last executing test programs: 20m44.671904839s ago: executing program 2 (id=2485): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="e390bc69f223a0d1c7792cbd7000fddbdf8925d5ee2585adaf7d0832cb30a959618bdf694be842ef9161c5bda173f1cadeceae226bc9e13a101e0241a07dd958b975c9f6a6bf54f8587d8324b507e3505a78434d97e4d9bfa92e01d4ae0598a7bdbf6da3661699d18c67cf0a4e62be291a8e8ecf441c596cfbd000ea7bbb40"], 0x18}, 0x1, 0x0, 0x0, 0x20000005}, 0x40000) 20m44.324046814s ago: executing program 2 (id=2490): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth0_to_batadv\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x4a}}) 20m43.880956629s ago: executing program 2 (id=2495): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x10, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b4000000000000007910480000000000710419000000000095000000"], &(0x7f0000000400)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000440)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0), 0x200002, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000002c0)='cgroup.events\x00', 0x275a, 0xfffe) preadv(r2, &(0x7f0000000300), 0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x0, 0xa, 0x0, 0x0, 0x2, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x3, 0x0, 0xdad1124f55525050, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x27}, 0x94) 20m43.443468758s ago: executing program 2 (id=2501): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @empty}, 0x1, 0x0, 0xff, 0x7, 0x6, 0xffff}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000048c0)=@delqdisc={0x1c8, 0x25, 0x200, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x2}, {0xffe0, 0x3}, {0x10, 0x6a91a7fa4e062d33}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x1c, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x9}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x1}, @TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x3}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7fff}, @TCA_STAB={0x178, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x10, 0x1, 0x1, 0x7fffffff, 0x2, 0x3, 0x7, 0x5}}, {0xe, 0x2, [0x7, 0x1, 0x60, 0x43, 0x4107]}}, {{0x1c, 0x1, {0x0, 0x5, 0x8, 0x0, 0x0, 0x6, 0x80, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x7, 0x2, 0x7a57, 0x29, 0x1, 0x6, 0x5, 0x3}}, {0xa, 0x2, [0x9, 0x1000, 0x2]}}, {{0x1c, 0x1, {0x1, 0x7, 0x8, 0x3, 0x0, 0xffffffff, 0x4, 0x1}}, {0x6, 0x2, [0x8]}}, {{0x1c, 0x1, {0x12, 0x4, 0xfff, 0x200, 0x0, 0x7, 0x0, 0x7}}, {0x12, 0x2, [0x1, 0x7, 0x0, 0xe47, 0x4, 0x8b33, 0x1]}}, {{0x1c, 0x1, {0xd2, 0x8, 0x8, 0xc640, 0x2, 0x200, 0xffff, 0x5}}, {0xe, 0x2, [0xd218, 0x8, 0xc46, 0x0, 0x3]}}, {{0x1c, 0x1, {0x1, 0x4, 0x1, 0x5, 0x1, 0x6, 0x3, 0x5}}, {0xe, 0x2, [0x8, 0x4, 0x51, 0xabf, 0xfffd]}}, {{0x1c, 0x1, {0x7f, 0x4, 0xfff7, 0x715, 0x2, 0xa, 0x10001, 0x1}}, {0x6, 0x2, [0x81a6]}}, {{0x1c, 0x1, {0xb7, 0xf5, 0x8, 0x9, 0x1, 0x4, 0x5, 0x6}}, {0x10, 0x2, [0x0, 0x2, 0x400, 0xe8, 0x3, 0x3]}}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x15, 0x3, 0x8000) setsockopt$packet_int(r2, 0x107, 0xc68074279669d0ee, &(0x7f0000000080), 0x4) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 20m42.636125395s ago: executing program 2 (id=2506): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="7a0af8ff000000007a0af0ff000000007a0ae8ff000000007a0ae0ff000000007a0ad8ff000000007a0ad0ff000000007a0ac8ff000000007a0ac0ff00000000bfa100000000000007010000d8ffffffbfa200000000000007020000c0ffffff85000000cf000000b70000000200000095"], &(0x7f00000002c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x0, 0xe, 0x0, &(0x7f0000000380)="b9e20300600d0600fb9e34f086f8", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000100000085200000bb4d030095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='devices.list\x00', 0x26e1, 0x0) close(r1) sendmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x80) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc}, 0xc) r2 = socket$inet(0x2, 0x3, 0x1) setsockopt$sock_int(r2, 0x1, 0x5, &(0x7f00000003c0)=0x6, 0x4) sendmsg$inet(r2, &(0x7f0000000400)={&(0x7f0000000540)={0x2, 0xffff, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20008024) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x0, 0x3, 0xfffffff7, 0x10486, 0x1, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x8, @void, @value, @value=r1}, 0x50) 20m42.521671738s ago: executing program 2 (id=2509): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$key(0xf, 0x3, 0x2) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0b000000070000000f0000000900000005"], 0x50) bpf$MAP_LOOKUP_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180), 0xfffffff7, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, r2}, 0x38) (async) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x50}, 0x1, 0x7}, 0x40000) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x403, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0x235, 0x2881}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000080}, 0x4004800) 20m27.371238607s ago: executing program 32 (id=2509): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$key(0xf, 0x3, 0x2) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0b000000070000000f0000000900000005"], 0x50) bpf$MAP_LOOKUP_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180), 0xfffffff7, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, r2}, 0x38) (async) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x50}, 0x1, 0x7}, 0x40000) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x403, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0x235, 0x2881}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000080}, 0x4004800) 10m30.398329162s ago: executing program 0 (id=5897): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000034000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x52895}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x4}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_IOC_EXPIRE(r4, 0x810c9365, &(0x7f00000002c0)={{0x5, 0x10}, 0x100, './file0\x00'}) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x38, r6, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}]}, 0x38}}, 0x0) sendmsg$nl_xfrm(r4, 0x0, 0x0) syz_emit_ethernet(0x96, &(0x7f0000000180)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x1a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x89, 0x0, @private=0xa010101, @local, {[@cipso={0x86, 0x25, 0x2, [{0x6, 0xd, "5e000000ff000000f58700"}, {0x0, 0x12, "960605390006fff5800000b61af93a93"}]}, @rr={0x7, 0x1b, 0x57, [@rand_addr=0x64010101, @private=0xa010100, @multicast2, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102]}, @cipso={0x86, 0x12, 0x0, [{0x0, 0xa, "df61168c24ac88ad"}, {0x2, 0x2}]}]}}, "a815a23d"}}}}}, 0x0) 10m29.915386507s ago: executing program 0 (id=5899): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x0, 0x0, @mcast2, 0x7}], 0x1c) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000005", 0x14, 0x6, 0x0, @private0, @mcast1={0xff, 0x10}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x84}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/21, 0x15}, {&(0x7f0000000080)=""/203, 0xcb}], 0x2) 10m29.06806152s ago: executing program 0 (id=5903): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x5, 0x16, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0xff}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x5, 0x16, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0xff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], 0x0, 0xa}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000017c0), 0x20f42, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001800)={'pimreg1\x00', 0x6132}) write$cgroup_subtree(r1, &(0x7f0000001840)=ANY=[], 0xfe3a) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="b80000001300000100000000fbdbdf2564010102000000000000000000000000fc02000000000000000000000000000100000004000000000a00608002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000002000000000000004000000000000000fdfdffffffffffff5000000000000000ffffffffffffff7f050008000000000000000000000000000000000001000000feff00000000000006000000000000000001020000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x2040}, 0x50) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="b80000001300000100000000fbdbdf2564010102000000000000000000000000fc02000000000000000000000000000100000004000000000a00608002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000002000000000000004000000000000000fdfdffffffffffff5000000000000000ffffffffffffff7f050008000000000000000000000000000000000001000000feff00000000000006000000000000000001020000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x2040}, 0x50) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000cc0)={'vcan0\x00'}) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000f00)={0x200000000000001}, 0x8) connect$inet6(r3, &(0x7f0000000f40)={0xa, 0x4e25, 0x1, @mcast2, 0x5}, 0x1c) (async) connect$inet6(r3, &(0x7f0000000f40)={0xa, 0x4e25, 0x1, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0}, 0x7101}], 0x1, 0x4001c00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x14, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r5, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000940)="a06ad876d56a0064d082778c3938", &(0x7f0000000980)=""/85, 0x0, 0x4000000, 0x0, 0xca, &(0x7f0000000a00), &(0x7f0000001840)="3021fa19ef58f25baf7bf5a90fdb05fccfdc41a6f8633a905aa016934527e6c16f9111d2dcbbb822a44de51106a852053ed955136cd9d492509e8e92f00bbe51d54455fd8a30c844b3de7f6f488d42bae815f6d5c573896d0400e97d6f320d051efd1def3ac48ae2b5bae4da1e03ff36df36ba3dabe83db85ef9b1930c9fd412af4c44033d80414246b392aad762ae2de953f340348623149ca796733e98bbcc726434dbcc3dc93d0b648132e6fe217a0000d44b41fa6d721ce7bc6e3f2705e4b271b9669741455732e8"}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x1e, 0x4, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000001500000000009500000000000000"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INTERLEAVING_SUPPORTED(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000a00)={0x1, 0x5}, &(0x7f0000000a40)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000bc0)=ANY=[@ANYRES32=r7, @ANYBLOB="506009000500090089000080"], 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffc95, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYRES16=r4], 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffc95, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYRES16=r4], 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) socket$key(0xf, 0x3, 0x2) (async) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000001940)=ANY=[@ANYBLOB="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"], 0xa0}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 10m26.523215154s ago: executing program 1 (id=5914): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000280)="fb", 0xffffff5c}, {&(0x7f00000002c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) poll(&(0x7f0000000340)=[{r1}], 0x1, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000440)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xffff}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0) write$tun(r2, &(0x7f0000000680)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x8848, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x2000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0xebfd, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="020084060500000026bd7000fedbdf251b0005002b80000002004e22ac1414aa0000000000000000"], 0x28}}, 0x4c000) listen(r0, 0xfffffffc) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r7, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5d}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x24008800) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069001c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) 10m26.045218271s ago: executing program 5 (id=5919): syz_emit_ethernet(0x7c, &(0x7f0000000080)={@link_local={0x3}, @multicast, @val={@val={0x88a8, 0x0, 0x1, 0x3}, {0x8100, 0x7, 0x1, 0x2}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x2, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @multicast1, @loopback}, "ffffff7f00000000"}}}}}, 0x0) syz_emit_ethernet(0x7c, &(0x7f0000000080)={@link_local={0x3}, @multicast, @val={@val={0x88a8, 0x0, 0x1, 0x3}, {0x8100, 0x7, 0x1, 0x2}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x2, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @multicast1, @loopback}, "ffffff7f00000000"}}}}}, 0x0) (async) 10m25.819294759s ago: executing program 0 (id=5920): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x2, 0x3, 0x801, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24048000}, 0x20004000) 10m25.781857664s ago: executing program 5 (id=5922): unshare(0x22020400) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000140)='syzkaller\x00'}, 0x90) syz_emit_ethernet(0x46, &(0x7f0000000300)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x3}}}}}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r0, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, &(0x7f00000002c0)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x6d, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x8}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 10m25.433159809s ago: executing program 0 (id=5923): r0 = socket$packet(0x11, 0x2, 0x300) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8084}, 0x410) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000034f0e61000000000000000107000000bb7f1a007600feff000020009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x93, &(0x7f0000000200)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x2b, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) 10m25.384617884s ago: executing program 4 (id=5924): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fbdbdf251200000008000300", @ANYRES32=r3, @ANYBLOB="0a0006000802110000000000060012"], 0x38}, 0x1, 0x0, 0x0, 0x20000801}, 0x4080) (fail_nth: 7) 10m25.27611367s ago: executing program 1 (id=5925): syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000003980), 0x40241, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000004c00)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0xc0189436, &(0x7f00000050c0)={0x0, 0x0, 0x0, 0x5f, 0x3}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000039c0)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000003a00)={0x3, 0x8, &(0x7f0000003ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000004b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000004b80)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000005180)=@gettclass={0x24, 0x2a, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xf, 0xc}, {0xf, 0xc}, {0xc, 0xb}}, ["", "", ""]}, 0x24}}, 0x0) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000004d80)={r4, r7, 0x25, 0x10, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000004dc0)=r8, 0x4) sendmsg$nl_route_sched(r5, &(0x7f0000004c80)={0x0, 0x0, &(0x7f0000004cc0)={&(0x7f0000004d00)=@newtfilter={0x38, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r4}]}}]}, 0x38}}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004e00)={0x0, 0x0, &(0x7f0000004e40)={&(0x7f0000004e80)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r9, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000005280)=@base={0x2, 0x40000004, 0x3, 0x80bf22, 0x111}, 0x50) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000005340)=@base={0xd, 0x1, 0x4, 0x6, 0x0, r10}, 0x48) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000053c0)=@base={0x2, 0x4, 0x1, 0x6}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000005440)={r11, &(0x7f0000005480), &(0x7f00000054c0)=@udp6=r12}, 0x20) sendmsg$nl_route(r9, &(0x7f0000004ec0)={0x0, 0x0, &(0x7f0000004f00)={&(0x7f0000004f40)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg$alg(r9, &(0x7f0000005140)=[{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000004f80)="b508e7bff734ccfeba69f0eff3c8277f850499f4e70c5e0e7f74c57da1222f4913e83d4a20b09497333865ddc89832f0c73fd1fdc89c014b04dc4764f728da8decf45eb807adebbfe9d3262cb27b151df4e77dd54fb3969f268361dc9e1f977da315816107369de9ed85a9e427d1f7962ecb40331b088f28b78b5c4084615a827d131c2c3357f63aec59f116b95b07fac266aaa18b0805d85b51f301430b3fe8180e7654870057176bad5759388a0c70d0e6ea5c850d80c498fae0b2b97bc55fee10639f734034e8a38966dae5be3b420e10a047c17aabb1a5cde5a3c280af808c13f9391126151db7ee986d2fbc39ecd89d1b186b6e340a", 0xf8}], 0x1, &(0x7f0000005200)=ANY=[@ANYBLOB="700000000000000017010000020000005500000061905cdf262d76249686cd5342f0ebcf38c46ad3160404c8d47b621e72422ea659f41559cd7eeceadb65a5947a060d675679df3e5dbc6095edc98dd153df502287799a42c3bda7c66458f223aba2c6020b955ccc332c930ae241db084100"/124], 0x70, 0x40}], 0x1, 0x8000) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000004d40)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000004d80)=ANY=[], 0xfdef) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000200400ae"], 0x18}, 0x1, 0x0, 0x0, 0x850}, 0x0) recvmsg(r0, &(0x7f0000004c40)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)=""/259, 0x103}, {&(0x7f0000000380)=""/4123, 0x101b}, {&(0x7f00000013c0)=""/98, 0x62}, {&(0x7f0000001440)=""/4094, 0xffe}, {&(0x7f0000002440)=""/167, 0xa7}, {&(0x7f0000002500)=""/106, 0x6a}, {&(0x7f0000002580)=""/109, 0x6d}, {&(0x7f0000002600)=""/4086, 0xff6}, {&(0x7f0000003600)=""/246, 0xf6}, {&(0x7f0000003700)=""/142, 0x8e}, {&(0x7f00000037c0)=""/243, 0xf3}, {&(0x7f00000038c0)=""/158, 0x9e}], 0xc}, 0x10082) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000005100)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r13, &(0x7f00000051c0)=ANY=[], 0x32600) 10m25.275415427s ago: executing program 5 (id=5926): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) (async) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f0000000280), 0x4) sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f0000000700)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x80, &(0x7f0000000780)=[{&(0x7f00000007c0)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x64, 0x41, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x42, 0x1, 0x0, 0x0, @binary="00112233445566748899aabb86dd2c00001c0000110001110000010101010253aa58fe6cbdf0357065ae44132403b1fd606412c3258e840d05bc5c867495"}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x64}}, 0x0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r6 = openat$cgroup_ro(r5, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x47, 0x25, &(0x7f00000003c0)="5f972cf9e8076e7ad3ff9b448b140f5c6729177f5f3544be7c0dd18f4f8b22e4e3e513f7b86dab8263000e04b08443bfd1f803e4af389b94b4e3c391f233508fb75a6ec3038f67", &(0x7f0000000440)=""/37, 0x3, 0x0, 0x70, 0x30, &(0x7f0000000540)="1a7b7eaf9654a19af566d46dc9b21dbd1580e7315f6be224af0b90628b1f05fb9a1fc485e3dee2baf3533e6f72948cf9f58ec6e20d7b895a6b15e1de3a23fa661bdb7da1fb7589ba641086b71532bc3dddc9ad986fb31c548be38d78fb50a8a78884e11bfe1097a9ac0d194c42bd651e", &(0x7f00000005c0)="bfe2cd74020ab68b8103835adbf4bee07be1929230834bd215f1ffc84c5eac1336b46527b7741f0e21ba67015381d961", 0x3, 0x0, 0x50ad}, 0x50) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r3], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x880) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000003080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x23f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 10m24.614683584s ago: executing program 4 (id=5927): socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) getpeername$packet(r0, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000680)=0x14) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f00000006c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000006defee627a0001070300000000000041000000180017000000210000ea056574683a766361"], 0x34}}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) (async, rerun: 64) sendmsg$NFT_BATCH(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYRES64=r3], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async, rerun: 64) sendmsg$NFT_BATCH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x80b0}, 0x20008890) (async) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="02000000", @ANYRES16=0x0, @ANYBLOB="100025bd7000fedbdf25110000000c00028006000e004e22000004000180"], 0x24}, 0x1, 0x0, 0x0, 0x4c081}, 0x4000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc) (async) getsockopt$netlink(r5, 0x10e, 0x9, &(0x7f0000000240)=""/148, &(0x7f0000000300)=0x9) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x0, 0x488, 0x0, 0x0) (async, rerun: 64) socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000000)=ANY=[], 0x38}}, 0x80) 10m24.49995664s ago: executing program 0 (id=5928): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x42a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000880)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x8000002, 0x2004}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x220080c1, &(0x7f0000000080)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x1c) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x6b8}], 0x2, 0x100, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000008c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc82c00fe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRES64=r2], 0xffe) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x42a01, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000880)={'syzkaller1\x00', 0xc201}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x8000002, 0x2004}, 0x1c) (async) sendto$inet6(r1, 0x0, 0x0, 0x220080c1, &(0x7f0000000080)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x1c) (async) shutdown(r1, 0x1) (async) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x6b8}], 0x2, 0x100, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000008c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc82c00fe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRES64=r2], 0xffe) (async) 10m24.435001008s ago: executing program 5 (id=5929): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000004000000080000000a00"/84], 0x48) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000240)="56fb30773a923b49bb", &(0x7f0000000280)=@tcp6=r1}, 0x20) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073756200"], 0x0, 0x5a}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000100540)={0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)="090000000ce1ff5bc47e5946306e7700", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000440)='GPL\x00', 0x1, 0x100000, &(0x7f0000000480)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x8, &(0x7f0000100480)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00001004c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="19220000040902001c0012801400010062726964676500000c0002800500240001000000"], 0x3c}}, 0x0) 10m23.812028654s ago: executing program 1 (id=5930): r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r2 = accept(r0, &(0x7f0000000080)=@isdn, &(0x7f0000000100)=0x80) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000140)={'team_slave_1\x00', 0xe, 0x5}) recvfrom$inet6(r2, &(0x7f0000000240)=""/4096, 0x1000, 0x40000140, &(0x7f0000001240)={0xa, 0x4e24, 0xf5a5, @loopback, 0x7}, 0x1c) connect$inet6(r2, &(0x7f0000001280)={0xa, 0x4e20, 0x101, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f00000012c0)=0x7, 0x4) sendmsg$kcm(r2, &(0x7f0000001940)={&(0x7f0000001300)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @multicast1}, 0x4, 0x0, 0x0, 0x3}}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000001380)="185361979e1f9f125b3f1de92a31ba36e462cdc915ae070f90efe5feb3c49f50e0c7643fb8768a11d7bb8d75d36b19b84d5ceff68d565bfae0eb6f0d7903d5adf2185eb2766fb65d31f4e0f87fc3df72271c2b36303ce0e2d49eaaa81ee3983321af4406e197085487b00a231933d03fcc1e153d8b24ccca0c3dee6dc074ccf36bfcb6b51157324cb3fa677fbd3b94af06749eb99b9a7d05fc4f83d0f01e52380408", 0xa2}, {&(0x7f0000001440)="16e4c7e9e1a400cc2a90fbf3ffbb96e7a54bf5d32a0e6855a3e48c80d4cdaf45cadfc8db2f033fe42120ea2be433b2c14b3526563243670783d6d8acd919e39b84e8cf61bed9da86be2a8103ca6acb8ee619262d08aaa0f9fff7b7ae2c64e2d0bfeb14b145c03f47becda87cfd06afd1ae92037491d7ca2a7f6ffc7d71fcea5bd300e483cd8d89bbe5de527ce41772cb129076ffd6e6c23be8740fd419bc081818ed600b1ab237fabe480305ccd2b82cba03345e", 0xb4}, {&(0x7f0000001500)="9634a0ef427735406e736c8769e0094abe163002701a383e6fbb2039a339a7d58cbddd6d8cb2aab322944b92147361aea702be15dc1d40aa69129551f0c42f545116f0158afabba9e38ff54acbf884357f8e43894d1b49d3fbd60f4973b3848843b96b1bc1acd22d328957cb2fb7020bae222f946aa23b1b8fdf13dd1b355630e8e1e1e3c808c86bb5bcfe0929260e24306751521a76dda19eb28013c61b4e8293b1e0ea16f90f839165fd32", 0xac}, {&(0x7f00000015c0)="c71dcc9c7589bc6d29003f8ae0013ebef63140950e2f15ed2c8d4bdf393ad8dffb54c0494195c8c920633769b844c1020d299fffbb39085674a5a0b20327e6754921b8be271752e74d694672f2180e5cd05c22616157676371d7cccc5e737b4167dd516a84520f404bef7583fc774edebd0f5e6610c9d45af1b4f9cdf8f530af7a41a5762bc97ba838097e8f2c7d8380dab17db0b12d3bd0b7191f70c745d1bcaf173088", 0xa4}, {&(0x7f0000001680)="31ebe5c471c9e976a0a31818c2653891212b6a042a96fa7dd79ebc14f9383ad6ea5e52ff5464081d25c27f7a159b9120584c72c12cc6d883b4146b7c90e75866c2630533c1fa58adf7ff42839f555a153792b8827a69f56b1c1aad23acd4e9d290f728dd5ad15c9dfff96a02581c4a576cb2f4e008650f047ea217522ac1f263c7ae78c271356c7d40e67f2b99f51aaeab64a44c06cb761e9b89cb54200286a3d3e45abfc7e00bd2866f4919706c547b35b70c555b", 0xb5}, {&(0x7f0000001740)="4da48e2acadd5e5d16351f6ad041ef4b466ce74d4de7f64ffa9c1eef5a06ca05d79aa3edb0e3f5e14625044570cccedcf3ea63b5b54b448584c051f7de9a472fbb7a99fa80b57d00f3fc711c53ce1e827d52e3b720ca8f67f5a05f524bdaaaf2c05fb9481a327f71d090e78b3eced0a153635c9a8185eae48a0df29e9168d76acbccc53e90f1b9d1cac15f08121d8a07d7052a5c911ae21310a5f2fa7e8df2dce3778d860ded71a4e83269c7ccee1d7af35fd4183f6e81bc00c38080a88a895ea9ae1b9a96c2bf8573fb9207bd239a65346683f836f2cabb", 0xd8}, {&(0x7f0000001840)="76cc9b5c7ba2714ed17db36bf84f49172460cce6c5a02f3aac3e37fc9527654a58f15777af99a33be58efa29c1a535f796355d62f6cf7fe42438f9f24c8aa380fea30a19cf469b2c308fe2b0bf6f5dd387a79fc8cd12013aa2a9eaeb4c55ecc6b64898b2442614a222ddcc", 0x6b}], 0x7}, 0x0) connect$pppl2tp(r2, &(0x7f0000001980)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @loopback}, 0x0, 0x2}}, 0x26) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f00000019c0)={{r0}, 0x3, 0x393a99ad, 0x8000000000}) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000001a00)=@gcm_128={{0x304}, "f66964c46703937f", "eb457f92cf5336935ec76bf518b074cd", "6c1a53c2", "a7ae202929313627"}, 0x28) socketpair(0x21, 0x3, 0x9, &(0x7f0000001a40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001a80)={'wlan0\x00', 0x0}) r6 = socket$can_raw(0x1d, 0x3, 0x1) connect$pppl2tp(r3, &(0x7f0000001ac0)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x4e21, @loopback}, 0x3, 0x4, 0x2}}, 0x2e) r7 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r7, 0x1, 0x0, &(0x7f0000001b00), &(0x7f0000001b40)=0x10) r8 = socket$pppl2tp(0x18, 0x1, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001b80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r8, &(0x7f0000001bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r9, 0x0, 0x1, 0x3, 0x3, {0xa, 0x4e23, 0xeff, @mcast1, 0x7}}}, 0x3a) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c40), r3) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r4, &(0x7f0000001f00)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001c80)={0x228, r11, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x2d}}}}, [@NL80211_ATTR_IE={0x175, 0x2a, [@cf={0x4, 0x6, {0x8, 0x1, 0x162, 0xca}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x6, 0xad, 0x7f}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @link_id={0x65, 0x12, {@initial, @device_b, @device_b}}, @tim={0x5, 0x93, {0x6, 0x6b, 0xb, "6679328e918b2bcb0597447a91a2e0a53b390aa639e35e92918a9492a1c5b5257b089de50f0303ddef55bc0cb7f2ed08da7678c04b179f752bb27a60ca06c0d69890d9a3993b582cf90238d3e6f132323f587c0fb1e6db015df56659ee9a1b3bc51e1393349736070da22789bc36a3725b327461c4b53ebf6fd8d2a1484f30ec4f387bfce84ec5c73ce9e1ca58d3ddab"}}, @link_id={0x65, 0x12, {@from_mac, @broadcast, @broadcast}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20}}, @random={0x7, 0x98, "96bdf780295b5856475a2a4b060b882e61eba2e8dbd780b70b9b6eff5e12e2b49dd661ccc84ff5d4643bda30ab4dc67069c9e424362a30bf965a3b05ffe993ea56d8e60510bff3bd1c44342de872ccc85fdd3cc3abe5790bbd9d2e5205681f32ebda86ac07838458955e4d67871ed972bd222caf86473a97a6bd8502c33d8bc4e92cf3f21ff3bf28e263421447dc18ab9acd143cb957b89a"}]}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x61}, @NL80211_ATTR_IE={0x7b, 0x2a, [@prep={0x83, 0x25, {{0x0, 0x1}, 0x3, 0x9, @device_b, 0x40, @value, 0x7, 0x800, @device_a, 0x7f}}, @ibss={0x6, 0x2, 0x4}, @mesh_chsw={0x76, 0x6, {0x1, 0x5, 0x2, 0xe}}, @gcr_ga={0xbd, 0x6}, @measure_req={0x26, 0x3a, {0x6, 0x1, 0xfd, "38ef11e1d57563c58c00a751b501f181eab96e06dbc1ffaa4e02e580ea5ecbabfa5d25cdd3f36a6ae80d50671f70b94adcb2310818c35e"}}]}, @NL80211_ATTR_IE={0x7, 0x2a, [@dsss={0x3, 0x1, 0x34}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x4040000}, 0x4004) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001f80), r2) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r4, &(0x7f0000002100)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000020c0)={&(0x7f0000001fc0)={0xc4, r12, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000800}, 0x84) sendmsg$nl_route(r2, &(0x7f0000002200)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)=@ipv4_getnetconf={0x24, 0x52, 0x2, 0x70bd29, 0x25dfdbff, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xfffffffb}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r13, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x28, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x6, 0x25}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20008040}, 0x50) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000002340)={0x6, 0x673, 0x3ff, 0x6}, 0x8) writev(r10, &(0x7f0000002700)=[{&(0x7f0000002380)="59fee2a026589e7b0c4f20ffe6d0bc5c47dc6a1a6a59a2309750b7d83c5d105e020448a4a14bc5a4f41a3924e6dacb5b4361a18c2f929e14419308d3cee7e295934539e312740a44cabdedd565af58f861fbac6f231673047d3d8200a8866848d764610d2554223d5ca81d5af1a8b6bf4a761ef8ee88e240b9c9ec75f7d3e56769bd75a6c1b8e903175e4a92e80e7a90b5ed068df787ae8e9a6e7caf132271a9ca7554590628", 0xa6}, {&(0x7f0000002440)="5eaedfbeff9700a46d5810030b3cd00e7e10a8306988215796164396a11bad7e28abffcb99127f971a843cd8d2938273c46c394b5f3330bd9ca5d35baa2a0e65435a9ea07d7b78c3be1961a82afc19a2fd0bf9b807f4eedd47862bf28faa1f34b9805c52563dcfe37a4bd3fb4d0265232fa0d64b65ec1e2cb7604aabc170dc6067661e348b131f4a8bff11a31624b850226279953d1b0a26615a9ca1cba4aa", 0x9f}, {&(0x7f0000002500)="2252cb542bbfe0538ae26e1a4052f181d3a3524b66c1aa7fc7aac425fc85e57a637d16e9c08d45cdbdc0e873c713bb02f77efa36166f55bcf627fdefb449e24ad1720c7dccd5a1d58c8b38afb38682dced9979510582da346acff3ed28b3b163a17e3f570b049062e048a425e2ab35e140c765fcbfc697a9d37782f6b0238c6dc2d48a86d067f4b7581a21e96b5567935aa3070019efaa659b45a6", 0x9b}, {&(0x7f00000025c0)="fefa2080022da01c5e2f", 0xa}, {&(0x7f0000002600)="0d41305b43f0f83007925c7c032ee741fec0a507452501f39fa586f5365902b4c1966e96b1d3994db493e81e07e26a8c94dd869de20b0f4ca324172fe2e2f53eee38a267b5e448b2c28116458d157214b91cbf897ceb6887d087fa34e86ff4088613a496e6e7bf6f71ae2aa2807ae381e9268f73f167a35faf93422cc5e9204cf4bc4d3cbdb7c18d75ecc4d6ea6e09858d68e14de0e9d14a56797710e2ec88c512304852b619b855a210120e84e701967c7a717358419cf272b2002e4a578142f86b6635b20b27e6872f70659d88346ae182", 0xd2}], 0x5) sendmsg$AUDIT_DEL_RULE(r4, &(0x7f0000002c40)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002c00)={&(0x7f00000027c0)={0x438, 0x3f4, 0xa21, 0x70bd2d, 0x25dfdbfc, {0x5, 0x2, 0x3b, [0x0, 0x6, 0x51f, 0xffff89db, 0x8, 0x7, 0x6, 0xb56f, 0x52d, 0x7, 0x1, 0x7bff, 0x44fc, 0xa, 0x6, 0x3, 0x8001, 0x7, 0xfffffff3, 0x8, 0x4, 0x5, 0x5, 0xffff, 0xfffffffc, 0x9, 0x6, 0x200, 0x0, 0x53a, 0x2, 0x7, 0x46, 0x1, 0x4, 0xbcd3, 0x7, 0xc, 0x1, 0x4, 0x2, 0x80000000, 0x6c26, 0x100, 0x1, 0x1, 0x8, 0x4, 0x1, 0x0, 0x9, 0x4, 0x5, 0x4, 0x4, 0x1, 0x10000, 0xfffff000, 0x5, 0x7fe00, 0x401, 0x2680, 0x4, 0xff], [0x5, 0x3, 0x4, 0x7, 0x6, 0x8, 0x1000, 0x8, 0x4, 0x6, 0x2, 0x15aa, 0x0, 0xcb, 0x5, 0xfd6, 0x6, 0xfff, 0x3, 0x1, 0x7, 0x7, 0x800, 0x34, 0x4, 0x4342, 0x4, 0xff, 0x495, 0x7, 0x9, 0x4eaa, 0x7, 0x8, 0x1f9, 0x7, 0x9, 0x6, 0xfffffffb, 0x7, 0x4, 0xf56, 0x9, 0xc6, 0x0, 0x6, 0x8000, 0x4000, 0x5, 0x7fffffff, 0x2cc61546, 0x6, 0x2f61a3c1, 0x80000001, 0x6, 0x5, 0x6, 0x7, 0x37b, 0x11b, 0x5, 0x1, 0x1, 0x3], [0xe45, 0x6, 0x81, 0x0, 0x3, 0xbec, 0x93b0, 0x5, 0x10, 0x8001, 0x1, 0x7583, 0x49, 0x57a, 0x1, 0x25, 0x101, 0x7, 0x7813d3df, 0x9, 0x7, 0xa86, 0xee4, 0x7fffffff, 0x3, 0x8, 0x7, 0x1, 0x1, 0x0, 0x8, 0x7, 0xfffffff9, 0x6, 0x8, 0xfffffff9, 0x10001, 0x1, 0x4, 0x81, 0x7, 0x101, 0x4, 0x6, 0x9, 0xa2f, 0x2, 0xfffffe01, 0xf, 0x1000, 0xfffffffb, 0x9, 0x4, 0xfffff911, 0x8, 0xfa4, 0x3, 0x8, 0x1, 0x5, 0x1000, 0xca1, 0xd, 0x3], [0x7, 0xc, 0x3, 0x180, 0x5, 0x3, 0x0, 0x8, 0xc, 0x5, 0x10, 0xd, 0x3, 0x6, 0x7, 0x4c45, 0xf, 0x0, 0x7, 0x2, 0x89a0, 0x2, 0x4, 0x100, 0x9, 0x2a, 0x295a, 0x1, 0x2, 0x6, 0xc, 0x239, 0x0, 0x400, 0x9, 0x100, 0xa, 0x1000, 0xa, 0x5, 0x0, 0xff, 0x0, 0x1, 0x3, 0x7, 0x4609, 0x0, 0x3, 0x7ff, 0x6, 0x4, 0x3, 0x6, 0xff, 0x5, 0xff, 0x1ff, 0x5f, 0x6, 0x5, 0x9, 0xfffffffe, 0x9], 0x16, ['&A\x00', 'batadv_slave_0\x00', '#&[\x00']}, ["", "", "", "", ""]}, 0x438}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r7, &(0x7f0000002d80)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002d40)={&(0x7f0000002d00)={0x40, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x5}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r2}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x9f2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000841}, 0x40000) 10m19.096056468s ago: executing program 5 (id=5931): r0 = socket(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'hsr0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'hsr0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="01154e0001000011221e4455892fca0100012d8c170f83f76970", 0x1a, 0x0, &(0x7f0000000300)={0x11, 0x16, r1, 0x1, 0x3}, 0x14) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80000) sendmsg$alg(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x80}, 0x4004080) (async) sendmsg$alg(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x80}, 0x4004080) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r3) writev(r3, &(0x7f0000000180)=[{&(0x7f00000001c0)="efce26262f9664e339bcfe37d927424bbfc67f97fa792b31ce79d882", 0x1c}, {&(0x7f00000005c0)="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", 0xf64}], 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r5) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@ipv4_newrule={0x34, 0x20, 0x1, 0x70bd29, 0x25dfdbff, {0x2, 0x10, 0x0, 0x4, 0x20, 0x0, 0x0, 0x5, 0x6}, [@FRA_GENERIC_POLICY=@FRA_FWMASK={0x8}, @FRA_DST={0x8, 0x1, @broadcast}, @FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x9}]}, 0x34}, 0x1, 0xba01, 0x0, 0x4}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@ipv4_newrule={0x34, 0x20, 0x1, 0x70bd29, 0x25dfdbff, {0x2, 0x10, 0x0, 0x4, 0x20, 0x0, 0x0, 0x5, 0x6}, [@FRA_GENERIC_POLICY=@FRA_FWMASK={0x8}, @FRA_DST={0x8, 0x1, @broadcast}, @FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x9}]}, 0x34}, 0x1, 0xba01, 0x0, 0x4}, 0x0) 10m18.107945193s ago: executing program 4 (id=5932): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FIONCLEX(r0, 0x5450) (async) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x10, 0x4908d13283d17e6b, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2001f}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e22}}]}, 0x4c}}, 0x40000) (async) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x3, @empty, 'wg0\x00'}}, 0x1e) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0109f1ffffff1fff4a88d8776b8501aab6c20061bddf28c800"/40, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r1], 0x38}, 0x1, 0x0, 0x0, 0x8015}, 0x0) (async) sendmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="0281", 0x2}], 0x1}}], 0x1, 0x24005805) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 10m15.35246569s ago: executing program 1 (id=5933): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000700)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000740)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_ext={0x1a, 0x4, &(0x7f0000000840)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x1, 0x0, 0x4, 0x6, 0x1, 0x10}]}, &(0x7f0000000880)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x2004a6}, 0x94) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000004c0)=0x0) bind$nfc_llcp(r0, &(0x7f0000000500)={0x27, r4, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) close(r1) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, 0x0, 0x0) close(0x4) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto(r6, 0x0, 0x0, 0x4000005, &(0x7f0000000180)=@nl=@unspec={0x0, 0x700, 0x0, 0xfdff}, 0x80) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r8, &(0x7f0000000000)="929844777243255070e4dc51f617d9ea2780f0e967c4ae170ba799ec65450ccf3b8dd5052097254efa86a7b9335791fb34109e4a92f862", 0x37, 0x4000894, &(0x7f00000000c0)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x29cd}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0x2, &(0x7f0000000340)=ANY=[@ANYBLOB="18360f00010000000000000000000000f2bf187cbe75c286dad1a3"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000440)="11223344556677889900aabbccdd", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPCTNL_MSG_EXP_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000000202010800000000000000000a0000004400028006000340000000000c0002d905000100000000002c00018014000300fe88000000000000000000001a000001090004"], 0x58}}, 0x0) 10m7.488382709s ago: executing program 33 (id=5928): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x42a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000880)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x8000002, 0x2004}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x220080c1, &(0x7f0000000080)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x1c) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x6b8}], 0x2, 0x100, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000008c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc82c00fe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRES64=r2], 0xffe) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x42a01, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000880)={'syzkaller1\x00', 0xc201}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x8000002, 0x2004}, 0x1c) (async) sendto$inet6(r1, 0x0, 0x0, 0x220080c1, &(0x7f0000000080)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x1c) (async) shutdown(r1, 0x1) (async) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x6b8}], 0x2, 0x100, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000008c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc82c00fe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRES64=r2], 0xffe) (async) 10m7.122739876s ago: executing program 4 (id=5935): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000062019c000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r5], 0x28}, 0x1, 0x0, 0x0, 0x841}, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x6, '\x00', r5, r6, 0x4, 0x1, 0x1}, 0x50) 10m6.063069038s ago: executing program 5 (id=5936): openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) close(0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r4, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x8, 0x3, 0xa20, 0x90, 0x43, 0xa0, 0x90, 0x98, 0x988, 0x178, 0x178, 0x988, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {}, {0x7f}, 0x0, 0x1}, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x8b8, 0x8f8, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'\x00', {0xff}, 'veth0_macvtap\x00', {}, 0x8, 0x15}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x9}, {0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0xb1d}, {0x3}, {0x8}, {0x2, 0x3}, {0x3}, {0x103}], [{0xe8f3, 0x5}, {0x1d, 0x6}, {0x4, 0x8}, {0x0, 0x4}, {0x4, 0xc3e}, {0x1, 0x100}, {0x6, 0x7}, {0x3, 0x3}, {0xf2, 0x3}, {0x3ff, 0x8}, {0x10, 0x3}], 0x6, 0x6}, {[{0x80, 0x3}, {0x2}, {0x6, 0x1}, {0x355cbac3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x7}, {0xe7, 0x2}, {0x3, 0x3}, {0x5598e8fe, 0x2}, {0x6, 0x1}], [{0x9, 0x9097}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x20080, 0x5}, {0x13, 0xc0000000}, {0x40, 0xb}, {0x9, 0x6}, {0x4, 0x2}, {0x6, 0x7fffffff}, {0x7fffffff, 0x400}], 0x7}, {[{0x84, 0x2}, {}, {0x56, 0x2}, {0xffffffff, 0x1}, {}, {0x5, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x2, 0x3}, {0x8, 0x1}, {0x7}], [{0x9, 0x5}, {0x80, 0x32}, {0x0, 0xfffffff7}, {0xff, 0x1}, {0x7, 0x6}, {0xdb9, 0xff4}, {0x6, 0x3ff}, {0x3, 0x6}, {0x5, 0x10}, {0x9, 0x6}, {0x10000, 0x2}], 0x4, 0x2a}, {[{0x3, 0x2}, {0xa, 0x1}, {0x6, 0x1}, {0x10, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x1000003, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x2}, {0x477d, 0x1}], [{0x4, 0xffffffff}, {0x200, 0x6}, {0x4be1, 0x4044}, {0x1}, {0x5, 0xc}, {0x3, 0x4}, {0x2, 0x4}, {0x800, 0x8000}, {0x8, 0x800}, {0x3, 0x2}, {0xe, 0x8000}], 0x4, 0xb}, {[{0x7, 0x1}, {0xd, 0x3}, {0x5}, {0x61}, {0x9}, {}, {0x2}, {0x1}, {0x0, 0x2}, {0x9, 0x3}, {0x5, 0x3}], [{0x58d, 0x3ff}, {0x0, 0x7f}, {0x6}, {0xfc9b, 0x80000001}, {0x101, 0x7}, {0x7, 0x1}, {0x6, 0x8001}, {0x2, 0x1}, {0x2, 0x2}, {0x9, 0x4cf}, {0x7, 0x10000}], 0x1}, {[{0x2}, {0x9}, {0x8, 0x1}, {0x2, 0x3}, {0x71, 0x3}, {0x0, 0x2}, {0xe, 0x2}, {0x6, 0x2}, {0x5}, {0x3000004, 0x3}, {0x6, 0x1}], [{0x9, 0x3}, {0x5, 0x7fffffff}, {0xffff, 0x4}, {0x0, 0x7}, {0x8, 0xb502}, {0x1ff, 0x86}, {0x6, 0xffffffff}, {0x3, 0x4}, {0x5, 0x6}, {0xf, 0xf93}, {0x5, 0x4}], 0x3, 0x3}, {[{0x7, 0x1}, {0x3, 0x1}, {0x45d7}, {0xfff, 0x3}, {0xc4f, 0x3}, {0x0, 0x2}, {0x400, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xfffffffd}, {0x2}], [{0x3, 0x6}, {0xfd, 0xd}, {0x80, 0xb81d}, {0x2ca, 0x80000000}, {0x8, 0xff}, {0x7, 0x45a8}, {0x8, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0xfc, 0x6}, {0xd, 0x138e}], 0x6}, {[{0x4, 0x1}, {0x800}, {0x9, 0x2}, {0xf0000000, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x8, 0x2}, {}, {0x9}, {0x400, 0x2}, {0x8, 0x3}], [{0x7, 0xfffffffd}, {0x2}, {0x2, 0x2}, {0x8f, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0xb, 0x82c6}, {0xb1b}, {0xbd5c, 0xffff}, {0x1, 0x9b8d}, {0xec, 0x5}], 0x2, 0x6}, {[{0x8}, {0x0, 0x1}, {0xac000000}, {0x6, 0x2}, {0x2d8, 0x3}, {0x7e3ea4bc}, {0x8, 0x1}, {0x4f, 0x3}, {0x4, 0x2}, {0xfffffff7}, {0x3, 0x2}], [{0x5, 0x42}, {0x76a74689, 0x5}, {0x1}, {0x8000, 0x7}, {0x400, 0xdd}, {0xfff, 0x8}, {0x76b, 0xfffffffe}, {0xa6d00, 0xffffbff7}, {0x10001, 0xfc8d}, {0x0, 0x10001}, {0x4, 0x3}], 0x1, 0x9}, {[{0x8, 0x1}, {0x3, 0x3}, {0x18, 0x3}, {0x3ff, 0x3}, {0x7fffffff}, {0x8}, {0x1, 0x3}, {0x8, 0x3}, {0xf1b6}, {0x80, 0x3}, {0x4, 0x2}], [{0x2, 0x4}, {0x3, 0xf}, {0x9, 0x6}, {0x7f, 0x8}, {0x7, 0x273e1899}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0xb7}, {0x8, 0x3}, {0x3, 0x1}, {0x7ff, 0x63}], 0xb, 0x3}, {[{0x1, 0x2}, {0x6, 0x3}, {0xffff, 0x1}, {0x1}, {0x4, 0x3}, {0x4, 0x3}, {0xaa7}, {0x100, 0x3}, {0x2}, {0xfffffff7, 0xb90af65875a5dc08}, {0x4, 0x3}], [{0xffffffff}, {0x8001, 0x7}, {0x10000, 0x7524}, {0x73d, 0x4}, {0x0, 0x280000}, {0x3, 0x3af}, {0x5, 0x2}, {0x101, 0xbf}, {0x10000, 0x6}, {0x3, 0x800}], 0x8, 0x5}], 0x3}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xa80) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r0, @ANYRES16=r5, @ANYBLOB="08002cbd7000fddbdf25080000000800040004000000050005000800000008000400f90c0000"], 0x2c}, 0x1, 0x0, 0x0, 0x4004004}, 0x48005) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x0, 0x18, 0x0, 0x0) syz_emit_ethernet(0x2c, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb1c00450000190000000003019078ac1414bbac1414aae92aa7907767742492b9"], 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x2, 0xd7, 0x1, 0x0, 0xff, 0x0, 0xc, 0x0, 0x8, 0x0, 0x2, 0x0, 0x5}, 0xe) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @local}]}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r7, 0x84, 0x19, &(0x7f00000001c0)={r8, 0x1}, 0x8) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000440)={0x4, &(0x7f0000001480)=[{0x28, 0x10, 0x0, 0xfffff034}, {0x4, 0x0, 0x2, 0xfffffffe}, {0x100, 0x3, 0xf9}, {0x4, 0x3, 0x3, 0xfffb}]}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000004c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08004510001c006600000602907864010100ac1414aa11ff907800000000"], 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000200)=ANY=[], 0x94}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000600)='GPL\x00'}, 0x94) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000015c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="c73125bd7000ffdbdf2510000000060028000300000005002a000000000008003a000100000008000b00ff00000008002b000500000005003800000000000a000900840b0e0800000000"], 0x50}, 0x1, 0x0, 0x0, 0x240000c1}, 0x880) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r11, &(0x7f0000000940)={0x10, 0x0, 0x25dfdbfd, 0x40000000}, 0xc) bind$netlink(r11, &(0x7f0000000980)={0x10, 0x0, 0x25dfdbfd}, 0xc) 10m4.41253032s ago: executing program 1 (id=5937): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[], 0x8) 9m58.904644613s ago: executing program 4 (id=5938): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x28, 0x2, 0x0, &(0x7f0000000bc0)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000740)={'geneve0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newqdisc={0x30, 0x24, 0x401, 0x2000, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newtfilter={0x60, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x9}, {0x16, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1002, 0x12}, {0x1004}}}, @TCA_EM_META_RVALUE={0x4}]}}]}]}]}}]}, 0x60}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000a00)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x42000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000427bd7000fcdbdf25120000001e000180"], 0x18}, 0x1, 0x0, 0x0, 0x48000}, 0x810) (async) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r4, &(0x7f00000002c0)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14) (async) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {}, {0x5, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB="18000000310009002abd7000000000000000380004001880"], 0x18}}, 0x884) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000c00)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10) (async) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f0000000c40)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) (async) r9 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r9, &(0x7f0000000c80)={&(0x7f0000000cc0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10, 0x0}, 0x20000010) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073767a30000000004c000000090a010400000000000000000700000008000840000000000900020073797a31000000000900010073797a3000000000080005400000000d08000c40000000040800034000000038480000000c0a01010000000000000000070000000900020073797a31000000000900014287797a30000000001c0003801800008008000340000000020c0005400000000000000005140000001000010000000000000000000084000a"], 0xdc}}, 0x0) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$inet6(0xa, 0x5, 0x0) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r13, 0x84, 0x6f, &(0x7f0000000d00)={0x0, 0x10, &(0x7f0000000d40)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000d80)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r13, 0x84, 0x1d, &(0x7f0000000dc0)={0x1, [0x0]}, &(0x7f0000000e00)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r12, 0x84, 0x73, &(0x7f0000000e40)={r14, 0xe869, 0x30, 0x7fff, 0x1}, &(0x7f0000000e80)=0x18) sendmsg$nl_generic(r11, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="34000000400007012cbd7000fadbdf25037c00000400c2801c0001801800108014000d0000003b"], 0x34}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1d, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b708000000001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000920000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2b}, 0x94) 9m58.143592365s ago: executing program 1 (id=5939): r0 = socket(0x10, 0x3, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x36, 0x0, &(0x7f00000002c0)="dcf4e9a1d78ad62ceef1884386dd78bb3fb7dbfc193ea3c3a18c09d64c3d01781b1044592e3276ae93bda94c63346fad9e9ab8440dc5", 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000300)="0102", 0x0}, 0x50) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202", 0x28}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2400cc10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d", @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x40084}, 0x2000800) (async) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async, rerun: 64) socket$kcm(0x29, 0x5, 0x0) (rerun: 64) 9m49.128130455s ago: executing program 34 (id=5936): openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) close(0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r4, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x8, 0x3, 0xa20, 0x90, 0x43, 0xa0, 0x90, 0x98, 0x988, 0x178, 0x178, 0x988, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {}, {0x7f}, 0x0, 0x1}, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x8b8, 0x8f8, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'\x00', {0xff}, 'veth0_macvtap\x00', {}, 0x8, 0x15}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x9}, {0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0xb1d}, {0x3}, {0x8}, {0x2, 0x3}, {0x3}, {0x103}], [{0xe8f3, 0x5}, {0x1d, 0x6}, {0x4, 0x8}, {0x0, 0x4}, {0x4, 0xc3e}, {0x1, 0x100}, {0x6, 0x7}, {0x3, 0x3}, {0xf2, 0x3}, {0x3ff, 0x8}, {0x10, 0x3}], 0x6, 0x6}, {[{0x80, 0x3}, {0x2}, {0x6, 0x1}, {0x355cbac3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x7}, {0xe7, 0x2}, {0x3, 0x3}, {0x5598e8fe, 0x2}, {0x6, 0x1}], [{0x9, 0x9097}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x20080, 0x5}, {0x13, 0xc0000000}, {0x40, 0xb}, {0x9, 0x6}, {0x4, 0x2}, {0x6, 0x7fffffff}, {0x7fffffff, 0x400}], 0x7}, {[{0x84, 0x2}, {}, {0x56, 0x2}, {0xffffffff, 0x1}, {}, {0x5, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x2, 0x3}, {0x8, 0x1}, {0x7}], [{0x9, 0x5}, {0x80, 0x32}, {0x0, 0xfffffff7}, {0xff, 0x1}, {0x7, 0x6}, {0xdb9, 0xff4}, {0x6, 0x3ff}, {0x3, 0x6}, {0x5, 0x10}, {0x9, 0x6}, {0x10000, 0x2}], 0x4, 0x2a}, {[{0x3, 0x2}, {0xa, 0x1}, {0x6, 0x1}, {0x10, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x1000003, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x2}, {0x477d, 0x1}], [{0x4, 0xffffffff}, {0x200, 0x6}, {0x4be1, 0x4044}, {0x1}, {0x5, 0xc}, {0x3, 0x4}, {0x2, 0x4}, {0x800, 0x8000}, {0x8, 0x800}, {0x3, 0x2}, {0xe, 0x8000}], 0x4, 0xb}, {[{0x7, 0x1}, {0xd, 0x3}, {0x5}, {0x61}, {0x9}, {}, {0x2}, {0x1}, {0x0, 0x2}, {0x9, 0x3}, {0x5, 0x3}], [{0x58d, 0x3ff}, {0x0, 0x7f}, {0x6}, {0xfc9b, 0x80000001}, {0x101, 0x7}, {0x7, 0x1}, {0x6, 0x8001}, {0x2, 0x1}, {0x2, 0x2}, {0x9, 0x4cf}, {0x7, 0x10000}], 0x1}, {[{0x2}, {0x9}, {0x8, 0x1}, {0x2, 0x3}, {0x71, 0x3}, {0x0, 0x2}, {0xe, 0x2}, {0x6, 0x2}, {0x5}, {0x3000004, 0x3}, {0x6, 0x1}], [{0x9, 0x3}, {0x5, 0x7fffffff}, {0xffff, 0x4}, {0x0, 0x7}, {0x8, 0xb502}, {0x1ff, 0x86}, {0x6, 0xffffffff}, {0x3, 0x4}, {0x5, 0x6}, {0xf, 0xf93}, {0x5, 0x4}], 0x3, 0x3}, {[{0x7, 0x1}, {0x3, 0x1}, {0x45d7}, {0xfff, 0x3}, {0xc4f, 0x3}, {0x0, 0x2}, {0x400, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xfffffffd}, {0x2}], [{0x3, 0x6}, {0xfd, 0xd}, {0x80, 0xb81d}, {0x2ca, 0x80000000}, {0x8, 0xff}, {0x7, 0x45a8}, {0x8, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0xfc, 0x6}, {0xd, 0x138e}], 0x6}, {[{0x4, 0x1}, {0x800}, {0x9, 0x2}, {0xf0000000, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x8, 0x2}, {}, {0x9}, {0x400, 0x2}, {0x8, 0x3}], [{0x7, 0xfffffffd}, {0x2}, {0x2, 0x2}, {0x8f, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0xb, 0x82c6}, {0xb1b}, {0xbd5c, 0xffff}, {0x1, 0x9b8d}, {0xec, 0x5}], 0x2, 0x6}, {[{0x8}, {0x0, 0x1}, {0xac000000}, {0x6, 0x2}, {0x2d8, 0x3}, {0x7e3ea4bc}, {0x8, 0x1}, {0x4f, 0x3}, {0x4, 0x2}, {0xfffffff7}, {0x3, 0x2}], [{0x5, 0x42}, {0x76a74689, 0x5}, {0x1}, {0x8000, 0x7}, {0x400, 0xdd}, {0xfff, 0x8}, {0x76b, 0xfffffffe}, {0xa6d00, 0xffffbff7}, {0x10001, 0xfc8d}, {0x0, 0x10001}, {0x4, 0x3}], 0x1, 0x9}, {[{0x8, 0x1}, {0x3, 0x3}, {0x18, 0x3}, {0x3ff, 0x3}, {0x7fffffff}, {0x8}, {0x1, 0x3}, {0x8, 0x3}, {0xf1b6}, {0x80, 0x3}, {0x4, 0x2}], [{0x2, 0x4}, {0x3, 0xf}, {0x9, 0x6}, {0x7f, 0x8}, {0x7, 0x273e1899}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0xb7}, {0x8, 0x3}, {0x3, 0x1}, {0x7ff, 0x63}], 0xb, 0x3}, {[{0x1, 0x2}, {0x6, 0x3}, {0xffff, 0x1}, {0x1}, {0x4, 0x3}, {0x4, 0x3}, {0xaa7}, {0x100, 0x3}, {0x2}, {0xfffffff7, 0xb90af65875a5dc08}, {0x4, 0x3}], [{0xffffffff}, {0x8001, 0x7}, {0x10000, 0x7524}, {0x73d, 0x4}, {0x0, 0x280000}, {0x3, 0x3af}, {0x5, 0x2}, {0x101, 0xbf}, {0x10000, 0x6}, {0x3, 0x800}], 0x8, 0x5}], 0x3}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xa80) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r0, @ANYRES16=r5, @ANYBLOB="08002cbd7000fddbdf25080000000800040004000000050005000800000008000400f90c0000"], 0x2c}, 0x1, 0x0, 0x0, 0x4004004}, 0x48005) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x0, 0x18, 0x0, 0x0) syz_emit_ethernet(0x2c, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb1c00450000190000000003019078ac1414bbac1414aae92aa7907767742492b9"], 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x2, 0xd7, 0x1, 0x0, 0xff, 0x0, 0xc, 0x0, 0x8, 0x0, 0x2, 0x0, 0x5}, 0xe) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @local}]}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r7, 0x84, 0x19, &(0x7f00000001c0)={r8, 0x1}, 0x8) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000440)={0x4, &(0x7f0000001480)=[{0x28, 0x10, 0x0, 0xfffff034}, {0x4, 0x0, 0x2, 0xfffffffe}, {0x100, 0x3, 0xf9}, {0x4, 0x3, 0x3, 0xfffb}]}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000004c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08004510001c006600000602907864010100ac1414aa11ff907800000000"], 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000200)=ANY=[], 0x94}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000600)='GPL\x00'}, 0x94) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000015c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="c73125bd7000ffdbdf2510000000060028000300000005002a000000000008003a000100000008000b00ff00000008002b000500000005003800000000000a000900840b0e0800000000"], 0x50}, 0x1, 0x0, 0x0, 0x240000c1}, 0x880) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r11, &(0x7f0000000940)={0x10, 0x0, 0x25dfdbfd, 0x40000000}, 0xc) bind$netlink(r11, &(0x7f0000000980)={0x10, 0x0, 0x25dfdbfd}, 0xc) 9m48.632628911s ago: executing program 4 (id=5941): r0 = socket(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000040)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_ifindex=0x1, @empty}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendto(r2, &(0x7f00000000c0)="340000001a00010001000000000000000220000000000000000000000800030001000000080002000101010108000100e1010203", 0x34, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r0, &(0x7f0000000180)="240000001a005f0214f9f407000982001f000000fe0000000000000008000f00fd000000", 0x24) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x11, 0x3, r4, 0x1, 0xda, 0x6, @random="5b4be56a192e"}, 0x14) 9m41.84725466s ago: executing program 35 (id=5939): r0 = socket(0x10, 0x3, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x36, 0x0, &(0x7f00000002c0)="dcf4e9a1d78ad62ceef1884386dd78bb3fb7dbfc193ea3c3a18c09d64c3d01781b1044592e3276ae93bda94c63346fad9e9ab8440dc5", 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000300)="0102", 0x0}, 0x50) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202", 0x28}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2400cc10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d", @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x40084}, 0x2000800) (async) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async, rerun: 64) socket$kcm(0x29, 0x5, 0x0) (rerun: 64) 9m32.322126771s ago: executing program 36 (id=5941): r0 = socket(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000040)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_ifindex=0x1, @empty}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendto(r2, &(0x7f00000000c0)="340000001a00010001000000000000000220000000000000000000000800030001000000080002000101010108000100e1010203", 0x34, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r0, &(0x7f0000000180)="240000001a005f0214f9f407000982001f000000fe0000000000000008000f00fd000000", 0x24) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x11, 0x3, r4, 0x1, 0xda, 0x6, @random="5b4be56a192e"}, 0x14) 2m41.688470539s ago: executing program 3 (id=6839): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)='Z8', 0x2}], 0x1}, 0x1) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES32=r1], 0x0, 0x80}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r5, 0x1, 0x3}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0), &(0x7f0000000600), 0x4, r6, 0x4}, 0x38) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 2m41.261155511s ago: executing program 3 (id=6843): r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) (async) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='batadv_slave_0\x00', 0x10) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='batadv_slave_0\x00', 0x10) bind(r0, &(0x7f0000000140)=@isdn={0x22, 0xf9, 0xb, 0x8, 0x1}, 0x80) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xa0, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x28}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x81}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xa}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000819}, 0x40000) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendto(r0, &(0x7f0000000380)="8f794417f910c64feb069e27f9a9ee1e2b0fed957337ad57aa323668a1b2a4be939770a5591e370bcb31169fad05717cf9ca0d4ffa2a3bb68c244a610f48c3a81f519c65bb5371e1c4a91fc8b8aeb1e419", 0x51, 0x4080000, 0x0, 0x0) (async) sendto(r0, &(0x7f0000000380)="8f794417f910c64feb069e27f9a9ee1e2b0fed957337ad57aa323668a1b2a4be939770a5591e370bcb31169fad05717cf9ca0d4ffa2a3bb68c244a610f48c3a81f519c65bb5371e1c4a91fc8b8aeb1e419", 0x51, 0x4080000, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000400)={0xffffffffffffffff, 0x4d, 0x6, 0x800}) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000400)={0xffffffffffffffff, 0x4d, 0x6, 0x800}) setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, &(0x7f0000000440)=[{0x3, 0x3, {0x2, 0xf0, 0x4}, {0x1, 0x0, 0x1}, 0xff, 0xfd}, {0x1, 0x1, {0x2, 0xf0}, {0x0, 0xf0, 0x1}, 0xfe}, {0x2, 0x1, {0x0, 0xff}, {0x0, 0xf0, 0x2}, 0x0, 0xff}], 0x60) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f00000004c0)={r4, 0x4, 0x1, 0x4}) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000000500)={0x8, 0x2, {0x5, @struct={0x7, 0x93e}, 0x0, 0x6, 0x80000000, 0x7fffffff, 0x8, 0x7, 0x0, @usage=0x6, 0x8, 0xe0000000, [0x6, 0x8000, 0x80000001, 0x0, 0x6, 0xa]}, {0x7a0a, @usage=0x8, 0x0, 0x2ec, 0x343, 0x55, 0x2, 0x2, 0x50, @usage=0x4, 0x4c08, 0x3, [0x800000, 0x8, 0xfffffffffffffffb, 0x5, 0xe1, 0x1ff]}, {0xfffffffffffff001, @struct={0x6cb, 0x5}, 0x0, 0x5, 0x6, 0x9, 0x4, 0x3, 0x4, @struct={0x1, 0x6}, 0xfffffffb, 0x0, [0xac6, 0x7, 0x2, 0x7, 0xe32, 0xe47]}, {0xb21, 0x890, 0xd6f}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000900)={0x0, 0x4, 0x0, [0x4, 0x2, 0x400, 0xcec4, 0x1], [0x5, 0x1, 0x3, 0xfffffffffffffeff, 0xffffffff80000001, 0x98c, 0x1, 0x4a317c9f, 0xb, 0xcba6, 0x9000000000000000, 0x4, 0xb, 0x8, 0x9, 0x6a4, 0x1, 0x800, 0xc1, 0x3, 0xffffffffffffffff, 0x5, 0x7c7, 0x664f, 0xf405, 0x5, 0x2, 0x0, 0x1fa6, 0x5, 0x8000000000000000, 0x0, 0x4, 0x4000, 0x8000000000000001, 0x5, 0x3, 0x7, 0x2, 0x7fffffff, 0x3, 0x200, 0x8001, 0x6, 0x7fff, 0xff, 0x1, 0xd, 0x9, 0x0, 0xff5f, 0x9, 0xffffffff, 0x2, 0x0, 0x6, 0x8, 0xffffffffffffffff, 0x4, 0xfffffffffffffffe, 0xc94, 0x9, 0x6, 0x9, 0x9e92, 0x6, 0xbeb, 0xffffffffffffffff, 0x6, 0x9, 0x8000, 0xffffffff7fffffff, 0x101, 0x2, 0x8, 0xfffffffffffffff4, 0x8, 0x1ff, 0x3, 0x4, 0x7, 0x3, 0x7, 0xde2, 0xbb6, 0x1, 0x9, 0x200, 0x102000, 0xf, 0x92d, 0x4, 0x9570000000, 0x3, 0xfffffffffffffff7, 0x7, 0x3, 0x1ff, 0x6, 0xf1, 0x5, 0xfffffffffffffff7, 0x0, 0x2, 0x3, 0x400, 0x4, 0x6, 0x5, 0x8, 0x10000, 0x316, 0x10000000000, 0x9, 0x9, 0x5, 0x85, 0x8, 0x3]}) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000900)={0x0, 0x4, 0x0, [0x4, 0x2, 0x400, 0xcec4, 0x1], [0x5, 0x1, 0x3, 0xfffffffffffffeff, 0xffffffff80000001, 0x98c, 0x1, 0x4a317c9f, 0xb, 0xcba6, 0x9000000000000000, 0x4, 0xb, 0x8, 0x9, 0x6a4, 0x1, 0x800, 0xc1, 0x3, 0xffffffffffffffff, 0x5, 0x7c7, 0x664f, 0xf405, 0x5, 0x2, 0x0, 0x1fa6, 0x5, 0x8000000000000000, 0x0, 0x4, 0x4000, 0x8000000000000001, 0x5, 0x3, 0x7, 0x2, 0x7fffffff, 0x3, 0x200, 0x8001, 0x6, 0x7fff, 0xff, 0x1, 0xd, 0x9, 0x0, 0xff5f, 0x9, 0xffffffff, 0x2, 0x0, 0x6, 0x8, 0xffffffffffffffff, 0x4, 0xfffffffffffffffe, 0xc94, 0x9, 0x6, 0x9, 0x9e92, 0x6, 0xbeb, 0xffffffffffffffff, 0x6, 0x9, 0x8000, 0xffffffff7fffffff, 0x101, 0x2, 0x8, 0xfffffffffffffff4, 0x8, 0x1ff, 0x3, 0x4, 0x7, 0x3, 0x7, 0xde2, 0xbb6, 0x1, 0x9, 0x200, 0x102000, 0xf, 0x92d, 0x4, 0x9570000000, 0x3, 0xfffffffffffffff7, 0x7, 0x3, 0x1ff, 0x6, 0xf1, 0x5, 0xfffffffffffffff7, 0x0, 0x2, 0x3, 0x400, 0x4, 0x6, 0x5, 0x8, 0x10000, 0x316, 0x10000000000, 0x9, 0x9, 0x5, 0x85, 0x8, 0x3]}) ioctl$BTRFS_IOC_BALANCE_V2(r5, 0xc4009420, &(0x7f0000000d40)={0x0, 0x4, {0x9, @struct={0x8, 0x4}, r6, 0xffffffffffffffc0, 0x401, 0x9, 0x0, 0x6, 0x10, @usage=0xf591, 0x67, 0x0, [0x0, 0x2, 0x4, 0x0, 0x5, 0x2]}, {0x10001, @struct={0x800, 0x8}, r7, 0x6, 0x9b20, 0x81, 0x4a39, 0x2c, 0x0, @struct={0x10001, 0x101}, 0xfffffff8, 0x2, [0x3, 0x8, 0x5, 0x4, 0x0, 0x7]}, {0xd95, @struct={0x4, 0xfffffff7}, 0x0, 0x9, 0x4, 0x9e15, 0x6, 0x5, 0xe, @usage=0xeb1, 0x8000, 0x5, [0x40, 0x0, 0x4, 0x9501, 0x6]}, {0x9, 0x3f, 0x3}}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001180), r4) sendmsg$IPVS_CMD_GET_DAEMON(r4, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x58, r8, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x41}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x4080) (async) sendmsg$IPVS_CMD_GET_DAEMON(r4, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x58, r8, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x41}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x4080) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000001300), 0xffffffffffffffff) (async) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000001300), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000001400)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x68, r10, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffff7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x204}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x48c1) ioctl$BTRFS_IOC_FS_INFO(r5, 0x8400941f, &(0x7f0000001440)) r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001880), r9) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r9, &(0x7f00000019c0)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001980)={&(0x7f00000018c0)={0xb0, r11, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:checkpolicy_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x10}, 0x4008012) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000001a40), r4) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000001b00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x28, r12, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x404c000) sendmsg$NLBL_UNLABEL_C_ACCEPT(r9, &(0x7f0000001c80)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001b80)={0x84, r11, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'nicvf0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, '/usr/lib/telepathy/mission-control-5\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000001e40)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d00)={0xd8, r8, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe4}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x28}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1a, 0x3d}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x9}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x2e}}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x401}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8841}, 0x48d4) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000001f40)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001f00)={&(0x7f0000001ec0)={0x1c, r12, 0x100, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200c0800}, 0x8000) openat$cgroup_ro(r4, &(0x7f0000001f80)='cpuset.effective_mems\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0xb) (async) socket$netlink(0x10, 0x3, 0xb) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000020c0)={@map, 0x14, 0x0, 0xe256, &(0x7f0000001fc0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000002000)=[0x0, 0x0, 0x0], &(0x7f0000002040)=[0x0, 0x0, 0x0], &(0x7f0000002080)=[0x0, 0x0, 0x0, 0x0]}, 0x40) 2m40.911569864s ago: executing program 3 (id=6846): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000380)={0xfffffffffffffffc, 0x10000, 0x1000, 0x3, 0x7}, 0x20) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000011142302fd03ffa9f24a914de0ff0000000008000100000000a9a8913d357771b00030d45cc2074055ff"], 0x20}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001c00)=ANY=[@ANYBLOB="380100dc220033062cbd7000fcdbdf25fc0200000000000000000000000000007f00000100000000000000000080ee050000fffd000033000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32000000ac14000000000000030000000000000009000000000000000900000000000000020000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000005f000000000000000a00000000000000010100000000000000000000000100000000000002000000230000000000000048000200656362286369706865725f6e756c6c2900"/224], 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000001d40)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000001d80)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001dc0)={{{@in=@broadcast, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0xb7, 0x1, 0xfffffffe}}, 0xe8) write(r3, &(0x7f0000001ec0), 0x810) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001a40)={&(0x7f0000001ac0)=ANY=[@ANYRES32], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x44070) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x4, 0xe, 0x7, 0x6, 0x10, @local, @dev={0xfe, 0x80, '\x00', 0x5}, 0x88, 0x700, 0x0, 0x27}}) setsockopt$sock_int(r0, 0x1, 0x38, &(0x7f0000000140), 0x4) r4 = socket(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'hsr0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="01154e0001000011221e445588fbca0100011606", 0x1c, 0x4044015, &(0x7f0000000300)={0x11, 0x0, r5, 0x0, 0x0, 0x0}, 0x14) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448f0, &(0x7f00000000c0)="c16977f1ac") r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r7, 0x29, 0x19, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001ec0)={0xe, 0x4, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000002100)='GPL\x00', 0x4, 0xfd90, &(0x7f0000002140)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000002240), 0x366, 0x10, &(0x7f0000002280), 0x1dd}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000022c0)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='&\x00'/12, @ANYRES32=r8, @ANYBLOB="562f2ccf4e059cf67726984c773712b3bf8c296df0001d89cfdce9b538a24f9e128d73bfe4e0cacaaf6ed66b5d568c3ab6590da5c852b62621497bd34fdcfb5dbc704ce74d298bb9875fcf819ca1abc3e2b948e1774eeba988632cef55a9028a550048f9eff15f77e455b769acb88c79447435a8844d7272e2f58803b697bf730a00a03e8d2e1da938c482cb2fdff2f52d6d429ed700"/169, @ANYRES64=0x0], 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002380)={@map=r9, 0x26, 0x0, 0xf51, &(0x7f00000023c0)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000001940)={@loopback, 0x7, 0x1, 0xff, 0x8, 0xfffc, 0x700}, 0x20) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="2800000003080300000000000000000001000007050003003a0000beaa50027065c248fd95cf69f1c42216000c00048008002fd96757a8f22099c165cbba21a80b974ab6ca68ad83329e455bd11740c69e7a6b228848f2907586e3cbe43590f2c78e5cd84b942236d44373ef94bc399e2b63d3d52af47775a02a68142f893d5f3d7c2ebc51db48f04cd9c7985cfa283e5854ff5ea0b81f908c0ef79eb9fcc08af15f32db92600fa0b68c7a4ec1"], 0x28}, 0x1, 0x0, 0x0, 0x24000084}, 0x84) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r7, 0xc0c89425, &(0x7f00000003c0)={"40af12a82436c3540edcd0166619a003", 0x0, 0x0, {0xb, 0x8000}, {0x5, 0x4}, 0x1, [0xffff, 0x3, 0x3ff, 0x2, 0x194b, 0x5, 0x3, 0x8000, 0x0, 0x7, 0x5, 0xcd, 0x4, 0x8, 0xd, 0x40]}) 2m39.004322597s ago: executing program 7 (id=6847): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=r1, @ANYBLOB="0305000000d775dbdd000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa00000800030003000000080001001000000027499a7daccc"], 0x50}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r3) sendmsg$IEEE802154_LLSEC_DEL_KEY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, r4, 0x1, 0x70bd2c, 0x25ffdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000d1}, 0xd820) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x24, r6, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r6, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '%\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000003}, 0x4004000) (async) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m38.059741602s ago: executing program 6 (id=6849): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@initr0]}, &(0x7f0000000080)='syzkaller\x00'}, 0x90) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000100)="9247ed46bdc2c26da2c03135ffd82b28d00dc6bb5c95ceaa07f41e5950b0f1c380a3758d2f8625c97aba9b2b7d51d9cbacab9158a1e0a534099146965ea22ece098a1ee882b8d0231dae01c94bb758334b7041591c", 0x55}, {&(0x7f0000000240)="a135e08b2bdffd22e11670fc255cfa811b152dccb5a6ca72dabe23ec70b35dff3ae374cd0c5accc0561f5fd1cf1daf1d72cc22086ef0d3cf75518192b5e0ee55e3592bb06b15a7447f29a9cd018aeca66d53733ff8b38ec5f6c5b9f59cade3cdc098fe7844b8ea170297e7fd58f4a7e0a6102e6fcfbf724b1eb9d1932a1070ba184dcd71f2d4311d54150483158d383d5fdf07ec4077c36765e3745732abbd0175a642cccbaecce38b7693a6430c9a381e086d", 0xb3}, {&(0x7f0000000300)="74dcd0507d993f6246d97c04dd15a0af795aba9fdb4b2f9a8ceb2a08e39d3a1e423a4e519681d9", 0x27}], 0x3}, 0x800) ioctl$XFS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) socket$unix(0x1, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@initr0]}, &(0x7f0000000080)='syzkaller\x00'}, 0x90) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000100)="9247ed46bdc2c26da2c03135ffd82b28d00dc6bb5c95ceaa07f41e5950b0f1c380a3758d2f8625c97aba9b2b7d51d9cbacab9158a1e0a534099146965ea22ece098a1ee882b8d0231dae01c94bb758334b7041591c", 0x55}, {&(0x7f0000000240)="a135e08b2bdffd22e11670fc255cfa811b152dccb5a6ca72dabe23ec70b35dff3ae374cd0c5accc0561f5fd1cf1daf1d72cc22086ef0d3cf75518192b5e0ee55e3592bb06b15a7447f29a9cd018aeca66d53733ff8b38ec5f6c5b9f59cade3cdc098fe7844b8ea170297e7fd58f4a7e0a6102e6fcfbf724b1eb9d1932a1070ba184dcd71f2d4311d54150483158d383d5fdf07ec4077c36765e3745732abbd0175a642cccbaecce38b7693a6430c9a381e086d", 0xb3}, {&(0x7f0000000300)="74dcd0507d993f6246d97c04dd15a0af795aba9fdb4b2f9a8ceb2a08e39d3a1e423a4e519681d9", 0x27}], 0x3}, 0x800) (async) ioctl$XFS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) (async) socket$unix(0x1, 0x2, 0x0) (async) 2m37.796402491s ago: executing program 8 (id=6850): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10e) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0xc, &(0x7f00000000c0)=0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, 0x3a, 0x229, 0x0, 0x0, {0xa}, [@generic="750ec696b5"]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfffb}, {0xfff3, 0x2}, {0xffff, 0xe}}}, 0x24}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000000)={0x1, 0xffffffffffffffff, 0x80800}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000080)=0xd, 0x4) 2m34.717941454s ago: executing program 7 (id=6852): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000200)={0x1d, r2, 0x0, {0x0, 0x1, 0x1}, 0x2}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000240)={&(0x7f0000000280)={0x1d, 0x0, 0x14, {0x0, 0x1ee}}, 0x18, &(0x7f0000000300)={&(0x7f0000000340)='\x00', 0x8}}, 0x0) (async) sendmsg$can_j1939(r1, &(0x7f0000000240)={&(0x7f0000000280)={0x1d, 0x0, 0x14, {0x0, 0x1ee}}, 0x18, &(0x7f0000000300)={&(0x7f0000000340)='\x00', 0x8}}, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x6, 0x0, 0x4, {}, {0x77359400}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}}, 0x0) (async) sendmsg$can_bcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x6, 0x0, 0x4, {}, {0x77359400}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x7b73, 0x4) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x7b73, 0x4) socket$can_j1939(0x1d, 0x2, 0x7) (async) r4 = socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000ffdbdf252e00000008000300", @ANYRES32=r7, @ANYBLOB="0a0034000202020202020000080026006c"], 0x30}}, 0x0) setsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f0000000180), 0x4) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 2m34.348381965s ago: executing program 3 (id=6853): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0xe, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="8a0bc4ff0000000071109a0000000000950000000000000041ac23e298429a9e913303df1cf737a78a6d54d62ebfe86dd8ea2091d0276ad22730d6937717ea18bc08fd063db9bb7a3ffa831e6b06f7f531dbb4c58e99108c12a5053b0a1ab3e447883aec8467730e70257ac9bbcaf201a524b30f2dd01e48566c2a4793868ad2723b36ab73f7794084a8010bcb33"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x3, 0x207bd69a1050b5ff, 0x3, {r2, r3/1000+10000}, {0x0, 0xea60}, {0x4, 0x0, 0x1}, 0x1, @can={{0x3, 0x1, 0x1, 0x1}, 0x1, 0x2, 0x0, 0x0, "92de9d934941f93e"}}, 0x48}, 0x1, 0x0, 0x0, 0x48040}, 0x801) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500010000104000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000014000300697036746e6c300000000000000000001c0012800b000100697036746e6c00000c0002800800080000000400"], 0x50}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}, {&(0x7f00000002c0)="b99f86ed1af4c92c4c99569f7ab722cfa4e814d0414abd6b18465f3f19fee9e16f1be814e58d760d0ee6c56da8e65edfb785cc54e2b7b8a5cd66ddd0888290a5de679ef64acd01a95dcf566a15d729f694d8ed1a66f15e322c941a2a11293e25e9f585e579c6f9c1a686b1328ebb754944499c402e03fbc74ad52c9e3355df28587bcef5c36b379196bdecafb8d24b", 0x8f}, {&(0x7f0000000240)="076d14b549e9b564768b398360b9da37494e0fcca5812c1ad25b1828594ff04e5507b2b0165e77cc40eb32", 0x2b}], 0x3}, 0x20004800) 2m31.045597442s ago: executing program 6 (id=6854): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x30, 0xcf, 0x5, 0xfffff000}, {0x6}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5c, 0x41, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x3c, 0x1, 0x0, 0x0, @binary="00112233445566748899aabb86dd2c00001c00002b0001110000010101010253aa58fe6cbdf0357065ae44132403b1fd606412c3258e2b0d"}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x5c}}, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000046000901fefffffffeffffff017cb6000c0003804e2c", @ANYRESDEC], 0x20}, 0x1, 0x0, 0x0, 0x4048815}, 0xc000) 2m29.731596316s ago: executing program 8 (id=6855): r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4008}, 0x18) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001100)={r0, &(0x7f0000000080)="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", &(0x7f0000001080)=""/128}, 0x20) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000001140)) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000001180)={0xfe, 0x6}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001240)={{r0, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001300)={r1, 0x58, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001780)={{r0, &(0x7f0000001340)='/)&\x00', 0x212040, &(0x7f0000001380)={@align=0x8000000000000000, {0xff, 0xcfe, 0x7, 0x8000000000000000}}, 0x1, &(0x7f00000013c0), &(0x7f0000001400)=0x3}, 0x3, &(0x7f0000001700)=[{0x2, 0x8001, &(0x7f0000001440)=' \x00', &(0x7f0000001480)="7fe64d85ee73f36372b4e394fe2bd3c6b9d28d870effeef9bb48e3751af6e43d9030c09e4a0da24f90d17f39bd6e2da2decc4252b06cf72e09a9614ba94c4ce1a2ddaaa0b6e6ba0ce491ec669510fcd63cfa57636ab398280d4b008759ed7bb09c9525c884a55cdcd5bc603f2a56807560195b05bb1aef0589de8594b79df3a0c3e319df1cc5fbabe444c59ad2b6a5a7a4f93ed35bc79a5ac79bb9b6c8f30fac3a67e3adfe316ee47328c52c0a85eb36936599be422bb41f59854f1d37", 0xbd, 0x8}, {0x3, 0xa, &(0x7f0000001540)='\x00', &(0x7f0000001580)="ce85b561d293a44cb21b39886fac39ffa5fd60bac01a9ddedb548caaf5ac531e06c6d3fce6853029e336156b9c4fd071061557e0e7483308b0762d0137db2818750b49afc0ba61397c", 0x49, 0x34}, {0x3, 0x6, &(0x7f0000001600)='!{{:\\@,\x00', &(0x7f0000001640)="f446d8f772948f9f734c4b040cb8848e06badd233b15000ca8c62f9794ed8bb30efb09af85b70b67f0bdb955cc18056a807d7a33934d7dd57e60373411cbd478889728c9806748d10ffdb9ec8e66cdfeeaba9cbbbd95971df526de96dac139e618ad7435c7169ae7f1bdb9adaf3fc6eec76bb454774e596b514742c5e4acbe7d01f7e2b333791ea5", 0x88}]}) recvfrom$packet(r4, &(0x7f0000001800)=""/233, 0xe9, 0x10020, &(0x7f0000001900)={0x11, 0xf7, r3, 0x1, 0xb, 0x6, @random="decd322fcef9"}, 0x14) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000001940)={0x8, {{0x2, 0x4e24, @broadcast}}, {{0x2, 0x4e20, @broadcast}}}, 0x108) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r4, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x1}, 0x4004011) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000001b80)={'sit0\x00', &(0x7f0000001b00)={@remote, 0x1, 0x0, 0x60, 0x0, [{@multicast1}, {@local}, {@initdev}, {@initdev}, {@dev}, {@loopback}]}}) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f0000001bc0)={@rand_addr=' \x01\x00', r3}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f0000001c40)={'sit0\x00', &(0x7f0000001c00)={@private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0xf, 0xc}}) ioctl$EXT4_IOC_SETFSUUID(r1, 0x4008662c, &(0x7f0000001c80)={0x10, 0x0, "03ddf38fa6522477c9d427b4f41e2749"}) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001d00), r4) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000001e00)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d40)={0x54, r5, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1c}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x22}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x61}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x80}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffffc}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r6 = openat$cgroup_ro(r4, &(0x7f0000001e40)='pids.current\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r6, 0xf50f, 0x0) openat$cgroup(r4, &(0x7f0000001e80)='syz0\x00', 0x200002, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001ec0)={r2, 0x400, 0x8}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001f00)={r2, 0x1, 0x38}, 0xc) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001f40)={0x1b, 0x0, 0x0, 0x8, 0x0, r4, 0x1, '\x00', 0x0, r4, 0x3, 0x2}, 0x50) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r8, 0x11a, 0x2, &(0x7f0000001fc0)=@gcm_128={{0x304}, "26975db5d09bbc7d", "17abe1a92315c6684c20fe48b3bcfc77", "d08221ae", "ce03bb1190ee17d1"}, 0x28) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f0000002000)=0x80000000, 0x4) close(r6) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000002080), r6) sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000002180)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x4000080}, 0xc, &(0x7f0000002140)={&(0x7f00000020c0)={0x68, r9, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x176}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="b19815b76a2d"}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0xc080) ioctl$XFS_IOC_FSGETXATTRA(r7, 0x801c582d, &(0x7f00000021c0)) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000002280)={r6, r4}, 0x10) 2m28.255984903s ago: executing program 7 (id=6856): r0 = socket$inet_icmp(0x2, 0x2, 0x1) close(r0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x200}, 0x8) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="900000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa88800000000600012800b0001006772657461700000500002800800140006000000050016000200000006000e0000000000060018000400000004001200050013"], 0x90}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 2m26.504377137s ago: executing program 3 (id=6857): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000200)=0x1, 0x4) r1 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="953a04"], 0x24}}, 0x0) recvmmsg$unix(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)=""/200, 0xc8}, {&(0x7f00000006c0)=""/249, 0xf9}, {&(0x7f00000007c0)=""/4098, 0x1002}, {&(0x7f0000001800)=""/97, 0x61}, {&(0x7f0000001880)=""/104, 0x68}, {&(0x7f0000001900)=""/25, 0x19}, {&(0x7f0000001940)=""/130, 0x82}, {&(0x7f0000001a00)=""/133, 0x85}], 0x8}}], 0x1, 0x2080, 0x0) write(r1, &(0x7f0000001ac0)="1400000052004f7fb3e4bf80a000080000000000", 0x14) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x4e24, 0xfffffffe, @loopback, 0x1}}, 0x0, 0x0, 0x4c, 0x0, "5aa1f50a3cb63c3635852b1d0b0ac8bbc455e170385fefb683affb65799f7a308ec96cd29e9b33df174bcdcf78a7bccda39e047719afe332de441e7e8e68bf5adbf7a35d75885fb07c3e40612a459451"}, 0xd8) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000400)={0xa, 0x4e20, 0x3, @empty, 0x7}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000600)="78be47903628080903319c2296215b6419dc8b5124e8ffdd8485cab50e5f53c49bec9b611adc75b424b4533f8bef53ede12594cca107b1a58a933a38c6534497016a031eec9c6200fc495e870f0527721be7bb8b0086a25f4160187e88cbf583ec4763d1da79cd452570ea683f70c4b9b346b3bb492fea773af6ddf1425364bf182247ae", 0x84}], 0x1}}], 0x1, 0x20084058) 2m24.624185136s ago: executing program 7 (id=6859): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x24, &(0x7f0000000280)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x14}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0xa, 0x0, 0x2, 0xd55}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfff8}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x3}, {0x46, 0x8, 0xfff0, 0x76}}, @printk={@lu, {0x3, 0x3, 0x3, 0x4, 0x9}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}}], {{0x7, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000003c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x30, 0x40, 0x200, 0xfffffffe, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x14, 0x0, 0x1, [@nested={0x4, 0x19}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 2m23.97415639s ago: executing program 8 (id=6860): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff}) (async) r1 = socket$netlink(0x10, 0x3, 0x0) splice(r0, 0x0, r1, 0x0, 0x10d00, 0xf) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071109800000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007313000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a83469620c6e74e1f46132559c4f8700a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62c49d15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000000000"], &(0x7f00000001c0)='GPL\x00', 0x57, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, r0, 0x8, &(0x7f0000000000)={0x0, 0x80000000}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xb}, 0x10}, 0x94) 2m22.771280239s ago: executing program 3 (id=6861): r0 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1e, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000711219000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x0, 0x8002, 0x7}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r1, 0x0, &(0x7f00000007c0)=""/53}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000880)={'sit0\x00', &(0x7f0000000800)={'erspan0\x00', 0x0, 0x7800, 0x80, 0x14, 0x5, {{0xa, 0x4, 0x1, 0x20, 0x28, 0x66, 0x0, 0x2a, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast2, {[@timestamp={0x44, 0x10, 0x47, 0x0, 0x0, [0x4, 0x3, 0x3]}, @ra={0x94, 0x4, 0x1}]}}}}}) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000008c0), 0x0) close(r3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000a00)={'tunl0\x00', &(0x7f0000000900)={'syztnl0\x00', r2, 0x7, 0x80, 0x6, 0x5, {{0x2d, 0x4, 0x0, 0x3, 0xb4, 0x68, 0x0, 0x2, 0x4, 0x0, @rand_addr=0x64010100, @multicast2, {[@timestamp_prespec={0x44, 0xc, 0xcb, 0x3, 0x0, [{@local, 0x20f6}]}, @cipso={0x86, 0x66, 0x0, [{0x5, 0x10, "609fd99dfc9d6b020ff7d9d9b1bd"}, {0x7, 0x6, "9dd81bb7"}, {0x5, 0x8, "fa7c67dcabea"}, {0x6, 0xf, "939f63f8ab8e7ceddf8a02d517"}, {0x2, 0x8, "6116b290b9a0"}, {0x5, 0xc, "a362f17b3b2b35bdd487"}, {0x2, 0xd, "6876e734806e8a124b0154"}, {0x7, 0x12, "d2105bde5a496f957d69204b3b739ee0"}]}, @ra={0x94, 0x4}, @generic={0x88, 0xa, "9a03cfb940854f1c"}, @ssrr={0x89, 0x1f, 0x57, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @broadcast, @local, @loopback, @broadcast, @multicast1]}]}}}}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x17, 0x0, 0xffffffff, 0x9, 0x404, 0xffffffffffffffff, 0x101, '\x00', r4, r3, 0x0, 0x5, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r5, &(0x7f0000000340), &(0x7f0000000380)=@tcp6, 0x1000000}, 0x20) r6 = socket$inet6(0xa, 0x3, 0x1) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000340)={'syzkaller1\x00', 0xc201}) r9 = socket$inet_udp(0x2, 0x2, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r9], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r9, &(0x7f0000000500)={0x2, 0x4e20, @empty}, 0x10) r11 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000540)={'syzkaller1\x00', @broadcast}) write$tun(r8, &(0x7f0000000580)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x30, 0x66, 0x0, 0x3, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x1c, 0x0, @opaque="205c8168f9b7bb267485127b371dbf07513fb65f"}}}, 0x3e) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x0, 0x9, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1}]}]}, 0xfc}}, 0x0) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x3, 0x400003, @loopback, 0x2}, 0x1c) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 2m21.998636995s ago: executing program 6 (id=6863): r0 = socket$igmp6(0xa, 0x3, 0x3a) accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000180)=0x1c) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x3, 0x400003, @loopback, 0x2}, 0x1c) getsockopt$MRT6(r1, 0x29, 0xd0, 0xffffffffffffffff, &(0x7f00000001c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x8) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000040)=0x400000001, 0xc2) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt(r2, 0xfffffffd, 0xa0482, &(0x7f0000000080)="df820c5ee5b11100000006000000000000000000000074770a000000000000000ee5cd3cd617569c00000000ffffffff44e9179a4e71303f4dfd960367b3b5ef1415ce35220cc670f07a451b414a1fe998d7ddb1f7322a42a0a1ab967fb1a201bb1adb4353808c4583123f8b281ee0fc63a72af148dab2cd00"/146, 0x92) setsockopt(r3, 0x0, 0x487, &(0x7f0000000200)="110000007f0000014e2100000000000074776f730000000000000000000000000000000000000000ffffffff7f0000014e210000000000000100"/68, 0x44) setsockopt(r3, 0x5, 0x487, &(0x7f0000000300)="110000007f0000014e2100000000000074776f730000000000000000000000000000000000000000ffffffff7f0000024e2200"/68, 0x44) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r4, &(0x7f0000000400)="12345678", 0x4, 0x20004044, &(0x7f0000000500)={0x2, 0x4e21, @local={0x7f, 0x0, 0x0, 0x1}}, 0x10) 2m17.059316796s ago: executing program 7 (id=6864): r0 = socket(0x15, 0x5, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x70}, 0x1, 0x0, 0x0, 0xc001}, 0x4884) (async) r1 = socket$kcm(0x2, 0xa, 0x2) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r2, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40002023, 0x0) (async) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000000840)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r3, 0x8) (async) r4 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000880)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f00000008c0)={0x6, 0x0, 0x6, 0x691}, 0x10) (async) sendto$inet6(r4, &(0x7f0000000900)='x', 0x1, 0x4000000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000940)={0x0, 0x1}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000980)={0x0, 0x2}, 0x8) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000003c0)={'syzkaller1\x00', @link_local}) (async) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000500)={'geneve0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r6, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2, 0x0, 0x4003}, 0x0) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a64000000060a010400000000000000000a0000040900010073797a310000000038000480340001800b0001006e756d67656e0000240002800800014000000012080003407b55aec908000440fffffffa08000240000082960900020073797a32"], 0x8c}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) (async) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), r0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000600), 0xc, &(0x7f0000000740)={&(0x7f00000009c0)={0x98, r9, 0x10, 0x70bd29, 0x25dfdbff, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}]}, 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r7) sendmsg$IEEE802154_SCAN_REQ(r7, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ac0)={0x1c, r10, 0xd5c15c672e322a81, 0x0, 0x0, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5}]}, 0x1c}}, 0x0) (async) r11 = accept4(r8, &(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000300)=0x80, 0x80000) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r11) 2m16.168460182s ago: executing program 8 (id=6865): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES16=0x0, @ANYBLOB="43dd02eeb78a2d22668eb37d0e42cc03ae6fa23ce1ef1e4577b687c2dc616c627fbe77a5d2a7e4aa2a83a56fe913eac6e17241f73b83294bb89013ebaf4de69ec6a11517a62e4f7cb5092757043bec0f10b5e6e3f1e9a26184ebaf7f6f88193d5f5eb8e20eb29b6aaad924c3fa1fa0e40473efdf8e21ec13a1a63cf9d31fdd96cf9e79b5b81d4a173e"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}}, 0x0) 2m13.783734667s ago: executing program 6 (id=6867): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000280)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x4, &(0x7f00000003c0)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000002c0)=r2) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000480)=0x1, 0x4) r3 = socket(0x10, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x56, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@canfd={0xd, {{0x1}, 0x24, 0x1, 0x0, 0x0, "2c63ecefc9e14a1ab3afcf882bcd49561375f47fd8dfda46652820f554caf364339a7057404d6a439711a0dbfe6b3a5835d94a5ec6d4fe10f0dcfa083202de47"}}}}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x500, 0x0, 0xd0, 0x1a0, 0x270, 0x340, 0x0, 0xd0, 0x1a0, 0x270, 0x430, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@empty, 0x40, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) connect$inet6(r3, &(0x7f0000000a40)={0xa, 0x0, 0x0, @mcast2, 0x1007}, 0x1c) sendto$inet6(r4, &(0x7f0000000a80), 0x0, 0x3b00, 0x0, 0xffffffffffffffa4) write(r3, &(0x7f0000000000)="240000001c005ff6991a2b200e0f7a0002000000000000000000080008000e00000000ff", 0x24) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1e, 0x6, 0x8, 0xc, 0x18, 0xffffffffffffffff, 0x9}, 0x50) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'pim6reg\x00'}) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f00000001c0)={'wg0\x00', @random="482bb2234b3a"}) 2m8.387821872s ago: executing program 7 (id=6868): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x23, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r5, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/236, 0xec}, {&(0x7f0000000500)=""/62, 0x3e}, {&(0x7f0000000680)=""/4105, 0x1009}], 0x3}, 0x8}], 0x1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRESDEC=r4, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r3], 0x5c}}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xc, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0xbf}], {0x95, 0x0, 0x700}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x23, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) (async) recvmmsg(r5, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/236, 0xec}, {&(0x7f0000000500)=""/62, 0x3e}, {&(0x7f0000000680)=""/4105, 0x1009}], 0x3}, 0x8}], 0x1, 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRESDEC=r4, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r3], 0x5c}}, 0x40) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xc, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0xbf}], {0x95, 0x0, 0x700}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) 2m6.735649849s ago: executing program 37 (id=6861): r0 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1e, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000711219000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x0, 0x8002, 0x7}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r1, 0x0, &(0x7f00000007c0)=""/53}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000880)={'sit0\x00', &(0x7f0000000800)={'erspan0\x00', 0x0, 0x7800, 0x80, 0x14, 0x5, {{0xa, 0x4, 0x1, 0x20, 0x28, 0x66, 0x0, 0x2a, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast2, {[@timestamp={0x44, 0x10, 0x47, 0x0, 0x0, [0x4, 0x3, 0x3]}, @ra={0x94, 0x4, 0x1}]}}}}}) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000008c0), 0x0) close(r3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000a00)={'tunl0\x00', &(0x7f0000000900)={'syztnl0\x00', r2, 0x7, 0x80, 0x6, 0x5, {{0x2d, 0x4, 0x0, 0x3, 0xb4, 0x68, 0x0, 0x2, 0x4, 0x0, @rand_addr=0x64010100, @multicast2, {[@timestamp_prespec={0x44, 0xc, 0xcb, 0x3, 0x0, [{@local, 0x20f6}]}, @cipso={0x86, 0x66, 0x0, [{0x5, 0x10, "609fd99dfc9d6b020ff7d9d9b1bd"}, {0x7, 0x6, "9dd81bb7"}, {0x5, 0x8, "fa7c67dcabea"}, {0x6, 0xf, "939f63f8ab8e7ceddf8a02d517"}, {0x2, 0x8, "6116b290b9a0"}, {0x5, 0xc, "a362f17b3b2b35bdd487"}, {0x2, 0xd, "6876e734806e8a124b0154"}, {0x7, 0x12, "d2105bde5a496f957d69204b3b739ee0"}]}, @ra={0x94, 0x4}, @generic={0x88, 0xa, "9a03cfb940854f1c"}, @ssrr={0x89, 0x1f, 0x57, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @broadcast, @local, @loopback, @broadcast, @multicast1]}]}}}}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x17, 0x0, 0xffffffff, 0x9, 0x404, 0xffffffffffffffff, 0x101, '\x00', r4, r3, 0x0, 0x5, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r5, &(0x7f0000000340), &(0x7f0000000380)=@tcp6, 0x1000000}, 0x20) r6 = socket$inet6(0xa, 0x3, 0x1) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000340)={'syzkaller1\x00', 0xc201}) r9 = socket$inet_udp(0x2, 0x2, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r9], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r9, &(0x7f0000000500)={0x2, 0x4e20, @empty}, 0x10) r11 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000540)={'syzkaller1\x00', @broadcast}) write$tun(r8, &(0x7f0000000580)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x30, 0x66, 0x0, 0x3, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x1c, 0x0, @opaque="205c8168f9b7bb267485127b371dbf07513fb65f"}}}, 0x3e) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x0, 0x9, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1}]}]}, 0xfc}}, 0x0) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x3, 0x400003, @loopback, 0x2}, 0x1c) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 2m6.268751508s ago: executing program 8 (id=6870): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001880)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001a40)=ANY=[@ANYBLOB="4c0000001c00010c00000000000000f0a4c41600", @ANYRES32=r2, @ANYBLOB="80001f0008000700050000000a000200000000000000000008000a00050000001400030000000000010000000500000040000000"], 0x4c}, 0x1, 0x0, 0x0, 0x672ca17435fb0b5d}, 0x20000800) 2m3.204294828s ago: executing program 6 (id=6872): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00'}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x5, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x5}]}, 0x1c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x104}, 0x50) 1m56.447756152s ago: executing program 6 (id=6873): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}, {0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf4}}, 0x0) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x38}}, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x48}, 0x1, 0x0, 0x0, 0x90}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0xc201}) (async) r5 = socket$kcm(0x2, 0xa, 0x2) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r7 = socket$unix(0x1, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x6}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) (rerun: 64) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000500)={'syzkaller1\x00', @link_local}) (async) write$tun(r2, &(0x7f0000000540)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x3}, @ipv4=@icmp={{0x5, 0x4, 0x1, 0x16, 0x1c, 0x65, 0x0, 0x4, 0x1, 0x0, @remote, @broadcast}, @address_reply={0x12, 0x0, 0x0, 0xffff}}}, 0x2a) (async) r9 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r9, &(0x7f0000000200)="11223344", 0x4, 0x0, &(0x7f0000000300)={0x2, 0x4d2, @remote}, 0x10) 1m54.228193491s ago: executing program 8 (id=6874): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x20, &(0x7f00000002c0)={&(0x7f0000000100)=""/197, 0xc5, 0x0, &(0x7f0000000200)=""/159, 0x9f}}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x14, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x4, 0x8, 0xddde}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f00000004c0)=[{0x2, 0x5, 0x8, 0x9}, {0x3, 0x3, 0xc, 0x1}, {0x0, 0x5, 0x5, 0x2}, {0x5, 0x4, 0x2, 0x3}], 0x10, 0x1}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newqdisc={0x3c, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x10, 0xfffa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}, @TCA_INGRESS_BLOCK={0x8}]}, 0x3c}}, 0x24040804) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000740)={'syzkaller0\x00', 0x4001}) r7 = socket$inet(0x2, 0xa, 0x9cff) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000780)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f00000007c0)={'syzkaller0\x00', 0x1}) r8 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r8, &(0x7f0000000800)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r8, 0x5) write$tun(r6, &(0x7f0000000880)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d23210000000000000000002"], 0x4a) setsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f00000006c0)=0x2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x26, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000010000000000000000000000791200000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x50, '\x00', r4, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, r1}, 0x94) 1m52.062692378s ago: executing program 38 (id=6868): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x23, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r5, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/236, 0xec}, {&(0x7f0000000500)=""/62, 0x3e}, {&(0x7f0000000680)=""/4105, 0x1009}], 0x3}, 0x8}], 0x1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRESDEC=r4, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r3], 0x5c}}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xc, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0xbf}], {0x95, 0x0, 0x700}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x23, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) (async) recvmmsg(r5, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/236, 0xec}, {&(0x7f0000000500)=""/62, 0x3e}, {&(0x7f0000000680)=""/4105, 0x1009}], 0x3}, 0x8}], 0x1, 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRESDEC=r4, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r3], 0x5c}}, 0x40) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xc, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0xbf}], {0x95, 0x0, 0x700}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) 1m39.854692418s ago: executing program 39 (id=6873): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}, {0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf4}}, 0x0) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x38}}, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x48}, 0x1, 0x0, 0x0, 0x90}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0xc201}) (async) r5 = socket$kcm(0x2, 0xa, 0x2) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r7 = socket$unix(0x1, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x6}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) (rerun: 64) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000500)={'syzkaller1\x00', @link_local}) (async) write$tun(r2, &(0x7f0000000540)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x3}, @ipv4=@icmp={{0x5, 0x4, 0x1, 0x16, 0x1c, 0x65, 0x0, 0x4, 0x1, 0x0, @remote, @broadcast}, @address_reply={0x12, 0x0, 0x0, 0xffff}}}, 0x2a) (async) r9 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r9, &(0x7f0000000200)="11223344", 0x4, 0x0, &(0x7f0000000300)={0x2, 0x4d2, @remote}, 0x10) 1m37.223642213s ago: executing program 40 (id=6874): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x20, &(0x7f00000002c0)={&(0x7f0000000100)=""/197, 0xc5, 0x0, &(0x7f0000000200)=""/159, 0x9f}}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x14, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x4, 0x8, 0xddde}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f00000004c0)=[{0x2, 0x5, 0x8, 0x9}, {0x3, 0x3, 0xc, 0x1}, {0x0, 0x5, 0x5, 0x2}, {0x5, 0x4, 0x2, 0x3}], 0x10, 0x1}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newqdisc={0x3c, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x10, 0xfffa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}, @TCA_INGRESS_BLOCK={0x8}]}, 0x3c}}, 0x24040804) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000740)={'syzkaller0\x00', 0x4001}) r7 = socket$inet(0x2, 0xa, 0x9cff) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000780)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f00000007c0)={'syzkaller0\x00', 0x1}) r8 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r8, &(0x7f0000000800)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r8, 0x5) write$tun(r6, &(0x7f0000000880)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d23210000000000000000002"], 0x4a) setsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f00000006c0)=0x2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x26, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000010000000000000000000000791200000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x50, '\x00', r4, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, r1}, 0x94) 43.836448872s ago: executing program 9 (id=6893): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000440)={0xa, 0x4e24, 0xffffffff, @mcast1, 0x10000}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=[@flowinfo={{0x14, 0x29, 0xb, 0x7}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x2b}}}], 0x60}, 0x48010) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1e, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="8500003b0000008206937b7aa8f332000000000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = socket$l2tp(0x2, 0x2, 0x73) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg2\x00', 0x0}) sendmmsg$inet(r2, &(0x7f00000003c0)=[{{&(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)="926f5793a65b537dfd54f05c03b04f58a861f55372c00e89d09329c322980c114a0e32efe0488abc560429339155c38103ba9c1e8276023f74f7", 0x3a}, {&(0x7f00000000c0)="59d9498c4093280273dab033d149eadae174256172dce1", 0x17}, {&(0x7f00000001c0)="4a754dd603b8ec93df7c40c1aec077d0c3fa90b463fb7ca274dcf66fddb36742ea726b308b64cdb1c150d8a6f5921c15e5b833e55a9f898e0c5a4a4fa81c9423537cea3e9ec57d4cb7f912aec57385894ccebb9e6ed1ad0cd0", 0x59}], 0x3, &(0x7f0000000340)=[@ip_tos_u8={{0x11}}, @ip_retopts={{0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @rand_addr=0x64010100, @broadcast}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast1, @empty}}}], 0x68}}], 0x1, 0x4000) 43.757143835s ago: executing program 9 (id=6894): r0 = socket(0x1, 0x2, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001"], 0x6c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) readv(r1, &(0x7f0000000280)=[{&(0x7f00000016c0)=""/4122, 0x101a}, {&(0x7f0000002700)=""/158, 0x9e}], 0x2) syz_genetlink_get_family_id$batadv(&(0x7f00000027c0), r1) sendmsg$nl_generic(r1, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000002840)={&(0x7f0000002880)=ANY=[@ANYBLOB="1400000015000103"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x2, 0x0, 0x0) r4 = socket(0x1, 0x803, 0x0) sendto$unix(r4, 0x0, 0x3f, 0x800, &(0x7f0000000700)=@file={0x0, './file0\x00'}, 0x6e) 42.767314699s ago: executing program 9 (id=6895): socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) r1 = socket(0x2a, 0x2, 0x0) bind$bt_hci(r1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRESOCT=r0, @ANYBLOB="d70bbbaf0000000000003980000519000300", @ANYRESOCT=r2, @ANYRESDEC=r0], 0x40}, 0x1, 0x0, 0x0, 0x4c040}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r4 = socket$netlink(0x10, 0x3, 0xf) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000780)=0x14) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x20048095) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0xfffffffffffffea8, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYRES8=r4], 0x3c}}, 0x44000) sendmsg$nl_route(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="202000001400120028bd7000fcdbdf2502200141", @ANYRES32=r6, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x40000c0) sendmsg$nl_route(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="58000000100003052abd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000006380000300012800b00010069703667726500002000028008000c000004000014000600fc01000000000000000000000000000008000a00", @ANYRES32=r6], 0x58}}, 0x0) 35.456082904s ago: executing program 9 (id=6896): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}]}, 0x58}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xa, &(0x7f0000000280)=@raw=[@generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x18, 0x2, 0x0, 0x0, 0x4}, @generic, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4, 0x0, 0x0, 0xff}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000600)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xfffffffffffffee8, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x22, 0x0, &(0x7f00000003c0)="001122334455001122334456080045000028000000004006f8ce0a0000010a000002", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000500)="a2", 0xfffffd2a}], 0x1, 0x0, 0x0, 0x20000000}, 0x4000041) close(r8) close(r7) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'tunl0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x40084) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d40)=@newlink={0x34, 0x10, 0x439, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r6, 0x0, 0x110d1}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8041}, 0x40000880) 24.351968795s ago: executing program 9 (id=6897): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="eb", 0x1}], 0x1, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)=""/106, 0x6a}], 0x1}, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000040)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000080)={0x3}, 0x10) sendto$inet(r3, &(0x7f00000000c0)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8) sendmmsg$inet6(r3, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)='y', 0x1}], 0x1}}], 0x1, 0x0) close(r3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x4, 0x3, &(0x7f0000000640)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x6c}}, &(0x7f0000000680)='GPL\x00'}, 0x90) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x0) accept4$vsock_stream(r4, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x0, 0x80000) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) 16.955513734s ago: executing program 9 (id=6898): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000a80)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000006800010000000000000000000a00000000000000060007000200000018000880140001000000000000000000000004000000000008000500", @ANYRES32=r3, @ANYBLOB="22aec1284b57a6887f12316f3a9b130fea35ab66474dd920ea726a7bcc262b42113ca89aa64b0b9e0e65d7e454b3b49cc5fe15f9e904ec518b17deb38b"], 0x40}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x140, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfd, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4e044}, 0x4010) 0s ago: executing program 41 (id=6898): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000a80)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000006800010000000000000000000a00000000000000060007000200000018000880140001000000000000000000000004000000000008000500", @ANYRES32=r3, @ANYBLOB="22aec1284b57a6887f12316f3a9b130fea35ab66474dd920ea726a7bcc262b42113ca89aa64b0b9e0e65d7e454b3b49cc5fe15f9e904ec518b17deb38b"], 0x40}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x140, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfd, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4e044}, 0x4010) kernel console output (not intermixed with test programs): [ 1224.049465][ T5656] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1224.068801][ T5656] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1224.070162][ T5656] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1224.072172][ T5656] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1224.072888][ T5656] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1224.980846][T23619] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1225.009967][T23619] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1225.031773][T23619] bond0 (unregistering): Released all slaves [ 1225.334848][T23619] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1225.362751][T23619] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1225.379724][T23619] bond0 (unregistering): Released all slaves [ 1225.693684][T23619] erspan0 (unregistering): left allmulticast mode [ 1225.693715][T23619] erspan0 (unregistering): left promiscuous mode [ 1225.768895][T23619] bond8 (unregistering): (slave macvlan1): Releasing backup interface [ 1225.947964][ T5656] Bluetooth: hci1: command tx timeout [ 1226.123161][T23619] bond5 (unregistering): (slave bridge2): Releasing active interface [ 1226.205134][T27302] Bluetooth: hci2: command tx timeout [ 1226.263069][T23619] .` (unregistering): Released all slaves [ 1226.292547][T23619] bond1 (unregistering): Released all slaves [ 1226.323530][T23619] bond2 (unregistering): (slave veth3): Removing an active aggregator [ 1226.324360][T23619] bond2 (unregistering): (slave veth3): Releasing backup interface [ 1226.347155][T23619] bond2 (unregistering): Released all slaves [ 1226.363857][T23619] bond3 (unregistering): Released all slaves [ 1226.380812][T23619] bond4 (unregistering): Released all slaves [ 1226.404320][T23619] bond5 (unregistering): Released all slaves [ 1226.423833][T23619] bond6 (unregistering): Released all slaves [ 1226.678828][T23619] bond0 (unregistering): (slave veth7): Releasing active interface [ 1226.698041][T23619] bond0 (unregistering): Released all slaves [ 1226.725276][T23619] bond7 (unregistering): Released all slaves [ 1226.757449][T23619] bond8 (unregistering): Released all slaves [ 1226.793139][T23619] bond9 (unregistering): Released all slaves [ 1227.280403][T23619] batman_adv: batadv0: Removing interface: gretap2 [ 1227.382250][T23619] bond9 (unregistering): (slave geneve4): Releasing active interface [ 1227.540323][T23619] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1227.713161][T23619] bond0 (unregistering): Released all slaves [ 1227.741996][T23614] smbdirect: ib_dev[syz1] removed [ 1227.746047][T23619] bond1 (unregistering): Released all slaves [ 1227.801174][T23619] bond2 (unregistering): Released all slaves [ 1227.856637][T23619] bond3 (unregistering): Released all slaves [ 1227.885263][T23619] bond4 (unregistering): Released all slaves [ 1227.940532][T23619] bond5 (unregistering): Released all slaves [ 1227.970883][T23619] bond6 (unregistering): Released all slaves [ 1227.993355][T23619] bond7 (unregistering): Released all slaves [ 1228.019170][T23619] bond8 (unregistering): Released all slaves [ 1228.040859][ T5656] Bluetooth: hci1: command tx timeout [ 1228.123982][T23619] bond9 (unregistering): Released all slaves [ 1228.151473][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1228.151601][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1228.260819][ T5296] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1228.261311][T29981] infiniband syz1: ib_query_port failed (-19) [ 1228.267712][ T5656] Bluetooth: hci2: command tx timeout [ 1230.183048][T27302] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1230.210215][T27302] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1230.211318][T27302] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1230.212481][T27302] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1230.213232][T27302] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1230.350666][T27302] Bluetooth: hci2: command tx timeout [ 1231.951000][T30254] virt_wifi0 speed is unknown, defaulting to 1000 [ 1231.984304][T30147] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1232.002470][T30147] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1232.099847][T23619] ovs-dp0: left promiscuous mode [ 1232.427452][ T5656] Bluetooth: hci2: command tx timeout [ 1232.522511][ T5656] Bluetooth: hci3: command tx timeout [ 1232.552906][T30147] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1232.565572][T30147] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1232.660362][ T5296] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1232.679712][T30147] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1232.714611][T30147] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1232.715631][T30147] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1232.741149][T30147] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1232.871286][T30203] bridge0: port 1(bridge_slave_0) entered blocking state [ 1232.871464][T30203] bridge0: port 1(bridge_slave_0) entered disabled state [ 1232.871635][T30203] bridge_slave_0: entered allmulticast mode [ 1232.875666][T30203] bridge_slave_0: entered promiscuous mode [ 1232.945577][T30203] bridge0: port 2(bridge_slave_1) entered blocking state [ 1232.945711][T30203] bridge0: port 2(bridge_slave_1) entered disabled state [ 1232.945893][T30203] bridge_slave_1: entered allmulticast mode [ 1232.978431][T30203] bridge_slave_1: entered promiscuous mode [ 1233.121253][T30203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1233.159510][T30061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1233.164089][T30203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1233.325079][T30203] team0: Port device team_slave_0 added [ 1233.397827][T30203] team0: Port device team_slave_1 added [ 1233.710493][T30061] 8021q: adding VLAN 0 to HW filter on device team0 [ 1233.899762][T23622] bridge0: port 1(bridge_slave_0) entered blocking state [ 1233.899950][T23622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1233.930085][T30203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1233.930106][T30203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1233.930134][T30203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1234.004627][T30203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1234.004651][T30203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1234.004681][T30203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1234.042172][T30273] virt_wifi0 speed is unknown, defaulting to 1000 [ 1234.473526][T23622] bridge0: port 2(bridge_slave_1) entered blocking state [ 1234.473650][T23622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1234.587076][ T5656] Bluetooth: hci3: command tx timeout [ 1234.841720][T23619] !;: left promiscuous mode [ 1234.902099][ T5296] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1234.958966][T30203] hsr_slave_0: entered promiscuous mode [ 1234.960221][T30203] hsr_slave_1: entered promiscuous mode [ 1234.961115][T30203] debugfs: 'hsr0' already exists in 'hsr' [ 1234.961137][T30203] Cannot create hsr debugfs directory [ 1235.588672][T30254] bridge0: port 1(bridge_slave_0) entered blocking state [ 1235.588816][T30254] bridge0: port 1(bridge_slave_0) entered disabled state [ 1235.589289][T30254] bridge_slave_0: entered allmulticast mode [ 1235.592116][T30254] bridge_slave_0: entered promiscuous mode [ 1235.687707][T30254] bridge0: port 2(bridge_slave_1) entered blocking state [ 1235.687847][T30254] bridge0: port 2(bridge_slave_1) entered disabled state [ 1235.688342][T30254] bridge_slave_1: entered allmulticast mode [ 1235.693784][T30254] bridge_slave_1: entered promiscuous mode [ 1235.899577][T30254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1236.087591][T30254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1236.369192][T30254] team0: Port device team_slave_0 added [ 1236.481958][T30254] team0: Port device team_slave_1 added [ 1236.679364][ T5656] Bluetooth: hci3: command tx timeout [ 1236.729602][T30147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1237.088737][T30254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1237.088759][T30254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1237.088787][T30254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1237.090384][T23619] tipc: Left network mode [ 1237.090864][T30273] bridge0: port 1(bridge_slave_0) entered blocking state [ 1237.090986][T30273] bridge0: port 1(bridge_slave_0) entered disabled state [ 1237.091137][T30273] bridge_slave_0: entered allmulticast mode [ 1237.094872][T30273] bridge_slave_0: entered promiscuous mode [ 1237.299700][T30147] 8021q: adding VLAN 0 to HW filter on device team0 [ 1237.318621][T30254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1237.318641][T30254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1237.318670][T30254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1237.384425][T30273] bridge0: port 2(bridge_slave_1) entered blocking state [ 1237.384628][T30273] bridge0: port 2(bridge_slave_1) entered disabled state [ 1237.384766][T30273] bridge_slave_1: entered allmulticast mode [ 1237.412067][T30273] bridge_slave_1: entered promiscuous mode [ 1237.457650][T23619] tipc: Left network mode [ 1237.519491][T23614] bridge0: port 1(bridge_slave_0) entered blocking state [ 1237.519617][T23614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1237.523651][T23614] bridge0: port 2(bridge_slave_1) entered blocking state [ 1237.523797][T23614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1237.654985][T23619] tipc: Disabling bearer [ 1237.655143][T23619] tipc: Left network mode [ 1237.739354][T30254] hsr_slave_0: entered promiscuous mode [ 1237.740542][T30254] hsr_slave_1: entered promiscuous mode [ 1237.741452][T30254] debugfs: 'hsr0' already exists in 'hsr' [ 1237.741473][T30254] Cannot create hsr debugfs directory [ 1237.775206][T30273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1237.811388][T30273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1238.547692][T30273] team0: Port device team_slave_0 added [ 1238.556231][T30273] team0: Port device team_slave_1 added [ 1238.747695][ T5656] Bluetooth: hci3: command tx timeout [ 1239.000543][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.000615][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.170872][T30273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1239.170893][T30273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1239.170923][T30273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1239.315514][ T5296] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1239.357965][T30273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1239.357987][T30273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1239.358016][T30273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1239.753078][T30061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1240.134640][T30273] hsr_slave_0: entered promiscuous mode [ 1240.173505][T30273] hsr_slave_1: entered promiscuous mode [ 1240.174397][T30273] debugfs: 'hsr0' already exists in 'hsr' [ 1240.174419][T30273] Cannot create hsr debugfs directory [ 1241.968908][T30061] veth0_vlan: entered promiscuous mode [ 1242.004070][T30061] veth1_vlan: entered promiscuous mode [ 1242.114993][T30061] veth0_macvtap: entered promiscuous mode [ 1242.149505][T30061] veth1_macvtap: entered promiscuous mode [ 1242.221593][T30061] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1242.334749][ T5296] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1242.365912][T30061] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1242.886943][T23610] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1242.908781][T23610] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1242.931683][T20678] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1242.933424][T23610] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1243.164028][T23614] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1243.164052][T23614] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1243.580285][T30147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1243.588672][T20678] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1243.588702][T20678] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1245.024015][T30426] netlink: 56 bytes leftover after parsing attributes in process `syz.6.5945'. [ 1245.910010][T30426] bond1 (unregistering): Released all slaves [ 1246.368296][T30147] veth0_vlan: entered promiscuous mode [ 1246.401443][T30147] veth1_vlan: entered promiscuous mode [ 1246.524200][T30147] veth0_macvtap: entered promiscuous mode [ 1246.567292][T30147] veth1_macvtap: entered promiscuous mode [ 1246.633112][T30147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1246.685668][T30147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1246.730004][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1246.730174][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1246.730262][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1246.730414][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.349063][T23614] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1247.349090][T23614] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1247.516015][T20678] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1247.516040][T20678] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1248.614723][T30471] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5947'. [ 1248.661947][T30471] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5947'. [ 1248.662048][T30471] bridge_slave_1: left allmulticast mode [ 1248.662072][T30471] bridge_slave_1: left promiscuous mode [ 1248.662324][T30471] bridge0: port 2(bridge_slave_1) entered disabled state [ 1248.745321][T30471] bridge_slave_0: left allmulticast mode [ 1248.745355][T30471] bridge_slave_0: left promiscuous mode [ 1248.764840][T30471] bridge0: port 1(bridge_slave_0) entered disabled state [ 1251.164919][T30512] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1251.386277][T30515] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5952'. [ 1252.041251][T30525] Bluetooth: MGMT ver 1.23 [ 1252.057344][T30524] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5954'. [ 1252.130887][T30530] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5955'. [ 1252.131224][T30529] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5955'. [ 1252.426069][T30535] netlink: 'syz.6.5956': attribute type 1 has an invalid length. [ 1252.642004][T30535] vlan2: entered allmulticast mode [ 1252.642031][T30535] veth1_to_bond: entered allmulticast mode [ 1253.159235][T30203] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1253.200383][T30203] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1253.204311][T30203] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1253.255301][T30203] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1253.294646][T30203] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1253.594049][T30203] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1253.806219][T30555] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5960'. [ 1253.870396][T30557] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5960'. [ 1253.944793][T30203] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1253.995961][T30203] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1254.302883][T30203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1254.341127][T30203] 8021q: adding VLAN 0 to HW filter on device team0 [ 1254.368997][T23614] bridge0: port 1(bridge_slave_0) entered blocking state [ 1254.369123][T23614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1254.405809][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1254.405948][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1254.530381][T30567] netlink: 17 bytes leftover after parsing attributes in process `syz.7.5961'. [ 1254.559795][T30567] netlink: 17 bytes leftover after parsing attributes in process `syz.7.5961'. [ 1254.985234][T30566] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1255.050429][T30566] bond1 (unregistering): Released all slaves [ 1255.394876][T30203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1255.555280][T30203] veth0_vlan: entered promiscuous mode [ 1255.596920][T30203] veth1_vlan: entered promiscuous mode [ 1255.714682][T30203] veth0_macvtap: entered promiscuous mode [ 1255.740670][T30203] veth1_macvtap: entered promiscuous mode [ 1255.955158][T30203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1256.012364][T30203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1256.028973][T30583] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5962'. [ 1256.348763][T20678] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.349092][T20678] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.349499][T20678] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.349847][T20678] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.713378][T22515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1256.713405][T22515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1256.906617][T20678] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1256.906642][T20678] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1257.170063][T30598] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5964'. [ 1257.331208][T30600] nbd: must specify an index to disconnect [ 1257.331481][T30600] nbd: must specify an index to disconnect [ 1257.331767][T30600] nbd: must specify an index to disconnect [ 1257.332027][T30600] nbd: must specify an index to disconnect [ 1257.335765][T30600] nbd: must specify an index to disconnect [ 1257.375070][T30600] nbd: must specify an index to disconnect [ 1257.375360][T30600] nbd: must specify an index to disconnect [ 1257.375616][T30600] nbd: must specify an index to disconnect [ 1257.375866][T30600] nbd: must specify an index to disconnect [ 1257.411949][T30600] nbd: must specify an index to disconnect [ 1257.414350][T30600] nbd: must specify an index to disconnect [ 1257.414630][T30600] nbd: must specify an index to disconnect [ 1257.414899][T30600] nbd: must specify an index to disconnect [ 1257.416372][T30600] nbd: must specify an index to disconnect [ 1257.463661][T30603] netlink: 192 bytes leftover after parsing attributes in process `syz.3.5855'. [ 1257.463903][T30603] netlink: 192 bytes leftover after parsing attributes in process `syz.3.5855'. [ 1257.464116][T30603] netlink: 192 bytes leftover after parsing attributes in process `syz.3.5855'. [ 1257.465115][T30600] nbd: must specify an index to disconnect [ 1257.487651][T30603] netlink: 192 bytes leftover after parsing attributes in process `syz.3.5855'. [ 1257.532679][T30600] nbd: must specify an index to disconnect [ 1257.532959][T30600] nbd: must specify an index to disconnect [ 1257.533237][T30600] nbd: must specify an index to disconnect [ 1257.533476][T30600] nbd: must specify an index to disconnect [ 1257.533725][T30600] nbd: must specify an index to disconnect [ 1257.593609][T30603] netlink: 192 bytes leftover after parsing attributes in process `syz.3.5855'. [ 1257.593930][T30603] netlink: 192 bytes leftover after parsing attributes in process `syz.3.5855'. [ 1257.594147][T30603] netlink: 192 bytes leftover after parsing attributes in process `syz.3.5855'. [ 1257.594359][T30603] netlink: 192 bytes leftover after parsing attributes in process `syz.3.5855'. [ 1257.631672][T30603] netlink: 192 bytes leftover after parsing attributes in process `syz.3.5855'. [ 1257.662216][T30600] nbd: must specify an index to disconnect [ 1257.662506][T30600] nbd: must specify an index to disconnect [ 1257.662769][T30600] nbd: must specify an index to disconnect [ 1257.663010][T30600] nbd: must specify an index to disconnect [ 1257.663248][T30600] nbd: must specify an index to disconnect [ 1257.663485][T30600] nbd: must specify an index to disconnect [ 1257.752592][T30600] nbd: must specify an index to disconnect [ 1257.752877][T30600] nbd: must specify an index to disconnect [ 1257.753130][T30600] nbd: must specify an index to disconnect [ 1257.753407][T30600] nbd: must specify an index to disconnect [ 1257.753646][T30600] nbd: must specify an index to disconnect [ 1257.753894][T30600] nbd: must specify an index to disconnect [ 1257.907074][T30600] nbd: must specify an index to disconnect [ 1258.985352][T30623] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1259.240159][T30629] netlink: 'syz.7.5971': attribute type 11 has an invalid length. [ 1260.421589][T30653] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1261.037243][T30657] netlink: 'syz.7.5979': attribute type 4 has an invalid length. [ 1265.151564][T30738] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1265.193145][T30738] __nla_validate_parse: 24 callbacks suppressed [ 1265.193173][T30738] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5993'. [ 1265.669950][T30738] netlink: 96 bytes leftover after parsing attributes in process `syz.6.5993'. [ 1266.404562][T30767] ip_tables: iptables: counters copy to user failed while replacing table [ 1268.174957][T30797] gretap1: entered promiscuous mode [ 1268.176106][T30797] batman_adv: batadv0: Adding interface: gretap1 [ 1268.176123][T30797] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 1268.176152][T30797] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 1268.438303][T30791] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 1268.438334][T30791] Bluetooth: hci9: Error when powering off device on rfkill (-4) [ 1268.631510][T30791] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1268.631537][T30791] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1268.747927][T30791] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1268.747956][T30791] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1268.904905][T30791] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1268.904938][T30791] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1268.975530][T30811] netlink: 88 bytes leftover after parsing attributes in process `syz.6.6001'. [ 1269.132629][T30814] netlink: 'syz.6.6002': attribute type 2 has an invalid length. [ 1269.329439][T30254] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1269.473540][T30254] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1269.474762][T30254] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1269.663155][T30791] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1269.663184][T30791] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1269.711688][T30254] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1269.726720][T30254] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1269.851263][T30822] netlink: 'syz.6.6003': attribute type 1 has an invalid length. [ 1269.851288][T30822] netlink: 224 bytes leftover after parsing attributes in process `syz.6.6003'. [ 1269.851309][T30822] nbd: couldn't find device at index 767 [ 1269.930443][T30254] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1269.948856][T30254] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1270.193774][T30254] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1270.274824][T30829] ip_tables: iptables: counters copy to user failed while replacing table [ 1270.275459][T30829] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6006'. [ 1270.383873][T30831] ip_tables: iptables: counters copy to user failed while replacing table [ 1270.397296][T30834] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6006'. [ 1271.544397][T30858] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6009'. [ 1271.582009][T30859] netlink: 'syz.3.6009': attribute type 2 has an invalid length. [ 1272.151837][T30254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1272.298809][T30254] 8021q: adding VLAN 0 to HW filter on device team0 [ 1272.365074][T30876] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 1272.382493][T30876] netlink: 872 bytes leftover after parsing attributes in process `syz.3.6011'. [ 1272.399207][T23607] bridge0: port 1(bridge_slave_0) entered blocking state [ 1272.399333][T23607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1272.405354][T23607] bridge0: port 2(bridge_slave_1) entered blocking state [ 1272.405473][T23607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1272.459486][T30739] udevd[30739]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1272.505875][T30792] udevd[30792]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1273.121759][T30884] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6012'. [ 1273.124917][T30884] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6012'. [ 1273.245648][T30886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6013'. [ 1273.572710][T30895] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6013'. [ 1277.361665][T30254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1278.025377][T30973] xt_hashlimit: size too large, truncated to 1048576 [ 1278.104008][T30975] bridge0: port 1(bridge_slave_0) entered disabled state [ 1278.180821][T30975] bridge_slave_0 (unregistering): left allmulticast mode [ 1278.180855][T30975] bridge_slave_0 (unregistering): left promiscuous mode [ 1278.180994][T30975] bridge0: port 1(bridge_slave_0) entered disabled state [ 1278.423966][T30980] ip_tables: iptables: counters copy to user failed while replacing table [ 1278.593120][T30980] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6026'. [ 1278.593149][T30980] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6026'. [ 1279.100958][T30989] netlink: 'syz.7.6027': attribute type 1 has an invalid length. [ 1279.153142][T30991] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6027'. [ 1279.431158][T30989] bond1: entered promiscuous mode [ 1279.431716][T30989] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1279.565415][T30254] veth0_vlan: entered promiscuous mode [ 1279.599234][T30254] veth1_vlan: entered promiscuous mode [ 1279.665814][T30254] veth0_macvtap: entered promiscuous mode [ 1279.680964][T30254] veth1_macvtap: entered promiscuous mode [ 1279.720508][T30254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1279.742633][T30254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1279.848530][T20438] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.848595][T20438] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.848633][T20438] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.848670][T20438] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.196153][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1280.196179][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1280.479654][T31001] xt_hashlimit: size too large, truncated to 1048576 [ 1280.645070][T31004] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6029'. [ 1280.684777][T23604] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1280.684804][T23604] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1282.542449][T31032] netlink: 'syz.7.6032': attribute type 1 has an invalid length. [ 1282.603439][T31034] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6032'. [ 1282.603466][T31034] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6032'. [ 1282.695795][T31032] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1283.499739][T31060] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6040'. [ 1283.527387][T31060] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6040'. [ 1283.578952][T31057] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6041'. [ 1283.897812][T31065] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6043'. [ 1283.897840][T31065] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6043'. [ 1283.898096][T31065] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6043'. [ 1283.898114][T31065] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6043'. [ 1284.019807][T31070] netlink: 'syz.8.6044': attribute type 1 has an invalid length. [ 1284.019833][T31070] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6044'. [ 1285.110370][T30273] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1285.249842][T30273] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1285.256164][T30273] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1285.291837][T30273] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1285.378066][T31090] netlink: 'syz.6.6049': attribute type 5 has an invalid length. [ 1285.405799][T31090] bridge0: port 2(bridge_slave_1) entered disabled state [ 1285.438488][T30273] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1285.481257][T30273] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1285.485673][T30273] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1285.523514][T30273] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1286.371744][T30273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1286.823280][T30273] 8021q: adding VLAN 0 to HW filter on device team0 [ 1286.862594][T23610] bridge0: port 1(bridge_slave_0) entered blocking state [ 1286.862720][T23610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1286.903933][T23614] bridge0: port 2(bridge_slave_1) entered blocking state [ 1286.904058][T23614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1286.962791][T30273] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1286.962819][T30273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1287.544771][T31138] netlink: 'syz.3.6056': attribute type 9 has an invalid length. [ 1288.250123][T31150] syzkaller0: entered promiscuous mode [ 1288.250149][T31150] syzkaller0: entered allmulticast mode [ 1288.462358][T31155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6059'. [ 1288.516118][T30273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1288.605764][T31164] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6062'. [ 1288.679779][T31164] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1288.722375][T31166] bond1: entered promiscuous mode [ 1288.722401][T31166] bond1: entered allmulticast mode [ 1289.523871][T30273] veth0_vlan: entered promiscuous mode [ 1289.593406][T30273] veth1_vlan: entered promiscuous mode [ 1290.518031][T23619] hsr_slave_0: left promiscuous mode [ 1290.538723][T23619] hsr_slave_1: left promiscuous mode [ 1290.539890][T23619] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1290.563386][T23619] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1290.719665][T23619] hsr_slave_0: left promiscuous mode [ 1290.739518][T23619] hsr_slave_1: left promiscuous mode [ 1290.740759][T23619] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1290.740783][T23619] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1290.775190][T23619] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1290.775216][T23619] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1291.003659][T27302] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1291.019516][T27302] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1291.021649][T27302] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1291.022929][T27302] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1291.023678][T27302] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1291.131284][T31199] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6068'. [ 1291.131314][T31199] netlink: 87 bytes leftover after parsing attributes in process `syz.8.6068'. [ 1291.157870][T31155] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1291.206094][T31200] netlink: 'syz.8.6068': attribute type 1 has an invalid length. [ 1291.206120][T31200] netlink: 224 bytes leftover after parsing attributes in process `syz.8.6068'. [ 1291.251600][T31149] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1291.556594][T31205] netlink: 'syz.6.6069': attribute type 29 has an invalid length. [ 1291.715312][T23619] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1291.715341][T23619] batman_adv: batadv0: Removing interface: syzkaller0 [ 1291.933201][T23619] veth1_macvtap: left promiscuous mode [ 1291.933247][T23619] veth0_macvtap: left promiscuous mode [ 1291.933366][T23619] veth1_vlan: left promiscuous mode [ 1291.933445][T23619] veth0_vlan: left promiscuous mode [ 1291.988291][T31214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6071'. [ 1291.988318][T31214] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6071'. [ 1292.020561][T23619] veth1_macvtap: left promiscuous mode [ 1292.020603][T23619] veth0_macvtap: left promiscuous mode [ 1292.061267][T31215] netlink: 'syz.3.6071': attribute type 4 has an invalid length. [ 1292.061385][T31215] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6071'. [ 1292.095428][T23619] veth1_macvtap: left promiscuous mode [ 1292.095470][T23619] veth0_macvtap: left promiscuous mode [ 1292.095615][T23619] veth1_vlan: left promiscuous mode [ 1292.095647][T23619] veth0_vlan: left promiscuous mode [ 1293.094125][T23619] team0 (unregistering): Port device team_slave_1 removed [ 1293.133862][T23619] team0 (unregistering): Port device team_slave_0 removed [ 1293.147584][ T5656] Bluetooth: hci3: command tx timeout [ 1293.745111][T23619] team0 (unregistering): Port device team_slave_1 removed [ 1293.786349][T23619] team0 (unregistering): Port device team_slave_0 removed [ 1295.231396][ T5656] Bluetooth: hci3: command tx timeout [ 1296.154427][T31213] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1296.634801][T31214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1296.678151][T31214] bond1: (slave bond0): making interface the new active one [ 1296.684323][T31214] bond1: (slave bond0): Enslaving as an active interface with an up link [ 1296.694241][T23618] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1296.694379][T23618] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1296.694432][T23618] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1296.694472][T23618] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1296.776239][T31215] .`: renamed from bond0 (while UP) [ 1296.931678][T23604] bond1: (slave .`): link status definitely down, disabling slave [ 1296.952174][T23604] bond1: now running without any active interface! [ 1297.165883][T31246] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 1297.288862][T31245] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6077'. [ 1297.308325][ T5656] Bluetooth: hci3: command tx timeout [ 1297.861947][T31262] netlink: 'syz.7.6081': attribute type 10 has an invalid length. [ 1297.932077][T31262] 8021q: adding VLAN 0 to HW filter on device team0 [ 1297.952610][T31262] bond0: (slave team0): Enslaving as an active interface with an up link [ 1298.398980][T31190] virt_wifi0 speed is unknown, defaulting to 1000 [ 1299.387106][ T5656] Bluetooth: hci3: command tx timeout [ 1299.441934][T31294] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6088'. [ 1299.441975][T31294] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6088'. [ 1299.496893][T31294] bridge0: entered promiscuous mode [ 1299.507979][T31294] ip6gretap0: entered promiscuous mode [ 1299.525243][T31294] debugfs: 'hsr1' already exists in 'hsr' [ 1299.525273][T31294] Cannot create hsr debugfs directory [ 1300.439699][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.439767][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.443306][T31304] netlink: 88 bytes leftover after parsing attributes in process `syz.7.6091'. [ 1300.493118][T31305] openvswitch: netlink: IP tunnel dst address not specified [ 1300.939992][T31311] syzkaller0: entered promiscuous mode [ 1300.940023][T31311] syzkaller0: entered allmulticast mode [ 1301.144397][T31316] tipc: Started in network mode [ 1301.144433][T31316] tipc: Node identity d680013100e6, cluster identity 4711 [ 1301.144608][T31316] tipc: Enabled bearer , priority 10 [ 1301.241101][T31190] bridge0: port 1(bridge_slave_0) entered blocking state [ 1301.241233][T31190] bridge0: port 1(bridge_slave_0) entered disabled state [ 1301.241406][T31190] bridge_slave_0: entered allmulticast mode [ 1301.284350][T31190] bridge_slave_0: entered promiscuous mode [ 1301.333580][T31190] bridge0: port 2(bridge_slave_1) entered blocking state [ 1301.333707][T31190] bridge0: port 2(bridge_slave_1) entered disabled state [ 1301.333888][T31190] bridge_slave_1: entered allmulticast mode [ 1301.362279][T31190] bridge_slave_1: entered promiscuous mode [ 1301.404985][T31308] tipc: Resetting bearer [ 1301.449632][T31333] netlink: 'syz.3.6096': attribute type 8 has an invalid length. [ 1301.672600][T31308] tipc: Disabling bearer [ 1301.780200][T31336] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6096'. [ 1302.321624][T31190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1302.345058][T31190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1302.535043][T31190] team0: Port device team_slave_0 added [ 1302.599409][T31190] team0: Port device team_slave_1 added [ 1302.679040][T31190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1302.679061][T31190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1302.679089][T31190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1302.697915][T31190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1302.697935][T31190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1302.697964][T31190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1302.850671][T31190] hsr_slave_0: entered promiscuous mode [ 1302.851821][T31190] hsr_slave_1: entered promiscuous mode [ 1304.453289][T31356] netlink: 1084 bytes leftover after parsing attributes in process `syz.8.6099'. [ 1304.453317][T31356] netlink: 121 bytes leftover after parsing attributes in process `syz.8.6099'. [ 1304.453332][T31356] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6099'. [ 1304.717630][T31375] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6102'. [ 1305.034735][T31385] netlink: 'syz.8.6104': attribute type 1 has an invalid length. [ 1305.285196][T31385] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1305.442357][T31383] bond1: (slave bridge1): making interface the new active one [ 1305.444954][T31383] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1306.274983][T31411] ip_tables: iptables: counters copy to user failed while replacing table [ 1306.562522][T31414] xt_NETMAP: bad rangesize 37. [ 1306.562663][T31414] xt_NETMAP: bad rangesize 37. [ 1306.562793][T31414] xt_NETMAP: bad rangesize 37. [ 1306.562913][T31414] xt_NETMAP: bad rangesize 37. [ 1306.563032][T31414] xt_NETMAP: bad rangesize 37. [ 1306.563156][T31414] xt_NETMAP: bad rangesize 37. [ 1306.563269][T31414] xt_NETMAP: bad rangesize 37. [ 1306.563396][T31414] xt_NETMAP: bad rangesize 37. [ 1306.563518][T31414] xt_NETMAP: bad rangesize 37. [ 1306.563640][T31414] xt_NETMAP: bad rangesize 37. [ 1307.044780][T31429] netlink: 180 bytes leftover after parsing attributes in process `syz.8.6114'. [ 1307.104280][T31433] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6115'. [ 1307.119816][T31432] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6114'. [ 1307.120106][T31435] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6115'. [ 1307.749207][T31458] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6119'. [ 1308.074256][T31462] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1308.572555][T31483] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6125'. [ 1308.634834][T31483] team0 (unregistering): Port device team_slave_0 removed [ 1308.653977][T31483] team0 (unregistering): Port device team_slave_1 removed [ 1310.105260][T31497] syzkaller0: entered promiscuous mode [ 1310.105287][T31497] syzkaller0: entered allmulticast mode [ 1310.133578][T31497] tipc: Started in network mode [ 1310.133614][T31497] tipc: Node identity 5ab0fe117548, cluster identity 4711 [ 1310.135660][T31497] tipc: Enabled bearer , priority 2 [ 1310.238891][T31496] tipc: Resetting bearer [ 1310.312670][T31496] tipc: Disabling bearer [ 1311.182014][T31505] netlink: 256 bytes leftover after parsing attributes in process `syz.6.6129'. [ 1311.213186][T31505] ip_tables: iptables: counters copy to user failed while replacing table [ 1311.350382][T31510] netlink: 1196 bytes leftover after parsing attributes in process `syz.8.6131'. [ 1311.374577][T31510] netlink: 'syz.8.6131': attribute type 1 has an invalid length. [ 1311.484614][T31510] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1311.578878][T31513] bond2: (slave ip6erspan0): making interface the new active one [ 1311.582490][T31513] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1312.349104][T31525] bond2 (unregistering): Released all slaves [ 1312.495764][T31530] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1312.572595][T31530] bond3 (unregistering): Released all slaves [ 1313.461872][T31533] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1314.365744][T31563] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6148'. [ 1314.365872][T31563] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1314.457631][T31563] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1316.170406][T31604] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6158'. [ 1316.440782][T31614] netlink: 4337 bytes leftover after parsing attributes in process `syz.3.6160'. [ 1316.440833][T31614] openvswitch: netlink: Actions may not be safe on all matching packets [ 1317.827322][T31640] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6170'. [ 1318.245603][T31190] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1318.299720][T31190] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1318.320444][T31190] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1318.434708][T31647] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6173'. [ 1318.461628][T31190] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1318.479394][T31190] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1318.506332][T31654] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6174'. [ 1318.658614][T31658] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6177'. [ 1318.840142][T31190] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1318.842740][T31190] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1318.889943][T31190] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1318.891466][T31663] ip_tables: iptables: counters copy to user failed while replacing table [ 1318.915769][T31656] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6177'. [ 1319.513323][T31676] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6182'. [ 1319.557164][T31190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1319.581987][T31190] 8021q: adding VLAN 0 to HW filter on device team0 [ 1319.666062][T31190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1319.666091][T31190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1319.707422][T31683] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6181'. [ 1319.747391][T23610] bridge0: port 1(bridge_slave_0) entered blocking state [ 1319.747519][T23610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1319.776302][T23610] bridge0: port 2(bridge_slave_1) entered blocking state [ 1319.776494][T23610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1320.121466][T31688] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6184'. [ 1320.121754][T31688] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6184'. [ 1321.357495][T31720] netlink: 'syz.6.6192': attribute type 1 has an invalid length. [ 1321.362320][T31721] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1321.585805][T31721] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1321.663853][T31730] IPVS: length: 177 != 24 [ 1321.705251][T31726] syzkaller0: entered promiscuous mode [ 1321.705281][T31726] syzkaller0: entered allmulticast mode [ 1321.728576][T31727] tipc: Started in network mode [ 1321.728613][T31727] tipc: Node identity 3adb916ef5fc, cluster identity 4711 [ 1321.753023][T31727] tipc: Enabled bearer , priority 0 [ 1321.753373][T31729] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1321.867476][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1321.867516][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1321.867541][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1321.870726][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1321.885901][T31720] tipc: Resetting bearer [ 1321.888724][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1321.888759][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1322.017119][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1322.023288][T31719] tipc: Resetting bearer [ 1322.184529][T31736] __nla_validate_parse: 3 callbacks suppressed [ 1322.184553][T31736] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6195'. [ 1322.205790][T31719] tipc: Disabling bearer [ 1322.875717][T31190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1323.440606][T31190] veth0_vlan: entered promiscuous mode [ 1323.480937][T31190] veth1_vlan: entered promiscuous mode [ 1323.518720][T31190] veth0_macvtap: entered promiscuous mode [ 1323.524864][T31190] veth1_macvtap: entered promiscuous mode [ 1323.555841][T31190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1323.572684][T31190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1323.662506][T23607] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1323.808537][T23605] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1323.896972][T23609] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1323.897027][T23609] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.033547][T23609] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1324.033574][T23609] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1324.150564][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1324.150590][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1324.349259][T31761] netlink: 'syz.7.6199': attribute type 5 has an invalid length. [ 1324.615519][T31764] netlink: 9 bytes leftover after parsing attributes in process `syz.7.6200'. [ 1324.635893][T31764] netlink: 9 bytes leftover after parsing attributes in process `syz.7.6200'. [ 1324.664105][T31767] netlink: 45349 bytes leftover after parsing attributes in process `syz.9.5943'. [ 1324.664228][T31767] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 1324.698462][T31767] 0ªX¹¦Dö»: entered allmulticast mode [ 1325.066053][T31777] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6204'. [ 1325.721746][T31783] x_tables: duplicate underflow at hook 3 [ 1326.124775][T31792] tipc: Started in network mode [ 1326.124809][T31792] tipc: Node identity 5edef56ad651, cluster identity 4711 [ 1326.124972][T31792] tipc: Enabled bearer , priority 10 [ 1326.162592][T31785] tipc: Resetting bearer [ 1326.271874][T31802] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1326.355870][T31785] tipc: Disabling bearer [ 1326.802228][T31814] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1326.904953][T31812] ip_tables: iptables: counters copy to user failed while replacing table [ 1329.446150][T31845] syz_tun: entered allmulticast mode [ 1329.643341][T31845] Bluetooth: MGMT ver 1.23 [ 1329.873604][T31853] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 1330.250301][T31844] syz_tun: left allmulticast mode [ 1330.404559][T31866] netlink: 'syz.7.6231': attribute type 32 has an invalid length. [ 1330.404587][T31866] netlink: 56 bytes leftover after parsing attributes in process `syz.7.6231'. [ 1330.498972][T31868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6232'. [ 1330.499338][T31869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6232'. [ 1331.291810][T31881] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6236'. [ 1331.291919][T31881] bridge_slave_1: left promiscuous mode [ 1331.292180][T31881] bridge0: port 2(bridge_slave_1) entered disabled state [ 1331.349814][T31881] bridge_slave_0: left allmulticast mode [ 1331.349847][T31881] bridge_slave_0: left promiscuous mode [ 1331.383938][T31881] bridge0: port 1(bridge_slave_0) entered disabled state [ 1331.435780][T31884] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6236'. [ 1331.460293][T31892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6239'. [ 1331.489262][T31893] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6239'. [ 1331.592969][T31881] bridge0 (unregistering): left promiscuous mode [ 1331.623621][T31898] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6237'. [ 1331.662387][T31892] ipvlan2: entered allmulticast mode [ 1331.662412][T31892] virt_wifi0: entered allmulticast mode [ 1331.664497][T31892] batman_adv: batadv0: Adding interface: ipvlan2 [ 1331.664518][T31892] batman_adv: batadv0: Interface activated: ipvlan2 [ 1331.705861][T31893] ipvlan3: entered allmulticast mode [ 1331.723869][T31893] batman_adv: batadv0: Adding interface: ipvlan3 [ 1331.723891][T31893] batman_adv: The newly added mac address (c2:e9:a5:c0:56:5a) already exists on: ipvlan2 [ 1331.723917][T31893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1331.723931][T31893] batman_adv: batadv0: Interface activated: ipvlan3 [ 1332.360224][T31909] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6242'. [ 1334.762034][T31951] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6254'. [ 1334.950192][T31955] netlink: 'syz.6.6255': attribute type 49 has an invalid length. [ 1335.460508][T31963] syzkaller1: entered promiscuous mode [ 1335.460535][T31963] syzkaller1: entered allmulticast mode [ 1336.106335][T31973] __nla_validate_parse: 1 callbacks suppressed [ 1336.106358][T31973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6261'. [ 1336.365983][T31977] syzkaller0: entered promiscuous mode [ 1336.366011][T31977] syzkaller0: entered allmulticast mode [ 1337.800381][T32001] netlink: 5 bytes leftover after parsing attributes in process `syz.7.6268'. [ 1337.801084][T32001] netlink: 5 bytes leftover after parsing attributes in process `syz.7.6268'. [ 1337.801355][T32001] netlink: 5 bytes leftover after parsing attributes in process `syz.7.6268'. [ 1337.801568][T32001] netlink: 5 bytes leftover after parsing attributes in process `syz.7.6268'. [ 1337.801784][T32001] netlink: 5 bytes leftover after parsing attributes in process `syz.7.6268'. [ 1337.801999][T32001] netlink: 5 bytes leftover after parsing attributes in process `syz.7.6268'. [ 1337.802220][T32001] netlink: 5 bytes leftover after parsing attributes in process `syz.7.6268'. [ 1337.806234][T32001] netlink: 5 bytes leftover after parsing attributes in process `syz.7.6268'. [ 1337.806682][T32001] netlink: 5 bytes leftover after parsing attributes in process `syz.7.6268'. [ 1338.107405][ T5656] Bluetooth: hci3: command tx timeout [ 1338.400889][T32010] netlink: 'syz.7.6271': attribute type 21 has an invalid length. [ 1338.400959][T32010] netlink: 'syz.7.6271': attribute type 6 has an invalid length. [ 1338.401942][T32011] netlink: 'syz.7.6271': attribute type 21 has an invalid length. [ 1338.402974][T32011] netlink: 'syz.7.6271': attribute type 6 has an invalid length. [ 1338.773064][T32022] netlink: 'syz.6.6273': attribute type 3 has an invalid length. [ 1338.793589][T32022] netlink: 'syz.6.6273': attribute type 3 has an invalid length. [ 1338.982180][T32032] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 1339.135062][T32034] netlink: 'syz.7.6276': attribute type 4 has an invalid length. [ 1339.595618][ T13] bond0: (slave bond_slave_0): interface is now down [ 1339.595647][ T13] bond0: (slave bond_slave_1): interface is now down [ 1339.961246][T32056] mac80211_hwsim hwsim54 ÿ: renamed from wlan1 [ 1341.174463][T32086] batman_adv: batadv0: Adding interface: syzkaller0 [ 1341.174491][T32086] batman_adv: batadv0: Interface activated: syzkaller0 [ 1341.210075][T32085] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1341.345463][T32085] batman_adv: batadv0: Removing interface: syzkaller0 [ 1341.522196][T32089] veth1_macvtap: left promiscuous mode [ 1341.740978][T32095] netlink: ct family unspecified [ 1341.741422][T32095] netlink: ct family unspecified [ 1341.743062][T32095] netlink: ct family unspecified [ 1341.744439][T32095] netlink: ct family unspecified [ 1341.744868][T32095] netlink: ct family unspecified [ 1341.802924][T32095] netlink: ct family unspecified [ 1341.806111][T32095] netlink: ct family unspecified [ 1341.807078][T32095] netlink: ct family unspecified [ 1341.807553][T32095] netlink: ct family unspecified [ 1341.833757][T32095] netlink: ct family unspecified [ 1341.877897][T32097] tipc: Enabling of bearer rejected, failed to enable media [ 1342.108632][T23610] bond0: (slave bond_slave_0): interface is now down [ 1342.108660][T23610] bond0: (slave bond_slave_1): interface is now down [ 1342.771467][T32107] __nla_validate_parse: 31 callbacks suppressed [ 1342.771492][T32107] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6292'. [ 1342.807394][T32107] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 1343.282418][T32123] netlink: 'syz.8.6296': attribute type 10 has an invalid length. [ 1343.356088][T32125] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6298'. [ 1343.356181][T32125] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1343.672908][T32133] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6300'. [ 1343.735186][T32133] xt_IDLETIMER: label is empty or not nul-terminated [ 1343.769536][T32133] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6300'. [ 1343.805646][T32115] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1343.865399][T32135] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6301'. [ 1343.865597][T32135] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6301'. [ 1343.865767][T32135] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6301'. [ 1343.865951][T32135] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6301'. [ 1343.866119][T32135] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6301'. [ 1343.917721][T32135] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6301'. [ 1344.375425][T32146] netlink: 'syz.8.6305': attribute type 7 has an invalid length. [ 1344.670400][T23609] bond0: (slave bond_slave_0): interface is now down [ 1344.670431][T23609] bond0: (slave bond_slave_1): interface is now down [ 1344.739001][T23609] bond0: now running without any active interface! [ 1345.818688][T32178] x_tables: unsorted entry at hook 4 [ 1346.140843][T32184] bond2: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 1346.172928][T32184] bond2 (unregistering): Released all slaves [ 1346.260834][T32188] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0 [ 1348.623269][T32205] bond0: Removing last arp target with arp_interval on [ 1348.974341][T32213] batman_adv: batadv0: Adding interface: veth0 [ 1348.974369][T32213] batman_adv: batadv0: Interface activated: veth0 [ 1349.049581][T32213] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1349.049616][T32213] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1349.086293][T32213] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1349.086321][T32213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1349.110067][T32213] batman_adv: batadv0: Removing interface: gretap1 [ 1349.149483][T32213] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 1349.149511][T32213] batman_adv: batadv0: Removing interface: ipvlan2 [ 1349.229551][T32213] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 1349.229582][T32213] batman_adv: batadv0: Removing interface: ipvlan3 [ 1349.308388][T32213] batman_adv: batadv0: Interface deactivated: veth0 [ 1349.308419][T32213] batman_adv: batadv0: Removing interface: veth0 [ 1349.734290][T32217] __nla_validate_parse: 31 callbacks suppressed [ 1349.734317][T32217] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6327'. [ 1349.795540][T32216] netlink: 'syz.8.6326': attribute type 1 has an invalid length. [ 1349.795565][T32216] netlink: 'syz.8.6326': attribute type 2 has an invalid length. [ 1350.282417][T32232] syzkaller0: entered promiscuous mode [ 1350.282444][T32232] syzkaller0: entered allmulticast mode [ 1350.308752][T32232] tipc: Started in network mode [ 1350.308786][T32232] tipc: Node identity 9ab9cebd5f7a, cluster identity 4711 [ 1350.309080][T32232] tipc: Enabled bearer , priority 0 [ 1350.340527][T32231] tipc: Resetting bearer [ 1350.442581][T32236] netlink: 100 bytes leftover after parsing attributes in process `syz.8.6333'. [ 1350.462667][T32231] tipc: Disabling bearer [ 1350.486010][T32238] netlink: 100 bytes leftover after parsing attributes in process `syz.8.6333'. [ 1350.963660][T32246] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6337'. [ 1352.280450][T32269] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20001 [ 1352.527247][T32275] tunl0: entered promiscuous mode [ 1352.545078][T32275] netlink: 'syz.7.6344': attribute type 4 has an invalid length. [ 1352.545103][T32275] netlink: 9 bytes leftover after parsing attributes in process `syz.7.6344'. [ 1352.754655][T32277] net_ratelimit: 23 callbacks suppressed [ 1352.754680][T32277] netlink: ct family unspecified [ 1352.855989][T32278] netlink: ct family unspecified [ 1353.080295][T32281] sctp: [Deprecated]: syz.7.6347 (pid 32281) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1353.080295][T32281] Use struct sctp_sack_info instead [ 1355.431955][T23619] IPVS: stop unused estimator thread 0... [ 1355.441649][T23619] IPVS: stop unused estimator thread 0... [ 1355.483238][T32320] IPVS: set_ctl: invalid protocol: 22 224.0.0.2:0 [ 1356.332790][T32330] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6359'. [ 1356.332830][T32330] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6359'. [ 1357.375338][T32338] netlink: 80 bytes leftover after parsing attributes in process `syz.8.6361'. [ 1357.515925][T32338] netlink: 64 bytes leftover after parsing attributes in process `syz.8.6361'. [ 1357.794123][T32344] netlink: 'syz.7.6362': attribute type 1 has an invalid length. [ 1357.814122][T32344] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6362'. [ 1357.814157][T32344] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6362'. [ 1357.814227][T32344] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6362'. [ 1358.100122][T32341] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1358.106301][T32341] batman_adv: batadv0: Adding interface: gretap1 [ 1358.106323][T32341] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1358.106367][T32341] batman_adv: batadv0: Interface activated: gretap1 [ 1358.619090][T32352] netlink: 'syz.8.6364': attribute type 3 has an invalid length. [ 1358.619116][T32352] netlink: 244 bytes leftover after parsing attributes in process `syz.8.6364'. [ 1359.653362][T32380] ip6t_frag: unknown flags 6 [ 1360.394167][T32368] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1360.463873][T32363] syzkaller1: entered promiscuous mode [ 1360.463902][T32363] syzkaller1: entered allmulticast mode [ 1361.881470][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.881556][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.916064][T32443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6386'. [ 1361.944903][T32443] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6386'. [ 1362.253555][T32449] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6388'. [ 1363.848015][T20438] IPVS: starting estimator thread 0... [ 1363.947796][T32470] IPVS: using max 23 ests per chain, 55200 per kthread [ 1365.044081][T32452] v: renamed from vlan1 [ 1365.121114][T23619] bridge_slave_1: left allmulticast mode [ 1365.121146][T23619] bridge_slave_1: left promiscuous mode [ 1365.124146][T23619] bridge0: port 2(bridge_slave_1) entered disabled state [ 1365.232734][T23619] bridge_slave_0: left allmulticast mode [ 1365.232767][T23619] bridge_slave_0: left promiscuous mode [ 1365.233010][T23619] bridge0: port 1(bridge_slave_0) entered disabled state [ 1365.369852][T23619] bridge_slave_1: left allmulticast mode [ 1365.369885][T23619] bridge_slave_1: left promiscuous mode [ 1365.370109][T23619] bridge0: port 2(bridge_slave_1) entered disabled state [ 1365.414527][T23619] bridge_slave_0: left allmulticast mode [ 1365.414559][T23619] bridge_slave_0: left promiscuous mode [ 1365.431637][T23619] bridge0: port 1(bridge_slave_0) entered disabled state [ 1365.512391][T32496] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6395'. [ 1365.555513][T23619] bridge_slave_1: left allmulticast mode [ 1365.555545][T23619] bridge_slave_1: left promiscuous mode [ 1365.555772][T23619] bridge0: port 2(bridge_slave_1) entered disabled state [ 1365.614773][T23619] bridge_slave_0: left allmulticast mode [ 1365.614805][T23619] bridge_slave_0: left promiscuous mode [ 1365.615149][T23619] bridge0: port 1(bridge_slave_0) entered disabled state [ 1365.730046][T23619] bridge_slave_1: left allmulticast mode [ 1365.730110][T23619] bridge_slave_1: left promiscuous mode [ 1365.730345][T23619] bridge0: port 2(bridge_slave_1) entered disabled state [ 1365.765329][T23619] bridge_slave_0: left allmulticast mode [ 1365.765364][T23619] bridge_slave_0: left promiscuous mode [ 1365.765622][T23619] bridge0: port 1(bridge_slave_0) entered disabled state [ 1365.883665][T32501] netlink: 'syz.8.6393': attribute type 1 has an invalid length. [ 1366.330869][T23619] bridge_slave_1: left allmulticast mode [ 1366.330903][T23619] bridge_slave_1: left promiscuous mode [ 1366.331133][T23619] bridge0: port 2(bridge_slave_1) entered disabled state [ 1366.379606][T23619] bridge_slave_0: left allmulticast mode [ 1366.379636][T23619] bridge_slave_0: left promiscuous mode [ 1366.381040][T23619] bridge0: port 1(bridge_slave_0) entered disabled state [ 1366.912830][T23619] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1366.943959][T23619] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1366.946006][T23619] bond0 (unregistering): Released all slaves [ 1367.170043][T23619] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1367.207714][T23619] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1367.241243][T23619] bond0 (unregistering): Released all slaves [ 1367.600385][T23619] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1367.621466][T23619] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1367.649771][T23619] bond0 (unregistering): Released all slaves [ 1367.792136][T23619] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1367.827908][T23619] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1367.848604][T23619] bond0 (unregistering): Released all slaves [ 1367.993703][T23619] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1368.025624][T23619] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1368.061831][T23619] bond0 (unregistering): Released all slaves [ 1368.981332][T32517] xt_hashlimit: size too large, truncated to 1048576 [ 1369.604285][T32529] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6399'. [ 1370.245037][T32535] sctp: [Deprecated]: syz.9.6403 (pid 32535) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1370.245037][T32535] Use struct sctp_sack_info instead [ 1371.645263][T23619] hsr_slave_0: left promiscuous mode [ 1371.679870][T23619] hsr_slave_1: left promiscuous mode [ 1371.682044][T23619] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1371.881654][T23619] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1372.010189][T23619] hsr_slave_0: left promiscuous mode [ 1372.048665][T23619] hsr_slave_1: left promiscuous mode [ 1372.051960][T23619] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1372.277954][T23619] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1372.671089][T32578] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6410'. [ 1372.979497][T23619] hsr_slave_0: left promiscuous mode [ 1373.004834][T23619] hsr_slave_1: left promiscuous mode [ 1373.013159][T23619] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1373.014986][T23619] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1373.252717][T23619] hsr_slave_0: left promiscuous mode [ 1373.270133][T23619] hsr_slave_1: left promiscuous mode [ 1373.272598][T23619] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1373.357407][T23619] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1373.414034][T23619] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1373.429365][T23619] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1373.508383][T23619] veth1_vlan: left promiscuous mode [ 1373.508531][T23619] veth0_vlan: left promiscuous mode [ 1373.629188][T32598] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1374.338190][T23619] team0 (unregistering): Port device team_slave_1 removed [ 1374.371627][T23619] team0 (unregistering): Port device team_slave_0 removed [ 1374.963740][T23619] team0 (unregistering): Port device team_slave_1 removed [ 1375.008745][T23619] team0 (unregistering): Port device team_slave_0 removed [ 1375.542170][T23619] team0 (unregistering): Port device team_slave_1 removed [ 1375.601180][T23619] team0 (unregistering): Port device team_slave_0 removed [ 1376.215849][T23619] team0 (unregistering): Port device team_slave_1 removed [ 1376.250614][T23619] team0 (unregistering): Port device team_slave_0 removed [ 1376.603668][T23619] team0 (unregistering): Port device team_slave_1 removed [ 1376.650165][T23619] team0 (unregistering): Port device team_slave_0 removed [ 1377.688626][T32610] netlink: 'syz.7.6417': attribute type 1 has an invalid length. [ 1377.911863][T32613] bond3: (slave gretap2): making interface the new active one [ 1377.912707][T32613] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 1378.114475][ T30] audit: type=1107 audit(1793916461.867:15): pid=32617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='g Å(rèN+ ‰cÝÛu#Ï(®Ö³U/Öãñêî/ŽüÛCK»2R…_´›ü—Êy*‡¶È—BÈ4oÿ·ÆÉ‡b0ŠÄ–ºÁ}1•K 5œû'íGž8ªæfÒè—ì^ªnf�“)L:2”@|0�]l­÷û¸|e÷' [ 1378.243603][T32624] sock: sock_timestamping_bind_phc: sock not bind to device [ 1378.284382][T32624] bond1: option downdelay: invalid value (18446744073709551614) [ 1378.284411][T32624] bond1: option downdelay: allowed values 0 - 2147483647 [ 1378.321781][T32624] bond1 (unregistering): Released all slaves [ 1380.113335][T32631] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6421'. [ 1380.113363][T32631] tipc: Invalid UDP bearer configuration [ 1380.113414][T32631] tipc: Enabling of bearer rejected, failed to enable media [ 1382.831373][T18127] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 1382.852716][T32666] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1383.267587][T18127] netdevsim netdevsim8 netdevsim0: left promiscuous mode [ 1383.267933][T32675] tipc: Enabled bearer , priority 10 [ 1383.420806][T32667] tipc: Disabling bearer [ 1383.822221][T32702] netlink: 'syz.9.6433': attribute type 21 has an invalid length. [ 1383.822313][T32702] netlink: 132 bytes leftover after parsing attributes in process `syz.9.6433'. [ 1384.008277][T32709] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6434'. [ 1384.013045][T32708] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1384.062840][T32709] netlink: 'syz.3.6434': attribute type 49 has an invalid length. [ 1384.213814][T32713] netlink: 'syz.9.6436': attribute type 2 has an invalid length. [ 1384.510006][T32723] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6439'. [ 1384.964011][T32731] blkio.reset_stats is deprecated [ 1385.940819][T32749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6447'. [ 1386.537465][T32758] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 4, id = 0 [ 1386.975073][ T301] netlink: 'syz.3.6450': attribute type 17 has an invalid length. [ 1386.975099][ T301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6450'. [ 1386.975127][ T301] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6450'. [ 1387.072284][ T303] netlink: 348 bytes leftover after parsing attributes in process `syz.8.6452'. [ 1387.072312][ T303] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1387.102259][ T301] gretap0: entered promiscuous mode [ 1387.143690][ T301] gretap0: left promiscuous mode [ 1387.722973][ T311] netlink: 'syz.8.6454': attribute type 1 has an invalid length. [ 1387.804072][ T311] netlink: 92 bytes leftover after parsing attributes in process `syz.8.6454'. [ 1388.093286][ T317] netlink: 6 bytes leftover after parsing attributes in process `syz.7.6455'. [ 1388.114748][ T317] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1388.870020][ T328] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1388.892686][ T328] IPv4: Oversized IP packet from 127.202.26.0 [ 1389.403600][ T342] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6462'. [ 1389.405644][ T340] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6462'. [ 1389.524479][ T344] sctp: [Deprecated]: syz.8.6463 (pid 344) Use of int in max_burst socket option deprecated. [ 1389.524479][ T344] Use struct sctp_assoc_value instead [ 1390.135364][ T359] xt_hashlimit: size too large, truncated to 1048576 [ 1390.193552][ T360] bridge0: port 1(bridge_slave_0) entered disabled state [ 1390.248371][ T360] bridge_slave_0 (unregistering): left allmulticast mode [ 1390.248403][ T360] bridge_slave_0 (unregistering): left promiscuous mode [ 1390.248504][ T360] bridge0: port 1(bridge_slave_0) entered disabled state [ 1391.017960][ T371] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6471'. [ 1391.021050][ T371] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6471'. [ 1391.223096][ T374] syzkaller1: entered promiscuous mode [ 1391.223122][ T374] syzkaller1: entered allmulticast mode [ 1391.732188][ T382] netlink: 72 bytes leftover after parsing attributes in process `syz.7.6475'. [ 1391.732220][ T382] netlink: 72 bytes leftover after parsing attributes in process `syz.7.6475'. [ 1391.880163][ T394] syzkaller1: entered promiscuous mode [ 1391.880191][ T394] syzkaller1: entered allmulticast mode [ 1392.130318][ T401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6479'. [ 1394.263741][ T438] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6491'. [ 1394.599975][ T438] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1394.725322][ T438] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1394.972369][ T446] block nbd8: not configured, cannot reconfigure [ 1395.917452][ T459] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1396.647710][ T30] audit: type=1800 audit(1793916480.387:16): pid=483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.6498" name="memory.events" dev="tmpfs" ino=691 res=0 errno=-22 [ 1397.014283][ T493] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6500'. [ 1398.188610][ T512] xfrm1: entered allmulticast mode [ 1398.251333][ T517] netlink: 'syz.6.6505': attribute type 2 has an invalid length. [ 1398.640054][ T525] netlink: 'syz.7.6507': attribute type 21 has an invalid length. [ 1398.640083][ T525] IPv6: NLM_F_CREATE should be specified when creating new route [ 1398.640185][ T525] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1398.640197][ T525] IPv6: NLM_F_CREATE should be set when creating new route [ 1398.640256][ T525] IPv6: NLM_F_CREATE should be set when creating new route [ 1398.640284][ T525] IPv6: NLM_F_CREATE should be set when creating new route [ 1399.663345][ T554] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1399.710331][ T553] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6515'. [ 1399.710365][ T553] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6515'. [ 1399.710384][ T553] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6515'. [ 1400.443032][ T565] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1401.550882][ T595] netlink: 68 bytes leftover after parsing attributes in process `syz.8.6525'. [ 1402.253757][ T608] bond2: Removing last ns target with arp_interval on [ 1403.950887][ T647] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6538'. [ 1404.402078][ T656] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6539'. [ 1404.895789][ T667] netlink: 56 bytes leftover after parsing attributes in process `syz.9.6541'. [ 1404.959105][ T667] gre1: entered allmulticast mode [ 1405.812424][ T684] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6547'. [ 1405.832656][ T684] bridge0: port 2(bridge_slave_1) entered disabled state [ 1406.101777][ T685] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6546'. [ 1406.573817][ T702] netlink: 'syz.7.6550': attribute type 17 has an invalid length. [ 1406.573846][ T702] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6550'. [ 1406.573874][ T702] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6550'. [ 1406.692659][ T705] netlink: 'syz.7.6550': attribute type 17 has an invalid length. [ 1406.692687][ T705] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6550'. [ 1406.692714][ T705] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6550'. [ 1406.736209][ T702] erspan0: entered promiscuous mode [ 1406.744902][ T702] gretap0: entered promiscuous mode [ 1407.404262][ T721] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6555'. [ 1407.805170][ T728] syzkaller0: entered promiscuous mode [ 1407.805197][ T728] syzkaller0: entered allmulticast mode [ 1407.886784][ T728] tipc: Enabled bearer , priority 10 [ 1407.905672][ T727] tipc: Resetting bearer [ 1408.130134][ T727] tipc: Disabling bearer [ 1408.334929][ T739] netlink: 'syz.3.6562': attribute type 5 has an invalid length. [ 1408.542008][ T748] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1408.628638][ T750] bond0: (slave team0): Releasing backup interface [ 1408.675205][ T750] team0 (unregistering): Port device team_slave_0 removed [ 1408.815066][ T750] team0 (unregistering): Port device team_slave_1 removed [ 1408.914065][ T758] gretap0: entered promiscuous mode [ 1408.955637][ T761] __nla_validate_parse: 3 callbacks suppressed [ 1408.955660][ T761] netlink: 5 bytes leftover after parsing attributes in process `syz.3.6567'. [ 1408.955784][ T761] 0ªî{X¹¦: renamed from gretap0 [ 1409.065745][ T761] 0ªî{X¹¦: left promiscuous mode [ 1409.065774][ T761] 0ªî{X¹¦: entered allmulticast mode [ 1409.087876][ T761] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1409.134970][ T766] 8021q: VLANs not supported on ip6tnl0 [ 1409.429796][ T770] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6571'. [ 1409.892380][T18127] hid-generic 0005:10CF:4155.0003: unknown main item tag 0x0 [ 1410.055754][T18127] hid-generic 0005:10CF:4155.0003: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa [ 1410.294015][ T790] dvmrp1: entered allmulticast mode [ 1410.327011][ T790] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6578'. [ 1410.638083][ T797] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6580'. [ 1410.678613][ T797] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6580'. [ 1412.646188][ T845] netlink: 'syz.6.6589': attribute type 3 has an invalid length. [ 1412.646217][ T845] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6589'. [ 1413.933145][ T867] syzkaller0: entered promiscuous mode [ 1413.933172][ T867] syzkaller0: entered allmulticast mode [ 1413.982205][ T867] tipc: Enabled bearer , priority 10 [ 1414.000739][ T866] tipc: Resetting bearer [ 1414.004284][ T868] netlink: 'syz.6.6596': attribute type 1 has an invalid length. [ 1414.121445][ T866] tipc: Disabling bearer [ 1414.679784][ T882] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1414.847733][ T884] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 1415.174995][ T892] ip_tables: iptables: counters copy to user failed while replacing table [ 1415.370588][ T898] netlink: 'syz.6.6607': attribute type 10 has an invalid length. [ 1415.424169][ T898] team0: Device wg2 is of different type [ 1415.474198][ T898] netlink: 'syz.6.6607': attribute type 10 has an invalid length. [ 1415.497684][ T898] team0: Device wg2 is of different type [ 1415.529000][ T898] netlink: 'syz.6.6607': attribute type 10 has an invalid length. [ 1415.560851][ T898] team0: Device wg2 is of different type [ 1415.650332][ T898] netlink: 'syz.6.6607': attribute type 10 has an invalid length. [ 1415.924446][ T898] team0: Device wg2 is of different type [ 1415.972157][ T898] netlink: 'syz.6.6607': attribute type 10 has an invalid length. [ 1416.067538][ T898] team0: Device wg2 is of different type [ 1416.103067][ T898] netlink: 'syz.6.6607': attribute type 10 has an invalid length. [ 1416.212649][ T898] team0: Device wg2 is of different type [ 1416.396935][ T898] netlink: 'syz.6.6607': attribute type 10 has an invalid length. [ 1416.481287][ T898] team0: Device wg2 is of different type [ 1416.656133][ T921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6610'. [ 1417.114866][ T936] ip_tables: iptables: counters copy to user failed while replacing table [ 1417.965478][ T974] netlink: get zone limit has 8 unknown bytes [ 1417.984835][ T975] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6621'. [ 1418.011734][ T975] macvtap1: entered promiscuous mode [ 1418.011759][ T975] hsr0: entered promiscuous mode [ 1418.013740][ T975] macvtap1: entered allmulticast mode [ 1418.013758][ T975] hsr0: entered allmulticast mode [ 1418.013771][ T975] hsr_slave_0: entered allmulticast mode [ 1418.013786][ T975] hsr_slave_1: entered allmulticast mode [ 1418.075453][ T975] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6621'. [ 1418.122918][ T975] macvtap2: entered promiscuous mode [ 1418.123330][ T975] macvtap2: entered allmulticast mode [ 1418.142886][ T975] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6621'. [ 1418.207946][ T975] macvtap3: entered promiscuous mode [ 1418.211614][ T975] macvtap3: entered allmulticast mode [ 1418.437404][ T975] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6621'. [ 1418.479237][ T975] macvtap4: entered promiscuous mode [ 1418.479546][ T975] macvtap4: entered allmulticast mode [ 1418.503131][ T975] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6621'. [ 1418.548251][ T975] macvtap5: entered promiscuous mode [ 1418.549580][ T975] macvtap5: entered allmulticast mode [ 1418.555003][ T975] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6621'. [ 1418.962825][ T975] macvtap6: entered promiscuous mode [ 1418.963142][ T975] macvtap6: entered allmulticast mode [ 1419.832158][ T1006] syzkaller0: entered promiscuous mode [ 1419.832184][ T1006] syzkaller0: entered allmulticast mode [ 1419.974951][ T1011] tipc: Enabled bearer , priority 10 [ 1419.975016][ T1013] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6634'. [ 1420.095579][ T1003] tipc: Resetting bearer [ 1420.252692][ T1016] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6633'. [ 1420.373987][ T1003] tipc: Disabling bearer [ 1420.385484][ T1030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6635'. [ 1420.558653][ T1030] netlink: 'syz.3.6635': attribute type 1 has an invalid length. [ 1420.558680][ T1030] netlink: 'syz.3.6635': attribute type 2 has an invalid length. [ 1420.727189][ T1037] netlink: 'syz.3.6636': attribute type 1 has an invalid length. [ 1421.073449][ T1039] team0: Port device team_slave_1 removed [ 1421.843501][ T1070] netlink: 'syz.7.6644': attribute type 21 has an invalid length. [ 1421.843529][ T1070] __nla_validate_parse: 2 callbacks suppressed [ 1421.843542][ T1070] netlink: 128 bytes leftover after parsing attributes in process `syz.7.6644'. [ 1421.843631][ T1070] netlink: 3 bytes leftover after parsing attributes in process `syz.7.6644'. [ 1422.784246][ T1097] netlink: 104 bytes leftover after parsing attributes in process `syz.8.6650'. [ 1422.855850][ T1097] netlink: 104 bytes leftover after parsing attributes in process `syz.8.6650'. [ 1422.938863][ T1103] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6651'. [ 1423.314513][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.785043][ T1113] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6655'. [ 1423.906353][ T1117] netlink: 'syz.6.6656': attribute type 2 has an invalid length. [ 1424.395920][ T1126] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1424.395941][ T1126] IPv6: NLM_F_CREATE should be set when creating new route [ 1424.395988][ T1126] IPv6: NLM_F_CREATE should be set when creating new route [ 1424.396016][ T1126] IPv6: NLM_F_CREATE should be set when creating new route [ 1424.618705][ T1137] ip_tables: iptables: counters copy to user failed while replacing table [ 1425.464582][ T1158] syzkaller0: entered promiscuous mode [ 1425.464614][ T1158] syzkaller0: entered allmulticast mode [ 1425.486920][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1425.487643][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1425.487815][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1425.488749][T23609] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1425.544249][ T1155] tipc: Enabled bearer , priority 10 [ 1425.642036][ T1162] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6669'. [ 1425.642069][ T1162] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6669'. [ 1425.727224][ T1165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6670'. [ 1425.727264][ T1165] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6670'. [ 1425.736161][ T1165] geneve2: entered promiscuous mode [ 1425.736186][ T1165] geneve2: entered allmulticast mode [ 1426.702314][T18122] tipc: Node number set to 2291135850 [ 1427.640555][ T1189] __nla_validate_parse: 1 callbacks suppressed [ 1427.640581][ T1189] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6677'. [ 1427.879330][ T1199] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6680'. [ 1427.900293][ T1199] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6680'. [ 1428.735532][ T1218] netlink: 180 bytes leftover after parsing attributes in process `syz.6.6686'. [ 1430.500636][ T1270] netlink: 'syz.6.6698': attribute type 1 has an invalid length. [ 1430.630077][ T1278] netlink: 'syz.6.6698': attribute type 1 has an invalid length. [ 1430.699718][ T1279] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1430.715916][ T1279] bond3: (slave bond4): making interface the new active one [ 1430.725897][ T1279] bond3: (slave bond4): Enslaving as an active interface with an up link [ 1430.892121][ T1274] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1430.894872][ T1274] bond3: (slave bond5): Enslaving as a backup interface with an up link [ 1431.454815][ T1296] netlink: 36 bytes leftover after parsing attributes in process `syz.9.6699'. [ 1431.719322][ T1310] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6705'. [ 1431.810927][ T1310] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6705'. [ 1432.057063][T23605] IPVS: starting estimator thread 0... [ 1432.158323][ T1326] IPVS: using max 25 ests per chain, 60000 per kthread [ 1432.852990][ T1338] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6710'. [ 1432.853016][ T1338] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6710'. [ 1433.183743][ T1346] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6714'. [ 1433.232014][ T1347] netlink: 'syz.9.6715': attribute type 1 has an invalid length. [ 1433.286317][ T1347] netlink: 260 bytes leftover after parsing attributes in process `syz.9.6715'. [ 1433.443434][ T1355] xt_ecn: cannot match TCP bits for non-tcp packets [ 1433.522041][ T1357] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6718'. [ 1433.920431][ T1369] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6721'. [ 1433.921292][ T1370] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6721'. [ 1434.113116][ T1370] netlink: 52 bytes leftover after parsing attributes in process `syz.7.6721'. [ 1434.115503][ T1370] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6721'. [ 1434.115526][ T1370] netlink: 80 bytes leftover after parsing attributes in process `syz.7.6721'. [ 1434.265980][ T1376] Bluetooth: MGMT ver 1.23 [ 1434.295895][ T1376] netlink: 'syz.3.6722': attribute type 1 has an invalid length. [ 1434.436147][ T1376] bond2: entered promiscuous mode [ 1434.442666][ T1376] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1434.491963][ T1378] bond2: (slave bridge3): making interface the new active one [ 1434.491992][ T1378] bridge3: entered promiscuous mode [ 1434.494439][ T1378] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 1434.554691][ T1377] bond2: (slave bridge4): Enslaving as a backup interface with an up link [ 1434.851940][ T1385] netlink: 'syz.7.6724': attribute type 10 has an invalid length. [ 1434.900902][ T1388] af_packet: tpacket_rcv: packet too big, clamped from 4080 to 3952. macoff=96 [ 1435.004070][ T1392] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1435.023897][ T1393] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1436.386613][ T1427] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1436.978647][ T1440] tipc: Failed to remove unknown binding: 66,1,1/0:613080021/613080023 [ 1436.978703][ T1440] tipc: Failed to remove unknown binding: 66,1,1/0:613080021/613080023 [ 1437.546090][ T1456] tipc: Enabling of bearer rejected, media not registered [ 1438.678240][ T1480] __nla_validate_parse: 12 callbacks suppressed [ 1438.678266][ T1480] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6755'. [ 1438.728784][ T1485] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6756'. [ 1438.744401][ T1485] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6756'. [ 1438.781026][ T1480] netlink: 36 bytes leftover after parsing attributes in process `syz.9.6755'. [ 1439.318586][ T1489] netlink: 140 bytes leftover after parsing attributes in process `syz.6.6758'. [ 1440.491154][ T1513] netlink: 'syz.6.6764': attribute type 11 has an invalid length. [ 1440.824104][ T1522] netlink: 256 bytes leftover after parsing attributes in process `syz.8.6767'. [ 1440.937816][ T1524] netlink: 'syz.6.6768': attribute type 1 has an invalid length. [ 1440.937861][ T1524] netlink: 228 bytes leftover after parsing attributes in process `syz.6.6768'. [ 1441.279277][ T1528] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6769'. [ 1441.279683][ T1528] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6769'. [ 1441.280014][ T1528] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6769'. [ 1441.383195][ T1527] netlink: 'syz.8.6770': attribute type 1 has an invalid length. [ 1441.663132][ T1527] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1444.416263][ T1607] __nla_validate_parse: 66 callbacks suppressed [ 1444.416285][ T1607] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6785'. [ 1444.603915][ T1613] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6787'. [ 1445.062202][ T1624] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6790'. [ 1445.190255][ T1625] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6791'. [ 1445.331960][ T1621] batman_adv: batadv0: Adding interface: gretap0 [ 1445.331980][ T1621] batman_adv: batadv0: The MTU of interface gretap0 is too small (1438) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1445.332016][ T1621] batman_adv: batadv0: Interface activated: gretap0 [ 1446.039543][ T1630] tunl0: entered promiscuous mode [ 1446.054494][ T1630] netlink: 'syz.9.6793': attribute type 4 has an invalid length. [ 1446.054522][ T1630] netlink: 9 bytes leftover after parsing attributes in process `syz.9.6793'. [ 1449.635347][ T1673] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1449.968789][ T1682] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6805'. [ 1449.994640][ T1682] netlink: 2580 bytes leftover after parsing attributes in process `syz.7.6805'. [ 1450.154026][ T1686] netlink: 'syz.9.6804': attribute type 1 has an invalid length. [ 1450.345051][ T1692] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6808'. [ 1450.488575][ T1697] netlink: 36 bytes leftover after parsing attributes in process `syz.9.6809'. [ 1451.050564][ T1710] netlink: 'syz.3.6813': attribute type 29 has an invalid length. [ 1451.750421][ T1724] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6817'. [ 1451.750532][ T1724] netlink: 14 bytes leftover after parsing attributes in process `syz.8.6817'. [ 1453.409844][ T1762] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6826'. [ 1453.732875][ T1766] openvswitch: netlink: Message has 6 unknown bytes. [ 1454.535530][ T1788] openvswitch: netlink: Multiple metadata blocks provided [ 1454.552350][ T1788] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6831'. [ 1454.611618][ T1789] openvswitch: netlink: Multiple metadata blocks provided [ 1454.612916][ T1792] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6831'. [ 1455.185112][ T1805] netlink: 44 bytes leftover after parsing attributes in process `syz.9.6835'. [ 1455.185143][ T1805] netlink: 43 bytes leftover after parsing attributes in process `syz.9.6835'. [ 1455.185159][ T1805] netlink: 'syz.9.6835': attribute type 5 has an invalid length. [ 1455.185173][ T1805] netlink: 43 bytes leftover after parsing attributes in process `syz.9.6835'. [ 1455.351216][ T1815] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6837'. [ 1456.228984][ T1831] netlink: 60 bytes leftover after parsing attributes in process `syz.8.6842'. [ 1456.527333][ T1838] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6844'. [ 1456.534128][ T1838] netlink: 'syz.7.6844': attribute type 4 has an invalid length. [ 1459.125905][ T1844] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6846'. [ 1459.784856][ T1844] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6846'. [ 1459.811875][ T1848] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6848'. [ 1460.121222][ T1849] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6847'. [ 1460.121591][ T1849] macvlan0: entered promiscuous mode [ 1462.302206][ T1859] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6850'. [ 1464.262811][ T1861] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6851'. [ 1464.714004][ T1869] vxcan0: tx address claim with dest, not broadcast [ 1464.758918][ T1866] vxcan0: tx address claim with dest, not broadcast [ 1468.062904][ T1861] macvtap1: entered promiscuous mode [ 1468.062934][ T1861] vlan0: entered promiscuous mode [ 1468.065692][ T1861] macvtap1: entered allmulticast mode [ 1468.065713][ T1861] vlan0: entered allmulticast mode [ 1468.065727][ T1861] veth0_vlan: entered allmulticast mode [ 1468.715009][ T1877] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1471.527811][ T1888] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6856'. [ 1471.527852][ T1888] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6856'. [ 1472.415429][ T1888] gretap3: entered promiscuous mode [ 1472.415680][ T1888] gretap3: entered allmulticast mode [ 1473.231082][ T1895] netlink: 'syz.9.6858': attribute type 32 has an invalid length. [ 1481.548880][ T1912] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6861'. [ 1481.944532][ T1911] syzkaller1: entered promiscuous mode [ 1481.944805][ T1911] syzkaller1: entered allmulticast mode [ 1484.843756][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1494.187355][ T1940] netlink: 'syz.7.6868': attribute type 1 has an invalid length. [ 1494.613629][ T1945] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6868'. [ 1495.552399][ T1950] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6868'. [ 1500.197008][ T1941] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1500.422392][ T1941] bond4: (slave bond5): making interface the new active one [ 1500.423808][ T1941] bond4: (slave bond5): Enslaving as an active interface with an up link [ 1501.068562][ T1947] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1501.202993][ T1975] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1501.599627][ T1975] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1501.787285][ T1975] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1501.941760][ T1975] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1501.943445][ T1975] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1502.027380][ T1956] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1504.516871][ T1975] Bluetooth: hci4: command tx timeout [ 1506.706534][ T1975] Bluetooth: hci4: command tx timeout [ 1508.747513][ T1975] Bluetooth: hci4: command tx timeout [ 1510.827981][ T1975] Bluetooth: hci4: command tx timeout [ 1518.070120][ T5656] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1518.090839][ T5656] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1518.113368][ T5656] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1518.140231][ T5656] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1518.141805][ T5656] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1520.384683][ T5656] Bluetooth: hci5: command tx timeout [ 1522.479923][ T5656] Bluetooth: hci5: command tx timeout [ 1524.535121][ T1975] Bluetooth: hci5: command tx timeout [ 1526.586753][ T5656] Bluetooth: hci5: command tx timeout [ 1529.299209][ T1975] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1529.303581][ T1975] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1529.305138][ T1975] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1529.335521][ T1975] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1529.348300][ T1975] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1531.866925][ T1975] Bluetooth: hci0: command tx timeout [ 1534.049087][ T1975] Bluetooth: hci0: command tx timeout [ 1534.353558][ T13] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1534.573740][ T5656] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1534.790013][ T5656] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1534.794064][ T5656] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1534.819803][ T5656] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1534.843691][ T5656] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1536.111697][ T5656] Bluetooth: hci0: command tx timeout [ 1537.415492][ T5656] Bluetooth: hci1: command tx timeout [ 1538.039390][ T5656] Bluetooth: hci3: command 0x0406 tx timeout [ 1538.196992][ T1975] Bluetooth: hci0: command tx timeout [ 1538.273192][ T1974] virt_wifi0 speed is unknown, defaulting to 1000 [ 1539.655059][ T1975] Bluetooth: hci1: command tx timeout [ 1541.717485][ T1975] Bluetooth: hci1: command tx timeout [ 1543.821550][ T5656] Bluetooth: hci1: command tx timeout [ 1546.204157][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.052570][ T2071] ip_tables: iptables: counters copy to user failed while replacing table [ 1551.864639][ T2068] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1551.865680][ T2068] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1551.923672][ T2068] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1551.926237][ T2068] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1552.009323][ T2068] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1552.015179][ T2068] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1552.113507][ T2068] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1554.493173][ T13] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1554.782794][ T5656] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1554.803819][ T5656] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1554.815995][ T5656] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1554.828078][ T5656] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1554.828917][ T5656] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1555.091127][ T2012] virt_wifi0 speed is unknown, defaulting to 1000 [ 1556.385096][ T2114] netlink: 'syz.9.6885': attribute type 3 has an invalid length. [ 1556.526076][ T13] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1556.809119][ T2029] virt_wifi0 speed is unknown, defaulting to 1000 [ 1556.854598][ T2083] virt_wifi0 speed is unknown, defaulting to 1000 [ 1556.909066][ T5656] Bluetooth: hci2: command tx timeout [ 1556.943363][ T2043] virt_wifi0 speed is unknown, defaulting to 1000 [ 1558.191343][ T2012] bridge0: port 1(bridge_slave_0) entered blocking state [ 1558.191484][ T2012] bridge0: port 1(bridge_slave_0) entered disabled state [ 1558.191629][ T2012] bridge_slave_0: entered allmulticast mode [ 1558.241844][ T2012] bridge_slave_0: entered promiscuous mode [ 1558.323560][ T2012] bridge0: port 2(bridge_slave_1) entered blocking state [ 1558.323689][ T2012] bridge0: port 2(bridge_slave_1) entered disabled state [ 1558.323839][ T2012] bridge_slave_1: entered allmulticast mode [ 1558.326130][ T2012] bridge_slave_1: entered promiscuous mode [ 1558.602288][ T2012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1558.640602][ T2083] bridge0: port 1(bridge_slave_0) entered blocking state [ 1558.641088][ T2083] bridge0: port 1(bridge_slave_0) entered disabled state [ 1558.641236][ T2083] bridge_slave_0: entered allmulticast mode [ 1558.643673][ T2083] bridge_slave_0: entered promiscuous mode [ 1558.703384][ T2012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1558.732071][ T2083] bridge0: port 2(bridge_slave_1) entered blocking state [ 1558.732532][ T2083] bridge0: port 2(bridge_slave_1) entered disabled state [ 1558.732714][ T2083] bridge_slave_1: entered allmulticast mode [ 1558.734687][ T2083] bridge_slave_1: entered promiscuous mode [ 1558.987238][ T5656] Bluetooth: hci2: command tx timeout [ 1559.058668][ T2012] team0: Port device team_slave_0 added [ 1559.091550][ T2083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1559.095222][ T2012] team0: Port device team_slave_1 added [ 1559.127521][ T2043] bridge0: port 1(bridge_slave_0) entered blocking state [ 1559.127705][ T2043] bridge0: port 1(bridge_slave_0) entered disabled state [ 1559.127843][ T2043] bridge_slave_0: entered allmulticast mode [ 1559.130232][ T2043] bridge_slave_0: entered promiscuous mode [ 1559.160543][ T2029] bridge0: port 1(bridge_slave_0) entered blocking state [ 1559.160677][ T2029] bridge0: port 1(bridge_slave_0) entered disabled state [ 1559.160825][ T2029] bridge_slave_0: entered allmulticast mode [ 1559.164617][ T2029] bridge_slave_0: entered promiscuous mode [ 1559.200234][ T2083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1559.269135][ T2043] bridge0: port 2(bridge_slave_1) entered blocking state [ 1559.269350][ T2043] bridge0: port 2(bridge_slave_1) entered disabled state [ 1559.269514][ T2043] bridge_slave_1: entered allmulticast mode [ 1559.275495][ T2043] bridge_slave_1: entered promiscuous mode [ 1559.306445][ T2029] bridge0: port 2(bridge_slave_1) entered blocking state [ 1559.306559][ T2029] bridge0: port 2(bridge_slave_1) entered disabled state [ 1559.306700][ T2029] bridge_slave_1: entered allmulticast mode [ 1559.309278][ T2029] bridge_slave_1: entered promiscuous mode [ 1559.359399][ T2012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1559.359419][ T2012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1559.359447][ T2012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1559.512096][ T2083] team0: Port device team_slave_0 added [ 1559.514062][ T2012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1559.514089][ T2012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1559.514118][ T2012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1559.572139][ T2043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1559.607295][ T2083] team0: Port device team_slave_1 added [ 1559.628198][ T2043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1559.631623][ T2029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1559.710798][ T2029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1559.759373][ T2043] team0: Port device team_slave_0 added [ 1559.928710][ T2083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1559.928733][ T2083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1559.928761][ T2083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1560.014919][ T2043] team0: Port device team_slave_1 added [ 1560.025594][ T2029] team0: Port device team_slave_0 added [ 1560.034694][ T2083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1560.034714][ T2083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1560.034743][ T2083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1560.255972][ T2012] hsr_slave_0: entered promiscuous mode [ 1560.263374][ T2012] hsr_slave_1: entered promiscuous mode [ 1560.264318][ T2012] debugfs: 'hsr0' already exists in 'hsr' [ 1560.264341][ T2012] Cannot create hsr debugfs directory [ 1560.325881][ T2029] team0: Port device team_slave_1 added [ 1560.344889][ T2043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1560.344908][ T2043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1560.344935][ T2043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1560.639815][ T13] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1560.711908][ T2043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1560.711929][ T2043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1560.711968][ T2043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1560.862275][ T2029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1560.862296][ T2029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1560.862324][ T2029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1560.958530][ T2029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1560.958551][ T2029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1560.958579][ T2029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1561.068350][ T5656] Bluetooth: hci2: command tx timeout [ 1561.074052][ T2083] hsr_slave_0: entered promiscuous mode [ 1561.075175][ T2083] hsr_slave_1: entered promiscuous mode [ 1561.095219][ T2083] debugfs: 'hsr0' already exists in 'hsr' [ 1561.095246][ T2083] Cannot create hsr debugfs directory [ 1561.117815][ T2043] hsr_slave_0: entered promiscuous mode [ 1561.119029][ T2043] hsr_slave_1: entered promiscuous mode [ 1561.119827][ T2043] debugfs: 'hsr0' already exists in 'hsr' [ 1561.119848][ T2043] Cannot create hsr debugfs directory [ 1561.387601][ T2029] hsr_slave_0: entered promiscuous mode [ 1561.388851][ T2029] hsr_slave_1: entered promiscuous mode [ 1561.389654][ T2029] debugfs: 'hsr0' already exists in 'hsr' [ 1561.389676][ T2029] Cannot create hsr debugfs directory [ 1562.093332][ T2012] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1562.093375][ T2012] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1563.151126][ T5656] Bluetooth: hci2: command tx timeout [ 1563.321350][ T13] batman_adv: batadv0: Interface deactivated: gretap1 [ 1563.775162][ T13] erspan0 (unregistering): left promiscuous mode [ 1563.851766][ T13] bond3 (unregistering): (slave gretap2): Releasing active interface [ 1563.902750][ T13] batman_adv: batadv0: Removing interface: gretap1 [ 1563.951624][ T13] gretap0 (unregistering): left promiscuous mode [ 1564.121803][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1564.142639][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1564.160636][ T13] bond0 (unregistering): Released all slaves [ 1564.176949][ T13] bond1 (unregistering): Released all slaves [ 1564.202908][ T13] bond2 (unregistering): Released all slaves [ 1564.252629][ T13] bond3 (unregistering): Released all slaves [ 1564.291132][ T13] bond4 (unregistering): (slave bond5): Releasing backup interface [ 1564.292240][ T13] bond4 (unregistering): Released all slaves [ 1564.343275][ T13] bond5 (unregistering): Released all slaves [ 1564.429572][ T2145] bond1: entered allmulticast mode [ 1564.430871][ T2145] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1564.480300][ T2146] bond2: entered allmulticast mode [ 1564.480768][ T2146] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1565.111722][ T2012] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1565.111772][ T2012] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1565.942471][ T5296] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1566.601106][ T13] tipc: Left network mode [ 1567.094965][ T1975] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1567.109713][ T1975] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1567.110721][ T1975] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1567.111796][ T1975] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1567.112427][ T1975] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1567.476064][ T5296] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1568.154285][ T2181] virt_wifi0 speed is unknown, defaulting to 1000 [ 1568.401808][ T2200] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1568.425582][ T2012] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1568.425623][ T2012] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1568.862891][ T2208] netlink: 72 bytes leftover after parsing attributes in process `syz.9.6888'. [ 1568.863272][ T2207] netlink: 72 bytes leftover after parsing attributes in process `syz.9.6888'. [ 1569.408991][ T1975] Bluetooth: hci4: command tx timeout [ 1569.914812][ T5296] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1569.925191][ T2181] bridge0: port 1(bridge_slave_0) entered blocking state [ 1569.928304][ T2181] bridge0: port 1(bridge_slave_0) entered disabled state [ 1569.928485][ T2181] bridge_slave_0: entered allmulticast mode [ 1569.933103][ T2181] bridge_slave_0: entered promiscuous mode [ 1569.993276][ T2181] bridge0: port 2(bridge_slave_1) entered blocking state [ 1569.994338][ T2181] bridge0: port 2(bridge_slave_1) entered disabled state [ 1569.994514][ T2181] bridge_slave_1: entered allmulticast mode [ 1570.023614][ T2181] bridge_slave_1: entered promiscuous mode [ 1570.231344][ T2181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1570.263192][ T2181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1570.452662][ T2181] team0: Port device team_slave_0 added [ 1570.468798][ T2181] team0: Port device team_slave_1 added [ 1570.525572][ T2181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1570.525593][ T2181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1570.525621][ T2181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1570.591994][ T2181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1570.592015][ T2181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1570.592044][ T2181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1570.894934][ T2181] hsr_slave_0: entered promiscuous mode [ 1570.912288][ T2181] hsr_slave_1: entered promiscuous mode [ 1570.915483][ T2181] debugfs: 'hsr0' already exists in 'hsr' [ 1570.915509][ T2181] Cannot create hsr debugfs directory [ 1571.467777][ T1975] Bluetooth: hci4: command tx timeout [ 1571.808357][ T5296] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1572.169591][ T2012] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1572.169638][ T2012] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1573.292498][ T2254] netlink: 104 bytes leftover after parsing attributes in process `syz.9.6890'. [ 1573.411193][ T2257] netlink: 'syz.9.6891': attribute type 4 has an invalid length. [ 1573.411220][ T2257] netlink: 'syz.9.6891': attribute type 10 has an invalid length. [ 1573.411234][ T2257] netlink: 152 bytes leftover after parsing attributes in process `syz.9.6891'. [ 1573.411345][ T2257] bond_slave_0: mtu greater than device maximum [ 1573.546790][ T1975] Bluetooth: hci4: command tx timeout [ 1573.554172][ T2260] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6892'. [ 1575.637577][ T1975] Bluetooth: hci4: command tx timeout [ 1588.672692][ T5656] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1588.678217][ T5656] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1588.684904][ T5656] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1588.786025][ T5656] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1588.801569][ T5656] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1590.172677][ T1975] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1590.185258][ T1975] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1590.217818][ T1975] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1590.303479][ T2305] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6896'. [ 1590.647021][T27302] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1590.648710][T27302] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1591.306677][ T5656] Bluetooth: hci5: command tx timeout [ 1593.067007][ T5656] Bluetooth: hci6: command tx timeout [ 1593.386834][ T5656] Bluetooth: hci5: command tx timeout [ 1595.146466][ T5656] Bluetooth: hci6: command tx timeout [ 1595.467048][ T5656] Bluetooth: hci5: command tx timeout [ 1597.226610][ T5656] Bluetooth: hci6: command tx timeout [ 1597.546550][ T5656] Bluetooth: hci5: command tx timeout [ 1599.307688][ T5656] Bluetooth: hci6: command tx timeout [ 1601.954386][ T13] hsr_slave_0: left promiscuous mode [ 1602.274726][ T13] hsr_slave_1: left promiscuous mode [ 1602.284103][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1602.284352][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1604.205293][ T13] veth1_macvtap: left promiscuous mode [ 1604.205988][ T13] veth0_macvtap: left promiscuous mode [ 1604.390366][ T13] veth1_vlan: left promiscuous mode [ 1604.392256][ T13] veth0_vlan: left promiscuous mode [ 1607.645408][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1623.039183][T27302] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1623.044882][T27302] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1623.046772][T27302] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1623.197797][T27302] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1623.253894][T27302] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1626.177926][T27302] Bluetooth: hci7: command tx timeout [ 1628.214999][T27302] Bluetooth: hci7: command tx timeout [ 1629.214023][ T5656] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1629.226989][ T5656] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1629.229336][ T5656] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1629.584149][ T5656] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1629.603913][ T5656] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1630.272516][ T5656] Bluetooth: hci7: command tx timeout [ 1632.106637][ T5656] Bluetooth: hci8: command tx timeout [ 1632.352041][ T5656] Bluetooth: hci7: command tx timeout [ 1634.195885][ T5656] Bluetooth: hci8: command tx timeout [ 1636.267163][ T5656] Bluetooth: hci8: command tx timeout [ 1638.470974][T27302] Bluetooth: hci8: command tx timeout [ 1641.031415][T27302] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1641.034271][T27302] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1641.035982][T27302] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1641.116462][T27302] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1641.118234][T27302] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1643.326602][T27302] Bluetooth: hci9: command tx timeout [ 1645.387484][T27302] Bluetooth: hci9: command tx timeout [ 1647.545695][ T5656] Bluetooth: hci9: command tx timeout [ 1649.546633][T27302] Bluetooth: hci9: command tx timeout [ 1655.787315][ T2391] Bluetooth: hci0: command 0x0406 tx timeout [ 1655.828226][ T2391] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1655.834673][ T2391] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1655.940035][T27302] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1656.012763][T27302] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1656.014402][T27302] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1656.784226][T27302] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1656.817975][T27302] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1656.840394][T27302] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1656.882192][T27302] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1656.893964][T27302] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1658.138810][ T1975] Bluetooth: hci10: command tx timeout [ 1658.992568][T27302] Bluetooth: hci11: command tx timeout [ 1660.209496][T27302] Bluetooth: hci10: command tx timeout [ 1661.116655][T27302] Bluetooth: hci1: command 0x0406 tx timeout [ 1661.116766][T27302] Bluetooth: hci11: command tx timeout [ 1662.274568][ T1975] Bluetooth: hci10: command tx timeout [ 1663.147138][ T1975] Bluetooth: hci11: command tx timeout [ 1664.346911][ T1975] Bluetooth: hci10: command tx timeout [ 1665.227127][ T1975] Bluetooth: hci11: command tx timeout [ 1669.127459][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1677.038089][ T2043] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1677.038130][ T2043] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1681.433288][ T1975] Bluetooth: hci2: command 0x0406 tx timeout [ 1686.088777][ T1975] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1686.091506][ T1975] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1686.093410][ T1975] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1686.167361][ T1975] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1686.189881][ T1975] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1687.861007][ T2043] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1687.861049][ T2043] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1688.346963][ T1975] Bluetooth: hci2: command tx timeout [ 1690.427153][ T2391] Bluetooth: hci2: command tx timeout [ 1691.052739][T27302] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1691.166683][T27302] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1691.168913][T27302] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1691.313599][T27302] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1691.346708][T27302] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1691.644745][T27302] Bluetooth: hci4: command 0x0406 tx timeout [ 1692.508879][ T1975] Bluetooth: hci2: command tx timeout [ 1693.797836][ T1975] Bluetooth: hci3: command tx timeout [ 1694.626420][ T1975] Bluetooth: hci2: command tx timeout [ 1695.868924][ T1975] Bluetooth: hci3: command tx timeout [ 1697.952753][ T1975] Bluetooth: hci3: command tx timeout [ 1699.344919][T27302] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1699.370571][T27302] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1699.373143][T27302] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1699.412873][T27302] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1699.414516][T27302] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1700.057999][ T1975] Bluetooth: hci3: command tx timeout [ 1702.107597][ T2391] Bluetooth: hci5: command tx timeout [ 1704.189558][ T2391] Bluetooth: hci5: command tx timeout [ 1706.073261][ T2043] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1706.073302][ T2043] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1706.279745][ T2391] Bluetooth: hci5: command tx timeout [ 1706.485680][ T2397] virt_wifi0 speed is unknown, defaulting to 1000 [ 1706.654868][T27302] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1706.671350][T27302] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1706.672345][T27302] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1706.700379][T27302] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1706.701174][T27302] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1707.321077][ T2391] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1707.509756][ T2391] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1707.513779][ T2391] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1707.515221][ T2391] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1707.515979][ T2391] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1708.357324][ T2391] Bluetooth: hci5: command tx timeout [ 1708.741281][ T2461] virt_wifi0 speed is unknown, defaulting to 1000 [ 1708.830439][ T2391] Bluetooth: hci6: command tx timeout [ 1709.014943][ T2450] virt_wifi0 speed is unknown, defaulting to 1000 [ 1709.130357][ T2043] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1709.130397][ T2043] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1709.412874][ T2444] virt_wifi0 speed is unknown, defaulting to 1000 [ 1709.637104][ T2391] Bluetooth: hci7: command tx timeout [ 1710.463389][ T2502] virt_wifi0 speed is unknown, defaulting to 1000 [ 1710.505909][ T2496] virt_wifi0 speed is unknown, defaulting to 1000 [ 1710.703240][ T32] INFO: task syz-executor:2029 blocked for more than 143 seconds. [ 1710.703271][ T32] Not tainted syzkaller #0 [ 1710.703284][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1710.703295][ T32] task:syz-executor state:D stack:21896 pid:2029 tgid:2029 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1710.703357][ T32] Call Trace: [ 1710.703366][ T32] ** replaying previous printk message ** [ 1710.703366][ T32] [ 1710.703382][ T32] __schedule+0x17dd/0x5830 [ 1710.703441][ T32] ? register_lock_class+0x31/0x2e0 [ 1710.703484][ T32] ? __pfx___schedule+0x10/0x10 [ 1710.703520][ T32] ? schedule+0x90/0x2b0 [ 1710.703549][ T32] schedule+0x164/0x2b0 [ 1710.703576][ T32] schedule_preempt_disabled+0x13/0x30 [ 1710.703600][ T32] __mutex_lock+0x7c4/0x15a0 [ 1710.703632][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 1710.703663][ T32] ? del_device_store+0xd6/0x370 [ 1710.703830][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1710.703855][ T32] ? __mutex_lock+0x305/0x15a0 [ 1710.717904][ T32] ? sysfs_file_kobj+0x1a/0x230 [ 1710.718034][ T32] ? lock_acquire+0x115/0x350 [ 1710.718059][ T32] ? sysfs_file_kobj+0x1a/0x230 [ 1710.718089][ T32] del_device_store+0xd6/0x370 [ 1710.718118][ T32] ? sysfs_file_kobj+0x1a/0x230 [ 1710.718151][ T32] ? __pfx_del_device_store+0x10/0x10 [ 1710.718178][ T32] ? sysfs_file_kobj+0x1e4/0x230 [ 1710.718204][ T32] ? sysfs_kf_write+0x166/0x260 [ 1710.718234][ T32] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1710.718257][ T32] kernfs_fop_write_iter+0x3a4/0x540 [ 1710.718287][ T32] vfs_write+0x612/0xba0 [ 1710.718338][ T32] ? __pfx_vfs_write+0x10/0x10 [ 1710.718367][ T32] ? do_sys_openat2+0x18d/0x200 [ 1710.718387][ T32] ? kmem_cache_free+0x182/0x650 [ 1710.718421][ T32] ? fdget+0x16b/0x250 [ 1710.718454][ T32] ksys_write+0x150/0x270 [ 1710.718483][ T32] ? __pfx_ksys_write+0x10/0x10 [ 1710.718522][ T32] do_syscall_64+0x166/0x520 [ 1710.718548][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1710.718571][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1710.718597][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1710.718619][ T32] RIP: 0033:0x7fbfc3b6034e [ 1710.718640][ T32] RSP: 002b:00007ffc26191c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1710.718663][ T32] RAX: ffffffffffffffda RBX: 0000555585c94500 RCX: 00007fbfc3b6034e [ 1710.718679][ T32] RDX: 0000000000000001 RSI: 00007ffc26191cf0 RDI: 0000000000000005 [ 1710.718693][ T32] RBP: 00007fbfc3c38447 R08: 0000000000000000 R09: 0000000000000000 [ 1710.718707][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1710.718721][ T32] R13: 00007ffc26191cf0 R14: 00007ffc26192530 R15: 0000000000000003 [ 1710.718756][ T32] [ 1710.718793][ T32] [ 1710.718793][ T32] Showing all locks held in the system: [ 1710.718804][ T32] locks held by kworker/u8:1/13: 4, on CPU#0: [ 1710.718855][ T32] #0: ffff88801cec6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1710.718952][ T32] #1: ffffc90000127c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1710.719009][ T32] #2: ffffffff9147d768 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 1710.719093][ T32] #3: ffffffff8ff60878 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x175/0x610 [ 1710.719152][ T32] locks held by pr/ttyS0/31: 2, last CPU#0: [ 1710.719167][ T32] #0: ffffffff8fe33dd8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 1710.719221][ T32] #1: ffffffff9bff26d8 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 1710.719327][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 1710.719342][ T32] #0: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1710.719423][ T32] locks held by getty/5392: 2, on CPU#1: [ 1710.719438][ T32] #0: ffff8880348630a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1710.719531][ T32] #1: ffffc9000322e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1710.719619][ T32] locks held by kworker/1:6/5778: 2, last CPU#1: [ 1710.719634][ T32] #0: ffff88813ff49d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1710.719693][ T32] #1: ffffc90004f6fc40 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1710.719772][ T32] locks held by syz-executor/2029: 4, on CPU#0: [ 1710.719787][ T32] #0: ffff88807fc00460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1710.719869][ T32] #1: ffff888058eeec80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 1710.719922][ T32] #2: ffff88802b1643c8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 1710.719981][ T32] #3: ffffffff90ce6080 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1710.720050][ T32] locks held by syz-executor/2043: 7, on CPU#0: [ 1710.720065][ T32] #0: ffff88807fc00460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1710.720122][ T32] #1: ffff888034ed6480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 1710.720182][ T32] #2: ffff88802b1643c8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 1710.720238][ T32] #3: ffffffff90ce6080 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1710.720291][ T32] #4: ffff888037395128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xa9/0x7d0 [ 1710.720411][ T32] #5: ffff88805743b258 (&devlink->lock_key#9){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170 [ 1710.720496][ T32] #6: ffffffff8ff60878 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x175/0x610 [ 1710.720549][ T32] locks held by syz-executor/2181: 4, on CPU#0: [ 1710.720564][ T32] #0: ffff88807fc00460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1710.720621][ T32] #1: ffff888057d8b880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 1710.720674][ T32] #2: ffff88802b1643c8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 1710.720735][ T32] #3: ffffffff90ce6080 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1710.720793][ T32] locks held by syz-executor/2397: 2, on CPU#0: [ 1710.720809][ T32] #0: ffffffff9147d768 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x51f/0x770 [ 1710.734715][ T32] #1: ffffffff8ff60878 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x175/0x610 [ 1710.734782][ T32] locks held by syz-executor/2444: 1, on CPU#0: [ 1710.734797][ T32] #0: ffffffff9148c420 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 1710.734876][ T32] locks held by syz-executor/2450: 1, on CPU#0: [ 1710.734891][ T32] #0: ffffffff9148c420 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x669/0xe10 [ 1710.735038][ T32] locks held by syz-executor/2461: 3, last CPU#0: [ 1710.735053][ T32] #0: ffffffff919db088 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1710.735108][ T32] #1: ffffffff9148c420 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc1d/0x1c30 [ 1710.735162][ T32] #2: ffff888072036e98 (&dev->lock){+.+.}-{4:4}, at: register_netdevice+0x1bd0/0x2280 [ 1710.735257][ T32] locks held by syz-executor/2496: 2, on CPU#0: [ 1710.735272][ T32] #0: ffffffff9147d768 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x51f/0x770 [ 1710.735328][ T32] #1: ffffffff9148c420 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2ee/0x870 [ 1710.735407][ T32] locks held by syz-executor/2502: 2, on CPU#0: [ 1710.735422][ T32] #0: ffffffff9147d768 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x51f/0x770 [ 1710.735477][ T32] #1: ffffffff9148c420 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2ee/0x870 [ 1710.735529][ T32] locks held by sed/2556: 1, last CPU#0: [ 1710.735543][ T32] #0: ffff88807f270f80 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1ed/0x520 [ 1710.735600][ T32] [ 1710.735606][ T32] ============================================= [ 1710.735606][ T32] [ 1710.735616][ T32] NMI backtrace for cpu 1 [ 1710.735630][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1710.735652][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1710.735664][ T32] Call Trace: [ 1710.735673][ T32] [ 1710.735682][ T32] dump_stack_lvl+0xe8/0x150 [ 1710.735716][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 1710.735763][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1710.735802][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1710.735826][ T32] sys_info+0x135/0x170 [ 1710.735874][ T32] watchdog+0x1073/0x10f0 [ 1710.735916][ T32] ? watchdog+0x209/0x10f0 [ 1710.735950][ T32] kthread+0x38b/0x480 [ 1710.735973][ T32] ? __pfx_watchdog+0x10/0x10 [ 1710.735997][ T32] ? __pfx_kthread+0x10/0x10 [ 1710.736021][ T32] ret_from_fork+0x514/0xb70 [ 1710.736059][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1710.736081][ T32] ? __switch_to+0xc78/0x1410 [ 1710.736114][ T32] ? __pfx_kthread+0x10/0x10 [ 1710.736146][ T32] ret_from_fork_asm+0x1a/0x30 [ 1710.736183][ T32] [ 1710.736191][ T32] Sending NMI from CPU 1 to CPUs 0: [ 1710.736220][ C0] NMI backtrace for cpu 0 [ 1710.736235][ C0] CPU: 0 UID: 0 PID: 31 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 1710.736257][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1710.736268][ C0] RIP: 0010:its_return_thunk+0x0/0x10 [ 1710.736336][ C0] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e9 fb f5 2c f5 cc [ 1710.736356][ C0] RSP: 0000:ffffc90000a778b0 EFLAGS: 00000002 [ 1710.736376][ C0] RAX: 0000000000000000 RBX: 0000000000000899 RCX: 8000000000000002 [ 1710.736392][ C0] RDX: 0000000000000301 RSI: ffffffff8c8e8c60 RDI: ffffffff8c8e8c20 [ 1710.736408][ C0] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 1710.736423][ C0] R10: dffffc0000000000 R11: ffffffff8c019d80 R12: 1ffffffff37fe535 [ 1710.736439][ C0] R13: 00000000ffffffff R14: 00000372024800b5 R15: 0000000000000875 [ 1710.736454][ C0] FS: 0000000000000000(0000) GS:ffff88812361c000(0000) knlGS:0000000000000000 [ 1710.736473][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1710.736489][ C0] CR2: 00007f9875b94000 CR3: 0000000077f9c000 CR4: 00000000003526f0 [ 1710.736510][ C0] Call Trace: [ 1710.736518][ C0] [ 1710.736527][ C0] delay_tsc+0x6c/0xd0 [ 1710.736562][ C0] wait_for_lsr+0x147/0x2f0 [ 1710.736595][ C0] __serial8250_console_fifo_write+0xcd/0x3e0 [ 1710.736624][ C0] serial8250_console_write+0xa7e/0x1200 [ 1710.736665][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 1710.736697][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 1710.736727][ C0] ? __schedule+0x17f3/0x5830 [ 1710.736760][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 1710.736800][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 1710.736834][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 1710.736871][ C0] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 1710.736896][ C0] nbcon_kthread_func+0x6d9/0x8d0 [ 1710.736928][ C0] ? nbcon_kthread_func+0x163/0x8d0 [ 1710.736955][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1710.736987][ C0] ? __kthread_parkme+0x71/0x1f0 [ 1710.737010][ C0] ? __kthread_parkme+0x199/0x1f0 [ 1710.737034][ C0] kthread+0x38b/0x480 [ 1710.737059][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1710.737085][ C0] ? __pfx_kthread+0x10/0x10 [ 1710.737110][ C0] ret_from_fork+0x514/0xb70 [ 1710.737137][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1710.737160][ C0] ? __switch_to+0xc78/0x1410 [ 1710.737195][ C0] ? __pfx_kthread+0x10/0x10 [ 1710.737221][ C0] ret_from_fork_asm+0x1a/0x30 [ 1710.737253][ C0] [ 1710.749512][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1711.821595][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1711.830805][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1711.840957][ T32] Call Trace: [ 1711.844348][ T32] [ 1711.847306][ T32] vpanic+0x26f/0x710 [ 1711.851321][ T32] panic+0xc5/0xd0 [ 1711.855044][ T32] ? __pfx_panic+0x10/0x10 [ 1711.859467][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 1711.864940][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 1711.870322][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 1711.876482][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 1711.882642][ T32] watchdog+0x10e7/0x10f0 [ 1711.886991][ T32] ? watchdog+0x209/0x10f0 [ 1711.891429][ T32] kthread+0x38b/0x480 [ 1711.895503][ T32] ? __pfx_watchdog+0x10/0x10 [ 1711.900192][ T32] ? __pfx_kthread+0x10/0x10 [ 1711.904788][ T32] ret_from_fork+0x514/0xb70 [ 1711.909393][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1711.914537][ T32] ? __switch_to+0xc78/0x1410 [ 1711.919237][ T32] ? __pfx_kthread+0x10/0x10 [ 1711.923852][ T32] ret_from_fork_asm+0x1a/0x30 [ 1711.928645][ T32] [ 1711.932000][ T32] Kernel Offset: disabled [ 1711.936326][ T32] Rebooting in 86400 seconds..