last executing test programs: 27m44.395601645s ago: executing program 4 (id=245): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000640)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) 27m44.233163365s ago: executing program 4 (id=251): r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000030500000400fddbdf2500000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 27m44.230040865s ago: executing program 4 (id=253): socket(0x2c, 0x800, 0x3) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000001240)={0x3, [0x8, 0x3, 0x0]}, &(0x7f0000001280)=0xa) (async, rerun: 64) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000011c0)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r0, 0x0) (async) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000001200)={&(0x7f0000000000)="a6cad06114717122538a71babcd78c81a3b099f637dea761dcb4b725e49998c2e99d1c9b5ad6415b8fc0ce2c531ead3de978855f5925a3b3c683e9002a177d77ee40207eb514dc31ce0465bfdc290da14d0ff8961ab6709af379c5dcd77c8233c5e0bcae4490ef604e67655b5ee529e47b1813ce05674529ce338f326de53ca5e83a927f1a8e1bc116fc63be1854bc0502227950aa9573176b02567e77cdafdb897c6b", &(0x7f00000000c0)=""/111, &(0x7f0000000140)="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", &(0x7f0000001140)="ef427e17eba8008c7f53155632760a41c371c0c4319a0c4f4db5df8dec211659ee0a152077b39c4b78417b41f2bc6b36efd1e91d8c9688da2d4aae3bbfb39a57ead2509432c4a0d6591c495f5307513959d5d43cec695357a7783223b348ba6245ba91", 0x80, r0}, 0x38) 27m44.223928511s ago: executing program 4 (id=255): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f00000018c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001900)={@fallback=r3, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001940)=ANY=[@ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="2f0000001801000004000000", @ANYRES32, @ANYBLOB, @ANYRES64=r5], 0x20) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001980)={r1, r2, 0x25, 0x0, @val=@netkit={@void, @value=r1, @void, @void, r5}}, 0x1c) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r2, {0x0, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000800)={r6, 0x20, &(0x7f00000007c0)={&(0x7f0000000740)=""/51, 0x33, 0x0, 0x0}}, 0x10) 27m44.023531308s ago: executing program 4 (id=258): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffff689}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x32, 0x1}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x44}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000380)={0x6, 0x4, 0x0, 0x20000000, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x44}, @multicast2}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000001c0)={r0, 0x9, 0x1, 0x7ff}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000004c0)) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000500)=0x8) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000540)=0x4) pwritev(r3, &(0x7f0000000580)=[{&(0x7f00000005c0)="00214500002c00000000400600000a0000010a000002005000500000000100000001601003f60000000001010101", 0x2e}], 0x1, 0x6, 0x0) pwritev(r3, &(0x7f0000000600)=[{&(0x7f0000000640)="00214500001400000000400600000a0000010a000002005000500001ffff00000002601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f00000006c0)={0x8000001}, 0x8) close(r4) ioctl$OCFS2_IOC_MOVE_EXT(r2, 0x40406f06, &(0x7f0000000200)={0x98a4, 0x3576653c, 0x100000001, 0x6, 0x3}) r5 = accept4(r2, &(0x7f0000000240)=@isdn, &(0x7f0000000080)=0x80, 0x800) getsockopt$SO_NETNS_COOKIE(r5, 0x1, 0x47, &(0x7f0000000140), &(0x7f0000000180)=0x8) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r5, 0x8008f511, &(0x7f0000000680)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400), 0x200002, 0x0) r7 = openat$cgroup_netprio_ifpriomap(r6, &(0x7f0000000440), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r7, &(0x7f0000000480)=ANY=[@ANYBLOB='gretap0 8'], 0xa) shutdown(r5, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x68, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040022eb00000000"}}}}}, 0x0) 27m43.667472093s ago: executing program 4 (id=264): r0 = socket(0x80000000000000a, 0x2, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f0000000240)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000865ccf6f3308000000fec86de0", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001000000000000c00500000044478438da5cbd75"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newlink={0x54, 0x10, 0x503, 0x70bd29, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6230}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x21400}}}}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x54}}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000000010bf"], 0x18}, 0x1, 0x0, 0x0, 0x4048811}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x9}, &(0x7f0000000140)=0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="01000000040000000400000004"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$key(0xf, 0x3, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0), &(0x7f0000000700), 0xfffffff8, r6}, 0x38) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000740)={r7, 0x1}, 0xc) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={r5, 0xd829, 0x7, 0x10}, &(0x7f00000001c0)=0x10) 27m28.552268647s ago: executing program 32 (id=264): r0 = socket(0x80000000000000a, 0x2, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f0000000240)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000865ccf6f3308000000fec86de0", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001000000000000c00500000044478438da5cbd75"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newlink={0x54, 0x10, 0x503, 0x70bd29, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6230}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x21400}}}}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x54}}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000000010bf"], 0x18}, 0x1, 0x0, 0x0, 0x4048811}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x9}, &(0x7f0000000140)=0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="01000000040000000400000004"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$key(0xf, 0x3, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0), &(0x7f0000000700), 0xfffffff8, r6}, 0x38) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000740)={r7, 0x1}, 0xc) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={r5, 0xd829, 0x7, 0x10}, &(0x7f00000001c0)=0x10) 18m56.269998058s ago: executing program 3 (id=4553): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000001c0)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) r3 = socket(0xa, 0x3, 0x9) getsockopt$nfc_llcp(r3, 0x29, 0x24, 0x0, 0x2000005d) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000100)=@framed={{0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@map_fd={0x18, 0x1, 0x1, 0x0, r1}, @exit={0x95, 0x0, 0x7b00}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000005c0)='syzkaller\x00'}, 0x80) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000640)={r5, r7, 0x25, 0x4, @val=@netfilter={0x7, 0x0, 0x9}}, 0x20) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000780)={r4, &(0x7f0000000680)='*,}\x00', 0x0, &(0x7f00000006c0)={@_ha_fsid={[0x1, 0x8f7b]}, {0x9, 0x3ff, 0x4, 0x8}}, 0x9, &(0x7f0000000700), &(0x7f0000000740)=0x80}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x29, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd8e, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x59}, @map_fd={0x18, 0x5, 0x1, 0x0, r2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ldst={0x2, 0x0, 0x0, 0xe, 0xa, 0xfffffffffffffffe, 0xffffffffffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_fd={0x18, 0x4, 0x1, 0x0, r2}, @ldst={0x0, 0x0, 0x3, 0x6, 0x2, 0x40, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='GPL\x00', 0x40, 0x71, &(0x7f0000000440)=""/113, 0x41100, 0x44, '\x00', r7, 0x25, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f00000007c0)={0x4, 0xd, 0xfffff800, 0x3}, 0x10}, 0x94) 18m55.325483345s ago: executing program 3 (id=4560): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0x7a44, 0x1700) (async) write(0xca, &(0x7f0000000180)="0422fe00", 0x4) (async) r1 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000000)={&(0x7f0000000080)=@in={0x2, 0x4e23, @local}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa0000000020"], 0x38, 0x4855}, 0x856) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) (async) bind$inet(r3, &(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10) (async) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=@newtaction={0x6c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000900)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) (async) sendmmsg$inet(r3, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000009c0), 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB], 0xb0}}], 0x2, 0x4000080) (async) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@dellinkprop={0x4c, 0x6d, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'geneve0\x00'}, @IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'macvlan0\x00'}]}]}, 0x4c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000018000000060000000006001500060000001000168006000100000801000000000000000000000000000000000000000096b778fcc2d5138a5a458ee9f5a5b466f092d8b3056ce8d1d498fb43527ade8ad26ea730c99d6a0ebfa9b3c11470fbb10305d071f48e768d42ab19856b4259e637d37210b133e1f4fc7f6484df447b0c3296aa4eb7a5c4fa5e913081d7d1603ffbb482ec4d4956e661e6ae9d315b5573e461770ec5b0fbf24ba0002845f3b29fafb9e44a0b225c0af99aedecc87a645c3436c1a5b41d01773493ab1ca43b72d70d9ff8aef9b4740fc3416a8df68682e49a51e659cb27fd7316"], 0x34}}, 0x0) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r6, &(0x7f00000004c0)=[{{&(0x7f0000000540)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2e8}}], 0x2, 0x0) (async) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00000005c0)={0x400000000000000, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}}, 0x0) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) (async) sendmsg$nl_xfrm(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=ANY=[@ANYBLOB="040100001a0001000000000000000000fc0000000000000000000000000000002001000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x104}}, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x6}) 18m53.810375876s ago: executing program 3 (id=4563): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (rerun: 64) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20000085}, 0x0) (rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000070000100000000000000000007"], 0x30}}, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000240), 0x40000000000009f, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000e01000b00000014"], 0x36) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001e80)=@newtaction={0x48, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 18m51.615955358s ago: executing program 3 (id=4569): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x28, 0x14, 0x1, 0x0, 0x0, {0x28}, [@INET_DIAG_REQ_BYTECODE={0x11, 0x1, "a71e2a26c2d174b4380271c119"}]}, 0x28}}, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@multicast1, 0x4e23, 0x6, 0x4e20, 0x9, 0xa, 0x80, 0x20, 0x2f, 0x0, 0xee01}, {0x0, 0xffffffffffffffff, 0x2, 0x10, 0x3, 0x7ff, 0xff, 0x16723589}, {0x1, 0x4, 0x2, 0x4}, 0x0, 0x6e6bb5, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast1, 0x4d6, 0xff}, 0xa, @in=@loopback, 0x3501, 0x3, 0x2, 0xb, 0x5, 0x8, 0x29ad}}, 0xe8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0xe, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="180200000000000000000000000000007110bb000000000095"], &(0x7f0000000640)='syzkaller\x00'}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0xe, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="180200000000000000000000000000007110bb000000000095"], &(0x7f0000000640)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1a, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3, 0x0, 0x0, 0x0, 0x18}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x34d5b}]}, &(0x7f0000000480)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x3d}, 0x94) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) (async) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r2, @ANYBLOB="0000000000000000660000000100000018000000000000000000000001008000950000000000000097030000bf00320095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r2, @ANYBLOB="0000000000000000660000000100000018000000000000000000000001008000950000000000000097030000bf00320095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000100)={@multicast2, 0x1, 0x0, 0x20, 0x0, [{@private}, {@private}]}}) 18m51.005056397s ago: executing program 3 (id=4572): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0xa, &(0x7f00000010c0)=@raw=[@generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x3, 0x0, 0x0, 0xc}, @generic={0xb7, 0x4}, @generic={0xb7, 0x5}, @generic={0x85, 0x0, 0x0, 0x0, 0x63}, @generic={0x15, 0x0, 0x0, 0x2}, @generic={0x81, 0x1, 0x0, 0x1f}, @generic={0x85, 0x0, 0x0, 0x0, 0x56}, @generic={0x95}], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r1, 0x215eb000) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) r2 = socket(0x2a, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e24, 0x3, @mcast1, 0x2}, 0x1c) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000100)={r0, &(0x7f0000000000)='GPL\x00', 0x10000, &(0x7f0000000040)={@align=0x800, {0x9, 0xb, 0x7, 0x7}}, 0x6, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x3}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r4, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x48800) 18m49.48691038s ago: executing program 3 (id=4577): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x38, 0x1403, 0xc23, 0x70bd2e, 0x25dfdc01, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x14f7325d9d03b00}, 0x4000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 18m34.405005486s ago: executing program 33 (id=4577): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x38, 0x1403, 0xc23, 0x70bd2e, 0x25dfdc01, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x14f7325d9d03b00}, 0x4000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 2m40.10004421s ago: executing program 5 (id=10806): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x42}, 0x1}}, 0x10) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r2, &(0x7f0000001b40)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) 2m39.438590824s ago: executing program 5 (id=10808): r0 = socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x60480) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000001c0)={r2, r1, 0x4, r1}, 0x10) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty}}) 2m38.89483315s ago: executing program 1 (id=10811): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004804) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000200)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r3, 0x89f2, &(0x7f00000002c0)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x4, 0xe0, 0x8, 0x1}, 0xc) getsockopt$bt_BT_RCVMTU(r5, 0x112, 0xf, &(0x7f0000000040)=0x2, &(0x7f0000000080)=0x2) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000ffba6ebfa700000008000300", @ANYRES32=r4, @ANYBLOB="0a0006"], 0x28}, 0x1, 0x0, 0x0, 0x8010}, 0xc040) 2m38.851484943s ago: executing program 5 (id=10812): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) socket(0x10, 0x3, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0xa, 0x1, 0x0) (async) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) (async) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, 0x0, 0x0) (async, rerun: 32) bind$can_j1939(r4, 0x0, 0x0) (rerun: 32) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, 0x0, 0x0) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000180)={'syztnl1\x00', 0x0}) (async, rerun: 32) sendmsg(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000008c0)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0) (async) sendmsg(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000009c0)="68000000020905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020005000002080003000000001e", 0x68}], 0x1}, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r9 = socket(0x10, 0x803, 0x0) (rerun: 64) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r9, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r10], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r11 = socket(0x22, 0x6, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000dc0), r11) (async) getsockname$packet(r11, &(0x7f0000000e00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000e40)=0x14) sendmsg$nl_route(r6, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r12, @ANYBLOB="01"], 0x3c}}, 0x0) r13 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r10, @ANYBLOB="000014000a000100aaaaaaaeaaaa000008000f0001"], 0x30}, 0x1, 0x0, 0x0, 0x20000}, 0x0) 2m38.138705214s ago: executing program 1 (id=10815): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000080)={0x42}, 0x10) sendmsg$tipc(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) close(0x3) close(0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f00000002c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x48241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$tipc(0x1e, 0x2, 0x0) (async) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) (async) socket$tipc(0x1e, 0x2, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000080)={0x42}, 0x10) (async) sendmsg$tipc(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) (async) close(0x3) (async) close(0x4) (async) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f00000002c0)) (async) 2m37.355009469s ago: executing program 5 (id=10816): r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f00000001c0)=0x3, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f00000002c0)='veth1_virt_wifi\x00') setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000100)=0x100000001, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, 0x1c) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="11000000040000000400edff0900000000000000", @ANYRES32=r2, @ANYRES8=r0, @ANYRES8=r2, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r3}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r4}, &(0x7f00000005c0), &(0x7f0000000600)=r3}, 0x20) r5 = socket(0xb, 0x3, 0x5) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000880)={'vxcan1\x00', 0x0}) setsockopt$SO_J1939_PROMISC(r7, 0x6b, 0x2, &(0x7f00000008c0)=0x1, 0x4) bind$can_j1939(r7, &(0x7f0000000900)={0x1d, r8, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000940)=0x1, 0x4) sendmmsg(r7, &(0x7f0000000980)=[{{0x0, 0xfffffffffffffd0f, &(0x7f00000009c0)=[{&(0x7f0000000a00)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) sendmsg$nl_route_sched(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r8, {0xffff, 0xe}, {0xf, 0xa}, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x20000050) getsockopt(r5, 0x200000000114, 0x2715, 0x0, &(0x7f0000000080)) r9 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r2}, 0x8) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f00000006c0)={r9, &(0x7f0000000280)='\x00', 0xa4281, &(0x7f0000000380)={@align=0xffffffff80000000, {0x3, 0x8, 0x9, 0x1e43}}, 0x1000, &(0x7f0000000640), &(0x7f0000000680)=0x1}) sendto$inet(r0, &(0x7f0000000740)="db27ff60a2819c3e7de955a8384bcfcbba6b60bb4f186f56dc1b13be351aa2b2b4e19ba79df99359687c52fcf8443f8c211c1a535a68632d83aedb4ea350738226f56e581f88a049c73b8b8f1877bf1dc63e4e998a7ce2e803b4c732d46d40b81cb5eb3360030dedf45561799cc94dfe284fefadfc2d095f136400234a77ca9781e87061127562d22aab60409d41a736e1347d880dcfb6869f47fbfeda8c5fb448970ee226d1061bc531154c4223452eed014adb3e7e57af8e0dbf642796d261db3665469cc220238f28f08483660c9adbae5c2ba87201d19008c2ec919bb9a65077ac722e7ca43a6d76c6fbe42230870e350737a8a8c8c2", 0xf8, 0x4000, &(0x7f0000000840)={0x2, 0x4e21, @local}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="2c6ba7cccf9fc6cda7502062fdccba3628af2722e854cf58eadcd5e1e90921c1d1fd93f5888e26e29cc70d23f7f6632264443a39208cac4ce60db103e90e3e0b38062c595fd3a519c9a2e7a1cfec786546e7ccff99cbade9bc21c811226dcd88f2a29fbdf2bf8dd71df049688ce1f6644bf3167075813c7468863ab52652d6f723170d35e5241816cc18ae05d6e7da"], &(0x7f0000000340)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x2, '\x00', r8, @fallback=0x2e, r10, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r12 = socket$inet6(0x2d, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000002200)={&(0x7f0000000700)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000002180)=[{&(0x7f0000002240)="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", 0x109f}, {&(0x7f0000000bc0)="28d7faa6d19ef4600df3eae1a00da256901327e9f90ef071a2799a0a3d7f5e84d01acd3d21a6219e43feb8882e7e18f01e3b2e10f64280c985cb462544e22c2491e611fb822d8b88827172ddfb81ca6ff74b52252e62804f7a44bc7036b2a14cb0b60db1c036dba0162c33a071a1a3d36d66dc16255752d36eec4edabd004cc65613ae6272de6ae2b9737b0bf557fb76303d601171a9a6575b78906fcfc975c4af99ebc02f1a8d55cfa13978fa425cf082f18dd8a5cfed45dd41e32dd8fb", 0xbe}], 0x2, &(0x7f00000021c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}, 0xd5) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r12, 0x11d, 0x76, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r11, 0x18000000000002a0, 0x33, 0x0, &(0x7f00000000c0)="b907ef19edfff007049e0ff0888e72e9eb17e12ce4f2ffc3d4b8743c2873208a9eca5493c99004f7ea2fb6f0ac22c61df8ad86", 0x0, 0x0, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2m37.35425596s ago: executing program 1 (id=10817): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000030000504000000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000100005800c000180080003000100000008000a0007"], 0x5c}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000040)={'gre0\x00', 0x0, 0x20, 0x0, 0x401, 0x4, {{0x18, 0x4, 0x1, 0x5, 0x60, 0x67, 0x0, 0x8b, 0x2f, 0x0, @empty, @local, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x24, 0xdb, 0x0, 0x6, [0x4, 0xffffffaa, 0x0, 0x9, 0x6, 0x6, 0x2, 0xd]}, @timestamp={0x44, 0x1c, 0x31, 0x0, 0x9, [0xa9, 0x0, 0x1, 0xfffffaba, 0x389be87e, 0xa52]}, @lsrr={0x83, 0x7, 0xb7, [@multicast1]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6tnl0\x00', r2, 0x2f, 0x7, 0xab, 0x8, 0x54, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x7800, 0x3, 0x8}}) 2m37.260007524s ago: executing program 2 (id=10818): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000010000100000000f7ff0000000000000a20000000000a01030000000000000000010000020900010073797a310000000034000000030a01020000000000000000010000000900030073797a310000000008000a40000000040900010073797a31000000002c000000050a0102000000000000000001002000090003"], 0xa8}}, 0x8000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000354000000120a01010000000000000000020000000900010073797a30000000000900020073797a3000000000080003400000000320000480060001"], 0xa4}}, 0x20000000) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000000)=0x3, 0x4) bind$can_raw(r1, &(0x7f0000000040), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000080)=0x9b3f, 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000100)=0x6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000009c0)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, r8, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004800) sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r8, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x34}, 0x48) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x14, r6, 0x70b, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000c1}, 0x20000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r5) sendmsg$NL80211_CMD_DISASSOCIATE(r5, &(0x7f0000001c40)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001c00)={&(0x7f0000000b40)={0x1098, r3, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x1053, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0x6c, 0x82}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x0, 0xaf, 0x5}}, @ht={0x2d, 0x1a, {0x4000, 0x0, 0x7, 0x0, {0x6, 0xf82, 0x0, 0x9, 0x0, 0x1, 0x1}, 0x800, 0x4, 0xa8}}, @dsss={0x3, 0x1, 0xb4}, @supported_rates={0x1, 0x7, [{0x35, 0x1}, {0x12}, {0x6c}, {0x1b, 0x1}, {0x1, 0x1}, {0x65, 0x1}, {0xb, 0x1}]}, @measure_req={0x26, 0x1003, {0x5, 0x6, 0xf9, "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"}}, @rann={0x7e, 0x15, {{0x0, 0x7}, 0x4, 0x9, @device_a, 0xd740, 0x619, 0x200}}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6da}, @NL80211_ATTR_MAC={0xa, 0x6, @random="b9f541bf2274"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x13a8}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x1098}, 0x1, 0x0, 0x0, 0x44094}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRESDEC=r0, @ANYBLOB="01032cbd6000050000001500000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x20040004) 2m29.425420006s ago: executing program 2 (id=10820): r0 = socket$kcm(0x10, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYRES32=r1, @ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095", @ANYRES64=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r3, &(0x7f0000000380)="0099", &(0x7f0000000480)=@udp6=r2, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0x200000ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 2m26.87247962s ago: executing program 1 (id=10821): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000000c0)={@remote, 0x0}, &(0x7f0000000100)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'erspan0\x00', &(0x7f0000000380)={'gre0\x00', 0x0, 0x10, 0x40, 0x95, 0x1, {{0x9, 0x4, 0x1, 0x4, 0x24, 0x68, 0x0, 0x7, 0x29, 0x0, @broadcast, @loopback, {[@ssrr={0x89, 0xf, 0xdb, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0x2e}]}]}}}}}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x98, r1, 0x400, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x80}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x98}, 0x1, 0x0, 0x0, 0x840}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) r5 = getpid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000580)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000000680)=0xe8) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000006c0)={r5, r6, 0xee01}, 0xc) 2m23.507990102s ago: executing program 5 (id=10823): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x48, 0x31, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x34, 0x18, 0x0, 0x1, [@nested={0x30, 0x10, 0x0, 0x1, [@nested={0x29, 0x150, 0x0, 0x1, [@nested={0x4, 0x10e}, @generic="024f7568373f91db6f10dc1bb7b893417c9e9e12688eea5bd54155ad76f20c6b23"]}]}]}]}, 0x48}}, 0x84) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @mcast2, 0x3}, 0x1c) 2m21.121695256s ago: executing program 6 (id=10824): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000004c0)=0x1, 0x4) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)=""/133, 0x85}], 0x1}, 0x2) writev(r0, &(0x7f00000007c0)=[{&(0x7f0000000800)='?', 0x1}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000840)=0xffff1884, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000140)={'bridge_slave_0\x00', 0x1}) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003040)=ANY=[@ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="20002aea", @ANYRESOCT=r3, @ANYBLOB="01000000fe80000000000000000000000000002b86dd00009b805f42e6e275be9ef689b6b48506e23e7143915840394a4b1e643d631dae831d2bfba9953c192d2c0f5342e6f3c8d9598159fa0b25d7d80fbbbab14fc91d87d0efedb1c4e8160db9d2a5d37c77ffcca3e392b066872d1bccc59bb2f3fa1817379a8edba55539b91cbebf19fc62d9d5d91429c8cff991926fb9ab2977d6843ce57f60890caf10118182b184d552f5276660128df2f25552922ee9c1ef518f18b15b2d937b88ce5f80dde45a4625d9757f04"], 0x38}, 0x1, 0x0, 0x0, 0xc040}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r1, @ANYRES32=r3, @ANYRESOCT=r1, @ANYRES32=r4, @ANYBLOB="01000000ef"], 0x38}}, 0x40) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000002d40)=0x100000b3, 0x4) bind$inet(r5, &(0x7f0000002d80)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f0000002dc0)={0x1, &(0x7f0000002e00)=[{0x6, 0x2, 0xc}]}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000002e40)=ANY=[@ANYBLOB="0500000000000000c2000000082d74714a22054d361100590b00000000000000119078000000000000000000004e200018907804000000080000"], 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca0200000000000000adcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d070490893616810a121ff4feedd1d176b313b9fc7bf31ddff431a4a50760ce18a76c4b7aa73cec3eec984c76d16f798c436410f3f4a41715e736a132c3cb9421be0b3c2bd40b75896c007fa2d47e3d8392d905d582b8eff689b0f493770c91e8c2e8bd0b08ffa4fd0289b04b0ea024768d196ef721314d68d29988b01871c6ea39f95a0b77744caadd24867acab274e8e4bf3fb44df31e15ffdce52f9f60ffe"], &(0x7f0000001a80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001ac0)={0x3, 0x8, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000002c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000002f80)=ANY=[@ANYRES32, @ANYRES32=r8, @ANYBLOB="050000000400000004000000", @ANYRES32=r7, @ANYBLOB="6e1e6b0810856ca47ee8a98c7888e28f9b48746b65b25350ada70262a31b3a43a2c65f1fcc654515656df4d527481d53b121c9774105a758e4c87485a5f35117e9e2ba7f1a2887d822d982fe3cbbaab203c02e3a0d349026ce83376e2b6a2f4b14b2c2102e13021aa4ab8b41b3a8015141145aa10ddf3a6cdfba8ce27f95f13022478b", @ANYRES64=0x0], 0x20) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000002d00)=ANY=[@ANYBLOB="14000001140001002dbd7000006c930000000000"], 0x14}], 0x1}, 0x0) connect$pppoe(r6, &(0x7f0000000040)={0x18, 0x0, {0x7, @broadcast, 'macvlan1\x00'}}, 0x1e) sendmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f00000002c0)="69be1199", 0x5ea}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f00000003c0)}}, {{&(0x7f0000000540)=@xdp={0x2c, 0xa, 0x0, 0xf}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x8000) sendmsg$nl_route(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008880}, 0x88d0) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) 2m17.010418769s ago: executing program 2 (id=10825): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000600)={0x18, 0x0, {0x3, @empty, 'ip6gre0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000640)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000006c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl(r2, 0x40047438, &(0x7f0000000740)) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f0000000780)) write$ppp(r2, &(0x7f0000001640)='\x00\x00', 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000001540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001580)={r5, 0x18000000000002a0, 0xfe2a, 0x0, &(0x7f0000001600)="b9ff0307683a268cb8091a99888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000340)={0xffffffffffffffff}) sendmsg$NL80211_CMD_AUTHENTICATE(r6, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x98, r4, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x13}}}}, [@NL80211_ATTR_SSID={0x14, 0x34, @random="4781135787900435dc9c0c953c8b8961"}, @NL80211_ATTR_SSID={0x6, 0x34, @random="7ada"}, @key_params=[@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xb}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}], @NL80211_ATTR_MAC={0xa, 0x6, @random="d44729c1e512"}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008041}, 0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) write$tun(r8, &(0x7f0000000300)={@val={0x0, 0x88e7}, @val={0x3, 0x4, 0x101, 0x2, 0xffff, 0x55c}, @arp=@generic={0x306, 0x6003, 0x6, 0x7, 0x8, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, "859c4010197755", @broadcast}}, 0x29) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x28, r4, 0x1, 0x70bd29, 0x35dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4841}, 0x24000004) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000740)=@req={0x3fc, 0x4, 0x0, 0xfffffffb}, 0x10) r11 = socket(0x1e, 0x4, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) setsockopt$packet_tx_ring(r11, 0x10f, 0x87, &(0x7f0000001680)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r12 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r12, 0x10f, 0x87, &(0x7f00000016c0)=@req={0x3fc}, 0x10) sendmmsg(r12, &(0x7f0000001700)=[{{0x0, 0xa9cc7003, &(0x7f0000001740)=[{&(0x7f0000001780)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 2m12.34113667s ago: executing program 1 (id=10826): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002480)=@newtfilter={0x3c, 0x2c, 0x200, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0xfd89, 0x1, {0xfff3}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004800}, 0x80) close(r0) 2m11.147829774s ago: executing program 5 (id=10828): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000500)={0x10003, 0x0, 0xd7c4, 0xfffffff9}, 0x10) write(r3, &(0x7f0000000680)="240000001e005f0214fffffffffffff8070000001d0000050000000008000900ecffffff", 0x24) (async) write(r3, &(0x7f0000000680)="240000001e005f0214fffffffffffff8070000001d0000050000000008000900ecffffff", 0x24) accept(r0, 0x0, &(0x7f00000001c0)) (async) r4 = accept(r0, 0x0, &(0x7f00000001c0)) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f00000006c0)={'bridge0\x00', &(0x7f0000000800)=@ethtool_wolinfo={0x5, 0x0, 0x2, "0a08cf30c194"}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x80, 0x8, 0x2, 0x4, {{0x47, 0x4, 0x1, 0x5, 0x11c, 0x67, 0x0, 0xbe, 0x29, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0xc, 0x43, 0x3, 0x7, [{@multicast1, 0x8000}]}, @ssrr={0x89, 0x1f, 0x3c, [@loopback, @rand_addr=0x64010102, @broadcast, @empty, @multicast1, @empty, @dev={0xac, 0x14, 0x14, 0xf}]}, @end, @timestamp_prespec={0x44, 0x4c, 0xd2, 0x3, 0x0, [{@broadcast, 0x2}, {@local, 0x700}, {@remote, 0x3}, {@remote, 0x5}, {@empty, 0xb}, {@private=0xa010101, 0x8}, {@rand_addr=0x64010100, 0xd}, {@rand_addr=0x64010101, 0x8}, {@empty, 0x7}]}, @generic={0xc7, 0x5, "a9337b"}, @timestamp_prespec={0x44, 0x3c, 0x6, 0x3, 0x6, [{@broadcast, 0xa9a}, {@rand_addr=0x64010102, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x40}, {@rand_addr=0x64010102, 0x800}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x3}, {@private=0xa010101}, {@multicast1, 0x2}]}, @generic={0x0, 0x2}, @ssrr={0x89, 0x7, 0xea, [@empty]}, @timestamp_addr={0x44, 0x2c, 0x23, 0x1, 0x2, [{@multicast2, 0x3}, {@remote, 0x8}, {@remote, 0x8}, {@rand_addr=0x64010101, 0x8}, {@broadcast, 0x3}]}, @lsrr={0x83, 0x17, 0xfc, [@multicast2, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @rand_addr=0x64010102]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x80, 0x8, 0x2, 0x4, {{0x47, 0x4, 0x1, 0x5, 0x11c, 0x67, 0x0, 0xbe, 0x29, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0xc, 0x43, 0x3, 0x7, [{@multicast1, 0x8000}]}, @ssrr={0x89, 0x1f, 0x3c, [@loopback, @rand_addr=0x64010102, @broadcast, @empty, @multicast1, @empty, @dev={0xac, 0x14, 0x14, 0xf}]}, @end, @timestamp_prespec={0x44, 0x4c, 0xd2, 0x3, 0x0, [{@broadcast, 0x2}, {@local, 0x700}, {@remote, 0x3}, {@remote, 0x5}, {@empty, 0xb}, {@private=0xa010101, 0x8}, {@rand_addr=0x64010100, 0xd}, {@rand_addr=0x64010101, 0x8}, {@empty, 0x7}]}, @generic={0xc7, 0x5, "a9337b"}, @timestamp_prespec={0x44, 0x3c, 0x6, 0x3, 0x6, [{@broadcast, 0xa9a}, {@rand_addr=0x64010102, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x40}, {@rand_addr=0x64010102, 0x800}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x3}, {@private=0xa010101}, {@multicast1, 0x2}]}, @generic={0x0, 0x2}, @ssrr={0x89, 0x7, 0xea, [@empty]}, @timestamp_addr={0x44, 0x2c, 0x23, 0x1, 0x2, [{@multicast2, 0x3}, {@remote, 0x8}, {@remote, 0x8}, {@rand_addr=0x64010101, 0x8}, {@broadcast, 0x3}]}, @lsrr={0x83, 0x17, 0xfc, [@multicast2, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @rand_addr=0x64010102]}]}}}}}) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@delqdisc={0x78, 0x25, 0x2, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xd, 0xb}, {0x2, 0xfff3}, {0x3, 0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x3c, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x53}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xfff}, @TCA_FQ_QUANTUM={0x8, 0x3, 0xfffffffb}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x80000001}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x1000}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x3}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x8}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_RATE={0x6, 0x5, {0x4, 0x10}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2400c0c0}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@delqdisc={0x78, 0x25, 0x2, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xd, 0xb}, {0x2, 0xfff3}, {0x3, 0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x3c, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x53}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xfff}, @TCA_FQ_QUANTUM={0x8, 0x3, 0xfffffffb}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x80000001}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x1000}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x3}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x8}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_RATE={0x6, 0x5, {0x4, 0x10}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2400c0c0}, 0x0) close(r2) socket(0x10, 0x803, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @random="0100003600"}) r8 = socket(0x400000000010, 0x3, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r8, 0x84, 0x13, &(0x7f0000000000)={0x1, 0x80}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_SUPPORTED(r1, 0x84, 0x81, &(0x7f0000000140)={r9, 0x472}, &(0x7f0000000180)=0x8) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000580)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000580)={'syzkaller0\x00', 0x7101}) ioctl$NILFS_IOCTL_SET_SUINFO(r7, 0x40186e8d, &(0x7f0000000640)={&(0x7f00000005c0)=[{0x642, 0x1, 0x0, {0x1, 0x8, 0x1}}, {0x7, 0x0, 0x0, {0x3c1a, 0x401, 0x2}}, {0x1, 0x0, 0x0, {0x6, 0x3, 0x1}}, {0x0, 0x0, 0x0, {0xfffffffffffffff8, 0x8}}], 0x4, 0x20, 0xf2bb, 0x7}) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000700)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2a, 0x4, {0x0, 0x0, 0x74, r13, {0xeffe068f8514295, 0x6}, {0xafabc05531515610, 0x2}, {0xfff2, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) 2m8.710591308s ago: executing program 6 (id=10829): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r4) sendmsg$NFC_CMD_START_POLL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x24, r5, 0x611, 0x70bd2b, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) sendmsg$NFC_CMD_DEV_DOWN(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x1c, r5, 0x1, 0x123, 0x234, {0x7}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r7 = openat$nci(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000400)=0x0) bind$nfc_llcp(r6, &(0x7f0000000440)={0x27, r8, 0xfffffffe, 0x4, 0x0, 0x4, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=0x0) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000540), r11) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f0000000580)=0x0) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r13], 0x1c}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000700)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, r5, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4800) r14 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r14, 0x1, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4014000}, 0x800) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r15 = syz_genetlink_get_family_id$tipc(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r15, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x81) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000280)={0x3, &(0x7f0000000100)=[{0x28, 0x0, 0xf9, 0xfffff030}, {0x4d, 0x0, 0x0, 0x3}, {0x6}]}, 0x10) 2m6.247939436s ago: executing program 2 (id=10830): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x1000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1200}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8, 0x400008}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b3}, 0x94) 1m59.434257816s ago: executing program 1 (id=10831): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r3) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x40, r4, 0xd09, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x81}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x32}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c054}, 0x2004c030) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000340)={0x4001}, 0xfea3) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0xffffffb9, &(0x7f00000003c0)={&(0x7f0000000400)=@ipv6_getaddr={0x18, 0x16, 0x3c2be10bca706f15, 0x0, 0xffffffff, {0xa, 0x0, 0x10}}, 0x18}, 0x1, 0x0, 0x0, 0x44000}, 0x0) setsockopt$sock_int(r2, 0x1, 0xa, &(0x7f00000002c0)=0x4, 0x4) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000300)) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0xfff, 0x7f, 0x1, 0x5}, 0xffffff80, 0x1, 0x15af3, 0x6, 0x8, 0x14, 0x2, 0xe, 0x6, 0x331799a3, {0xf, 0xe9, 0x40, 0x3, 0x2, 0x5}}}}]}, 0x78}}, 0x4c050) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff3, 0xc}, {0x0, 0xfff3}, {0x9, 0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xb, 0x10}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041006}, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="65844100c5dc2f"], 0xdd12}], 0x1, 0x0, 0x0, 0x10}, 0x200488d5) 1m56.62087013s ago: executing program 6 (id=10833): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b40)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv6_newnexthop={0x30, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_GATEWAY={0x14, 0x6, @ip4=@local}]}, 0x30}}, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, {0x1}, {0xffff, 0xa}, {0x1, 0x3}}}, 0x24}}, 0x40080) pread64(r1, &(0x7f00000001c0)=""/11, 0xb, 0x5000) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) writev(r2, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000040)="6fdd3ab4a751a63ad3e92510ec60555db947ab13681d016e9caf21c9fa50dda5f5a0d03351fcd6243359a5dd19876c1d636161feebc0f453ce12df00cc9979c9a77bc33ad04468c1770e1e6a61d24ee017399755d9f893a0f3393f32a435bf1e014d76a223de0582922a6ff40eaac33b93f664667632edd4374d", 0x7a}, {&(0x7f0000000240)="5a5eb19d374ec7760968519338c6ff961e1bdf04e2ffb44dc44570a15fa6ea85ae9a21b707ece208cf1be9e9c7330740d3acf12fbbdc355c3d5cb1b0ed247fb89494f2d73ba130617a238b27cce8da50b3fee9bdeed7bc933f19f688c24bb89f24833086dadc4ba04659b2e6af0050d408eec80ccdff3cdd7ac937a883f4f24a2eaf4173bbca0c1b460a9b6d1ae2928b15354b728acff1d9964eed788367014ff6103b88476fad8c0198dfe18297313b403219498b2a1b28a5632a53b06e2a9300516d1b1bc8518fb0b786", 0xcb}, {&(0x7f0000000340)="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", 0xff}, {&(0x7f0000000440)="f386bcd5b790110e85cc506ad95b25", 0xf}], 0x5) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x38, 0x10, 0x439, 0x70bd2d, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x82}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x96d160c200d1a4a7}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008001}, 0x4040) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="59095004000000000000080000001000048009000500"], 0x24}}, 0x0) sendmsg$TIPC_NL_NODE_GET(r6, &(0x7f0000000a00)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="38010000", @ANYRES16=r8, @ANYBLOB="020025bd7000fbdbdf250d000000480007800c000300080000000000000008000200c4b6000008000200ff0300000c000400020000000000000008000100e90a00000c000400050000000000000008000100faffffff3400098008000200cfa27128080001000600000008000200040000000800020003000000080001000500000008000100ff000000a80005803c000280080003004000000008000400380000000800020002000000080004000500000008000400fe01030008000400fc05000008000200000000000c00028008000200030000000c00028008000100000000003c000280080002000b000000080004000800000008000400040000000800010019000000080003000e000000080002000100000008000200060000000c00028008000400010400000800010065746800"], 0x138}, 0x1, 0x0, 0x0, 0x85}, 0x4000004) r9 = openat$cgroup_ro(r0, &(0x7f0000000500)='freezer.parent_freezing\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r9, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000540)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@bridge_newvlan={0x24, 0x71, 0x1, 0x0, 0x25dfdbff, {0x7, 0x0, 0x0, r12}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x11}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) connect$packet(r9, &(0x7f0000000640)={0x11, 0x8, r12, 0x1, 0x6}, 0x14) 1m51.913475201s ago: executing program 34 (id=10828): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000500)={0x10003, 0x0, 0xd7c4, 0xfffffff9}, 0x10) write(r3, &(0x7f0000000680)="240000001e005f0214fffffffffffff8070000001d0000050000000008000900ecffffff", 0x24) (async) write(r3, &(0x7f0000000680)="240000001e005f0214fffffffffffff8070000001d0000050000000008000900ecffffff", 0x24) accept(r0, 0x0, &(0x7f00000001c0)) (async) r4 = accept(r0, 0x0, &(0x7f00000001c0)) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f00000006c0)={'bridge0\x00', &(0x7f0000000800)=@ethtool_wolinfo={0x5, 0x0, 0x2, "0a08cf30c194"}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x80, 0x8, 0x2, 0x4, {{0x47, 0x4, 0x1, 0x5, 0x11c, 0x67, 0x0, 0xbe, 0x29, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0xc, 0x43, 0x3, 0x7, [{@multicast1, 0x8000}]}, @ssrr={0x89, 0x1f, 0x3c, [@loopback, @rand_addr=0x64010102, @broadcast, @empty, @multicast1, @empty, @dev={0xac, 0x14, 0x14, 0xf}]}, @end, @timestamp_prespec={0x44, 0x4c, 0xd2, 0x3, 0x0, [{@broadcast, 0x2}, {@local, 0x700}, {@remote, 0x3}, {@remote, 0x5}, {@empty, 0xb}, {@private=0xa010101, 0x8}, {@rand_addr=0x64010100, 0xd}, {@rand_addr=0x64010101, 0x8}, {@empty, 0x7}]}, @generic={0xc7, 0x5, "a9337b"}, @timestamp_prespec={0x44, 0x3c, 0x6, 0x3, 0x6, [{@broadcast, 0xa9a}, {@rand_addr=0x64010102, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x40}, {@rand_addr=0x64010102, 0x800}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x3}, {@private=0xa010101}, {@multicast1, 0x2}]}, @generic={0x0, 0x2}, @ssrr={0x89, 0x7, 0xea, [@empty]}, @timestamp_addr={0x44, 0x2c, 0x23, 0x1, 0x2, [{@multicast2, 0x3}, {@remote, 0x8}, {@remote, 0x8}, {@rand_addr=0x64010101, 0x8}, {@broadcast, 0x3}]}, @lsrr={0x83, 0x17, 0xfc, [@multicast2, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @rand_addr=0x64010102]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x80, 0x8, 0x2, 0x4, {{0x47, 0x4, 0x1, 0x5, 0x11c, 0x67, 0x0, 0xbe, 0x29, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0xc, 0x43, 0x3, 0x7, [{@multicast1, 0x8000}]}, @ssrr={0x89, 0x1f, 0x3c, [@loopback, @rand_addr=0x64010102, @broadcast, @empty, @multicast1, @empty, @dev={0xac, 0x14, 0x14, 0xf}]}, @end, @timestamp_prespec={0x44, 0x4c, 0xd2, 0x3, 0x0, [{@broadcast, 0x2}, {@local, 0x700}, {@remote, 0x3}, {@remote, 0x5}, {@empty, 0xb}, {@private=0xa010101, 0x8}, {@rand_addr=0x64010100, 0xd}, {@rand_addr=0x64010101, 0x8}, {@empty, 0x7}]}, @generic={0xc7, 0x5, "a9337b"}, @timestamp_prespec={0x44, 0x3c, 0x6, 0x3, 0x6, [{@broadcast, 0xa9a}, {@rand_addr=0x64010102, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x40}, {@rand_addr=0x64010102, 0x800}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x3}, {@private=0xa010101}, {@multicast1, 0x2}]}, @generic={0x0, 0x2}, @ssrr={0x89, 0x7, 0xea, [@empty]}, @timestamp_addr={0x44, 0x2c, 0x23, 0x1, 0x2, [{@multicast2, 0x3}, {@remote, 0x8}, {@remote, 0x8}, {@rand_addr=0x64010101, 0x8}, {@broadcast, 0x3}]}, @lsrr={0x83, 0x17, 0xfc, [@multicast2, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @rand_addr=0x64010102]}]}}}}}) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@delqdisc={0x78, 0x25, 0x2, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xd, 0xb}, {0x2, 0xfff3}, {0x3, 0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x3c, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x53}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xfff}, @TCA_FQ_QUANTUM={0x8, 0x3, 0xfffffffb}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x80000001}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x1000}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x3}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x8}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_RATE={0x6, 0x5, {0x4, 0x10}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2400c0c0}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@delqdisc={0x78, 0x25, 0x2, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xd, 0xb}, {0x2, 0xfff3}, {0x3, 0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x3c, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x53}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xfff}, @TCA_FQ_QUANTUM={0x8, 0x3, 0xfffffffb}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x80000001}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x1000}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x3}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x8}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_RATE={0x6, 0x5, {0x4, 0x10}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2400c0c0}, 0x0) close(r2) socket(0x10, 0x803, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @random="0100003600"}) r8 = socket(0x400000000010, 0x3, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r8, 0x84, 0x13, &(0x7f0000000000)={0x1, 0x80}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_SUPPORTED(r1, 0x84, 0x81, &(0x7f0000000140)={r9, 0x472}, &(0x7f0000000180)=0x8) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000580)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000580)={'syzkaller0\x00', 0x7101}) ioctl$NILFS_IOCTL_SET_SUINFO(r7, 0x40186e8d, &(0x7f0000000640)={&(0x7f00000005c0)=[{0x642, 0x1, 0x0, {0x1, 0x8, 0x1}}, {0x7, 0x0, 0x0, {0x3c1a, 0x401, 0x2}}, {0x1, 0x0, 0x0, {0x6, 0x3, 0x1}}, {0x0, 0x0, 0x0, {0xfffffffffffffff8, 0x8}}], 0x4, 0x20, 0xf2bb, 0x7}) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000700)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2a, 0x4, {0x0, 0x0, 0x74, r13, {0xeffe068f8514295, 0x6}, {0xafabc05531515610, 0x2}, {0xfff2, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) 1m51.378952266s ago: executing program 2 (id=10835): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}, 0x1, 0x0, 0x0, 0x24000890}, 0x40084) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r3 = accept4(r1, 0x0, 0x0, 0x80000) recvmsg(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/81, 0x51}], 0x1}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, 0x6, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0xc4}, 0x8810) (async) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r4, 0x0, 0xf00, 0x0, &(0x7f0000000040)={0xa, 0x1, 0xfffffffc, @local, 0xe79}, 0x1c) (async) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000dc0), r4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100ffffffff0000400001000000050007000000000008000900000000101400200000000000000000000000ffff0000000008000a000000000014001f0000000000000000000000000000000000060002000000000006001b004e"], 0x6c}, 0x1, 0x620b}, 0x0) 1m45.969230313s ago: executing program 6 (id=10837): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_delroute={0x38, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @remote}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @ILA_ATTR_IDENT_TYPE={0x5, 0x8, 0x20}}]}, 0x38}}, 0x0) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)='>', 0x1}], 0x1}, 0x3) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x84, @rand_addr=0x64010100, 0x4e22, 0x2000003, 'sh\x00', 0x2f, 0x4, 0x76}, 0x2c) (async, rerun: 32) close(0x3) (rerun: 32) 1m42.880176143s ago: executing program 35 (id=10831): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r3) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x40, r4, 0xd09, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x81}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x32}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c054}, 0x2004c030) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000340)={0x4001}, 0xfea3) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0xffffffb9, &(0x7f00000003c0)={&(0x7f0000000400)=@ipv6_getaddr={0x18, 0x16, 0x3c2be10bca706f15, 0x0, 0xffffffff, {0xa, 0x0, 0x10}}, 0x18}, 0x1, 0x0, 0x0, 0x44000}, 0x0) setsockopt$sock_int(r2, 0x1, 0xa, &(0x7f00000002c0)=0x4, 0x4) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000300)) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0xfff, 0x7f, 0x1, 0x5}, 0xffffff80, 0x1, 0x15af3, 0x6, 0x8, 0x14, 0x2, 0xe, 0x6, 0x331799a3, {0xf, 0xe9, 0x40, 0x3, 0x2, 0x5}}}}]}, 0x78}}, 0x4c050) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff3, 0xc}, {0x0, 0xfff3}, {0x9, 0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xb, 0x10}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041006}, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="65844100c5dc2f"], 0xdd12}], 0x1, 0x0, 0x0, 0x10}, 0x200488d5) 1m38.594447712s ago: executing program 2 (id=10840): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xa, 0x2, 0x4, 0x8}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x1c1341, 0x0) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000880)={0x0, @generic={0x1d, "e23ba64b5aa0a605cd04ef02eb93"}, @qipcrtr={0x2a, 0xffffffffffffffff}, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x6, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000840)='geneve1\x00', 0x40, 0x400, 0x3ff}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000440)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x14, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r0}, &(0x7f0000000700), &(0x7f0000000740)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000800)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0xfdfffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f0000000b00)=ANY=[], &(0x7f0000000b40)='syzkaller\x00'}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000b80)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r4, 0x5, 0xb68, 0x4000, &(0x7f0000000c40)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$packet(0x11, 0x3, 0x300) socket$pppoe(0x18, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000080)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r5], 0x20}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1m36.708169339s ago: executing program 6 (id=10841): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x18, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="18080000d0ff0000000000003e00000018000000", @ANYRES32, @ANYBLOB="00000000000000006600000000000000180200000020782500000000002020207b1bf8ff00000000bfa100000000000007010000f8ffffffb70200000800ff80b50af9ff00000000850000000600000095"], &(0x7f00000014c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r2 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x141800) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f00000000c0)={'ip6tnl0\x00', {0x2, 0x0, @local}}) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) getsockname$packet(r5, &(0x7f0000001500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001540)=0x14) sendmsg$nl_route(r5, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001600)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x24008810}, 0x8010) getsockopt$WPAN_WANTACK(r5, 0x0, 0x0, &(0x7f0000001640), &(0x7f0000001680)=0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'bridge_slave_1\x00', 0x0}) socket$igmp6(0xa, 0x3, 0x2) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newlink={0x44, 0x10, 0x1, 0xf0bd27, 0x25dfd402, {0x0, 0x0, 0x0, r7, 0x64e98, 0x16ac1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BACKUP_PORT={0x8, 0x22, r7}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYRES64=0x0, @ANYRESHEX=r1, @ANYBLOB="4400000010000104000002000000000000000000", @ANYBLOB="40c883d2ada28e4756cd265217bc39efe41ec5fa5452f84e44458ac7625f1924ac2b46ebd06c6f1a2a9011749fc3380a764197e75db5bc6bb12f8aac49cdcb356ec12d8410fef961d7d6432c6b261d01db781afb048c36e8a912d3d6492c57c2191432bf11c3b071ab5cc6ffbd076014a18fbf9ce6b57b81bae97f1e1f8cab0a026d9fd00baa527209fea822136ecdddfb0762593d82e277f199a916fc10dd3f406910188a1dc56f1e53d0dd5529c9242a863c6fd0b2133fde2694809a2de39a96d66fe505d073e07f8ff0d7aa77a8548530e5b0dcbd631f9860535dfaddd4cb307a4d08763163172638d231105732973e931de8a602fdea23fbdc93000cd5a215c0aac432c4cce54e705a566a3a900ba06d76ff6578b8baefbadd781d10c8e9a4e787bf1bb7fab03b8199a688eb95e7c1a633acde2e822e1eaad630af8af5e1e6dee93aac8967163463a5979ab8f0b27533738c6ffa35856ab1fd0486030731ab46c11848c2b71cda36539f01e2e7178f25007535458a97c85024fa945babbe0d26deb7924b9da76c18e50aa6751f1c6e0fdc85cc74dbca093a9698ad14e26ca6a7d6e8be173eabcf070708dac3bf6e519496d23aae4afdb13c3afd01e07328958038ee92186c8fb7718d84b708e3dd40909efca7d8fe9853ee9703048e0a283641b76aa732e7d4d0e2436972667c2c264d1d656213f6f814fff6b9c104def6efadb53bc43b23af3c52ca899a5cfdfa904233147192acfa932a36590e046ad439f25cd63f4302d5c6e146f06182f07dfe9f676b281b2a5c360b503a4fc6207890e9ee29992dd45a3026698f780e303b3142f29ff450ec651f7cd83bef17d1307bf905212ffd418b53910415c1bff3ec507141156a4011fc6165feb6ff1a079343d611d0e2a55fb527d9c5c3bdcc6621ffa50e3c6c4eb74fd7f6c52fd772ab8ede9c93ec84c5d5b2a14d6702beca15bee4c1a3da75f4ffe8bea3dd50353186d8838354a796ea20f65a783bf70561f514b8541c1ea40d992679378fac106212e64be060aaa7fa4a0896fc11ab71d26b062f989af5ed8aa9d86e7af8407a4fa6bd963665a8822782144ce5dd4ce28b29087c2b1c86edd87b01d6d0d264b67ef693d0ff2839e4e4722b898402e1d1b758ef041ea33894a2629a361a3f41ce364e20f74ca8de9c8b335095083d6092825d5e0caed2952c9617f7560cba6a9c4db146fbdc062564c1353bd679d343757f22719ef1f86a9ae7b83146300921268aa897d3d7305dcd65f14d7efa0b86a19402c8397782efff64d37e60fe0a744eb2ae4cffe9dfbbc5d465ebb37d8e60e7c72521c1522903e7b94a40639e52ed05c6fcc104a6d9eb9c2c10da1e1142df331c4915fd83f98aed2181e9467f72d053b020023b960cae6942b5053f5f413622307f81f527652c1f82c554422d94bfbf533f12ad0581590c2b3679e07582d30339bef7522c09a056cd25345186e2df2d56b3be88b41aae9e5a68327364558a6d995c37246ffcd011e27dc61a2087066fdbe08e31bc894b6b7c77327c7983b1a74b62746e15b20af2938447508cc2fe6470784c0bc2ea96d04f46544a209654c7994741882ff077b810bbc9660cd3e147df545b64fac838ae9cbd7e128d216ba41607a7373b425978f7c12758ce355b4cc10d92b228a01c1dd3be04a5c98e82837eeedf8ef289d30bb23a85688bb87d77b9f8a01ac774580128459ed267b413adf8b24c3246bc432bae29723f1cc742fa3baf8dec0e54db2f4dd6a9c20b422f9cb9d11fa749d278fd20918dfc048e18a9cebe5e1d8814e9f2f53466a1aa2f5389d51224d450e0f64d0c13f51cbec6b7058911427ba7d49f8a77c480ad8d7de841226a6b13a5d3bfbc3880e169031166ed7f80a7178419a3cb5cea14c32ccbf8d9dbe10f27cbb176d61455e5ac75bafd014e09f9abd4bd343274a7d02d2ed8a48a8e79f4782748d76f4b511d251d854dd3be2c1841b168d55c2b3c454d68eda499a0cf597a08325cda1036f39851cef0a1f236fff4df19dfe4ac485630962ec7ddaa1f1a4184bdcdb335ca14115f342ad034c4eabc9518ed9541ed10ff3bcf2dfc992b969113320e40b9598ccfdb89da9e5690862363a389a81cfba76d4ba369d7fc03e9046efe534003cb37a7cd8091e24b05d0098704984d620c440a8a6576e0ceef80b0468cfba33d359804f3973519859616caad3b7c235ee631065f9efad34f9f0fc57431c1c10c600bff1f5dd0986125a6021f533d01723dc040aa3934966c0175ce7db1392590b02d4157eb8b4c18ed8f15a825bea20d8e365b2e48bd36bf455c25b474140257a9f9560f0d06fb3d4c02a992d6e732d77ec4827aa7f3e72ff551873d817ab8daf25665d46f5d80792f001504549ed95243b36d1b03763c0467a514a6ea0b7269f498e2f295933756f72bdc2b1b8e1df9891535a7b4fbc318764d19ad0cd0fe500a531dd21c160d51f58f90594be0abfd376c1af0472df0a5fec7c166bc1c816a445475a3a7f02ae48fb611a58a1b26fe07700036500410d02b94c3925a104b87e874d0c307dc2fd96e0a47259f8d24e9db0700b807452ecbd2c95d86f1672b4cd1264ecea1983583dc8b1d1950600e97b62316424ffa8a6981cdefd598505d93ff39c5cec3e20254ca1efee367a32e5af652d771aa74605e3cc1dff59f73cbb602aaf421e64d474802c003f954ff8bc6d75686d4f74f2866a860a77d52931fb3b8e7c893e1947267d60dd6a1e04cd6a3eeb58331cd4838628956ccc77b2ab32e38f028271904c446fd1279d1db1c801a3a21c6bb971f21b04a6f5325028ad96e17ae32bbf487b9f030b7fe828269fc3a9558bc0a77b6b7ddab6f98c3b626f1e2f1d0bee9e1e81f27a5f2a7db46a1c8c9c074eaa46a859a4affd03ace723d50f11318d035602038d4bae729dc80f0513897e7af9ff104765a70001d7a33df467d76aae38992a59bbf52f62d00109a8426f33f71f1377894386ce0fa1c6d9063d9cf5ef097d33145903a8a54f46de6b369d80ac42a44a3b1f2d57b658ade0be164f3fb456fa6c3faf775066f1b72c2d1b1e8090a921bb99ce757c73534bb150becd1d676e3a590b04e0caa80faba53055d73f99201c7770174dca48b87da06dc87d02f0c6ebd196126f29efff1861d374165931f71e54fc40aa222c7ede5dd732a139031d4c1925c6eb2f4022a0c356258339929d9aedbb6af41b8f47ffc3a43ee91fb2d2c68f82fe6ddc174ec62907834955eecc15f1ded86ccb99891e7b80abc61a3667f38a2db9176dbfb565c8f37da0649bf84302338ae22d49436ac7e405c8cb4b9ccb6fe566bea0059695adedc7eea909b2ab6834b9987145ce91c9104c87a69e219e1625d24ef7e858537948f6a4acf94419be3027024fd1daf05b86d9bdea9cdcb06747c1ffd1ca0041702f5bc6bf4b44db5d58fccc1d28d60829d0ea3d836d8ac2b513d787374e18694c9adc10fe819c5dd2ff9321bfb80194b17e7049738c855e4cacccc92da88f22b0960d3d9a8a0b7e31d789de8d1949f6551d33aec59b505be2c97c6cba51c1cec71a44b8199652923eaf805cf5a7154bd2ce81a3ffb2c0a6e21428cbd175ad4ccd3dd31a3142dfa75a15bb93caa88ef1715bfb025be8505c52463ea99458b74ad68d244dd285efe9e5a532601c901fee036fe4e893905b40cea146965205717a0a8b9d6b549bf31826ddc01db83c4108f4cc0cd4ea87a7c13d6aaf08c2eefa28ae55ac53c640d4c9e7cac5cf4294df8c38885a3831b05f462d4b8bd584dd99d9f57f104838d48bed07dcfec1f1a96d4e35e806b674f7e47f35094e2c2eed39dfb07c302e249280f24bf8aa9596d904e16f8a37c1f0080ecf723bf33bd6ff0edffff81c00f5b630df995bca148f86466fe0c6d54ce1f18477bdd14eda458ed06613703bb43f6ecd0be5b14ee8e01dad732f85d7522f77d0ab9d43804b050552ba8c2895b14d2fdf4826f951f31489f35daa85bae61b082ea14d6c84d573c9c0f0c4e562444442f6b548a2f060d603371522192e6d50efd2090fac9051a03f30d33438e31e8b212b390c29955215aa05451e3974bd2e2752829b253bac24f6f26a00881562c3a6ada9a005d76aa25bfd75b95a2bc68a3e446ef790d2238ef80aa88fb628cec43a035189b83da91ed84861ce0b37db93c59ffbd26e9b9ed7984f1b3bfdc6bfc027a35ca3eea1bf61fd7f02f00cf3e6bc563097282e37928dff3c8e2a662ee4cb3421cd0f993e431da1ef5a66c9b6069dc266a8176b5b9bee8fc7c69f3c9d948826dcd1c0aaad5c032b96fa470dadbf21ba21721fbd487636f876fa1e0b96d5e3bbd5b3ab20653003069a04390c72094dc28e2be4f3b28f9b93bcb3e3b7b3556026766088c74b01eecdb0160e088437ef949ee97ec50faac297c1fe2f66c13803b37200a8900985f8c58b0391b5dce2d15bd81d5d34f566d7b2e6c272e153a5f00dceac9856b90644b3e863c5fb9a614b23f2ffefeeaf6bb35996d3f2eda7fe4c7a182a0429f0fec39ee61e0874aebc6f1f7ac1f2c04e9fbe904242fd6b668c7796edc6d9927c53db289143e748d2a14767f8d0b742f764ae6c262d589c50ca3791201851edfd8a375d8b6516849e50952a8a4f088b6ec320b78bd4d97711eedb29bf7e75063d5d455bddfdaea5f3028c6c9601eb1ed6dc393d0b4766872bd251a2bc7d7aca52df4f4be9e67455cd96ede27b47ef9e6c3c2f11d69a0c550d67bf7e921787bf083205e2039d8ab8f4a546f49e2441d7a18080cf33c38639ccc396aca0849acdbdefb8601ae17406c8e0bfd45f0f5428eb0e9b5b80073c37772a12a0940f06bf2809e0cb0091583dd76ebe2ebf0c191d2c3cc005a4bd59383fdea431d94ba2d05f856efa6eb8ed214b08ee1e8327d6948ba12e04721a46fb8329ed8a5876fb98126439c3d5608c621894a3ca1988ec153ea15acd92a1cbfcab9657e501a8e68ead99b0abd1df777462eaf87bf017a934117c8231f60b1b3f53528aa87c03f746348d9b691959d00152b5b47b1581dd00a514e5847709fb7565b32a2fb939e08cce38d9b83ffb446a7de8288249d4abb25cd0de7bda144c933a98db0fbf8ae12dd179ee1e7c4d53c26b9b3a2616b972d34ae6c1cdb8a2da184d8ccc23c66edeef33a4ac17b97ad133e8ee7dc82ec041e333f4e83f5a38ed1aecbcac8587fa3fb968fe05256fc903be30b4ec90cc88f2c94ec3ad9d8ef4591b833785248f37d3542f1afa702ba2b5ed601f63432b5810a28b121d30e89e2fbe695ebc602f2bc7d02a8476a91813d023ee6475b5a7b5abe0fefa2720965851d01818927276a1dfa51b83554331589d666df6ca4ae4f19795ea60f3477fc4cd2f72bf6510a5f431aa22e51b68400e7fb9fbb272056a7ec435d5f32dedac16c5469dda4ca231ff244964703d86c85e52de26ad1b2300708ce7e16c94ffd598979524a579489a9bc2993c843e59e0e098eaf3dfb3654ec8065fe0f22169e345c475b136b4e9949bcfb0309042afcb6758cd1ad9f96225a17da5cb7cd1a76f20020d064a913a35a98aa4c28330d215de8ebab1caaf17cd67989bf5880fdbbf6c2e0125f0338ea84437fb0b44a5b13b09ad5db0da2c2348c10f74d4afda3e43a1ec82a106cc13c7b615ce92438238126ca4f89f19230b7f7354a2deb5d006b0444b474df10519c4ae64d3faefb537c1ee86294ec647418e8fcefbe1db98f9f08a90dd351238939687d1e71b595b62006cf6182860dde8488c98cd5b50e98", @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRESOCT=r1], 0x44}}, 0x4054) 1m20.74676746s ago: executing program 36 (id=10840): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xa, 0x2, 0x4, 0x8}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x1c1341, 0x0) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000880)={0x0, @generic={0x1d, "e23ba64b5aa0a605cd04ef02eb93"}, @qipcrtr={0x2a, 0xffffffffffffffff}, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x6, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000840)='geneve1\x00', 0x40, 0x400, 0x3ff}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000440)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x14, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r0}, &(0x7f0000000700), &(0x7f0000000740)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000800)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0xfdfffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f0000000b00)=ANY=[], &(0x7f0000000b40)='syzkaller\x00'}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000b80)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r4, 0x5, 0xb68, 0x4000, &(0x7f0000000c40)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$packet(0x11, 0x3, 0x300) socket$pppoe(0x18, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000080)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r5], 0x20}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1m20.077298588s ago: executing program 6 (id=10844): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000780)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYSTEM={0x8, 0x1a, @remote}]}}}]}, 0x3c}}, 0x20004804) 1m15.597457814s ago: executing program 0 (id=10845): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1d, 0x2, 0x6) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6a, 0xd, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_deladdr={0x20, 0x15, 0x1, 0x70bd2a, 0x25dfdbff, {0x2, 0x18, 0x1, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x804) 1m1.853223311s ago: executing program 37 (id=10844): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000780)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYSTEM={0x8, 0x1a, @remote}]}}}]}, 0x3c}}, 0x20004804) 1m1.313769045s ago: executing program 0 (id=10847): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="953a04"], 0x24}}, 0x0) recvmmsg$unix(r3, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/249, 0xf9}, {&(0x7f00000003c0)=""/4098, 0x1002}, {&(0x7f0000001400)=""/13, 0xd}, {&(0x7f0000001440)=""/97, 0x61}, {&(0x7f00000014c0)=""/104, 0x68}, {&(0x7f0000001540)=""/25, 0x19}, {&(0x7f0000001580)=""/130, 0x82}, {&(0x7f0000001640)=""/133, 0x85}], 0x8}}], 0x1, 0x2080, 0x0) write(r3, &(0x7f0000001700)="1400000052004f7fb3e4bf80a000080000000000", 0x14) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xffffffffffffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 52.342595286s ago: executing program 0 (id=10848): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)={0x1298, 0x52, 0x1, 0x0, 0x0, {0x2, 0x3}, [@nested={0x1284, 0xc3, 0x0, 0x1, [@typed={0x6, 0x16a, 0x0, 0x0, @str='\x89\x00'}, @typed={0x8, 0xab, 0x0, 0x0, @ipv4=@multicast1}, @nested={0x108, 0x155, 0x0, 0x1, [@typed={0x4, 0x3a}, @generic="73561676f114de985849d122352b5cc60bf514b9421023c433fb251ebfbe91403ecff1c82320e434f09eeb56d9e1ad98f0002dba8e290b3689ef25fedf16", @generic="a00d61fdd3f7b9762b97e0942f8a5fbe92fd01f1e21d58623da91ed48a588db815835d4220cbeb896d8463ee11d4d411f665463c388b74f721c8fdd1c44dcb5607a2865f038ae438261be8127059f9a85afababf97e933449b1458e8daed1ff199967d6f79344567086fb14259d32941de7a4fb116c4166d99ddd2f94df5364fc4a4030bc755c17f626e1aef83e56dbbd8966ab116507a0a105a85726b92d48b21b469e1dca71fe2b796ddf1d0bc55daea03d2146cbf102bd0d8adf0aa72", @nested={0x4, 0xc0}]}, @nested={0xc, 0x106, 0x0, 0x1, [@nested={0x4, 0x10d}, @nested={0x4, 0x133}]}, @typed={0xd5, 0x12a, 0x0, 0x0, @binary="f132e1aba56b0f8cadcb4133fd9d7ed9c8599305933a7937626723cac2f77baa595da3794a51afa7c751e5a827875303880244bd49a18abc9c8c8fb22571e5f15a843d429f19884d61f30c5d37a97f2a4e8a1437716c371f252528f84a68e04b032039f807447d7c81e911d969a6124c46752399f9df9b41b41a7a3c16f7a621b9fab8332be17f41cdb2dae53b76b2b97b267436ed480ed8c2789c47ff6a88060ce71fa39b0e86812950c0ebe56b4de754b1f87de3356e65affd5227465584d76e6e0e25ffed35af69694fd42a86584bbf"}, @typed={0x6d, 0x1, 0x0, 0x0, @binary="b3e49a83aa049884ab91357582e9b4b0d1d568019f144e092d6d281548dfe1320234eec76ad1f25964106b3b73df61eccae241157df5ee1592aafdf800f763737b594890a89cc65578ec8e78dd15dfa090d3f32b80d9a5a617ba9ddb0a27b94a4c87ffad20037cdae2"}, @typed={0xc, 0x127, 0x0, 0x0, @u64=0x1}, @generic="8642e0081a7488f34e7c8af5c0338725cc422256769b01cd2892a33c0f7fea02bb87fe7589ef93f724516c53573778bd5ce2e22f8e3d5ea74400b6903732f9161dc7ebaada442445fb3b1365df64fefb4a8a4fc02d27cf3213f4072fdb230b8083cf9e9183680ae157d05460fe467ac1a07b9becdfde20517ed317768de4b800ebef9dc6e49de095ce9a746f1a3ee998762c2b3347099e9a887ef26769cbe03400052bdce6c2871180e0ddb98edc7f29bb8951e5ec84a55ba1aeae3efa6f0e884b20fcf5b21ac36da060ad1342f69a98fd58877b10fb5c5e7db3ec2bf1f6738cb820a92f67c8a8bd4ca045611408f2f8f35516a3f0ffdde08879c411efff1fa01c4bdb970871f2808232d95f448ec2ab38051ba962ad7a1c2dc7b3ed5ce4fd491c47ed7bb419154b1fd73a6a8df42812890e8b8677ceaddd99af0e09dfe6ea9d2e42d33db4cb7ffdc0cd4d1783449030c09df23934ee7c95b2335b398a085d49642ad552e16620d77790718919ecfc7526951be406a60103c0f212087a798291b8469c54e698124c32fd15e52968c9f4779ea819ec58d4cedddc7337e7b785e802fe33381a66ac39a80eff1bb829b7c69f4ded7f8ddf3f6a47ef468cb6e004c67f3f60c054fbaaa549d65d18a84a44380fa46cbc034e9b68abc0b647f9cfa57102b13d22ffbb00f4e2284421a074df283d89f6113007ddf6c67a0d6d775ce7d42af589046b5ad1cf39ec89304d62df818ce62d1dad8566e19615ddd6584485251eb45f63390a4a4172a5b442653af9dde9ac1be0a634f3baf23791d846981ce15dd5968a3398d129b87b7899973598bda7d41863848fe2a24a73469aa631df1672a1a60caebde2ca123d291b6c122d298c86814ceee234486a1acc810904eeb8fc240ba5d49a9e26552d466940f236df739b752b91453f574ce88e4d18237fe7bc6248835d119ed009f141529be6b2cf7352bf605fea99c02eb03eda3ec3aa3b953edf71e897c1973b9b4f45d231a2a4421a2b409f754c2979604debfc614a3028ad6b515ae4e46903202fd185e2671c9e2ee4842b9d558872d490aeed81a9e02d6965ddd4b7195dd7a3339b4af685a25d7cdb758911b5727ee72b84a05beb2ba289dce03770f30742442820cdf2dd837ea62f6f5f9569c7f55ed0a638d9c7b1fd92db83a94ff13f5a3799a6e039900f367379868a11795aa27c8d6799b7d5b509836c20d4771065d524d28a2968dc181c8e4a09b929da0f92c62a86006a5b497179013666032d5420a5855a76311678c787aa8273817737d5633726502a90652146d82af61143002499ff1191a8533f84ae9c7d72daa75003642acc5bf93016fa48a5a0c780c21051a03a57c73b39d0d1b122e617e99b828a4ea4c9be55c25beade6e12d8b1c17e278e457754c556c1ced1c658a92eb2c145765717880acb6a1ad166ffebd8d7fd9771f048d8a547482d1be8f3bc1422604c1e30e97c4ebd04e2be3d307133b6ff49dcffd4cee494fad00e45e02fd2d99fc8f98b22ef7264e035bcc92f2a5f894bf03a80711a1802043bf3a40c8a8646b8b967a41102c70dbb05c077e4e05be1b2472caddaca7938629c37a01aa63a58a77ab3fb2bcfaf8efbcc7bf28313046b4cb4460890c0f94745f68c5aa86a59bd1f8cb17dccf39213734e5d12de1b45ab2fb34efdce5be9e8373939a95cbad9b48e736b34a64370bec6e02bba4a3a54a5b98d2c8097de8822bd9d7c959383fbc82c2b1d21435cb6f435f4dc56f780b610f0afd0b8e4bcf53436f6600a005718080e66b5db5d9ad3ad12231655246948febcb287c9f3fd3bda3ebcda32c6ea859805aed64c2f0c82e1dd860c8cd08a7eab5dfc9c63031a1ef2ff1f0dfedca5bd5c305f96c7fc361914bca83b5f9fc4133bddbff8ca1104578e020e1940f5cd80e8fb2080e86df2c3f82f6da0d078c4a4e41d5bec03ee08886a6a37e13601f596ce5f9a72b14d35b6a4daeb7818d78b99429beca3d4c81dad330ca2fcea51187dcb60aa85ec406987aa45d8d10f03f75c98185725575d0584a24ae6c7e49def94a04eac40b59785319ef2baa65a7ed4cb3f89b246f65e0e1f88da542a3474741564377fb8b280013ad294379eb2fb96b150e8d2b1789775722fbcbc9f5eca78f7eee554e7f6080f4c5a567dcf8a01119a182da766c76d06ee1232c0bf93c7fe10990220dd5424ed2d52d587617afa46ad96e9a6e82e146b4552b28ea9f3a4ba250035aba0652259dd7addde8e20d78e673c83bea50d1bc18cdae38d6e9309ce77d58154170f531ccfc1a9d475192ccda47d7f6d11c9c113390c264a56938d8ce604313b8cd67f3cc58d4c297411a735ac95173b9a477f32c9b174e8315947a964380b9478c5c33b818d68c86b2b15b1a1c8bb9b2af607596b8ce6387cde9a8a3e155180fb365a25123fa80a5eacc4f9d147e77b591b8010be933b295bc001b92d72b93dad71c50e9d1b555547ad4878df61187e87487379497fc82091471d5454d1dc9a4f7e6b2a88e67d19cf7d7a102427a13451b551f1f7849490272c44dac5288c98dc0c0addc4b4f35d7b0ace1ca3ca272ea17432ad0febef511cf4fef60fdac207c72b8aca5f7a478ee5a0735acb16b005638522178d13703de88e78ef9675a3399a03a8ef6f9ffef9e292fd51cd3387081d0b0d8ef60d7d83063b04b166aa2b55ba40d544f4179332d7271e0c384400cd9f90f19e2fc4ac5a2851b66491dcf5ae03967d98478659af48d11d5be441f8035f89c91bca849c820960f8959a9de93c8498e8cb519bfa8609f5a23e6e5b703e83ea3ee38f7d77894060a15bc730e15a2ca75036b5987fb442324b9afbc85f5c11768f7341a9bd514098c6c544400b9d6bc8b2fb248e589a30953f7aed6d2801f2ac83efcdd3cd45fd6c6d0eb073d3e2e9e93b8390e93f3aeba5000f194fdbd28e3b1b2a669f091e91f07fe380da49dfe121766d7fa3228e03178baf46f8ac73805fa1fcf91b37e6edb0196b48b06a97fc6b946e71e49040c8e9a01308c41d090007099602a15fbe8daa910debcf54655c42f83ae0cc95dffe0082b14850501483ceab1b97a6a53c257be2440c6defa133c1e9ce190da23a7bffdf1ea0159b9bbc1f5809732a14c743519f943065951012b2a599dc7458119b352e9d13190afb0545ac22d777e6511a978289439f97fd1403270471dba6ec9ae7954ef1df6c7ca1acda1ae72980b00d89dbb0d3065cd722d5b11101a972297c564a678e00db369472211e870ac7d579cb1f7d8f3eed23384dd2962f75dd2cf1c2663e5597ee2dfd6afaf916cb139afbec5e2d82d38d88445449b845bbf550cbda695e449959d128549bbfed48c4b4d5216ce0802293fbf1eb892ae27735076467c03e92eae4bc4d4e5d8bf30574b76c0dc4653c945cf9160ae5ce4af5ffdbc95bc734d812fef5d98fef0826d01db1d3fcf7928b0a58183f0e980a96de358bdd99d5ad5abd73522655d977e2894a8bc9f3ef7693434f369e640ec7a87224f75a40a36cc8b86eb31b1f409ca75af75f4d9fe794483f6fc53bdb89a0396aaabd7939a3bacd446d378d06a256c81e36cf3d514c272be78d6f121e4521a040d9c8822ae5bff2cc0abb61ebf07c969d2b7b8975ebe405783c5fcf7d3d73ba8291d1ca1c0a8ed9007d710e77306114a6fe1e8c931e2d6f37f11bd44ea1af92967f55cc468759f5e1309efed4c78a62030c36e9919fad9f5037c49ada4fc04e45e3f549159b594da82485a875db56fdafbc3373d27670b165cdcea689d1ed7532405f5d6c1cddb51767eb3532354c6d541391cb483f480f22f1e01750fc6fac485e21c95fab3d8a377dd877e00a9126cec5223cf7041d5ec45570bebac44b5b73ca13746907f73ab04d4f3ea8fa10690830b1a1eb4e8e3c1c1dcaf6145a21683c39f660d05030e59853f393e6f62047dfa7d0385b7db027bde5a0f877d5bb636b59b1ce1d6fed3dc682498e6a28b84cb4081d1a21bf152588dc1d6d0785cdf0eeafc7b1b813fffe107342a47b9f14eba0d3ac684ca54d2e70fd9274357ba23dbb93990621e1100ddbb393c7af6889d913478cdfa7f65b6052b95273b0e6c834d42c898c34f92ead7a87cc36bcf9d7cb151a5dc069922a983acc5dd37a0c0bccdadbaef5d911cb08a093ca39a083e8b889cd3b4bbb9a9fb142a0ab3f7eeb7a0763a4df6b34a784e168f31935b310eab871fc3442353f2c601e326fc4000aed085bd52a8afc3696084381a2be1b46b750d02b362039cf438b96aa645a2476450668e4fa0d692026a03b12f759e61c80f286ed0df25762dc3a3db093012bf18dff7c6a85690e09d76d9b100cf6d2eeb745aef722a5be9302318cfd21ae9c32d12b70ab635dbe8e88cd933bf83daea42c27e84efd67994d5b3e6ed5ae1e2e1cd97f965e4ce50c0773929ba78b98178c44c0738ad0ea52490cf79b4bc5b10cd009c9b3dbc9b7c467e9276b0d1b3e642c7c666050b6fe7818fea6ead95749742fb3595de6e579cbf86c2a15abdad403db20b2caf9684114078003fabb6819da4f157e37de9982d2159081e1e19f8007084d7e14998e710be246d5192d8df484745e309c66464ade8e8cd484a3dae5a057089dc58e49fc006de7fcd512272b9008bbea912f88a33d17855bf281df968f70e49919fab0424cb13048921b29475655c9c951a8b66c9e94ed13b81628730cbd185bc49fa77c6e2c679cc20bcec6ba1d4a2b0fc26c8cacb5cdb37fdc3bc9a8ad9cda5b214d4eac4ccaa4eb5e310d98d00d6961deaecdb8c932f492626895154f64b8266697a862bc2e30783ca0026dd2efb0192559ed5a4086d37ae5d930dac51dbed2d0f6eb77da8d7104887b23c3311d6b1527016e1177170e192d7ed3e9891b542d094f321f1926dc28a7200f50a519dc4564ff8a2324155cb68d831781632928c6c3be41792e75e23a33554f66d03c22aa9d25c26a3990c15ce5634aed5c40734bf927b0dd0826c7a1e17654f1ab23e2797384230ecc76888fa04bc7af79c145b7cd7b433edcc8c7fb9ec15d810a77473ef965e5ead093993cac50dd57410e3ac585eaecaccbf40b4528da297ef9c67430ef29a3b20534aa1e65caea0d726e1a5646e2a55bf041635de3365f40edb305be562eb76fd3ed06b7e2b8182a19c393576fd10530940370a525639387a24ee123abd0a5b13a2aca40843272f025179ea73bca17805d7112d09c937663abf08d6a352eb479ffa720adfdc52ac7f05906b9128f9abb6db685e3c84badefc208b1b27aef5b3993abc184b340379b95668c66164f52d3301cb0a77c3f90e88b2ddc048f7b82a96255e0f05671b97ce3379c72609b9dda69df7b9bb42ed87aa0b69d5a3072f2a849333b727bb67a30125deedce1b5992b8fcf7044f7b92617c4f8f823514f4e58ce5da9a99a1fc966cf888be1cc6a70c731a5adc6caa0d551b671aaa00ccfc87a389f79af200d7b8086978b037aec29119a0109bd45915bf3c95cff4adfea1fbce14b33e53c79c6cf2486ccff6f987a689f1b7f21e12a0e6df3e2143b0edb709a1da7bc86cd9970519ffd1380ca283ed118d7ecd60f4bed8f3a51276013c877cd4e10f0ee0c653b23ff864cafb784da0144a4937fdf0a5dfbd459bae467e04763ed6148e74c5e60fc537b2f174922521768c324fd25b5ae098b457fb2c004a9925904969581ad1956054900adfa7af25d37d35a696c7935eb9a4e4cc473cead15f278f9a81a87186195f4e3a7a963920cce265be3938b062049efa252db", @typed={0x8, 0x8b, 0x0, 0x0, @ipv4=@remote}]}]}, 0x1298}}, 0x0) 43.468558487s ago: executing program 0 (id=10849): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000080)=0x1, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x1, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x74ebdffb}, 0x50) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="740000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="05220000000000004c00128009000100766c616e000000003c0002800c00027688b01e62be84b000100003800c00010003000000080000001c0904800c00010001040000070000000c000100a60a00000600000008000d0000000000"], 0x74}, 0x1, 0xba01}, 0x40000) 31.020183921s ago: executing program 0 (id=10850): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x1, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x12, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xa}}, 0x0, 0x1, 0x0, 0x0, 0x41000, 0x69, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000040)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'rose0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x40}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bridge0\x00'}) 17.969492328s ago: executing program 0 (id=10851): r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@nl=@proc, &(0x7f0000000080)=0x80) setsockopt$MRT_ASSERT(r0, 0x0, 0xcf, &(0x7f00000000c0)=0x1, 0x4) (async, rerun: 64) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x18}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x24008045) (async, rerun: 64) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r1, 0x0, 0xcf, &(0x7f0000000200)=0x1, 0x4) (async, rerun: 32) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (rerun: 32) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000240)={0x0, 'dvmrp1\x00', {0x4}, 0x7f}) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(r0, 0x84, 0x7a, &(0x7f0000000280)={0x2, 0xffffffffffffffff, 0x100000}, &(0x7f00000002c0)=0xc) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={r3, @in6={{0xa, 0x4e22, 0xf6, @loopback, 0x3}}}, 0x84) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0x1, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@arena={0x21, 0x0, 0x0, 0x3d, 0x60000, r5, 0x4, '\x00', r6, 0xffffffffffffffff, 0x4, 0x0, 0x1}, 0x50) (async) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000540)={r4, 0x0, 0x4d8, "e60069a97b9550fa84214f90f637cc15a5dda54f76ac8692a58c1b3d4f380b05a538d19a7cc4f8f4a1b48bf225138325a94b95a785e057d77a8c0b8c204fba8ccf414a8294f19ff1d71662c28248c2f1791c2bb0ca66deefa75ad4793a867f15e2d5771953c6f536da6450d83b74346399419ba9cb98e248c553cb3e660dd76dbf72be172904665aecdf3b8558d250d96d0bd39938b03e97ff7725b4adbe9cddb01dbdb895415572a8630b6e264153af5c38afd510550afd8e21aa2bc6ed0dd43bcea61a1fd4c3e849767b6f5ef7a8695a3e87a2751897"}) (async) r7 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000640)={r4}) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000680)={r3, 0x80000001}, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f00000006c0), 0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000700)={'syztnl1\x00', r6, 0x4, 0x40, 0x1, 0x6, 0x13, @mcast2, @local, 0x7, 0x7, 0x80, 0xfffffff5}}) (async, rerun: 64) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc6, 0xc6, 0xa, [@ptr={0x5, 0x0, 0x0, 0x2, 0x5}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0x7, 0x2}, {0x2}, {0xe, 0x5}, {0x2, 0x1}, {0xb, 0x2}, {0x2, 0x2}, {0xc, 0x5}]}, @datasec={0x4, 0x2, 0x0, 0xf, 0x2, [{0x4, 0x4, 0x3}, {0x4}], "14e1"}, @typedef={0xa, 0x0, 0x0, 0x8, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4, 0x10000}}, @volatile={0xb, 0x0, 0x0, 0x9, 0x4}, @decl_tag={0xe, 0x0, 0x0, 0x11, 0x4, 0x8}, @decl_tag={0x6, 0x0, 0x0, 0x11, 0x1, 0x5}]}, {0x0, [0x30, 0x30, 0x0, 0x2e, 0x2e, 0x0, 0x2e, 0x5f]}}, &(0x7f00000008c0)=""/156, 0xea, 0x9c, 0x0, 0x9, 0x10000}, 0x28) (rerun: 64) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x44, '\x00', r10, r11, 0x4, 0x3, 0x5}, 0x50) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x61, &(0x7f0000000a40)={'filter\x00', 0x4}, 0x68) (async) preadv(r4, &(0x7f0000000f40)=[{&(0x7f0000000ac0)=""/137, 0x89}, {&(0x7f0000000b80)=""/192, 0xc0}, {&(0x7f0000000c40)=""/242, 0xf2}, {&(0x7f0000000d40)=""/243, 0xf3}, {&(0x7f0000000e40)=""/205, 0xcd}], 0x5, 0x52, 0x8001) (async, rerun: 32) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa, 0x4010, r11, 0x83710000) (async, rerun: 32) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000fc0)={r3, @in6={{0xa, 0x4e22, 0x10001, @mcast1, 0x7ff}}, 0x7, 0x7}, &(0x7f0000001080)=0x90) (async) accept$inet6(r8, &(0x7f00000010c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000001100)=0x1c) (async) sendmsg$nl_route(r8, &(0x7f0000001200)={&(0x7f0000001140), 0xc, &(0x7f00000011c0)={&(0x7f0000001180)=@getnexthop={0x20, 0x6a, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@NHA_GROUPS={0x4}, @NHA_GROUPS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x42010) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001240)={'veth1_to_hsr\x00'}) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000001280)={0x0, 0x1, 0x10, 0x0, @vifc_lcl_addr=@remote, @rand_addr=0x64010102}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000001340)={r12, 0x1, 0x30}, 0xc) 0s ago: executing program 38 (id=10851): r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@nl=@proc, &(0x7f0000000080)=0x80) setsockopt$MRT_ASSERT(r0, 0x0, 0xcf, &(0x7f00000000c0)=0x1, 0x4) (async, rerun: 64) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x18}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x24008045) (async, rerun: 64) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r1, 0x0, 0xcf, &(0x7f0000000200)=0x1, 0x4) (async, rerun: 32) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (rerun: 32) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000240)={0x0, 'dvmrp1\x00', {0x4}, 0x7f}) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(r0, 0x84, 0x7a, &(0x7f0000000280)={0x2, 0xffffffffffffffff, 0x100000}, &(0x7f00000002c0)=0xc) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={r3, @in6={{0xa, 0x4e22, 0xf6, @loopback, 0x3}}}, 0x84) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0x1, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@arena={0x21, 0x0, 0x0, 0x3d, 0x60000, r5, 0x4, '\x00', r6, 0xffffffffffffffff, 0x4, 0x0, 0x1}, 0x50) (async) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000540)={r4, 0x0, 0x4d8, "e60069a97b9550fa84214f90f637cc15a5dda54f76ac8692a58c1b3d4f380b05a538d19a7cc4f8f4a1b48bf225138325a94b95a785e057d77a8c0b8c204fba8ccf414a8294f19ff1d71662c28248c2f1791c2bb0ca66deefa75ad4793a867f15e2d5771953c6f536da6450d83b74346399419ba9cb98e248c553cb3e660dd76dbf72be172904665aecdf3b8558d250d96d0bd39938b03e97ff7725b4adbe9cddb01dbdb895415572a8630b6e264153af5c38afd510550afd8e21aa2bc6ed0dd43bcea61a1fd4c3e849767b6f5ef7a8695a3e87a2751897"}) (async) r7 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000640)={r4}) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000680)={r3, 0x80000001}, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f00000006c0), 0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000700)={'syztnl1\x00', r6, 0x4, 0x40, 0x1, 0x6, 0x13, @mcast2, @local, 0x7, 0x7, 0x80, 0xfffffff5}}) (async, rerun: 64) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc6, 0xc6, 0xa, [@ptr={0x5, 0x0, 0x0, 0x2, 0x5}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0x7, 0x2}, {0x2}, {0xe, 0x5}, {0x2, 0x1}, {0xb, 0x2}, {0x2, 0x2}, {0xc, 0x5}]}, @datasec={0x4, 0x2, 0x0, 0xf, 0x2, [{0x4, 0x4, 0x3}, {0x4}], "14e1"}, @typedef={0xa, 0x0, 0x0, 0x8, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4, 0x10000}}, @volatile={0xb, 0x0, 0x0, 0x9, 0x4}, @decl_tag={0xe, 0x0, 0x0, 0x11, 0x4, 0x8}, @decl_tag={0x6, 0x0, 0x0, 0x11, 0x1, 0x5}]}, {0x0, [0x30, 0x30, 0x0, 0x2e, 0x2e, 0x0, 0x2e, 0x5f]}}, &(0x7f00000008c0)=""/156, 0xea, 0x9c, 0x0, 0x9, 0x10000}, 0x28) (rerun: 64) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x44, '\x00', r10, r11, 0x4, 0x3, 0x5}, 0x50) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x61, &(0x7f0000000a40)={'filter\x00', 0x4}, 0x68) (async) preadv(r4, &(0x7f0000000f40)=[{&(0x7f0000000ac0)=""/137, 0x89}, {&(0x7f0000000b80)=""/192, 0xc0}, {&(0x7f0000000c40)=""/242, 0xf2}, {&(0x7f0000000d40)=""/243, 0xf3}, {&(0x7f0000000e40)=""/205, 0xcd}], 0x5, 0x52, 0x8001) (async, rerun: 32) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa, 0x4010, r11, 0x83710000) (async, rerun: 32) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000fc0)={r3, @in6={{0xa, 0x4e22, 0x10001, @mcast1, 0x7ff}}, 0x7, 0x7}, &(0x7f0000001080)=0x90) (async) accept$inet6(r8, &(0x7f00000010c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000001100)=0x1c) (async) sendmsg$nl_route(r8, &(0x7f0000001200)={&(0x7f0000001140), 0xc, &(0x7f00000011c0)={&(0x7f0000001180)=@getnexthop={0x20, 0x6a, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@NHA_GROUPS={0x4}, @NHA_GROUPS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x42010) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001240)={'veth1_to_hsr\x00'}) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000001280)={0x0, 0x1, 0x10, 0x0, @vifc_lcl_addr=@remote, @rand_addr=0x64010102}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000001340)={r12, 0x1, 0x30}, 0xc) kernel console output (not intermixed with test programs): 9918] netlink: 2 bytes leftover after parsing attributes in process `syz.0.9048'. [ 1398.790073][ T9934] ip_tables: iptables: counters copy to user failed while replacing table [ 1398.796682][ T9936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9048'. [ 1398.796703][ T9936] netlink: 2 bytes leftover after parsing attributes in process `syz.0.9048'. [ 1398.909886][ T9944] lo: entered promiscuous mode [ 1398.910085][ T9944] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1398.925578][ T9944] sctp: [Deprecated]: syz.2.9053 (pid 9944) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1398.925578][ T9944] Use struct sctp_sack_info instead [ 1399.043924][ T9953] Bluetooth: hci0: unsupported parameter 5135 [ 1399.043950][ T9953] Bluetooth: hci0: unsupported parameter 8192 [ 1399.043962][ T9953] Bluetooth: hci0: unsupported parameter 5135 [ 1399.043973][ T9953] Bluetooth: hci0: unsupported parameter 8192 [ 1399.129698][ T9955] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9055'. [ 1399.152559][ T9955] netlink: 'syz.2.9055': attribute type 12 has an invalid length. [ 1399.152581][ T9955] netlink: 'syz.2.9055': attribute type 29 has an invalid length. [ 1399.152600][ T9955] netlink: 148 bytes leftover after parsing attributes in process `syz.2.9055'. [ 1399.152632][ T9955] netlink: 59 bytes leftover after parsing attributes in process `syz.2.9055'. [ 1399.311405][T29602] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1399.314597][T29602] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1399.321785][T29602] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1399.337897][T29602] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1399.346959][T29602] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1399.397961][T22864] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1399.399483][T22864] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1399.399849][T22864] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1399.404941][T22864] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1399.405554][T22864] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1399.766599][ T9979] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9062'. [ 1399.990667][ T9989] mac80211_hwsim hwsim60 syzkaller1: left promiscuous mode [ 1399.990723][ T9989] mac80211_hwsim hwsim60 syzkaller1: left allmulticast mode [ 1400.081096][ T9991] SET target dimension over the limit! [ 1400.683657][ T9961] virt_wifi0 speed is unknown, defaulting to 1000 [ 1400.686881][ T9961] lo speed is unknown, defaulting to 1000 [ 1400.690005][ T9961] wlan1 speed is unknown, defaulting to 1000 [ 1401.076660][T10061] bond0: entered allmulticast mode [ 1401.296554][T10066] tipc: Invalid UDP bearer configuration [ 1401.296606][T10066] tipc: Enabling of bearer rejected, failed to enable media [ 1401.483343][T29602] Bluetooth: hci5: command tx timeout [ 1401.594533][ T9961] bridge0: port 1(bridge_slave_0) entered blocking state [ 1401.594692][ T9961] bridge0: port 1(bridge_slave_0) entered disabled state [ 1401.594822][ T9961] bridge_slave_0: entered allmulticast mode [ 1401.596584][ T9961] bridge_slave_0: entered promiscuous mode [ 1401.600030][ T9961] bridge0: port 2(bridge_slave_1) entered blocking state [ 1401.600245][ T9961] bridge0: port 2(bridge_slave_1) entered disabled state [ 1401.600362][ T9961] bridge_slave_1: entered allmulticast mode [ 1401.602447][ T9961] bridge_slave_1: entered promiscuous mode [ 1401.638693][ T9961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1401.650722][ T9961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1401.691593][ T9961] team0: Port device team_slave_0 added [ 1401.696711][ T9961] team0: Port device team_slave_1 added [ 1401.748967][ T9961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1401.748986][ T9961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1401.749012][ T9961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1401.756694][ T9961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1401.756710][ T9961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1401.756736][ T9961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1401.857831][ T9961] hsr_slave_0: entered promiscuous mode [ 1401.859112][ T9961] hsr_slave_1: entered promiscuous mode [ 1401.861087][ T9961] debugfs: 'hsr0' already exists in 'hsr' [ 1401.861106][ T9961] Cannot create hsr debugfs directory [ 1401.905887][T10102] IPVS: ip_vs_add_dest(): server weight less than zero [ 1402.180530][ T9961] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1402.180567][ T9961] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1402.180593][ T9961] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1402.378263][ T9961] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1402.378301][ T9961] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1402.378327][ T9961] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1402.455878][ T9969] block nbd64: NBD_DISCONNECT [ 1402.654983][ T9963] udevd[9963]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1402.681893][ T9961] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1402.681928][ T9961] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1402.681953][ T9961] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1402.758014][T10137] tunl0: entered promiscuous mode [ 1402.788053][T10137] gre0: entered promiscuous mode [ 1402.888344][T10137] gretap0: entered promiscuous mode [ 1402.913360][T10137] erspan0: entered promiscuous mode [ 1402.939854][T10137] ip_vti0: entered promiscuous mode [ 1403.195724][T10153] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1403.234448][T10156] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1403.527292][T10172] virt_wifi0: mtu less than device minimum [ 1403.562673][T29602] Bluetooth: hci5: command tx timeout [ 1403.691588][T10180] __nla_validate_parse: 11 callbacks suppressed [ 1403.691607][T10180] netlink: 60 bytes leftover after parsing attributes in process `syz.5.9111'. [ 1403.825068][ T9961] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1403.844748][ T9961] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1403.855387][ T9961] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1403.874051][ T9961] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1403.877223][ T9961] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1403.898047][ T9961] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1403.906443][ T9961] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1403.927656][T10188] netlink: 'syz.1.9110': attribute type 10 has an invalid length. [ 1403.949975][ T9961] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1403.979736][T10188] team0: Port device dummy0 added [ 1404.005619][ T5635] hid-generic 0005:15C2:8001.0004: item fetching failed at offset 0/1 [ 1404.006306][ T5635] hid-generic 0005:15C2:8001.0004: probe with driver hid-generic failed with error -22 [ 1404.020082][T10201] xt_limit: Overflow, try lower: 536871034/0 [ 1404.023469][T10200] pim6reg: entered allmulticast mode [ 1404.260971][T10215] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9116'. [ 1404.260993][T10215] netlink: 80 bytes leftover after parsing attributes in process `syz.5.9116'. [ 1404.261008][T10215] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9116'. [ 1404.315887][ T9961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1404.317629][T10215] syzkaller0: entered promiscuous mode [ 1404.317648][T10215] syzkaller0: entered allmulticast mode [ 1404.377780][ T9961] 8021q: adding VLAN 0 to HW filter on device team0 [ 1404.393915][ T3366] bridge0: port 1(bridge_slave_0) entered blocking state [ 1404.394025][ T3366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1404.419568][T15928] bridge0: port 2(bridge_slave_1) entered blocking state [ 1404.419671][T15928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1404.865191][T10236] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9120'. [ 1404.867182][T10236] hsr_slave_0: left promiscuous mode [ 1404.868856][T10236] hsr_slave_1: left promiscuous mode [ 1405.355519][T10256] bridge0: port 2(bridge_slave_1) entered disabled state [ 1405.356184][T10256] bridge0: port 1(bridge_slave_0) entered disabled state [ 1405.381609][T10256] bridge0: port 2(bridge_slave_1) entered blocking state [ 1405.381742][T10256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1405.383138][T10256] bridge0: port 1(bridge_slave_0) entered blocking state [ 1405.383275][T10256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1405.419798][T10256] bridge0: entered promiscuous mode [ 1405.419843][T10256] bridge0: entered allmulticast mode [ 1405.517949][ T9961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1405.590276][ T9961] veth0_vlan: entered promiscuous mode [ 1405.607636][ T9961] veth1_vlan: entered promiscuous mode [ 1405.642941][T29602] Bluetooth: hci5: command tx timeout [ 1405.668743][ T9961] veth0_macvtap: entered promiscuous mode [ 1405.683508][ T9961] veth1_macvtap: entered promiscuous mode [ 1405.789355][ T9961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1405.806890][ T9961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1405.949252][ T8007] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1405.994976][ T8006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1405.995001][T15928] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1405.995133][ T8006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1406.034213][T15928] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1406.034346][T15928] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1406.078653][ T4559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1406.078714][ T4559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1406.118047][T10273] netlink: 112 bytes leftover after parsing attributes in process `syz.1.9131'. [ 1406.334842][T10284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9056'. [ 1406.956696][T22864] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1406.964073][T22864] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1406.972765][T22864] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1406.988858][T22864] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1406.993395][T22864] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1407.568838][T10337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9145'. [ 1407.608554][T10305] netlink: 14 bytes leftover after parsing attributes in process `syz.2.9138'. [ 1407.684690][T10331] netlink: 14 bytes leftover after parsing attributes in process `syz.2.9138'. [ 1407.722204][T29602] Bluetooth: hci5: command tx timeout [ 1407.820349][T10305] team0: Port device team_slave_1 removed [ 1408.139300][T10316] virt_wifi0 speed is unknown, defaulting to 1000 [ 1408.148250][T10316] lo speed is unknown, defaulting to 1000 [ 1408.157964][T10316] wlan1 speed is unknown, defaulting to 1000 [ 1409.088788][T29602] Bluetooth: hci3: command tx timeout [ 1409.182905][T10438] __nla_validate_parse: 3 callbacks suppressed [ 1409.182924][T10438] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9168'. [ 1409.265229][T10316] bridge0: port 1(bridge_slave_0) entered blocking state [ 1409.265399][T10316] bridge0: port 1(bridge_slave_0) entered disabled state [ 1409.265772][T10316] bridge_slave_0: entered allmulticast mode [ 1409.267457][T10316] bridge_slave_0: entered promiscuous mode [ 1409.308889][T10316] bridge0: port 2(bridge_slave_1) entered blocking state [ 1409.308959][T10316] bridge0: port 2(bridge_slave_1) entered disabled state [ 1409.309067][T10316] bridge_slave_1: entered allmulticast mode [ 1409.317818][T10316] bridge_slave_1: entered promiscuous mode [ 1409.470063][T10316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1409.471918][T10450] lo: entered allmulticast mode [ 1409.500520][T10316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1409.552782][T10452] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9172'. [ 1409.592233][T10316] team0: Port device team_slave_0 added [ 1409.593234][T10449] lo: left allmulticast mode [ 1409.596982][T10316] team0: Port device team_slave_1 added [ 1409.653947][T10316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1409.653965][T10316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1409.653987][T10316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1409.656079][T10316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1409.656093][T10316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1409.656118][T10316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1409.887826][T10316] hsr_slave_0: entered promiscuous mode [ 1409.893700][T10316] hsr_slave_1: entered promiscuous mode [ 1409.894401][T10316] debugfs: 'hsr0' already exists in 'hsr' [ 1409.894416][T10316] Cannot create hsr debugfs directory [ 1410.156900][T10471] syzkaller0: left promiscuous mode [ 1410.156925][T10471] syzkaller0: left allmulticast mode [ 1410.458790][T10478] geneve2: entered promiscuous mode [ 1410.458817][T10478] geneve2: entered allmulticast mode [ 1410.599054][T10316] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1410.599078][T10316] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1410.652329][ T8007] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 1410.652389][ T8007] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 1410.652422][ T8007] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 1410.652454][ T8007] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 1410.825461][T10502] netlink: 68 bytes leftover after parsing attributes in process `syz.6.9185'. [ 1410.884062][T10316] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1410.884098][T10316] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.075602][T10316] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1411.075636][T10316] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.165495][T29602] Bluetooth: hci3: command tx timeout [ 1411.263985][T10514] bond4: option packets_per_slave: invalid value (18446744073709551615) [ 1411.264011][T10514] bond4: option packets_per_slave: allowed values 0 - 65535 [ 1411.271092][T10514] bond4 (unregistering): Released all slaves [ 1411.353569][T10515] bond4: option packets_per_slave: invalid value (18446744073709551615) [ 1411.353595][T10515] bond4: option packets_per_slave: allowed values 0 - 65535 [ 1411.355976][T10515] bond4 (unregistering): Released all slaves [ 1411.414543][T10516] : renamed from bond_slave_1 [ 1411.470751][T10316] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1411.470787][T10316] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.694691][T10542] netlink: 'syz.1.9196': attribute type 1 has an invalid length. [ 1411.829538][T10316] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1411.844340][T10316] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1411.855096][T10316] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1411.861641][T10316] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1411.878143][T10316] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1411.891432][T10316] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1411.912554][T10316] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1411.919699][T10316] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1411.971168][T10551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9199'. [ 1412.101479][T10316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1412.137972][T10568] netlink: 'syz.0.9202': attribute type 4 has an invalid length. [ 1412.137995][T10568] netlink: 17 bytes leftover after parsing attributes in process `syz.0.9202'. [ 1412.165238][T10316] 8021q: adding VLAN 0 to HW filter on device team0 [ 1412.195667][ T3366] bridge0: port 1(bridge_slave_0) entered blocking state [ 1412.195773][ T3366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1412.210800][T10568] netlink: 'syz.0.9202': attribute type 11 has an invalid length. [ 1412.220768][ T8006] bridge0: port 2(bridge_slave_1) entered blocking state [ 1412.220869][ T8006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1412.266498][T10575] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 1412.380952][T10574] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 1412.424479][T10585] tipc: Bearer : already 2 bearers with priority 0 [ 1412.424502][T10585] tipc: Enabling of bearer rejected, cannot adjust to lower [ 1412.427967][T10585] syzkaller0: entered promiscuous mode [ 1412.427988][T10585] syzkaller0: entered allmulticast mode [ 1412.438229][T10585] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) ! [ 1412.507859][T10585] syzkaller0: mtu less than device minimum [ 1412.684115][T10595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9208'. [ 1412.684445][T10595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9208'. [ 1412.971151][T10608] netlink: 244 bytes leftover after parsing attributes in process `syz.1.9211'. [ 1413.001831][T10316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1413.058795][T10617] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9212'. [ 1413.058833][T10617] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9212'. [ 1413.242514][T29602] Bluetooth: hci3: command tx timeout [ 1413.675442][T10316] veth0_vlan: entered promiscuous mode [ 1413.699994][T10316] veth1_vlan: entered promiscuous mode [ 1413.758049][T10316] veth0_macvtap: entered promiscuous mode [ 1413.775401][T10316] veth1_macvtap: entered promiscuous mode [ 1413.800050][T10316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1413.815777][T10316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1413.874705][ T4559] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1413.875510][ T4559] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1413.875799][ T4559] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1413.875832][ T4559] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1413.949602][ T4553] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1413.949624][ T4553] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1413.989046][ T3366] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1413.989070][ T3366] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1414.546544][T10665] __nla_validate_parse: 2 callbacks suppressed [ 1414.546565][T10665] netlink: 84 bytes leftover after parsing attributes in process `syz.0.9225'. [ 1414.546848][T10668] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9228'. [ 1414.707288][T22864] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1414.716897][T22864] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1414.728002][T22864] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1414.739548][T22864] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1414.740308][T22864] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1415.270900][T30315] tipc: Resetting bearer [ 1415.325829][T29602] Bluetooth: hci3: command tx timeout [ 1415.343080][T30315] tipc: Disabling bearer [ 1415.580228][T10700] IPv6: NLM_F_CREATE should be specified when creating new route [ 1415.598459][T10672] virt_wifi0 speed is unknown, defaulting to 1000 [ 1415.600464][T10672] lo speed is unknown, defaulting to 1000 [ 1415.603539][T10672] wlan1 speed is unknown, defaulting to 1000 [ 1415.924549][T10690] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1416.017093][T10720] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9239'. [ 1416.424880][T10672] bridge0: port 1(bridge_slave_0) entered blocking state [ 1416.425021][T10672] bridge0: port 1(bridge_slave_0) entered disabled state [ 1416.425212][T10672] bridge_slave_0: entered allmulticast mode [ 1416.456252][T10672] bridge_slave_0: entered promiscuous mode [ 1416.480109][T10672] bridge0: port 2(bridge_slave_1) entered blocking state [ 1416.480361][T10672] bridge0: port 2(bridge_slave_1) entered disabled state [ 1416.480501][T10672] bridge_slave_1: entered allmulticast mode [ 1416.508041][T10672] bridge_slave_1: entered promiscuous mode [ 1416.666782][T10672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1416.698976][T10672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1416.769397][T29602] Bluetooth: hci4: command tx timeout [ 1416.789509][T10747] netlink: 'syz.6.9243': attribute type 1 has an invalid length. [ 1416.789531][T10747] netlink: 'syz.6.9243': attribute type 2 has an invalid length. [ 1416.848809][T10672] team0: Port device team_slave_0 added [ 1416.851754][T10672] team0: Port device team_slave_1 added [ 1416.916416][T10672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1416.916435][T10672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1416.916460][T10672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1416.918327][T10672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1416.918342][T10672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1416.918367][T10672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1417.026047][T10760] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9244'. [ 1417.129324][T10767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9242'. [ 1417.206869][T10672] hsr_slave_0: entered promiscuous mode [ 1417.207858][T10672] hsr_slave_1: entered promiscuous mode [ 1417.208550][T10672] debugfs: 'hsr0' already exists in 'hsr' [ 1417.208566][T10672] Cannot create hsr debugfs directory [ 1417.421670][T10775] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9247'. [ 1417.421704][T10775] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9247'. [ 1417.506758][T10780] netlink: 'syz.6.9248': attribute type 10 has an invalid length. [ 1417.521506][T10672] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1417.521539][T10672] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1417.561549][T10781] netlink: 'syz.6.9248': attribute type 4 has an invalid length. [ 1417.561573][T10781] netlink: 156 bytes leftover after parsing attributes in process `syz.6.9248'. [ 1417.604601][T10775] gretap1: entered promiscuous mode [ 1417.604627][T10775] gretap1: entered allmulticast mode [ 1417.671231][T10780] macvlan1: entered promiscuous mode [ 1417.671255][T10780] macvlan1: entered allmulticast mode [ 1417.685856][T10786] netlink: 'syz.0.9251': attribute type 1 has an invalid length. [ 1417.688693][T10780] veth1_vlan: entered allmulticast mode [ 1417.698770][T10780] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 1417.767910][T10786] bond1: entered promiscuous mode [ 1417.769865][T10786] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1417.839833][T10672] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1417.839870][T10672] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1417.878847][T10786] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1417.879044][T10786] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 1417.879055][T10786] bond1: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 1417.910000][T10786] bond1: (slave xfrm1): making interface the new active one [ 1417.910024][T10786] xfrm1: entered promiscuous mode [ 1417.927493][T10786] xfrm1: left promiscuous mode [ 1418.018901][T10672] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1418.018936][T10672] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1418.057981][T10804] netlink: 'syz.5.9257': attribute type 1 has an invalid length. [ 1418.141605][T10804] bond1 (unregistering): Released all slaves [ 1418.235911][T10672] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1418.235947][T10672] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1418.530320][T10819] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9261'. [ 1418.559913][T10823] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9260'. [ 1418.616211][T10825] netlink: 'syz.6.9262': attribute type 11 has an invalid length. [ 1418.843300][T29602] Bluetooth: hci4: command tx timeout [ 1418.881254][T10672] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1418.905460][T10672] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1418.906329][T10672] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1418.927511][T10672] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1418.929806][T10672] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1418.961646][T10672] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1418.968508][T10672] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1418.991244][T10672] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1419.020732][T10841] netlink: 'syz.0.9267': attribute type 4 has an invalid length. [ 1419.196128][T10672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1419.224601][T10672] 8021q: adding VLAN 0 to HW filter on device team0 [ 1419.231631][ T8007] bridge0: port 1(bridge_slave_0) entered blocking state [ 1419.231691][ T8007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1419.270817][ T8007] bridge0: port 2(bridge_slave_1) entered blocking state [ 1419.270896][ T8007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1419.399242][T10862] x_tables: duplicate underflow at hook 4 [ 1419.977197][T10672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1420.069122][T10672] veth0_vlan: entered promiscuous mode [ 1420.082892][T10672] veth1_vlan: entered promiscuous mode [ 1420.120132][T10672] veth0_macvtap: entered promiscuous mode [ 1420.133837][T10672] veth1_macvtap: entered promiscuous mode [ 1420.163258][T10672] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1420.177623][T10672] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1420.212845][ T3366] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1420.213312][ T3366] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1420.213350][ T3366] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1420.213383][ T3366] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1420.330822][T10913] __nla_validate_parse: 2 callbacks suppressed [ 1420.330840][T10913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9281'. [ 1420.449747][T15928] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1420.449769][T15928] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1420.511315][ T3366] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1420.511338][ T3366] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1420.837322][T10929] vlan2: entered allmulticast mode [ 1420.837344][T10929] gretap0: entered allmulticast mode [ 1420.898450][T10936] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9288'. [ 1420.922972][T29602] Bluetooth: hci4: command tx timeout [ 1421.034174][T29602] Bluetooth: hci3: unexpected cc 0x100c length: 5 > 3 [ 1421.049035][T29602] Bluetooth: hci3: unexpected cc 0x100c length: 5 > 3 [ 1421.388554][T22864] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1421.391780][T22864] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1421.401130][T22864] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1421.415909][T22864] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1421.418726][T22864] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1421.487251][T10960] TC_ACT_REPEAT abuse ? [ 1421.866068][T10971] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1421.928176][T10974] macvlan2: entered promiscuous mode [ 1421.928199][T10974] macvlan2: entered allmulticast mode [ 1421.987102][T10974] ip6tnl0: entered promiscuous mode [ 1422.005034][T10974] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9297'. [ 1422.091806][T10987] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9300'. [ 1422.200089][T10957] virt_wifi0 speed is unknown, defaulting to 1000 [ 1422.201906][T10957] lo speed is unknown, defaulting to 1000 [ 1422.216936][T10957] wlan1 speed is unknown, defaulting to 1000 [ 1422.491347][T11006] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.9306'. [ 1422.507864][T11009] netlink: 80 bytes leftover after parsing attributes in process `syz.6.9307'. [ 1422.630995][T10957] bridge0: port 1(bridge_slave_0) entered blocking state [ 1422.631162][T10957] bridge0: port 1(bridge_slave_0) entered disabled state [ 1422.631305][T10957] bridge_slave_0: entered allmulticast mode [ 1422.633541][T10957] bridge_slave_0: entered promiscuous mode [ 1422.636938][T10957] bridge0: port 2(bridge_slave_1) entered blocking state [ 1422.637257][T10957] bridge0: port 2(bridge_slave_1) entered disabled state [ 1422.637386][T10957] bridge_slave_1: entered allmulticast mode [ 1422.639004][T10957] bridge_slave_1: entered promiscuous mode [ 1422.689360][T10957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1422.695432][T10957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1422.740709][T10957] team0: Port device team_slave_0 added [ 1422.743792][T10957] team0: Port device team_slave_1 added [ 1422.787700][T10957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1422.787718][T10957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1422.787743][T10957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1422.789784][T10957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1422.789800][T10957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1422.789823][T10957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1422.857521][T10957] hsr_slave_0: entered promiscuous mode [ 1422.858610][T10957] hsr_slave_1: entered promiscuous mode [ 1422.859336][T10957] debugfs: 'hsr0' already exists in 'hsr' [ 1422.859351][T10957] Cannot create hsr debugfs directory [ 1422.930247][T11023] netlink: 372 bytes leftover after parsing attributes in process `syz.0.9310'. [ 1423.006186][T29602] Bluetooth: hci4: command tx timeout [ 1423.081372][T11028] netlink: 'syz.0.9311': attribute type 2 has an invalid length. [ 1423.081404][T11028] netlink: 244 bytes leftover after parsing attributes in process `syz.0.9311'. [ 1423.157597][T10957] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1423.157629][T10957] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1423.213237][T11036] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9313'. [ 1423.247161][T10957] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1423.247196][T10957] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1423.431200][T11044] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9314'. [ 1423.482883][T29602] Bluetooth: hci1: command tx timeout [ 1425.563097][T29602] Bluetooth: hci1: command tx timeout [ 1426.049081][T10957] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1426.049116][T10957] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1426.360125][T10957] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1426.360160][T10957] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1426.847024][T11098] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9328'. [ 1427.054560][T10957] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1427.070293][T10957] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1427.072800][T10957] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1427.115852][T10957] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1427.121560][T10957] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1427.148631][T10957] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1427.151447][T10957] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1427.167659][T10957] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1427.441545][T10957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1427.495347][T10957] 8021q: adding VLAN 0 to HW filter on device team0 [ 1427.520774][ T6849] bridge0: port 1(bridge_slave_0) entered blocking state [ 1427.520899][ T6849] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1427.538740][ T3366] bridge0: port 2(bridge_slave_1) entered blocking state [ 1427.538846][ T3366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1427.642786][T29602] Bluetooth: hci1: command tx timeout [ 1428.531899][T10957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1428.772302][T10957] veth0_vlan: entered promiscuous mode [ 1428.798983][T10957] veth1_vlan: entered promiscuous mode [ 1428.862572][T11188] netlink: 60 bytes leftover after parsing attributes in process `syz.5.9347'. [ 1428.894592][T11188] netlink: 60 bytes leftover after parsing attributes in process `syz.5.9347'. [ 1428.937785][T10957] veth0_macvtap: entered promiscuous mode [ 1428.966227][T10957] veth1_macvtap: entered promiscuous mode [ 1429.069435][T10957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1429.109997][T11196] netlink: 'syz.0.9350': attribute type 2 has an invalid length. [ 1429.110019][T11196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9350'. [ 1429.123756][T10957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1429.183934][ T4553] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1429.184332][ T4553] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1429.184500][ T4553] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1429.184536][ T4553] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1429.191570][T11202] ip_tables: iptables: counters copy to user failed while replacing table [ 1429.354271][ T6849] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1429.354293][ T6849] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1429.416917][ T4553] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1429.416940][ T4553] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1429.509352][T11207] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9353'. [ 1429.549565][T11206] sctp: [Deprecated]: syz.0.9354 (pid 11206) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1429.549565][T11206] Use struct sctp_sack_info instead [ 1429.577586][T11210] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9355'. [ 1429.723468][T29602] Bluetooth: hci1: command tx timeout [ 1429.861019][T11225] netlink: 5740 bytes leftover after parsing attributes in process `syz.0.9357'. [ 1429.916247][T11230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9361'. [ 1429.944951][T11231] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1429.969789][T11235] ip_tables: iptables: counters copy to user failed while replacing table [ 1429.974091][T11233] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1431.995598][T11292] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9376'. [ 1432.331199][T11310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9380'. [ 1432.810692][T11330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9386'. [ 1432.810732][T11330] openvswitch: netlink: EtherType 520 is less than min 600 [ 1433.209507][T11349] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9391'. [ 1433.270214][T11354] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9392'. [ 1433.270250][T11354] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9392'. [ 1433.525308][T11371] netlink: 'syz.6.9394': attribute type 1 has an invalid length. [ 1433.581796][T11378] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9394'. [ 1433.687209][T11371] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9394'. [ 1433.725336][T11385] bond5: (slave gretap2): making interface the new active one [ 1433.726054][T11385] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 1433.764954][T11389] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9398'. [ 1433.884572][T11393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9399'. [ 1434.074481][T11397] syzkaller0: entered promiscuous mode [ 1434.074504][T11397] syzkaller0: entered allmulticast mode [ 1434.107827][T11395] netlink: 'syz.5.9400': attribute type 10 has an invalid length. [ 1434.161993][T11395] team0: Port device dummy0 added [ 1434.410616][T11408] bridge0: port 1(bridge_slave_0) entered disabled state [ 1434.471249][T11408] bridge_slave_0 (unregistering): left allmulticast mode [ 1434.471280][T11408] bridge_slave_0 (unregistering): left promiscuous mode [ 1434.471358][T11408] bridge0: port 1(bridge_slave_0) entered disabled state [ 1434.527161][T11415] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1434.737935][T11423] x_tables: duplicate underflow at hook 1 [ 1434.817060][T11427] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1435.148855][T11454] tipc: Started in network mode [ 1435.148886][T11454] tipc: Node identity ac1414aa, cluster identity 4711 [ 1435.149137][T11454] tipc: New replicast peer: 172.20.20.187 [ 1435.150083][T11454] tipc: Enabled bearer , priority 10 [ 1435.283680][T11460] netlink: 'syz.0.9423': attribute type 2 has an invalid length. [ 1435.616340][T11481] dvmrp1: entered allmulticast mode [ 1435.758826][T11494] syzkaller0: entered promiscuous mode [ 1435.758849][T11494] syzkaller0: entered allmulticast mode [ 1435.786331][T11494] tipc: Started in network mode [ 1435.786364][T11494] tipc: Node identity 3e3a37965a11, cluster identity 4711 [ 1435.787745][T11494] tipc: Enabled bearer , priority 0 [ 1435.817477][T11493] tipc: Resetting bearer [ 1435.875930][T11499] netlink: 'syz.5.9434': attribute type 8 has an invalid length. [ 1435.924306][T11493] tipc: Disabling bearer [ 1436.107609][T11515] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1436.163888][T11515] veth0: entered promiscuous mode [ 1436.206629][T11514] veth0: left promiscuous mode [ 1436.262855][ T5766] tipc: Node number set to 2886997162 [ 1436.366477][T11509] syzkaller1: entered promiscuous mode [ 1436.366502][T11509] syzkaller1: entered allmulticast mode [ 1436.925566][ T5733] af_packet: tpacket_rcv: packet too big, clamped from 80 to 4294967272. macoff=96 [ 1436.971563][T11548] xt_hashlimit: size too large, truncated to 1048576 [ 1437.003503][T11558] netlink: 'syz.2.9448': attribute type 1 has an invalid length. [ 1437.040108][T11557] __nla_validate_parse: 2 callbacks suppressed [ 1437.040129][T11557] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9449'. [ 1437.256010][T11571] netlink: 'syz.5.9452': attribute type 12 has an invalid length. [ 1437.385477][T11575] IPv6: NLM_F_CREATE should be specified when creating new route [ 1437.685785][T11586] syzkaller1: entered allmulticast mode [ 1437.687840][T11586] syzkaller1: left allmulticast mode [ 1437.924437][T11595] ip_tables: iptables: counters copy to user failed while replacing table [ 1438.029617][T11604] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x1 [ 1438.216615][T11612] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9463'. [ 1441.204653][T11626] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9466'. [ 1441.361577][T11634] geneve0: entered allmulticast mode [ 1441.456504][T11634] wireguard0: entered promiscuous mode [ 1441.507765][T11649] bridge0: port 3(gretap0) entered blocking state [ 1441.507871][T11649] bridge0: port 3(gretap0) entered disabled state [ 1441.508041][T11649] gretap0: entered allmulticast mode [ 1441.515766][T11635] netlink: 48 bytes leftover after parsing attributes in process `syz.5.9468'. [ 1441.519206][T11649] gretap0: entered promiscuous mode [ 1441.521021][T11649] bridge0: port 3(gretap0) entered blocking state [ 1441.521124][T11649] bridge0: port 3(gretap0) entered forwarding state [ 1441.595611][T11636] syzkaller0: entered promiscuous mode [ 1441.595634][T11636] syzkaller0: entered allmulticast mode [ 1441.689674][T11644] syzkaller0: entered promiscuous mode [ 1441.689698][T11644] syzkaller0: entered allmulticast mode [ 1441.691244][T11657] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9475'. [ 1441.806134][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1441.870704][T11668] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9479'. [ 1442.010265][T11673] netlink: 'syz.2.9480': attribute type 4 has an invalid length. [ 1442.157952][T11687] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9483'. [ 1443.066884][T11696] workqueue: Failed to create a rescuer kthread for wq "nfc22_nci_rx_wq": -EINTR [ 1443.525893][T11802] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9493'. [ 1443.709034][T11802] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 1443.711261][ T5733] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 1443.998077][T11814] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9498'. [ 1444.487275][T11836] netlink: 14544 bytes leftover after parsing attributes in process `syz.5.9505'. [ 1444.514593][T11840] netlink: 104 bytes leftover after parsing attributes in process `syz.0.9504'. [ 1444.722714][T11848] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9507'. [ 1444.727685][T11849] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1445.596524][T11890] netlink: 'syz.0.9518': attribute type 2 has an invalid length. [ 1445.596694][T11890] netlink: 'syz.0.9518': attribute type 2 has an invalid length. [ 1445.596845][T11890] netlink: 'syz.0.9518': attribute type 2 has an invalid length. [ 1445.597000][T11890] netlink: 'syz.0.9518': attribute type 2 has an invalid length. [ 1445.597183][T11890] netlink: 'syz.0.9518': attribute type 2 has an invalid length. [ 1445.597334][T11890] netlink: 'syz.0.9518': attribute type 2 has an invalid length. [ 1445.598438][T11890] netlink: 'syz.0.9518': attribute type 2 has an invalid length. [ 1445.598689][T11890] netlink: 'syz.0.9518': attribute type 2 has an invalid length. [ 1445.598874][T11890] netlink: 'syz.0.9518': attribute type 2 has an invalid length. [ 1445.617919][T11890] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 1445.654769][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1446.037228][T11899] 0: reclassify loop, rule prio 0, protocol 03 [ 1446.076465][T11911] sctp: [Deprecated]: syz.1.9525 (pid 11911) Use of int in maxseg socket option. [ 1446.076465][T11911] Use struct sctp_assoc_value instead [ 1446.097699][T11912] veth1_macvtap: left promiscuous mode [ 1446.097727][T11912] macsec0: entered allmulticast mode [ 1446.511824][T11929] netlink: 96 bytes leftover after parsing attributes in process `syz.5.9532'. [ 1446.563604][T11936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9534'. [ 1446.764201][T11944] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9537'. [ 1446.845494][T11948] ip6t_srh: unknown srh match flags 4000 [ 1447.129993][T11965] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9541'. [ 1447.228248][T11967] x_tables: duplicate underflow at hook 1 [ 1447.248912][T11969] validate_nla: 25 callbacks suppressed [ 1447.248933][T11969] netlink: 'syz.1.9543': attribute type 5 has an invalid length. [ 1447.561455][T11989] sctp: [Deprecated]: syz.0.9550 (pid 11989) Use of int in maxseg socket option. [ 1447.561455][T11989] Use struct sctp_assoc_value instead [ 1447.600839][T11993] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9552'. [ 1447.941040][T12009] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9556'. [ 1448.375738][T12039] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9563'. [ 1448.375759][T12039] netlink: 2 bytes leftover after parsing attributes in process `syz.5.9563'. [ 1448.390546][T12040] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9564'. [ 1448.401826][T12040] ovs-dp0: entered promiscuous mode [ 1448.858533][T12068] syzkaller1: entered promiscuous mode [ 1448.858556][T12068] syzkaller1: entered allmulticast mode [ 1448.923058][T12070] pim6reg1: entered promiscuous mode [ 1448.923079][T12070] pim6reg1: entered allmulticast mode [ 1448.944720][ T3366] IPVS: starting estimator thread 0... [ 1449.052209][T12073] IPVS: using max 29 ests per chain, 69600 per kthread [ 1449.216828][T12094] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9577'. [ 1449.342386][T12097] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component [ 1449.467538][T12101] erspan0: entered promiscuous mode [ 1449.926994][T12135] netlink: 'syz.2.9586': attribute type 4 has an invalid length. [ 1449.927804][T12136] netlink: 'syz.2.9586': attribute type 4 has an invalid length. [ 1450.094358][T12144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9589'. [ 1450.183972][T12148] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9590'. [ 1450.359576][T12150] bond1: option all_slaves_active: invalid value (179) [ 1450.375297][T12150] bond1 (unregistering): Released all slaves [ 1450.747564][T12167] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9597'. [ 1450.808541][T12174] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9599'. [ 1450.928881][T12183] syzkaller1: entered promiscuous mode [ 1450.928906][T12183] syzkaller1: entered allmulticast mode [ 1451.282948][T12200] x_tables: duplicate underflow at hook 2 [ 1451.303664][T12204] x_tables: duplicate underflow at hook 2 [ 1451.512293][T12218] ip_tables: iptables: counters copy to user failed while replacing table [ 1451.627637][T12225] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xc9 [ 1452.487053][T12273] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1452.561478][T12278] vcan0: tx address claim with dest, not broadcast [ 1452.615057][T12284] __nla_validate_parse: 15 callbacks suppressed [ 1452.615087][T12284] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9628'. [ 1452.615114][T12284] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9628'. [ 1452.770594][T12290] syzkaller0: entered promiscuous mode [ 1452.770631][T12290] syzkaller0: entered allmulticast mode [ 1453.144314][T12308] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9635'. [ 1453.144349][T12308] netlink: 'syz.5.9635': attribute type 30 has an invalid length. [ 1453.144363][T12308] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9635'. [ 1453.145620][T12308] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9635'. [ 1453.145648][T12308] netlink: 'syz.5.9635': attribute type 30 has an invalid length. [ 1453.145662][T12308] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9635'. [ 1453.290888][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807c229400: rx timeout, send abort [ 1453.291038][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807c229400: 0x2ff03: (3) A timeout occurred and this is the connection abort to close the session. [ 1453.363535][T12314] openvswitch: netlink: Actions may not be safe on all matching packets [ 1453.365144][T12314] netlink: 60 bytes leftover after parsing attributes in process `syz.6.9638'. [ 1453.366697][T12314] netlink: 60 bytes leftover after parsing attributes in process `syz.6.9638'. [ 1453.367294][T12314] netlink: 60 bytes leftover after parsing attributes in process `syz.6.9638'. [ 1453.368801][T12314] netlink: 60 bytes leftover after parsing attributes in process `syz.6.9638'. [ 1453.703409][T12332] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1453.705866][T12332] Bluetooth: hci0: invalid length 0, exp 1 for type 31 [ 1454.389691][T12383] xt_CT: No such helper "snmp_trap" [ 1454.444188][T12396] netlink: 'syz.5.9666': attribute type 10 has an invalid length. [ 1454.463750][T12396] team0: Port device dummy0 removed [ 1454.464543][T12396] bridge0: port 3(dummy0) entered blocking state [ 1454.464714][T12396] bridge0: port 3(dummy0) entered disabled state [ 1454.464843][T12396] dummy0: entered allmulticast mode [ 1454.466767][T12396] dummy0: entered promiscuous mode [ 1454.816709][T12420] netlink: 'syz.5.9677': attribute type 46 has an invalid length. [ 1454.914259][T12427] ipt_REJECT: ECHOREPLY no longer supported. [ 1454.938919][T12435] netlink: 'syz.5.9678': attribute type 2 has an invalid length. [ 1455.074834][T12442] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xc9 [ 1455.863799][T12463] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1458.048328][T12458] __nla_validate_parse: 14 callbacks suppressed [ 1458.048349][T12458] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9686'. [ 1458.309329][T12488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9694'. [ 1458.309353][T12488] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9694'. [ 1458.309376][T12488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9694'. [ 1458.357157][T12497] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1458.374435][T15928] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1458.374479][T15928] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1458.374512][T15928] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1458.374544][T15928] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1458.430473][T12508] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9696'. [ 1458.497740][T12509] netlink: 'syz.6.9698': attribute type 1 has an invalid length. [ 1458.497764][T12509] netlink: 'syz.6.9698': attribute type 1 has an invalid length. [ 1458.553933][T12515] netlink: ct family unspecified [ 1458.630673][T12515] netlink: 6 bytes leftover after parsing attributes in process `syz.5.9699'. [ 1458.634963][T12515] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1458.721281][T12518] xt_nfacct: accounting object `syz0' does not exist [ 1458.770716][T12521] netdevsim netdevsim0: Firmware load for './file0/file0/..' refused, path contains '..' component [ 1458.856625][T12528] syzkaller0: entered promiscuous mode [ 1458.856647][T12528] syzkaller0: entered allmulticast mode [ 1459.144465][T12540] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9706'. [ 1459.293801][T12544] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 1459.295149][T12544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9709'. [ 1459.406869][T12551] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9712'. [ 1459.465298][T12555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9712'. [ 1459.506811][T12560] netlink: 'syz.6.9714': attribute type 2 has an invalid length. [ 1459.547288][T12555] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1459.569055][T12560] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 1459.726613][T12577] wg0 speed is unknown, defaulting to 1000 [ 1459.726693][T12577] wg0 speed is unknown, defaulting to 1000 [ 1459.730460][T12577] wg0 speed is unknown, defaulting to 1000 [ 1459.731513][T12577] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1459.731546][T12577] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1459.731583][T12577] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1459.813720][T12577] wg0 speed is unknown, defaulting to 1000 [ 1459.817045][T12577] wg0 speed is unknown, defaulting to 1000 [ 1459.828305][T12577] wg0 speed is unknown, defaulting to 1000 [ 1459.840882][T12577] wg0 speed is unknown, defaulting to 1000 [ 1459.868328][T12577] wg0 speed is unknown, defaulting to 1000 [ 1459.878519][T12577] wg0 speed is unknown, defaulting to 1000 [ 1459.888334][T12577] wg0 speed is unknown, defaulting to 1000 [ 1459.893290][T12577] wg0 speed is unknown, defaulting to 1000 [ 1459.896908][T12577] wg0 speed is unknown, defaulting to 1000 [ 1459.908504][T12577] wg0 speed is unknown, defaulting to 1000 [ 1459.913338][T12577] wg0 speed is unknown, defaulting to 1000 [ 1459.928502][T12577] wg0 speed is unknown, defaulting to 1000 [ 1460.567291][T12611] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1460.575530][T12611] ip6t_srh: unknown srh match flags 4000 [ 1460.677358][T12613] bridge0: port 2(bridge_slave_1) entered disabled state [ 1460.858306][T12638] bridge0: port 3(gretap0) entered disabled state [ 1460.858498][T12638] bridge0: port 2(bridge_slave_1) entered disabled state [ 1460.859134][T12638] bridge0: port 1(bridge_slave_0) entered disabled state [ 1461.044174][T12650] sctp: [Deprecated]: syz.5.9736 (pid 12650) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1461.044174][T12650] Use struct sctp_sack_info instead [ 1461.220156][T12658] geneve3: entered allmulticast mode [ 1461.277068][T12666] netlink: 'syz.5.9741': attribute type 1 has an invalid length. [ 1461.277092][T12666] netlink: 'syz.5.9741': attribute type 2 has an invalid length. [ 1461.277105][T12666] netlink: 'syz.5.9741': attribute type 3 has an invalid length. [ 1461.347749][T12668] ip_tables: iptables: counters copy to user failed while replacing table [ 1461.513207][T12680] netlink: 'syz.2.9747': attribute type 10 has an invalid length. [ 1461.513243][T12680] macsec0: left allmulticast mode [ 1461.513569][T12680] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 1462.173936][T12726] block nbd532: Unsupported socket: should be TCP or UNIX. [ 1462.271297][T12729] bond2: entered allmulticast mode [ 1462.271773][T12729] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1462.706629][T12762] x_tables: duplicate underflow at hook 3 [ 1463.161768][T12790] netlink: 'syz.0.9775': attribute type 1 has an invalid length. [ 1463.161789][T12790] __nla_validate_parse: 11 callbacks suppressed [ 1463.161801][T12790] netlink: 96 bytes leftover after parsing attributes in process `syz.0.9775'. [ 1463.250508][T12796] ip_tables: iptables: counters copy to user failed while replacing table [ 1463.270841][T12796] syzkaller0: entered promiscuous mode [ 1463.270863][T12796] syzkaller0: entered allmulticast mode [ 1463.419257][T12802] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9780'. [ 1463.494132][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804c033000: rx timeout, send abort [ 1463.498160][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804c033c00: rx timeout, send abort [ 1463.498349][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88804c033c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1463.500238][T12808] netlink: 288 bytes leftover after parsing attributes in process `syz.6.9785'. [ 1463.555693][T12808] netlink: 288 bytes leftover after parsing attributes in process `syz.6.9785'. [ 1463.818321][T12829] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1463.901626][T12832] bond3: (slave dummy0): Releasing active interface [ 1463.926646][T12834] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9791'. [ 1463.952560][T12832] bridge_slave_0: left allmulticast mode [ 1463.952797][T12832] bridge0: port 1(bridge_slave_0) entered disabled state [ 1463.960527][T12832] bridge_slave_1: left allmulticast mode [ 1463.960552][T12832] bridge_slave_1: left promiscuous mode [ 1463.960734][T12832] bridge0: port 2(bridge_slave_1) entered disabled state [ 1463.974466][T12836] Bluetooth: hci0: unsupported parameter 5161 [ 1463.974487][T12836] Bluetooth: hci0: unsupported parameter 8192 [ 1463.974500][T12836] Bluetooth: hci0: unsupported parameter 5161 [ 1463.974512][T12836] Bluetooth: hci0: unsupported parameter 8192 [ 1463.997744][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804c033000: abort rx timeout. Force session deactivation [ 1464.083471][T12832] bond0: (slave bond_slave_0): Releasing backup interface [ 1464.110737][T12832] bond0: (slave bond_slave_1): Releasing backup interface [ 1464.149656][T12832] team0: Port device team_slave_0 removed [ 1464.168842][T12832] team0: Port device team_slave_1 removed [ 1464.174937][T12832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1464.174972][T12832] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1464.199175][T12832] bond0: (slave macvlan1): Releasing backup interface [ 1464.200055][T12832] veth1_vlan: left allmulticast mode [ 1464.238558][T12832] netdevsim netdevsim6 netdevsim1: left promiscuous mode [ 1464.238786][T12832] bridge0: port 4(netdevsim1) entered disabled state [ 1464.250940][T12832] bond1: left allmulticast mode [ 1464.251087][T12832] bond1: left promiscuous mode [ 1464.252044][T12832] bridge0: port 3(bond1) entered disabled state [ 1464.279785][T12832] bond3: (slave veth5): Releasing active interface [ 1464.310318][T12832] bond5: (slave gretap2): Releasing backup interface [ 1464.325710][T12834] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9791'. [ 1464.568807][T12862] batman_adv: batadv0: Adding interface: syzkaller0 [ 1464.568826][T12862] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1464.569041][T12862] batman_adv: batadv0: Interface activated: syzkaller0 [ 1464.627528][T12861] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1464.680337][T12861] batman_adv: batadv0: Removing interface: syzkaller0 [ 1464.797174][T12869] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1464.944834][T12878] netlink: 112 bytes leftover after parsing attributes in process `syz.0.9802'. [ 1465.068366][T12886] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component [ 1465.185222][T12892] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 1465.270068][T12895] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9807'. [ 1465.282244][T12895] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9807'. [ 1465.349436][T12900] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9810'. [ 1465.814519][T12929] netlink: 'syz.6.9817': attribute type 1 has an invalid length. [ 1465.820029][T12930] netlink: 'syz.6.9817': attribute type 1 has an invalid length. [ 1465.994975][T12938] bond3 (unregistering): Released all slaves [ 1466.830586][T12979] tipc: MTU too low for tipc bearer [ 1467.068100][T12991] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1467.516440][T13017] netlink: 'syz.0.9839': attribute type 10 has an invalid length. [ 1469.544720][T13033] __nla_validate_parse: 11 callbacks suppressed [ 1469.544741][T13033] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9841'. [ 1469.545493][T13033] vlan0: entered promiscuous mode [ 1469.676345][T13036] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20004 [ 1469.676642][T13036] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9845'. [ 1469.745163][T13046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9847'. [ 1469.769961][T13049] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9844'. [ 1470.217934][T13066] netlink: 'syz.1.9852': attribute type 10 has an invalid length. [ 1470.262833][T13066] mac80211_hwsim hwsim81 wlan0: entered allmulticast mode [ 1470.305370][T13066] team0: Port device wlan0 added [ 1470.546157][T13090] Cannot find add_set index 34 as target [ 1470.737914][T13099] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9859'. [ 1471.242262][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1471.339016][T13114] netlink: 'syz.1.9862': attribute type 3 has an invalid length. [ 1471.339041][T13114] netlink: 3 bytes leftover after parsing attributes in process `syz.1.9862'. [ 1471.489404][T13116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9863'. [ 1471.679332][T13130] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1471.704077][T13131] netlink: 'syz.5.9867': attribute type 83 has an invalid length. [ 1471.704972][T13130] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9869'. [ 1471.734847][T13130] vlan1: entered promiscuous mode [ 1471.734869][T13130] bond0: entered promiscuous mode [ 1471.861056][T13140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9871'. [ 1471.899204][T13137] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9870'. [ 1472.089724][T13155] netlink: 'syz.5.9874': attribute type 1 has an invalid length. [ 1472.338775][T13172] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1472.477145][T13177] netlink: 'syz.5.9879': attribute type 1 has an invalid length. [ 1472.523513][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1472.803061][T13193] netlink: 'syz.6.9882': attribute type 282 has an invalid length. [ 1473.127138][T13207] netlink: 'syz.2.9885': attribute type 16 has an invalid length. [ 1473.735164][T13242] ip_tables: iptables: counters copy to user failed while replacing table [ 1474.024557][T13262] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1474.052191][T13262] netlink: 'syz.2.9896': attribute type 32 has an invalid length. [ 1474.440870][T13262] bond2: option coupled_control: invalid value (29) [ 1474.542936][T13262] bond2 (unregistering): Released all slaves [ 1475.084832][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1475.107055][T13300] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1475.232283][T13317] __nla_validate_parse: 7 callbacks suppressed [ 1475.232302][T13317] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9909'. [ 1475.232317][T13317] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9909'. [ 1475.714780][T13347] bridge0: port 3(dummy0) entered blocking state [ 1475.714908][T13347] bridge0: port 3(dummy0) entered forwarding state [ 1475.733998][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1475.746394][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1475.747744][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1475.749697][T13347] gretap1: left promiscuous mode [ 1475.755633][T13347] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1475.766835][T13347] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1475.769302][T13347] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1475.776683][ T12] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1475.790551][ T12] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1475.797767][ T4554] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1475.799232][ T4554] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1475.818862][T13347] Cannot find del_set index 4 as target [ 1475.919865][T13349] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9922'. [ 1475.939519][T13349] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9922'. [ 1475.950032][T13355] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9921'. [ 1475.950432][T13355] netlink: 'syz.6.9921': attribute type 9 has an invalid length. [ 1475.950448][T13355] netlink: 'syz.6.9921': attribute type 4 has an invalid length. [ 1476.244820][T13377] netlink: 44 bytes leftover after parsing attributes in process `syz.6.9928'. [ 1476.251803][T29602] Bluetooth: hci3: ISO packet for unknown connection handle 14 [ 1476.295026][T13381] netlink: 164 bytes leftover after parsing attributes in process `syz.2.9929'. [ 1476.295127][T13381] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9929'. [ 1476.381709][T13383] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9927'. [ 1476.385677][T13383] siw: device registration error -23 [ 1476.447423][ C0] net_ratelimit: 2 callbacks suppressed [ 1476.447446][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1476.524190][T16730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1476.681271][T13401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9936'. [ 1476.699835][T13401] geneve2: entered promiscuous mode [ 1476.699858][T13401] geneve2: entered allmulticast mode [ 1476.731429][T13401] netlink: 'syz.2.9936': attribute type 5 has an invalid length. [ 1477.140545][T13430] netlink: 'syz.5.9944': attribute type 4 has an invalid length. [ 1477.869233][T13468] netlink: 'syz.5.9958': attribute type 1 has an invalid length. [ 1477.919241][T13471] netlink: 'syz.2.9956': attribute type 5 has an invalid length. [ 1478.566809][T13514] netlink: 'syz.5.9972': attribute type 2 has an invalid length. [ 1478.706193][T13523] netlink: 'syz.0.9974': attribute type 9 has an invalid length. [ 1478.832222][T13529] netlink: 'syz.5.9976': attribute type 3 has an invalid length. [ 1478.832245][T13529] netlink: 'syz.5.9976': attribute type 1 has an invalid length. [ 1478.884661][T13531] netlink: 'syz.2.9977': attribute type 15 has an invalid length. [ 1479.030004][T13539] netlink: 'syz.5.9981': attribute type 1 has an invalid length. [ 1479.103135][T13540] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1479.110725][T13540] bond4: (slave bond5): making interface the new active one [ 1479.111332][T13540] bond4: (slave bond5): Enslaving as an active interface with an up link [ 1479.189059][T13550] Bluetooth: hci0: unsupported parameter 5135 [ 1479.189081][T13550] Bluetooth: hci0: unsupported parameter 8192 [ 1479.189093][T13550] Bluetooth: hci0: unsupported parameter 5135 [ 1479.189103][T13550] Bluetooth: hci0: unsupported parameter 8192 [ 1479.270475][T13555] Bluetooth: hci0: unsupported parameter 5134 [ 1479.270498][T13555] Bluetooth: hci0: unsupported parameter 8192 [ 1479.270509][T13555] Bluetooth: hci0: unsupported parameter 5134 [ 1479.270552][T13555] Bluetooth: hci0: unsupported parameter 8192 [ 1479.624846][T13570] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1479.770603][T13574] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1479.788297][T13579] 8021q: adding VLAN 0 to HW filter on device team0 [ 1479.808805][T13579] bond2: (slave team0): making interface the new active one [ 1479.827776][T13579] bond2: (slave team0): Enslaving as an active interface with an up link [ 1479.939657][ T4556] bond2: (slave team0): link status definitely down, disabling slave [ 1479.959648][ T4556] bond2: now running without any active interface! [ 1480.120262][T13593] x_tables: duplicate entry at hook 3 [ 1480.331719][T13613] __nla_validate_parse: 9 callbacks suppressed [ 1480.331737][T13613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10001'. [ 1480.338942][T13612] hsr_slave_0: left promiscuous mode [ 1480.355439][T13612] hsr_slave_1: left promiscuous mode [ 1480.396883][T13616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10002'. [ 1480.447395][T13616] bridge5: entered allmulticast mode [ 1480.454044][T13617] Bluetooth: hci0: invalid length 0, exp 4 for type 32 [ 1480.489095][T13616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10002'. [ 1480.530828][T13623] netlink: 44 bytes leftover after parsing attributes in process `syz.6.10004'. [ 1480.530903][T13623] netlink: 44 bytes leftover after parsing attributes in process `syz.6.10004'. [ 1480.703967][T13623] netlink: 44 bytes leftover after parsing attributes in process `syz.6.10004'. [ 1480.704043][T13623] netlink: 44 bytes leftover after parsing attributes in process `syz.6.10004'. [ 1480.830390][T13633] netlink: 3648 bytes leftover after parsing attributes in process `syz.1.10007'. [ 1480.830420][T13633] netlink: 3648 bytes leftover after parsing attributes in process `syz.1.10007'. [ 1480.937273][T13623] netlink: 44 bytes leftover after parsing attributes in process `syz.6.10004'. [ 1481.026504][T13637] ip_tables: iptables: counters copy to user failed while replacing table [ 1481.321711][T13658] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1481.530085][T13669] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input13 [ 1481.538188][T13661] syzkaller0: entered promiscuous mode [ 1481.538209][T13661] syzkaller0: entered allmulticast mode [ 1481.561669][T13661] 0: reclassify loop, rule prio 0, protocol 800 [ 1481.692984][T13677] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_macvtap, syncid = 2, id = 0 [ 1481.914981][T13695] ip_tables: iptables: counters copy to user failed while replacing table [ 1482.551768][T13730] x_tables: duplicate underflow at hook 2 [ 1482.938646][T13751] ip_tables: iptables: counters copy to user failed while replacing table [ 1482.971835][T13753] batadv_slave_1: entered promiscuous mode [ 1483.007401][T13752] batadv_slave_1: left promiscuous mode [ 1483.013774][T15926] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1483.013822][T15926] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1483.013853][T15926] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1483.013883][T15926] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1483.081291][T13757] validate_nla: 4 callbacks suppressed [ 1483.081310][T13757] netlink: 'syz.6.10041': attribute type 10 has an invalid length. [ 1483.109433][T13757] geneve2: entered promiscuous mode [ 1483.109455][T13757] geneve2: entered allmulticast mode [ 1483.389512][T13769] netlink: 'syz.0.10046': attribute type 29 has an invalid length. [ 1483.549417][T13771] netlink: 'syz.1.10047': attribute type 4 has an invalid length. [ 1483.638501][T13789] netlink: zone id is out of range [ 1483.638518][T13789] netlink: del zone limit has 4 unknown bytes [ 1483.763632][T13797] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1483.790877][T13797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1483.806573][T13797] bond3: (slave bond0): making interface the new active one [ 1483.810217][T13797] bond3: (slave bond0): Enslaving as an active interface with an up link [ 1483.836621][T13797] netlink: 'syz.0.10055': attribute type 4 has an invalid length. [ 1483.856600][T13797] .`: renamed from bond0 (while UP) [ 1483.890919][T13804] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 1483.998713][T21037] bond3: (slave .`): link status definitely down, disabling slave [ 1484.009496][T21037] bond3: now running without any active interface! [ 1484.325872][T13836] netlink: 'syz.5.10067': attribute type 1 has an invalid length. [ 1484.348880][T13836] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1484.390667][T13836] bond6: (slave veth5): Enslaving as a backup interface with a down link [ 1485.089077][T13880] netlink: 'syz.6.10078': attribute type 4 has an invalid length. [ 1485.391335][T13890] __nla_validate_parse: 19 callbacks suppressed [ 1485.391356][T13890] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10082'. [ 1485.515853][T13857] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1485.540157][T13896] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1485.558638][T13896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10084'. [ 1485.625651][T13904] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10087'. [ 1485.625685][T13904] netlink: 'syz.5.10087': attribute type 10 has an invalid length. [ 1485.625701][T13904] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10087'. [ 1485.661693][T13904] geneve2: entered promiscuous mode [ 1485.661719][T13904] geneve2: entered allmulticast mode [ 1485.826006][T13914] netlink: 'syz.1.10091': attribute type 1 has an invalid length. [ 1485.893076][T13914] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1485.954345][T13923] bond1: (slave ip6erspan0): making interface the new active one [ 1485.979420][T13923] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1486.396775][T13954] nbd: couldn't find a device at index 1914623048 [ 1486.415306][T13956] nbd: couldn't find a device at index 1914623048 [ 1486.951609][T13993] ip_tables: iptables: counters copy to user failed while replacing table [ 1487.176619][T14010] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10111'. [ 1487.341879][T13963] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1487.370618][T14020] RDS: rds_bind could not find a transport for fe88::1, load rds_tcp or rds_rdma? [ 1487.418835][T14022] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10119'. [ 1487.421961][T14023] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10119'. [ 1487.773612][T14056] netlink: 'syz.5.10125': attribute type 1 has an invalid length. [ 1487.874186][T14062] Cannot find add_set index 0 as target [ 1487.874827][T14062] tipc: Started in network mode [ 1487.874854][T14062] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 1487.874999][T14062] tipc: Enabled bearer , priority 0 [ 1488.090893][T14070] Bluetooth: MGMT ver 1.23 [ 1488.391746][T14094] team0 (unregistering): Port device team_slave_0 removed [ 1488.411636][T14094] team0 (unregistering): Port device team_slave_1 removed [ 1488.450395][T14094] team0 (unregistering): Port device wlan0 removed [ 1488.989594][T14116] bond7: option arp_all_targets: invalid value (18446744073709551613) [ 1488.991412][T14116] bond7 (unregistering): Released all slaves [ 1489.064166][T14123] x_tables: duplicate underflow at hook 2 [ 1489.085159][T31368] tipc: Node number set to 43690 [ 1489.203100][T14131] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10145'. [ 1489.205383][T14131] netlink: 'syz.1.10145': attribute type 24 has an invalid length. [ 1489.217205][T14128] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1489.349765][T14136] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10150'. [ 1489.349799][T14136] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10150'. [ 1489.474674][T14142] netlink: 'syz.0.10149': attribute type 4 has an invalid length. [ 1489.477010][T14142] netlink: 'syz.0.10149': attribute type 4 has an invalid length. [ 1489.826740][T14161] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1489.897929][T14163] IPVS: set_ctl: invalid protocol: 12 172.20.20.40:20003 [ 1490.431673][T14196] __nla_validate_parse: 6 callbacks suppressed [ 1490.431693][T14196] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10171'. [ 1490.480378][T14200] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1490.494448][T14199] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1490.523489][T14197] netlink: 108 bytes leftover after parsing attributes in process `syz.6.10171'. [ 1490.541028][T14203] netlink: 'syz.6.10171': attribute type 10 has an invalid length. [ 1490.547015][T14197] netlink: 'syz.6.10171': attribute type 10 has an invalid length. [ 1490.749335][T14214] openvswitch: netlink: Missing valid actions attribute. [ 1490.749370][T14214] openvswitch: netlink: Actions may not be safe on all matching packets [ 1490.895685][T14227] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10181'. [ 1490.895707][T14227] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10181'. [ 1490.933852][T14230] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10182'. [ 1491.025961][T14233] netlink: 'syz.5.10184': attribute type 3 has an invalid length. [ 1491.025982][T14233] netlink: 244 bytes leftover after parsing attributes in process `syz.5.10184'. [ 1491.053591][T14236] ip_tables: iptables: counters copy to user failed while replacing table [ 1491.145887][T14244] netlink: 'syz.1.10187': attribute type 39 has an invalid length. [ 1491.208495][T14249] bridge2: entered promiscuous mode [ 1491.208536][T14249] bridge2: entered allmulticast mode [ 1491.468620][T14257] veth0: entered promiscuous mode [ 1491.469011][T14257] veth0: left promiscuous mode [ 1491.749741][T14276] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10196'. [ 1491.841535][T14283] netlink: 'syz.2.10198': attribute type 4 has an invalid length. [ 1491.990262][T14291] netlink: 52 bytes leftover after parsing attributes in process `syz.0.10200'. [ 1491.994601][T14291] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10200'. [ 1492.098327][T14299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10202'. [ 1492.289234][T14306] netlink: 'syz.0.10204': attribute type 10 has an invalid length. [ 1492.308916][T14306] netlink: 'syz.0.10204': attribute type 10 has an invalid length. [ 1492.531603][T14272] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1493.098059][T14353] bridge_slave_0 (unregistering): left allmulticast mode [ 1493.098088][T14353] bridge_slave_0 (unregistering): left promiscuous mode [ 1493.098167][T14353] bridge0: port 1(bridge_slave_0) entered disabled state [ 1493.175333][T14359] : renamed from bond_slave_1 (while UP) [ 1493.319693][T14365] syzkaller0: entered promiscuous mode [ 1493.319715][T14365] syzkaller0: entered allmulticast mode [ 1493.694024][T14388] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 1493.778816][T14395] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1494.174886][T14404] netlink: 'syz.6.10235': attribute type 11 has an invalid length. [ 1494.362944][T14413] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1495.403141][T14464] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1495.420551][T14464] validate_nla: 2 callbacks suppressed [ 1495.420568][T14464] netlink: 'syz.2.10254': attribute type 8 has an invalid length. [ 1495.473265][T14471] __nla_validate_parse: 23 callbacks suppressed [ 1495.473286][T14471] netlink: 80 bytes leftover after parsing attributes in process `syz.2.10254'. [ 1495.473309][T14471] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1495.487807][T14466] netlink: 'syz.2.10254': attribute type 8 has an invalid length. [ 1495.888336][T14492] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10261'. [ 1496.557853][T14537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10270'. [ 1496.600253][T14539] netlink: 56 bytes leftover after parsing attributes in process `syz.2.10269'. [ 1496.603656][T14539] openvswitch: netlink: Multiple metadata blocks provided [ 1496.807352][T14548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10274'. [ 1496.807377][T14548] netlink: 14 bytes leftover after parsing attributes in process `syz.1.10274'. [ 1496.878145][T14546] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10274'. [ 1496.878172][T14546] nbd: must specify at least one socket [ 1496.879662][T14546] netlink: 388 bytes leftover after parsing attributes in process `syz.1.10274'. [ 1497.580260][T14600] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10289'. [ 1497.674975][T14609] syzkaller1: entered promiscuous mode [ 1497.674998][T14609] syzkaller1: entered allmulticast mode [ 1497.884267][T14622] netlink: 'syz.1.10296': attribute type 1 has an invalid length. [ 1497.936551][T14615] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1498.014724][T14629] ip_tables: iptables: counters copy to user failed while replacing table [ 1498.019606][T14629] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10297'. [ 1498.078602][T14624] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1498.081228][T14624] bond2: (slave bond3): making interface the new active one [ 1498.081777][T14624] bond2: (slave bond3): Enslaving as an active interface with an up link [ 1498.124609][T14627] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 1498.560346][T14664] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1498.939410][T14681] xt_hashlimit: size too large, truncated to 1048576 [ 1498.997438][T14682] openvswitch: netlink: EtherType 520 is less than min 600 [ 1499.445783][T14705] tipc: Failed to remove unknown binding: 66,1,1/43690:3959478944/3959478946 [ 1499.465622][T14708] netlink: 'syz.5.10323': attribute type 1 has an invalid length. [ 1499.714164][T14723] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1499.894274][T14735] xt_ecn: cannot match TCP bits for non-tcp packets [ 1500.116846][T14752] xt_NFQUEUE: number of total queues is 0 [ 1500.546180][T14770] sctp: [Deprecated]: syz.0.10343 (pid 14770) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1500.546180][T14770] Use struct sctp_sack_info instead [ 1500.653168][T14783] __nla_validate_parse: 14 callbacks suppressed [ 1500.653189][T14783] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10348'. [ 1500.917720][T14792] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1500.946656][T14798] netlink: 'syz.5.10351': attribute type 1 has an invalid length. [ 1500.994440][T14805] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10354'. [ 1501.010956][T14798] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1501.067400][T14815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10355'. [ 1501.067856][T14815] xt_cgroup: path and classid specified [ 1501.097241][T14812] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10354'. [ 1501.317998][T14827] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10357'. [ 1501.340286][T14824] bridge_slave_1: left allmulticast mode [ 1501.340312][T14824] bridge_slave_1: left promiscuous mode [ 1501.340532][T14824] bridge0: port 2(bridge_slave_1) entered disabled state [ 1501.361485][T14824] bridge_slave_0: left allmulticast mode [ 1501.361511][T14824] bridge_slave_0: left promiscuous mode [ 1501.361728][T14824] bridge0: port 1(bridge_slave_0) entered disabled state [ 1501.443622][T14836] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10360'. [ 1501.557957][T14830] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10358'. [ 1501.699113][T14855] netlink: 'syz.5.10361': attribute type 1 has an invalid length. [ 1501.769164][T14854] xt_cgroup: no path or classid specified [ 1501.779198][T14855] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1502.562708][T14901] Cannot find map_set index 135 as target [ 1502.592195][T14888] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10371'. [ 1502.624739][T14904] netlink: 'syz.5.10374': attribute type 58 has an invalid length. [ 1502.624754][T14904] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10374'. [ 1502.734457][T14908] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 1503.503698][T14917] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10379'. [ 1503.849826][T14974] macvlan0: entered promiscuous mode [ 1504.127361][T15017] netlink: 'syz.1.10385': attribute type 12 has an invalid length. [ 1532.842701][T29602] Bluetooth: hci5: command 0x0406 tx timeout [ 1533.052725][T15115] netlink: 'syz.1.10400': attribute type 1 has an invalid length. [ 1533.094118][T15119] netlink: 'syz.6.10402': attribute type 1 has an invalid length. [ 1533.151156][T15125] __nla_validate_parse: 3 callbacks suppressed [ 1533.151177][T15125] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10402'. [ 1533.170410][T15117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10401'. [ 1533.291005][T15119] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1533.382375][T15115] bond4: (slave gretap2): making interface the new active one [ 1533.383334][T15115] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 1533.383609][T15116] syzkaller1: entered promiscuous mode [ 1533.383626][T15116] syzkaller1: entered allmulticast mode [ 1533.489615][T15134] netlink: 'syz.2.10404': attribute type 11 has an invalid length. [ 1533.705694][T15142] netlink: 100 bytes leftover after parsing attributes in process `syz.1.10405'. [ 1533.947645][T15150] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10408'. [ 1534.024237][T15156] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10410'. [ 1534.208029][T15161] ip_tables: iptables: counters copy to user failed while replacing table [ 1534.315400][T15167] netlink: 'syz.1.10411': attribute type 39 has an invalid length. [ 1534.539926][T15175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10416'. [ 1534.630406][T15181] netlink: 'syz.6.10418': attribute type 1 has an invalid length. [ 1534.699390][T15181] bond10: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1534.706828][T15187] tc_dump_action: action bad kind [ 1534.707289][T15187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10420'. [ 1534.710271][T15190] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10420'. [ 1534.713356][T15188] tc_dump_action: action bad kind [ 1534.744418][T15181] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10418'. [ 1534.748855][T15181] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1534.772604][T15186] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.10419'. [ 1534.772869][T15186] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 1534.807048][T15181] netlink: 'syz.6.10418': attribute type 1 has an invalid length. [ 1534.809051][T15186] 0ªX¹¦Dö»: entered allmulticast mode [ 1535.108527][T15201] xfrm1: entered allmulticast mode [ 1535.359044][T15226] bond11: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 1535.378560][T15226] bond11 (unregistering): Released all slaves [ 1535.784149][T15199] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1535.883757][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1535.885168][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1536.149554][ T8007] dvmrp0: left allmulticast mode [ 1536.149667][ T8007] dvmrp1: left allmulticast mode [ 1536.627284][ T8007] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 1537.153367][ T8007] bond7 (unregistering): (slave bridge6): Releasing active interface [ 1537.194793][ T8007]  (unregistering): (slave macvlan1): Releasing backup interface [ 1537.195287][ T8007] veth1_vlan: left allmulticast mode [ 1537.196249][ T8007]  (unregistering): Released all slaves [ 1537.200541][ T8007] bond1 (unregistering): Released all slaves [ 1537.230366][ T8007] bond2 (unregistering): Released all slaves [ 1537.261351][ T8007] bond0 (unregistering): Released all slaves [ 1537.276531][ T8007] bond3 (unregistering): Released all slaves [ 1537.289050][ T8007] bond4 (unregistering): Released all slaves [ 1537.308473][ T8007] bond5 (unregistering): (slave veth5): Releasing active interface [ 1537.311134][ T8007] bond5 (unregistering): Released all slaves [ 1537.335776][ T8007] bond6 (unregistering): Released all slaves [ 1537.350698][ T8007] bond7 (unregistering): Released all slaves [ 1537.371445][ T8007] bond8 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 1537.381459][ T8007] bond8 (unregistering): Released all slaves [ 1537.432462][T15275] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1537.497437][T15267] bond5 (unregistering): Released all slaves [ 1537.600110][ T8007] tipc: Disabling bearer [ 1537.608950][ T8007] tipc: Disabling bearer [ 1537.615972][ T8007] tipc: Left network mode [ 1537.983592][T15239] Bluetooth: hci3: command 0x0406 tx timeout [ 1537.984209][T15239] Bluetooth: hci4: command 0x0406 tx timeout [ 1538.010448][T15319] openvswitch: netlink: Key 24 has unexpected len 0 expected 4 [ 1538.039754][T15319] openvswitch: netlink: Key 24 has unexpected len 0 expected 4 [ 1538.599536][T15348] __nla_validate_parse: 11 callbacks suppressed [ 1538.599567][T15348] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10452'. [ 1539.050643][T15367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10457'. [ 1539.140502][T15368] syzkaller0: entered promiscuous mode [ 1539.140526][T15368] syzkaller0: entered allmulticast mode [ 1539.258797][ T8007] hsr_slave_0: left promiscuous mode [ 1539.269441][ T8007] hsr_slave_1: left promiscuous mode [ 1539.292543][ T8007] veth1_macvtap: left promiscuous mode [ 1539.292750][ T8007] veth0_macvtap: left promiscuous mode [ 1539.293034][ T8007] veth1_vlan: left promiscuous mode [ 1540.347746][ T8007] team0 (unregistering): Port device dummy0 removed [ 1540.753508][T15411] bridge1: entered promiscuous mode [ 1540.753572][T15411] bridge1: entered allmulticast mode [ 1541.158470][T15429] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 1541.197503][T15431] syzkaller1: entered promiscuous mode [ 1541.197528][T15431] syzkaller1: entered allmulticast mode [ 1541.366461][T15443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10471'. [ 1541.366608][T15443] xt_cgroup: path and classid specified [ 1541.394153][ T8007] IPVS: stop unused estimator thread 0... [ 1541.529829][T15449] netlink: 'syz.1.10473': attribute type 3 has an invalid length. [ 1541.688397][T15458] Bluetooth: hci0: invalid len left 17, exp >= 244 [ 1542.184588][T15478] netlink: 'syz.5.10480': attribute type 8 has an invalid length. [ 1542.193823][T15926] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1542.195007][ T8007] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1542.195046][ T8007] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1542.195077][ T8007] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1542.463112][T15482] netlink: 'syz.2.10482': attribute type 3 has an invalid length. [ 1543.070732][T15489] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10484'. [ 1543.892558][T15497] syzkaller0: entered promiscuous mode [ 1543.892608][T15497] syzkaller0: entered allmulticast mode [ 1544.024622][T15520] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10489'. [ 1544.451315][T15531] netlink: 'syz.6.10491': attribute type 1 has an invalid length. [ 1544.564934][T15531] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1545.698877][T15567] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10504'. [ 1546.127572][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1546.182580][T15577] xt_hashlimit: size too large, truncated to 1048576 [ 1548.054193][T15617] virt_wifi0 speed is unknown, defaulting to 1000 [ 1548.088029][T15617] lo speed is unknown, defaulting to 1000 [ 1548.126191][T15617] wlan1 speed is unknown, defaulting to 1000 [ 1548.166455][T15617] wg0 speed is unknown, defaulting to 1000 [ 1548.965645][T15640] ip_tables: iptables: counters copy to user failed while replacing table [ 1550.728634][T15679] lo: entered promiscuous mode [ 1550.841059][T15679] tunl0: entered promiscuous mode [ 1550.870741][T15679] gre0: entered promiscuous mode [ 1550.884119][T15679] gretap0: entered promiscuous mode [ 1550.885005][T15679] erspan0: entered promiscuous mode [ 1550.888925][T15679] ip_vti0: entered promiscuous mode [ 1550.889726][T15679] ip6_vti0: entered promiscuous mode [ 1550.919722][T15679] sit0: entered promiscuous mode [ 1550.929735][T15679] ip6tnl0: entered promiscuous mode [ 1550.947262][T15679] ip6gre0: entered promiscuous mode [ 1550.948175][T15679] syz_tun: entered promiscuous mode [ 1550.950113][T15679] ip6gretap0: entered promiscuous mode [ 1550.950841][T15679] bridge0: entered promiscuous mode [ 1550.976556][T14956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1550.987416][T15679] vcan0: entered promiscuous mode [ 1550.989957][T15679] bond0: entered promiscuous mode [ 1550.989977][T15679] bond_slave_0: entered promiscuous mode [ 1550.990186][T15679] bond_slave_1: entered promiscuous mode [ 1551.042543][T15679] team0: entered promiscuous mode [ 1551.042568][T15679] team_slave_0: entered promiscuous mode [ 1551.165942][T15679] team_slave_1: entered promiscuous mode [ 1551.187202][T15679] 8021q: adding VLAN 0 to HW filter on device team0 [ 1551.211648][T15679] nlmon0: entered promiscuous mode [ 1551.223283][T15679] batadv0: entered promiscuous mode [ 1551.229342][T15679] vxcan0: entered promiscuous mode [ 1551.264527][T15679] vxcan1: entered promiscuous mode [ 1551.265397][T15679] veth0: entered promiscuous mode [ 1551.268885][T15679] veth1: entered promiscuous mode [ 1551.269837][T15679] wg0: entered promiscuous mode [ 1551.273769][T15679] wg1: entered promiscuous mode [ 1551.293811][T15679] wg2: entered promiscuous mode [ 1551.296896][T15679] veth0_to_bridge: entered promiscuous mode [ 1551.328673][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1551.430456][T15679] veth1_to_bridge: entered promiscuous mode [ 1551.451312][T15679] veth0_to_bond: entered promiscuous mode [ 1551.473022][T30043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1551.480176][T15679] veth1_to_bond: entered promiscuous mode [ 1551.508975][T15679] veth0_to_team: entered promiscuous mode [ 1551.546253][T15679] veth1_to_team: entered promiscuous mode [ 1551.606156][T15679] veth0_to_batadv: entered promiscuous mode [ 1551.609373][T15679] batadv_slave_0: entered promiscuous mode [ 1551.647393][T15679] veth1_to_batadv: entered promiscuous mode [ 1551.679604][T15679] batadv_slave_1: entered promiscuous mode [ 1551.680949][T15679] xfrm0: entered promiscuous mode [ 1551.715836][T15679] veth0_to_hsr: entered promiscuous mode [ 1551.734296][T30043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1551.759579][T15679] veth1_to_hsr: entered promiscuous mode [ 1551.781659][T15679] hsr0: entered promiscuous mode [ 1551.826691][T15679] veth1_virt_wifi: entered promiscuous mode [ 1551.847559][T15679] veth0_virt_wifi: entered promiscuous mode [ 1551.851200][T15679] virt_wifi0: entered promiscuous mode [ 1551.894723][T30043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1551.900308][T15679] vlan0: entered promiscuous mode [ 1551.929803][T15679] vlan1: entered promiscuous mode [ 1551.957763][T15679] macvlan0: entered promiscuous mode [ 1551.958739][T15679] macvlan1: entered promiscuous mode [ 1551.980083][T15679] ipvlan0: entered promiscuous mode [ 1551.997508][T15679] ipvlan1: entered promiscuous mode [ 1552.038807][T15679] macvtap0: entered promiscuous mode [ 1552.041762][T15679] macsec0: entered promiscuous mode [ 1552.088887][T15679] geneve0: entered promiscuous mode [ 1552.089723][T15679] geneve1: entered promiscuous mode [ 1552.119553][T15679] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1552.120693][T15679] netdevsim netdevsim5 netdevsim1: entered promiscuous mode [ 1552.151666][T15679] netdevsim netdevsim5 netdevsim2: entered promiscuous mode [ 1552.186326][T15679] netdevsim netdevsim5 netdevsim3: entered promiscuous mode [ 1552.187528][T15679] mac80211_hwsim hwsim79 wlan0: entered promiscuous mode [ 1552.218891][T15679] mac80211_hwsim hwsim80 wlan1: entered promiscuous mode [ 1552.236046][T15679] gretap1: entered promiscuous mode [ 1552.236073][T15679] gretap1: left allmulticast mode [ 1552.236969][T15679] bond1: entered promiscuous mode [ 1552.265156][T15679] vxlan0: entered promiscuous mode [ 1552.280366][T15679] sit1: entered promiscuous mode [ 1552.284641][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1552.316224][T15679] ip6gre1: entered promiscuous mode [ 1552.331708][T15679] veth2: entered promiscuous mode [ 1552.355655][T15679] veth3: entered promiscuous mode [ 1552.356376][T15679] bond2: entered promiscuous mode [ 1552.388631][T15679] bond3: entered promiscuous mode [ 1552.406740][T15679] ip6tnl1: entered promiscuous mode [ 1552.428930][T15679] vxlan1: entered promiscuous mode [ 1552.428958][T15679] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 1553.598212][T15727] netlink: 36 bytes leftover after parsing attributes in process `syz.5.10563'. [ 1553.598242][T15727] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10563'. [ 1554.655800][T15745] netlink: 32 bytes leftover after parsing attributes in process `syz.6.10572'. [ 1554.787701][T15749] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10573'. [ 1554.877444][T15751] netlink: 'syz.1.10575': attribute type 15 has an invalid length. [ 1554.877471][T15751] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10575'. [ 1554.906200][T15754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10576'. [ 1555.375479][T15765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10580'. [ 1557.653847][T15808] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10600'. [ 1557.728549][T15808] bridge0: port 2(bridge_slave_1) entered disabled state [ 1558.216320][T15814] virt_wifi0 speed is unknown, defaulting to 1000 [ 1558.248307][T15814] lo speed is unknown, defaulting to 1000 [ 1558.345278][T15814] wlan1 speed is unknown, defaulting to 1000 [ 1558.347284][T15814] wg0 speed is unknown, defaulting to 1000 [ 1559.176307][T22864] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1559.181208][T22864] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1559.204895][T22864] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1559.207617][T22864] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1559.210037][T22864] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1560.305985][ T4080] syz_tun (unregistering): left allmulticast mode [ 1561.323608][T22864] Bluetooth: hci2: command tx timeout [ 1561.954850][T15826] virt_wifi0 speed is unknown, defaulting to 1000 [ 1561.985961][T15826] lo speed is unknown, defaulting to 1000 [ 1562.006450][T15826] wlan1 speed is unknown, defaulting to 1000 [ 1562.028633][T15826] wg0 speed is unknown, defaulting to 1000 [ 1563.402939][T22864] Bluetooth: hci2: command tx timeout [ 1563.995489][T15826] bridge0: port 1(bridge_slave_0) entered blocking state [ 1563.995610][T15826] bridge0: port 1(bridge_slave_0) entered disabled state [ 1563.995804][T15826] bridge_slave_0: entered allmulticast mode [ 1564.029464][T15826] bridge_slave_0: entered promiscuous mode [ 1564.065164][T15826] bridge0: port 2(bridge_slave_1) entered blocking state [ 1564.065274][T15826] bridge0: port 2(bridge_slave_1) entered disabled state [ 1564.065721][T15826] bridge_slave_1: entered allmulticast mode [ 1564.071033][T15826] bridge_slave_1: entered promiscuous mode [ 1564.446402][T15826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1564.489690][T15826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1564.787731][T15826] team0: Port device team_slave_0 added [ 1564.819346][T15826] team0: Port device team_slave_1 added [ 1565.057684][T15907] netlink: 'syz.1.10633': attribute type 10 has an invalid length. [ 1565.078026][T15826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1565.078044][T15826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1565.078070][T15826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1565.139275][T15904] bond0: left promiscuous mode [ 1565.141081][T15826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1565.141096][T15826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1565.141129][T15826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1565.482845][T29602] Bluetooth: hci2: command tx timeout [ 1565.736773][T15826] hsr_slave_0: entered promiscuous mode [ 1565.737895][T15826] hsr_slave_1: entered promiscuous mode [ 1565.766388][T15826] debugfs: 'hsr0' already exists in 'hsr' [ 1565.766410][T15826] Cannot create hsr debugfs directory [ 1566.087693][T15916] sctp: [Deprecated]: syz.5.10634 (pid 15916) Use of int in max_burst socket option. [ 1566.087693][T15916] Use struct sctp_assoc_value instead [ 1566.276686][T15916] vlan2: entered allmulticast mode [ 1566.276712][T15916] bond0: entered allmulticast mode [ 1566.276726][T15916] bond_slave_0: entered allmulticast mode [ 1566.276744][T15916] bond_slave_1: entered allmulticast mode [ 1566.423708][T15927] xt_LOG: level 8 >= 8 [ 1566.805721][T15931] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1567.567234][T29602] Bluetooth: hci2: command tx timeout [ 1567.847270][T15826] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1567.847309][T15826] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1568.432674][T15957] tipc: Enabled bearer , priority 17 [ 1568.843985][T15969] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10643'. [ 1568.844053][T15826] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1568.844086][T15826] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1568.895672][T15962] syzkaller1: entered promiscuous mode [ 1568.895697][T15962] syzkaller1: entered allmulticast mode [ 1568.901254][T15968] syzkaller1: left promiscuous mode [ 1568.901438][T15968] syzkaller1: left allmulticast mode [ 1569.189016][T15981] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10648'. [ 1569.189040][T15981] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10648'. [ 1569.252576][T15826] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1569.252612][T15826] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1569.315634][T15978] netlink: 72 bytes leftover after parsing attributes in process `syz.5.10648'. [ 1569.315663][T15978] netlink: 72 bytes leftover after parsing attributes in process `syz.5.10648'. [ 1569.825486][T15989] sctp: [Deprecated]: syz.5.10650 (pid 15989) Use of int in max_burst socket option. [ 1569.825486][T15989] Use struct sctp_assoc_value instead [ 1569.999065][T15826] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1569.999103][T15826] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1571.335771][T16015] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 1571.862269][T15826] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1571.919213][T15826] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1571.945122][T15826] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1571.996945][T15826] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1572.017863][T15826] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1572.150527][T15826] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1572.172337][T15826] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1572.220944][T15826] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1572.256777][T16042] bridge0: entered allmulticast mode [ 1573.137950][T16057] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10665'. [ 1573.169208][T16058] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10665'. [ 1573.187331][T16056] tipc: Resetting bearer [ 1573.330482][T16066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10665'. [ 1573.348788][T16067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10665'. [ 1573.594212][T16056] bridge0: port 3(dummy0) entered disabled state [ 1573.594472][T16056] bridge0: port 1(bridge_slave_0) entered disabled state [ 1574.164285][T16056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1574.176347][T16056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1575.031599][T16059] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10666'. [ 1575.043385][T21037] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1575.043430][T21037] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1575.043472][T21037] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1575.043496][T21037] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1575.043531][T21037] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1575.043569][T21037] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1575.043603][T21037] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1575.043627][T21037] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1575.306277][T15826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1575.440963][T15826] 8021q: adding VLAN 0 to HW filter on device team0 [ 1575.527479][T21037] bridge0: port 1(bridge_slave_0) entered blocking state [ 1575.527593][T21037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1575.771346][ T8007] bridge0: port 2(bridge_slave_1) entered blocking state [ 1575.771458][ T8007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1576.068301][ T8006] IPVS: starting estimator thread 0... [ 1576.069974][T16083] netlink: 72 bytes leftover after parsing attributes in process `syz.1.10669'. [ 1576.095729][T16074] netlink: 72 bytes leftover after parsing attributes in process `syz.1.10669'. [ 1576.152785][T16086] IPVS: using max 26 ests per chain, 62400 per kthread [ 1576.169219][T15826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1577.103501][T16095] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10673'. [ 1577.171159][T16103] macvtap0: entered allmulticast mode [ 1577.171181][T16103] veth0_macvtap: entered allmulticast mode [ 1577.991480][T16118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10678'. [ 1578.149922][T16118] bond4: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 1578.198555][T16118] bond4 (unregistering): Released all slaves [ 1579.231850][T16149] netlink: 408 bytes leftover after parsing attributes in process `syz.5.10686'. [ 1579.308285][T16153] netlink: 32 bytes leftover after parsing attributes in process `syz.5.10686'. [ 1579.345586][T15826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1579.533939][T16152] x_tables: duplicate underflow at hook 1 [ 1579.821357][T16160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10689'. [ 1580.878819][T16187] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1581.245627][T16192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10697'. [ 1581.421437][T15826] veth0_vlan: entered promiscuous mode [ 1581.492852][T15826] veth1_vlan: entered promiscuous mode [ 1581.550900][T26107] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1581.550936][T26107] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1581.550966][T26107] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 1581.829368][T16201] xt_limit: Overflow, try lower: 536871034/127 [ 1582.135128][T15826] veth0_macvtap: entered promiscuous mode [ 1582.198726][T15826] veth1_macvtap: entered promiscuous mode [ 1582.610373][T15826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1582.679490][T15826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1582.707187][T16205] syzkaller1: entered promiscuous mode [ 1582.707211][T16205] syzkaller1: entered allmulticast mode [ 1582.902633][ T7211] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1582.902697][ T7211] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1582.902734][ T7211] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1582.945735][T17251] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1583.350600][T16230] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10708'. [ 1583.350622][T16230] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10708'. [ 1583.350646][T16230] netlink: 'syz.5.10708': attribute type 15 has an invalid length. [ 1583.669351][T16230] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10708'. [ 1583.669376][T16230] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10708'. [ 1583.669401][T16230] netlink: 'syz.5.10708': attribute type 15 has an invalid length. [ 1583.699625][ T6809] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 1583.763581][ T6809] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 1583.763631][ T6809] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 1583.763667][ T6809] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 1583.816182][T26107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1583.816206][T26107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1583.903194][T16240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10709'. [ 1583.903389][T16240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10709'. [ 1583.903567][T16240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10709'. [ 1583.903735][T16240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10709'. [ 1583.903921][T16240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10709'. [ 1584.051358][T16228] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1584.480173][T17251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1584.480197][T17251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1586.139596][ T5296] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1586.255889][T16310] Bluetooth: MGMT ver 1.23 [ 1586.259534][T16310] __nla_validate_parse: 66 callbacks suppressed [ 1586.259554][T16310] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10722'. [ 1586.288168][T16310] netlink: 96 bytes leftover after parsing attributes in process `syz.0.10722'. [ 1587.115607][T16343] netlink: 'syz.2.10726': attribute type 24 has an invalid length. [ 1587.533934][T16346] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10727'. [ 1588.282753][T29602] Bluetooth: hci3: Opcode 0x1407 failed: -110 [ 1588.283840][T29602] Bluetooth: hci3: command 0x0406 tx timeout [ 1588.990782][T16353] wireguard0: entered promiscuous mode [ 1589.317009][T16376] netlink: 'syz.5.10734': attribute type 2 has an invalid length. [ 1589.742204][T16391] bond0: option miimon: invalid value (18446744071829782528) [ 1589.742231][T16391] bond0: option miimon: allowed values 0 - 2147483647 [ 1590.957258][T16426] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10745'. [ 1590.957280][T16426] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10745'. [ 1591.019108][T16433] netlink: 'syz.5.10745': attribute type 4 has an invalid length. [ 1591.019131][T16433] netlink: 152 bytes leftover after parsing attributes in process `syz.5.10745'. [ 1591.076136][T16423] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1591.092041][T16426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1591.129544][T16426] bond9: (slave bond0): making interface the new active one [ 1591.146814][T16426] bond9: (slave bond0): Enslaving as an active interface with an up link [ 1591.183358][T16433] .`: renamed from bond0 (while UP) [ 1591.899168][ T4555] bond9: (slave .`): link status definitely down, disabling slave [ 1591.948271][ T4555] bond9: now running without any active interface! [ 1592.070074][T16456] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10753'. [ 1592.103130][T16456] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10753'. [ 1592.227519][T16461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10754'. [ 1592.777882][T16475] syzkaller0: entered promiscuous mode [ 1592.777905][T16475] syzkaller0: entered allmulticast mode [ 1593.341773][T16491] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1593.568173][T16498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10761'. [ 1593.719919][T16493] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1593.816594][T16499] netlink: 272 bytes leftover after parsing attributes in process `syz.2.10761'. [ 1593.891337][T16505] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1593.891693][T16505] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1593.946367][T16506] netlink: 44 bytes leftover after parsing attributes in process `syz.5.10763'. [ 1593.946395][T16506] netlink: 43 bytes leftover after parsing attributes in process `syz.5.10763'. [ 1593.946424][T16506] netlink: 'syz.5.10763': attribute type 5 has an invalid length. [ 1593.946437][T16506] netlink: 43 bytes leftover after parsing attributes in process `syz.5.10763'. [ 1593.979455][T16505] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1593.979806][T16505] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1593.980179][T16505] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1593.980518][T16505] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1594.057814][T16505] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1594.058230][T16505] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1594.058575][T16505] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1594.058908][T16505] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1594.153671][T16506] netlink: 60 bytes leftover after parsing attributes in process `syz.5.10763'. [ 1595.460992][T16537] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10769'. [ 1595.461021][T16537] block nbd532: Unsupported socket: should be TCP or UNIX. [ 1596.073922][T16549] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1596.955089][T16571] pim6reg: entered allmulticast mode [ 1596.983412][T16573] gretap2: entered promiscuous mode [ 1596.984188][T16573] batman_adv: batadv0: Adding interface: gretap2 [ 1596.984202][T16573] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1596.984230][T16573] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 1597.683389][T22864] Bluetooth: hci2: unexpected event 0x0f length: 0 < 4 [ 1598.047772][T16598] vlan3: entered promiscuous mode [ 1598.047944][T16598] vlan3: entered allmulticast mode [ 1598.199932][T16604] __nla_validate_parse: 1 callbacks suppressed [ 1598.199957][T16604] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10790'. [ 1598.228720][T16604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10790'. [ 1598.488744][T16604] bond0: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 1598.508608][T16604] bond0 (unregistering): Released all slaves [ 1598.551040][T16601] netlink: 'syz.1.10789': attribute type 8 has an invalid length. [ 1598.551175][T16601] sch_fq: defrate 0 ignored. [ 1599.542978][T16630] netlink: 64 bytes leftover after parsing attributes in process `syz.2.10795'. [ 1600.071830][T16638] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10799'. [ 1600.071868][T16638] netlink: 'syz.5.10799': attribute type 7 has an invalid length. [ 1600.072537][T16638] netlink: 'syz.5.10799': attribute type 8 has an invalid length. [ 1600.072551][T16638] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10799'. [ 1600.276319][T16638] hsr1: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 1600.276346][T16638] hsr1: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 1600.276364][T16638] hsr1: Interlink (gretap0) is not up; please bring it up to get a fully working HSR network [ 1600.455969][T16645] net_ratelimit: 24 callbacks suppressed [ 1600.455992][T16645] ip_tables: iptables: counters copy to user failed while replacing table [ 1600.515113][T16650] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10801'. [ 1601.026275][T16660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10805'. [ 1601.115557][T16664] ip_tables: iptables: counters copy to user failed while replacing table [ 1601.776201][T16650] ip_tables: iptables: counters copy to user failed while replacing table [ 1602.450882][T16695] netlink: 'syz.5.10812': attribute type 1 has an invalid length. [ 1602.557682][T16696] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10812'. [ 1604.010069][T16729] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10818'. [ 1606.232640][T16732] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10816'. [ 1624.852816][ C0] sched: DL replenish lagged too much [ 1637.318735][T16782] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10828'. [ 1660.850681][T29602] Bluetooth: hci1: command 0x0406 tx timeout [ 1665.602524][T29602] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1666.373307][T29602] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1666.379737][T29602] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1666.563128][T29602] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1666.582254][T29602] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1668.922452][T22864] Bluetooth: hci0: command tx timeout [ 1671.013783][T22864] Bluetooth: hci0: command tx timeout [ 1673.083610][T22864] Bluetooth: hci0: command tx timeout [ 1675.162509][T22864] Bluetooth: hci0: command tx timeout [ 1677.440337][T29602] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1677.652941][T29602] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1677.713091][T29602] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1677.715141][T29602] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1677.716531][T29602] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1679.812617][T22864] Bluetooth: hci6: command tx timeout [ 1681.954130][T22864] Bluetooth: hci6: command tx timeout [ 1683.962943][T22864] Bluetooth: hci6: command tx timeout [ 1686.043121][T29602] Bluetooth: hci6: command tx timeout [ 1686.454248][T29602] Bluetooth: hci2: command 0x0406 tx timeout [ 1699.147679][T29602] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1699.218437][T29602] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1699.229497][T29602] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1699.291410][T29602] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1699.373014][T29602] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1701.491611][T22864] Bluetooth: hci7: command tx timeout [ 1703.573532][T22864] Bluetooth: hci7: command tx timeout [ 1705.643305][T22864] Bluetooth: hci7: command tx timeout [ 1707.723315][T22864] Bluetooth: hci7: command tx timeout [ 1716.053752][T29602] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1716.060226][T29602] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1716.103003][T29602] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1716.106611][T29602] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1716.178784][T29602] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1718.590171][T15238] Bluetooth: hci1: command tx timeout [ 1720.602408][T15238] Bluetooth: hci1: command tx timeout [ 1722.683173][T15238] Bluetooth: hci1: command tx timeout [ 1724.762503][T15238] Bluetooth: hci1: command tx timeout [ 1728.835758][T22864] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1728.840029][T22864] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1728.866433][T22864] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1728.945592][T22864] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1728.994253][T22864] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1731.292981][T22864] Bluetooth: hci4: command tx timeout [ 1733.342122][T22864] Bluetooth: hci4: command tx timeout [ 1735.403408][T22864] Bluetooth: hci4: command tx timeout [ 1737.491908][T22864] Bluetooth: hci4: command tx timeout [ 1738.651167][T15238] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1738.662072][T15238] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1738.675976][T15238] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1738.925499][T15238] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1740.054498][T15238] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1743.482472][T22864] Bluetooth: hci8: command tx timeout [ 1745.562359][T22864] Bluetooth: hci8: command tx timeout [ 1747.743247][T22864] Bluetooth: hci8: command tx timeout [ 1750.092370][T15238] Bluetooth: hci8: command tx timeout [ 1757.163768][T22864] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1757.273895][T22864] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1757.276291][T22864] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1757.280909][T22864] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1757.305816][T22864] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1759.722496][T15238] Bluetooth: hci9: command tx timeout [ 1761.804010][T15238] Bluetooth: hci9: command tx timeout [ 1763.883759][T15238] Bluetooth: hci9: command tx timeout [ 1766.003204][T15238] Bluetooth: hci9: command tx timeout [ 1779.094169][T22864] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1779.333532][T22864] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1779.336843][T22864] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1779.338820][T22864] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1779.340202][T22864] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1781.555700][T22864] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1781.651032][T22864] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1781.673162][T22864] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1781.675717][T22864] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1781.677450][T22864] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1781.883301][T15238] Bluetooth: hci10: command tx timeout [ 1783.961989][T22864] Bluetooth: hci10: command tx timeout [ 1784.132957][T22864] Bluetooth: hci11: command tx timeout [ 1785.483263][ T32] INFO: task syz.5.10828:16768 blocked for more than 143 seconds. [ 1785.483292][ T32] Not tainted syzkaller #0 [ 1785.483302][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1785.483311][ T32] task:syz.5.10828 state:D stack:25608 pid:16768 tgid:16768 ppid:10316 task_flags:0x400040 flags:0x00080002 [ 1785.483367][ T32] Call Trace: [ 1785.483374][ T32] [ 1785.483389][ T32] __schedule+0x17dd/0x5830 [ 1785.483451][ T32] ? __pfx___schedule+0x10/0x10 [ 1785.483491][ T32] ? schedule+0x90/0x2b0 [ 1785.483516][ T32] schedule+0x164/0x2b0 [ 1785.483539][ T32] schedule_preempt_disabled+0x13/0x30 [ 1785.483560][ T32] __mutex_lock+0x7c4/0x15a0 [ 1785.483587][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 1785.483797][ T32] ? tun_chr_close+0x3e/0x1c0 [ 1785.483825][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1785.483867][ T32] ? __pfx_tun_chr_close+0x10/0x10 [ 1785.483901][ T32] tun_chr_close+0x3e/0x1c0 [ 1785.483922][ T32] ? __pfx_tun_chr_close+0x10/0x10 [ 1785.483943][ T32] __fput+0x408/0xa40 [ 1785.483975][ T32] fput_close_sync+0x11f/0x240 [ 1785.483996][ T32] ? __pfx_fput_close_sync+0x10/0x10 [ 1785.484024][ T32] filp_close_sync+0x6e/0xa0 [ 1785.484050][ T32] __se_sys_close_range+0xa77/0xef0 [ 1785.484087][ T32] ? __pfx___se_sys_close_range+0x10/0x10 [ 1785.484120][ T32] do_syscall_64+0x166/0x520 [ 1785.484145][ T32] ? trace_irq_disable+0x3b/0x140 [ 1785.484173][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1785.484195][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1785.484220][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1785.484241][ T32] RIP: 0033:0x7f87fbd9fb19 [ 1785.484259][ T32] RSP: 002b:00007ffd679f8508 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1785.484281][ T32] RAX: ffffffffffffffda RBX: 00007f87fc027da0 RCX: 00007f87fbd9fb19 [ 1785.484296][ T32] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1785.484309][ T32] RBP: 00007f87fc027da0 R08: 0000000000000006 R09: 0000000000000000 [ 1785.484322][ T32] R10: 00007f87fc027cb0 R11: 0000000000000246 R12: 000000000018fc05 [ 1785.484336][ T32] R13: 00007f87fc02627c R14: 000000000018fb6e R15: 00007ffd679f8610 [ 1785.484371][ T32] [ 1785.484406][ T32] [ 1785.484406][ T32] Showing all locks held in the system: [ 1785.484417][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 1785.484433][ T32] #0: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1785.484518][ T32] locks held by kworker/u8:4/62: 3, last CPU#0: [ 1785.484532][ T32] #0: ffff8880374b1948 ((wq_completion)krds_cp_wq#26/6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1785.484597][ T32] #1: ffffc9000203fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1785.484830][ T32] #2: ffff88803206a780 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1785.484992][ T32] locks held by kworker/u8:9/3366: 4, last CPU#1: [ 1785.485007][ T32] #0: ffff888033e5c148 ((wq_completion)krds_cp_wq#26/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1785.485058][ T32] #1: ffffc9000e00fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1785.485108][ T32] #2: ffff88803206b980 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1785.485154][ T32] #3: ffff88803ef20260 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 1785.485257][ T32] locks held by getty/5385: 2, on CPU#0: [ 1785.485271][ T32] #0: ffff888036a8d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1785.485363][ T32] #1: ffffc900032362e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1785.485407][ T32] locks held by kworker/1:7/5766: 3, on CPU#1: [ 1785.485420][ T32] #0: ffff88813fe0ed48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1785.485471][ T32] #1: ffffc90004e17c40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1785.485532][ T32] #2: ffffffff91693720 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 1785.485805][ T32] locks held by kworker/u8:10/6809: 3, last CPU#1: [ 1785.485818][ T32] #0: ffff888033e5d148 ((wq_completion)krds_cp_wq#26/2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1785.485867][ T32] #1: ffffc9000d2dfc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1785.485912][ T32] #2: ffff88803206b380 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1785.485962][ T32] locks held by kworker/u8:19/15930: 2, on CPU#1: [ 1785.485984][ T32] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1785.486032][ T32] #1: ffffc9000faefc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1785.486086][ T32] locks held by kworker/u8:23/17251: 3, last CPU#1: [ 1785.486104][ T32] #0: ffff888033e59148 ((wq_completion)krds_cp_wq#26/1){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1785.486155][ T32] #1: ffffc9000db87c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1785.486205][ T32] #2: ffff88803206b680 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1785.486254][ T32] locks held by kworker/u8:24/17819: 3, last CPU#1: [ 1785.486269][ T32] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1785.486320][ T32] #1: ffffc90004cd7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1785.486372][ T32] #2: ffff88807c5c2258 (&devlink->lock_key#20){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 1785.486579][ T32] locks held by kworker/u8:26/26104: 4, last CPU#1: [ 1785.486593][ T32] #0: ffff8880691f1948 ((wq_completion)krds_cp_wq#17/0#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1785.486841][ T32] #1: ffffc90003d8fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1785.486894][ T32] #2: ffff888055a6f680 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1785.486942][ T32] #3: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: __inet_dev_addr_type+0x159/0x560 [ 1785.487034][ T32] locks held by kworker/u8:27/26105: 4, on CPU#0: [ 1785.487048][ T32] #0: ffff88801d28e148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1785.487101][ T32] #1: ffffc900039bfc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1785.487153][ T32] #2: ffffffff91684a48 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 1785.487230][ T32] #3: ffffffff91693720 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x28e/0x8f0 [ 1785.487275][ T32] locks held by kworker/u8:28/26106: 4, last CPU#1: [ 1785.487289][ T32] #0: ffff8880374b2948 ((wq_completion)krds_cp_wq#26/4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1785.487342][ T32] #1: ffffc9000397fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1785.487395][ T32] #2: ffff88803206ad80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1785.487443][ T32] #3: ffff88807e3a1de0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 1785.487497][ T32] locks held by kworker/u8:29/26107: 3, last CPU#1: [ 1785.487512][ T32] #0: ffff88807d545948 ((wq_completion)krds_cp_wq#26/3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1785.487564][ T32] #1: ffffc9000396fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1785.487809][ T32] #2: ffff88803206b080 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1785.487873][ T32] locks held by kworker/u8:1/32668: 3, last CPU#1: [ 1785.487887][ T32] #0: ffff88802c0d9948 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1785.487939][ T32] #1: ffffc9000471fc40 ((work_completion)(&(&bat_priv->bla.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1785.487989][ T32] #2: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: batadv_bla_periodic_work+0x336/0xb40 [ 1785.488106][ T32] locks held by kworker/u8:3/4554: 2, last CPU#0: [ 1785.488120][ T32] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1785.488173][ T32] #1: ffffc9000502fc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1785.488227][ T32] locks held by kworker/u8:7/4557: 3, last CPU#1: [ 1785.488240][ T32] #0: ffff8880374b1148 ((wq_completion)krds_cp_wq#26/7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1785.488293][ T32] #1: ffffc90005a67c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1785.488345][ T32] #2: ffff88803206a480 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1785.488393][ T32] locks held by kworker/u8:11/4559: 3, last CPU#1: [ 1785.488406][ T32] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1785.488457][ T32] #1: ffffc9000498fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1785.488522][ T32] #2: ffff88806a749258 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 1785.488574][ T32] locks held by kworker/u8:12/4560: 3, on CPU#1: [ 1785.488587][ T32] #0: ffff88801ebc3148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1785.488838][ T32] #1: ffffc90004d67c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1785.488884][ T32] #2: ffffffff91693720 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 [ 1785.488967][ T32] locks held by kworker/u8:21/8007: 3, last CPU#0: [ 1785.488980][ T32] #0: ffff8880374b2148 ((wq_completion)krds_cp_wq#26/5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1785.489027][ T32] #1: ffffc9000687fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1785.489074][ T32] #2: ffff88803206aa80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1785.489125][ T32] locks held by syz-executor/10672: 1, on CPU#1: [ 1785.489139][ T32] #0: ffffffff91693720 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1785.489187][ T32] locks held by syz-executor/10957: 1, on CPU#0: [ 1785.489201][ T32] #0: ffffffff91693720 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1785.489253][ T32] locks held by kworker/u8:22/16108: 3, last CPU#0: [ 1785.489267][ T32] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1785.489320][ T32] #1: ffffc9000482fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1785.489373][ T32] #2: ffff888027703258 (&devlink->lock_key#22){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 1785.489426][ T32] locks held by kworker/u8:30/16109: 3, last CPU#1: [ 1785.489440][ T32] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1785.489503][ T32] #1: ffffc900035cfc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1785.489556][ T32] #2: ffff88802b9d5258 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 1785.489610][ T32] locks held by kworker/u8:31/16110: 2, on CPU#0: [ 1785.489818][ T32] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1785.489872][ T32] #1: ffffc90005b2fc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1785.489926][ T32] locks held by syz.5.10828/16768: 1, on CPU#0: [ 1785.489939][ T32] #0: ffffffff91693720 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1785.489986][ T32] locks held by syz.5.10828/16782: 1, last CPU#1: [ 1785.489999][ T32] #0: ffffffff91693720 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x419/0x810 [ 1785.490046][ T32] locks held by syz-executor/16826: 1, on CPU#1: [ 1785.490060][ T32] #0: ffffffff91693720 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1785.490139][ T32] locks held by syz.2.10840/16836: 1, on CPU#1: [ 1785.490154][ T32] #0: ffffffff91693720 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1785.490201][ T32] locks held by syz-executor/16839: 1, on CPU#0: [ 1785.490214][ T32] #0: ffffffff91693720 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1785.490256][ T32] locks held by syz.6.10844/16850: 2, on CPU#0: [ 1785.490270][ T32] #0: ffffffff91be2eb8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1785.490330][ T32] #1: ffffffff91693720 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc1d/0x1c30 [ 1785.490376][ T32] locks held by syz-executor/16855: 1, on CPU#1: [ 1785.490390][ T32] #0: ffffffff91693720 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1785.490434][ T32] locks held by syz-executor/16874: 1, on CPU#1: [ 1785.490448][ T32] #0: ffffffff91693720 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1785.490499][ T32] locks held by syz-executor/16887: 1, on CPU#0: [ 1785.490513][ T32] #0: ffffffff91693720 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1785.490557][ T32] locks held by syz-executor/16897: 1, on CPU#1: [ 1785.490571][ T32] #0: ffffffff91693720 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1785.490616][ T32] locks held by syz.0.10851/16907: 1, on CPU#0: [ 1785.490823][ T32] #0: ffffffff91693720 (rtnl_mutex){+.+.}-{4:4}, at: ip_mroute_setsockopt+0x137/0x10d0 [ 1785.490908][ T32] locks held by syz-executor/16911: 1, on CPU#0: [ 1785.490922][ T32] #0: ffffffff91693720 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1785.490969][ T32] locks held by syz-executor/16920: 1, last CPU#1: [ 1785.490982][ T32] #0: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1785.491046][ T32] locks held by dhcpcd/16927: 1, last CPU#1: [ 1785.491059][ T32] #0: ffff888076ff69c0 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 1785.491149][ T32] locks held by modprobe/16929: 2, last CPU#1: [ 1785.491163][ T32] #0: ffff88805802d6c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 1785.491208][ T32] #1: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1785.491258][ T32] locks held by dhcpcd/16930: 1, last CPU#1: [ 1785.491272][ T32] #0: ffff8880334d8260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe90 [ 1785.491387][ T32] [ 1785.491393][ T32] ============================================= [ 1785.491393][ T32] [ 1785.491409][ T32] NMI backtrace for cpu 0 [ 1785.491424][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1785.491445][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1785.491457][ T32] Call Trace: [ 1785.491465][ T32] [ 1785.491474][ T32] dump_stack_lvl+0xe8/0x150 [ 1785.491513][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 1785.491562][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1785.491586][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1785.491609][ T32] sys_info+0x135/0x170 [ 1785.491629][ T32] watchdog+0x1073/0x10f0 [ 1785.491669][ T32] ? watchdog+0x209/0x10f0 [ 1785.491700][ T32] kthread+0x38b/0x480 [ 1785.491723][ T32] ? __pfx_watchdog+0x10/0x10 [ 1785.491745][ T32] ? __pfx_kthread+0x10/0x10 [ 1785.491768][ T32] ret_from_fork+0x514/0xb70 [ 1785.491804][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1785.491825][ T32] ? __switch_to+0xc78/0x1410 [ 1785.491857][ T32] ? __pfx_kthread+0x10/0x10 [ 1785.491881][ T32] ret_from_fork_asm+0x1a/0x30 [ 1785.491919][ T32] [ 1785.492099][ T32] Sending NMI from CPU 0 to CPUs 1: [ 1785.492132][ C1] NMI backtrace for cpu 1 [ 1785.492147][ C1] CPU: 1 UID: 0 PID: 5618 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1785.492168][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1785.492180][ C1] RIP: 0010:do_syscall_64+0x71/0x520 [ 1785.492207][ C1] Code: 00 00 65 48 8b 05 17 7f dc 08 48 29 e0 48 3d 00 80 00 00 0f 83 91 02 00 00 65 4c 8b 2d f0 7e dc 08 b8 48 7f 00 00 49 03 45 20 <49> 39 c6 0f 85 80 02 00 00 48 8b 7d 08 48 89 7b 08 e8 29 86 00 00 [ 1785.492224][ C1] RSP: 0018:ffffc9000398fef0 EFLAGS: 00000086 [ 1785.492239][ C1] RAX: ffffc9000398ff48 RBX: ffffc9000398fef0 RCX: 0000000000044400 [ 1785.492254][ C1] RDX: 0000000000000000 RSI: 000000000000012e RDI: ffffc9000398ff48 [ 1785.492272][ C1] RBP: ffffc9000398ff38 R08: 0000000000000000 R09: 0000000000000000 [ 1785.492288][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 000000000000012e [ 1785.492304][ C1] R13: ffff888079e45dc0 R14: ffffc9000398ff48 R15: 0000000000000000 [ 1785.492317][ C1] FS: 000055556c441540(0000) GS:ffff88812350a000(0000) knlGS:0000000000000000 [ 1785.492334][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1785.492347][ C1] CR2: 00007f62752f943c CR3: 0000000074b84000 CR4: 00000000003526f0 [ 1785.492364][ C1] Call Trace: [ 1785.492371][ C1] [ 1785.492378][ C1] ? trace_irq_disable+0x3b/0x140 [ 1785.492405][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1785.492425][ C1] ? clear_bhb_loop+0x70/0xc0 [ 1785.492447][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1785.492464][ C1] RIP: 0033:0x7ff17879efc0 [ 1785.492479][ C1] Code: 89 74 24 0c 48 8d 54 24 0c be 10 54 00 00 e8 c7 07 00 00 48 83 c4 18 c3 66 90 49 89 f2 31 d2 89 fe b8 2e 01 00 00 31 ff 0f 05 <48> 3d 00 f0 ff ff 77 08 c3 0f 1f 80 00 00 00 00 48 c7 c2 e8 ff ff [ 1785.492495][ C1] RSP: 002b:00007ffdf723ee88 EFLAGS: 00000246 ORIG_RAX: 000000000000012e [ 1785.492513][ C1] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007ff17879efc0 [ 1785.492526][ C1] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000000 [ 1785.492537][ C1] RBP: 000000000000001f R08: 0000000000000000 R09: 0000000000000000 [ 1785.492549][ C1] R10: 00007ffdf723ee90 R11: 0000000000000246 R12: 0000000000000001 [ 1785.492561][ C1] R13: 000055556c455488 R14: 000055556c462fdc R15: 00007ffdf723f1a0 [ 1785.492586][ C1] [ 1786.289449][T22864] Bluetooth: hci10: command tx timeout [ 1786.289850][T22864] Bluetooth: hci11: command tx timeout [ 1786.538587][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1788.020645][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1788.029749][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1788.039801][ T32] Call Trace: [ 1788.043091][ T32] [ 1788.046019][ T32] vpanic+0x26f/0x710 [ 1788.050015][ T32] panic+0xc5/0xd0 [ 1788.053736][ T32] ? __pfx_panic+0x10/0x10 [ 1788.058142][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 1788.063611][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 1788.068990][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 1788.075139][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 1788.081288][ T32] watchdog+0x10e7/0x10f0 [ 1788.085628][ T32] ? watchdog+0x209/0x10f0 [ 1788.090056][ T32] kthread+0x38b/0x480 [ 1788.094122][ T32] ? __pfx_watchdog+0x10/0x10 [ 1788.098806][ T32] ? __pfx_kthread+0x10/0x10 [ 1788.103396][ T32] ret_from_fork+0x514/0xb70 [ 1788.107984][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1788.113088][ T32] ? __switch_to+0xc78/0x1410 [ 1788.117772][ T32] ? __pfx_kthread+0x10/0x10 [ 1788.122361][ T32] ret_from_fork_asm+0x1a/0x30 [ 1788.127146][ T32] [ 1788.130473][ T32] Kernel Offset: disabled [ 1788.134800][ T32] Rebooting in 86400 seconds..