last executing test programs: 3m12.126575684s ago: executing program 0 (id=1653): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"/304], 0x1e8}, 0x1, 0x0, 0x0, 0x4004880}, 0x4004000) 3m11.882792222s ago: executing program 0 (id=1654): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a140000001100"], 0x64}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000740)=@nat={'nat\x00', 0x62, 0x5, 0x4c8, 0x0, 0x198, 0xffffffff, 0x0, 0x240, 0x430, 0x430, 0xffffffff, 0x430, 0x430, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'hsr0\x00', 'wg1\x00', {}, {}, 0x0, 0x2}, 0x0, 0x70, 0xa8, 0x0, {0x22e}}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @remote, @empty, @gre_key=0x6, @gre_key=0xfea}}}}, {{@ip={@rand_addr=0x64010101, @empty, 0xff, 0x0, 'caif0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x5e, 0x1, 0x30}, 0x0, 0xb8, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x250, 0x7fffffe}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x3dc, {0x0, @private, @remote, @icmp_id, @gre_key}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_team\x00', 'ipvlan0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0xc, @private=0xa110100, @private=0xa010101, @gre_key=0x10, @gre_key=0x6}}}}, {{@ip={@remote, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'netdevsim0\x00'}, 0x0, 0x1b8, 0x1f0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@icmp={{0x28}, {0x11, "6e82"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x528) socket$kcm(0x29, 0x2, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000003b00010324bd7022ffdbdf25030000002bc367098937756d7ec890c6a59ec727469c2cadf822ce26119c9accb57c65232a0ac00ddcf87cf8e472a5d35455c2"], 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x40000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x609, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88aefe86, 0x40000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x50}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xffe4) r11 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r11, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000005c0)={0x3, {{0xa, 0x4e23, 0xc, @mcast1, 0xfffffff8}}, 0x0, 0x1, [{{0xa, 0x8001, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x30000}}]}, 0x110) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003601008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r10], 0x5c}}, 0x40) 3m10.273943816s ago: executing program 0 (id=1659): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000280)={0x34, r1, 0x1, 0x70bd27, 0xfffffffc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x44) 3m9.867286984s ago: executing program 0 (id=1664): socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000010000000000000104000000200000000100000000000001"], 0x0, 0x3c}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, &(0x7f00000000c0)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x71, 0x8, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000000001000000"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x86dd, 0x26, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000000)={0x1d, r5, 0x3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100e1ff0000000000000000850000008a00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$kcm(r4, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x40) 3m8.415025239s ago: executing program 0 (id=1671): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xd6}, [@call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="6094a836c857dd4f1531af000000", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 3m8.222141423s ago: executing program 0 (id=1673): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000270001002b000000001f000006"], 0x14}}, 0x4004804) 2m52.764902852s ago: executing program 32 (id=1673): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000270001002b000000001f000006"], 0x14}}, 0x4004804) 2m27.139612722s ago: executing program 5 (id=2055): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="1c00000018002551075c0165ff0ffc02802000030011000500e1000c04", 0x1d) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e25, 0x401, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, 0x1007}, 0x1c) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x40, 0x0, 0x3, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) sendmmsg$inet(r2, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="bbbbbbbbbbbb000000000000080045c8003c006400007f2990780a010101e000000128afdea0cbfe7114878929d3fe4e3179c0cf335b939370f8401e8c8469283a9952366f3d77b16ea23f861f1a915818f456a97f99d2c38f514cf7c5a50f1d8e9efe30d4fa34389199c258e75d140bff596315adf49a0cd3c3b45a0681362f755a6464f4b4bead9f9636b91c06688f18383df7f4c7104281ae1043620ffd5c181d154ab9f59f9b3a23ab462cd68250d829d83c8971b24076b1d6737284319222edcabdb3a40b91bb357b8a4a51d1e8cf59940355e51093b4016118f2d940cb5e62166ff8f5a332123768d13f2904fb1c820ff0c3639eedb40a63cf97261651f51b322e073a43314738c0226f5cbb4339d9485733d07c6b4ccbc8e4e4a4907e620c7ce94a3ad3e61c7c11b47961de342b4c5348f4e86a9c8762145c47b34891c93510b1c39797140c00eb355c22f7c32d5184b1f532ee3d283c181ab824918d1f25917d7adeaca10e"], 0x0) write(r5, &(0x7f0000000080)="05000000010001", 0x7) bind$bt_hci(r4, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000340)='\a\x00\x00\x00', 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710443000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 2m26.594620221s ago: executing program 5 (id=2062): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8093, 0x8268}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r6, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2m26.065059528s ago: executing program 5 (id=2069): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xff80, "000000000204000000000000800800"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 2m25.711048415s ago: executing program 5 (id=2074): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="1a040500d3fc03fc01004788031c09", 0x10025, 0x4000004, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x6, 0x6, @remote}, 0x14) 2m25.486095428s ago: executing program 5 (id=2077): unshare(0x20000400) r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x1, @loopback, 0x1}, 0x1c) poll(&(0x7f0000000a00)=[{r0, 0xf000}], 0x1, 0x9) 2m25.299891672s ago: executing program 5 (id=2081): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(r0, &(0x7f0000019880)=[{0x0}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000ffffffff00006a1724ef456949140001f0ffffff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x19}, 0x94) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000002c0)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [{{0x254, 0x1, {{0x3, 0xb0000000}, 0xd, 0xb, 0x4, 0x1, 0x5, 'syz0\x00', "96d4fd6246bdc42b7f9e10dab6626b776b7002b182016800", "69d30d8077e63b207fb7d8c959cf6e019f203869fa621d1434d98a0100534173", [{0x4, 0x1, {0x2, 0x565}}, {0xfffa, 0x2, {0x0, 0x6}}, {0xc, 0x1, {0x3, 0x76f0}}, {0x6, 0x6, {0x3}}, {0x0, 0x6, {0x0, 0xfffffff6}}, {0x7b84, 0x8, {0x3, 0x1}}, {0x6, 0x0, {0x2, 0xc46}}, {0x66af, 0xe, {0x1, 0x4}}, {0x2, 0x9, {0x0, 0x20}}, {0x2, 0x4, {0x0, 0x200}}, {0x402, 0x0, {0x2, 0x10}}, {0x401, 0x5, {0x2, 0xf8d7}}, {0x3bc, 0xc, {0x1, 0x6}}, {0x23b, 0x4, {0x2, 0x4}}, {0x810, 0x8, {0x2, 0x6}}, {0x7, 0x7fff, {0x3, 0x6}}, {0x7, 0x1, {0x1, 0x9}}, {0x9, 0x7fff, {0x2, 0x2}}, {0x80, 0x8000, {0x3, 0x7}}, {0xfdc3, 0x400, {0x2, 0x6}}, {0xff7f, 0xd3, {0x1, 0xc3e2}}, {0x3, 0xcc, {0x3, 0x4}}, {0x10c4, 0x6, {0x1, 0x100}}, {0x3, 0xcddd, {0x0, 0xffffb383}}, {0xf, 0xfff7, {0x2, 0x7fffffff}}, {0x2, 0xfffb, {0x2, 0x7ff}}, {0xc9, 0x0, {0x0, 0x9}}, {0x8, 0x80, {0x2, 0x1ff}}, {0x3, 0x6e9, {0x2, 0x3}}, {0x6, 0x1, {0x2, 0x9fa5}}, {0x824b, 0x5, {0x0, 0x9}}, {0x200, 0x5, {0x3, 0x8}}, {0x9, 0x5, {0x2}}, {0x8, 0xb7c5, {0x3, 0x8a52}}, {0x28, 0xdfe4, {0x2, 0x8}}, {0x1ff, 0x9, {0x2, 0xfffffffe}}, {0xf918, 0x5, {0x3, 0xfffffffe}}, {0x6, 0xc62a, {0x1, 0x7}}, {0xffff, 0x7ff, {0x2, 0x1}}, {0x2, 0x2, {0x1, 0x401}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x24004081}, 0x4004040) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) r4 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000300)={@mcast1, 0x8000000, 0x0, 0xff, 0x1, 0x0, 0x2}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r3, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x1410, 0x8, 0x70bd2b, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x4890}, 0x800) 2m10.243472046s ago: executing program 33 (id=2081): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(r0, &(0x7f0000019880)=[{0x0}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000ffffffff00006a1724ef456949140001f0ffffff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x19}, 0x94) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000002c0)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [{{0x254, 0x1, {{0x3, 0xb0000000}, 0xd, 0xb, 0x4, 0x1, 0x5, 'syz0\x00', "96d4fd6246bdc42b7f9e10dab6626b776b7002b182016800", "69d30d8077e63b207fb7d8c959cf6e019f203869fa621d1434d98a0100534173", [{0x4, 0x1, {0x2, 0x565}}, {0xfffa, 0x2, {0x0, 0x6}}, {0xc, 0x1, {0x3, 0x76f0}}, {0x6, 0x6, {0x3}}, {0x0, 0x6, {0x0, 0xfffffff6}}, {0x7b84, 0x8, {0x3, 0x1}}, {0x6, 0x0, {0x2, 0xc46}}, {0x66af, 0xe, {0x1, 0x4}}, {0x2, 0x9, {0x0, 0x20}}, {0x2, 0x4, {0x0, 0x200}}, {0x402, 0x0, {0x2, 0x10}}, {0x401, 0x5, {0x2, 0xf8d7}}, {0x3bc, 0xc, {0x1, 0x6}}, {0x23b, 0x4, {0x2, 0x4}}, {0x810, 0x8, {0x2, 0x6}}, {0x7, 0x7fff, {0x3, 0x6}}, {0x7, 0x1, {0x1, 0x9}}, {0x9, 0x7fff, {0x2, 0x2}}, {0x80, 0x8000, {0x3, 0x7}}, {0xfdc3, 0x400, {0x2, 0x6}}, {0xff7f, 0xd3, {0x1, 0xc3e2}}, {0x3, 0xcc, {0x3, 0x4}}, {0x10c4, 0x6, {0x1, 0x100}}, {0x3, 0xcddd, {0x0, 0xffffb383}}, {0xf, 0xfff7, {0x2, 0x7fffffff}}, {0x2, 0xfffb, {0x2, 0x7ff}}, {0xc9, 0x0, {0x0, 0x9}}, {0x8, 0x80, {0x2, 0x1ff}}, {0x3, 0x6e9, {0x2, 0x3}}, {0x6, 0x1, {0x2, 0x9fa5}}, {0x824b, 0x5, {0x0, 0x9}}, {0x200, 0x5, {0x3, 0x8}}, {0x9, 0x5, {0x2}}, {0x8, 0xb7c5, {0x3, 0x8a52}}, {0x28, 0xdfe4, {0x2, 0x8}}, {0x1ff, 0x9, {0x2, 0xfffffffe}}, {0xf918, 0x5, {0x3, 0xfffffffe}}, {0x6, 0xc62a, {0x1, 0x7}}, {0xffff, 0x7ff, {0x2, 0x1}}, {0x2, 0x2, {0x1, 0x401}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x24004081}, 0x4004040) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) r4 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000300)={@mcast1, 0x8000000, 0x0, 0xff, 0x1, 0x0, 0x2}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r3, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x1410, 0x8, 0x70bd2b, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x4890}, 0x800) 4.661184883s ago: executing program 3 (id=3043): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0x8, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x9}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.105024345s ago: executing program 6 (id=3048): r0 = socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a31"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@remote, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x4000000001f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) socket$l2tp6(0xa, 0x2, 0x73) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) read(r1, &(0x7f0000000000)=""/31, 0x1f) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf5", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2c, 0x25cfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfffb}, {0x9, 0xffff}, {0x2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000000)={0x3, 0x55, "921f0a0852edc89f60ae15d2c656574d78415ca9c2fee1d8d7fdf48b6169b4f98c779ff510bb46ccf60b45a46c1421d3a33d78cfb894da6351109672979f3ab46ea2904555d045f112ab3b6a5698a854b7334cd8f8"}) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.987669695s ago: executing program 3 (id=3049): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000010000006d0500000200000000000000", @ANYRES32, @ANYBLOB='x\x00'/18, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000000380), 0xfffffffb, r0}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000000c0), 0x1000, r0}, 0x38) r1 = socket$kcm(0x29, 0x2, 0x0) socket$pppoe(0x18, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) recvmsg(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000200)=""/133, 0x85}], 0x1}, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000000340)=ANY=[], 0x141) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x84, @local, 0x4}, {0xa, 0x0, 0x3, @mcast1}, 0x0, {[0x2, 0x8, 0xa, 0x0, 0x0, 0x0, 0x7ff, 0x4]}}, 0x5c) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102}) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000e00)=[{&(0x7f0000000dc0)}], 0x1) recvfrom(r2, 0x0, 0x0, 0x17, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x12, r4, 0x7a656000) mmap(&(0x7f0000f53000/0x3000)=nil, 0x3000, 0x300000a, 0x110, r1, 0x50fc2000) writev(r2, &(0x7f0000001540), 0x0) 3.334502246s ago: executing program 2 (id=3052): r0 = socket(0x10, 0x80002, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r1, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) sendmmsg$inet(r1, &(0x7f0000002f40)=[{{0x0, 0x15, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x300, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x3c, r4, 0x1, 0x70bd2b, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}]}, 0x3c}}, 0x400400c) r5 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008814}, 0x20008040) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000002900)=r6, 0x4) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf0b, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4000000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32, @ANYBLOB="1000018004000480080001"], 0x28}}, 0x0) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000240)=0x4, 0x4) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x40000) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r8, 0x84, 0x1, 0x0, 0x0) r9 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in=@initdev={0xac, 0x1e, 0x3, 0x0}, 0x4e1f, 0x0, 0x0, 0x3, 0xa, 0x0, 0x0, 0x87}, {0xec, 0x8000000000000000, 0x1, 0x6811221b, 0x1d26, 0x8000000000010001, 0x200000200000003, 0x100000000}, {0x7ae, 0x1, 0x6, 0x7}, 0x6, 0x0, 0x1, 0x0, 0x6, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x0, 0x6c}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x44}, 0x0, 0x3, 0x2, 0x0, 0x9}}, 0xe8) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) setsockopt$RDS_GET_MR_FOR_DEST(r10, 0x114, 0x7, &(0x7f0000000180)={@vsock={0x28, 0x0, 0x0, @local}, {0x0}, 0x0, 0x12}, 0xa0) connect$inet6(r9, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @loopback, 0x1ff}, 0x1c) 3.180191992s ago: executing program 6 (id=3053): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000080)="29000300010003", 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r2) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r4, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x400, 0x41}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20040040}, 0x40) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x28, r3, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x700}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000}, 0x800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5ff}]}]}, 0x70}}, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r9, &(0x7f00000006c0)={&(0x7f0000000440), 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0x14, r10, 0x800, 0x7, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4885}, 0x1) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r8, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r11}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r12, &(0x7f0000000380)="0099d885", &(0x7f0000000480)=@tcp6=r7, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r11, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) sendmsg$nl_generic(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x18, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}, [@typed={0x4, 0x1f}]}, 0x18}, 0x1, 0x0, 0x0, 0x42014}, 0x4080040) 3.029665321s ago: executing program 4 (id=3055): epoll_create(0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x40, 0xf, 0x51, @private0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8, 0x700, 0x8, 0x1}}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) write(r1, &(0x7f0000000000)="2e0000000100", 0x6) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000002900)=r3, 0x4) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000700)=@deltaction={0x14, 0x31, 0x800, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, 0x0, 0x40) sendmsg$NFT_BATCH(r6, 0x0, 0x40) close(0x3) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) 2.919634984s ago: executing program 1 (id=3056): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGCHAN(r0, 0x80047437, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'veth0_virt_wifi\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r3, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r3, 0x4004743a, &(0x7f00000000c0)) close(0x3) unshare(0x20000400) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x44}}, 0x44890) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x80000001}, 0x0, 0x0) 2.743716565s ago: executing program 6 (id=3057): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8093, 0x8268}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r7, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @local, 0x9}, 0x1c) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x78}}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xfffffffe, 0xffffffffffffffff, 0x4}, 0x38) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r9) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r10, 0x84, 0x2, &(0x7f00000001c0)={0x8, 0x0, 0xfffc, 0x6}, 0x8) sendto$inet6(r10, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r10, 0x84, 0x22, &(0x7f0000000080)={0xe, 0xc208, 0x6, 0x3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) openat$cgroup_devices(r9, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r12 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r11, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r12, 0x58, &(0x7f0000000600)}, 0x10) 2.653938815s ago: executing program 2 (id=3058): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000740)=@nat={'nat\x00', 0x62, 0x5, 0x4c8, 0x0, 0x198, 0xffffffff, 0x0, 0x240, 0x430, 0x430, 0xffffffff, 0x430, 0x430, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'hsr0\x00', 'wg1\x00', {}, {}, 0x0, 0x2}, 0x0, 0x70, 0xa8, 0x0, {0x22e}}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @remote, @empty, @gre_key=0x6, @gre_key=0xfea}}}}, {{@ip={@rand_addr=0x64010101, @empty, 0xff, 0x0, 'caif0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x5e, 0x1, 0x30}, 0x0, 0xb8, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x250, 0x7fffffe}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x3dc, {0x0, @private, @remote, @icmp_id, @gre_key}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_team\x00', 'ipvlan0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0xc, @private=0xa110100, @private=0xa010101, @gre_key=0x10, @gre_key=0x6}}}}, {{@ip={@remote, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'netdevsim0\x00'}, 0x0, 0x1b8, 0x1f0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@icmp={{0x28}, {0x11, "6e82"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x528) socket$kcm(0x29, 0x2, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000003b00010324bd7022ffdbdf25030000002bc367098937756d7ec890c6a59ec727469c2cadf822ce26119c9accb57c65232a0ac00ddcf87cf8e472a5d35455c2"], 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x40000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/19, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x609, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88aefe86, 0x40000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x50}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xffe4) r11 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r11, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000005c0)={0x3, {{0xa, 0x4e23, 0xc, @mcast1, 0xfffffff8}}, 0x0, 0x1, [{{0xa, 0x8001, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x30000}}]}, 0x110) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003601008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r10], 0x5c}}, 0x40) 2.592641093s ago: executing program 3 (id=3059): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000002c0)=0x60, 0x80000) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r6, 0x118, 0x1, &(0x7f0000000300)=0x734, 0x4) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x348, 0x18c, 0x203, 0x0, 0x19030000, 0x480, 0x2e0, 0x2e0, 0x480, 0x2e0, 0x8000000, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00', {0xffff}}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x1a, 0xfffffff6, 0x81, 'syz1\x00', 'syz1\x00', {0xfffffffffffffffc}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r9 = socket(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r12, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newtfilter={0x64, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x2}, {0xd}, {0xfff1, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_police={0x30, 0x16, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40040}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) close(r5) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) ioctl$XFS_IOC_FSGEOMETRY_V4(r0, 0x8070587c, &(0x7f0000000440)) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x0, 0x800, 0x70b52b, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r13}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x200c0081) 2.374821182s ago: executing program 4 (id=3060): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x100000}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x4000000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010000000000000000001700000048000680440006"], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000003700090122bd7008fddbdf2502400000080007000a010100c82e53ece0994d8f8bb943169842c31f0467f74fa1edd5f6bc5f3835432b5122d2ad89b7347508205b8705494281773bd3da41486c9b2beb10920e3acc582caeb776ccdb346f8500d55caefa3d5747946262be57fe8a62ed8e23d5d633ea7f897ee69383da9655d410fc1073ae212a3da2755c4888bf0b04b0d5b85971b490664e5311691f71f3c2894f6e8f1b44bedbc5a8b37f9cc3a48adae3f823d72cf2ce43f0e644f4538eb3896527221386381f5b28924ea15f"], 0x1c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a30000000006400"], 0xb0}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0xfc) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb", 0x4d}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000980)=""/91, 0x5b}, {&(0x7f0000000200)=""/83, 0x53}], 0x2, 0x0, 0x43}, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) unshare(0x20400) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet(r7, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) shutdown(r7, 0x1) 2.265503056s ago: executing program 2 (id=3061): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc020000000000000000000000000000040012"], 0x8c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0x0, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {}, {0x0, 0x2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@deltclass={0x24, 0x29, 0x800, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff3}, {0xb, 0xfff1}, {0x6, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48008}, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8}}}, 0x24}}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002b00)=ANY=[@ANYBLOB="60000000020603000000000000000000000000160900020073797a3100000000050001000700000014000780080013005607497408001240080000000500050002000000050004000000000014000300686173683a69702c706f72742c6970"], 0x60}, 0x1, 0x0, 0x0, 0x20004000}, 0x8004) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008800}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time_for_children\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/pid\x00') connect(r4, 0x0, 0x0) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r8, 0x107, 0x11, &(0x7f0000000140)=0xc6, 0x4) sendmsg$can_bcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x1, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6bcd41fd8"}}, 0x48}}, 0x410) sendmsg$can_bcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x1, 0x212, 0xffffffff, {0x77359400}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x4, 0x2, 0x0, 0x0, "ee6a4130f0506500"}}, 0x48}, 0x1, 0x0, 0x0, 0x4040812}, 0x1) socket$l2tp(0x2, 0x2, 0x73) unshare(0x20000400) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x2c}}, 0x0) 2.214534613s ago: executing program 3 (id=3062): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1e, 0x19, &(0x7f0000000500)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000500000018110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010041f68500000082000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$inet6(0xa, 0x0, 0x9) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x8995, &(0x7f0000000040)={'veth1_vlan\x00', @ifru_addrs=@xdp={0x2c, 0x0, 0x0, 0x6}}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x24, 0x4a, &(0x7f0000000680)="b9ff03076804268c989e14f088a847e089021416e0885a0400000000000081009fa79900", 0x0, 0x400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x3d) setsockopt$inet_int(r3, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r3, 0x0, 0xc, &(0x7f0000000000)=0x40, 0x49) pipe(&(0x7f00000000c0)) 2.15502222s ago: executing program 2 (id=3063): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000240)={0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x5, 0x3, 0x0, {}, {0x0, 0xea60}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a464357177330772"}}, 0x48}}, 0x0) r7 = socket$inet(0x2, 0x3, 0x2) recvfrom$unix(r1, &(0x7f0000000400)=""/15, 0xf, 0x40, &(0x7f0000000440)=@file={0x1}, 0x6e) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r8, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @loopback}, 0x8) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}}}, 0x24}}, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCDELRT(r10, 0x890c, &(0x7f00000002c0)={@mcast2, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6, 0x8, 0xf001, 0x0, 0x7fffffff, 0x80000000, r3}) 1.793379518s ago: executing program 4 (id=3064): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000a000000080000000100000f050000000100000005000000fbff000000000000000000002e"], 0x0, 0x3a}, 0x28) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xe, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r3, 0x305, 0x70bd26, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0xf0ffff}, 0x24044080) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00", @ANYRES8=r5], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c000000020603000000000000000000020000001c0007800800064000000001050015000200000008001240000040000500010006000000050005000200000005000400050000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000009e7569f2e6122c30820699471faa123fc574414033583562bef03c5b01b30ecffcdb110bd751d861d1fe850e7c16a1"], 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="64000000090603000000000000000000020000003c0007800c000180080001407f0000010c001480080001400a0101000600044013880000060005403a9800000500070006000000080006400000000105000100060000000900020073797a310001010a421b211f6cdffaa7c8ec2255bab001"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @dev={0xac, 0x14, 0x14, 0x2a}}, 0xc) setsockopt$inet_mreqsrc(r7, 0x0, 0x1, &(0x7f0000000000)={@private=0xa010102, @loopback, @local}, 0xc) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000080)={0x80000002}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000730133000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) 1.758381816s ago: executing program 1 (id=3065): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) r3 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r3, 0xbab8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000040)=@ethtool_gstrings={0x1b, 0x6}}) readv(r3, &(0x7f0000000400)=[{&(0x7f0000000300)=""/222, 0xde}], 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000001000000000a20000000000a07000000000000000000020000000900010073797a300000000060000000030a01020000000000000000020000030900010073797a300000000040000300fd7c400f2ffd10ac030000005b56f46dc2de1fa3d7afb2f185d0371736af66032ae4eed98dbb95533f4f247aa2bc4978345407669db4999bf4d277be14000000110001"], 0xa8}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000000900010073797a30000000000900030000000000000003000c000240000000000000000114000000110001"], 0x60}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000003b40), r0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000003c40)={0x0, 0x0, &(0x7f0000003c00)={&(0x7f0000003b80)={0x14, r8, 0x309, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4040000) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_TIOCINQ(r9, 0x541b, &(0x7f0000000040)) syz_genetlink_get_family_id$ieee802154(0x0, r0) 1.647816051s ago: executing program 3 (id=3066): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) r0 = socket$netlink(0x10, 0x3, 0xa) getsockopt$sock_int(r0, 0x1, 0x29, 0x0, &(0x7f00000001c0)) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000500)={0x3c, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d5}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) r3 = socket(0x11, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000680)={'syztnl0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000006c0), 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b70300000040000085000000050000001801000020696c2500000000"], &(0x7f0000000100)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000740)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f57a14", 0x30, 0x3a, 0xff, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "508359", 0xfffd, 0x3a, 0x0, @private1, @mcast1}}}}}}}, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r5, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000240)="a85751ad519b201965da2ebcc4898c7f46cb0819b38bbf504fd2617bf9689f2cdbe63959901f5afb841befbb8787b77bc6855e836e2c277f600c31ff7ea5acf0a9525fa1c161d06b23b802aaf4716846d96af1654995ec32db50c7e056aa45212cd6", 0x62}], 0x2}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0xa82a02e4010a08bd}, "1a01c783a8bc563d", "e9a0bd986e338531d1157bc12d1fc364fdbaaa4d2954c1166835dbbe78286228", "bd69dbc7", "1d7265a045a85572"}, 0x38) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f0000000480)=ANY=[@ANYRES32=r5, @ANYBLOB], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) 1.604958448s ago: executing program 6 (id=3067): r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x7fffffff}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x0, [0x2, 0x8, 0x3, 0x5, 0x2, 0x9, 0x2, 0xb, 0xc, 0xc, 0x1, 0x9, 0x9, 0xc, 0x1, 0x1], 0x1, [0x3, 0x8000, 0x3e63, 0x1, 0x466, 0x5, 0x7ff, 0x0, 0xaf, 0x9, 0x3, 0x9, 0x8e, 0xd4de, 0xb, 0x9], [0x2, 0x7, 0x6, 0x3ff, 0x101, 0x100, 0x5, 0xfffb, 0xfffb, 0x1000, 0x101, 0x81, 0x7fff, 0x4, 0x0, 0x7]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f00000002c0)="05031c00d3fc14e5fd004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.499139503s ago: executing program 4 (id=3068): r0 = socket(0x10, 0x80002, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r1, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) sendmmsg$inet(r1, &(0x7f0000002f40)=[{{0x0, 0x15, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x300, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x3c, r4, 0x1, 0x70bd2b, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}]}, 0x3c}}, 0x400400c) r5 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008814}, 0x20008040) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000002900)=r6, 0x4) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf0b, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4000000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32, @ANYBLOB="1000018004000480080001"], 0x28}}, 0x0) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000240)=0x4, 0x4) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x40000) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r8, 0x84, 0x1, 0x0, 0x0) r9 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in=@initdev={0xac, 0x1e, 0x3, 0x0}, 0x4e1f, 0x0, 0x0, 0x3, 0xa, 0x0, 0x0, 0x87}, {0xec, 0x8000000000000000, 0x1, 0x6811221b, 0x1d26, 0x8000000000010001, 0x200000200000003, 0x100000000}, {0x7ae, 0x1, 0x6, 0x7}, 0x6, 0x0, 0x1, 0x0, 0x6, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x0, 0x6c}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x44}, 0x0, 0x3, 0x2, 0x0, 0x9}}, 0xe8) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) setsockopt$RDS_GET_MR_FOR_DEST(r10, 0x114, 0x7, &(0x7f0000000180)={@vsock={0x28, 0x0, 0x0, @local}, {0x0}, 0x0, 0x12}, 0xa0) connect$inet6(r9, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @loopback, 0x1ff}, 0x1c) 1.498388211s ago: executing program 2 (id=3069): socket(0x21, 0x80000, 0x6) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) recvfrom$inet6(r0, &(0x7f00000006c0)=""/222, 0xde, 0x10100, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0xfe86}, {&(0x7f0000000580)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xfc96}, {&(0x7f00000014c0)="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", 0xdf3}], 0x5) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) epoll_create(0x8000a67) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x24000084}, 0xc090) sendmsg$nl_generic(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0xa8}, 0x1, 0x0, 0x0, 0x14008084}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x15, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000005200bf952cbd7000fbdbdf25f5ff0000"], 0x14}, 0x1, 0x0, 0x0, 0xc8}, 0x0) close(0x3) 1.422300315s ago: executing program 1 (id=3070): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000740)=@nat={'nat\x00', 0x62, 0x5, 0x4c8, 0x0, 0x198, 0xffffffff, 0x0, 0x240, 0x430, 0x430, 0xffffffff, 0x430, 0x430, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'hsr0\x00', 'wg1\x00', {}, {}, 0x0, 0x2}, 0x0, 0x70, 0xa8, 0x0, {0x22e}}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @remote, @empty, @gre_key=0x6, @gre_key=0xfea}}}}, {{@ip={@rand_addr=0x64010101, @empty, 0xff, 0x0, 'caif0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x5e, 0x1, 0x30}, 0x0, 0xb8, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x250, 0x7fffffe}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x3dc, {0x0, @private, @remote, @icmp_id, @gre_key}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_team\x00', 'ipvlan0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0xc, @private=0xa110100, @private=0xa010101, @gre_key=0x10, @gre_key=0x6}}}}, {{@ip={@remote, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'netdevsim0\x00'}, 0x0, 0x1b8, 0x1f0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@icmp={{0x28}, {0x11, "6e82"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x528) socket$kcm(0x29, 0x2, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000003b00010324bd7022ffdbdf25030000002bc367098937756d7ec890c6a59ec727469c2cadf822ce26119c9accb57c65232a0ac00ddcf87cf8e472a5d35455c2"], 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x40000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000", @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x609, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88aefe86, 0x40000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x50}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xffe4) r11 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r11, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000005c0)={0x3, {{0xa, 0x4e23, 0xc, @mcast1, 0xfffffff8}}, 0x0, 0x1, [{{0xa, 0x8001, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x30000}}]}, 0x110) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003601008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r10], 0x5c}}, 0x40) 1.27731966s ago: executing program 1 (id=3071): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000740)=@nat={'nat\x00', 0x62, 0x5, 0x4c8, 0x0, 0x198, 0xffffffff, 0x0, 0x240, 0x430, 0x430, 0xffffffff, 0x430, 0x430, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'hsr0\x00', 'wg1\x00', {}, {}, 0x0, 0x2}, 0x0, 0x70, 0xa8, 0x0, {0x22e}}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @remote, @empty, @gre_key=0x6, @gre_key=0xfea}}}}, {{@ip={@rand_addr=0x64010101, @empty, 0xff, 0x0, 'caif0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x5e, 0x1, 0x30}, 0x0, 0xb8, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x250, 0x7fffffe}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x3dc, {0x0, @private, @remote, @icmp_id, @gre_key}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_team\x00', 'ipvlan0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0xc, @private=0xa110100, @private=0xa010101, @gre_key=0x10, @gre_key=0x6}}}}, {{@ip={@remote, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'netdevsim0\x00'}, 0x0, 0x1b8, 0x1f0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@icmp={{0x28}, {0x11, "6e82"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x528) socket$kcm(0x29, 0x2, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000003b00010324bd7022ffdbdf25030000002bc367098937756d7ec890c6a59ec727469c2cadf822ce26119c9accb57c65232a0ac00ddcf87cf8e472a5d35455c2"], 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x40000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/19, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x609, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88aefe86, 0x40000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x50}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xffe4) r11 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r11, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000005c0)={0x3, {{0xa, 0x4e23, 0xc, @mcast1, 0xfffffff8}}, 0x0, 0x1, [{{0xa, 0x8001, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x30000}}]}, 0x110) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003601008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r10], 0x5c}}, 0x40) 1.112078169s ago: executing program 6 (id=3072): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000002c0)=0x60, 0x80000) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r6, 0x118, 0x1, &(0x7f0000000300)=0x734, 0x4) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x348, 0x18c, 0x203, 0x0, 0x19030000, 0x480, 0x2e0, 0x2e0, 0x480, 0x2e0, 0x8000000, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00', {0xffff}}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x1a, 0xfffffff6, 0x81, 'syz1\x00', 'syz1\x00', {0xfffffffffffffffc}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000080)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r8 = socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r9 = socket(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r12, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newtfilter={0x64, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x2}, {0xd}, {0xfff1, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_police={0x30, 0x16, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40040}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) close(r5) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) ioctl$XFS_IOC_FSGEOMETRY_V4(r0, 0x8070587c, &(0x7f0000000440)) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x0, 0x800, 0x70b52b, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r13}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x200c0081) 1.105803855s ago: executing program 1 (id=3073): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) sendto(r5, &(0x7f0000000000)="68000000300005050100000000000000000000005400018050000180090001006761746500000000400002801800020000000000000000000000000000000000000000001800058014000180080001000000000008000300640000000c000700e803ffe400000000", 0x68, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) 623.048709ms ago: executing program 4 (id=3074): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000002c0)=0x60, 0x80000) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r6, 0x118, 0x1, &(0x7f0000000300)=0x734, 0x4) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x348, 0x18c, 0x203, 0x0, 0x19030000, 0x480, 0x2e0, 0x2e0, 0x480, 0x2e0, 0x8000000, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00', {0xffff}}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x1a, 0xfffffff6, 0x81, 'syz1\x00', 'syz1\x00', {0xfffffffffffffffc}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000080)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r8 = socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r9 = socket(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r12, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newtfilter={0x64, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x2}, {0xd}, {0xfff1, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_police={0x30, 0x16, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40040}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) close(r5) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) ioctl$XFS_IOC_FSGEOMETRY_V4(r0, 0x8070587c, &(0x7f0000000440)) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x0, 0x800, 0x70b52b, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r13}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x200c0081) 567.58127ms ago: executing program 1 (id=3075): r0 = socket(0x2, 0xa, 0x300) getpeername$packet(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0xc000) r1 = socket$inet(0x2, 0x3, 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000001400)={'filter\x00', 0x7, 0x4, 0x430, 0x260, 0x130, 0x348, 0x348, 0x348, 0x348, 0x4, 0x0, {[{{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x5, 0xf, 0x3, 0x0, 0x0, "325bc4784383c86323bd2e2480bb4a309983ea7dc24e059f8d86c3665a008fbdae617cd80836adea6236ebf4121cf472b40ebd9fcd967f25b76a2904382fe1b9"}}}, {{@arp={@rand_addr=0x64010102, @remote, 0xff000000, 0x0, 0x5, 0x6, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, {[0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, {[0xff, 0xff, 0xff, 0xff, 0x642d5322255e874b, 0xff]}}, 0xfeff, 0x81, 0x5, 0x3, 0x1, 0x0, 'veth1_to_bond\x00', 'pim6reg1\x00', {}, {0xff}, 0x0, 0x3a}, 0xc0, 0x130, 0x0, {0xa00}}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x400, 0xfffe, 0x0, 0x0, "557504d41d0c8705ce4356108d9bbd11465a2385ba1fd1ff0208d8e9085a004ee3f93ba79daf77fadcf59370e68b888a51bae1163b920a907de0cf0c8b5f5f54"}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xe}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x480) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0xd0, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4040044}, 0x4040000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bind$netlink(r4, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x8000}, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x90, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r9, {0x1, 0x3}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_ACT={0x5c, 0x3, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xb75}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x9}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x0, 0x20000000, 0x3, 0x403}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20005891}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r6, 0x5, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x28, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) setsockopt$sock_int(r1, 0x1, 0x5, &(0x7f0000000340)=0x6, 0x4) 320.837251ms ago: executing program 4 (id=3076): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x63, @empty, 0x2}, 0x20) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x6, @remote, 0xa}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000003c0)={0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000980)={0x3, &(0x7f0000000680)=[{@none}, {@none}, {}]}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d5, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) accept4$alg(r2, 0x0, 0x0, 0x80000) 196.195457ms ago: executing program 3 (id=3077): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8093, 0x8268}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r7, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @local, 0x9}, 0x1c) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x78}}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xfffffffe, 0xffffffffffffffff, 0x4}, 0x38) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r9) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r10, 0x84, 0x2, &(0x7f00000001c0)={0x8, 0x0, 0xfffc, 0x6}, 0x8) sendto$inet6(r10, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r10, 0x84, 0x22, &(0x7f0000000080)={0xe, 0xc208, 0x6, 0x3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) openat$cgroup_devices(r9, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r12 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r11, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r12, 0x58, &(0x7f0000000600)}, 0x10) 193.863333ms ago: executing program 6 (id=3078): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x32, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0xf}}, {0x4e20, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "9c25a81de3a2211c1c9e8d76fbc4353c3b368740cab8865b", "aff658c7f4edb9e8038258239716d9af58fdbf6a7e584c67e41c7c4be4c51180"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, 0x0, &(0x7f00000002c0)) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000000)='\x00\x00', 0x2) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x2, 0x1, "fa"}, 0x9) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000040)={0x0, 0xc9, 0x2, 0x4, 0x1000, 0x0, 0x1, 0x5, {0x0, @in6={{0xa, 0x4e23, 0x7, @local, 0x4fe9}}, 0x3dd, 0xfffffffc, 0x8001, 0x5, 0xffffffff}}, &(0x7f0000000200)=0xb0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, 0x0, &(0x7f0000000180)) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'dummy0\x00'}) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, 0x0, 0x800) 0s ago: executing program 2 (id=3079): r0 = socket(0x2b, 0x1, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x1f, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b0, 0x0, 0x238, 0x170, 0xd8, 0x0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xffffff00, 0x0, 'veth0\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x62, 0x0, 0x50}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xb, 0x4, @ipv4=@loopback, 0x4e24}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xff, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x89, 0x6, 0x24}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 'ip6_vti0\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x5}, {0x0, 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x31, 0x7, 0x1}}}, {{@ip={@loopback, @multicast1, 0xff, 0xff, 'veth0_to_batadv\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x44, 0x1, 0x15}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x55d, 0x3, @multicast1, 0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xcf8a) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a50000000060a010400000000000000000a0010010900010073797a3100000000240004802000018007000100637400001400028008000140000000010800024000000014090002000000000000000000000200000a"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x4000800) r4 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_int(r4, 0x29, 0x1e, &(0x7f0000000080)=0x9447, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000640), &(0x7f0000000680)=0x8) r6 = openat$cgroup_ro(r5, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) write$tun(r6, &(0x7f0000000180)=ANY=[@ANYRES16=r6, @ANYRESDEC=r0, @ANYRESOCT=r5, @ANYRES8=r5], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$bt_sco(r3, &(0x7f00000001c0), 0x37) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x1}, 0x20) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000000), 0x4) kernel console output (not intermixed with test programs): rocess `syz.2.1898'. [ 450.851839][T14215] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1897'. [ 450.941241][T14211] 8021q: adding VLAN 0 to HW filter on device bond36 [ 451.149480][T14224] netlink: 'syz.2.1901': attribute type 1 has an invalid length. [ 451.354521][T14228] veth35: entered allmulticast mode [ 451.359101][T14228] bond43: (slave veth35): Enslaving as an active interface with a down link [ 451.382198][T14238] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1902'. [ 451.383055][T14235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1904'. [ 451.425277][T14239] bond37: (slave veth0_to_bond): Releasing active interface [ 451.472036][T14239] bond43: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 451.993688][T14261] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 452.018960][T14261] netlink: 'syz.4.1912': attribute type 1 has an invalid length. [ 452.083622][T14261] 8021q: adding VLAN 0 to HW filter on device bond37 [ 452.349063][T14276] xt_cgroup: invalid path, errno=-2 [ 452.852133][T14297] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 452.902783][T14297] netlink: 'syz.1.1927': attribute type 1 has an invalid length. [ 452.989386][T14297] 8021q: adding VLAN 0 to HW filter on device bond37 [ 453.135332][T14309] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 453.255385][T14312] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 453.576949][T14325] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 453.606992][T14325] netlink: 'syz.1.1936': attribute type 1 has an invalid length. [ 453.712911][T14325] 8021q: adding VLAN 0 to HW filter on device bond38 [ 454.012332][T14345] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 454.041324][T14345] netlink: 'syz.1.1943': attribute type 1 has an invalid length. [ 454.172465][T14345] 8021q: adding VLAN 0 to HW filter on device bond39 [ 454.439254][T14366] __nla_validate_parse: 35 callbacks suppressed [ 454.439279][T14366] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1951'. [ 454.447891][T14366] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 454.467899][T14366] netlink: 'syz.5.1951': attribute type 1 has an invalid length. [ 454.528432][T14366] 8021q: VLANs not supported on xfrm0 [ 454.546479][T14371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1955'. [ 454.602019][T14373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1954'. [ 454.603380][T14373] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 454.605825][T14373] netlink: 'syz.3.1954': attribute type 1 has an invalid length. [ 454.826155][T14383] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 454.828548][T14373] 8021q: adding VLAN 0 to HW filter on device bond40 [ 454.838279][T14383] netlink: 'syz.5.1959': attribute type 1 has an invalid length. [ 454.894587][T14380] netlink: 'syz.4.1957': attribute type 2 has an invalid length. [ 455.056190][T14389] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1960'. [ 455.365610][T14403] syzkaller1: tun_chr_ioctl cmd 35108 [ 455.462528][T14405] IPVS: Error connecting to the multicast addr [ 455.541619][T14411] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1968'. [ 455.776146][T14414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1969'. [ 455.799869][T14414] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 455.817473][T14416] netlink: 'syz.2.1970': attribute type 1 has an invalid length. [ 455.845870][T14414] netlink: 'syz.4.1969': attribute type 1 has an invalid length. [ 455.929601][T14424] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 455.945056][T14416] 8021q: adding VLAN 0 to HW filter on device bond44 [ 455.980710][T14424] netlink: 'syz.1.1973': attribute type 1 has an invalid length. [ 456.011377][T14430] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1974'. [ 456.016958][T14414] 8021q: adding VLAN 0 to HW filter on device bond38 [ 456.061865][T14422] bond44: (slave veth37): Enslaving as an active interface with a down link [ 456.069684][T14432] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1974'. [ 456.113061][T14426] 8021q: adding VLAN 0 to HW filter on device batadv11 [ 456.115489][T14426] bond44: (slave batadv11): making interface the new active one [ 456.116666][T14426] batadv11: entered promiscuous mode [ 456.117097][T14426] bond44: (slave batadv11): Enslaving as an active interface with an up link [ 456.184479][T14424] 8021q: adding VLAN 0 to HW filter on device bond40 [ 456.214865][T14416] bond44 (unregistering): (slave veth37): Releasing active interface [ 456.230741][T14416] bond44 (unregistering): (slave batadv11): Releasing active interface [ 456.230773][T14416] batadv11: left promiscuous mode [ 456.256128][T14416] bond44 (unregistering): Released all slaves [ 456.538796][T14444] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1978'. [ 456.574936][T14441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1976'. [ 457.015792][T14465] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 457.033603][T14465] netlink: 'syz.4.1985': attribute type 1 has an invalid length. [ 457.115710][T14469] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 457.138812][T14469] netlink: 'syz.1.1986': attribute type 1 has an invalid length. [ 457.174486][T14465] 8021q: adding VLAN 0 to HW filter on device bond39 [ 457.289516][T14469] 8021q: adding VLAN 0 to HW filter on device bond41 [ 457.303190][T14480] netlink: 'syz.2.1989': attribute type 1 has an invalid length. [ 457.374288][T14480] 8021q: adding VLAN 0 to HW filter on device bond44 [ 457.492194][T14482] bond44: (slave veth39): Enslaving as an active interface with a down link [ 457.520442][T14480] 8021q: adding VLAN 0 to HW filter on device batadv12 [ 457.523336][T14480] bond44: (slave batadv12): making interface the new active one [ 457.524668][T14480] batadv12: entered promiscuous mode [ 457.525105][T14480] bond44: (slave batadv12): Enslaving as an active interface with an up link [ 457.590723][ T5633] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 457.622284][T14487] bond44 (unregistering): (slave veth39): Releasing active interface [ 457.693557][T14487] bond44 (unregistering): (slave batadv12): Releasing active interface [ 457.693592][T14487] batadv12: left promiscuous mode [ 457.724197][T14487] bond44 (unregistering): Released all slaves [ 458.409069][T14521] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 458.449099][T14523] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 458.609874][T14523] 8021q: adding VLAN 0 to HW filter on device bond40 [ 459.525829][T14572] __nla_validate_parse: 23 callbacks suppressed [ 459.525853][T14572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2017'. [ 459.804672][T14580] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2019'. [ 459.820629][T14580] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2019'. [ 459.869332][T14581] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 459.931403][T14581] validate_nla: 2 callbacks suppressed [ 459.931426][T14581] netlink: 'syz.5.2020': attribute type 1 has an invalid length. [ 460.112476][T14581] 8021q: adding VLAN 0 to HW filter on device bond1 [ 460.134303][T14594] netlink: 'syz.3.2026': attribute type 1 has an invalid length. [ 460.150839][ T5633] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 460.208023][T14592] bond1: (slave gretap1): making interface the new active one [ 460.222361][T14592] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 460.290542][T14594] 8021q: adding VLAN 0 to HW filter on device bond41 [ 460.343175][T14595] bond41: (slave veth45): Enslaving as an active interface with a down link [ 460.394409][T14600] 8021q: adding VLAN 0 to HW filter on device batadv16 [ 460.397350][T14600] bond41: (slave batadv16): making interface the new active one [ 460.398433][T14600] batadv16: entered promiscuous mode [ 460.398933][T14600] bond41: (slave batadv16): Enslaving as an active interface with an up link [ 460.488158][T14604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2029'. [ 460.489706][T14594] bond41 (unregistering): (slave veth45): Releasing active interface [ 460.533225][T14594] bond41 (unregistering): (slave batadv16): Releasing active interface [ 460.533258][T14594] batadv16: left promiscuous mode [ 460.567372][T14609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2031'. [ 460.569681][T14594] bond41 (unregistering): Released all slaves [ 460.715565][T14614] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2030'. [ 460.815190][T14621] netlink: 'syz.4.2033': attribute type 1 has an invalid length. [ 460.895828][T14612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2032'. [ 460.948572][T14616] veth51: entered allmulticast mode [ 460.973379][T14628] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2033'. [ 460.974458][T14616] bond41: (slave veth51): Enslaving as an active interface with a down link [ 461.003032][T14621] bond33: (slave veth0_to_bond): Releasing active interface [ 461.036350][T14621] bond41: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 461.057724][T14626] veth0_virt_wifi: entered promiscuous mode [ 461.059376][T14630] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2037'. [ 461.078346][T14626] veth0_virt_wifi: left promiscuous mode [ 461.118515][T14632] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2037'. [ 461.399303][T14640] batman_adv: batadv0: Adding interface: virt_wifi0 [ 461.399325][T14640] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.399358][T14640] batman_adv: batadv0: Not using interface virt_wifi0 (retrying later): interface not active [ 461.491529][T14641] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 461.556428][T14641] netlink: 'syz.2.2040': attribute type 1 has an invalid length. [ 461.681585][T14641] 8021q: adding VLAN 0 to HW filter on device bond44 [ 461.986404][T14665] netlink: 'syz.2.2048': attribute type 1 has an invalid length. [ 462.187383][T14665] veth41: entered allmulticast mode [ 462.203096][T14665] bond45: (slave veth41): Enslaving as an active interface with a down link [ 462.242700][T14668] bond43: (slave veth0_to_bond): Releasing active interface [ 462.293205][T14668] bond45: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 462.390955][ T5633] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 462.741355][T14690] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 462.774994][T14690] netlink: 'syz.4.2058': attribute type 1 has an invalid length. [ 462.807834][T14693] ipvlan2: entered promiscuous mode [ 462.808569][T14693] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 462.808594][T14693] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 462.808776][T14693] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 463.067909][T14690] 8021q: adding VLAN 0 to HW filter on device bond42 [ 463.145228][T14709] netlink: 'syz.1.2064': attribute type 1 has an invalid length. [ 463.193448][T14707] netlink: 'syz.3.2063': attribute type 1 has an invalid length. [ 463.426587][T14727] netlink: 'syz.4.2067': attribute type 1 has an invalid length. [ 463.446220][T14713] veth47: entered allmulticast mode [ 463.466351][T14713] bond41: (slave veth47): Enslaving as an active interface with a down link [ 463.481678][T14720] bond36: (slave veth0_to_bond): Releasing active interface [ 463.507408][T14720] bond41: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 463.646100][T14736] ip_tables: iptables: counters copy to user failed while replacing table [ 463.716689][T14728] veth53: entered allmulticast mode [ 463.732787][T14738] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 463.735507][T14738] netlink: 'syz.3.2071': attribute type 1 has an invalid length. [ 463.735512][T14728] bond43: (slave veth53): Enslaving as an active interface with a down link [ 463.785476][T14738] 8021q: adding VLAN 0 to HW filter on device bond42 [ 463.798778][T14722] bond41: (slave veth0_to_bond): Releasing active interface [ 463.813785][T14722] bond43: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 464.564615][T14769] 8021q: adding VLAN 0 to HW filter on device bond42 [ 464.637993][T14775] __nla_validate_parse: 16 callbacks suppressed [ 464.638023][T14775] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2085'. [ 464.704366][T14775] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 464.881344][ T5633] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 465.149392][T14769] bond42: (slave veth41): Enslaving as an active interface with a down link [ 465.169840][T14774] 8021q: adding VLAN 0 to HW filter on device batadv11 [ 465.178211][T14774] bond42: (slave batadv11): making interface the new active one [ 465.181889][T14774] batadv11: entered promiscuous mode [ 465.186402][T14774] bond42: (slave batadv11): Enslaving as an active interface with an up link [ 465.223391][T14776] bond42 (unregistering): (slave veth41): Releasing active interface [ 465.232822][T14776] bond42 (unregistering): (slave batadv11): Releasing active interface [ 465.232906][T14776] batadv11: left promiscuous mode [ 465.272748][T14776] bond42 (unregistering): Released all slaves [ 465.338424][T14775] 8021q: adding VLAN 0 to HW filter on device bond46 [ 465.461004][T14787] validate_nla: 3 callbacks suppressed [ 465.461025][T14787] netlink: 'syz.4.2088': attribute type 1 has an invalid length. [ 465.461041][T14787] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2088'. [ 465.579869][T14791] netlink: 'syz.3.2089': attribute type 1 has an invalid length. [ 465.621827][T14796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2092'. [ 465.662140][T14793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2090'. [ 465.720705][T14791] 8021q: adding VLAN 0 to HW filter on device bond43 [ 465.853698][T14797] bond43: (slave veth49): Enslaving as an active interface with a down link [ 465.905336][T14798] 8021q: adding VLAN 0 to HW filter on device batadv17 [ 465.919323][T14798] bond43: (slave batadv17): making interface the new active one [ 465.929228][T14798] batadv17: entered promiscuous mode [ 465.929651][T14798] bond43: (slave batadv17): Enslaving as an active interface with an up link [ 465.972233][T14791] bond43 (unregistering): (slave veth49): Releasing active interface [ 465.981656][T14791] bond43 (unregistering): (slave batadv17): Releasing active interface [ 465.981739][T14791] batadv17: left promiscuous mode [ 466.011746][T14791] bond43 (unregistering): Released all slaves [ 466.039884][T14808] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2094'. [ 466.049326][T14808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2094'. [ 466.049360][T14808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2094'. [ 466.049430][T14808] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2094'. [ 466.049447][T14808] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2094'. [ 466.147247][T14810] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2095'. [ 466.627028][T14828] netlink: 'syz.2.2100': attribute type 1 has an invalid length. [ 466.685765][T14828] 8021q: adding VLAN 0 to HW filter on device bond47 [ 466.835983][T14833] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 466.837686][T14832] bond47: (slave veth43): Enslaving as an active interface with a down link [ 466.877585][T14833] netlink: 'syz.1.2102': attribute type 1 has an invalid length. [ 466.925593][T14828] 8021q: adding VLAN 0 to HW filter on device batadv13 [ 466.937198][T14828] bond47: (slave batadv13): making interface the new active one [ 466.938781][T14828] batadv13: entered promiscuous mode [ 466.939217][T14828] bond47: (slave batadv13): Enslaving as an active interface with an up link [ 466.991127][T14839] bond47 (unregistering): (slave veth43): Releasing active interface [ 467.024807][T14839] bond47 (unregistering): (slave batadv13): Releasing active interface [ 467.024842][T14839] batadv13: left promiscuous mode [ 467.029880][T14839] bond47 (unregistering): Released all slaves [ 467.095670][T14833] 8021q: adding VLAN 0 to HW filter on device bond42 [ 467.945427][T14882] netlink: 'syz.2.2118': attribute type 1 has an invalid length. [ 467.979211][T14887] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 467.988021][T14887] netlink: 'syz.4.2119': attribute type 1 has an invalid length. [ 468.016943][T14882] 8021q: adding VLAN 0 to HW filter on device bond47 [ 468.058567][T14887] 8021q: adding VLAN 0 to HW filter on device bond44 [ 468.106344][T14888] bond47: (slave veth45): Enslaving as an active interface with a down link [ 468.175246][T14882] 8021q: adding VLAN 0 to HW filter on device batadv14 [ 468.189220][T14882] bond47: (slave batadv14): making interface the new active one [ 468.201762][T14882] batadv14: entered promiscuous mode [ 468.202235][T14882] bond47: (slave batadv14): Enslaving as an active interface with an up link [ 468.273202][T14888] bond47 (unregistering): (slave veth45): Releasing active interface [ 468.305926][T14888] bond47 (unregistering): (slave batadv14): Releasing active interface [ 468.305955][T14888] batadv14: left promiscuous mode [ 468.360636][T14888] bond47 (unregistering): Released all slaves [ 468.556230][ T5633] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 469.004822][T14925] netlink: 'syz.4.2130': attribute type 1 has an invalid length. [ 469.184735][T14927] veth55: entered allmulticast mode [ 469.212576][T14927] bond45: (slave veth55): Enslaving as an active interface with a down link [ 469.249518][T14925] bond43: (slave veth0_to_bond): Releasing active interface [ 469.266964][T14925] bond45: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 469.385014][T14943] netlink: 'syz.4.2136': attribute type 1 has an invalid length. [ 469.421343][T14943] 8021q: adding VLAN 0 to HW filter on device bond46 [ 469.473655][T14943] bond46: (slave veth57): Enslaving as an active interface with a down link [ 469.495293][T14943] 8021q: adding VLAN 0 to HW filter on device batadv8 [ 469.498199][T14943] bond46: (slave batadv8): making interface the new active one [ 469.499383][T14943] batadv8: entered promiscuous mode [ 469.499828][T14943] bond46: (slave batadv8): Enslaving as an active interface with an up link [ 469.544154][T14943] bond46 (unregistering): (slave veth57): Releasing active interface [ 469.547738][T14943] bond46 (unregistering): (slave batadv8): Releasing active interface [ 469.547768][T14943] batadv8: left promiscuous mode [ 469.571191][T14943] bond46 (unregistering): Released all slaves [ 469.824830][T14956] __nla_validate_parse: 12 callbacks suppressed [ 469.824851][T14956] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2140'. [ 470.083450][T14970] netlink: 'syz.1.2146': attribute type 1 has an invalid length. [ 470.248438][T14977] netlink: 'syz.3.2147': attribute type 1 has an invalid length. [ 470.271092][T14973] veth43: entered allmulticast mode [ 470.276514][T14978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2146'. [ 470.297127][T14973] bond43: (slave veth43): Enslaving as an active interface with a down link [ 470.345039][T14970] bond34: (slave veth0_to_bond): Releasing active interface [ 470.369240][T14970] bond43: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 470.469538][T14976] veth51: entered allmulticast mode [ 470.480862][T14976] bond43: (slave veth51): Enslaving as an active interface with a down link [ 470.504980][T14980] bond41: (slave veth0_to_bond): Releasing active interface [ 470.533014][T14980] bond43: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 470.664017][T14991] syzkaller1: entered promiscuous mode [ 470.664049][T14991] syzkaller1: entered allmulticast mode [ 470.694965][T14993] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2151'. [ 470.796313][T14998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2153'. [ 470.870372][ T5633] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 471.247679][T15017] netlink: 'syz.3.2160': attribute type 1 has an invalid length. [ 471.365172][T15021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2161'. [ 471.405966][T15017] veth53: entered allmulticast mode [ 471.408900][T15028] netlink: 'syz.2.2162': attribute type 1 has an invalid length. [ 471.432675][T15017] bond44: (slave veth53): Enslaving as an active interface with a down link [ 471.451657][T15020] bond43: (slave veth0_to_bond): Releasing active interface [ 471.498634][T15020] bond44: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 471.694424][T15038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2168'. [ 471.721522][T15023] veth47: entered allmulticast mode [ 471.728918][T15023] bond47: (slave veth47): Enslaving as an active interface with a down link [ 471.765731][T15033] bond45: (slave veth0_to_bond): Releasing active interface [ 471.783535][T15033] bond47: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 471.788739][T15038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2168'. [ 471.911642][T15042] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2169'. [ 472.128929][T15053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2173'. [ 472.275526][T15055] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 472.295407][T15055] netlink: 'syz.1.2174': attribute type 1 has an invalid length. [ 472.401773][T15055] 8021q: adding VLAN 0 to HW filter on device bond44 [ 472.731950][T15075] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2184'. [ 472.759332][T15078] netlink: 'syz.3.2183': attribute type 1 has an invalid length. [ 472.827402][T15078] 8021q: adding VLAN 0 to HW filter on device bond45 [ 472.882828][T15081] bond45: (slave veth55): Enslaving as an active interface with a down link [ 472.920855][T15078] 8021q: adding VLAN 0 to HW filter on device batadv18 [ 472.924122][T15078] bond45: (slave batadv18): making interface the new active one [ 472.925836][T15078] batadv18: entered promiscuous mode [ 472.926636][T15078] bond45: (slave batadv18): Enslaving as an active interface with an up link [ 473.042005][T15078] bond45 (unregistering): (slave veth55): Releasing active interface [ 473.045150][T15078] bond45 (unregistering): (slave batadv18): Releasing active interface [ 473.045178][T15078] batadv18: left promiscuous mode [ 473.048073][T15078] bond45 (unregistering): Released all slaves [ 473.457845][T15100] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 473.471199][T15100] netlink: 'syz.4.2191': attribute type 1 has an invalid length. [ 473.528871][T15104] block nbd0: server does not support multiple connections per device. [ 473.531279][T15104] block nbd0: shutting down sockets [ 473.585823][T15100] 8021q: adding VLAN 0 to HW filter on device bond46 [ 473.779056][T15113] block nbd0: server does not support multiple connections per device. [ 473.801145][T15113] block nbd0: shutting down sockets [ 474.038633][T15116] block nbd0: server does not support multiple connections per device. [ 474.039026][T15116] block nbd0: shutting down sockets [ 474.688424][T15136] syzkaller1: entered promiscuous mode [ 474.688459][T15136] syzkaller1: entered allmulticast mode [ 474.781651][T15138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 474.839253][T15141] __nla_validate_parse: 6 callbacks suppressed [ 474.839275][T15141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2205'. [ 474.849020][T15141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2205'. [ 474.862230][T15141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2205'. [ 474.863005][T15141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2205'. [ 474.872055][T15141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2205'. [ 474.879592][T15141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2205'. [ 474.891612][T15141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2205'. [ 474.914736][T15141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2205'. [ 474.915200][T15141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2205'. [ 474.915273][T15141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2205'. [ 474.962261][ T1100] tipc: Subscription rejected, illegal request [ 475.002268][T15145] syzkaller1: entered promiscuous mode [ 475.002286][T15145] syzkaller1: entered allmulticast mode [ 476.133056][T15168] block nbd0: server does not support multiple connections per device. [ 476.133388][T15168] block nbd0: shutting down sockets [ 476.524753][T15184] netlink: 'syz.2.2219': attribute type 1 has an invalid length. [ 476.641349][T15184] veth49: entered allmulticast mode [ 476.661127][T15184] bond48: (slave veth49): Enslaving as an active interface with a down link [ 476.678206][T15189] bond47: (slave veth0_to_bond): Releasing active interface [ 476.705518][T15189] bond48: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 476.856134][T15195] netlink: 'syz.2.2223': attribute type 1 has an invalid length. [ 476.888372][T15195] 8021q: adding VLAN 0 to HW filter on device bond49 [ 476.920191][T15195] bond49: (slave veth51): Enslaving as an active interface with a down link [ 476.942628][T15195] 8021q: adding VLAN 0 to HW filter on device batadv15 [ 476.946073][T15195] bond49: (slave batadv15): making interface the new active one [ 476.947733][T15195] batadv15: entered promiscuous mode [ 476.948353][T15195] bond49: (slave batadv15): Enslaving as an active interface with an up link [ 477.542977][T15212] block nbd0: server does not support multiple connections per device. [ 477.545935][T15212] block nbd0: shutting down sockets [ 477.801725][T15216] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 477.807791][T15216] netlink: 'syz.4.2230': attribute type 1 has an invalid length. [ 477.921819][T15216] 8021q: adding VLAN 0 to HW filter on device bond47 [ 477.994257][ T5633] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 478.217770][T15225] block nbd0: server does not support multiple connections per device. [ 478.218128][T15225] block nbd0: shutting down sockets [ 478.358061][T15233] netlink: 'syz.1.2235': attribute type 1 has an invalid length. [ 478.436617][T15233] 8021q: adding VLAN 0 to HW filter on device bond45 [ 478.542930][T15235] bond45: (slave veth45): Enslaving as an active interface with a down link [ 478.588924][T15233] 8021q: adding VLAN 0 to HW filter on device batadv12 [ 478.603554][T15233] bond45: (slave batadv12): making interface the new active one [ 478.605591][T15233] batadv12: entered promiscuous mode [ 478.606011][T15233] bond45: (slave batadv12): Enslaving as an active interface with an up link [ 479.456625][T15260] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 479.472001][T15260] netlink: 'syz.4.2243': attribute type 1 has an invalid length. [ 479.524696][T15260] 8021q: adding VLAN 0 to HW filter on device bond48 [ 479.544506][ T4933] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 479.559878][ T4933] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 479.573879][ T4933] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 479.575063][ T4933] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 479.577594][ T4933] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 479.855509][T15271] block nbd0: server does not support multiple connections per device. [ 479.856585][T15271] block nbd0: shutting down sockets [ 480.089585][T15278] block nbd0: server does not support multiple connections per device. [ 480.089895][T15278] block nbd0: shutting down sockets [ 480.338512][T15286] __nla_validate_parse: 30 callbacks suppressed [ 480.338534][T15286] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2250'. [ 480.783571][T15301] netlink: 'syz.1.2254': attribute type 1 has an invalid length. [ 480.788302][T15298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2253'. [ 480.831767][T15298] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 480.870843][T15298] netlink: 'syz.4.2253': attribute type 1 has an invalid length. [ 480.876956][T15301] veth47: entered allmulticast mode [ 480.895563][T15301] bond46: (slave veth47): Enslaving as an active interface with a down link [ 480.963847][T15301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2254'. [ 480.989101][T15298] 8021q: adding VLAN 0 to HW filter on device bond49 [ 481.011580][T15305] bond43: (slave veth0_to_bond): Releasing active interface [ 481.019777][T15305] bond46: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 481.043659][T15262] lo speed is unknown, defaulting to 1000 [ 481.170839][T15312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2255'. [ 481.177670][T15312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2255'. [ 481.177935][T15312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2255'. [ 481.178233][T15312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2255'. [ 481.178543][T15312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2255'. [ 481.178792][T15312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2255'. [ 481.179069][T15312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2255'. [ 481.265064][T15314] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 481.285127][T15314] netlink: 'syz.1.2256': attribute type 1 has an invalid length. [ 481.345542][T15314] 8021q: adding VLAN 0 to HW filter on device bond47 [ 481.590916][T15327] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 481.608528][T15327] netlink: 'syz.1.2259': attribute type 1 has an invalid length. [ 481.670755][ T5633] Bluetooth: hci6: command tx timeout [ 481.743650][T15327] 8021q: adding VLAN 0 to HW filter on device bond48 [ 481.926450][T15262] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.928275][T15262] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.947002][T15262] bridge_slave_0: entered allmulticast mode [ 481.965279][T15262] bridge_slave_0: entered promiscuous mode [ 481.984682][T15262] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.984803][T15262] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.984967][T15262] bridge_slave_1: entered allmulticast mode [ 481.998727][T15262] bridge_slave_1: entered promiscuous mode [ 482.180669][T15262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.188552][T15262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.341395][T15262] team0: Port device team_slave_0 added [ 482.369771][T15262] team0: Port device team_slave_1 added [ 482.523258][T15262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.523278][T15262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.523307][T15262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.568138][T15262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.568180][T15262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.568261][T15262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.893975][T15262] hsr_slave_0: entered promiscuous mode [ 482.896936][T15262] hsr_slave_1: entered promiscuous mode [ 482.897705][T15262] debugfs: 'hsr0' already exists in 'hsr' [ 482.897726][T15262] Cannot create hsr debugfs directory [ 482.935167][T15355] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 482.955307][T15355] netlink: 'syz.4.2268': attribute type 1 has an invalid length. [ 483.084060][T15355] 8021q: adding VLAN 0 to HW filter on device bond50 [ 483.097969][T15363] netlink: 'syz.2.2269': attribute type 1 has an invalid length. [ 483.224049][T15363] 8021q: adding VLAN 0 to HW filter on device bond50 [ 483.364264][T15367] bond50: (slave veth53): Enslaving as an active interface with a down link [ 483.398694][T15369] 8021q: adding VLAN 0 to HW filter on device batadv16 [ 483.409035][T15369] bond50: (slave batadv16): making interface the new active one [ 483.423698][T15369] batadv16: entered promiscuous mode [ 483.424170][T15369] bond50: (slave batadv16): Enslaving as an active interface with an up link [ 483.470603][T15363] bond50 (unregistering): (slave veth53): Releasing active interface [ 483.489905][T15363] bond50 (unregistering): (slave batadv16): Releasing active interface [ 483.491503][T15363] batadv16: left promiscuous mode [ 483.501858][T15363] bond50 (unregistering): Released all slaves [ 483.761364][ T4933] Bluetooth: hci6: command tx timeout [ 483.763544][T15385] ip6gretap1: entered allmulticast mode [ 483.766086][T15385] batman_adv: batadv0: Adding interface: ip6gretap1 [ 483.766104][T15385] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.766246][T15385] batman_adv: batadv0: Interface activated: ip6gretap1 [ 484.562826][T15262] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 484.569497][T15262] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 484.591135][T15262] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 484.598586][T15262] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 484.618070][T15403] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 484.618090][T15403] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 484.659291][T15262] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 484.672588][T15262] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 484.673644][T15262] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 484.698621][T15262] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 484.868017][T15262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.898974][T15262] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.917270][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.917381][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.013124][ T1261] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.013234][ T1261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.128598][T15417] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 485.143720][T15417] netlink: 'syz.2.2283': attribute type 1 has an invalid length. [ 485.258270][T15417] 8021q: adding VLAN 0 to HW filter on device bond50 [ 485.270267][ T5633] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 485.465443][T15431] bridge0: left allmulticast mode [ 485.569475][T15436] __nla_validate_parse: 12 callbacks suppressed [ 485.569499][T15436] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2288'. [ 485.770701][T15442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2290'. [ 485.831346][ T5633] Bluetooth: hci6: command tx timeout [ 485.877942][T15449] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2292'. [ 486.046336][T15449] ip6gretap0: left allmulticast mode [ 486.276848][T15457] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2295'. [ 486.570848][T15466] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 486.693776][T15471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2299'. [ 486.695166][T15471] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 486.697656][T15471] netlink: 'syz.3.2299': attribute type 1 has an invalid length. [ 486.854797][T15476] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2298'. [ 486.866470][T15456] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 486.972687][T15471] 8021q: adding VLAN 0 to HW filter on device bond45 [ 487.085463][T15483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2301'. [ 487.086979][T15483] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 487.089588][T15483] netlink: 'syz.3.2301': attribute type 1 has an invalid length. [ 487.254540][T15490] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 487.301585][T15483] 8021q: adding VLAN 0 to HW filter on device bond46 [ 487.306056][T15490] netlink: 'syz.4.2302': attribute type 1 has an invalid length. [ 487.343493][T15262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.458838][T15496] IPVS: persistence engine module ip_vs_pe_À not found [ 487.605475][T15499] netlink: 'syz.4.2304': attribute type 1 has an invalid length. [ 487.665031][T15499] 8021q: adding VLAN 0 to HW filter on device bond51 [ 487.667242][T15504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2306'. [ 487.725291][T15507] bond51: (slave veth59): Enslaving as an active interface with a down link [ 487.725653][T15504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2306'. [ 487.754259][T15499] 8021q: adding VLAN 0 to HW filter on device batadv9 [ 487.759307][T15499] bond51: (slave batadv9): making interface the new active one [ 487.763366][T15499] batadv9: entered promiscuous mode [ 487.763825][T15499] bond51: (slave batadv9): Enslaving as an active interface with an up link [ 487.798459][T15504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2306'. [ 487.912490][ T5633] Bluetooth: hci6: command tx timeout [ 488.208487][T15262] veth0_vlan: entered promiscuous mode [ 488.238939][T15262] veth1_vlan: entered promiscuous mode [ 488.334621][T15262] veth0_macvtap: entered promiscuous mode [ 488.357309][T15262] veth1_macvtap: entered promiscuous mode [ 488.393149][T15262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 488.417125][T15262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 488.460269][ T1261] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.480359][ T1261] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.480787][ T1261] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.657916][T15543] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 488.677870][T15543] netlink: 'syz.1.2313': attribute type 1 has an invalid length. [ 488.722713][T15545] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 488.736617][T15545] netlink: 'syz.3.2314': attribute type 1 has an invalid length. [ 489.110296][ T1100] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.185110][T15545] 8021q: adding VLAN 0 to HW filter on device bond47 [ 489.486138][T15556] netlink: 'syz.3.2317': attribute type 1 has an invalid length. [ 489.596788][T15556] 8021q: adding VLAN 0 to HW filter on device bond48 [ 489.675893][T15559] bond48: (slave veth57): Enslaving as an active interface with a down link [ 489.705791][T15562] macvtap1: entered allmulticast mode [ 489.705817][T15562] dummy0: entered allmulticast mode [ 489.714608][T15562] dummy0: left allmulticast mode [ 489.764702][T15556] 8021q: adding VLAN 0 to HW filter on device batadv19 [ 489.766889][T15556] bond48: (slave batadv19): making interface the new active one [ 489.767948][T15556] batadv19: entered promiscuous mode [ 489.768305][T15556] bond48: (slave batadv19): Enslaving as an active interface with an up link [ 489.817696][T15565] macvtap1: entered allmulticast mode [ 489.817714][T15565] dummy0: entered allmulticast mode [ 489.819842][T15565] dummy0: left allmulticast mode [ 489.878140][ T2228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.878163][ T2228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.086309][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.086333][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.594278][T15594] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 490.612544][T15594] netlink: 'syz.2.2326': attribute type 1 has an invalid length. [ 490.754207][T15594] 8021q: adding VLAN 0 to HW filter on device bond51 [ 491.141399][T15609] netlink: 'syz.6.2330': attribute type 1 has an invalid length. [ 491.601400][ T5633] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 491.753852][T15633] __nla_validate_parse: 15 callbacks suppressed [ 491.753873][T15633] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2336'. [ 492.199444][T15656] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2340'. [ 492.217499][T15655] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2343'. [ 492.237469][T15655] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 492.261010][T15655] netlink: 'syz.6.2343': attribute type 1 has an invalid length. [ 492.404794][T15655] 8021q: adding VLAN 0 to HW filter on device bond1 [ 492.603384][T15670] netlink: 'syz.1.2348': attribute type 4 has an invalid length. [ 493.182242][T15692] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2353'. [ 493.613578][T15695] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2354'. [ 493.883378][T15708] netlink: 'syz.6.2359': attribute type 1 has an invalid length. [ 494.185880][T15716] netlink: 'syz.3.2362': attribute type 1 has an invalid length. [ 494.305107][T15729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2366'. [ 494.310475][ T5633] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 494.323364][T15716] 8021q: adding VLAN 0 to HW filter on device bond49 [ 494.420669][T15724] bond49: (slave veth59): Enslaving as an active interface with a down link [ 494.495314][T15731] 8021q: adding VLAN 0 to HW filter on device batadv20 [ 494.516462][T15731] bond49: (slave batadv20): making interface the new active one [ 494.529333][T15731] batadv20: entered promiscuous mode [ 494.536384][T15731] bond49: (slave batadv20): Enslaving as an active interface with an up link [ 494.807321][T15742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2369'. [ 494.867765][T15746] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2371'. [ 495.307515][T15760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2376'. [ 495.307552][T15760] netlink: 'syz.4.2376': attribute type 1 has an invalid length. [ 495.477011][T15765] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2378'. [ 495.602312][T15767] bridge0: port 1(veth0) entered blocking state [ 495.602441][T15767] bridge0: port 1(veth0) entered disabled state [ 495.602615][T15767] veth0: entered allmulticast mode [ 495.625374][T15767] veth0: entered promiscuous mode [ 495.735058][T15769] netlink: 'syz.3.2379': attribute type 1 has an invalid length. [ 495.895341][T15769] 8021q: adding VLAN 0 to HW filter on device bond50 [ 495.953244][T15778] bond50: (slave veth61): Enslaving as an active interface with a down link [ 495.987514][T15779] 8021q: adding VLAN 0 to HW filter on device batadv21 [ 496.020249][T15789] netlink: 'syz.6.2382': attribute type 1 has an invalid length. [ 496.028046][T15779] bond50: (slave batadv21): making interface the new active one [ 496.029418][T15779] batadv21: entered promiscuous mode [ 496.038496][T15779] bond50: (slave batadv21): Enslaving as an active interface with an up link [ 496.187211][T15785] veth3: entered allmulticast mode [ 496.426659][T15806] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 496.444469][T15806] netlink: 'syz.3.2389': attribute type 1 has an invalid length. [ 496.803169][T15821] netlink: 'syz.6.2393': attribute type 1 has an invalid length. [ 496.941709][T15828] __nla_validate_parse: 13 callbacks suppressed [ 496.941748][T15828] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2395'. [ 497.110582][ T5633] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 497.175059][T15833] netlink: 'syz.6.2397': attribute type 1 has an invalid length. [ 497.444200][T15849] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 497.456677][T15849] netlink: 'syz.1.2401': attribute type 1 has an invalid length. [ 497.511823][T15848] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2402'. [ 497.948357][T15866] netlink: 'syz.3.2407': attribute type 1 has an invalid length. [ 498.010787][T15866] 8021q: adding VLAN 0 to HW filter on device bond51 [ 498.192261][T15878] netlink: 'syz.1.2410': attribute type 3 has an invalid length. [ 498.221717][T15870] bond51: (slave veth63): Enslaving as an active interface with a down link [ 498.283050][T15866] 8021q: adding VLAN 0 to HW filter on device batadv22 [ 498.300754][T15866] bond51: (slave batadv22): making interface the new active one [ 498.305092][T15866] batadv22: entered promiscuous mode [ 498.319490][T15866] bond51: (slave batadv22): Enslaving as an active interface with an up link [ 498.526777][T15887] netlink: 'syz.1.2413': attribute type 1 has an invalid length. [ 498.724620][T15901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2415'. [ 498.773295][T15895] veth49: entered allmulticast mode [ 498.817347][T15895] bond49: (slave veth49): Enslaving as an active interface with a down link [ 498.831933][T15897] bond46: (slave veth0_to_bond): Releasing active interface [ 498.856141][T15897] bond49: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 498.912035][T15901] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 498.952709][ T13] batadv9: left promiscuous mode [ 498.957348][T15907] netlink: 'syz.6.2416': attribute type 1 has an invalid length. [ 499.003636][T15903] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2417'. [ 499.345851][T15926] netlink: 'syz.4.2422': attribute type 1 has an invalid length. [ 499.350213][ T5633] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 499.429336][T15926] 8021q: adding VLAN 0 to HW filter on device bond52 [ 499.554590][T15929] bond52: (slave veth61): Enslaving as an active interface with a down link [ 499.571496][T15939] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2425'. [ 499.622542][T15926] 8021q: adding VLAN 0 to HW filter on device batadv10 [ 499.625409][T15926] bond52: (slave batadv10): making interface the new active one [ 499.626617][T15926] batadv10: entered promiscuous mode [ 499.627017][T15926] bond52: (slave batadv10): Enslaving as an active interface with an up link [ 499.886819][T15948] netlink: 'syz.3.2426': attribute type 1 has an invalid length. [ 500.085408][T15960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2426'. [ 500.116261][T15952] veth65: entered allmulticast mode [ 500.133756][T15952] bond52: (slave veth65): Enslaving as an active interface with a down link [ 500.156231][T15948] bond44: (slave veth0_to_bond): Releasing active interface [ 500.189085][T15948] bond52: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 500.245560][T15951] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2429'. [ 500.245642][T15951] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2429'. [ 500.245658][T15951] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2429'. [ 500.245742][T15951] netlink: 108 bytes leftover after parsing attributes in process `syz.6.2429'. [ 500.430268][T15970] netlink: 'syz.3.2435': attribute type 1 has an invalid length. [ 500.549599][T15970] 8021q: adding VLAN 0 to HW filter on device bond53 [ 500.764818][T15974] bond53: (slave veth67): Enslaving as an active interface with a down link [ 500.812840][T15970] 8021q: adding VLAN 0 to HW filter on device batadv23 [ 500.816018][T15970] bond53: (slave batadv23): making interface the new active one [ 500.817401][T15970] batadv23: entered promiscuous mode [ 500.817949][T15970] bond53: (slave batadv23): Enslaving as an active interface with an up link [ 500.887470][T15983] ip6gre1: entered promiscuous mode [ 500.887495][T15983] ip6gre1: entered allmulticast mode [ 501.181413][ T12] batadv19: left promiscuous mode [ 501.476718][T16002] netlink: 'syz.3.2442': attribute type 1 has an invalid length. [ 501.590987][T16002] 8021q: adding VLAN 0 to HW filter on device bond54 [ 501.807425][T16004] bond54: (slave veth69): Enslaving as an active interface with a down link [ 501.851399][T16002] 8021q: adding VLAN 0 to HW filter on device batadv24 [ 501.862415][T16002] bond54: (slave batadv24): making interface the new active one [ 501.864986][T16002] batadv24: entered promiscuous mode [ 501.865415][T16002] bond54: (slave batadv24): Enslaving as an active interface with an up link [ 502.156115][ T5633] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 502.484715][T16016] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.555682][T16016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.622209][T16031] __nla_validate_parse: 2 callbacks suppressed [ 502.622233][T16031] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2450'. [ 502.650818][T16032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2449'. [ 502.762586][T16016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 502.794450][T16016] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 502.886023][T16016] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 502.995844][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.995960][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 503.073114][T16042] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2452'. [ 503.126379][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.126531][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 503.391855][T16046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2453'. [ 503.672252][T16053] netlink: 'syz.1.2454': attribute type 1 has an invalid length. [ 503.908742][T16063] netlink: 'syz.4.2456': attribute type 1 has an invalid length. [ 503.994017][T16054] veth51: entered allmulticast mode [ 503.995246][T16053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2454'. [ 504.019764][T16054] bond50: (slave veth51): Enslaving as an active interface with a down link [ 504.076387][T16061] bond49: (slave veth0_to_bond): Releasing active interface [ 504.097515][T16061] bond50: (slave veth0_to_bond): making interface the new active one [ 504.098472][T16061] bond50: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 504.271967][T16063] 8021q: adding VLAN 0 to HW filter on device bond53 [ 504.485063][T16065] bond53: (slave veth63): Enslaving as an active interface with a down link [ 504.559133][T16067] 8021q: adding VLAN 0 to HW filter on device batadv11 [ 504.586019][T16067] bond53: (slave batadv11): making interface the new active one [ 504.597829][T16067] batadv11: entered promiscuous mode [ 504.607137][T16067] bond53: (slave batadv11): Enslaving as an active interface with an up link [ 504.973188][T16082] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2461'. [ 505.359446][T16097] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2465'. [ 505.752050][ T5633] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 505.936869][ T12] batadv20: left promiscuous mode [ 505.970867][T16109] netlink: 'syz.2.2469': attribute type 1 has an invalid length. [ 506.028015][T15951] Set syz1 is full, maxelem 65536 reached [ 506.166347][T16111] veth55: entered allmulticast mode [ 506.182856][T16111] bond52: (slave veth55): Enslaving as an active interface with a down link [ 506.185859][T16109] bond48: (slave veth0_to_bond): Releasing active interface [ 506.211950][T16111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2469'. [ 506.216813][T16109] bond52: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 506.265763][T16116] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2471'. [ 506.414486][T16120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2475'. [ 506.568291][T16124] netlink: 'syz.6.2476': attribute type 11 has an invalid length. [ 506.837348][T16124] netlink: 'syz.6.2476': attribute type 11 has an invalid length. [ 507.021614][ T13] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.022277][ T1261] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.022332][ T1261] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.022370][ T1261] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.310476][T16153] netlink: 'syz.3.2482': attribute type 1 has an invalid length. [ 507.383994][T16157] netlink: 'syz.6.2483': attribute type 1 has an invalid length. [ 507.498909][T16164] veth3: entered allmulticast mode [ 507.665372][T16151] __nla_validate_parse: 5 callbacks suppressed [ 507.665395][T16151] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2481'. [ 507.665459][T16151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2481'. [ 507.665477][T16151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2481'. [ 507.665545][T16151] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2481'. [ 507.665561][T16151] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2481'. [ 507.757591][T16154] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2483'. [ 507.844906][T16156] veth71: entered allmulticast mode [ 507.868293][T16156] bond55: (slave veth71): Enslaving as an active interface with a down link [ 507.895515][T16167] bond52: (slave veth0_to_bond): Releasing active interface [ 507.911868][ T5633] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 507.930184][T16167] bond55: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 507.971720][T16172] bond2: (slave veth0_to_bond): making interface the new active one [ 507.980175][T16172] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 508.095223][T16183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2487'. [ 508.150778][ T782] batadv21: left promiscuous mode [ 508.402715][T16191] batman_adv: batadv0: Adding interface: syzkaller0 [ 508.402737][T16191] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 508.402772][T16191] batman_adv: batadv0: Interface activated: syzkaller0 [ 508.494566][T16190] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 508.549043][T16195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2491'. [ 508.558301][T16190] batman_adv: batadv0: Removing interface: syzkaller0 [ 508.717275][T16202] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2494'. [ 508.796352][T16205] veth1_to_bond: entered allmulticast mode [ 508.816476][T16205] veth1_to_bond: entered promiscuous mode [ 508.817065][T16208] netlink: 'syz.6.2498': attribute type 1 has an invalid length. [ 508.818366][T16205] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2495'. [ 508.924850][T16205] veth1_to_bond (unregistering): left promiscuous mode [ 508.924898][T16205] veth1_to_bond (unregistering): left allmulticast mode [ 508.964640][T16205] bond0: (slave bond_slave_1): Releasing backup interface [ 509.048976][T16212] veth3: entered allmulticast mode [ 509.070802][T16212] bond3: (slave veth3): Enslaving as an active interface with a down link [ 509.101049][T16208] bond2: (slave veth0_to_bond): Releasing active interface [ 509.146466][T16208] bond3: (slave veth0_to_bond): making interface the new active one [ 509.149182][T16208] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 509.481176][T16228] block nbd1: server does not support multiple connections per device. [ 509.481524][T16228] block nbd1: shutting down sockets [ 509.662784][ T13] batadv22: left promiscuous mode [ 509.990576][ T5633] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 510.130446][T16248] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 510.747525][T16269] block nbd1: server does not support multiple connections per device. [ 510.747852][T16269] block nbd1: shutting down sockets [ 510.985398][T16279] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 511.333972][T16287] netlink: 'syz.6.2524': attribute type 1 has an invalid length. [ 511.525425][T16288] veth5: entered allmulticast mode [ 511.548248][T16288] bond4: (slave veth5): Enslaving as an active interface with a down link [ 511.597982][T16292] bond3: (slave veth0_to_bond): Releasing active interface [ 511.630674][T16292] bond4: (slave veth0_to_bond): making interface the new active one [ 511.655339][T16292] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 511.904451][T16303] netlink: 'syz.6.2529': attribute type 1 has an invalid length. [ 512.067838][T16311] block nbd1: server does not support multiple connections per device. [ 512.068181][T16311] block nbd1: shutting down sockets [ 512.135671][T16305] veth7: entered allmulticast mode [ 512.153757][T16305] bond5: (slave veth7): Enslaving as an active interface with a down link [ 512.197267][T16310] bond4: (slave veth0_to_bond): Releasing active interface [ 512.239221][T16310] bond5: (slave veth0_to_bond): making interface the new active one [ 512.259871][T16310] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 512.331985][ T1100] batadv23: left promiscuous mode [ 512.390874][ T5633] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 513.741832][ T1261] batadv24: left promiscuous mode [ 513.866068][T16364] netlink: 'syz.1.2544': attribute type 1 has an invalid length. [ 514.136077][T16364] veth53: entered allmulticast mode [ 514.153903][T16364] bond51: (slave veth53): Enslaving as an active interface with a down link [ 514.211699][T16368] bond50: (slave veth0_to_bond): Releasing active interface [ 514.243656][T16371] block nbd1: server does not support multiple connections per device. [ 514.244782][T16371] block nbd1: shutting down sockets [ 514.285254][T16368] bond51: (slave veth0_to_bond): making interface the new active one [ 514.304812][T16368] bond51: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 514.356394][T16376] __nla_validate_parse: 5 callbacks suppressed [ 514.356416][T16376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2547'. [ 514.561256][ T5633] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 514.597306][T16382] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2549'. [ 515.347271][T16417] block nbd1: server does not support multiple connections per device. [ 515.349825][T16417] block nbd1: shutting down sockets [ 515.497708][T16421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2561'. [ 515.733671][T16426] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2562'. [ 516.227303][T16436] netlink: 'syz.4.2567': attribute type 1 has an invalid length. [ 516.270904][T16434] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2566'. [ 516.453614][T16436] 8021q: adding VLAN 0 to HW filter on device bond54 [ 516.560287][T16438] bond54: (slave veth65): Enslaving as an active interface with a down link [ 516.603043][T16446] 8021q: adding VLAN 0 to HW filter on device batadv12 [ 516.606569][T16446] bond54: (slave batadv12): making interface the new active one [ 516.608272][T16446] batadv12: entered promiscuous mode [ 516.608868][T16446] bond54: (slave batadv12): Enslaving as an active interface with an up link [ 516.790536][ T5633] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 517.218069][T16463] syzkaller1: entered promiscuous mode [ 517.218095][T16463] syzkaller1: entered allmulticast mode [ 517.342865][T16467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2574'. [ 517.356659][T16466] block nbd1: server does not support multiple connections per device. [ 517.357481][T16466] block nbd1: shutting down sockets [ 517.458366][T16473] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2576'. [ 517.736359][T16481] netlink: 'syz.2.2579': attribute type 10 has an invalid length. [ 517.764319][T16481] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 517.791052][T16481] team0: Port device netdevsim1 added [ 517.793625][T16484] netlink: 'syz.2.2579': attribute type 10 has an invalid length. [ 517.881408][T16489] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2581'. [ 517.885590][T16484] team0: Port device netdevsim1 removed [ 517.906539][T16484] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 517.925286][T16484] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 518.036349][T16494] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2582'. [ 518.607365][T16509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2587'. [ 519.036259][ T5633] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 519.099176][T16520] block nbd1: server does not support multiple connections per device. [ 519.118109][T16520] block nbd1: shutting down sockets [ 519.159402][T16524] block nbd2: server does not support multiple connections per device. [ 519.159750][T16524] block nbd2: shutting down sockets [ 519.568791][T16535] __nla_validate_parse: 6 callbacks suppressed [ 519.568812][T16535] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2595'. [ 519.619124][T16536] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2596'. [ 519.909050][T16549] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2600'. [ 520.298243][T16566] block nbd1: server does not support multiple connections per device. [ 520.311142][T16566] block nbd1: shutting down sockets [ 520.336318][T16564] block nbd2: server does not support multiple connections per device. [ 520.336630][T16564] block nbd2: shutting down sockets [ 520.465010][T16572] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 520.481183][T16573] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2602'. [ 520.481253][T16573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2602'. [ 520.481271][T16573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2602'. [ 520.481338][T16573] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2602'. [ 520.481362][T16573] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2602'. [ 520.986172][T16575] netlink: 'syz.3.2608': attribute type 1 has an invalid length. [ 521.062978][T16577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2607'. [ 521.096223][T16583] netlink: 'syz.1.2610': attribute type 1 has an invalid length. [ 521.145398][T16575] veth73: entered allmulticast mode [ 521.162248][T16575] bond56: (slave veth73): Enslaving as an active interface with a down link [ 521.212182][T16582] bond55: (slave veth0_to_bond): Releasing active interface [ 521.234302][T16587] netlink: 'syz.1.2610': attribute type 10 has an invalid length. [ 521.234327][T16587] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2610'. [ 521.257136][T16582] bond56: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 521.393335][T16583] 8021q: adding VLAN 0 to HW filter on device bond52 [ 521.458385][T16585] bond52: (slave dummy0): Enslaving as a backup interface with an up link [ 521.458673][T16587] dummy0: entered promiscuous mode [ 521.482037][T16587] bond52: (slave dummy0): Releasing backup interface [ 522.026838][T16609] block nbd1: server does not support multiple connections per device. [ 522.027859][T16609] block nbd1: shutting down sockets [ 522.223520][T16612] block nbd1: server does not support multiple connections per device. [ 522.223905][T16612] block nbd1: shutting down sockets [ 522.705621][T16630] netlink: 'syz.1.2623': attribute type 1 has an invalid length. [ 522.937291][T16632] veth55: entered allmulticast mode [ 522.965479][T16632] bond53: (slave veth55): Enslaving as an active interface with a down link [ 523.036568][T16633] bond51: (slave veth0_to_bond): Releasing active interface [ 523.083487][T16633] bond53: (slave veth0_to_bond): making interface the new active one [ 523.089253][T16633] bond53: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 523.837549][T16653] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 523.983083][T16660] block nbd1: server does not support multiple connections per device. [ 523.983559][T16660] block nbd1: shutting down sockets [ 524.412973][T16674] block nbd1: server does not support multiple connections per device. [ 524.414524][T16674] block nbd1: shutting down sockets [ 524.674970][T16677] netlink: 'syz.2.2636': attribute type 1 has an invalid length. [ 524.964572][T16677] veth57: entered allmulticast mode [ 524.999054][T16677] bond53: (slave veth57): Enslaving as an active interface with a down link [ 525.044651][T16693] bond52: (slave veth0_to_bond): Releasing active interface [ 525.070701][T16677] __nla_validate_parse: 16 callbacks suppressed [ 525.070726][T16677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2636'. [ 525.097158][T16693] bond53: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 525.102859][T16700] block nbd1: server does not support multiple connections per device. [ 525.107589][T16691] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2637'. [ 525.118156][T16700] block nbd1: shutting down sockets [ 525.185618][T16702] netlink: 'syz.6.2640': attribute type 1 has an invalid length. [ 525.422537][T16709] netlink: 'syz.4.2643': attribute type 1 has an invalid length. [ 525.605597][T16721] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2645'. [ 525.608972][T16721] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 525.633694][T16709] 8021q: adding VLAN 0 to HW filter on device bond55 [ 525.639037][T16721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2645'. [ 525.909405][T16731] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 525.962692][T16731] 8021q: adding VLAN 0 to HW filter on device bond56 [ 526.405516][T16747] netlink: 'syz.6.2651': attribute type 1 has an invalid length. [ 526.539467][T16751] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2652'. [ 526.683165][T16756] block nbd1: server does not support multiple connections per device. [ 526.683483][T16756] block nbd1: shutting down sockets [ 526.719053][T16747] veth11: entered allmulticast mode [ 526.788077][T16747] bond6: (slave veth11): Enslaving as an active interface with a down link [ 526.825826][T16749] bond5: (slave veth0_to_bond): Releasing active interface [ 526.880026][T16747] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2651'. [ 526.917146][T16749] bond6: (slave veth0_to_bond): making interface the new active one [ 526.931690][T16749] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 526.978896][T16768] block nbd1: server does not support multiple connections per device. [ 526.979281][T16768] block nbd1: shutting down sockets [ 527.367405][T16781] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2656'. [ 527.395679][T16783] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2658'. [ 527.396748][T16783] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 527.399465][T16783] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2658'. [ 527.554529][T16789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2662'. [ 527.693605][T16789] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 527.743986][T16796] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 527.977624][T16796] 8021q: adding VLAN 0 to HW filter on device bond54 [ 528.049806][T16813] block nbd1: server does not support multiple connections per device. [ 528.061157][T16813] block nbd1: shutting down sockets [ 528.380842][T16824] netlink: 'syz.3.2668': attribute type 1 has an invalid length. [ 528.612326][T16831] veth75: entered allmulticast mode [ 528.633633][T16831] bond57: (slave veth75): Enslaving as an active interface with a down link [ 528.674000][T16824] bond56: (slave veth0_to_bond): Releasing active interface [ 528.713171][T16824] bond57: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 528.777539][ T2228] batadv12: left promiscuous mode [ 529.696547][T16868] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 529.864596][T16868] 8021q: adding VLAN 0 to HW filter on device bond7 [ 530.253915][T16883] netlink: 'syz.2.2683': attribute type 4 has an invalid length. [ 530.268911][T16885] __nla_validate_parse: 6 callbacks suppressed [ 530.268931][T16885] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2682'. [ 530.283287][T16883] netlink: 'syz.2.2683': attribute type 4 has an invalid length. [ 530.336094][T16885] syzkaller1: entered promiscuous mode [ 530.336121][T16885] syzkaller1: entered allmulticast mode [ 530.393927][T16881] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2681'. [ 530.474343][T16893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2686'. [ 530.614785][T16891] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2685'. [ 530.614869][T16891] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2685'. [ 530.614888][T16891] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2685'. [ 530.614955][T16891] netlink: 108 bytes leftover after parsing attributes in process `syz.6.2685'. [ 530.614972][T16891] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2685'. [ 530.616629][T16891] Set syz1 is full, maxelem 65536 reached [ 530.749119][T16905] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 530.851742][T16901] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2687'. [ 530.933532][T16908] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 531.154383][T16908] 8021q: adding VLAN 0 to HW filter on device bond8 [ 531.252473][T16920] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 531.325780][T16918] IPv6: sit2: Disabled Multicast RS [ 531.546415][T16931] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2700'. [ 531.546463][T16931] NCSI netlink: No device for ifindex 0 [ 531.607599][T16935] netlink: 'syz.1.2699': attribute type 11 has an invalid length. [ 532.740710][T16980] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 532.773083][T16977] syzkaller0: entered promiscuous mode [ 532.773112][T16977] syzkaller0: entered allmulticast mode [ 532.816249][T16983] 8021q: adding VLAN 0 to HW filter on device bond55 [ 535.374484][T16970] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 535.423330][T16962] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 536.128943][T16994] netlink: 'syz.6.2712': attribute type 1 has an invalid length. [ 536.273410][T16997] veth13: entered allmulticast mode [ 536.276671][T16997] bond9: (slave veth13): Enslaving as an active interface with a down link [ 536.338484][T17002] bond6: (slave veth0_to_bond): Releasing active interface [ 536.351667][T17002] bond9: (slave veth0_to_bond): making interface the new active one [ 536.352875][T17002] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 536.476656][T16997] macvlan2: entered promiscuous mode [ 536.476682][T16997] macvlan2: entered allmulticast mode [ 536.678637][T17014] __nla_validate_parse: 2 callbacks suppressed [ 536.678658][T17014] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2719'. [ 537.891243][T17049] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.893876][T17049] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.019026][T17049] dummy0: left promiscuous mode [ 538.455633][T17049] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 538.497209][T17049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 538.597832][T17049] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 538.607490][T17049] veth27: left allmulticast mode [ 538.607824][T17049] veth29: left allmulticast mode [ 538.620658][T17049] veth33: left allmulticast mode [ 538.620982][T17049] veth35: left allmulticast mode [ 538.621101][T17049] macvlan2: left promiscuous mode [ 538.621114][T17049] macvlan2: left allmulticast mode [ 538.623571][T17049] macsec1: left allmulticast mode [ 538.624693][T17049] veth43: left allmulticast mode [ 538.627266][T17049] veth47: left allmulticast mode [ 538.629439][T17049] veth49: left allmulticast mode [ 538.689056][T17049] veth51: left allmulticast mode [ 538.703067][T17049] veth53: left allmulticast mode [ 538.722660][T17049] veth55: left allmulticast mode [ 538.918447][T17065] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 539.127067][T17079] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2735'. [ 539.380742][T17087] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2738'. [ 539.425115][T17085] syzkaller1: entered promiscuous mode [ 539.425144][T17085] syzkaller1: entered allmulticast mode [ 540.853716][ T1503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.853741][ T1503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.896933][T17112] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2748'. [ 540.899151][T17106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 540.954673][T17106] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2745'. [ 540.954890][T17106] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2745'. [ 541.089584][ T59] tipc: Subscription rejected, illegal request [ 541.135870][T17121] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2750'. [ 541.136955][T17121] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2750'. [ 541.137329][T17121] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2750'. [ 541.139845][T17121] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2750'. [ 541.838905][T17135] __nla_validate_parse: 4 callbacks suppressed [ 541.838929][T17135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2755'. [ 541.875365][T17135] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 541.924071][T17135] 8021q: adding VLAN 0 to HW filter on device bond54 [ 542.119762][T17143] netlink: 'syz.6.2757': attribute type 1 has an invalid length. [ 542.265304][T17143] 8021q: adding VLAN 0 to HW filter on device bond10 [ 542.303988][T17144] bond10: entered allmulticast mode [ 542.308668][T17144] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2757'. [ 542.348340][T17150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2758'. [ 542.398838][T17148] bond10: (slave ip6gretap1): making interface the new active one [ 542.398894][T17148] ip6gretap1: entered allmulticast mode [ 542.417760][T17148] bond10: (slave ip6gretap1): Enslaving as an active interface with an up link [ 542.434630][T17146] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2759'. [ 542.586581][T17154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2760'. [ 542.803760][T17167] netlink: 108 bytes leftover after parsing attributes in process `syz.6.2762'. [ 542.805190][T17167] netlink: 108 bytes leftover after parsing attributes in process `syz.6.2762'. [ 542.881658][T17166] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2764'. [ 543.473736][T17184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2768'. [ 543.504255][ T1503] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.504472][ T1503] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.504536][ T1503] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.504577][ T1503] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.568960][T17184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2768'. [ 543.791459][T17186] syzkaller0: entered promiscuous mode [ 543.791487][T17186] syzkaller0: entered allmulticast mode [ 544.201086][T17199] netlink: 'syz.6.2773': attribute type 1 has an invalid length. [ 546.996839][T17199] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 547.049469][T17200] veth15: entered allmulticast mode [ 547.189484][T17221] syzkaller0: entered promiscuous mode [ 547.189511][T17221] syzkaller0: entered allmulticast mode [ 547.343913][T17234] __nla_validate_parse: 4 callbacks suppressed [ 547.343953][T17234] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2781'. [ 547.345159][T17234] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 547.402385][T17234] 8021q: adding VLAN 0 to HW filter on device bond11 [ 547.473851][T17228] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2779'. [ 547.531748][T17238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2782'. [ 547.532206][T17238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2782'. [ 547.532524][T17238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2782'. [ 547.532812][T17238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2782'. [ 547.533079][T17238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2782'. [ 547.533495][T17238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2782'. [ 547.533797][T17238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2782'. [ 547.534170][T17238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2782'. [ 548.918928][T17261] netlink: 'syz.4.2791': attribute type 1 has an invalid length. [ 549.145718][T17267] block nbd1: server does not support multiple connections per device. [ 549.146742][T17267] block nbd1: shutting down sockets [ 549.199025][T17263] veth67: entered allmulticast mode [ 549.211191][T17263] bond57: (slave veth67): Enslaving as an active interface with a down link [ 549.248388][T17273] block nbd1: server does not support multiple connections per device. [ 549.249323][T17261] macvlan3: entered promiscuous mode [ 549.249344][T17261] macvlan3: entered allmulticast mode [ 549.273185][T17261] bond57: entered promiscuous mode [ 549.274800][T17261] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 549.274879][T17273] block nbd1: shutting down sockets [ 549.301654][T17261] bond57: left promiscuous mode [ 552.653913][T17291] __nla_validate_parse: 7 callbacks suppressed [ 552.653934][T17291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2799'. [ 552.907375][T17308] block nbd1: server does not support multiple connections per device. [ 552.913800][T17308] block nbd1: shutting down sockets [ 552.963283][T17306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2803'. [ 552.967686][T17301] syzkaller0: entered promiscuous mode [ 552.967782][T17301] syzkaller0: entered allmulticast mode [ 552.991232][T17305] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2804'. [ 553.206452][T17315] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2808'. [ 553.239257][T17318] netlink: 'syz.3.2807': attribute type 1 has an invalid length. [ 553.372112][T17325] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2807'. [ 555.823925][T17318] workqueue: Failed to create a rescuer kthread for wq "bond58": -EINTR [ 555.879859][T17322] veth77: entered allmulticast mode [ 555.940242][ T782] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 555.940756][ T782] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 555.942064][ T782] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 555.942112][ T782] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 556.163532][T17342] netlink: 'syz.2.2812': attribute type 1 has an invalid length. [ 556.329325][T17361] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2812'. [ 556.380456][T17352] 8021q: adding VLAN 0 to HW filter on device bond56 [ 556.384906][T17352] bond55: (slave bond56): making interface the new active one [ 556.385510][T17352] bond55: (slave bond56): Enslaving as an active interface with an up link [ 556.436984][T17355] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2813'. [ 556.467834][T17361] 8021q: adding VLAN 0 to HW filter on device bond55 [ 556.670117][T17372] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2819'. [ 556.828721][T17375] bond45: (slave veth0_to_bond): Releasing active interface [ 556.847686][T17375] bond0: (slave bond_slave_0): Releasing backup interface [ 556.866552][T17375] team0: Port device team_slave_0 removed [ 556.885681][T17375] team0: Port device team_slave_1 removed [ 556.898560][T17375] bond2: (slave gretap2): Releasing backup interface [ 556.917845][T17375] bond3: (slave gretap3): Releasing active interface [ 556.934519][T17375] bond6: (slave veth5): Releasing active interface [ 556.960996][T17375] bond8: (slave veth7): Releasing active interface [ 556.965804][T17379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2822'. [ 556.967230][T17375] bond13: (slave veth21): Releasing active interface [ 556.996224][T17375] bond14: (slave veth23): Releasing active interface [ 557.008783][T17375] bond20: (slave veth25): Releasing active interface [ 557.026882][T17375] bond21: (slave veth31): Releasing active interface [ 557.047217][T17375] bond27: (slave veth33): Releasing active interface [ 557.067727][T17375] bond29: (slave veth39): Releasing active interface [ 557.083629][T17375] bond30: (slave veth43): Releasing active interface [ 557.089559][T17375] bond31: (slave veth45): Releasing active interface [ 557.115215][T17375] bond32: (slave veth47): Releasing active interface [ 557.139306][T17384] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2823'. [ 557.157319][T17375] bond33: (slave veth49): Releasing active interface [ 557.174967][T17375] bond41: (slave veth51): Releasing active interface [ 557.179474][T17375] bond43: (slave veth53): Releasing active interface [ 557.197881][T17375] bond45: (slave veth55): Releasing active interface [ 557.199392][T17375] batman_adv: batadv0: Removing interface: ip6gretap1 [ 557.222151][T17375] bond51: (slave veth59): Releasing active interface [ 557.222177][T17375] bond51: (slave veth59): the permanent HWaddr of slave - 6a:3d:da:47:43:3f - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 557.222209][T17375] batadv9: entered promiscuous mode [ 557.224274][T17375] bond51: (slave batadv9): Releasing active interface [ 557.224307][T17375] batadv9: left promiscuous mode [ 557.226602][T17375] bond52: (slave veth61): Releasing active interface [ 557.226624][T17375] bond52: (slave veth61): the permanent HWaddr of slave - 8a:8f:ba:ec:d0:c0 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 557.228662][T17375] bond52: (slave batadv10): Releasing active interface [ 557.228692][T17375] batadv10: left promiscuous mode [ 557.314763][T17375] bond53: (slave veth63): Releasing active interface [ 557.314789][T17375] bond53: (slave veth63): the permanent HWaddr of slave - 26:40:09:94:c1:6c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 557.316819][T17375] bond53: (slave batadv11): Releasing active interface [ 557.316846][T17375] batadv11: left promiscuous mode [ 557.319449][T17375] bond54: (slave veth65): Releasing active interface [ 557.319470][T17375] bond54: (slave veth65): the permanent HWaddr of slave - fa:42:00:9a:63:8e - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 557.319501][T17375] batadv12: entered promiscuous mode [ 557.390768][T17375] bond54: (slave batadv12): Releasing active interface [ 557.390883][T17375] batadv12: left promiscuous mode [ 557.397498][T17375] bond57: (slave veth67): Releasing active interface [ 558.064015][T17404] block nbd1: server does not support multiple connections per device. [ 558.065398][T17404] block nbd1: shutting down sockets [ 558.181256][T17406] syzkaller0: entered promiscuous mode [ 558.181282][T17406] syzkaller0: entered allmulticast mode [ 558.239614][T17408] __nla_validate_parse: 1 callbacks suppressed [ 558.239638][T17408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2830'. [ 558.330048][T17410] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2831'. [ 558.517885][T17417] netlink: 'syz.6.2833': attribute type 1 has an invalid length. [ 558.565468][T17417] 8021q: adding VLAN 0 to HW filter on device bond12 [ 558.727667][T17417] bond12: (slave veth15): Enslaving as an active interface with a down link [ 558.745270][T17421] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 558.748390][T17421] bond12: (slave batadv1): making interface the new active one [ 558.749683][T17421] batadv1: entered promiscuous mode [ 558.750238][T17421] bond12: (slave batadv1): Enslaving as an active interface with an up link [ 558.751541][T17422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2834'. [ 558.817343][T17417] bond12 (unregistering): (slave veth15): Releasing active interface [ 558.873409][T17417] bond12 (unregistering): (slave batadv1): Releasing active interface [ 558.873444][T17417] batadv1: left promiscuous mode [ 558.898962][T17417] bond12 (unregistering): Released all slaves [ 558.913180][T17432] netlink: 'syz.1.2837': attribute type 1 has an invalid length. [ 559.007855][T17432] 8021q: adding VLAN 0 to HW filter on device bond56 [ 559.017006][T17434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 559.027110][T17434] bond56: (slave batadv0): making interface the new active one [ 559.034848][T17434] bond56: (slave batadv0): Enslaving as an active interface with an up link [ 559.219186][T17449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2840'. [ 559.221330][T17432] bond56: (slave batadv0): Releasing active interface [ 559.249168][T17432] bridge_slave_0: left allmulticast mode [ 559.249196][T17432] bridge_slave_0: left promiscuous mode [ 559.249462][T17432] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.508765][T17455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2840'. [ 559.604196][T17458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2842'. [ 559.741149][T17462] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2841'. [ 559.812554][T17432] bridge_slave_1: left allmulticast mode [ 559.812574][T17432] bridge_slave_1: left promiscuous mode [ 559.812730][T17432] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.844255][T17432] bond53: (slave veth0_to_bond): Releasing active interface [ 559.848089][T17432] team0: Port device team_slave_0 removed [ 559.857919][T17432] team0: Port device team_slave_1 removed [ 559.858598][T17432] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 559.881933][T17432] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 559.887208][T17432] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 559.920817][T17398] Bluetooth: hci5: command 0x0406 tx timeout [ 560.245691][T17477] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2843'. [ 560.662227][T17463] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.662697][T17463] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.165799][T17463] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 561.215524][T17463] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 561.890062][ T2244] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 561.890100][ T2244] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.890140][ T2244] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 561.890168][ T2244] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.890203][ T2244] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 561.890233][ T2244] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.890269][ T2244] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 561.890309][ T2244] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.445144][T17501] syzkaller0: entered promiscuous mode [ 562.445167][T17501] syzkaller0: entered allmulticast mode [ 562.473353][T17504] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2852'. [ 562.505550][T17504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2852'. [ 562.762377][T17512] syzkaller0: entered promiscuous mode [ 562.995153][T17519] syzkaller0: entered promiscuous mode [ 562.995181][T17519] syzkaller0: entered allmulticast mode [ 563.322111][T17532] tipc: Started in network mode [ 563.322167][T17532] tipc: Node identity ac1414aa, cluster identity 4711 [ 563.355130][T17532] tipc: Enabled bearer , priority 26 [ 563.453389][T17537] sctp: [Deprecated]: syz.2.2861 (pid 17537) Use of struct sctp_assoc_value in delayed_ack socket option. [ 563.453389][T17537] Use struct sctp_sack_info instead [ 563.498070][T17536] 0: reclassify loop, rule prio 0, protocol 800 [ 563.547882][T17541] __nla_validate_parse: 2 callbacks suppressed [ 563.547905][T17541] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2863'. [ 563.576978][T17543] netlink: 'syz.2.2865': attribute type 1 has an invalid length. [ 563.862452][T17545] veth59: entered allmulticast mode [ 563.867805][T17545] bond57: (slave veth59): Enslaving as an active interface with a down link [ 563.878292][T17551] bond53: (slave veth0_to_bond): Releasing active interface [ 563.898455][T17551] bond57: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 563.916824][T17552] pim6reg: entered allmulticast mode [ 563.965665][T17555] macvlan3: entered promiscuous mode [ 563.965691][T17555] macvlan3: entered allmulticast mode [ 563.967658][T17555] bond57: entered promiscuous mode [ 563.988218][T17555] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 563.996914][T17555] bond57: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 564.015613][T17555] bond57: left promiscuous mode [ 564.357475][T17558] syzkaller0: entered promiscuous mode [ 564.357501][T17558] syzkaller0: entered allmulticast mode [ 564.377328][ T9] tipc: Node number set to 2886997162 [ 564.387211][T17573] netlink: 'syz.2.2871': attribute type 1 has an invalid length. [ 564.718146][T17591] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2872'. [ 567.096571][T17576] veth61: entered allmulticast mode [ 567.099845][T17576] bond58: (slave veth61): Enslaving as an active interface with a down link [ 567.129584][T17573] bond57: (slave veth0_to_bond): Releasing active interface [ 567.144924][T17573] bond58: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 567.312460][T17608] netlink: 'syz.4.2876': attribute type 1 has an invalid length. [ 567.458837][T17608] 8021q: adding VLAN 0 to HW filter on device bond58 [ 567.618154][T17623] block nbd1: server does not support multiple connections per device. [ 567.618491][T17623] block nbd1: shutting down sockets [ 567.656612][T17609] tipc: Enabled bearer , priority 0 [ 567.705145][T17607] tipc: Disabling bearer [ 567.974831][T17630] erspan0: left allmulticast mode [ 567.974859][T17630] erspan0: left promiscuous mode [ 567.975104][T17630] bridge9: port 1(erspan0) entered disabled state [ 568.046079][T17630] bond7: (slave .`): Releasing active interface [ 568.098159][T17630] .`: (slave team0): Releasing backup interface [ 568.115122][T17630] team0: Port device dummy0 removed [ 568.115681][T17630] bridge_slave_0: left allmulticast mode [ 568.115705][T17630] bridge_slave_0: left promiscuous mode [ 568.116208][T17630] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.135854][T17627] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2882'. [ 568.136057][T17627] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2882'. [ 568.136103][T17627] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2882'. [ 568.136284][T17627] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2882'. [ 568.136326][T17627] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2882'. [ 568.154200][T17630] bridge_slave_1: left allmulticast mode [ 568.154272][T17630] bridge_slave_1: left promiscuous mode [ 568.154869][T17630] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.216491][T17630] bond57: (slave veth0_to_bond): Releasing active interface [ 568.217103][T17639] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2883'. [ 568.245869][T17630] .`: (slave bond_slave_0): Releasing backup interface [ 568.258660][T17630] team0: Port device team_slave_0 removed [ 568.268482][T17630] team0: Port device team_slave_1 removed [ 568.268922][T17630] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 568.534804][T17649] netlink: 'syz.3.2887': attribute type 1 has an invalid length. [ 568.654361][T17653] veth77: entered allmulticast mode [ 568.671224][T17653] bond58: (slave veth77): Enslaving as an active interface with a down link [ 568.691151][T17649] bond58: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 568.779437][T17654] syzkaller0: entered promiscuous mode [ 568.779465][T17654] syzkaller0: entered allmulticast mode [ 568.948291][T17656] syzkaller0: entered promiscuous mode [ 568.948319][T17656] syzkaller0: entered allmulticast mode [ 569.081538][T17662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2891'. [ 570.215775][T17681] block nbd1: server does not support multiple connections per device. [ 570.218956][T17681] block nbd1: shutting down sockets [ 572.546308][T17690] netlink: 'syz.6.2896': attribute type 1 has an invalid length. [ 574.813178][T17690] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 574.892263][T17693] veth17: entered allmulticast mode [ 574.936855][T17696] bond9: (slave veth0_to_bond): Releasing active interface [ 575.169604][T17716] netlink: 'syz.3.2902': attribute type 1 has an invalid length. [ 575.180656][T17704] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2898'. [ 575.180735][T17704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2898'. [ 575.180752][T17704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2898'. [ 575.180816][T17704] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2898'. [ 575.180834][T17704] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2898'. [ 575.382395][T17719] veth79: entered allmulticast mode [ 575.415294][T17719] bond59: (slave veth79): Enslaving as an active interface with a down link [ 575.445910][T17716] bond58: (slave veth0_to_bond): Releasing active interface [ 575.467845][T17719] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2902'. [ 575.486999][T17716] bond59: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 576.047312][T17744] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2908'. [ 576.061238][T17744] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 576.107749][T17749] syzkaller0: entered promiscuous mode [ 576.107776][T17749] syzkaller0: entered allmulticast mode [ 576.142135][T17750] block nbd1: server does not support multiple connections per device. [ 576.142461][T17750] block nbd1: shutting down sockets [ 576.179378][T17749] tc mirred to Houston: device batadv_slave_0 is down [ 576.279025][T17754] netlink: 'syz.4.2911': attribute type 1 has an invalid length. [ 576.455487][T17752] veth69: entered allmulticast mode [ 576.511222][T17752] bond59: (slave veth69): Enslaving as an active interface with a down link [ 576.516906][ T1503] IPVS: starting estimator thread 0... [ 576.560311][T17754] bond59: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 576.600242][T17763] IPVS: using max 27 ests per chain, 64800 per kthread [ 576.624790][T17756] macvlan3: entered promiscuous mode [ 576.624817][T17756] macvlan3: entered allmulticast mode [ 576.627045][T17756] bond59: entered promiscuous mode [ 576.642221][T17756] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 576.648388][ T1503] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 576.648616][T17756] bond59: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 576.663929][T17756] bond59: left promiscuous mode [ 576.732560][T17758] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 576.968739][T17775] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2915'. [ 577.126356][T17780] syzkaller0: entered promiscuous mode [ 577.126382][T17780] syzkaller0: entered allmulticast mode [ 577.148895][T17784] netlink: 'syz.3.2917': attribute type 1 has an invalid length. [ 577.378442][T17787] veth81: entered allmulticast mode [ 577.411184][T17787] bond60: (slave veth81): Enslaving as an active interface with a down link [ 577.415382][T17787] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2917'. [ 577.418052][T17784] bond59: (slave veth0_to_bond): Releasing active interface [ 577.453205][T17784] bond60: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 577.506726][T17796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2921'. [ 577.549475][T17796] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 577.916775][T17806] block nbd1: server does not support multiple connections per device. [ 577.917133][T17806] block nbd1: shutting down sockets [ 579.322422][T17844] syzkaller0: entered promiscuous mode [ 579.322447][T17844] syzkaller0: entered allmulticast mode [ 579.354405][T17843] tc mirred: Loop (syzkaller0:egress --> syzkaller0:egress) [ 579.383567][ T4933] block nbd1: Receive control failed (result -32) [ 579.384174][T17398] block nbd1: Receive control failed (result -32) [ 580.092499][T17874] ip_tables: iptables: counters copy to user failed while replacing table [ 580.308840][T17878] syzkaller0: entered promiscuous mode [ 580.308865][T17878] syzkaller0: entered allmulticast mode [ 581.012594][T17894] __nla_validate_parse: 5 callbacks suppressed [ 581.012619][T17894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2954'. [ 581.158983][T17896] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2955'. [ 581.159054][T17896] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2955'. [ 581.159072][T17896] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2955'. [ 581.159140][T17896] netlink: 108 bytes leftover after parsing attributes in process `syz.6.2955'. [ 581.159157][T17896] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2955'. [ 581.348043][T17900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2957'. [ 581.428162][T17898] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2956'. [ 581.471934][T17905] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2958'. [ 582.146162][T17925] tipc: New replicast peer: 172.20.20.170 [ 582.161381][T17925] tipc: Enabled bearer , priority 26 [ 582.247291][T17929] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2967'. [ 582.326842][T17935] bridge0: port 1(vlan27) entered blocking state [ 582.326922][T17935] bridge0: port 1(vlan27) entered disabled state [ 582.327042][T17935] vlan27: entered allmulticast mode [ 582.327054][T17935] geneve0: entered allmulticast mode [ 583.021864][T17953] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 583.271797][ T6228] tipc: Node number set to 3205728595 [ 583.531526][T17958] syzkaller0: entered promiscuous mode [ 583.531552][T17958] syzkaller0: entered allmulticast mode [ 584.283568][T17976] block nbd2: server does not support multiple connections per device. [ 584.284719][T17976] block nbd2: shutting down sockets [ 584.748577][T17986] netlink: 'syz.1.2987': attribute type 1 has an invalid length. [ 584.853303][T17983] 8021q: adding VLAN 0 to HW filter on device .` [ 584.873897][T17983] 8021q: adding VLAN 0 to HW filter on device team0 [ 585.203332][T17983] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 585.203361][T17983] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 585.245163][T17983] veth0_vlan: left promiscuous mode [ 585.255829][T17983] veth0_vlan: entered promiscuous mode [ 585.258674][T17983] macvlan0: left promiscuous mode [ 585.277579][T17983] veth1_macvtap: left promiscuous mode [ 585.298640][T17983] veth1_macvtap: entered promiscuous mode [ 585.308635][T17983] geneve0: left promiscuous mode [ 585.334617][T17983] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 585.348012][T17983] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 585.360796][T17983] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 585.362644][T17983] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 585.363628][T17983] mac80211_hwsim hwsim9 wlan0: left promiscuous mode [ 585.365982][T17983] 8021q: adding VLAN 0 to HW filter on device bond1 [ 585.369032][T17983] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 585.412812][T17983] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 585.418307][T17983] 8021q: adding VLAN 0 to HW filter on device bond2 [ 585.434327][T17983] 8021q: adding VLAN 0 to HW filter on device bond3 [ 585.436481][T17983] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 585.437681][T17983] 8021q: adding VLAN 0 to HW filter on device bond4 [ 585.462569][T17983] 8021q: adding VLAN 0 to HW filter on device bond5 [ 585.469373][T17983] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 585.471802][T17983] geneve0: entered promiscuous mode [ 585.481344][T17983] 8021q: adding VLAN 0 to HW filter on device bond6 [ 585.503986][T17983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 585.506338][T17983] 8021q: adding VLAN 0 to HW filter on device bond7 [ 585.509150][T17983] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 585.511114][T17983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 585.543887][T17983] 8021q: adding VLAN 0 to HW filter on device batadv6 [ 585.546018][T17983] 8021q: adding VLAN 0 to HW filter on device bond8 [ 585.549124][T17983] 8021q: adding VLAN 0 to HW filter on device batadv7 [ 585.554519][T17983] 8021q: adding VLAN 0 to HW filter on device bond9 [ 585.583385][T17983] 8021q: adding VLAN 0 to HW filter on device batadv8 [ 585.584795][T17983] 8021q: adding VLAN 0 to HW filter on device batadv9 [ 585.588659][T17983] 8021q: adding VLAN 0 to HW filter on device bond10 [ 585.614323][T17983] 8021q: adding VLAN 0 to HW filter on device bond11 [ 585.619398][T17983] 8021q: adding VLAN 0 to HW filter on device bond12 [ 585.639129][T17983] 8021q: adding VLAN 0 to HW filter on device batadv10 [ 585.648811][T17983] 8021q: adding VLAN 0 to HW filter on device bond13 [ 585.665757][T17983] 8021q: adding VLAN 0 to HW filter on device bond14 [ 585.678124][T17983] 8021q: adding VLAN 0 to HW filter on device batadv11 [ 585.685443][T17983] 8021q: adding VLAN 0 to HW filter on device bond15 [ 585.696991][T17983] 8021q: adding VLAN 0 to HW filter on device bond16 [ 585.705000][T17983] 8021q: adding VLAN 0 to HW filter on device bond17 [ 585.714934][T17983] 8021q: adding VLAN 0 to HW filter on device bond18 [ 585.718279][T17983] 8021q: adding VLAN 0 to HW filter on device batadv12 [ 585.719361][T17983] 8021q: adding VLAN 0 to HW filter on device bond19 [ 585.742573][T17983] 8021q: adding VLAN 0 to HW filter on device bond20 [ 585.758083][T17983] 8021q: adding VLAN 0 to HW filter on device bond21 [ 585.774386][T17983] 8021q: adding VLAN 0 to HW filter on device batadv13 [ 585.780364][T17983] 8021q: adding VLAN 0 to HW filter on device bond22 [ 585.803106][T17983] 8021q: adding VLAN 0 to HW filter on device bond23 [ 585.818990][T17983] 8021q: adding VLAN 0 to HW filter on device bond27 [ 585.833764][T17983] 8021q: adding VLAN 0 to HW filter on device bond29 [ 585.853209][T17983] 8021q: adding VLAN 0 to HW filter on device bond31 [ 585.877431][T17983] 8021q: adding VLAN 0 to HW filter on device bond35 [ 585.889407][T17983] bond35: entered promiscuous mode [ 585.896166][T17983] macvlan3: left promiscuous mode [ 585.896548][T17983] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 585.898844][T17983] 8021q: adding VLAN 0 to HW filter on device bond36 [ 585.923892][T17983] bond36: entered promiscuous mode [ 585.924178][T17983] macvlan4: left promiscuous mode [ 585.924552][T17983] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 585.928470][T17983] 8021q: adding VLAN 0 to HW filter on device batadv15 [ 585.964571][T17983] 8021q: adding VLAN 0 to HW filter on device batadv16 [ 585.967002][T17983] 8021q: adding VLAN 0 to HW filter on device bond41 [ 585.991262][T17983] 8021q: adding VLAN 0 to HW filter on device batadv17 [ 586.001081][T17983] 8021q: adding VLAN 0 to HW filter on device bond43 [ 586.008440][T17983] 8021q: adding VLAN 0 to HW filter on device bond44 [ 586.051668][T17983] 8021q: adding VLAN 0 to HW filter on device batadv18 [ 586.105147][T17983] 8021q: adding VLAN 0 to HW filter on device bond52 [ 586.125391][T17983] 8021q: adding VLAN 0 to HW filter on device bond55 [ 586.137631][T17983] 8021q: adding VLAN 0 to HW filter on device bond56 [ 586.148575][T17983] 8021q: adding VLAN 0 to HW filter on device bond57 [ 586.165588][T17983] 8021q: adding VLAN 0 to HW filter on device bond58 [ 586.169289][T17983] 8021q: adding VLAN 0 to HW filter on device bond59 [ 586.187816][T17983] 8021q: adding VLAN 0 to HW filter on device bond60 [ 586.203789][ T1261] bond53: (slave veth67): link status definitely up, 10000 Mbps full duplex [ 586.209368][T17986] workqueue: Failed to create a rescuer kthread for wq "bond57": -EINTR [ 586.423326][ T2228] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 586.423384][ T2228] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.446716][ T2228] bond29: (slave veth33): link status definitely up, 10000 Mbps full duplex [ 586.489329][ T2228] bond29: (slave veth33): making interface the new active one [ 586.536810][ T2228] bond29: active interface up! [ 586.545849][ T1261] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 586.545943][ T1261] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.603637][ T1261] bond41: (slave veth47): link status definitely up, 10000 Mbps full duplex [ 586.603968][ T1261] bond41: (slave veth47): making interface the new active one [ 586.661376][ T1261] bond41: active interface up! [ 586.709675][T13582] gretap1: entered promiscuous mode [ 586.731877][ T1503] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 586.731916][ T1503] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.767758][ T1503] bond31: (slave veth35): link status definitely up, 10000 Mbps full duplex [ 586.768116][ T1503] bond31: (slave veth35): making interface the new active one [ 586.813555][ T1503] bond31: active interface up! [ 586.819545][T18035] block nbd2: server does not support multiple connections per device. [ 586.834750][T18035] block nbd2: shutting down sockets [ 586.935265][T18024] syzkaller0: entered promiscuous mode [ 586.935293][T18024] syzkaller0: entered allmulticast mode [ 586.958507][ T38] bond60: (slave veth81): link status definitely up, 10000 Mbps full duplex [ 586.984845][ T38] bond60: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 586.985727][ T38] bond60: (slave veth81): making interface the new active one [ 587.026227][ T38] bond60: active interface up! [ 587.074659][ T2244] bond23: (slave veth29): link status definitely up, 10000 Mbps full duplex [ 587.074959][ T2244] bond23: (slave veth29): making interface the new active one [ 587.102672][ T2244] bond23: active interface up! [ 587.128046][T18043] __nla_validate_parse: 12 callbacks suppressed [ 587.128069][T18043] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2997'. [ 590.716591][T18046] tipc: Enabling of bearer rejected, failed to enable media [ 590.933913][ T1503] bond50: (slave veth61): link status definitely up, 10000 Mbps full duplex [ 590.938640][T18074] netlink: 'syz.6.3001': attribute type 1 has an invalid length. [ 590.969191][ T1261] bond22: (slave veth27): link status definitely up, 10000 Mbps full duplex [ 590.983088][ T1261] bond22: (slave veth27): making interface the new active one [ 590.986562][ T1261] bond22: active interface up! [ 591.129240][T18074] bond12: entered promiscuous mode [ 591.129665][T18074] 8021q: adding VLAN 0 to HW filter on device bond12 [ 591.166130][T18082] netlink: 'syz.1.3004': attribute type 1 has an invalid length. [ 591.169052][T18083] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3003'. [ 591.208916][T18078] veth17: entered allmulticast mode [ 591.221470][T18078] bond12: (slave veth17): making interface the new active one [ 591.221497][T18078] veth17: entered promiscuous mode [ 591.231509][T18086] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3003'. [ 591.269510][T18078] bond12: (slave veth17): Enslaving as an active interface with an up link [ 591.313875][ T1503] bond44: (slave veth53): link status definitely up, 10000 Mbps full duplex [ 591.314331][ T1503] bond44: (slave veth53): making interface the new active one [ 591.343437][ T1503] bond44: active interface up! [ 591.395719][T18092] block nbd2: server does not support multiple connections per device. [ 591.396043][T18092] block nbd2: shutting down sockets [ 591.456710][T18082] 8021q: adding VLAN 0 to HW filter on device bond57 [ 591.492672][T18085] bond57: (slave veth57): Enslaving as an active interface with a down link [ 591.530650][T18088] 8021q: adding VLAN 0 to HW filter on device batadv13 [ 591.538621][T18088] bond57: (slave batadv13): making interface the new active one [ 591.550022][T18088] batadv13: entered promiscuous mode [ 591.557179][T18088] bond57: (slave batadv13): Enslaving as an active interface with an up link [ 591.615895][T18096] bond57 (unregistering): (slave veth57): Releasing active interface [ 591.634945][T18096] bond57 (unregistering): (slave batadv13): Releasing active interface [ 591.634976][T18096] batadv13: left promiscuous mode [ 591.638681][T18096] bond57 (unregistering): Released all slaves [ 591.819239][ T2228] bond59: (slave veth79): link status definitely up, 10000 Mbps full duplex [ 591.819727][ T2228] bond59: (slave veth79): making interface the new active one [ 591.873160][ T2228] bond59: active interface up! [ 591.901447][ T13] bond58: (slave veth77): link status definitely up, 10000 Mbps full duplex [ 591.902896][ T13] bond58: (slave veth77): making interface the new active one [ 591.904304][ T13] bond58: active interface up! [ 591.956767][ T59] bond27: (slave veth31): link status definitely up, 10000 Mbps full duplex [ 591.957706][ T59] bond27: (slave veth31): making interface the new active one [ 591.959245][ T59] bond27: active interface up! [ 592.217592][T18119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3008'. [ 592.236220][ T2244] bond54: (slave veth69): link status definitely up, 10000 Mbps full duplex [ 592.300302][T18108] syzkaller0: entered promiscuous mode [ 592.300327][T18108] syzkaller0: entered allmulticast mode [ 592.400530][ T1261] bond48: (slave veth57): link status definitely up, 10000 Mbps full duplex [ 592.420577][T18120] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3007'. [ 592.671110][T18113] syzkaller0: entered promiscuous mode [ 592.671137][T18113] syzkaller0: entered allmulticast mode [ 593.078097][ T1100] bond43: (slave veth51): link status definitely up, 10000 Mbps full duplex [ 593.078429][ T1100] bond43: (slave veth51): making interface the new active one [ 593.081430][ T1100] bond43: active interface up! [ 593.899776][T18154] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3014'. [ 596.696713][T18127] Set syz1 is full, maxelem 65536 reached [ 597.476974][ T5278] veth1_vlan: left promiscuous mode [ 597.559316][ T1503] bond35: (slave veth39): link status definitely up, 10000 Mbps full duplex [ 597.559621][ T1503] bond35: (slave veth39): making interface the new active one [ 597.559641][ T1503] veth39: entered promiscuous mode [ 597.616413][ T1503] bond35: active interface up! [ 597.705241][ T38] bond51: (slave veth63): link status definitely up, 10000 Mbps full duplex [ 597.757245][T18163] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3016'. [ 597.773186][T18165] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3018'. [ 597.775851][T18163] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 597.810571][T18163] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3016'. [ 597.850806][T18165] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3018'. [ 597.852327][T18169] netlink: 'syz.3.3017': attribute type 3 has an invalid length. [ 597.891572][ T38] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 597.891607][ T38] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.966753][ T38] bond21: (slave veth25): link status definitely up, 10000 Mbps full duplex [ 597.985525][T18173] block nbd2: server does not support multiple connections per device. [ 597.986497][T18173] block nbd2: shutting down sockets [ 598.020797][ T38] bond21: (slave veth25): making interface the new active one [ 598.043123][ T38] bond21: active interface up! [ 598.106603][ T1261] bond52: (slave veth65): link status definitely up, 10000 Mbps full duplex [ 598.163926][ T1261] bond52: (slave veth65): making interface the new active one [ 598.226839][ T1261] bond52: active interface up! [ 598.427118][T18190] xt_IDLETIMER: timeout value is zero [ 599.355449][T18219] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3026'. [ 601.463622][T18199] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3023'. [ 601.612908][ T2228] bond34: (slave veth37): link status definitely up, 10000 Mbps full duplex [ 601.643392][ T1503] bond14: (slave veth23): link status definitely up, 10000 Mbps full duplex [ 601.643683][ T1503] bond14: (slave veth23): making interface the new active one [ 601.714860][ T1503] bond14: active interface up! [ 602.219729][T18249] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 602.237214][T18249] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3031'. [ 602.594600][T18253] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3032'. [ 602.652286][T18254] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3032'. [ 602.904830][T18234] mac80211_hwsim hwsim9 wlan0: left allmulticast mode [ 602.945392][T18234] veth5: left allmulticast mode [ 602.957878][T18234] veth7: left allmulticast mode [ 602.983093][T18234] veth11: left allmulticast mode [ 602.989438][T18234] gretap1: left promiscuous mode [ 603.017290][T18234] veth17: left allmulticast mode [ 603.035395][T18234] veth19: left allmulticast mode [ 603.047000][T18234] veth21: left allmulticast mode [ 603.055895][T18234] veth23: left allmulticast mode [ 603.097917][T18234] veth25: left allmulticast mode [ 603.109740][T18234] veth27: left allmulticast mode [ 603.126793][T18234] veth29: left allmulticast mode [ 603.149651][T18234] veth31: left allmulticast mode [ 603.163895][T18234] veth33: left allmulticast mode [ 603.178193][T18234] vlan16: left allmulticast mode [ 603.178211][T18234] bridge9: left allmulticast mode [ 603.197612][T18234] veth35: left allmulticast mode [ 603.223739][T18234] veth39: left allmulticast mode [ 603.224720][T18234] bond35: left promiscuous mode [ 603.224735][T18234] veth39: left promiscuous mode [ 603.225077][T18234] macvlan3: left allmulticast mode [ 603.251615][T18234] veth41: left allmulticast mode [ 603.252860][T18234] bond36: left promiscuous mode [ 603.253069][T18234] macvlan4: left allmulticast mode [ 603.308352][T18234] veth47: left allmulticast mode [ 603.326843][T18234] veth51: left allmulticast mode [ 603.337220][T18234] veth53: left allmulticast mode [ 603.394030][T18234] veth65: left allmulticast mode [ 603.419045][T18234] veth71: left allmulticast mode [ 603.432119][T18234] veth73: left allmulticast mode [ 603.438995][T18234] veth75: left allmulticast mode [ 603.464237][T18234] veth77: left allmulticast mode [ 603.468393][T18234] veth79: left allmulticast mode [ 603.481851][T18234] veth81: left allmulticast mode [ 603.494965][ T1100] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 603.495002][ T1100] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.495047][ T1100] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 603.495076][ T1100] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.495116][ T1100] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 603.495145][ T1100] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.633130][ T38] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 603.633172][ T38] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.793957][T18264] block nbd2: server does not support multiple connections per device. [ 603.795196][T18264] block nbd2: shutting down sockets [ 603.827183][T18269] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3037'. [ 603.898178][T18272] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3038'. [ 604.026114][T18272] 8021q: adding VLAN 0 to HW filter on device bond60 [ 604.109717][T18276] bridge26: entered promiscuous mode [ 604.147835][T18276] bond60: (slave bridge26): Enslaving as an active interface with an up link [ 604.148994][T18278] syzkaller0: entered promiscuous mode [ 604.149016][T18278] syzkaller0: entered allmulticast mode [ 604.176512][T18270] tipc: Enabled bearer , priority 0 [ 604.201444][T18270] tipc: Resetting bearer [ 604.225387][T18266] tipc: Resetting bearer [ 604.732354][T18266] tipc: Disabling bearer [ 604.909130][T18296] syzkaller1: entered promiscuous mode [ 604.909157][T18296] syzkaller1: entered allmulticast mode [ 605.232938][T18308] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 605.263096][T18303] 8021q: adding VLAN 0 to HW filter on device team0 [ 605.293142][T18305] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3044'. [ 605.295457][T18306] tipc: Enabled bearer , priority 0 [ 605.303658][T18310] syzkaller0: entered promiscuous mode [ 605.303711][T18310] syzkaller0: entered allmulticast mode [ 605.330897][T18308] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3045'. [ 605.368956][T18302] tipc: Resetting bearer [ 605.402093][T18301] tipc: Resetting bearer [ 605.445766][T18314] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3046'. [ 605.492050][T18301] tipc: Disabling bearer [ 605.508697][T18314] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3046'. [ 605.744959][T18318] Set syz1 is full, maxelem 65536 reached [ 605.863519][T18329] syzkaller0: entered promiscuous mode [ 605.863544][T18329] syzkaller0: entered allmulticast mode [ 606.138036][T18332] tipc: Started in network mode [ 606.138082][T18332] tipc: Node identity 7e5612df634d, cluster identity 4711 [ 606.153877][T18332] tipc: Enabled bearer , priority 0 [ 606.168333][T18328] tipc: Resetting bearer [ 606.212303][T18328] tipc: Disabling bearer [ 607.013930][T18358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3058'. [ 607.044323][T18358] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 607.047114][T18358] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3058'. [ 607.083963][ T6227] lo speed is unknown, defaulting to 1000 [ 607.125217][T18355] batman_adv: batadv0: Adding interface: macvtap1 [ 607.125255][T18355] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 607.125285][T18355] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 607.185489][T18359] batman_adv: batadv0: Removing interface: macvtap1 [ 607.290832][T18363] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3059'. [ 607.361072][T18370] netlink: 'syz.4.3060': attribute type 7 has an invalid length. [ 607.388908][T18372] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3061'. [ 607.581813][T18378] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 607.927339][T18386] netlink: ct family unspecified [ 607.927376][T18386] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 608.184470][T18396] syzkaller0: entered promiscuous mode [ 608.184494][T18396] syzkaller0: entered allmulticast mode [ 608.243382][T18403] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 608.418470][T18408] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 608.604859][T18411] netlink: 'syz.1.3073': attribute type 1 has an invalid length. [ 608.644637][T18411] 8021q: adding VLAN 0 to HW filter on device bond57 [ 608.713256][T18411] bond57: (slave veth59): Enslaving as an active interface with a down link [ 608.733488][T18415] 8021q: adding VLAN 0 to HW filter on device batadv14 [ 608.736562][T18415] bond57: (slave batadv14): making interface the new active one [ 608.737874][T18415] batadv14: entered promiscuous mode [ 608.738318][T18415] bond57: (slave batadv14): Enslaving as an active interface with an up link [ 608.824454][T18390] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 608.824483][T18390] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 608.906482][T18390] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 608.906505][T18390] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 608.955349][T18390] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 608.955374][T18390] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 609.066118][T18390] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 609.066144][T18390] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 609.068445][T18419] __nla_validate_parse: 6 callbacks suppressed [ 609.068464][T18419] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3074'. [ 609.165260][T18390] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 609.165287][T18390] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 609.212375][T18423] x_tables: duplicate underflow at hook 1 [ 609.267771][T18390] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 609.267797][T18390] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 609.344086][T18425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 609.520195][T18431] batman_adv: batadv0: Adding interface: macvtap1 [ 609.521837][T18431] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 609.521872][T18431] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 609.671686][ T32] INFO: task syz.5.2081:147 ** replaying previous printk message ** [ 609.671686][ T32] INFO: task syz.5.2081:14772 blocked for more than 143 seconds. [ 609.671714][ T32] Not tainted syzkaller #0 [ 609.671727][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 609.671744][ T32] task:syz.5.2081 state:D stack:27200 pid:14772 tgid:14762 ppid:13755 task_flags:0x400040 flags:0x00080002 [ 609.671834][ T32] Call Trace: [ 609.671847][ T32] [ 609.671862][ T32] __schedule+0x17db/0x58f0 [ 609.671924][ T32] ? __pfx___schedule+0x10/0x10 [ 609.671959][ T32] ? schedule+0x90/0x2b0 [ 609.671986][ T32] schedule+0x164/0x2b0 [ 609.672043][ T32] schedule_preempt_disabled+0x13/0x30 [ 609.672068][ T32] __mutex_lock+0x7c1/0x1550 [ 609.672100][ T32] ? __mutex_lock+0x5d4/0x1550 [ 609.672131][ T32] ? nfsd_nl_listener_get_doit+0x104/0x610 [ 609.672192][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 609.672229][ T32] ? __nlmsg_put+0xef/0x1b0 [ 609.672265][ T32] ? genlmsg_put+0x137/0x2e0 [ 609.672296][ T32] nfsd_nl_listener_get_doit+0x104/0x610 [ 609.672337][ T32] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 609.672365][ T32] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 609.672402][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 609.672439][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 609.672479][ T32] ? __dev_queue_xmit+0x29b/0x3820 [ 609.672524][ T32] genl_rcv_msg+0x614/0x7a0 [ 609.672558][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 609.672584][ T32] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 609.672631][ T32] netlink_rcv_skb+0x226/0x4a0 [ 609.672666][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 609.672695][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 609.672746][ T32] ? down_read+0x2be/0x330 [ 609.672779][ T32] genl_rcv+0x28/0x40 [ 609.672804][ T32] netlink_unicast+0x7bd/0x940 [ 609.672847][ T32] netlink_sendmsg+0x813/0xb40 [ 609.672894][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 609.672949][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 609.673003][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 609.673039][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 609.673080][ T32] ____sys_sendmsg+0x54e/0x850 [ 609.673117][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 609.673158][ T32] ? import_iovec+0x73/0xa0 [ 609.673191][ T32] ___sys_sendmsg+0x2a5/0x360 [ 609.673220][ T32] ? __lock_acquire+0x747/0x2de0 [ 609.673250][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 609.673285][ T32] ? futex_wait+0x2a2/0x390 [ 609.673381][ T32] ? __fget_files+0x2a/0x420 [ 609.673414][ T32] ? __fget_files+0x3a2/0x420 [ 609.673459][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 609.673493][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 609.673548][ T32] do_syscall_64+0x166/0x520 [ 609.673573][ T32] ? trace_irq_disable+0x3b/0x140 [ 609.673596][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.673620][ T32] ? clear_bhb_loop+0x70/0xc0 [ 609.673650][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.673674][ T32] RIP: 0033:0x7f856c59e159 [ 609.673695][ T32] RSP: 002b:00007f856d4d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 609.673720][ T32] RAX: ffffffffffffffda RBX: 00007f856c826180 RCX: 00007f856c59e159 [ 609.673738][ T32] RDX: 0000000000000004 RSI: 0000200000000100 RDI: 000000000000000b [ 609.673753][ T32] RBP: 00007f856c63506b R08: 0000000000000000 R09: 0000000000000000 [ 609.673768][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 609.673783][ T32] R13: 00007f856c826218 R14: 00007f856c826180 R15: 00007ffff0c55fd8 [ 609.673821][ T32] [ 609.673883][ T32] [ 609.673883][ T32] Showing all locks held in the system: [ 609.673897][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 609.673915][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 609.673996][ T32] locks held by getty/5373: 2, on CPU#1: [ 609.674012][ T32] #0: ffff88803480b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 609.674080][ T32] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 609.674166][ T32] locks held by syz.0.1673/13483: 2, on CPU#0: [ 609.674183][ T32] #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 609.674239][ T32] #1: ffffffff8f09f500 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 609.674306][ T32] locks held by syz.5.2081/14772: 2, on CPU#1: [ 609.674322][ T32] #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 609.674383][ T32] #1: ffffffff8f09f500 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x104/0x610 [ 609.674452][ T32] locks held by syz.3.3077/18431: 4, on CPU#0: [ 609.674468][ T32] #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 609.674522][ T32] #1: ffffffff90252520 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5e/0x890 [ 609.674580][ T32] #2: ffff8880277107a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: nl80211_del_interface+0x11d/0x140 [ 609.674844][ T32] #3: ffffffff8ed62c68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 609.674910][ T32] locks held by syz.3.3077/18436: 2, on CPU#0: [ 609.674927][ T32] #0: ffff88805567d6e8 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 609.674993][ T32] #1: ffffffff90252520 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 609.675052][ T32] locks held by syz.4.3076/18430: 2, on CPU#0: [ 609.675068][ T32] #0: ffffffff90255dc0 (bpf_dispatcher_xdp.mutex){+.+.}-{4:4}, at: bpf_dispatcher_change_prog+0xc2/0xf20 [ 609.675127][ T32] #1: ffffffff8ed62c68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 609.675191][ T32] locks held by syz.6.3078/18433: 2, last CPU#1: [ 609.675207][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: bpf_test_timer_enter+0xf9/0x260 [ 609.675275][ T32] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 609.675344][ T32] locks held by syz.2.3079/18438: 1, last CPU#0: [ 609.675360][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: path_init+0x124/0x1330 [ 609.675426][ T32] [ 609.675432][ T32] ============================================= [ 609.675432][ T32] [ 609.675451][ T32] NMI backtrace for cpu 0 [ 609.675470][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 609.675495][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 609.675509][ T32] Call Trace: [ 609.675518][ T32] [ 609.675527][ T32] dump_stack_lvl+0xe8/0x150 [ 609.675562][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 609.675596][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 609.675634][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 609.675671][ T32] sys_info+0x135/0x170 [ 609.675700][ T32] watchdog+0xfd7/0x1030 [ 609.675731][ T32] ? watchdog+0x1c7/0x1030 [ 609.675762][ T32] kthread+0x38b/0x480 [ 609.675786][ T32] ? __pfx_watchdog+0x10/0x10 [ 609.675810][ T32] ? __pfx_kthread+0x10/0x10 [ 609.675835][ T32] ret_from_fork+0x514/0xb70 [ 609.675861][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 609.675898][ T32] ? __switch_to+0xc89/0x1420 [ 609.675934][ T32] ? __pfx_kthread+0x10/0x10 [ 609.675958][ T32] ret_from_fork_asm+0x1a/0x30 [ 609.676011][ T32] [ 609.676058][ T32] Sending NMI from CPU 0 to CPUs 1: [ 609.676140][ C1] NMI backtrace for cpu 1 [ 609.676155][ C1] CPU: 1 UID: 0 PID: 18433 Comm: syz.6.3078 Not tainted syzkaller #0 PREEMPT(full) [ 609.676177][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 609.676188][ C1] RIP: 0010:__lock_acquire+0xbaf/0x2de0 [ 609.676210][ C1] Code: 00 75 27 90 e8 42 f3 37 03 85 c0 74 1c 83 3d 3b 2b d7 0e 00 75 13 48 8d 3d 1e 34 da 0e 48 c7 c6 65 e9 59 8e 67 48 0f b9 3a 90 <48> bb eb 83 b5 80 46 86 c8 61 48 0f af dd 48 c1 eb 2d 48 8b 04 dd [ 609.676228][ C1] RSP: 0018:ffffc90006e0ea20 EFLAGS: 00000007 [ 609.676244][ C1] RAX: 0000000000000522 RBX: 000000002897ed03 RCX: 0000000000040000 [ 609.676258][ C1] RDX: 000000004cfe2981 RSI: 000000004a065faf RDI: ffff88801254ddc0 [ 609.676272][ C1] RBP: 17a654cc2897ed03 R08: ffffffff8a0041f2 R09: 0000000000000001 [ 609.676286][ C1] R10: dffffc0000000000 R11: fffffbfff20f4650 R12: 0000000000004000 [ 609.676299][ C1] R13: ffff88801254e9e8 R14: ffff88801254e9e8 R15: 0000000000000003 [ 609.676313][ C1] FS: 00007ffa2d4e26c0(0000) GS:ffff888124dd1000(0000) knlGS:0000000000000000 [ 609.676330][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 609.676344][ C1] CR2: 00007f8b2f5d4ff8 CR3: 00000000534d2000 CR4: 00000000003526f0 [ 609.676364][ C1] Call Trace: [ 609.676370][ C1] [ 609.676384][ C1] ? __nf_conncount_add+0x1762/0x1ad0 [ 609.676415][ C1] lock_acquire+0x115/0x350 [ 609.676433][ C1] ? __nf_conntrack_find_get+0x122/0x1200 [ 609.676461][ C1] ? rcu_is_watching+0x16/0xb0 [ 609.676482][ C1] ? __nf_conntrack_find_get+0x122/0x1200 [ 609.676505][ C1] seqcount_lockdep_reader_access+0x92/0x100 [ 609.676529][ C1] ? __nf_conntrack_find_get+0x122/0x1200 [ 609.676551][ C1] __nf_conntrack_find_get+0x122/0x1200 [ 609.676575][ C1] ? nft_connlimit_eval+0x216/0x2f0 [ 609.676613][ C1] ? __pfx_nf_ct_get_tuple+0x10/0x10 [ 609.676636][ C1] ? __pfx___nf_conntrack_find_get+0x10/0x10 [ 609.676659][ C1] ? __siphash_unaligned+0x25c/0x3e0 [ 609.676684][ C1] nf_conntrack_in+0x675/0x1600 [ 609.676718][ C1] ? __pfx_nf_conntrack_in+0x10/0x10 [ 609.676746][ C1] ? ipt_do_table+0x2b9/0x15d0 [ 609.676771][ C1] ? nf_nat_ipv4_pre_routing+0x230/0x3a0 [ 609.676799][ C1] ? ipv4_conntrack_defrag+0x2a0/0x5b0 [ 609.676835][ C1] ? ip_sabotage_in+0x57/0x270 [ 609.676861][ C1] ? __pfx_ipv4_conntrack_in+0x10/0x10 [ 609.676884][ C1] nf_hook_slow+0xc5/0x220 [ 609.676905][ C1] nf_hook_slow_list+0x1d0/0x3a0 [ 609.676927][ C1] ? __pfx_nf_hook_slow_list+0x10/0x10 [ 609.676951][ C1] ip_sublist_rcv+0x959/0xa70 [ 609.676976][ C1] ? __netif_receive_skb_core+0x2a10/0x30c0 [ 609.676995][ C1] ? ip_sublist_rcv+0x7d1/0xa70 [ 609.677020][ C1] ? __pfx_ip_sublist_rcv+0x10/0x10 [ 609.677045][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 609.677067][ C1] ? ip_rcv_core+0x88d/0xd50 [ 609.677093][ C1] ip_list_rcv+0x3ec/0x440 [ 609.677120][ C1] ? __pfx_ip_list_rcv+0x10/0x10 [ 609.677143][ C1] ? kasan_save_track+0x4f/0x80 [ 609.677162][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 609.677181][ C1] ? kmem_cache_alloc_bulk_noprof+0x4a4/0x7b0 [ 609.677203][ C1] ? bpf_test_run_xdp_live+0x16e9/0x1c20 [ 609.677230][ C1] ? bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 609.677256][ C1] ? __pfx_ip_list_rcv+0x10/0x10 [ 609.677279][ C1] __netif_receive_skb_list_core+0x804/0x830 [ 609.677305][ C1] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 609.677332][ C1] netif_receive_skb_list_internal+0x995/0xcf0 [ 609.677365][ C1] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 609.677394][ C1] ? eth_type_trans+0x352/0x800 [ 609.677423][ C1] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 609.677458][ C1] ? __xdp_build_skb_from_frame+0x324/0x6a0 [ 609.677488][ C1] netif_receive_skb_list+0x67/0x480 [ 609.677516][ C1] ? bpf_test_run_xdp_live+0x185a/0x1c20 [ 609.677546][ C1] bpf_test_run_xdp_live+0x1875/0x1c20 [ 609.677580][ C1] ? bpf_test_run_xdp_live+0x43e/0x1c20 [ 609.677612][ C1] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 609.677640][ C1] ? 0xffffffffa0404540 [ 609.677690][ C1] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 609.677726][ C1] ? _copy_from_user+0x94/0xb0 [ 609.677753][ C1] ? bpf_test_init+0x113/0x150 [ 609.677778][ C1] ? xdp_convert_md_to_buff+0x5b/0x330 [ 609.677808][ C1] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 609.677849][ C1] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 609.677879][ C1] ? __fget_files+0x2a/0x420 [ 609.677906][ C1] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 609.677933][ C1] bpf_prog_test_run+0x2c5/0x340 [ 609.677956][ C1] __sys_bpf+0xa22/0xd90 [ 609.677979][ C1] ? __pfx___sys_bpf+0x10/0x10 [ 609.678000][ C1] ? do_futex+0x3e7/0x4e0 [ 609.678036][ C1] ? rcu_is_watching+0x16/0xb0 [ 609.678079][ C1] __x64_sys_bpf+0xba/0xd0 [ 609.678098][ C1] do_syscall_64+0x166/0x520 [ 609.678117][ C1] ? trace_irq_disable+0x3b/0x140 [ 609.678136][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.678155][ C1] ? clear_bhb_loop+0x70/0xc0 [ 609.678178][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.678196][ C1] RIP: 0033:0x7ffa2c59e159 [ 609.678234][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 609.678250][ C1] RSP: 002b:00007ffa2d4e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 609.678269][ C1] RAX: ffffffffffffffda RBX: 00007ffa2c825fa0 RCX: 00007ffa2c59e159 [ 609.678284][ C1] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 609.678296][ C1] RBP: 00007ffa2c63506b R08: 0000000000000000 R09: 0000000000000000 [ 609.678308][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 609.678320][ C1] R13: 00007ffa2c826038 R14: 00007ffa2c825fa0 R15: 00007ffe1a1e5838 [ 609.678343][ C1] [ 609.687495][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 610.948439][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 610.957575][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 610.967654][ T32] Call Trace: [ 610.970962][ T32] [ 610.973912][ T32] vpanic+0x56d/0xa60 [ 610.977931][ T32] ? __pfx___schedule+0x10/0x10 [ 610.982807][ T32] ? __pfx_vpanic+0x10/0x10 [ 610.987364][ T32] panic+0xc5/0xd0 [ 610.991122][ T32] ? __pfx_panic+0x10/0x10 [ 610.995569][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 611.001147][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 611.006557][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 611.012768][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 611.018967][ T32] watchdog+0x1030/0x1030 [ 611.023329][ T32] ? watchdog+0x1c7/0x1030 [ 611.027785][ T32] kthread+0x38b/0x480 [ 611.031888][ T32] ? __pfx_watchdog+0x10/0x10 [ 611.036604][ T32] ? __pfx_kthread+0x10/0x10 [ 611.041233][ T32] ret_from_fork+0x514/0xb70 [ 611.045960][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 611.051120][ T32] ? __switch_to+0xc89/0x1420 [ 611.055841][ T32] ? __pfx_kthread+0x10/0x10 [ 611.060460][ T32] ret_from_fork_asm+0x1a/0x30 [ 611.065371][ T32] [ 611.069030][ T32] Kernel Offset: disabled [ 611.073373][ T32] Rebooting in 86400 seconds..