202.478890][T16625] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1202.502284][T16625] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1202.547580][ T5823] Bluetooth: hci3: command tx timeout [ 1202.567923][T17518] netlink: 'syz.3.11997': attribute type 3 has an invalid length. [ 1202.597620][T23832] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1202.625446][T23832] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1202.662459][T23834] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1202.687138][T23834] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1202.791520][T17526] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12000'. [ 1202.853495][T17534] delete_channel: no stack [ 1203.085511][T17548] openvswitch: netlink: IP tunnel dst address not specified [ 1203.275113][T17564] netlink: 'syz.5.12012': attribute type 2 has an invalid length. [ 1203.285563][T17564] netlink: 'syz.5.12012': attribute type 11 has an invalid length. [ 1203.449055][T17574] team1: entered promiscuous mode [ 1203.478186][T17574] team1: entered allmulticast mode [ 1203.873249][T17604] __nla_validate_parse: 6 callbacks suppressed [ 1203.873266][T17604] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12022'. [ 1203.898815][T17612] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12023'. [ 1204.093633][T17617] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1204.136796][T17617] bond1: (slave lo): Enslaving as an active interface with an up link [ 1204.167848][T17617] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1204.258462][T17629] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1204.278147][T17632] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1204.295989][T17632] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1204.358327][T17639] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1204.442995][T17642] netlink: 'syz.2.12034': attribute type 3 has an invalid length. [ 1204.501907][T17647] netlink: 'syz.4.12037': attribute type 1 has an invalid length. [ 1204.528841][T17649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12038'. [ 1204.586122][T17654] bond10: (slave bridge8): Enslaving as a backup interface with an up link [ 1204.650980][T17649] bond2: Invalid ad_actor_system MAC address. [ 1204.658134][T17649] bond2: option ad_actor_system: invalid value (1) [ 1204.706979][T17649] bond2 (unregistering): Released all slaves [ 1204.732567][T17660] netlink: 9 bytes leftover after parsing attributes in process `syz.5.12039'. [ 1204.743877][T17660] 0: renamed from hsr_slave_1 (while UP) [ 1204.775951][T17672] netlink: 'syz.4.12042': attribute type 1 has an invalid length. [ 1204.787203][T17672] netlink: 224 bytes leftover after parsing attributes in process `syz.4.12042'. [ 1204.805282][T17660] 0: entered allmulticast mode [ 1204.810397][T17660] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 1204.921977][T17682] delete_channel: no stack [ 1204.999495][T17686] netlink: 'syz.1.12045': attribute type 2 has an invalid length. [ 1205.103190][T17684] syzkaller0: entered promiscuous mode [ 1205.108690][T17684] syzkaller0: entered allmulticast mode [ 1205.522110][T17709] netlink: 'syz.1.12053': attribute type 1 has an invalid length. [ 1205.557613][T17709] netlink: 224 bytes leftover after parsing attributes in process `syz.1.12053'. [ 1205.690482][T17716] netlink: 100 bytes leftover after parsing attributes in process `syz.1.12053'. [ 1206.794326][ T5823] Bluetooth: hci3: command tx timeout [ 1206.992140][T17701] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1207.000264][T17701] batman_adv: batadv0: Removing interface: netdevsim0 [ 1207.151709][T17721] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12059'. [ 1207.270086][T17737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12062'. [ 1207.481201][T17758] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12064'. [ 1207.764809][T17777] netdevsim netdevsim4: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 1207.857973][T17786] validate_nla: 1 callbacks suppressed [ 1207.857992][T17786] netlink: 'syz.4.12072': attribute type 1 has an invalid length. [ 1207.916590][T17790] netlink: 'syz.2.12073': attribute type 2 has an invalid length. [ 1207.918261][T17786] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1207.948048][T17789] vlan0: entered promiscuous mode [ 1207.954583][T17789] bond11: entered promiscuous mode [ 1207.960006][T17789] vlan0: entered allmulticast mode [ 1207.967910][T17789] bond11: entered allmulticast mode [ 1207.998929][T17792] C: renamed from lo (while UP) [ 1208.027528][T17792] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1208.076900][T17786] bond11: (slave bridge9): making interface the new active one [ 1208.084605][T17786] bridge9: entered promiscuous mode [ 1208.094648][T17786] bridge9: entered allmulticast mode [ 1208.101736][T17786] bond11: (slave bridge9): Enslaving as an active interface with an up link [ 1208.139098][T17795] Cannot find add_set index 0 as target [ 1208.222338][T17799] netlink: 'syz.3.12078': attribute type 5 has an invalid length. [ 1208.258355][T17803] netlink: 'syz.4.12077': attribute type 1 has an invalid length. [ 1208.268291][T17806] tipc: Started in network mode [ 1208.273458][T17806] tipc: Node identity e0000001, cluster identity 4711 [ 1208.290010][T17806] tipc: Enabling of bearer rejected, failed to enable media [ 1208.449432][T17818] sctp: [Deprecated]: syz.2.12084 (pid 17818) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1208.449432][T17818] Use struct sctp_sack_info instead [ 1208.618856][T17826] netlink: 'syz.4.12086': attribute type 1 has an invalid length. [ 1208.872122][T17832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1209.253308][T17881] macsec1: entered promiscuous mode [ 1209.389979][T17890] __nla_validate_parse: 28 callbacks suppressed [ 1209.390001][T17890] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12106'. [ 1209.745021][T22918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1209.827506][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1209.844247][T17916] syzkaller0: entered promiscuous mode [ 1209.850796][ T29] audit: type=1800 audit(1773087816.454:14): pid=17921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.12117" name="memory.events" dev="tmpfs" ino=423 res=0 errno=0 [ 1209.851793][T17916] syzkaller0: entered allmulticast mode [ 1209.888908][T17916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12116'. [ 1209.900385][T17916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12116'. [ 1209.942029][T17923] netlink: 64 bytes leftover after parsing attributes in process `syz.2.12116'. [ 1209.996429][T23834] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1210.012915][T23834] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1210.115034][T23834] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1210.139007][T23834] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1210.285779][T17944] openvswitch: netlink: Invalid VLAN frame [ 1210.681640][T17972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12133'. [ 1210.709930][T17965] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12129'. [ 1210.792712][T17972] team1: entered promiscuous mode [ 1210.823536][T17972] team1: entered allmulticast mode [ 1210.829108][T17972] 8021q: adding VLAN 0 to HW filter on device team1 [ 1210.919191][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1211.024500][T22918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1211.983350][T12810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1211.984511][T18020] netlink: 'syz.5.12147': attribute type 9 has an invalid length. [ 1212.001764][T22918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1212.088069][T18017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12146'. [ 1212.109757][T23830] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1212.140225][T23830] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1212.174712][T23834] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1212.200388][T23834] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1212.548989][T18049] syzkaller0: entered promiscuous mode [ 1212.558765][T18049] syzkaller0: entered allmulticast mode [ 1212.681243][T18058] pim6reg1: entered promiscuous mode [ 1212.689013][T18058] pim6reg1: entered allmulticast mode [ 1212.705610][T18060] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12161'. [ 1212.754490][T18068] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12155'. [ 1212.847846][T18077] sctp: [Deprecated]: syz.3.12165 (pid 18077) Use of int in maxseg socket option. [ 1212.847846][T18077] Use struct sctp_assoc_value instead [ 1212.861724][T18068] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1212.916695][T18075] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1212.927814][T18075] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1212.940044][T18075] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 1212.973738][T18072] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check. [ 1213.025937][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1213.096151][T18090] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12168'. [ 1213.503496][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1213.565362][ T29] audit: type=1107 audit(1773087820.174:15): pid=18115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 1213.583762][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1214.019418][T18148] bridge2: entered promiscuous mode [ 1214.035388][T18148] bridge2: entered allmulticast mode [ 1214.165571][T18153] bond3: entered promiscuous mode [ 1214.190696][T18153] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1214.208887][T18150] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1214.246162][T18148] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1214.255239][T18148] bond3: (slave sit1): The slave device specified does not support setting the MAC address [ 1214.267031][T18148] bond3: (slave sit1): Error -95 calling set_mac_address [ 1214.332266][T18173] netlink: 'syz.3.12191': attribute type 1 has an invalid length. [ 1214.508475][T18185] __nla_validate_parse: 6 callbacks suppressed [ 1214.508493][T18185] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12195'. [ 1214.525486][T18185] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12195'. [ 1214.743889][T18203] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12198'. [ 1214.910410][T18216] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12201'. [ 1214.983961][T18219] net_ratelimit: 1 callbacks suppressed [ 1214.983978][T18219] netlink: zone id is out of range [ 1215.020822][T18221] netlink: zone id is out of range [ 1215.029760][T18218] netlink: set zone limit has 4 unknown bytes [ 1215.030485][T18221] netlink: del zone limit has 4 unknown bytes [ 1215.042740][T22918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1215.065651][T18219] netlink: zone id is out of range [ 1215.103177][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1215.133385][T18223] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12204'. [ 1215.177360][T18228] netlink: 'syz.1.12206': attribute type 11 has an invalid length. [ 1215.194469][T18231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12205'. [ 1215.235110][T18228] netlink: 'syz.1.12206': attribute type 11 has an invalid length. [ 1215.274470][T18228] netlink: 204 bytes leftover after parsing attributes in process `syz.1.12206'. [ 1215.557902][T18245] bond2: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 1215.571415][T18245] bond2 (unregistering): Released all slaves [ 1215.590656][T18260] netlink: 1052 bytes leftover after parsing attributes in process `syz.3.12216'. [ 1215.607250][T18260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1215.616296][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1215.634486][T18261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1215.677749][T18260] syzkaller0: entered promiscuous mode [ 1215.684450][T18260] syzkaller0: entered allmulticast mode [ 1215.705960][T18260] veth0: entered promiscuous mode [ 1215.753587][T18260] veth0: left promiscuous mode [ 1215.842245][ T29] audit: type=1107 audit(1773087822.444:16): pid=18276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='qU^'ʹ2<7w{S%E L5(%Лp)̉;/"0qkkzUOaE% y3vFNdȴ{%q\ykR,@SLdO"79ZVNmY<"k}W' [ 1215.913093][ T2248] IPVS: starting estimator thread 0... [ 1216.003480][T18282] IPVS: using max 30 ests per chain, 72000 per kthread [ 1216.069206][T18290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12226'. [ 1216.087520][T18290] netlink: 148 bytes leftover after parsing attributes in process `syz.1.12226'. [ 1216.101913][T18290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1216.145313][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.620733][T18338] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1216.762920][T18346] netlink: 'syz.2.12244': attribute type 21 has an invalid length. [ 1216.791089][T18346] IPv6: NLM_F_CREATE should be specified when creating new route [ 1216.809325][T18346] netlink: 'syz.2.12244': attribute type 1 has an invalid length. [ 1216.985907][T18363] syzkaller0: entered promiscuous mode [ 1217.003037][T18363] syzkaller0: entered allmulticast mode [ 1217.246400][T18384] netlink: 'syz.5.12255': attribute type 1 has an invalid length. [ 1217.332694][T18385] 0 (unregistering): left promiscuous mode [ 1217.969603][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1217.992212][ T5826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1218.000849][ T5826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1218.014578][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1218.024076][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1218.605881][T18465] netlink: 'syz.2.12280': attribute type 8 has an invalid length. [ 1218.635160][T18468] netlink: 'syz.5.12282': attribute type 2 has an invalid length. [ 1218.678229][T18465] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1218.746152][T18430] chnl_net:caif_netlink_parms(): no params data found [ 1219.047808][T18485] syzkaller0: entered promiscuous mode [ 1219.053978][T18485] syzkaller0: entered allmulticast mode [ 1219.099831][T18430] bridge0: port 1(bridge_slave_0) entered blocking state [ 1219.122487][T18430] bridge0: port 1(bridge_slave_0) entered disabled state [ 1219.131182][T18430] bridge_slave_0: entered allmulticast mode [ 1219.139398][T18430] bridge_slave_0: entered promiscuous mode [ 1219.191967][T18430] bridge0: port 2(bridge_slave_1) entered blocking state [ 1219.199954][T18430] bridge0: port 2(bridge_slave_1) entered disabled state [ 1219.210445][T18430] bridge_slave_1: entered allmulticast mode [ 1219.240756][T18430] bridge_slave_1: entered promiscuous mode [ 1219.247072][T18493] xt_socket: unknown flags 0x50 [ 1220.157397][ T5823] Bluetooth: hci1: command tx timeout [ 1220.386714][T21231] net_ratelimit: 8 callbacks suppressed [ 1220.386734][T21231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1220.634760][T22918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1220.858003][T18430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1220.868233][T18506] syzkaller0: entered promiscuous mode [ 1220.873994][T18506] syzkaller0: entered allmulticast mode [ 1220.937642][T18430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1220.981494][T18515] __nla_validate_parse: 21 callbacks suppressed [ 1220.981506][T18515] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12291'. [ 1221.031153][T18512] bond13: option fail_over_mac: invalid value (16) [ 1221.045420][T18512] bond13 (unregistering): Released all slaves [ 1221.046849][T18517] netlink: 80 bytes leftover after parsing attributes in process `syz.1.12291'. [ 1221.148670][T18514] bond2: option resend_igmp: invalid value (32767) [ 1221.158520][T18514] bond2: option resend_igmp: allowed values 0 - 255 [ 1221.207986][T18514] bond2 (unregistering): Released all slaves [ 1221.230452][T18527] netlink: 'syz.2.12294': attribute type 1 has an invalid length. [ 1221.253816][T18430] team0: Port device team_slave_0 added [ 1221.262615][T18430] team0: Port device team_slave_1 added [ 1221.270150][T22918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1221.373624][T18430] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1221.380586][T18430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1221.425184][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1221.437852][T18430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1221.455506][T18430] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1221.484305][T18430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1221.518460][T18430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1221.690219][T18430] hsr_slave_0: entered promiscuous mode [ 1221.700403][T18430] hsr_slave_1: entered promiscuous mode [ 1221.713544][T18542] netlink: 'syz.5.12299': attribute type 10 has an invalid length. [ 1221.730382][T18430] debugfs: 'hsr0' already exists in 'hsr' [ 1221.744410][T18430] Cannot create hsr debugfs directory [ 1221.930040][T18557] netlink: 'syz.5.12305': attribute type 1 has an invalid length. [ 1221.976600][T18551] bridge0: port 3(gretap0) entered blocking state [ 1221.986098][T18551] bridge0: port 3(gretap0) entered disabled state [ 1221.993648][T18551] gretap0: entered allmulticast mode [ 1222.000685][T18551] gretap0: entered promiscuous mode [ 1222.013395][T18551] bridge0: port 3(gretap0) entered blocking state [ 1222.020020][T18551] bridge0: port 3(gretap0) entered forwarding state [ 1222.155283][T18569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12309'. [ 1222.208225][T18561] syzkaller0: entered promiscuous mode [ 1222.214230][T18561] syzkaller0: entered allmulticast mode [ 1222.225627][T22918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1222.234948][ T5823] Bluetooth: hci1: command tx timeout [ 1222.260272][T18575] netlink: 36 bytes leftover after parsing attributes in process `syz.5.12311'. [ 1222.269537][T18575] netlink: 40 bytes leftover after parsing attributes in process `syz.5.12311'. [ 1222.362075][T18573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12309'. [ 1222.463111][T21231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1223.125991][ T49] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x53 [ 1223.506094][T12810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1223.819664][T18601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12317'. [ 1224.303004][ T5823] Bluetooth: hci1: command tx timeout [ 1224.350653][T18607] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1224.455732][T18609] netlink: 56 bytes leftover after parsing attributes in process `syz.3.12321'. [ 1224.507478][T18611] sock: sock_set_timeout: `syz.1.12323' (pid 18611) tries to set negative timeout [ 1224.508721][T18609] bond1 (unregistering): Released all slaves [ 1224.553442][T21231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1224.665641][T18621] netlink: 'syz.5.12325': attribute type 32 has an invalid length. [ 1224.767794][T18626] netlink: 'syz.2.12326': attribute type 4 has an invalid length. [ 1224.782060][T18626] netlink: 17 bytes leftover after parsing attributes in process `syz.2.12326'. [ 1224.851128][T18631] syzkaller0: entered promiscuous mode [ 1224.857107][T18631] syzkaller0: entered allmulticast mode [ 1224.943957][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1224.984917][T18638] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12330'. [ 1225.008593][T18638] netlink: 'syz.3.12330': attribute type 1 has an invalid length. [ 1225.229049][T18430] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1225.252619][T18430] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1225.268862][T18430] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1225.302211][T18648] netdevsim netdevsim3: Direct firmware load for . failed with error -2 [ 1225.314143][T18648] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1225.322479][T18430] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1225.378188][T18655] netlink: 'syz.1.12334': attribute type 24 has an invalid length. [ 1225.479190][T18430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1225.534708][T18430] 8021q: adding VLAN 0 to HW filter on device team0 [ 1225.562581][ T135] bridge0: port 1(bridge_slave_0) entered blocking state [ 1225.569760][ T135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1225.584221][ T5821] net_ratelimit: 3 callbacks suppressed [ 1225.584236][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1225.604580][T18673] IPv6: sit1: Disabled Multicast RS [ 1225.612125][T18672] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1225.630906][T23832] bridge0: port 2(bridge_slave_1) entered blocking state [ 1225.638064][T23832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1225.680916][T18673] netlink: 'syz.1.12340': attribute type 2 has an invalid length. [ 1225.704220][T18673] netlink: 'syz.1.12340': attribute type 11 has an invalid length. [ 1225.819141][T18681] Cannot find add_set index 0 as target [ 1225.926623][T18689] team0: Device gtp0 is up. Set it down before adding it as a team port [ 1225.953630][T18686] SET target dimension over the limit! [ 1225.983165][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1225.991519][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1225.999845][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1226.023381][T18650] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] SMP KASAN PTI [ 1226.035290][T18650] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 1226.043702][T18650] CPU: 1 UID: 0 PID: 18650 Comm: syz.3.12331 Not tainted syzkaller #0 PREEMPT(full) [ 1226.053156][T18650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1226.063210][T18650] RIP: 0010:rose_transmit_link+0x32/0xac0 [ 1226.069071][T18650] Code: 56 41 55 41 54 53 48 83 ec 40 48 89 f3 48 89 fd 49 bc 00 00 00 00 00 fc ff df e8 e9 db 2f f7 4c 8d 73 36 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 13 09 00 00 45 0f b6 36 31 ff 44 89 f6 [ 1226.088679][T18650] RSP: 0018:ffffc900040a78e8 EFLAGS: 00010207 [ 1226.094752][T18650] RAX: 0000000000000006 RBX: 0000000000000000 RCX: ffff88803b073d00 [ 1226.102724][T18650] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88804177a3c0 [ 1226.106614][T18430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1226.110689][T18650] RBP: ffff88804177a3c0 R08: ffff88803b073d00 R09: 0000000000000008 [ 1226.110704][T18650] R10: 000000000000000f R11: 0000000000000000 R12: dffffc0000000000 [ 1226.133353][T18650] R13: dffffc0000000000 R14: 0000000000000036 R15: 1ffff92000814f3c [ 1226.141329][T18650] FS: 00007f77b16d36c0(0000) GS:ffff888125561000(0000) knlGS:0000000000000000 [ 1226.150258][T18650] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1226.156844][T18650] CR2: 00007f719f987600 CR3: 0000000028f0e000 CR4: 00000000003526f0 [ 1226.164820][T18650] Call Trace: [ 1226.168100][T18650] [ 1226.171034][T18650] ? __alloc_skb+0x4e5/0x7d0 [ 1226.175642][T18650] ? skb_put+0x11b/0x210 [ 1226.179897][T18650] rose_write_internal+0x1256/0x1b60 [ 1226.185191][T18650] ? lockdep_hardirqs_on+0x7a/0x110 [ 1226.190407][T18650] ? __pfx_rose_write_internal+0x10/0x10 [ 1226.196051][T18650] ? timer_delete+0x245/0x340 [ 1226.200770][T18650] rose_release+0x25b/0x510 [ 1226.205285][T18650] sock_close+0xc3/0x240 [ 1226.209535][T18650] ? __pfx_sock_close+0x10/0x10 [ 1226.214392][T18650] __fput+0x44f/0xa70 [ 1226.218426][T18650] task_work_run+0x1d9/0x270 [ 1226.223023][T18650] ? __pfx_task_work_run+0x10/0x10 [ 1226.228142][T18650] ? task_work_add+0x395/0x440 [ 1226.232908][T18650] ? __pfx_task_work_add+0x10/0x10 [ 1226.238025][T18650] get_signal+0x11eb/0x1330 [ 1226.242546][T18650] arch_do_signal_or_restart+0xbc/0x830 [ 1226.248130][T18650] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1226.254288][T18650] exit_to_user_mode_loop+0x86/0x480 [ 1226.259562][T18650] ? rcu_is_watching+0x15/0xb0 [ 1226.264315][T18650] do_syscall_64+0x32d/0xf80 [ 1226.268899][T18650] ? trace_irq_disable+0x3b/0x150 [ 1226.273915][T18650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1226.279966][T18650] ? clear_bhb_loop+0x40/0x90 [ 1226.284630][T18650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1226.290508][T18650] RIP: 0033:0x7f77b079c799 [ 1226.294912][T18650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1226.314506][T18650] RSP: 002b:00007f77b16d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1226.322910][T18650] RAX: 0000000000000000 RBX: 00007f77b0a16090 RCX: 00007f77b079c799 [ 1226.330874][T18650] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000013 [ 1226.338834][T18650] RBP: 00007f77b0832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1226.346791][T18650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1226.354748][T18650] R13: 00007f77b0a16128 R14: 00007f77b0a16090 R15: 00007ffdfe1d7ce8 [ 1226.362711][T18650] [ 1226.365725][T18650] Modules linked in: [ 1226.372302][T18650] ---[ end trace 0000000000000000 ]--- [ 1226.383734][ T5823] Bluetooth: hci1: command tx timeout [ 1226.438418][T18650] RIP: 0010:rose_transmit_link+0x32/0xac0 [ 1226.450314][T18650] Code: 56 41 55 41 54 53 48 83 ec 40 48 89 f3 48 89 fd 49 bc 00 00 00 00 00 fc ff df e8 e9 db 2f f7 4c 8d 73 36 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 13 09 00 00 45 0f b6 36 31 ff 44 89 f6 [ 1226.470095][T18430] veth0_vlan: entered promiscuous mode [ 1226.475376][T18430] veth1_vlan: entered promiscuous mode [ 1226.477634][T18650] RSP: 0018:ffffc900040a78e8 EFLAGS: 00010207 [ 1226.490749][T18650] RAX: 0000000000000006 RBX: 0000000000000000 RCX: ffff88803b073d00 [ 1226.499793][T18430] veth0_macvtap: entered promiscuous mode [ 1226.505986][T18650] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88804177a3c0 [ 1226.518218][T18650] RBP: ffff88804177a3c0 R08: ffff88803b073d00 R09: 0000000000000008 [ 1226.521687][T18430] veth1_macvtap: entered promiscuous mode [ 1226.526805][T18650] R10: 000000000000000f R11: 0000000000000000 R12: dffffc0000000000 [ 1226.539995][T18650] R13: dffffc0000000000 R14: 0000000000000036 R15: 1ffff92000814f3c [ 1226.542784][T18430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1226.554076][T18650] FS: 00007f77b16d36c0(0000) GS:ffff888125561000(0000) knlGS:0000000000000000 [ 1226.560247][T18430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1226.572128][T18650] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1226.579030][T18650] CR2: 00007f719fbe82f8 CR3: 0000000028f0e000 CR4: 00000000003526f0 [ 1226.584532][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.587871][T18650] Kernel panic - not syncing: Fatal exception [ 1226.595876][T18650] Kernel Offset: disabled