last executing test programs: 4m37.151570298s ago: executing program 3 (id=1578): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a00)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000040000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100980000001500000000000000b7020000000000007b9af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018290000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m37.09656964s ago: executing program 3 (id=1580): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000100)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x34, 0x7d, 0x0, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x6, 0x4, 0x0, 0x2, 0x6, 0x67, 0x4, 0xd7, 0x6c, 0xfffc, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x4, 0xe5}]}}}}}}}, 0x0) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r2, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f00000041c0)=@RTM_NEWNSID={0x14, 0x58, 0x701, 0x70bd25, 0x25dfdbfe}, 0x14}}, 0x80) (async) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x10000000000000dd, [{0xa00}, {0x0, 0x100000000000000}]}, 0x68) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000280)=0x81, 0x4) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="680200000005010400000000000000000700000a54020100030000001d73797a3000000000000000000000000000000000000000000000000000000000fb32603418d1311860be59b3c9d130a1db735cfc79038f76aba47fbb46f33b6ce6e0c30d769f71bd6d1c7a"], 0x268}, 0x1, 0x0, 0x0, 0x64000001}, 0x24008000) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'macvlan0\x00', &(0x7f0000000380)=@ethtool_link_settings={0x4c, 0x8, 0x17, 0x1b, 0xfe, 0xb, 0x4, 0x1, 0x11, 0x4, [0x4000000c, 0x1007f, 0x1000000, 0x1, 0x2eea0afb, 0xb, 0x4000004d, 0xb9ad]}}) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb"], 0x88}}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c) (async) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async) r7 = socket$netlink(0x10, 0x3, 0x4) write(r7, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) (async) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c00018006000600843b00000c00028008000d"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000000440)={0xffffffffffffffff}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r8}, &(0x7f00000004c0), &(0x7f0000000500)='%pi6 \x00'}, 0x20) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000fffbffff0000000000000000850000001100000018010000756c6c2500000000002020207b1af8ff00000000bfa10000000007010000f8ffffffb702000008000000b7030000fbffffff8500000006000000950000000000010097409b713c779f8494b979e81d66c8bac1a0d96329dc4175f37a2e759e7a6497e975a48af3f9ba88316413106455097333bc8187ab4bcd32c557b444c4c5c6fd235662fac51eebac38daee786387ba837a8dcc767b61dd20584bf769030000"], &(0x7f0000000000)='GPL\x00', 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="1d1b00ba8d13cdea2aac8a25ec05", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 4m36.960430513s ago: executing program 3 (id=1582): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r2) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010027bd7000fbdbdf251e000000e53e548742cbf275f4bbbd47a713feb5350f69ba84d0d10c79adb544a0348b82d222a615cbf201a0d8ef65bae68569f17b26428d237393902a6c0e0cf91109f49b972c20765efae4e257f8e758f96a7f063df2edc6381559b190cfd3f67df0d8b95ea33fa1e24af19eb2c724d83f2a1fcd437b0b1479cf0600918a5157"], 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x24004000) 4m36.830996668s ago: executing program 3 (id=1584): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0180000000000000000003020200090001"], 0x20}, 0x1, 0x40030000000000}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$inet6(0x10, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) (async) socket$unix(0x1, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x800, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @broadcast}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r9, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r9, 0x0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r9, 0x0) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r8, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r8, &(0x7f0000001540)=[{&(0x7f0000000300)='.', 0x1}], 0x1) (async) writev(r8, &(0x7f0000001540)=[{&(0x7f0000000300)='.', 0x1}], 0x1) setsockopt$sock_int(r8, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) close(0x3) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9defcb4}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x5}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) (async) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9defcb4}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x5}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) 4m33.364047213s ago: executing program 3 (id=1597): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xb, 0x7, 0x2, 0xff22, 0x1}, 0x48) socket$inet(0x2, 0xa, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1f", 0x7}], 0x1, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r2}, 0xc) accept$alg(0xffffffffffffffff, 0x0, 0x0) 4m31.966787822s ago: executing program 3 (id=1606): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000640)={0x0, 0x2f, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbff, {0x6}}, 0x14}}, 0x0) (async, rerun: 64) r2 = socket(0x10, 0x803, 0x0) (rerun: 64) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4002050}, 0x8080) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) (async) r6 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r9, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0xf}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x7b}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}]}, 0x58}, 0x1, 0x0, 0x0, 0x48810}, 0x0) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="3fabf82df2c3"}) (async) write$tun(r7, &(0x7f00000000c0)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @broadcast}, {{0x8100, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x1, 0x20, 0x5}}}}, 0x36) (async) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000040)={0x2, 0x3}) r11 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r11, &(0x7f00000000c0), 0x10) (async, rerun: 32) close(r11) (async, rerun: 32) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r10, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) 4m16.834631725s ago: executing program 32 (id=1606): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000640)={0x0, 0x2f, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbff, {0x6}}, 0x14}}, 0x0) (async, rerun: 64) r2 = socket(0x10, 0x803, 0x0) (rerun: 64) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4002050}, 0x8080) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) (async) r6 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r9, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0xf}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x7b}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}]}, 0x58}, 0x1, 0x0, 0x0, 0x48810}, 0x0) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="3fabf82df2c3"}) (async) write$tun(r7, &(0x7f00000000c0)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @broadcast}, {{0x8100, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x1, 0x20, 0x5}}}}, 0x36) (async) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000040)={0x2, 0x3}) r11 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r11, &(0x7f00000000c0), 0x10) (async, rerun: 32) close(r11) (async, rerun: 32) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r10, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) 2m32.894915984s ago: executing program 2 (id=2747): r0 = socket(0x10, 0x803, 0x0) sendmsg$inet(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="bbfe25a7f8ec516dc2041dc5a3fb91f4b01b1f020251ebf83174fa58b6c90699288c2c0a9d23656f6c8161169cbff734708be8c782f79748afaf6f8c89320775c86a573eaff569ce912ba7a5cb852003bb22529375a213faecd4996458eb108098475a1134a7a5f47605c8", 0x6b}, {&(0x7f0000000080)="dd22830f25329640e5f99576f0c0", 0x5c}, {&(0x7f00000000c0)="ba7791fae914e955aaddca85ce449226c0dd6428f5c18007b169885cd8261f2311577b15a59ad25d4c47680aa0083b05714172342b306cd0f1b8f79781e11d97981c489d26c68304f666cb169feb274b76a782356bcc024fb9668757182d3fc7a98a3dd9496a022fc6881d9f4d78ba597b196ad3b921ee0396ab22051cebcd8d2e710a4b986862cedff219f3a12795eb6a777bb850687da0d6c5ac1266fe898b4d09597cd8d2", 0xa6}, {&(0x7f00000002c0)="aee54926a8757e2e42fd60491210055d74740d7b8c0fcba80ee2b4a636b258b4b0791c6ded6101c4e204701f57592ecd52368f5666a61cb5b3972cea64b806733f234a71da60c79e972841a59dd199df53819b906f4ee25ae004238517d2f37775d7f0e30bf5b594b62a4d25aaf3518684e26f240c447facddf51efc883d2f52ce69ddedca26d2815da0203b371cb95154796f08168e56c31b", 0x99}, {&(0x7f0000000380)="05212e0ff1ba6f7b92a404a4d4679d8e4b527d0ccf903d2d6c48388ff3a588afdf5a16f8332bef5001af6531edf16621fbe728bf7812a7463237d5966f4c28f896d0a2c01e2f4d22e5a09051fd99e3f6f418c1593735ba9d542782ac4b0a1dc84a6d7f144f798d017202d661d95c82fb726446a24a6b9cad04e18f52ffa3fd55ea11bdd3fdd959ccbcc207ac680ca9c6f0d26ffc3251f79bcdd1d39a00"/175, 0xaf}, {&(0x7f0000000440)="b037e7397b013be1f9f02ac432dec902400560b5983750668253e5c9cca67caf1aa226e5637a15126b7eff0d68fc1b14c2e2b12b883ba92d483bce2f89949f9c381b2667cd36d9dba76bc9b8b154e2", 0x4f}, {&(0x7f00000004c0)="571c5e291713b0d9d3410c67eff61bc486e17a0c4a385e7c36ce51b177a1fd5bd7555f81bf920916f41c9a4a30e70b7f", 0x30}, {&(0x7f0000000540)="156f24", 0x2}], 0x8, &(0x7f0000000600)}, 0x4008800) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, &(0x7f0000000080)=0x1, 0x4) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="40000000a3506a76c428ed1f71dd4804b5950000000014e6ad7f8c9de5d5", @ANYRES32=0x0, @ANYBLOB="1400020000000000000000000000ffff000000001400060000000000008000000500000005000000"], 0x40}}, 0xc800) 2m32.766344657s ago: executing program 2 (id=2748): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f00000000c0)={0xffffffffffffffff, 0x8, 0x2, 0x1, @vifc_lcl_addr=@rand_addr=0x64010101, @multicast2}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000040), 0x4) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x30, r3, 0x1, 0x70bdb1, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xfb}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004c881}, 0x20000014) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x0, 0x701, 0x2, 0x0, {0x2e}}, 0x14}, 0x1, 0x0, 0x0, 0x4c018}, 0x4004004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x5}, @in=@dev={0xac, 0x14, 0x14, 0x2e}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in=@loopback=0xa010101, @in=@loopback, @in6=@rand_addr=' \x01\x00', @in=@rand_addr=0x64010102, 0x3c, 0x4, 0x0, 0x10000000, 0xa, 0x2}, {@in=@private=0xa010101, @in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x38}, @in=@dev={0xac, 0x14, 0x14, 0x2c}, 0x3c, 0x4, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x6a8dd86ef567f079}, 0x4020800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4004000}, 0x6000080) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r5, 0x8010661b, &(0x7f0000000000)) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m32.565764854s ago: executing program 2 (id=2749): socket$inet6(0xa, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'veth1_macvtap\x00', @random="b6ed4742d6c4"}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c80)=@deltfilter={0x2c, 0x2d, 0x800, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xe, 0xe}, {0x4, 0xb}, {0x0, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0xe477}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004891}, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$kcm(0xa, 0x3, 0x87) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0x5, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21}, 0x94) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r11, r13, 0x25, 0x2, @void}, 0x10) pselect6(0x40, &(0x7f0000000040)={0x2, 0xb, 0x11, 0x2, 0x20000001, 0x1007, 0x7, 0x5}, 0x0, 0x0, 0x0, 0x0) write$tun(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120012000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) setsockopt(r8, 0x84, 0x80, &(0x7f0000000000)="45f4a6d6a4ba09be", 0x8) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0x8, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004021}, 0x4890) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000000200)=0x1) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200affd14000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 2m29.935029995s ago: executing program 2 (id=2764): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001800090400150000000000002d"], 0x1c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000380)=0xfffffffe, 0x4) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a0104000000000000000001000003090001007394dfe3cfca3bb9797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000028000000060a010400000000000000000100000008000b40000000000900010073797a300000000014000000110001000000000000"], 0x9c}}, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001c40)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$cgroup_pid(r4, &(0x7f0000002380), 0x12) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0x1}, {0x4}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xb, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x2, 0x0, 0x3dc], [0x0, 0x6, 0x0, 0x2000, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x4) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000300)={@local, @empty}, &(0x7f0000000340)=0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'gretap0\x00', &(0x7f0000000400)={'tunl0\x00', 0x0, 0x8000, 0x700, 0x2, 0x6, {{0x27, 0x4, 0x3, 0x2, 0x9c, 0x68, 0x0, 0x4, 0x29, 0x0, @local, @rand_addr=0x64010102, {[@ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x3e, 0x3, [{0x3, 0xc, "50d3ff9b9aed171f592d"}, {0x0, 0xe, "7c78fb93cdf986f31b9407e6"}, {0x5, 0x2}, {0x5, 0x10, "1d8713c1c900f9bf50e92701a041"}, {0x5, 0xc, "9bf5435d669af8cac120"}]}, @timestamp_prespec={0x44, 0x1c, 0xf6, 0x3, 0x4, [{@loopback, 0x1}, {@loopback, 0x80000000}, {@empty, 0x898}]}, @rr={0x7, 0x23, 0x78, [@multicast1, @loopback, @multicast2, @broadcast, @local, @empty, @multicast1, @multicast1]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) getsockopt$PNPIPE_IFINDEX(r8, 0x113, 0x2, &(0x7f0000000240), &(0x7f00000004c0)=0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000740)={'sit0\x00', &(0x7f00000006c0)={'syztnl0\x00', 0x0, 0x80, 0x1, 0x7, 0x4, {{0xc, 0x4, 0x0, 0x1, 0x30, 0x65, 0x0, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}, @private=0xa010102, {[@timestamp_addr={0x44, 0x1c, 0x12, 0x1, 0x2, [{@empty, 0x4}, {@multicast2, 0xe}, {@private=0xa010102, 0xfffffffd}]}]}}}}}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000002e00090027bd700000000000040000000c0018000aac0f000bae0f00"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x9, 0x10000, 0x0, r10, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x7, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x5, 0x8}]}]}, {0x0, [0xd78d3475a2897935, 0x5f, 0x2e, 0x5f, 0x2e]}}, &(0x7f0000000f40)=""/4086, 0x3f, 0xff6, 0x5}, 0x28) sendmsg$nl_generic(r1, 0x0, 0x4) 2m29.63312199s ago: executing program 2 (id=2768): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000097090100000002816500feff0000000018010000646c6c2500000000002020207b9af8ff000000002e9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000805f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x670, 0x5, 0x4b0, 0x1e0, 0x290, 0xffffffff, 0x1e0, 0x0, 0x418, 0x418, 0xffffffff, 0x418, 0x418, 0x5, 0x0, {[{{@uncond, 0x0, 0x198, 0x1e0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xf, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@rateest={{0x68}, {'wlan1\x00', 'ip6tnl0\x00', 0x12, 0x2, 0x9, 0x2004, 0x5, 0x3, {0xc35}, {0x1ff}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x12, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@rand_addr=' \x01\x00', @port=0x4e21, @icmp_id=0x68}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x2a, 0x4, "ed481ca2c99b76ccda2879f6a12da5725ea2669d62d23b45710a851be124"}}}, {{@ip={@local, @remote, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x3}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @local, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x2, @ipv4=@broadcast, @ipv4=@empty, @gre_key=0x3, @icmp_id=0x64}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x510) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000004}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x4000) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r5}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x4, 0x41fc, 0x0, 0x0, r0, 0x4, '\x00', r4, r5, 0x2, 0x4, 0x1, 0xa}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000050e8850000007000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r7}, 0xc) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7, 0xffffffff}, 0x8, 0x10, &(0x7f0000000040)={0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x18) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000003b00010324bd7222ffdbdf2509000040"], 0x14}}, 0x4044000) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000280)={@void, @void, @eth={@broadcast, @local, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@mpls_uc={0x8847, {[], @ipv6=@tipc_packet={0xe, 0x6, "74dd16", 0x2c, 0x6, 0x0, @remote, @loopback, {[], @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x2, 0x7, 0x0, 0x1, 0x8, 0x4, 0x1, 0x9, 0x3, 0x2, 0x4e24, 0x4e24}, 0x3, 0x3}, 0x3, 0x2}, 0x2}}}}}}}}}}, 0x66) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x8c, 0x10, 0x40d, 0x70bd2d, 0x1ffffffb, {0x0, 0x0, 0x0, 0x0, 0x60046, 0x8}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @bond={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8}, @IFLA_BOND_MIN_LINKS={0x8, 0x12, 0x2}, @IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0x6}, @IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0xa0}, @IFLA_BOND_AD_USER_PORT_KEY={0x6, 0x19, 0x8}, @IFLA_BOND_ARP_IP_TARGET={0x10, 0x8, 0x0, 0x1, [@multicast1, @empty, @dev={0xac, 0x14, 0x14, 0x31}]}, @IFLA_BOND_MIIMON={0x8, 0x3, 0x4}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xfff}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000c090) 2m29.007540248s ago: executing program 2 (id=2773): r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="73656375727674790000000002000000000000000000000000000000000000003f000000c80b2f70748ad964ef1ab262c8c80b1ea4c247a1818463a00940e627c8fb3051a57f34efda45b3c34d9739b3e7a489f36189f7419cbcdd59b77f58646d28bf"], &(0x7f0000000100)=0x63) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_crypto(0x10, 0x3, 0x15) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @loopback, 0x6}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000080)={r6, 0x81}, &(0x7f00000000c0)=0x8) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000040)=0x40, 0x4) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x5e202329, @empty, 0x4000005}, 0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000000206010800000000000000000700000805000100070000000900020073797a31000000000c0007800800120000000000050005000200000005000400010000000c000300686173683a697000"], 0x50}}, 0x0) sendmmsg$inet6(r3, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)="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", 0x241}], 0x1}}], 0x1, 0x4000001) shutdown(r3, 0x1) sendmsg$netlink(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000280)={0xe0, 0x12, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @generic="f4b0f176b7abb4f02446f4e9b4cc9e9104290eaf1455f7de9a0efedc7bac697e5987e585a68d72320927fb91d1097c992a45f6a498b6dccb1c27fcc7c011039978970aab3892d6021e149053425b631b3efa82557cf567f92b45b530f30db40044395bd66a6a5ab1e5e622e117b80ce763585dbf41355f9b5347bbd3d1de3fe0252887f13523da8d51ad7a964d2cdb5370bc62010b0a19e20d09f254c5897382efc42199b4357cf0f3ef30516bfa005975b1140cc54255468245d25954b69ded"]}, 0xe0}], 0x1, 0x0, 0x0, 0x4000}, 0x8014) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x2270bd24, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) 2m13.932318552s ago: executing program 33 (id=2773): r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="73656375727674790000000002000000000000000000000000000000000000003f000000c80b2f70748ad964ef1ab262c8c80b1ea4c247a1818463a00940e627c8fb3051a57f34efda45b3c34d9739b3e7a489f36189f7419cbcdd59b77f58646d28bf"], &(0x7f0000000100)=0x63) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_crypto(0x10, 0x3, 0x15) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @loopback, 0x6}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000080)={r6, 0x81}, &(0x7f00000000c0)=0x8) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000040)=0x40, 0x4) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x5e202329, @empty, 0x4000005}, 0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000000206010800000000000000000700000805000100070000000900020073797a31000000000c0007800800120000000000050005000200000005000400010000000c000300686173683a697000"], 0x50}}, 0x0) sendmmsg$inet6(r3, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)="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", 0x241}], 0x1}}], 0x1, 0x4000001) shutdown(r3, 0x1) sendmsg$netlink(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000280)={0xe0, 0x12, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @generic="f4b0f176b7abb4f02446f4e9b4cc9e9104290eaf1455f7de9a0efedc7bac697e5987e585a68d72320927fb91d1097c992a45f6a498b6dccb1c27fcc7c011039978970aab3892d6021e149053425b631b3efa82557cf567f92b45b530f30db40044395bd66a6a5ab1e5e622e117b80ce763585dbf41355f9b5347bbd3d1de3fe0252887f13523da8d51ad7a964d2cdb5370bc62010b0a19e20d09f254c5897382efc42199b4357cf0f3ef30516bfa005975b1140cc54255468245d25954b69ded"]}, 0xe0}], 0x1, 0x0, 0x0, 0x4000}, 0x8014) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x2270bd24, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) 2.774916841s ago: executing program 6 (id=4068): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) (async) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000000400)='\x00', 0x1}], 0x1, 0x5, 0x7) close(r0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x3) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x4}, @NHA_ID={0x8, 0x6, 0xf2}, @NHA_OIF={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4402}, 0x0) (async) getsockopt$inet_opts(r2, 0x0, 0x2, &(0x7f0000937fed)=""/16, &(0x7f0000000080)=0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000011c0)={r5, @in6={{0xa, 0x4e20, 0x0, @private1, 0xffffff81}}}, &(0x7f0000001280)=0x84) (async) syz_emit_ethernet(0x2f, &(0x7f0000000080)={@multicast, @broadcast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x9, 0x21, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0xfe, 0x0, @empty, "000100009c"}}}}}, 0x0) 2.351304261s ago: executing program 1 (id=4072): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000540000000000000070000006b112e000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) 2.084017958s ago: executing program 1 (id=4077): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000280)={r0, &(0x7f0000000080)='syzkaller1\x00', 0x2000, &(0x7f0000000100)={@_ha_fsid={[0x1, 0x8]}, {0x7ff, 0xa1, 0x101, 0x4}}, 0x6, &(0x7f0000000140), &(0x7f00000001c0)=0xdd}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'caif0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}) bind$x25(r1, &(0x7f00000002c0), 0x12) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f00000000c0)=0x6, 0x4) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd01000000000014"], 0xfdef) 2.040191575s ago: executing program 4 (id=4079): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x87}, {0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0xa, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x0, 0x6e6bc0}, [@tmpl={0x104, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x4d2, 0x6c}, 0x2, @in6=@local, 0x0, 0x2, 0x3, 0x30, 0x56, 0x0, 0x4}, {{@in=@local, 0x4d3, 0x32}, 0x2, @in6=@empty, 0x3507, 0x2, 0x1, 0x3, 0x8, 0x2, 0x7fffffff}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3504, 0x3, 0x0, 0xa, 0x5, 0x8, 0x8}, {{@in=@loopback, 0x4d5, 0xff}, 0x2, @in=@private=0xa010101, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0xf}]}]}, 0x1bc}}, 0x2c000010) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x1d0, 0x1, 0x3, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFQA_PAYLOAD={0x37, 0xa, "49bbbdd1a9f5d657ce50ff61f2437c1fbd609bc70745e9b0d1c7dc5996b581a93f8db3b2f216238e200ca5c4d4db6a2eaad894"}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x7}}, @NFQA_PAYLOAD={0x101, 0xa, "d667392fd7a3292d6a08a54cacef5d7e0289c92dd5540ce29e203bfd0ac5e8f56f5bca5664bf064a26b78850118b882f53b55d4c5f4789d662d4f410f530b3d9e560e3d345e603166081ce490f8e933d2c9640198c3e7110ea98fb3f4ce326ab44cfd6abd76fb1dc608b0db0db1b7f7261cc06de745837905b74b480ee08115b95c28ed2de57a1f162fef88a262e008126ca458f3c58a672575b7eec0245dd4f11edef3287204679cb1dab7fc270f5ade58e3568c5e65b542050e37f941134e423e452483fc2df937a4cff5633bd03ce165b2d1a715298fed998b752282313f0c180e3fa5777e6049a431638d2c376f7987041419a2df431511939ba4e"}, @NFQA_PAYLOAD={0x6b, 0xa, "32f8da943d70f7cb039a905d3b91cdd5d21e66f6f6a4abd3248e91e8f7c7e714cb861ba5b8dc5afb28d06e3bd07754b8cfe379ceebf0c99991085aabd43fb9ffedc65e2e65594f887d57062bfcad2d77b9fade2dd85b3f4c272b59fa904511e67c738e697850cb"}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x124}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008800) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), r1) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x101, 0x70bd2a, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 1.858054732s ago: executing program 4 (id=4081): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x5, 0x7, 0x6, 0x3, 0x0, 0xffffffffffffffff, 0x20000000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x7c}, {0x6}]}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000d00000000009500a50000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r3, 0xe0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001180)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYRES64=0x0, @ANYBLOB="7b7a5ee26b5cb71dc122f7ddb95e23c6e698a83696147049647d6f9521498bdf22c78e", @ANYBLOB, @ANYRESHEX=r0, @ANYBLOB="551b5087cbc46cc64e35d3d133aea88e989005f8215972cd4b52a91ce79d653da791dc1d29e2be7e31a4a54d290eb8a2532abe08d7389981402827c24084c352a64e48d589a6b2055f6c41c0a93b2ea00f6bb2d510faeb9f87d2ce371eb843a7948d1f2d27af772606781c0a0097bd17dbb70b5f36fb0116d1ea1252426d59f9f273ab5707418fbafe54720afcd3f821a7baa5c260fe6db01207986d91ab532c6332e09f3fc050065669650214115c9746635f977224dc00f2af642520dab315b1b5012c5f4dca54c96d1686e0fddbe986cc115dee9a9944aa0b1e184978ae54aed72cd5b40f1ae15e473c4342299897", @ANYRESHEX=r1, @ANYRES64=r2, @ANYRESHEX=r3], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r4, r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x11, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0xe, 0x0, &(0x7f0000000640)="9922530100d1be95646155eefbf4", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x4, 0xb, 0x1}}}}]}, 0x40}}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r11, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000050) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000a80), r10) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r12, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x24, r13, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0xc0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r9}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000002000000000000000008500000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94) r15 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000010008500000053"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r15, 0x0, 0xe, 0x0, &(0x7f0000000040)="b6691c75e657d5aa36b7b20cc058", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r6], 0x38}, 0x1, 0x0, 0x0, 0x24008800}, 0x60c5) 1.811500837s ago: executing program 6 (id=4082): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000081002800000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xde09c06f801dc930}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20040084) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1001a29d}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xffff, 0xd}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004094}, 0x42) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1, 0xffffffffffffffff}, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000"], 0x0, 0x34}, 0x28) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x1, 0x0, 0x4, 0x6, 0x1, 0x50}]}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r10, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./file0\x00', 0x0, 0x8}, 0x18) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r12, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{0x1, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)=r0}, 0x20) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r14, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000010000800000000000000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r14, @ANYBLOB="0000000000000000b70500000800000085000000b3000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r15, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r16 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x1b, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0xd0}, @exit, @btf_id={0x18, 0xb, 0x3, 0x0, 0x4}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x71ed69e9}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @map_fd={0x18, 0x2, 0x1, 0x0, r7}], &(0x7f00000001c0)='GPL\x00', 0xe, 0xdf, &(0x7f0000000200)=""/223, 0x40f00, 0x6, '\x00', r8, 0x25, r9, 0x8, &(0x7f0000000500)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0xd, 0xfff, 0x4cbf}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000740)=[r11, r12, 0xffffffffffffffff, r13, r15, r16, 0xffffffffffffffff], 0x0, 0x10, 0xfffffffd}, 0x94) 1.767902658s ago: executing program 5 (id=4083): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x4000009) (async) write(r1, &(0x7f0000000380)='f', 0x1) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) 1.659784019s ago: executing program 1 (id=4084): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa0000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x55}}]}, &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x5, 0x10, 0x40, 0x3, 0x41}, 0x50) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x44, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x2e, 0x11, 0x0, 0x1, [@generic="e796bd6dd42541affac6ff415af85ab494e09d498fc605baa5fe20e0f8a725f9f47392b70f555def59af"]}]}, 0x44}, 0x1, 0x0, 0x0, 0x42804}, 0x84) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r1, &(0x7f0000000300), 0x0}, 0x20) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400000000000000001000084080000000000000001"], 0x0, 0x42}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x6, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r3, 0x0, 0x2}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x2, 0x3, 0x7, 0x1200, r1, 0xb62cdf8, '\x00', 0x0, r3, 0x4, 0x3, 0x1, 0x2}, 0x50) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x8a}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.658590695s ago: executing program 4 (id=4085): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x10, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x90) (async) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x10, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x4e}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x20040000) (async) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x4e}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x20040000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000280)={'wlan0\x00'}) r3 = accept4(r0, &(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000340)=0x80, 0x80000) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r3) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000001600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000015c0)={&(0x7f0000000400)={0x1190, r4, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xd8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x421}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x76c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}]}, @TIPC_NLA_NODE={0x10a4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "b23670ec701b7038404d13dddb0a236cc857ac1855ab42c7e8f5578e8bb2bf2f7bdd"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "ee075626529406dbb78571bdb9332e2f822af4c8fdef"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffff}]}]}, 0x1190}, 0x1, 0x0, 0x0, 0x4}, 0x40000) close(r0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001700)={'ip6tnl0\x00', &(0x7f0000001680)={'syztnl2\x00', 0x0, 0x4, 0x19, 0x1, 0x3, 0x43, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x40, 0xd0, 0x8}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001700)={'ip6tnl0\x00', &(0x7f0000001680)={'syztnl2\x00', 0x0, 0x4, 0x19, 0x1, 0x3, 0x43, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x40, 0xd0, 0x8}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000001740)={'batadv_slave_1\x00', 0x0}) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000001780)={@broadcast, @multicast1}, &(0x7f00000017c0)=0xc) (async) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000001780)={@broadcast, @multicast1, 0x0}, &(0x7f00000017c0)=0xc) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000001800), &(0x7f0000001840)=0x14) (async) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000001800)={@rand_addr, 0x0}, &(0x7f0000001840)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000001880)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000001880)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000018c0)={'vxcan1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000018c0)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001900)={'wg1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001900)={'wg1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000001940)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000001a00)={'ip6_vti0\x00', &(0x7f0000001980)={'syztnl0\x00', 0x0, 0x2f, 0x1, 0x0, 0xa73, 0x1d, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x7, 0x9934}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001ac0)={0xffffffffffffffff, 0x58, &(0x7f0000001a40)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001ac0)={0xffffffffffffffff, 0x58, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001b80)={'ip6gre0\x00', &(0x7f0000001b00)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x4, 0x1, 0x8, @loopback, @local, 0x20, 0x8000, 0xfffffff1, 0x59d427b6}}) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000001bc0)={@dev, @multicast2, 0x0}, &(0x7f0000001c00)=0xc) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000001f00)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001c40)={0x250, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x91cd15808c00ff1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x250}}, 0x2000c042) r18 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001f80), r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000002040)={'ip6tnl0\x00', &(0x7f0000001fc0)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x3, 0x10000, 0x60, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x700, 0x20, 0xf, 0x2}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000002480)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002440)={&(0x7f0000002080)={0x388, r18, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x1ac, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x46, 0x4, "ee4b158f7243801e34b83a0712583eaabef127f9a3f889cf3d068f6fe18e73a22dea9b1788efc0b895c3af0ac88204b00bb37c68c9a1467a997ee43707327c2afdeb"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_VALUE={0xe, 0x4, "4ad39a58d77cba38c769"}, @ETHTOOL_A_BITSET_BITS={0xfc, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'wg1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xcbe5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'vlan0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffff801}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xacf}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'veth0_macvtap\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '(:\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'TIPCv2\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}]}]}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x128, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xc7, 0x5, "8715f5d7df5320bbc17938247c2568ab7ea008e4002056ec270200cfc99e0bfe75bcf9e91faedd3fb146d4e94db79f50968aa98d69b8bf1bc9612a6be7676d2e3e01bb7c804067168ab2ea447299101378a30fc1ff6e463844830ca3151c63f6f0254fb0c58dee3c0d8734e45c5b21a776470d53bbc0b52d967f8ebf0de7759f5425e6a785c13ac7ae12fc598bee221e644e689d8603438fe10b6200ec30290dd908257994cf23d73c15a3f9a28d9accf9b358e5a7a4a17ce0df345ee99c619b15caa2"}, @ETHTOOL_A_BITSET_MASK={0x14, 0x5, "dbe8a9d6add0460fe737d24b89aa2a22"}, @ETHTOOL_A_BITSET_BITS={0x38, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'wg1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x388}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c004) ioctl$PPPOEIOCDFWD(r3, 0xb101, 0x0) bind$inet6(r3, &(0x7f00000024c0)={0xa, 0x4e21, 0x0, @loopback, 0x9}, 0x1c) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000002500)=""/60, &(0x7f0000002540)=0x3c) 1.637554935s ago: executing program 5 (id=4086): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495dd, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x2000012, 0x8ff, 0x0, &(0x7f00000004c0)="4133c9e924380000000000000000", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x6, 0xf, 0x8, 0x41}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x3, &(0x7f00000003c0)=@framed, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000d40)={@cgroup, 0x5, 0x1, 0xffffffff, &(0x7f0000000c40)=[0x0], 0x1, 0x0, &(0x7f0000000c80)=[0x0, 0x0], &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000d80)={@fallback=r1, r0, 0x31, 0x0, 0x0, @void, @value=r0, @void, @void, r2}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_USE_CARRIER={0x5, 0x6, 0x5}]}}}]}, 0x3c}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r1}, 0x38) socket$tipc(0x1e, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r8, 0x0, 0xf, &(0x7f0000000100)=0xfffffffffffffff9, 0x4) bind$inet(r8, &(0x7f0000000440)={0x2, 0x4e20, @multicast2}, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r9 = socket(0x10, 0x803, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r11}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x10, 0x10, 0x8, 0xfffffffd, {{0x10, 0x4, 0x3, 0x3b, 0x40, 0x64, 0x0, 0x5, 0x56, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, {[@timestamp_prespec={0x44, 0x1c, 0x37, 0x3, 0xf, [{@remote, 0x8}, {@local, 0x4}, {@multicast1, 0x1}]}, @cipso={0x86, 0x10, 0x3, [{0x2, 0xa, "abb19a7b1caa24fa"}]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r5, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x8080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000240)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.460040199s ago: executing program 4 (id=4087): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'dummy0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7a, r5}) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 1.355453934s ago: executing program 6 (id=4088): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b700000017000000bfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff0000000015040000000001d80f030000000000003404000001ed0a0014040000170000803c400000000000007b0a00fe000000004e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff0c710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf1dbf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040bef29b66e3858d051c096e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d0cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090d030000003acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931481747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885769754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8269b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347932a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd23834a50d7eb8e327fb5db12cbd6a9efe8e671c4f251fe3bf440cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa2c910fb8de24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d1767e31a3446cd57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c828c02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007f00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d05d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b530500d8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bd9b075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462aa2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783fefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9be0bdd37220e316f2297743dd4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd08000000e843591d2618e2d2cdc7081c8fafffe9c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119d2a673bdae05779208409e6cf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8a9d3374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed9eed636338f1835fc957729d63dc1bfc7b772cbe536c2d3aff27c22f9a2f876512616a5bdaf22a16e19d1b5f52abb40b433983d0cf50234de659c1a397ce901000000caae1bcfdce33dae6adc260321702f239c25ab181390e7dc8c1e5b1cf3b4fef1cd5c44a89b5e5d8314e02f4673ded90bce9a4025b0232eec970f7aa17f175a14e8dc8de9bac0006b98a8283eee5665f3aede28228e0468dbcf8b776fe4c629d3af183a7cba5adf77f23d31f9d5a183c0da4e95f75b1496a97a46a06e4e1f5a8438d49dbd493ba2482c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r1, &(0x7f0000002d00)={0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000000040)=""/9, 0x9}, {&(0x7f0000000200)=""/222, 0xde}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000002880)=""/78, 0x4e}, {&(0x7f0000002900)=""/45, 0x2d}, {&(0x7f0000002940)=""/249, 0xf9}, {&(0x7f0000002a40)=""/22, 0x16}, {&(0x7f0000002a80)=""/105, 0x69}, {&(0x7f0000002b00)=""/150, 0x96}], 0x9, &(0x7f0000002c80)=""/123, 0x7b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x18, 0x4, 0x0, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x48) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000000b060102000000000000000006000002050001"], 0x68}, 0x1, 0x0, 0x0, 0x48}, 0x4800) 1.223037399s ago: executing program 1 (id=4090): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001680)=@mangle={'mangle\x00', 0x64, 0x6, 0x5e0, 0x0, 0x0, 0x238, 0x0, 0x3f8, 0x510, 0x510, 0x510, 0x510, 0x510, 0x6, 0x0, {[{{@ipv6={@remote, @private1, [0xff], [0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x0, 0x3}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x10000, 0x5, 0x1, [0x3, 0xf1f7, 0x6, 0xffff, 0x9, 0x2, 0x9, 0xfffb, 0x2, 0x800, 0xc000, 0x2, 0xf, 0xae, 0x9, 0x6], 0x8}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x4, 0x820, 0x7}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x308}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x140}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x20}, @ipv6=@remote, 0x3a, 0x8, 0x6}}}, {{@ipv6={@local, @empty, [0x0, 0xff000000, 0xff000000], [0x0, 0x0, 0xffffff00], 'tunl0\x00', '\x00', {}, {0xf7d589580f149d60}, 0x0, 0x4a, 0x7}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x3, 0x1, 0x1, [0x9, 0xfff2, 0x4, 0x2, 0x5, 0xe, 0x2, 0xc7b, 0x5, 0x1ff, 0x3, 0x8, 0xf25, 0x7, 0x0, 0xff6b], 0x5}}]}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x640) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) syz_emit_ethernet(0x5a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaac7533137cd4e1eaaaaaaaaaaaa0008004e00004c00000000000690780a010102ac1414aa070f04a976bc4b4c9e3e260cbfad990444140b01e000000100000000e00000010000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000063060000bca30000000000002403000020fef6ff720af0fff8ffffff71a4f0ff000000001f030000000000002e100200000000002604f8ffffff00"], 0x0, 0xa}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xffffffffffffffb3}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000400c) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ac1414aa1d95070084"], 0x54}, 0x1, 0x0, 0x0, 0x34040017}, 0x80) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f00000008c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000880)={&(0x7f00000009c0)=ANY=[@ANYBLOB="64020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x264}, 0x1, 0x0, 0x0, 0x20000}, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000200)="08001efbb0", 0x5}, {&(0x7f00000002c0)="dcd8a7", 0x3}], 0x2, 0x0, 0x0, 0x60000000}, 0x20000004) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r5, 0x0, 0x0, 0x800) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x800) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="600000000206010800000000000000000000000014000780080012400000000305001500000000000500010006000000050005080a00000005000400000000000900020073797a300000000011000300686173683a6e65742c6e657400000000ffcb4392149e914ac60d9893b0625d6138dceb7e1f4405999d0f946235c8a712666068b3b47ed7aec4f1d8be328d335ce9171da67ea22f10f40aa5a5c2afdb23492622e7448b6b4aefabff2be63ef3db0ac55a0b0cfa08"], 0x60}}, 0x0) sendmmsg$alg(r9, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048000000000000"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000540)=[@op={0xffffffffffffff38, 0x117, 0x3, 0x1}], 0x18, 0x14}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1.168984006s ago: executing program 5 (id=4091): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x11, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000050000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085004000a500000085000000d00000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB='c ', @ANYRESOCT=r3], 0x9e) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r2, r1}, 0xc) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x10) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) sendto$inet6(r5, &(0x7f0000000e80)="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", 0x2c0, 0x6d91fb6102d8910c, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x40000, 0x0, 0x0) recvfrom(r5, &(0x7f0000001a80)=""/4043, 0xfcb, 0x20, 0x0, 0x0) close(0x3) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000700)={&(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000005c0)=[{&(0x7f00000004c0)="77179d0c72541cb8b450510db4775c579b704d765263c75f0aa1078408d613b2a786f888f526a0609491caa5885cc82fd712178b01b3a16ac6bf8ecc0b019f875658fd1498d0bffdc600a7d9bde5b5eddb854be6d39d7f7bbe4368b81440132b32db9edc48f921afb0fcbef09e1570425648cf2f6af3270152a8af98144173acd522b5520ab3281a76469466bea80107ff4015d6df0cdedc585bb1b12fdf9aaf4f72bf713de6c3b08f17e32a213a0576f2c79b75097d6096643db67661fa85a20c82fc01aaf9979cce02961658a7b6121ea78e", 0xd3}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="ff07009fec00000000000000070000000000000000000000140000000000000000000000020000000100000000000000"], 0x30}, 0x20048050) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x80, 0x10, 0x1, 0xc, {{0x6, 0x4, 0x2, 0x10, 0x18, 0x64, 0x0, 0x3, 0x4, 0x0, @empty, @rand_addr=0x2, {[@noop]}}}}}) socket$packet(0x11, 0x3, 0x300) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r9) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e00000000070000030000000100000000010000", @ANYRES16, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="0500000003000000010000000800"/28], 0x50) setsockopt$bt_BT_CHANNEL_POLICY(r7, 0x112, 0xa, &(0x7f0000000180)=0x9, 0x4) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) 987.218915ms ago: executing program 1 (id=4092): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {}, {0x8, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x8010) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001b1401002abdd444d446df25080001000000000009"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000140)={0xffffffffffffffff, 0x7, 0x4, "8d2ef7858ddd9640fbd4a4c0e834740bcfdb1e4d9d4d41ebeaf1e7b9ba77d560135b8aca08d27b76b69c17639c4ddf9f07d4e28d982b05d27d8a501f6f85a42535a04918efc0e8a4989236b43f1767d590ce7446cac02a98c705c8beb74d0899714056af29377d631fa98ed64be54c080d02de59c67db5754ea0ab0ac60ed7f3938fe209342f100db5c3f2b6147f602d881cb645e7b15b609a635e13d0e7ad925e11dae79438a3f29f7f7dc8c222bf20ae16e008000000000000001da9cb316caec745a71f8acd23ddfe7166ca1c3442136ec73d20d02e0a23862bba9baf7aad73f403bf07c3cdc7bba8de1088801377421d36144dd8a6"}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002f00090027bd7000000000000400000114001600fe880000000000000000004d65000101"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x10) 827.988517ms ago: executing program 4 (id=4093): setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x3, @mcast2, 0x9}, @in6={0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfa}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e21, @private=0xa010102}, @in6={0xa, 0x4e23, 0x0, @empty, 0x48}, @in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e22, @remote}], 0xb4) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f00000000c0)=0x10, 0x1) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001200)={&(0x7f0000000180)={0x104c, r1, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x1004, 0xa9, @random="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"}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x7}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x104c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000015) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000001280)={0x0, 0x5, 0x2}, &(0x7f00000012c0)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000001300)=@assoc_value={r3, 0x6}, 0x8) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000001440)={r2, &(0x7f0000001340)='devlink\x00', 0x301102, &(0x7f0000001380)={@align=0x54, {0xfff9, 0x8, 0xf, 0xd5}}, 0x1, &(0x7f00000013c0), &(0x7f0000001400)=0x4}) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000001480)={0x3}, 0x4) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f0000001540)={&(0x7f00000014c0)=""/107, 0x6b}) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f0000001580)) bind$alg(r4, &(0x7f00000015c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001680), r4) sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f0000001780)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001740)={&(0x7f00000016c0)={0x50, r5, 0x208, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x50}}, 0x4008000) ioctl$BTRFS_IOC_INO_PATHS(r4, 0xc0389423, &(0x7f0000001800)={0x7, 0x8, [0x6, 0x8000, 0x0, 0x3], &(0x7f00000017c0)=[0x0]}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000001840)={r3, @in={{0x2, 0x4e20, @loopback}}}, &(0x7f0000001900)=0x84) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000001940)='dctcp-reno', 0xa) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000001980)={r6, 0x50e}, &(0x7f00000019c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000001a00)={r7, @in={{0x2, 0x4e22, @multicast2}}, 0xb, 0x9, 0x5, 0x4, 0x2, 0x7, 0xf2}, 0x9c) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001ac0)={0x8001, 0x0}, 0x8) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001b00)=r8, 0x4) write$ppp(0xffffffffffffffff, &(0x7f0000001b40), 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000001b80)=0x7, 0x4) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000001bc0)=@hopopts={0x17, 0x3, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0xa}}, @padn={0x1, 0x2, [0x0, 0x0]}]}, 0x28) ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f0000001c00)={r4, 0x48, 0xd, "85bfffb87870907ee4985bc551d398b5aade6d82068776e2b0536bd68357076a49aae582d0dbd3d582d97efd476f7d7fe48f140ea876dbef125754439f8fa56873a4071a3b9dbf478f7b497bff8ab403cee3cb5e0848a8364cfb086a537c3a0320cb3b2fe5503b00a74c7b27668a63ddf5451c3888988d18a9672685da0d8d9f3bb8"}) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000001cc0), &(0x7f0000001d00)=0x10, 0x80000) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000001d40)={r9}, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000001e00)=@nat={'nat\x00', 0x1b, 0x5, 0x4f0, 0x260, 0x140, 0xffffffff, 0x260, 0x350, 0x420, 0x420, 0xffffffff, 0x420, 0x420, 0x5, &(0x7f0000001d80), {[{{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@ipv6header={{0x28}, {0x53, 0x60, 0x1}}, @common=@hl={{0x28}, {0x1, 0x6}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x22}, @ipv4=@remote, @gre_key=0x9, @gre_key=0x637}}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={{0x30}, {0x3b, 0x51, 0xe, 0x27, 0x7196, 0xd8, 0x3000}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x8, @ipv6=@loopback, @ipv6=@empty, @gre_key=0x4, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @local, [0xff000000, 0xffffffff, 0x0, 0xff000000], [0x0, 0xffffff00, 0x0, 0xff000000], 'veth1_to_bridge\x00', 'hsr0\x00', {}, {0xff}, 0x88, 0x79, 0x5, 0x39}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x18, @ipv6=@mcast1, @ipv6=@empty, @port=0x4e24, @gre_key=0x200}}}, {{@ipv6={@private0, @private2, [0xff, 0xff000000, 0xffffff00, 0xffffff00], [0xffffff00, 0x0, 0xff000000, 0xff], 'veth1_to_bond\x00', 'pimreg\x00', {}, {}, 0x6, 0xa, 0x4, 0x4}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x550) sendmsg$TIPC_CMD_GET_NETID(r10, &(0x7f0000002480)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002440)={&(0x7f0000002400)={0x1c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) 796.255446ms ago: executing program 0 (id=4094): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40811}, 0x820) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x50, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000003aaaaaaaaaa348100000086dd60910100001611fffe8000000000000000000000000000bbfe6300000000000000000000001e9878733b59089f2d31ccb2e400aa00000e2200"], 0x0) 688.088694ms ago: executing program 0 (id=4095): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x10}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x3e661d2f28cd91dc}, 0x4840) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000001000390423bd7000fbdbdf2500000000", @ANYRES32=r4, @ANYBLOB="81b0000000000000180012800b000100697036677265000008000280040012005cbe962b528c7dda65e06a70b9788726ba2bdadd46bc"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4040844) ioctl$NILFS_IOCTL_GET_BDESCS(r3, 0xc0186e87, &(0x7f00000004c0)={&(0x7f00000003c0)=[{0x4, 0xffff, 0x2, 0x100000001, 0x1}, {0xd3, 0x0, 0x2, 0x1, 0x7}, {0x800, 0x8000000000000001, 0x1, 0x7, 0xb}, {0x7, 0xa, 0x5, 0x2, 0x4}, {0x8, 0x4, 0x7, 0x28dda817, 0x4}], 0x5, 0x28, 0x9}) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000001000370429bd7000fcdbdf2500000000", @ANYRES32=r4, @ANYBLOB="890c020044800400440012800b00010069703667726500003400028008"], 0x64}, 0x1, 0x0, 0x0, 0x2000c800}, 0x20000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000071104e000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='ip6tnl0\x00'}) 668.262215ms ago: executing program 4 (id=4096): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000025c0)=""/4096, 0x1000}], 0x1}, 0x40000300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) 628.153997ms ago: executing program 1 (id=4097): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0x2, 0x2, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000047000701feffffffffffffff017c0000380004804e2c", @ANYRESDEC], 0x4c}, 0x1, 0x0, 0x0, 0x4048411}, 0xc) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e23, @loopback}, {0x2, 0x4e22, @remote}, {0x2, 0x4e21, @multicast2}, 0x20, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x5}) sendmsg$inet(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @multicast1}, 0xf, &(0x7f00000000c0)=[{&(0x7f0000002100)="0800a9fc0da6b30a", 0x8}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00'], 0x30}, 0x0) r3 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) r4 = socket$can_raw(0x1d, 0x3, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1d, 0xc, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x6b}}]}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$can_raw(r4, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r6}, 0x10, &(0x7f0000000100)={0x0}, 0x2, 0x0, 0x0, 0x44984}, 0x8005) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000000)={0x0, 0xea60}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="120000007f0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r8, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r7}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r9, &(0x7f0000000500), 0x0}, 0x20) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x71e7}, {0x8, 0x13, 0x1}, {0x5, 0x14, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004800}, 0x8811) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002000a0101020c000280050001000000000008000740000000001c000f"], 0x84}, 0x1, 0x0, 0x0, 0x4048054}, 0x0) 538.735143ms ago: executing program 0 (id=4098): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @local}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x6, 0x7, 0x6, 0x4f, 0x8}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @private=0xa010101}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) connect$bt_rfcomm(r1, &(0x7f00000003c0)={0x1f, @any, 0x9}, 0xa) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@ipv4_newrule={0x2c, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}, [@FRA_DST={0x8, 0x1, @local}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x2}]}, 0x2c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LISTALL(r5, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20005}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, r6, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="8000020080280000140012900b00010062617461647600d10400028008000a00f15037c9cf1f7bd52be3f71dc156a9a44ff4262057641d6f8980abf8540061985c5b74a5f051eb7cc4f23e5fe277e94f3bcd1e2ae0cb39a7253632dcf527c2df6bce216f4f6dc4804bc01b7f26ddc42b8b89dd7fd41eb8598d8d232f57bbf44f2f442f1bb5749284d4f8d19691396d0aebf065d464bcb31efac395893e9f16237f69d9e1b66e7d0486ba7d03273d42d77405892c1c1b97faea65ccea8268aaf9a0789358123bda350f5c4f2ae6fe96f90360770b355c8c0755a0c8ff98d0b0ff4363c769362673d1", @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x40000) 519.627138ms ago: executing program 0 (id=4099): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0x13, 0x0, 0x4070bd2e, 0x25dfdbfc, [@sadb_key={0x1, 0x9}, @sadb_address={0x5, 0x6, 0x2b, 0x0, 0x0, @in6={0xa, 0x4e20, 0x7, @mcast1, 0x80000001}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc, 0xc0000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0xff, @local, 0x96}}, @sadb_lifetime={0x4, 0x4, 0x0, 0x9, 0x5, 0x10000}]}, 0x98}, 0x1, 0x7}, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', r2, r4, 0x0, 0x0, 0x1}, 0x50) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, r1, 0x701, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000340), &(0x7f000001f200)=0x4) 440.799417ms ago: executing program 0 (id=4100): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000200)={0x0, 0x4, 0x10, 0xfffffffffffffff8, 0x40}, &(0x7f00000002c0)=0x18) sendmmsg$inet6(r0, &(0x7f00000060c0), 0x0, 0x4008000) 395.855733ms ago: executing program 6 (id=4101): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018100000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700003b0000000000800000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x5ec37000) mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x2000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x4e25, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x48}, 0x0) r2 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000340)='\x00\x00\x00', 0x3}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000440)=""/81, 0x51}], 0x1, &(0x7f0000000580)=""/196, 0xc4}, 0x40000022) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x2000000000032, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000440)=ANY=[@ANYBLOB="0180c2030000000000000000080045000048000000000901907864010102ac14140c03019078032400004b00800000010081008400077f00000164016a2331e2c2fe8317b3ffffffff0000000000000000e0000002ac"], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018100000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700003b0000000000800000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x5ec37000) (async) mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x2000) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x4e25, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x48}, 0x0) (async) socket$kcm(0x1e, 0x5, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000340)='\x00\x00\x00', 0x3}], 0x1}, 0x0) (async) recvmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000440)=""/81, 0x51}], 0x1, &(0x7f0000000580)=""/196, 0xc4}, 0x40000022) (async) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x2000000000032, 0xffffffffffffffff, 0x0) (async) syz_emit_ethernet(0x56, &(0x7f0000000440)=ANY=[@ANYBLOB="0180c2030000000000000000080045000048000000000901907864010102ac14140c03019078032400004b00800000010081008400077f00000164016a2331e2c2fe8317b3ffffffff0000000000000000e0000002ac"], 0x0) (async) 369.038757ms ago: executing program 0 (id=4102): r0 = socket$tipc(0x1e, 0x5, 0x0) close(r0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x4, {0x2, 0x0, 0x0, 0x0, 0x0, 0x8}, [@NDA_DST_IPV4={0x8, 0x1, @multicast1}, @NDA_FDB_EXT_ATTRS={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x20000080) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0xfffffff5, {0x0, 0x0, 0x4a00, 0x0, 0x2844a}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0d1}, 0x8800) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000280)=[{0x80000006, 0x9, 0xd, 0x7fff}]}, 0x10) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000180)) bind$bt_hci(r6, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x4, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x58010}, 0x800) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r9, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff730d00000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409eaa988dbc2fee9d313d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb61799257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f0b2ad1eb9769d74e4f1feff374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae20bf279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522f7dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724190000006f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0ed9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627820d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b4047979379dc15c9056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221f05e6ca8c705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f12fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab778c50a3337a78675f38a568612aa25d61ce4e2c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008435f39381c2a77c001caae53db7316fa6d48d032ab6831ebb813c85855c7a9ad8140a4b29422fc20d4e75c848984a2e217ec9c2833b8fa9106ee1be2c05103a36fc1126f1aa5284ba7179843b08ecadc199b9038cf6b9ee4e1f321a6a32e03bd987ddfada1f69756651b73a7ed0f7e467081193b28448692686ac80d81a89f9c29e276800"/2572], &(0x7f0000000140)='GPL\x00'}, 0x94) r10 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r10, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r11 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r11, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) 251.100385ms ago: executing program 5 (id=4103): pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000004c0)={0xe0000012}) 186.735868ms ago: executing program 6 (id=4104): r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@tipc=@name, &(0x7f0000000080)=0x80) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000ac0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000440)={0x624, r1, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xf, 0x4c}}}}, [@NL80211_ATTR_TX_RATES={0x1d0, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x0, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2f, 0x2, [{0x3}, {0x5, 0x6}, {0x6, 0x2}, {0x6, 0x1}, {0x6, 0x5}, {0x0, 0x3}, {0x4, 0x6}, {0x3, 0xa}, {0x2, 0x2}, {0x2, 0x4}, {0x6, 0x6}, {0x3, 0x8}, {0x5, 0x8}, {0x6, 0x3}, {0x7, 0x9}, {0x0, 0x5}, {0x2, 0x8}, {0x7, 0x6}, {0x4, 0x3}, {0x6, 0x7}, {0x1, 0x7}, {0x6, 0x9}, {0x1, 0x6}, {0x1, 0x9}, {0x5}, {0x0, 0xa}, {0x4, 0x6}, {}, {0x0, 0x7}, {0x7, 0x4}, {0x1, 0x9}, {0x4, 0x3}, {0x2, 0x4}, {0x1}, {0x3, 0x2}, {0x1, 0x8}, {0x4, 0x9}, {0x0, 0x1}, {0x5, 0xa}, {0x3}, {0x1, 0x1}, {0x2}, {0x0, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xf, 0x7, 0x0, 0x101, 0xb, 0x9, 0x7f]}}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x4}, {0x7, 0x2}, {0x6, 0xa}, {0x5}, {0x2, 0x7}, {0x4, 0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x7}, {0x1, 0x2}, {0x1}, {0x6, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x7, 0x9}, {0x0, 0x7}, {0x2, 0x9}, {0x3}, {0x7, 0xa}, {0x0, 0x9}, {0x0, 0x4}, {0x6, 0x3}, {0x5, 0x9}, {0x6, 0x4}, {0x6, 0x5}, {0x1, 0xa}, {0x2, 0x7}, {0x3, 0x8}, {0x0, 0x2}, {0x4, 0x2}, {0x4, 0x2}, {0x7, 0x7}, {0x6, 0x6}, {0x5, 0x1}, {0x0, 0x2}, {0x5, 0x3}, {0x0, 0x4}, {0x2, 0xa}, {0x0, 0x4}, {0x0, 0x6}, {0x5, 0x4}, {0x6, 0x7}, {0x0, 0x9}, {0x4}, {0x1, 0x6}, {0x0, 0x6}, {0x7, 0x1}, {0x3, 0x6}, {0x5, 0x1}, {0x7, 0x8}, {0x6, 0x9}, {0x2}, {0x5, 0x3}, {0x7, 0x4}, {0x2, 0x3}, {0x7, 0x7}, {}, {0x0, 0x5}, {0x4, 0x9}, {0x1, 0x6}, {0x4, 0x2}, {0x1, 0x5}, {0x6, 0x2}, {0x5, 0x8}, {0x1, 0x1}, {0x2, 0x2}, {0x1, 0x1}]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x4, 0x2}, {0x4, 0xa}, {0x5, 0x5}, {0x1, 0x1}, {0x1, 0x6}, {0x3, 0x8}, {0x0, 0x5}, {0x4, 0x8}, {0x6, 0x7}, {0x3, 0x1}, {0x0, 0x7}, {0x5, 0x1}, {0x7, 0x4}, {0x1, 0x9}, {0x7, 0x3}, {0x4, 0x7}, {0x3, 0x2}, {0x6, 0x3}, {0x7}, {}, {0x5, 0x3}, {0x4, 0x4}, {0x1, 0x7}, {0x0, 0xa}, {0x6, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x6, 0x3}, {0x7, 0x8}, {0x6, 0x7}, {0x4, 0x8}, {0x1, 0x7}, {0x2, 0x9}, {0x7, 0x2}]}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x800, 0x7f, 0x1000, 0x2, 0xffff, 0x100, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0xa0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4a, 0x2, [{0x6, 0x7}, {0x7, 0x9}, {0x0, 0x7}, {0x2, 0x3}, {0x1, 0x1}, {0x0, 0x8}, {0x5, 0x2}, {0x1, 0x7}, {0x6, 0x5}, {0x5, 0x8}, {0x1, 0x3}, {0x5, 0x8}, {0x3, 0x5}, {0x2, 0x7}, {0x5, 0x2}, {0x3, 0xa}, {0x7, 0x7}, {0x2}, {0x7, 0x8}, {0x1, 0x5}, {0x6, 0x8}, {0x1, 0x7}, {0x2, 0x3}, {0x5, 0x3}, {0x0, 0xa}, {0x5, 0x2}, {0x4, 0x8}, {0x7}, {0x2, 0x6}, {0x1, 0x3}, {0x5, 0x1}, {0x4, 0x7}, {0x2, 0x9}, {0x1, 0x1}, {0x3, 0x5}, {0x7}, {0x1, 0x5}, {0x0, 0x9}, {0x1}, {0x0, 0x6}, {0x4, 0x7}, {0x0, 0xa}, {0x6, 0x3}, {0x0, 0x6}, {0x2}, {0x5, 0xa}, {0x1}, {0x4, 0x2}, {0x1, 0x5}, {0x6}, {0x2, 0xa}, {0x7, 0x6}, {0x1, 0x2}, {0x1, 0x5}, {0x1, 0x1}, {0x0, 0x6}, {0x5, 0x8}, {0x4, 0x3}, {0x1, 0x4}, {0x6, 0x9}, {0x0, 0x9}, {0x2, 0x2}, {0x4, 0xa}, {0x1, 0x8}, {0x6, 0x8}, {0x7, 0x8}, {0x3, 0x4}, {0x6, 0x7}, {0x6, 0x5}, {0x0, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x9, 0x9, 0x1, 0xf2e, 0xfffe, 0x9, 0x465]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x1, 0x8}, {0x4, 0x2}, {0x1}, {0x2, 0x9}, {0x5, 0x4}, {0x5, 0x2}, {0x2, 0xa}, {0x6, 0xa}, {0x6, 0x3}, {0x6, 0x7}, {0x2, 0x8}, {0x6, 0x2}, {0x3, 0x6}, {0x1, 0xa}, {0x6, 0x4}, {0x0, 0x8}, {0x5, 0x1}, {0x0, 0xa}, {0x0, 0x2}, {0x1, 0x1}, {0x7, 0x9}, {0x0, 0x7}, {0x7, 0x2}, {0x6, 0x5}, {0x5, 0x4}, {0x2, 0x1}, {}, {0x2, 0x7}, {0x1, 0x5}, {0x2, 0xa}, {0x3, 0x6}, {0x5}, {0x0, 0x1}, {0x0, 0x8}, {0x2, 0x8}, {0x4, 0x9}, {0x4, 0x5}, {0x7, 0x5}, {0x7}, {0x2, 0x6}, {0x3, 0xa}, {0x0, 0x2}, {0x7, 0x6}, {0x5, 0x1}, {0x6, 0x5}]}]}]}, @NL80211_ATTR_TX_RATES={0x2a0, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xbc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x11, 0x2, [{0x5, 0xa}, {0x0, 0x4}, {0x1, 0x7}, {0x4, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x6, 0x5}, {0x6, 0x4}, {0x7, 0x4}, {0x6, 0x6}, {}, {0x6, 0xa}, {0x5}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x5}, {0x7, 0x4}, {0x0, 0x5}, {0x0, 0x4}, {0x7, 0x1}, {0x1, 0x5}, {0x3, 0x2}, {0x7}, {0x3, 0x3}, {0x3, 0x5}, {}, {0x5, 0x1}, {0x5, 0xa}, {0x1, 0x5}, {0x0, 0x3}, {0x4}, {0x0, 0x9}, {0x4, 0x5}, {0x5, 0x6}, {0x6, 0x6}, {0x5, 0x2}, {0x0, 0x3}, {0x7, 0x2}, {0x7, 0x3}, {0x0, 0x5}]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x30, 0x6c, 0x24, 0x9, 0x3, 0x5, 0x16, 0x2, 0x12]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x6c, 0x1b, 0x70, 0x36, 0x1b, 0x6c, 0x1b, 0x36, 0xb, 0x60, 0x60, 0x5, 0x68, 0x1, 0x18, 0x1b, 0x5, 0x60, 0x48, 0x5, 0x48, 0x1b, 0x9, 0xb, 0x30]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x4, 0x6}, {0x6, 0x1}, {0x1, 0x2}, {0x7, 0x5}, {0x6, 0xa}, {0x2, 0x2}, {0x5, 0x7}, {0x3, 0x1}, {0x5, 0x3}, {0x7, 0x7}, {0x1, 0x6}, {0x1, 0xa}, {0x4, 0x8}, {0x6, 0x6}, {0x3, 0xa}, {0x0, 0x3}, {0x2, 0x9}, {0x3}, {0x6, 0x4}, {0x6, 0xa}, {0x3, 0x9}, {0x4, 0x9}, {0x0, 0x7}, {0x3}, {0x3, 0x8}, {0x5, 0x3}, {0x0, 0xa}, {0x0, 0x2}, {0x0, 0x4}, {0x6, 0x1}, {0x6, 0x8}, {0x4, 0xa}, {0x5, 0x1}, {0x1}, {0x5, 0x6}, {0x4, 0x1}, {0x2, 0x4}, {0x0, 0x2}, {0x1, 0x2}, {0x1}, {0x1, 0x1}, {0x3, 0x2}, {0x1, 0x4}, {}, {0x3, 0x1}, {0x5, 0x6}, {0x7, 0x3}, {0x0, 0x4}, {0x1, 0x1}, {0x2, 0x9}, {0x4, 0x7}, {0x2, 0xa}, {0x0, 0xa}, {0x3, 0x2}, {0x2, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0xc0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2d, 0x2, [{0x5, 0x2}, {0x7, 0x6}, {0x6, 0x9}, {0x0, 0x2}, {0x5}, {0x6, 0x4}, {0x4, 0x1}, {0x2, 0x2}, {0x3}, {0x7, 0x3}, {0x2, 0x4}, {0x7, 0x1}, {0x2, 0xa}, {0x6, 0x7}, {0x0, 0x6}, {0x6, 0x9}, {0x7}, {0x1, 0x4}, {0x0, 0x9}, {0x1, 0x1}, {0x1, 0x5}, {0x7, 0x2}, {0x0, 0x2}, {0x3, 0x6}, {0x4, 0x3}, {0x1, 0x8}, {0x2, 0x4}, {0x7, 0x2}, {0x0, 0x5}, {0x4, 0x4}, {0x1, 0x4}, {0x5, 0x8}, {0x2}, {0x4, 0x5}, {0x2, 0x5}, {0x4, 0xa}, {0x1, 0xa}, {0x4, 0x7}, {0x3, 0x1}, {0x3, 0x5}, {0x1, 0x9}]}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x3}, {0x2, 0x3}, {0x5, 0x2}, {0x1, 0x4}, {0x4, 0xa}, {0x6, 0x7}, {0x0, 0x3}, {0x2, 0x1}, {0x5, 0x2}, {0x4, 0xa}, {0x2, 0x8}, {0x3, 0xa}, {0x1}, {0x6, 0x3}, {0x2, 0x9}, {0x1, 0x2}, {0x7, 0xa}, {0x3, 0xa}, {0x6, 0x3}, {0x0, 0x5}, {0x5, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0x6, 0x401, 0x9, 0x8, 0xa2a, 0x8001, 0x7]}}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x3, 0x6}, {0x4, 0x1}, {0x5, 0xa}, {0x2, 0x4}, {0x5, 0x2}, {0x4}, {0x7, 0x1}, {0x0, 0x4}, {0x7, 0x1}, {0x7, 0x5}, {0x7, 0x2}, {0x1, 0x8}, {0x7, 0x7}, {0x3, 0x8}, {0x1, 0x3}, {0x4, 0x3}, {0x2}, {0x7, 0x2}, {0x6, 0x9}, {0x0, 0xa}, {0x7, 0xa}, {0x7, 0x3}, {0x3, 0x2}, {}, {0x7, 0x3}, {0x0, 0x2}, {0x2}, {0x0, 0x4}, {0x0, 0x1}, {0x2, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x80, 0x6, 0x6, 0x5, 0x4, 0x8, 0x100]}}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x1, 0x9}, {0x0, 0x12}, {0x7, 0x2}, {0x0, 0x4}, {0x2, 0x6}, {0x5, 0x4}, {0x4, 0x2}, {0x3, 0x9}, {0x0, 0x5}, {0x5, 0x6}, {0x5, 0x5}, {0x1}, {0x1, 0x4}, {0x3, 0x6}, {0x6, 0xa}, {0x4, 0x1}, {0x2, 0x2}, {0x1}, {0x4, 0x3}, {0x5, 0x4}, {0x1, 0x2}, {0x1, 0x9}, {0x1, 0x7}, {0x5, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0xb8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x7, 0xab, 0x101, 0x4, 0x4, 0x3, 0x50]}}, @NL80211_TXRATE_HT={0x50, 0x2, [{}, {0x7, 0x8}, {0x6, 0x7}, {0x0, 0xa}, {0x6, 0x8}, {0x0, 0x8}, {0x0, 0x8}, {0x2, 0x9}, {0x2, 0x9}, {0x4, 0x8}, {0x1, 0x8}, {0x0, 0x3}, {0x0, 0x8}, {0x7, 0x4}, {0x5, 0x4}, {0x1, 0x6}, {0x0, 0x2}, {0x4, 0x6}, {0x6, 0x6}, {0x1, 0x6}, {0x5, 0x5}, {0x1, 0x7}, {0x5, 0x1}, {0x1, 0x6}, {0x0, 0x8}, {0x4, 0x8}, {0x2}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x7}, {0x0, 0x7}, {0x0, 0x8}, {0x2}, {0x7, 0x3}, {0x1, 0x2}, {0x1, 0x1}, {0x1, 0x2}, {0x7, 0x5}, {0x6}, {0x4, 0xa}, {0x6, 0x4}, {0x4, 0x8}, {0x3, 0x9}, {0x1, 0xa}, {0x4, 0x5}, {0x2, 0x6}, {0x7, 0xa}, {0x0, 0x2}, {0x0, 0x5}, {0x0, 0x9}, {0x2, 0x2}, {0x0, 0x5}, {0x1}, {0x3, 0x5}, {0x3, 0x1}, {0x7, 0x4}, {0x7, 0x7}, {0x5, 0x5}, {0x6, 0x1}, {0x5, 0x2}, {0x6, 0x9}, {0x0, 0x8}, {0x3, 0x4}, {0x6, 0xa}, {0x0, 0x1}, {0x0, 0x7}, {0x5, 0x2}, {0x6, 0x9}, {0x2, 0x2}, {0x6, 0x5}, {0x4, 0xa}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x7, 0x2}, {0x2, 0x6}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x60, 0x6c, 0xc, 0x2, 0xc, 0x18, 0x48, 0x48, 0x3, 0x36, 0x2, 0x5, 0x6c, 0x3, 0x30, 0x1, 0x6c, 0x3, 0x60, 0x12]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0xd, 0xf10, 0x6, 0x80f, 0xf358, 0x5, 0x81]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x101, 0x7, 0xa, 0x1, 0x6, 0x4, 0x3ff]}}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x7, 0x3e, 0x86, 0x80, 0x9, 0x81, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x16, 0x48, 0x12, 0x1b, 0x48, 0x48, 0x16, 0x48, 0x12, 0x6, 0x6c, 0x16, 0xc, 0x12]}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x2, 0x2, 0x800, 0x1, 0x8000, 0xffc0]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x124, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x90, 0xfffc, 0x7, 0x40, 0x6, 0x6, 0x9]}}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xd5f7, 0x6, 0xf, 0x2, 0x1000, 0x9, 0xffff]}}]}, @NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x5c18f63a6ddc757d}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x1, 0x9}, {0x3, 0x2}, {0x0, 0x3}, {0x5, 0x4}, {0x2, 0x9}, {0x6, 0xa}, {0x0, 0xa}, {0x5, 0x8}, {0x4}, {0x0, 0x7}, {0x2, 0x7}, {0x5, 0xa}, {0x3, 0x2}, {0x6}, {0x0, 0x8}, {0x4, 0x6}, {0x4, 0x3}, {0x0, 0x3}, {0x1, 0x2}, {0x0, 0xa}, {0x7, 0x8}, {0x1}, {0x2, 0x9}, {0x2, 0x4}, {0x0, 0x2}, {0x4, 0x6}, {0x2, 0x7}, {0x7, 0x6}, {0x7}, {0x3, 0x9}, {0x1, 0x7}, {0x0, 0x8}, {0x0, 0x1}, {0x2, 0x5}, {0x7, 0x5}, {0x6, 0x9}, {0x5, 0x4}, {0x1}, {0x6, 0x5}, {0x1, 0x8}, {0x1}, {0x5, 0x3}, {0x0, 0xa}, {}, {0x0, 0x8}, {0x5, 0x5}, {0x5, 0x6}, {0x6, 0x5}, {0x2, 0x6}, {0x4, 0x6}, {0x5, 0x1}, {0x2, 0x3}, {0x2, 0x7}, {0x3, 0x2}, {0x0, 0x9}, {0x3, 0xa}, {0x0, 0x4}, {0x6, 0x2}, {0x5, 0x5}, {0x3, 0xa}, {0x4, 0x3}, {0x4, 0x7}, {0x1}, {0x3, 0x5}, {0x7, 0xa}, {0x2, 0x1}, {0x1, 0xa}, {0x4, 0x2}, {0x7, 0x1}, {0x7, 0x4}, {0x5, 0x1}, {0x5, 0x8}, {0x4}, {0x2, 0x7}, {0x5, 0x4}]}]}, @NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x16, 0x0, 0x10, 0x0, 0x76b9, 0x8, 0x5, 0x3]}}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xa1, 0x1, 0x5, 0xdc96, 0x3, 0x7, 0x13f, 0xb]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x5, 0x9, 0x3, 0x8, 0x6, 0x8000, 0x9d6f]}}]}]}, @NL80211_ATTR_TX_RATES={0x70, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2d, 0x2, [{0x4, 0x8}, {0x2, 0x2}, {0x4, 0x6}, {0x4}, {0x1, 0x3}, {0x3, 0x7}, {0x3, 0x2}, {0x7, 0x1}, {0x5, 0xa}, {0x6, 0x7}, {0x0, 0x7}, {0x7, 0x9}, {0x3, 0x2}, {0x1, 0x3}, {0x5, 0xa}, {0x1, 0x7}, {0x5, 0x5}, {0x0, 0xa}, {0x3, 0x4}, {0x1, 0xa}, {0x0, 0x5}, {0x6, 0x9}, {0x1, 0x2}, {0x6, 0x7}, {0x2, 0xa}, {0x4, 0x9}, {0x2, 0x9}, {0x0, 0x2}, {0x3, 0x5}, {0x0, 0x8}, {0x0, 0x4}, {0x0, 0x18}, {0x0, 0x5}, {0x6}, {}, {0x0, 0x3}, {0x6, 0x2}, {0x0, 0x2}, {0x1, 0x1}, {0x5, 0x4}, {0x2, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xff, 0x8, 0x2433, 0x0, 0x4, 0x8, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x5, 0x9, 0x4, 0x6, 0x24, 0x5, 0xc, 0x48, 0x36, 0x24]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, 0x624}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000400)={@cgroup, 0xe, 0x3a, 0x0, 0x0, 0xfffffffffffffe4a, 0x0, 0x0, 0x0, 0x0}, 0x40) 110.785005ms ago: executing program 5 (id=4105): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071112b00000000008510000002000000850000007d00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x10001) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000100)={r0, &(0x7f0000000000)='.-%,<]&*&]$\x00', 0x101000, &(0x7f0000000040)={@align, {0x800, 0x200, 0x8, 0x2}}, 0x80, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x2}) 52.553312ms ago: executing program 5 (id=4106): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x800000, 0x4, 0x20300, 0xfc}, 0x1c) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x80081, 0x0) ioctl$PPPIOCSMRRU(r3, 0x4004743b, &(0x7f0000000580)=0x9) ioctl$sock_ifreq(r2, 0x8916, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_names='ip6_vti0\x00'}) ioctl$sock_proto_private(r2, 0x8b22, &(0x7f0000000080)) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r4, &(0x7f0000000d00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000080)='e', 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000008c0)='K', 0x1}], 0x1}}], 0x2, 0x4000) shutdown(r4, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="aa8e0cf56164be5b", 0x8) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000100)=@req3={0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x861}, 0x1c) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {0x801a, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0x38}}, 0x4000800) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x400c840) 0s ago: executing program 6 (id=4107): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002885000000c700000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x9a, &(0x7f0000000b00)=""/154, 0x41000, 0xa}, 0x94) (async, rerun: 64) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r1, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x75e2dd62}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xb8e}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4e8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x50}, 0x84) kernel console output (not intermixed with test programs): 0 port 8472 - 0 [ 405.843179][T10566] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.919033][T17804] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2965'. [ 405.957435][T17813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2967'. [ 405.981743][T17813] unsupported nla_type 216 [ 406.097269][T17306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.231289][T17306] veth0_vlan: entered promiscuous mode [ 406.259198][T17306] veth1_vlan: entered promiscuous mode [ 406.311921][T17306] veth0_macvtap: entered promiscuous mode [ 406.325475][T17821] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2968'. [ 406.348840][T17306] veth1_macvtap: entered promiscuous mode [ 406.369224][T17821] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2968'. [ 406.395948][T17821] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2968'. [ 406.421104][T17821] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2968'. [ 406.466990][T17821] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2968'. [ 406.502949][T17821] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2968'. [ 406.519707][T17306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 406.542394][T17306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 406.561060][T10559] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.584735][T10559] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.599093][T10559] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.625362][T17363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.653931][T10559] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.692858][T17837] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2969'. [ 407.029625][T10566] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.063042][T10566] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.140078][T10559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.164682][T10559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.416236][T17363] veth0_vlan: entered promiscuous mode [ 407.443398][T17363] veth1_vlan: entered promiscuous mode [ 407.577135][T17363] veth0_macvtap: entered promiscuous mode [ 407.621175][T17363] veth1_macvtap: entered promiscuous mode [ 407.679497][T17363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.718151][T17363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.759930][T10568] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.784736][T10568] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.815732][T17869] netlink: 'syz.1.2976': attribute type 1 has an invalid length. [ 407.872099][T10568] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.894735][T10568] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.988372][T17874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2977'. [ 408.063776][T17874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2977'. [ 408.745792][T10560] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.789625][T10560] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.921696][T10566] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.943044][T10566] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.972413][T17902] syzkaller0: entered promiscuous mode [ 408.986696][T17902] syzkaller0: entered allmulticast mode [ 409.013286][T17902] netlink: 'syz.5.2983': attribute type 27 has an invalid length. [ 409.034288][ T5626] Bluetooth: hci3: command 0x0405 tx timeout [ 409.059376][T17902] 0ªî{X¹¦: left allmulticast mode [ 409.156430][T17902] batman_adv: batadv0: Interface deactivated: dummy0 [ 409.348025][T17902] netdevsim netdevsim5 netdevsim0: left allmulticast mode [ 409.412328][T17902] ip6tnl1: left allmulticast mode [ 409.439873][T17902] mac80211_hwsim hwsim21 syzkaller1: left promiscuous mode [ 409.451024][T17902] mac80211_hwsim hwsim21 syzkaller1: left allmulticast mode [ 409.466149][T17902] macsec1: left promiscuous mode [ 409.482584][T17902] syzkaller0: left promiscuous mode [ 409.493951][T17902] syzkaller0: left allmulticast mode [ 409.550364][T17915] bridge0: left promiscuous mode [ 409.559176][T17915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.571120][T17915] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.581562][T17915] batman_adv: batadv0: Interface activated: dummy0 [ 409.589151][T17915] net_ratelimit: 10 callbacks suppressed [ 409.589255][T17915] batadv0: mtu less than device minimum [ 409.606356][T17915] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 409.617639][T17915] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 409.628705][T17915] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 409.640418][T17915] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 409.652161][T17915] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 409.663637][T17915] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 409.675422][T17915] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 409.687222][T17915] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 409.698980][T17915] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 409.745254][T17915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.819076][T17915] veth1_vlan: left promiscuous mode [ 409.826238][T17915] veth0_vlan: left promiscuous mode [ 409.832845][T17915] veth0_vlan: entered promiscuous mode [ 409.846705][T17915] veth1_vlan: entered promiscuous mode [ 409.858601][T17915] veth1_macvtap: left promiscuous mode [ 409.865053][T17915] veth0_macvtap: left promiscuous mode [ 409.871789][T17915] veth0_macvtap: entered promiscuous mode [ 409.879903][T17915] veth1_macvtap: entered promiscuous mode [ 409.891943][T17915] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 409.900239][T17915] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 409.908205][T17915] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 409.921678][T17915] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 409.939649][T17915] 8021q: adding VLAN 0 to HW filter on device bond1 [ 410.076680][T17931] veth6: entered allmulticast mode [ 410.256901][T17942] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2990'. [ 410.349446][T10566] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 410.372019][ T6617] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 410.380438][T10566] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 410.407300][T10566] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 410.435007][ T6617] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 410.442851][T10566] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 410.458025][T17949] netlink: 'syz.1.2993': attribute type 21 has an invalid length. [ 410.494546][ T5749] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 410.650525][ T5626] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 410.668902][ T5626] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 410.679698][ T5626] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 410.688095][ T5626] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 410.699577][ T5626] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 410.824371][ T5749] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 411.013963][ T6623] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 411.055692][ T6623] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 411.329513][T17982] mac80211_hwsim hwsim21 syzkaller1: entered promiscuous mode [ 411.352850][T17982] mac80211_hwsim hwsim21 syzkaller1: entered allmulticast mode [ 411.526451][T17970] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 411.532808][T17970] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 411.596309][T17970] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 411.617015][T17970] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 411.638926][T18000] __nla_validate_parse: 4 callbacks suppressed [ 411.638945][T18000] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3000'. [ 411.656910][T18001] xt_connbytes: Forcing CT accounting to be enabled [ 411.668217][T17987] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2998'. [ 412.095933][T17970] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 412.113672][T17970] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 412.135988][T18017] ieee802154 phy0 wpan0: encryption failed: -22 [ 412.617119][T17951] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.624814][T17951] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.632146][T17951] bridge_slave_0: entered allmulticast mode [ 412.644032][T17951] bridge_slave_0: entered promiscuous mode [ 412.653655][T17951] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.661384][T17951] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.670547][T17951] bridge_slave_1: entered allmulticast mode [ 412.679097][T17951] bridge_slave_1: entered promiscuous mode [ 412.728179][T17951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.741337][T17951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.801489][ T5624] Bluetooth: hci7: command tx timeout [ 413.040718][T18034] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3008'. [ 413.597631][T18044] netlink: 'syz.6.3010': attribute type 1 has an invalid length. [ 413.728576][T17951] team0: Port device team_slave_0 added [ 413.738751][T17951] team0: Port device team_slave_1 added [ 413.800683][T17951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.816510][T17951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.876471][T17951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.889944][T17951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.897289][T17951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.936857][T17951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.208210][T18066] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3017'. [ 414.240360][T18066] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3017'. [ 414.250123][T17951] hsr_slave_0: entered promiscuous mode [ 414.267447][T17951] hsr_slave_1: entered promiscuous mode [ 414.284426][T17951] debugfs: 'hsr0' already exists in 'hsr' [ 414.297471][T17951] Cannot create hsr debugfs directory [ 414.425637][T18078] xt_CT: You must specify a L4 protocol and not use inversions on it [ 415.038796][T17951] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.053590][T17951] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.084909][T10565] net_ratelimit: 31 callbacks suppressed [ 415.084927][T10565] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 415.107313][T10565] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 415.306437][T18130] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3035'. [ 415.341103][T18132] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3034'. [ 415.367877][T17951] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.391528][T18135] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3035'. [ 415.397638][T17951] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.542139][T18144] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3034'. [ 415.601125][T18135] bond2: entered promiscuous mode [ 415.617210][T18135] bond2: entered allmulticast mode [ 415.629845][T18135] 8021q: adding VLAN 0 to HW filter on device bond2 [ 415.697262][ T8110] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 415.711873][ T8110] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 415.820438][T17951] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.838726][T17951] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.089868][T18165] netlink: 'syz.5.3042': attribute type 1 has an invalid length. [ 416.131449][T17951] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 416.146292][T17951] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.284557][T10566] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 416.299412][T10566] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 416.322130][T18165] 8021q: adding VLAN 0 to HW filter on device bond3 [ 416.336679][T18166] bond3: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 416.347093][T18166] bond3: entered allmulticast mode [ 416.439299][T18165] bond3: (slave ip6gretap2): Enslaving as an active interface with an up link [ 416.656661][T18177] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3044'. [ 416.823719][T10565] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 416.838649][T10565] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 416.906688][T17951] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 416.931442][T17951] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 416.940597][T18188] bond0: (slave ip6tnl0): Error: Device type is different from other slaves [ 416.951783][T17951] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 416.960283][T18188] openvswitch: netlink: IP tunnel dst address not specified [ 416.978281][T18188] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3047'. [ 416.990131][T17951] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 416.998001][T18190] netlink: 'syz.6.3048': attribute type 1 has an invalid length. [ 417.007419][T17951] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 417.055547][T17951] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 417.065482][T17951] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 417.103198][T17951] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 417.210018][T18198] netlink: 'syz.5.3049': attribute type 1 has an invalid length. [ 417.222253][T18201] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3050'. [ 417.332684][T18199] veth7: entered allmulticast mode [ 417.378418][T18202] bond4: (slave veth0_to_bond): making interface the new active one [ 417.403865][T18202] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 417.413116][ T8110] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 417.679488][T18221] netlink: 180 bytes leftover after parsing attributes in process `syz.5.3054'. [ 417.695180][T17976] udevd[17976]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 417.847582][T17951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.916534][T17951] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.985004][T10560] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.992211][T10560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.066854][T10568] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.074144][T10568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.344469][T18237] pim6reg1: entered promiscuous mode [ 418.364158][T18237] pim6reg1: entered allmulticast mode [ 418.550554][T18249] syzkaller0: entered promiscuous mode [ 418.570384][T18249] syzkaller0: entered allmulticast mode [ 418.777054][T18271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3066'. [ 419.057544][T18284] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3069'. [ 419.117645][T18288] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3070'. [ 419.121126][T18279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3068'. [ 419.302569][T18295] netlink: 'syz.1.3072': attribute type 1 has an invalid length. [ 419.307510][T18288] bond5: option ad_actor_sys_prio: invalid value (0) [ 419.317980][T18288] bond5: option ad_actor_sys_prio: allowed values 1 - 65535 [ 419.327903][T18288] bond5 (unregistering): Released all slaves [ 419.449382][T18298] bond1: (slave geneve2): making interface the new active one [ 419.457792][T18298] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 419.468164][T10568] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 419.488168][T10568] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 419.509096][ T8110] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 419.563449][ T8110] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 419.834301][T18325] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3075'. [ 419.972336][T18332] bond1: Removing last arp target with arp_interval on [ 420.031042][T18337] tunl0: entered promiscuous mode [ 420.108165][T17951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 420.122401][T18340] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3080'. [ 420.335869][T18349] netlink: 'syz.6.3082': attribute type 1 has an invalid length. [ 420.445753][T18356] netlink: 'syz.6.3082': attribute type 10 has an invalid length. [ 420.495494][ T8110] net_ratelimit: 12 callbacks suppressed [ 420.495510][ T8110] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 420.516091][ T8110] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 420.555336][T18356] dummy0: entered promiscuous mode [ 420.837925][T17951] veth0_vlan: entered promiscuous mode [ 420.899731][T17951] veth1_vlan: entered promiscuous mode [ 421.087115][T10551] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 421.101584][T10551] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 421.132016][T17951] veth0_macvtap: entered promiscuous mode [ 421.183652][T17951] veth1_macvtap: entered promiscuous mode [ 421.204289][T18397] netlink: 'syz.6.3093': attribute type 4 has an invalid length. [ 421.246792][T18397] netlink: 'syz.6.3093': attribute type 4 has an invalid length. [ 421.281361][T17951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.318023][T17951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.401876][T18402] ipt_rpfilter: unknown options [ 421.441028][T18397] netlink: 'syz.6.3093': attribute type 4 has an invalid length. [ 421.451032][T10554] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.486654][T10554] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.517131][T10554] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.715226][T10566] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 421.729717][T10566] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 421.778627][T17842] udevd[17842]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 421.795915][T17976] udevd[17976]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 422.264961][T10568] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 422.279431][T10568] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 422.815123][T10568] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 422.829567][T10568] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 423.105405][T10554] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.435393][ C0] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 423.435413][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 423.449133][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 423.542371][T18434] x_tables: duplicate underflow at hook 2 [ 423.600538][T10554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.611007][T10554] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.714667][T10551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.729826][T10551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.002292][T18451] __nla_validate_parse: 5 callbacks suppressed [ 424.002311][T18451] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3106'. [ 424.544315][ T5626] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 424.566079][ T5626] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 424.575566][ T5626] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 424.593913][ T5626] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 424.599872][T18477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3114'. [ 424.629795][ T5626] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 424.952583][T18496] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3119'. [ 425.011675][T18502] netlink: 'syz.5.3117': attribute type 4 has an invalid length. [ 425.235712][T18514] x_tables: duplicate underflow at hook 3 [ 425.303033][T18509] syzkaller0: entered promiscuous mode [ 425.311123][T18509] syzkaller0: entered allmulticast mode [ 425.609802][T18533] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3125'. [ 425.633292][T18533] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3125'. [ 425.668420][T18533] geneve2: entered promiscuous mode [ 425.743903][T18541] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3126'. [ 425.891318][T18545] syzkaller0: entered promiscuous mode [ 425.897760][T18545] syzkaller0: entered allmulticast mode [ 425.931860][T10565] net_ratelimit: 10 callbacks suppressed [ 425.931880][T10565] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 425.953114][T10565] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 425.984596][T18552] bond1: option fail_over_mac: invalid value (127) [ 426.009725][T18552] bond1 (unregistering): Released all slaves [ 426.159807][T18562] netlink: 'syz.1.3133': attribute type 1 has an invalid length. [ 426.327949][T18564] syzkaller0: entered promiscuous mode [ 426.336473][T18564] syzkaller0: entered allmulticast mode [ 426.402365][T18473] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.410133][T18473] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.418990][T18473] bridge_slave_0: entered allmulticast mode [ 426.430855][T18473] bridge_slave_0: entered promiscuous mode [ 426.505482][T18473] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.511844][T18574] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3137'. [ 426.518850][T18473] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.537518][T10560] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 426.552483][T10560] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 426.576908][T18473] bridge_slave_1: entered allmulticast mode [ 426.597153][T18473] bridge_slave_1: entered promiscuous mode [ 426.708270][T18473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.718647][ T5626] Bluetooth: hci4: command tx timeout [ 426.736364][T18473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.765064][T18580] syzkaller0: entered promiscuous mode [ 426.774112][T18580] syzkaller0: entered allmulticast mode [ 426.878474][T18473] team0: Port device team_slave_0 added [ 426.925818][T18473] team0: Port device team_slave_1 added [ 427.061356][T17976] udevd[17976]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 427.110032][T18595] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3143'. [ 427.117390][T10566] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 427.133452][T10566] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 427.135794][T18595] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3143'. [ 427.160769][T18473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.168283][T18473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.194853][T18473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.262262][T18584] A link change request failed with some changes committed already. Interface 26±ÿ-œL5³ŸÅQ may have been left with an inconsistent configuration, please check. [ 427.292781][T18473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.300179][T18473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.326900][T18473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.343042][T18599] netlink: 'syz.1.3144': attribute type 4 has an invalid length. [ 427.432231][T18603] block nbd6: not configured, cannot reconfigure [ 427.448024][T18607] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3146'. [ 427.680187][T10566] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 427.694687][T10566] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 427.753298][T18473] hsr_slave_0: entered promiscuous mode [ 427.771695][T18473] hsr_slave_1: entered promiscuous mode [ 427.793684][T18473] debugfs: 'hsr0' already exists in 'hsr' [ 427.816424][T18473] Cannot create hsr debugfs directory [ 427.868340][T18628] A link change request failed with some changes committed already. Interface 26±ÿ-œL5³ŸÅQ may have been left with an inconsistent configuration, please check. [ 428.044317][T10556] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.058097][T10556] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.100475][T10556] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.135660][T10556] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.318667][T18644] netlink: 'syz.1.3155': attribute type 8 has an invalid length. [ 428.587542][T18473] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.625741][T18473] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.642097][T18662] netlink: 'syz.4.3161': attribute type 1 has an invalid length. [ 428.793620][ T5626] Bluetooth: hci4: command tx timeout [ 428.964439][T18473] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.975094][T18473] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.037683][T18684] macsec1: entered promiscuous mode [ 429.055943][T18684] macsec1: entered allmulticast mode [ 429.064398][T18684] dummy0: entered allmulticast mode [ 429.147071][T18684] dummy0: left allmulticast mode [ 429.197863][T18692] tipc: Enabling of bearer rejected, already enabled [ 429.206342][T18693] __nla_validate_parse: 65 callbacks suppressed [ 429.206361][T18693] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3168'. [ 429.331001][T18473] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.338127][T18698] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3170'. [ 429.349835][T18473] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.479966][T18473] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.498546][T18473] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.510558][T18705] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3172'. [ 429.544227][T18705] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3172'. [ 429.682169][T18713] netlink: 'syz.6.3174': attribute type 1 has an invalid length. [ 429.690376][T18713] netlink: 'syz.6.3174': attribute type 12 has an invalid length. [ 429.706563][T18713] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3174'. [ 429.743713][T18473] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 429.758307][T18473] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 429.766466][T18473] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 429.780128][T18473] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 429.789822][T18473] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 429.792512][T18717] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3175'. [ 429.810683][T18473] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 429.820604][T18473] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 429.832835][T18473] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 429.892423][T18725] netlink: 'syz.6.3176': attribute type 1 has an invalid length. [ 429.959089][T18473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.994788][T18473] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.009261][T18727] netlink: 'syz.6.3177': attribute type 2 has an invalid length. [ 430.022077][T10568] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.029224][T10568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.040174][T10568] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.047311][T10568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.088395][T18727] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3177'. [ 430.101090][T18727] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3177'. [ 430.114646][T18728] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3177'. [ 430.128125][T18728] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3177'. [ 430.873976][ T5626] Bluetooth: hci4: command tx timeout [ 430.965494][T18473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.081905][T18473] veth0_vlan: entered promiscuous mode [ 431.098518][T18473] veth1_vlan: entered promiscuous mode [ 431.150101][T18473] veth0_macvtap: entered promiscuous mode [ 431.162296][T18473] veth1_macvtap: entered promiscuous mode [ 431.185312][T18473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.208205][T18473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.226977][T10568] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.280431][T10568] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.291362][T10568] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.302042][T10568] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.386312][T10565] net_ratelimit: 14 callbacks suppressed [ 431.386370][T10565] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 431.406879][T10565] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 431.488179][T10560] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.506564][T10560] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.550972][T10560] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.559886][T10560] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.927790][T18782] netlink: 'syz.0.3187': attribute type 13 has an invalid length. [ 431.955250][T10566] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 431.970308][T10566] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 432.093019][T18788] netlink: 'syz.1.3189': attribute type 12 has an invalid length. [ 432.253220][T18795] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 432.305399][T18798] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 432.405680][T18795] block nbd2: server does not support multiple connections per device. [ 432.446656][T18795] block nbd2: shutting down sockets [ 432.534076][T10554] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 432.549375][T10554] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 432.954051][ T5626] Bluetooth: hci4: command tx timeout [ 433.204651][T10556] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 433.219091][T10556] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 433.383107][T18850] batadv0: entered promiscuous mode [ 433.466382][T18856] syzkaller0: entered promiscuous mode [ 433.489363][T18856] syzkaller0: entered allmulticast mode [ 433.918481][T18877] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 434.331496][T18892] __nla_validate_parse: 6 callbacks suppressed [ 434.331508][T18892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3210'. [ 434.348057][T18892] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3210'. [ 434.358877][T18892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3210'. [ 434.370781][T18892] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3210'. [ 434.868668][T18906] syzkaller0: entered promiscuous mode [ 434.875010][T18906] syzkaller0: entered allmulticast mode [ 434.890396][T18906] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3214'. [ 436.403685][ T8110] net_ratelimit: 11 callbacks suppressed [ 436.403706][ T8110] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 436.424413][ T8110] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 436.597189][T18874] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 436.881826][T18919] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3217'. [ 436.955655][ T8110] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 436.970996][ T8110] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 437.494610][ T8108] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 437.509147][ T8108] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 438.036151][T10568] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 438.050800][T10568] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 438.574499][ T8110] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 438.589115][ T8110] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 438.699879][T18937] netlink: 160 bytes leftover after parsing attributes in process `syz.5.3224'. [ 438.742806][T18937] netlink: 'syz.5.3224': attribute type 11 has an invalid length. [ 438.901612][T18960] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3230'. [ 438.986980][T18960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.996391][T18960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.010433][T18960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.019767][T18960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.135181][T18967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3231'. [ 439.308403][T18974] mac80211_hwsim hwsim21 syzkaller1: left promiscuous mode [ 439.333564][T18974] mac80211_hwsim hwsim21 syzkaller1: left allmulticast mode [ 439.661725][T18995] netlink: 192 bytes leftover after parsing attributes in process `syz.6.3236'. [ 439.840408][T19006] C: renamed from veth1_to_team (while UP) [ 439.848236][T19006] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3239'. [ 439.860612][T19006] netlink: 'syz.1.3239': attribute type 4 has an invalid length. [ 439.886680][T19006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3239'. [ 440.027453][T19010] sock: sock_timestamping_bind_phc: sock not bind to device [ 440.081395][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.106431][T19012] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3241'. [ 440.117616][T19012] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3241'. [ 440.300984][T19020] syzkaller0: entered promiscuous mode [ 440.306836][T19020] syzkaller0: entered allmulticast mode [ 441.355612][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 441.365322][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 441.663762][T10556] net_ratelimit: 12 callbacks suppressed [ 441.663780][T10556] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 441.684502][T10556] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 442.204259][T10566] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 442.218659][T10566] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 442.349262][T18978] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 442.580153][T19029] netlink: 'syz.1.3246': attribute type 13 has an invalid length. [ 442.603020][T19029] netlink: 'syz.1.3246': attribute type 27 has an invalid length. [ 442.609904][T19033] netlink: 'syz.4.3244': attribute type 1 has an invalid length. [ 442.621064][T19028] ieee802154 phy0 wpan0: encryption failed: -22 [ 442.622857][T19029] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3246'. [ 442.734716][T10568] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 442.749947][T10568] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 443.032335][T19052] syzkaller1: entered promiscuous mode [ 443.053319][T19052] syzkaller1: entered allmulticast mode [ 443.277990][T10568] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 443.292461][T10568] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 443.633156][T19085] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3258'. [ 443.652232][T19084] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3259'. [ 443.691945][T19084] veth3: entered allmulticast mode [ 443.904553][T10556] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 443.922110][T10556] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 444.036832][T19107] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3264'. [ 444.188144][T19113] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3265'. [ 444.340414][T19128] ieee802154 phy0 wpan0: encryption failed: -22 [ 444.514327][T19133] xt_hashlimit: size too large, truncated to 1048576 [ 444.546234][T19135] netlink: 'syz.6.3271': attribute type 2 has an invalid length. [ 445.005284][T19156] __nla_validate_parse: 6 callbacks suppressed [ 445.005304][T19156] netlink: 160 bytes leftover after parsing attributes in process `syz.5.3274'. [ 445.036339][T19156] netlink: 'syz.5.3274': attribute type 11 has an invalid length. [ 445.108782][T19160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3275'. [ 445.444856][T19164] mac80211_hwsim hwsim21 syzkaller1: entered promiscuous mode [ 445.456781][T19164] mac80211_hwsim hwsim21 syzkaller1: entered allmulticast mode [ 446.135619][T19193] IPVS: set_ctl: invalid protocol: 33 127.0.0.1:20004 [ 446.179906][T19196] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3287'. [ 446.466018][T19207] geneve0: entered promiscuous mode [ 446.545289][T19214] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3290'. [ 446.602947][T19214] netlink: 'syz.4.3290': attribute type 10 has an invalid length. [ 446.714635][T19214] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 446.738879][T19214] team0: Port device netdevsim1 added [ 446.767523][T19224] netlink: 'syz.5.3293': attribute type 1 has an invalid length. [ 446.959175][T19224] bond5: entered promiscuous mode [ 446.971004][T19224] 8021q: adding VLAN 0 to HW filter on device bond5 [ 447.029911][T19239] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3298'. [ 447.041394][T19233] bond5: (slave bridge4): making interface the new active one [ 447.050283][ T8110] net_ratelimit: 12 callbacks suppressed [ 447.050302][ T8110] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 447.071391][ T8110] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 447.086725][T19233] bridge4: entered promiscuous mode [ 447.094235][T19233] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 447.203296][T19250] netlink: 'syz.4.3299': attribute type 5 has an invalid length. [ 447.330923][T19226] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.342742][T19226] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.355704][T19258] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3300'. [ 447.367301][T19226] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 447.401685][T19261] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3299'. [ 447.430605][T19256] veth0: entered promiscuous mode [ 447.440914][T19252] mac80211_hwsim hwsim21 syzkaller1: left promiscuous mode [ 447.449624][T19252] mac80211_hwsim hwsim21 syzkaller1: left allmulticast mode [ 447.460629][T19254] veth0: left promiscuous mode [ 447.461510][T19252] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3300'. [ 447.632424][T19226] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.643308][T10566] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 447.653917][T19226] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.657915][T10566] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 447.688327][T19226] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 447.977001][T19226] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.987949][T19226] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.005880][T19226] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 448.066895][T19277] syzkaller0: entered promiscuous mode [ 448.082098][T19277] syzkaller0: entered allmulticast mode [ 448.130116][T19276] tipc: Started in network mode [ 448.142110][T19276] tipc: Node identity , cluster identity 4711 [ 448.159910][T19276] tipc: Failed to obtain node identity [ 448.174964][T19276] tipc: Enabling of bearer rejected, failed to enable media [ 448.194412][ T8108] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 448.209130][ T8108] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 448.281123][T19226] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.293012][T19226] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.304146][T19226] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 448.336286][T19277] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3307'. [ 448.746155][ T8110] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.765849][ T8110] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 448.778904][ T8110] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 448.788361][ T8108] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 448.800746][T19295] syzkaller0: entered promiscuous mode [ 448.803111][ T8108] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 448.863132][T19295] syzkaller0: entered allmulticast mode [ 448.890913][T19297] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3312'. [ 448.901745][T10568] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.921090][T10568] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 448.940241][T10568] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 448.946354][T19295] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 449.017921][T10566] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.040520][T10566] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 449.054874][T10566] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 449.158277][T10559] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.168201][T10559] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 449.177236][T10559] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 449.356069][T10566] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 449.371163][T10566] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 449.840538][T19360] syz_tun: entered allmulticast mode [ 449.864772][T19360] netlink: 'syz.0.3327': attribute type 1 has an invalid length. [ 449.995391][T19360] dvmrp8: entered allmulticast mode [ 450.041239][T19359] syz_tun: left allmulticast mode [ 450.149833][T19374] __nla_validate_parse: 3 callbacks suppressed [ 450.149851][T19374] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3329'. [ 450.383325][T19385] Cannot find add_set index 0 as target [ 450.828168][T19396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3340'. [ 450.838705][ T6617] IPVS: starting estimator thread 0... [ 450.860935][T19396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3340'. [ 450.921249][T10559] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.932115][T19396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3340'. [ 450.936934][T19400] IPVS: using max 30 ests per chain, 72000 per kthread [ 450.952914][T10559] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.968067][T19396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3340'. [ 450.980276][T10559] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.999935][T10559] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.031440][T19406] netlink: 236 bytes leftover after parsing attributes in process `syz.4.3343'. [ 451.047453][T19406] netlink: 236 bytes leftover after parsing attributes in process `syz.4.3343'. [ 451.079365][T19406] team0: Device xfrm0 is of different type [ 451.106024][T19410] netlink: 'syz.5.3341': attribute type 27 has an invalid length. [ 451.173787][T19410] veth8: entered allmulticast mode [ 451.568098][T19427] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3351'. [ 451.661183][T19434] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3352'. [ 451.691587][T19435] netlink: 160 bytes leftover after parsing attributes in process `syz.1.3349'. [ 451.692942][T19436] bond1 (unregistering): Released all slaves [ 451.729692][T19426] netlink: 'syz.1.3349': attribute type 11 has an invalid length. [ 452.074591][T19439] net_ratelimit: 908 callbacks suppressed [ 452.074610][T19439] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 452.087311][T19439] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 452.094254][T19439] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 452.101102][T19439] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 452.108437][T19439] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 452.115448][T19439] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 452.122271][T19439] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 452.129191][T19439] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 452.136070][T19439] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 452.142906][T19439] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 453.125952][T19484] netlink: 'syz.1.3363': attribute type 2 has an invalid length. [ 453.141823][T19486] ip6gre1: entered promiscuous mode [ 453.151644][T19486] ip6gre1: entered allmulticast mode [ 453.179968][T19484] : entered promiscuous mode [ 453.191154][T19487] netlink: 'syz.5.3364': attribute type 6 has an invalid length. [ 453.450192][T19504] netlink: 'syz.1.3367': attribute type 11 has an invalid length. [ 453.700772][T19514] xfrm1: entered allmulticast mode [ 453.712147][T19517] tipc: Trying to set illegal importance in message [ 453.872127][T19529] netlink: 'syz.1.3375': attribute type 7 has an invalid length. [ 454.830603][T19555] syzkaller0: entered promiscuous mode [ 454.845559][T19555] syzkaller0: entered allmulticast mode [ 454.931327][T19566] netlink: 'syz.6.3382': attribute type 11 has an invalid length. [ 457.130805][T10560] net_ratelimit: 2442 callbacks suppressed [ 457.130824][T10560] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 457.151573][T10560] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 457.686973][T10554] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 457.701764][T10554] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 458.247759][ T8110] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 458.262402][ T8110] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 458.795371][T10554] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 458.810276][T10554] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 459.096971][T19615] __nla_validate_parse: 11 callbacks suppressed [ 459.096989][T19615] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3389'. [ 459.138752][T19615] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3389'. [ 459.319212][T19631] openvswitch: netlink: Message has 8 unknown bytes. [ 459.334595][ T8108] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 459.432829][T19638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3396'. [ 459.621067][T19644] netlink: 160 bytes leftover after parsing attributes in process `syz.5.3397'. [ 459.651832][T19644] netlink: 'syz.5.3397': attribute type 11 has an invalid length. [ 459.816354][T19663] netlink: 'syz.4.3400': attribute type 1 has an invalid length. [ 459.857100][T19667] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3404'. [ 459.895923][T19663] 8021q: adding VLAN 0 to HW filter on device bond1 [ 459.946781][T19671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3405'. [ 460.090580][T19676] syzkaller0: entered promiscuous mode [ 460.096843][T19676] syzkaller0: entered allmulticast mode [ 460.286379][T19688] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3412'. [ 460.297058][T19688] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3412'. [ 460.312669][T19688] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3412'. [ 460.329623][T19688] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3412'. [ 460.553899][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 460.837863][T19718] netlink: 'syz.4.3419': attribute type 3 has an invalid length. [ 460.949825][T19721] bridge0: port 3(dummy0) entered blocking state [ 460.969460][T19721] bridge0: port 3(dummy0) entered disabled state [ 460.989191][T19721] dummy0: entered allmulticast mode [ 461.016831][T19721] bridge0: port 3(dummy0) entered blocking state [ 461.023484][T19721] bridge0: port 3(dummy0) entered forwarding state [ 461.050560][T19727] dummy0: left allmulticast mode [ 461.059095][T19727] bridge0: port 3(dummy0) entered disabled state [ 461.151813][T19735] netlink: 'syz.0.3427': attribute type 1 has an invalid length. [ 461.608184][T19765] ip6erspan1: entered allmulticast mode [ 461.669174][T19764] netlink: 'syz.1.3434': attribute type 5 has an invalid length. [ 461.854892][T19782] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 462.017000][T19790] netlink: 'syz.0.3442': attribute type 1 has an invalid length. [ 462.032471][T19791] IPVS: set_ctl: invalid protocol: 108 172.20.20.27:20000 [ 462.182860][T19803] x_tables: ip_tables: osf match: only valid for protocol 6 [ 462.215606][T19806] net_ratelimit: 13 callbacks suppressed [ 462.215625][T19806] openvswitch: netlink: Missing key (keys=40, expected=100) [ 462.257348][T19795] bond2: entered promiscuous mode [ 462.270574][T19795] bond2: entered allmulticast mode [ 462.291262][T19803] sch_tbf: peakrate 4 is lower than or equals to rate 16 ! [ 462.327694][T19803] syzkaller0: entered promiscuous mode [ 462.363745][T19803] syzkaller0: entered allmulticast mode [ 462.443573][ T8110] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 462.458091][ T8110] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 462.483225][T19816] x_tables: duplicate underflow at hook 2 [ 462.755316][T19835] openvswitch: netlink: IP tunnel TTL not specified. [ 462.755932][T19836] netlink: 'syz.1.3459': attribute type 19 has an invalid length. [ 462.801928][T19836] netlink: 'syz.1.3459': attribute type 20 has an invalid length. [ 462.868197][T19836] netlink: 'syz.1.3459': attribute type 19 has an invalid length. [ 462.910327][T19836] netlink: 'syz.1.3459': attribute type 20 has an invalid length. [ 462.943845][T19849] unsupported nlmsg_type 40 [ 463.005767][ T8110] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 463.020163][ T8110] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 463.351715][T19877] netlink: 'syz.1.3471': attribute type 1 has an invalid length. [ 463.554757][ T8110] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 463.569527][ T8110] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 463.928781][T19910] syzkaller0: entered promiscuous mode [ 463.953128][T19910] syzkaller0: entered allmulticast mode [ 463.987012][T19915] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 464.036042][T19910] tipc: Started in network mode [ 464.051201][T19910] tipc: Node identity dad4e300a623, cluster identity 4711 [ 464.066716][T19910] tipc: Enabled bearer , priority 0 [ 464.128545][T19887] tipc: Resetting bearer [ 464.185789][T19887] tipc: Disabling bearer [ 464.234931][T10550] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 464.441163][T19931] tipc: Started in network mode [ 464.450130][T19931] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 464.458070][T19931] tipc: Enabled bearer , priority 30 [ 464.507891][T19933] netlink: 'syz.5.3480': attribute type 1 has an invalid length. [ 464.760624][T19944] __nla_validate_parse: 89 callbacks suppressed [ 464.760645][T19944] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3482'. [ 464.803238][T19944] veth1_to_bridge: entered allmulticast mode [ 465.097668][T19948] 8021q: adding VLAN 0 to HW filter on device bond2 [ 465.130731][T19957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.142017][T19957] bond2: (slave bond0): making interface the new active one [ 465.160115][T19957] bond2: (slave bond0): Enslaving as an active interface with an up link [ 465.243576][T19963] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3489'. [ 465.298790][T19966] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3490'. [ 465.454569][T19973] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 465.583456][ T6626] tipc: Node number set to 10136234 [ 465.609449][T19981] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3495'. [ 465.666999][T19983] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3496'. [ 465.818450][T19990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3499'. [ 465.854455][T19970] validate_nla: 4 callbacks suppressed [ 465.854507][T19970] netlink: 'syz.6.3491': attribute type 1 has an invalid length. [ 465.869643][T19991] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3499'. [ 466.197842][T20006] netlink: 'syz.0.3503': attribute type 2 has an invalid length. [ 466.223788][T20006] netlink: 'syz.0.3503': attribute type 2 has an invalid length. [ 466.235546][T20010] batman_adv: batadv0: Adding interface: vlan2 [ 466.249393][T20010] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.294690][T20010] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 466.371291][T20007] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3504'. [ 466.430673][T20026] netlink: 'syz.1.3504': attribute type 1 has an invalid length. [ 466.600981][T20026] bond3: option mode: invalid value (12) [ 466.635647][T20026] bond3 (unregistering): Released all slaves [ 466.639732][T20035] netlink: 160 bytes leftover after parsing attributes in process `syz.6.3510'. [ 466.666106][T20007] : renamed from dummy0 (while UP) [ 466.675923][T20035] netlink: 'syz.6.3510': attribute type 11 has an invalid length. [ 466.808081][T20043] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3513'. [ 467.212908][T20059] bridge1: entered promiscuous mode [ 467.218848][T20059] bridge1: entered allmulticast mode [ 467.229192][T20059] team0: Port device bridge1 added [ 467.254951][T20059] bridge2: entered promiscuous mode [ 467.260239][T20059] bridge2: entered allmulticast mode [ 467.269113][T20059] team0: Port device bridge2 added [ 467.309783][T20066] block nbd0: Unsupported socket: should be TCP or UNIX. [ 467.355514][T10568] net_ratelimit: 13 callbacks suppressed [ 467.355534][T10568] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 467.375809][T10568] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 467.925663][ T1022] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 467.940178][ T1022] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 468.069867][T20102] tipc: Started in network mode [ 468.075720][T20102] tipc: Node identity fab63c1f4afe, cluster identity 4711 [ 468.095821][T20102] tipc: Enabled bearer , priority 0 [ 468.167882][T20104] netlink: 'syz.0.3529': attribute type 1 has an invalid length. [ 468.174419][T20102] syzkaller0: entered promiscuous mode [ 468.186886][T20102] syzkaller0: entered allmulticast mode [ 468.210508][T20108] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 468.271899][T20107] netlink: 'syz.6.3532': attribute type 11 has an invalid length. [ 468.316605][T20104] bond1: entered promiscuous mode [ 468.324436][T20104] 8021q: adding VLAN 0 to HW filter on device bond1 [ 468.360551][T20098] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 468.375629][T20098] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 468.392573][T20098] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 468.482515][T20108] tipc: Resetting bearer [ 468.523883][T10568] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 468.538342][T10568] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 468.557070][T20100] tipc: Resetting bearer [ 468.621128][T20100] tipc: Disabling bearer [ 468.781763][T20135] netlink: 'syz.1.3535': attribute type 1 has an invalid length. [ 468.927539][T20144] netlink: 'syz.5.3538': attribute type 2 has an invalid length. [ 469.131860][ T57] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 469.147118][ T57] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 469.734199][ T1162] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 469.748636][ T1162] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 469.852696][T20194] __nla_validate_parse: 12 callbacks suppressed [ 469.852732][T20194] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3549'. [ 469.883802][T20194] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3549'. [ 469.903100][T20194] netlink: 'syz.6.3549': attribute type 1 has an invalid length. [ 469.973175][T20194] 8021q: adding VLAN 0 to HW filter on device bond3 [ 470.007601][T20197] bond3: (slave geneve2): making interface the new active one [ 470.045420][T20197] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 470.130349][T20205] netlink: 204 bytes leftover after parsing attributes in process `syz.1.3551'. [ 470.150774][T20203] netlink: 160 bytes leftover after parsing attributes in process `syz.0.3552'. [ 470.181233][T20205] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3551'. [ 470.533206][T20221] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.568998][T20228] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3556'. [ 470.731684][T20234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3558'. [ 470.765688][T20234] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3558'. [ 471.224673][T20226] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.312924][T20253] vlan2: entered promiscuous mode [ 471.333301][T20253] bridge0: entered promiscuous mode [ 471.439191][T20270] validate_nla: 1 callbacks suppressed [ 471.439210][T20270] netlink: 'syz.0.3566': attribute type 46 has an invalid length. [ 471.491997][T20277] Bluetooth: MGMT ver 1.23 [ 471.985179][T20253] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.992942][T20253] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.527665][T20253] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 472.563617][T20253] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 472.853682][ T35] net_ratelimit: 13 callbacks suppressed [ 472.853703][ T35] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 472.874663][ T35] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 472.950303][T20253] bond2: left promiscuous mode [ 472.955818][T20253] bond2: left allmulticast mode [ 472.966707][T20253] vlan2: left promiscuous mode [ 472.971628][T20253] bridge0: left promiscuous mode [ 473.049524][T20226] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.075546][T20274] tipc: Enabling of bearer rejected, failed to enable media [ 473.085489][T20295] batadv_slave_1: entered promiscuous mode [ 473.094326][ T57] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.106407][T20312] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3569'. [ 473.148527][ T57] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 473.189901][ T57] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 473.220247][ T57] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.237408][ T57] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 473.260149][ T57] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 473.269527][T20312] netlink: 'syz.1.3569': attribute type 2 has an invalid length. [ 473.292147][T20312] netlink: 103 bytes leftover after parsing attributes in process `syz.1.3569'. [ 473.310038][ T57] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.319591][ T57] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 473.328292][ T57] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 473.367645][T20321] A link change request failed with some changes committed already. Interface syzkaller1 may have been left with an inconsistent configuration, please check. [ 473.404212][T10568] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 473.418853][T10568] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 473.441582][T20226] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.466761][ T57] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.490780][ T57] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 473.504058][ T57] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 473.771774][ T57] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.857012][T10554] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.938784][ T57] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.952517][ T8097] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 473.967207][ T8097] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 474.018238][ T8097] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.285162][T20354] netlink: 'syz.4.3582': attribute type 3 has an invalid length. [ 474.320717][T20357] erspan0: entered promiscuous mode [ 474.337734][T20357] erspan0: entered allmulticast mode [ 474.493866][ T1162] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 474.508689][ T1162] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 474.982490][T20383] netlink: 'syz.0.3591': attribute type 1 has an invalid length. [ 475.008155][T20383] __nla_validate_parse: 5 callbacks suppressed [ 475.008173][T20383] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3591'. [ 475.115710][ T1162] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 475.439239][T20408] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20004 [ 475.456504][T20420] IPVS: set_ctl: invalid protocol: 58 172.30.1.2:20001 [ 475.631032][T20425] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3603'. [ 475.721284][T20430] netlink: 'syz.6.3606': attribute type 12 has an invalid length. [ 475.998490][ T1022] vlan2: left allmulticast mode [ 476.021950][ T1022] geneve0: left allmulticast mode [ 476.048295][ T1022] vlan2: left promiscuous mode [ 476.065440][ T1022] geneve0: left promiscuous mode [ 476.074661][ T1022] bridge0: port 4(vlan2) entered disabled state [ 476.094554][ T1022] dummy0: left allmulticast mode [ 476.105681][ T1022] dummy0: left promiscuous mode [ 476.117025][ T1022] bridge0: port 3(dummy0) entered disabled state [ 476.130192][ T1022] bridge_slave_1: left allmulticast mode [ 476.137561][ T1022] bridge_slave_1: left promiscuous mode [ 476.148113][ T1022] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.166902][ T1022] bridge_slave_0: left allmulticast mode [ 476.181146][ T1022] bridge_slave_0: left promiscuous mode [ 476.191850][T20463] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3612'. [ 476.192899][ T1022] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.220829][ T1022] erspan0: left allmulticast mode [ 476.226727][ T1022] bridge2: port 1(erspan0) entered disabled state [ 476.229124][T20463] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3612'. [ 476.502822][ T1022] bond8 (unregistering): (slave geneve3): Releasing active interface [ 476.511204][ T1022] geneve3 (unregistering): left allmulticast mode [ 476.579286][ T1022] bond0 (unregistering): (slave 07ÿ): Releasing backup interface [ 476.603808][ T1022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 476.613755][ T1022] bond0 (unregistering): Released all slaves [ 476.624273][ T1022] bond1 (unregistering): Released all slaves [ 476.638177][ T1022] bond2 (unregistering): Released all slaves [ 476.652423][ T1022] bond3 (unregistering): Released all slaves [ 476.667467][ T1022] bond4 (unregistering): Released all slaves [ 476.681416][ T1022] bond5 (unregistering): Released all slaves [ 476.701698][ T1022] bond6 (unregistering): Released all slaves [ 476.728480][ T1022] bond7 (unregistering): Released all slaves [ 476.746347][ T1022] bond8 (unregistering): Released all slaves [ 476.761035][ T1022] bond9 (unregistering): Released all slaves [ 476.779523][ T1022] bond10 (unregistering): Released all slaves [ 476.835157][T20463] erspan0: entered promiscuous mode [ 476.841443][T20463] gretap0: entered promiscuous mode [ 477.017088][ T1022] : left promiscuous mode [ 477.209903][T20484] netlink: 67 bytes leftover after parsing attributes in process `syz.4.3616'. [ 477.260658][ T1022] tipc: Disabling bearer [ 477.274593][ T1022] tipc: Left network mode [ 477.350157][T20491] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3618'. [ 477.466046][T20497] netlink: 'syz.6.3619': attribute type 4 has an invalid length. [ 477.723801][T20504] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 477.740039][T20504] bond2 (unregistering): Released all slaves [ 477.749000][T20507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3623'. [ 477.785453][T20507] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3623'. [ 477.815844][T20501] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3622'. [ 477.867393][T20506] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3622'. [ 478.215670][T10554] net_ratelimit: 11 callbacks suppressed [ 478.215691][T10554] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 478.236134][T10554] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 478.309374][T20525] netlink: 'syz.6.3629': attribute type 1 has an invalid length. [ 478.434555][T20530] dummy0: left promiscuous mode [ 478.464856][T20530] bond4: (slave dummy0): making interface the new active one [ 478.479246][T20530] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 478.641527][T20543] ieee802154 phy0 wpan0: encryption failed: -90 [ 478.651784][ T6626] IPVS: starting estimator thread 0... [ 478.773811][T20554] IPVS: using max 33 ests per chain, 79200 per kthread [ 478.785364][T10568] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 478.799862][T10568] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 478.910226][T20525] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.917979][T20525] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.270676][T20525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 479.302075][T20525] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 479.354736][ T8097] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 479.369799][ T8097] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 479.713043][ T1022] hsr_slave_0: left promiscuous mode [ 479.952238][ T8093] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 479.967350][ T8093] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 480.109825][T20549] __nla_validate_parse: 5 callbacks suppressed [ 480.109845][T20549] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3632'. [ 480.195690][ T57] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.221958][ T57] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.243178][T20574] netlink: 'syz.4.3640': attribute type 22 has an invalid length. [ 480.243178][ T57] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.243218][ T57] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.284019][T20574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3640'. [ 480.358481][T20584] netlink: 'syz.0.3641': attribute type 3 has an invalid length. [ 480.383173][T20584] netlink: 'syz.0.3641': attribute type 1 has an invalid length. [ 480.440307][T20584] netlink: 232 bytes leftover after parsing attributes in process `syz.0.3641'. [ 480.455471][ T8097] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.465876][T20587] netlink: 5 bytes leftover after parsing attributes in process `syz.5.3643'. [ 480.486776][ T8097] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 480.486952][ T1162] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.501276][ T8097] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 480.581151][ T1162] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.635865][ T1162] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.782850][ T1022] IPVS: stop unused estimator thread 0... [ 481.024066][T20609] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3649'. [ 481.521267][T20635] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3655'. [ 481.550893][T20637] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3656'. [ 481.602414][T20639] netlink: 'syz.6.3657': attribute type 5 has an invalid length. [ 481.821215][T20652] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3661'. [ 481.829862][T20648] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3663'. [ 481.842124][T20652] netlink: 'syz.6.3661': attribute type 1 has an invalid length. [ 481.860823][T20652] netlink: 112 bytes leftover after parsing attributes in process `syz.6.3661'. [ 481.969930][T20659] lo: entered allmulticast mode [ 482.033093][T20660] lo: left allmulticast mode [ 482.167105][T20674] bond0: entered promiscuous mode [ 482.180316][T20674] bond_slave_0: entered promiscuous mode [ 482.196477][T20674] bond_slave_1: entered promiscuous mode [ 482.226736][T20674] bond0: left promiscuous mode [ 482.238996][T20674] bond_slave_0: left promiscuous mode [ 482.259436][T20674] bond_slave_1: left promiscuous mode [ 482.299676][T20684] bond0: entered promiscuous mode [ 482.305804][T20684] bond_slave_0: entered promiscuous mode [ 482.315291][T20684] bond_slave_1: entered promiscuous mode [ 482.332068][T20684] bond0: left promiscuous mode [ 482.364315][T20684] bond_slave_0: left promiscuous mode [ 482.379062][T20684] bond_slave_1: left promiscuous mode [ 482.421035][T20683] 8021q: VLANs not supported on nlmon0 [ 482.465704][T20698] sctp: [Deprecated]: syz.0.3675 (pid 20698) Use of int in maxseg socket option. [ 482.465704][T20698] Use struct sctp_assoc_value instead [ 482.658425][T20708] pim6reg1: entered promiscuous mode [ 482.674708][T20708] pim6reg1: entered allmulticast mode [ 483.413156][T20767] netlink: 'syz.0.3695': attribute type 8 has an invalid length. [ 483.524044][T20774] netlink: 'syz.6.3697': attribute type 13 has an invalid length. [ 483.546084][T20774] netlink: 'syz.6.3697': attribute type 17 has an invalid length. [ 483.623568][T10568] net_ratelimit: 10 callbacks suppressed [ 483.623586][T10568] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 483.643706][T10568] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 483.880461][T20774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 483.895032][T20774] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.952222][T20774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.253883][T10568] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 484.268423][T10568] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 484.657655][T20774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.667170][T20774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.679151][T20774] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 484.690879][T20774] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 484.710548][ T1022] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 484.728372][T20802] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 484.739125][T20774] veth1_vlan: left promiscuous mode [ 484.745619][T20774] veth0_vlan: left promiscuous mode [ 484.752008][T20774] veth0_vlan: entered promiscuous mode [ 484.759613][T20774] veth1_vlan: entered promiscuous mode [ 484.768899][T20774] tipc: Resetting bearer [ 484.774916][T20774] tipc: Resetting bearer [ 484.780628][T20774] veth1_macvtap: left promiscuous mode [ 484.788045][T20774] veth0_macvtap: left promiscuous mode [ 484.796247][ T1022] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 484.797038][T20774] veth0_macvtap: entered promiscuous mode [ 484.810949][ T1022] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 484.836909][T20774] veth1_macvtap: entered promiscuous mode [ 484.852010][T20774] 8021q: adding VLAN 0 to HW filter on device bond1 [ 484.900400][T20774] xfrm1: left allmulticast mode [ 484.910671][T20774] ip6erspan1: left allmulticast mode [ 484.922800][T20774] 8021q: adding VLAN 0 to HW filter on device bond2 [ 484.945523][T20774] 8021q: adding VLAN 0 to HW filter on device bond3 [ 484.956402][T20774] 8021q: adding VLAN 0 to HW filter on device eth0 [ 484.971462][T20774] 8021q: adding VLAN 0 to HW filter on device eth1 [ 484.984222][T20774] 8021q: adding VLAN 0 to HW filter on device eth2 [ 484.997059][T20774] 8021q: adding VLAN 0 to HW filter on device eth3 [ 485.013954][T20774] 8021q: adding VLAN 0 to HW filter on device bond4 [ 485.022433][T20774] veth0_to_team: entered promiscuous mode [ 485.038664][T20775] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.063765][T20794] syzkaller1: entered promiscuous mode [ 485.076678][T20794] syzkaller1: entered allmulticast mode [ 485.107434][ T8106] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.114628][ T8106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.244892][T20814] __nla_validate_parse: 4 callbacks suppressed [ 485.244910][T20814] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3706'. [ 485.281402][T10568] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.290778][T10568] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.348145][ T57] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 485.363157][ T57] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 485.387241][T10568] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.395835][T10568] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.422923][T20817] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 485.457697][T20817] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 485.737524][T20842] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3715'. [ 485.903883][ T8106] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 485.918941][ T8106] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 485.936404][T10568] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 485.971918][T20851] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 486.207574][T20862] netlink: 'syz.1.3720': attribute type 13 has an invalid length. [ 486.917347][T20878] netlink: 'syz.5.3723': attribute type 2 has an invalid length. [ 486.929298][T20878] netlink: 228 bytes leftover after parsing attributes in process `syz.5.3723'. [ 487.048554][T20885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3724'. [ 487.135495][T20885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3724'. [ 487.242515][T20885] veth3: entered allmulticast mode [ 487.295785][T20885] bond3: (slave veth3): Enslaving as an active interface with an up link [ 487.339491][T20889] bond3 (unregistering): (slave veth3): Releasing backup interface [ 487.357719][T20889] bond3 (unregistering): Released all slaves [ 487.524249][T20899] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3728'. [ 487.708566][T20913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3731'. [ 487.819051][T20913] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3731'. [ 487.855522][T20913] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3731'. [ 487.887081][T20906] netlink: 'syz.5.3729': attribute type 3 has an invalid length. [ 487.959797][T19936] udevd[19936]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 488.014776][T19936] udevd[19936]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 488.480696][T20943] sctp: [Deprecated]: syz.1.3737 (pid 20943) Use of int in maxseg socket option. [ 488.480696][T20943] Use struct sctp_assoc_value instead [ 488.694308][T20946] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3738'. [ 488.745512][T20946] dvmrp0: entered allmulticast mode [ 489.045981][ T1162] net_ratelimit: 10 callbacks suppressed [ 489.046000][ T1162] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 489.066520][ T1162] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 489.595195][T10568] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 489.609753][T10568] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 489.833735][ C0] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 490.133692][T10554] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 490.148252][T10554] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 490.555908][T20902] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 490.676226][ T1022] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 490.690891][ T1022] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 490.766093][T20979] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 490.800288][T20981] __nla_validate_parse: 1 callbacks suppressed [ 490.800318][T20981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3746'. [ 490.952552][T20992] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3750'. [ 491.172315][T21003] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3754'. [ 491.187775][T21004] netlink: 'syz.4.3752': attribute type 11 has an invalid length. [ 491.214501][ T1022] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 491.278312][T21003] bond7: (slave ip6_vti0): The slave device specified does not support setting the MAC address [ 491.290937][T21003] bond7: (slave ip6_vti0): Error -95 calling set_mac_address [ 491.378413][T21021] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3753'. [ 491.391609][T21021] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.424556][T21017] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 491.948762][T21044] tipc: Enabled bearer , priority 0 [ 491.956839][T21044] syzkaller0: entered promiscuous mode [ 491.962374][T21044] syzkaller0: entered allmulticast mode [ 492.008557][T21044] tipc: Resetting bearer [ 492.025952][T21042] tipc: Resetting bearer [ 492.055518][T21042] tipc: Disabling bearer [ 492.250295][T21057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3769'. [ 492.302898][T21057] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3769'. [ 492.304853][T21063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3769'. [ 492.370861][T21058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3770'. [ 492.405247][T21058] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3770'. [ 492.413990][T21057] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3769'. [ 492.492122][T21058] team0: Port device team_slave_0 removed [ 492.517542][T21064] syzkaller1: entered promiscuous mode [ 492.530122][T21064] syzkaller1: entered allmulticast mode [ 492.690367][T21078] sctp: [Deprecated]: syz.6.3777 (pid 21078) Use of int in max_burst socket option deprecated. [ 492.690367][T21078] Use struct sctp_assoc_value instead [ 492.749259][T21080] netlink: 'syz.1.3776': attribute type 11 has an invalid length. [ 493.447218][T21099] netlink: 'syz.0.3782': attribute type 12 has an invalid length. [ 493.455581][T21099] netlink: 'syz.0.3782': attribute type 29 has an invalid length. [ 493.464717][T21099] netlink: 'syz.0.3782': attribute type 7 has an invalid length. [ 493.559353][T21101] block nbd0: Unsupported socket: should be TCP or UNIX. [ 493.789820][T21107] veth0: entered promiscuous mode [ 493.823230][T21112] netlink: 'syz.5.3788': attribute type 11 has an invalid length. [ 494.025821][T21128] netlink: 'syz.1.3791': attribute type 1 has an invalid length. [ 494.065625][T21107] veth0: left promiscuous mode [ 494.137174][T21131] netlink: 'syz.0.3792': attribute type 6 has an invalid length. [ 494.267770][T21135] bond2: option min_links: invalid value (18446744073709551612) [ 494.286583][T21135] bond2: option min_links: allowed values 0 - 2147483647 [ 494.318356][T21135] bond2 (unregistering): Released all slaves [ 494.325694][T10568] net_ratelimit: 11 callbacks suppressed [ 494.325713][T10568] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 494.345859][T10568] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 494.559469][T21151] netlink: 'syz.1.3798': attribute type 11 has an invalid length. [ 494.822260][T21167] netlink: 'syz.0.3802': attribute type 11 has an invalid length. [ 494.894211][ T1022] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 494.909096][ T1022] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 494.955595][T21171] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.963442][T21171] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.135493][T21171] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 495.160393][T21171] geneve2: left promiscuous mode [ 495.172040][T21171] bridge1: left promiscuous mode [ 495.182223][T21171] bridge1: left allmulticast mode [ 495.190033][T21171] bridge2: left promiscuous mode [ 495.196266][T21171] bridge2: left allmulticast mode [ 495.215587][ T8106] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.233767][ T8106] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.254430][ T1022] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.264565][ T1022] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.282334][ T1022] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.308300][ T1022] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.339029][ T1022] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.349370][ T1022] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.467794][T10568] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 495.482553][T10568] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 495.825506][T21195] __nla_validate_parse: 8 callbacks suppressed [ 495.825523][T21195] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3810'. [ 496.070299][T10568] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 496.084781][T10568] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 496.441984][T21226] netlink: 160 bytes leftover after parsing attributes in process `syz.1.3816'. [ 496.457750][T21226] netlink: 'syz.1.3816': attribute type 11 has an invalid length. [ 496.504950][T21232] netlink: 'syz.4.3818': attribute type 2 has an invalid length. [ 496.604233][T21237] syzkaller0: entered promiscuous mode [ 496.627268][T21237] syzkaller0: entered allmulticast mode [ 496.684450][T10554] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 496.699247][T10554] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 496.785777][T21243] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3820'. [ 496.987783][T21255] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3823'. [ 497.352227][T21262] netlink: 'syz.4.3826': attribute type 4 has an invalid length. [ 497.402969][T21272] bridge3: entered promiscuous mode [ 497.415674][T21272] bridge3: entered allmulticast mode [ 497.673577][ C0] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 497.976543][T21307] netlink: 160 bytes leftover after parsing attributes in process `syz.0.3840'. [ 498.004050][T21307] validate_nla: 2 callbacks suppressed [ 498.004070][T21307] netlink: 'syz.0.3840': attribute type 11 has an invalid length. [ 498.023293][T21313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 498.510439][T21336] syzkaller0: entered promiscuous mode [ 498.518154][T21336] syzkaller0: entered allmulticast mode [ 498.702570][T21356] netlink: 240 bytes leftover after parsing attributes in process `syz.6.3850'. [ 498.720820][T21345] netlink: 'syz.6.3850': attribute type 1 has an invalid length. [ 499.248262][T21379] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3858'. [ 499.385916][T21380] netlink: 160 bytes leftover after parsing attributes in process `syz.6.3859'. [ 499.406289][T21380] netlink: 'syz.6.3859': attribute type 11 has an invalid length. [ 499.466091][T21388] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3861'. [ 499.565038][T21384] netlink: 'syz.0.3860': attribute type 2 has an invalid length. [ 499.572918][T21384] netlink: 'syz.0.3860': attribute type 1 has an invalid length. [ 499.581085][T21384] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3860'. [ 499.824638][ T8093] net_ratelimit: 30 callbacks suppressed [ 499.824657][ T8093] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 499.844789][ T8093] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 500.403615][T10554] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 500.417864][T10554] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 500.943615][ T8093] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 500.958013][ T8093] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 501.474407][ T8106] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 501.488641][ T8106] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 501.523615][ T1316] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 501.532760][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.013654][ T8093] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 502.522125][T21352] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 502.596238][T21399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3862'. [ 502.605592][T21399] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3862'. [ 502.627833][T21396] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 502.652170][T21396] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 502.689255][T21402] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3863'. [ 502.850321][T21406] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.3864'. [ 502.856979][T21411] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3866'. [ 502.878071][T21408] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3865'. [ 502.901387][T21406] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3864'. [ 503.218503][T21444] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3874'. [ 503.293195][T21449] netlink: 'syz.6.3874': attribute type 10 has an invalid length. [ 503.421832][T21457] : option downdelay: invalid value (18446744073709547007) [ 503.430619][T21457] : option downdelay: allowed values 0 - 2147483647 [ 503.467689][T21457]  (unregistering): Released all slaves [ 503.475765][T21461] ieee802154 phy0 wpan0: encryption failed: -22 [ 505.083535][T10568] net_ratelimit: 12 callbacks suppressed [ 505.083550][T10568] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 505.103584][T10568] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 505.623757][ T57] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 505.638026][ T57] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 505.954028][T21422] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 506.155259][ T57] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 506.169431][ T57] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 506.227203][T21479] syzkaller0: entered promiscuous mode [ 506.262441][T21479] syzkaller0: entered allmulticast mode [ 506.310997][T21479] syzkaller1: entered promiscuous mode [ 506.324274][T21479] syzkaller1: entered allmulticast mode [ 506.478812][T21488] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.3886'. [ 506.729051][ T1162] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 506.743220][ T1162] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 506.758915][T21517] netlink: 'syz.0.3894': attribute type 11 has an invalid length. [ 506.792175][T21514] netdevsim netdevsim4 €Â: renamed from netdevsim0 [ 506.859054][T21514] netlink: 'syz.4.3893': attribute type 2 has an invalid length. [ 506.906603][T21527] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3892'. [ 507.007295][T21514] : entered promiscuous mode [ 507.108063][T21539] netlink: 'syz.5.3898': attribute type 11 has an invalid length. [ 507.237793][T21547] netlink: 'syz.0.3899': attribute type 1 has an invalid length. [ 507.336206][ T8106] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 507.350625][ T8106] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 507.702715][T21567] netlink: 'syz.6.3905': attribute type 11 has an invalid length. [ 507.811298][T21573] __nla_validate_parse: 8 callbacks suppressed [ 507.811319][T21573] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3908'. [ 507.819782][T21569] netlink: 160 bytes leftover after parsing attributes in process `syz.0.3906'. [ 507.861682][T21571] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3907'. [ 507.874546][T21573] sctp: [Deprecated]: syz.1.3908 (pid 21573) Use of int in max_burst socket option. [ 507.874546][T21573] Use struct sctp_assoc_value instead [ 507.949853][T21569] netlink: 'syz.0.3906': attribute type 11 has an invalid length. [ 508.367891][T21586] veth7: entered promiscuous mode [ 508.394542][T21586] veth7: entered allmulticast mode [ 508.412666][T21586] team0: Device veth7 is up. Set it down before adding it as a team port [ 508.498380][T21600] netlink: 4196 bytes leftover after parsing attributes in process `syz.4.3911'. [ 508.918041][T21595] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3913'. [ 508.941339][T21595] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 508.961489][T21595] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 509.009579][T21623] netlink: 160 bytes leftover after parsing attributes in process `syz.5.3922'. [ 509.020028][T21623] netlink: 'syz.5.3922': attribute type 11 has an invalid length. [ 510.033116][T21666] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3932'. [ 510.077107][T21663] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 510.090596][T21663] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.401053][T21645] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 510.415673][T21645] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 510.441556][T21663] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 510.467389][T21663] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.474006][ T8106] net_ratelimit: 13 callbacks suppressed [ 510.474026][ T8106] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 510.497889][ T8106] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 510.747331][T21663] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 510.795628][T21663] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.835158][T21678] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 511.023529][ T1022] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 511.038111][ T1022] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 511.135511][T21663] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 511.146519][T21663] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.351860][T21694] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3942'. [ 511.383704][T21694] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3942'. [ 511.573585][ T1022] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 511.587735][ T1022] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 511.635945][T10568] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 511.666035][T10568] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.737778][T21704] team0: Device ipvlan2 failed to register rx_handler [ 511.836461][T21706] netlink: 160 bytes leftover after parsing attributes in process `syz.6.3944'. [ 511.876678][T21706] netlink: 'syz.6.3944': attribute type 11 has an invalid length. [ 512.048756][T10554] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.068682][T10554] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.146449][ T1022] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.174645][ T1022] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.202183][ T1022] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.205926][ T57] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 512.224869][ T57] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 512.226632][ T1022] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.273597][ T1022] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.290828][ T1022] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.335240][ T1022] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.362920][ T1022] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.393578][ C0] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 512.478114][T21728] xt_TPROXY: Can be used only with -p tcp or -p udp [ 512.715639][T21732] netlink: 'syz.4.3951': attribute type 5 has an invalid length. [ 512.728755][T21733] bridge2: entered promiscuous mode [ 512.736058][T21733] bridge2: entered allmulticast mode [ 512.754008][ T1162] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 513.105320][T21754] syzkaller0: entered promiscuous mode [ 513.110971][T21754] syzkaller0: entered allmulticast mode [ 513.186004][T21759] netlink: 'syz.6.3958': attribute type 11 has an invalid length. [ 513.347605][T21764] netlink: 'syz.4.3959': attribute type 11 has an invalid length. [ 513.638734][T21779] __nla_validate_parse: 3 callbacks suppressed [ 513.638752][T21779] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3965'. [ 513.695205][T21777] netlink: 160 bytes leftover after parsing attributes in process `syz.1.3964'. [ 513.729098][T21777] netlink: 'syz.1.3964': attribute type 11 has an invalid length. [ 513.848453][T21787] tipc: Enabled bearer , priority 19 [ 514.112216][T21805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3971'. [ 514.124991][T21804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3971'. [ 514.152769][T21808] netlink: 'syz.6.3972': attribute type 11 has an invalid length. [ 514.361793][T21813] syzkaller0: entered promiscuous mode [ 514.367620][T21813] syzkaller0: entered allmulticast mode [ 515.050101][T21849] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3983'. [ 515.244900][T21863] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3989'. [ 515.259382][T21861] netlink: 160 bytes leftover after parsing attributes in process `syz.1.3988'. [ 515.275851][T21861] netlink: 'syz.1.3988': attribute type 11 has an invalid length. [ 515.538153][T21879] net_ratelimit: 13 callbacks suppressed [ 515.538174][T21879] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 515.863523][ T1162] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 515.878203][ T1162] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 515.903904][T21894] nbd2: detected capacity change from 0 to 127 [ 515.925434][ T5626] block nbd2: Receive control failed (result -32) [ 515.947367][ T1660] block nbd2: Dead connection, failed to find a fallback [ 515.956622][ T1660] block nbd2: shutting down sockets [ 515.969662][ T1660] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 515.988526][ T1660] Buffer I/O error on dev nbd2, logical block 0, async page read [ 515.997038][ T1660] Buffer I/O error on dev nbd2, logical block 1, async page read [ 516.005081][ T1660] Buffer I/O error on dev nbd2, logical block 2, async page read [ 516.014913][ T1660] Buffer I/O error on dev nbd2, logical block 3, async page read [ 516.025368][ T1660] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 516.034980][ T1660] Buffer I/O error on dev nbd2, logical block 0, async page read [ 516.043038][ T1660] Buffer I/O error on dev nbd2, logical block 1, async page read [ 516.051138][ T1660] Buffer I/O error on dev nbd2, logical block 2, async page read [ 516.060365][ T1660] Buffer I/O error on dev nbd2, logical block 3, async page read [ 516.068945][ T1660] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 516.080090][ T1660] Buffer I/O error on dev nbd2, logical block 0, async page read [ 516.088182][ T1660] Buffer I/O error on dev nbd2, logical block 1, async page read [ 516.096468][ T1660] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 516.106501][ T1660] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 516.116092][ T1660] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 516.125754][ T1660] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 516.135337][ T1660] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 516.145189][ T1660] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 516.154945][ T1660] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 516.165587][T21525] ldm_validate_partition_table(): Disk read failed. [ 516.171758][T21901] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3999'. [ 516.177501][T21525] Dev nbd2: unable to read RDB block 0 [ 516.190016][T21525] nbd2: unable to read partition table [ 516.207067][T21525] ldm_validate_partition_table(): Disk read failed. [ 516.218409][T21525] Dev nbd2: unable to read RDB block 0 [ 516.229773][T21525] nbd2: unable to read partition table [ 516.311922][T21912] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4002'. [ 516.433985][ T1162] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 516.448204][ T1162] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 516.473800][ T29] audit: type=1107 audit(1784509719.779:13): pid=21914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 516.721197][T21929] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4006'. [ 516.848634][T21930] netlink: 'syz.5.4006': attribute type 1 has an invalid length. [ 516.962458][T21946] netlink: 'syz.1.4010': attribute type 8 has an invalid length. [ 517.014759][T10568] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 517.028885][T10568] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 517.096985][T21930] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 517.337404][T21960] netlink: 'syz.4.4011': attribute type 1 has an invalid length. [ 517.396438][T21964] IPVS: set_ctl: invalid protocol: 127 0.0.0.0:20004 [ 517.482566][T21968] netlink: 'syz.1.4014': attribute type 11 has an invalid length. [ 517.617931][T21973] bond9: up delay (7) is not a multiple of miimon (100), value rounded to 0 ms [ 517.664078][ T8093] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 517.673441][T21973] bond9: entered allmulticast mode [ 517.678262][ T8093] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 517.966952][T21995] netlink: 'syz.0.4020': attribute type 13 has an invalid length. [ 517.975280][T21995] netlink: 'syz.0.4020': attribute type 12 has an invalid length. [ 518.077986][T21996] hsr_slave_0: left promiscuous mode [ 518.098511][T21996] hsr_slave_1: left promiscuous mode [ 518.223686][T10554] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 518.490342][T22008] netlink: 'syz.0.4022': attribute type 11 has an invalid length. [ 519.721816][T22082] netlink: 'syz.5.4041': attribute type 15 has an invalid length. [ 519.765647][T22088] netlink: 'syz.1.4042': attribute type 1 has an invalid length. [ 519.765647][T22082] __nla_validate_parse: 6 callbacks suppressed [ 519.765666][T22082] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4041'. [ 519.802716][T22082] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4041'. [ 519.869333][T22088] 8021q: adding VLAN 0 to HW filter on device bond3 [ 519.899541][T22091] bond3: (slave veth5): Enslaving as an active interface with a down link [ 519.917781][T22088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.927900][T22088] bond3: (slave batadv0): making interface the new active one [ 519.937179][T22088] batadv0: entered promiscuous mode [ 519.942966][T22088] bond3: (slave batadv0): Enslaving as an active interface with an up link [ 520.221847][T22105] netlink: 'syz.5.4046': attribute type 62 has an invalid length. [ 520.454025][T22119] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4049'. [ 520.815133][T10568] net_ratelimit: 10 callbacks suppressed [ 520.815151][T10568] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 520.835190][T10568] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 520.880659][T22144] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4058'. [ 521.108471][T22156] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4061'. [ 521.439451][ T8093] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 521.450633][T22179] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4066'. [ 521.453880][ T8093] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 521.539011][T22178] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4066'. [ 521.550717][T22179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4066'. [ 521.658617][T22179] veth7: entered allmulticast mode [ 521.686113][T22179] bond2: (slave veth7): Enslaving as an active interface with an up link [ 521.726326][T22178] veth9: entered allmulticast mode [ 521.752246][T22178] bond2: (slave veth9): Enslaving as an active interface with an up link [ 521.798207][T22184] bond2 (unregistering): (slave veth7): Releasing backup interface [ 521.836527][T22184] bond2 (unregistering): (slave veth9): Releasing backup interface [ 521.885318][T22184] bond2 (unregistering): Released all slaves [ 522.022494][ T8093] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 522.036770][ T8093] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 522.509648][T22231] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4076'. [ 522.541591][T22231] lo speed is unknown, defaulting to 1000 [ 522.556451][T22231] lo speed is unknown, defaulting to 1000 [ 522.564348][T10554] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 522.578458][T10554] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 522.602779][T22231] lo speed is unknown, defaulting to 1000 [ 522.610604][T22231] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 522.627447][T22231] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 522.651331][T22231] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 522.677203][T22231] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 522.761429][T22231] lo speed is unknown, defaulting to 1000 [ 522.787261][T22231] lo speed is unknown, defaulting to 1000 [ 522.810358][T22231] lo speed is unknown, defaulting to 1000 [ 522.836872][T22231] lo speed is unknown, defaulting to 1000 [ 522.893031][T22231] lo speed is unknown, defaulting to 1000 [ 522.913191][T22231] lo speed is unknown, defaulting to 1000 [ 522.958821][T22231] lo speed is unknown, defaulting to 1000 [ 522.981839][T22231] lo speed is unknown, defaulting to 1000 [ 523.143562][ T1162] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 523.157937][ T1162] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 523.277382][T22260] bond10 (unregistering): Released all slaves [ 523.326219][T22275] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4088'. [ 523.457324][T22268] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.465082][T22268] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.570880][T22290] netlink: 'syz.1.4092': attribute type 1 has an invalid length. [ 523.581153][T22290] netlink: 'syz.1.4092': attribute type 11 has an invalid length. [ 523.600632][T22268] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 523.613336][T22268] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 523.699547][ T5729] lo speed is unknown, defaulting to 1000 [ 523.714857][ T1022] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.720706][ T5729] syz2: Port: 1 Link DOWN [ 523.723560][ T1022] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.765118][ T1022] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.797555][ T1022] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.817396][ T1022] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.828184][ T1022] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.871702][ T1022] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.892916][ T1022] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.946155][T22297] bond0: (slave ip6tnl0): Error: Device type is different from other slaves [ 524.087269][T22309] sctp: [Deprecated]: syz.0.4099 (pid 22309) Use of int in maxseg socket option. [ 524.087269][T22309] Use struct sctp_assoc_value instead [ 524.271032][ T57] tipc: Subscription rejected, illegal request [ 524.413644][T22317] 8021q: adding VLAN 0 to HW filter on device bond2 [ 524.555477][ T30] INFO: task syz.2.2773:16951 blocked for more than 143 seconds. [ 524.618213][T22323] 8021q: adding VLAN 0 to HW filter on device bond3 [ 524.626480][ T30] Not tainted syzkaller #0 [ 524.633071][T22323] bond2: (slave bond3): Enslaving as an active interface with an up link [ 524.650650][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 524.681437][ T30] task:syz.2.2773 state:D stack:26056 pid:16951 tgid:16948 ppid:5623 task_flags:0x400140 flags:0x00080002 [ 524.713242][ T30] Call Trace: [ 524.722806][ T30] [ 524.729744][ T30] __schedule+0x17d9/0x56c0 [ 524.739989][ T30] ? __lock_acquire+0x683/0x2cf0 [ 524.747954][ T30] ? __lock_acquire+0x683/0x2cf0 [ 524.763696][ T30] ? __pfx___schedule+0x10/0x10 [ 524.773333][ T30] ? schedule+0x90/0x2b0 [ 524.785576][ T30] schedule+0x164/0x2b0 [ 524.797515][ T30] schedule_preempt_disabled+0x13/0x30 [ 524.818072][ T30] __mutex_lock+0x7bf/0x1550 [ 524.826179][ T30] ? __mutex_lock+0x5d4/0x1550 [ 524.835577][ T30] ? nfsd_nl_expkey_get_reqs_dumpit+0xfd/0xd40 [ 524.846894][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 524.860425][ T30] ? net_generic+0x1e/0x240 [ 524.872683][ T30] ? net_generic+0x1e/0x240 [ 524.883869][ T30] nfsd_nl_expkey_get_reqs_dumpit+0xfd/0xd40 [ 524.898008][ T30] ? rcu_is_watching+0x15/0xb0 [ 524.909434][ T30] ? trace_kmalloc+0x2a/0xf0 [ 524.919848][ T30] ? __pfx_nfsd_nl_expkey_get_reqs_dumpit+0x10/0x10 [ 524.933976][ T30] ? __kmalloc_node_track_caller_noprof+0x4e1/0x730 [ 524.948774][ T30] ? __kmalloc_node_track_caller_noprof+0x2fd/0x730 [ 524.963511][ T30] ? netlink_dump+0x1e7/0xee0 [ 524.975250][ T30] ? netlink_dump+0x1e7/0xee0 [ 524.985775][ T30] genl_dumpit+0x10b/0x1b0 [ 524.995613][ T30] netlink_dump+0x711/0xee0 [ 525.005383][ T30] ? __pfx_netlink_dump+0x10/0x10 [ 525.016773][ T30] ? genl_start+0x497/0x6d0 [ 525.027175][ T30] __netlink_dump_start+0x589/0x7b0 [ 525.038874][ T30] genl_family_rcv_msg_dumpit+0x213/0x310 [ 525.054989][ T30] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 525.081640][ T30] ? __pfx_genl_start+0x10/0x10 [ 525.089875][ T30] ? __pfx_genl_dumpit+0x10/0x10 [ 525.098554][ T30] ? __pfx_genl_done+0x10/0x10 [ 525.103614][ T30] ? bpf_lsm_capable+0x9/0x20 [ 525.108390][ T30] ? security_capable+0x7e/0x2c0 [ 525.115773][ T30] genl_rcv_msg+0x5e1/0x7a0 [ 525.121706][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 525.127232][ T30] ? __pfx_nfsd_nl_expkey_get_reqs_dumpit+0x10/0x10 [ 525.133923][ T30] netlink_rcv_skb+0x226/0x4a0 [ 525.138719][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 525.144010][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 525.149340][ T30] ? down_read+0x2be/0x330 [ 525.154130][ T30] genl_rcv+0x28/0x40 [ 525.158186][ T30] netlink_unicast+0x7bb/0x940 [ 525.162983][ T30] netlink_sendmsg+0x813/0xb40 [ 525.168018][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 525.174877][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 525.179901][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 525.185622][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 525.190793][ T30] ____sys_sendmsg+0x54e/0x850 [ 525.196073][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 525.201422][ T30] ? import_iovec+0x73/0xa0 [ 525.206502][ T30] ___sys_sendmsg+0x2a5/0x360 [ 525.211217][ T30] ? __lock_acquire+0x683/0x2cf0 [ 525.216865][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 525.222116][ T30] ? futex_wake+0x51b/0x5f0 [ 525.226935][ T30] ? __fget_files+0x2a/0x420 [ 525.231640][ T30] ? __fget_files+0x3a2/0x420 [ 525.236463][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 525.241554][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 525.247659][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.253848][ T30] do_syscall_64+0x174/0x580 [ 525.258540][ T30] ? trace_irq_disable+0x3b/0x140 [ 525.263759][ T30] ? clear_bhb_loop+0x40/0x90 [ 525.268479][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.275008][ T30] RIP: 0033:0x7f281519de99 [ 525.279493][ T30] RSP: 002b:00007f281605d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 525.288203][ T30] RAX: ffffffffffffffda RBX: 00007f2815425fa0 RCX: 00007f281519de99 [ 525.296249][ T30] RDX: 0000000004044810 RSI: 0000200000000180 RDI: 0000000000000003 [ 525.305024][ T30] RBP: 00007f2815233eaf R08: 0000000000000000 R09: 0000000000000000 [ 525.313032][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 525.321192][ T30] R13: 00007f2815426038 R14: 00007f2815425fa0 R15: 00007fff8b03d238 [ 525.329411][ T30] [ 525.344800][ T30] [ 525.344800][ T30] Showing all locks held in the system: [ 525.370169][ T30] 1 lock held by khungtaskd/30: [ 525.377815][ T30] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 525.388356][ T30] 2 locks held by getty/5370: [ 525.393258][ T30] #0: ffff8880366460a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 525.403944][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 525.429535][ T30] 3 locks held by kworker/1:6/5721: [ 525.440667][ T30] #0: ffff88801b027140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 525.455493][ T30] #1: ffffc90004d77c40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 525.473285][ T30] #2: ffff88805586e250 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1fd/0x3b0 [ 525.484013][ T30] 2 locks held by syz.3.1606/12276: [ 525.489366][ T30] #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 525.498106][ T30] #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 525.508651][ T30] 3 locks held by syz.2.2773/16951: [ 525.514231][ T30] #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 525.522450][ T30] #1: ffff88807a6f96e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 525.535156][ T30] #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_expkey_get_reqs_dumpit+0xfd/0xd40 [ 525.545746][ T30] 3 locks held by syz.5.4106/22330: [ 525.551062][ T30] #0: ffff888055e01380 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x82/0x220 [ 525.561905][ T30] #1: ffff888079ed9c60 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: pep_sock_unhash+0x2a/0x280 [ 525.571919][ T30] #2: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 525.595236][ T30] [ 525.597630][ T30] ============================================= [ 525.597630][ T30] [ 525.606194][ T30] NMI backtrace for cpu 1 [ 525.606219][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 525.606261][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 525.606282][ T30] Call Trace: [ 525.606296][ T30] [ 525.606311][ T30] dump_stack_lvl+0xe8/0x150 [ 525.606375][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 525.606500][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 525.606537][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 525.606563][ T30] sys_info+0x135/0x170 [ 525.606583][ T30] watchdog+0xfd7/0x1030 [ 525.606619][ T30] ? watchdog+0x1c7/0x1030 [ 525.606647][ T30] kthread+0x388/0x470 [ 525.606674][ T30] ? __pfx_watchdog+0x10/0x10 [ 525.606694][ T30] ? __pfx_kthread+0x10/0x10 [ 525.606720][ T30] ret_from_fork+0x514/0xb70 [ 525.606764][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 525.606790][ T30] ? __switch_to+0xc89/0x1420 [ 525.606816][ T30] ? __pfx_kthread+0x10/0x10 [ 525.606842][ T30] ret_from_fork_asm+0x1a/0x30 [ 525.606884][ T30] [ 525.606891][ T30] Sending NMI from CPU 1 to CPUs 0: [ 525.723310][ C0] NMI backtrace for cpu 0 [ 525.723329][ C0] CPU: 0 UID: 0 PID: 22330 Comm: syz.5.4106 Not tainted syzkaller #0 PREEMPT(full) [ 525.723349][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 525.723358][ C0] RIP: 0010:unwind_next_frame+0x1a23/0x2550 [ 525.723412][ C0] Code: 38 80 3c 18 00 74 09 49 8d 7e 38 e8 f7 f2 bc 00 4d 8b 7e 38 49 8d 7e 08 48 89 f8 48 c1 e8 03 80 3c 18 00 74 05 e8 dd f2 bc 00 <4d> 8b 66 08 49 8d 5e 10 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 [ 525.723428][ C0] RSP: 0018:ffffc90006b4f580 EFLAGS: 00000246 [ 525.723445][ C0] RAX: 1ffff92000d69ec6 RBX: dffffc0000000000 RCX: 0000000000000001 [ 525.723458][ C0] RDX: ffffc90006b4f668 RSI: dffffc0000000000 RDI: ffffc90006b4f630 [ 525.723471][ C0] RBP: 1ffffffff21fa301 R08: ffffc90006b4f8d0 R09: 0000000000000000 [ 525.723481][ C0] R10: ffffc90006b4f678 R11: fffff52000d69ed1 R12: dffffc0000000000 [ 525.723495][ C0] R13: ffffffff8176f27f R14: ffffc90006b4f628 R15: ffffc90006b4f8e0 [ 525.723509][ C0] FS: 000055558f3e3500(0000) GS:ffff888124f5e000(0000) knlGS:0000000000000000 [ 525.723524][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 525.723534][ C0] CR2: 00007f8e3d1ed2f8 CR3: 0000000033d08000 CR4: 00000000003526f0 [ 525.723550][ C0] Call Trace: [ 525.723556][ C0] [ 525.723566][ C0] ? __reset_page_owner+0x71/0x1f0 [ 525.723598][ C0] ? unwind_next_frame+0x8f/0x2550 [ 525.723618][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 525.723641][ C0] arch_stack_walk+0x11b/0x150 [ 525.723662][ C0] ? free_pages_prepare+0x960/0xa60 [ 525.723689][ C0] stack_trace_save+0xa9/0x100 [ 525.723708][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 525.723729][ C0] ? stack_depot_save_flags+0x33/0x800 [ 525.723821][ C0] save_stack+0x122/0x230 [ 525.723843][ C0] ? __pfx_save_stack+0x10/0x10 [ 525.723862][ C0] ? page_ext_get+0x22/0x2e0 [ 525.723889][ C0] ? page_ext_put+0x97/0xc0 [ 525.723912][ C0] __reset_page_owner+0x71/0x1f0 [ 525.723934][ C0] free_pages_prepare+0x960/0xa60 [ 525.723955][ C0] __free_contig_range_common+0x174/0x340 [ 525.723984][ C0] free_pages_bulk+0x48/0x120 [ 525.724008][ C0] vfree+0x224/0x4a0 [ 525.724027][ C0] packet_set_ring+0x197a/0x2470 [ 525.724106][ C0] ? __pfx_packet_set_ring+0x10/0x10 [ 525.724124][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 525.724142][ C0] ? lock_sock_nested+0x6a/0x100 [ 525.724190][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 525.724210][ C0] ? packet_release+0x7b7/0xd30 [ 525.724232][ C0] packet_release+0x805/0xd30 [ 525.724252][ C0] ? __pfx_packet_release+0x10/0x10 [ 525.724267][ C0] ? down_write+0x16d/0x200 [ 525.724291][ C0] sock_close+0xad/0x220 [ 525.724309][ C0] ? __pfx_sock_close+0x10/0x10 [ 525.724326][ C0] __fput+0x418/0xa50 [ 525.724351][ C0] task_work_run+0x1d9/0x270 [ 525.724378][ C0] ? __pfx_task_work_run+0x10/0x10 [ 525.724407][ C0] exit_to_user_mode_loop+0x1fa/0x730 [ 525.724430][ C0] ? rcu_is_watching+0x15/0xb0 [ 525.724455][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.724473][ C0] do_syscall_64+0x353/0x580 [ 525.724497][ C0] ? clear_bhb_loop+0x40/0x90 [ 525.724517][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.724533][ C0] RIP: 0033:0x7ff42d59de99 [ 525.724548][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 525.724562][ C0] RSP: 002b:00007ffee38baf18 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 525.724579][ C0] RAX: 0000000000000000 RBX: 00007ff42d827da0 RCX: 00007ff42d59de99 [ 525.724591][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 525.724601][ C0] RBP: 00007ff42d827da0 R08: 0000000000000006 R09: 0000000000000000 [ 525.724611][ C0] R10: 00000000003ffbc0 R11: 0000000000000246 R12: 000000000008041e [ 525.724623][ C0] R13: 00007ff42d82627c R14: 000000000008023b R15: 00007ff42d826270 [ 525.724643][ C0] [ 525.729728][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 525.729747][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 525.729768][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 525.729780][ T30] Call Trace: [ 525.729787][ T30] [ 525.729796][ T30] vpanic+0x56c/0xa60 [ 525.729829][ T30] ? __pfx___schedule+0x10/0x10 [ 525.729856][ T30] ? __pfx_vpanic+0x10/0x10 [ 525.729892][ T30] panic+0xc5/0xd0 [ 525.729918][ T30] ? __pfx_panic+0x10/0x10 [ 525.729942][ T30] ? preempt_schedule_common+0x82/0xd0 [ 525.729968][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 525.729991][ T30] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 525.730018][ T30] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 525.730044][ T30] watchdog+0x1030/0x1030 [ 525.730073][ T30] ? watchdog+0x1c7/0x1030 [ 525.730101][ T30] kthread+0x388/0x470 [ 525.730128][ T30] ? __pfx_watchdog+0x10/0x10 [ 525.730148][ T30] ? __pfx_kthread+0x10/0x10 [ 525.730173][ T30] ret_from_fork+0x514/0xb70 [ 525.730202][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 525.730228][ T30] ? __switch_to+0xc89/0x1420 [ 525.730253][ T30] ? __pfx_kthread+0x10/0x10 [ 525.730286][ T30] ret_from_fork_asm+0x1a/0x30 [ 525.730318][ T30] [ 526.231770][ T30] Kernel Offset: disabled [ 526.236084][ T30] Rebooting in 86400 seconds..