last executing test programs: 3m13.405438265s ago: executing program 3 (id=2744): socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) write$cgroup_devices(r3, &(0x7f00000000c0)=ANY=[], 0x6) close(r2) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r2) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56", 0x2) accept4(r4, 0x0, 0x0, 0x80800) 3m12.780451752s ago: executing program 3 (id=2746): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030500000000000000080000000066a6c3477e5ecd1d9eef448fff09b53bd5fae86840725fc3b8a42258e8c110ca224e088dec6131f1250c48aebc8d7f94e6dda80af741", @ANYRES32=0x0], 0x3c}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2721, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x1, 0x84) 3m10.614104238s ago: executing program 3 (id=2748): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xb, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f00000001c0)=r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000005c0)="05031c", 0x3, 0x24000091, &(0x7f0000000140)={0x11, 0xf5, r5, 0x1, 0xfe, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 3m10.450100194s ago: executing program 2 (id=2750): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x88, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x5c, 0x3, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x4c, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x6fbc}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}, {0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x10c}}, 0x0) recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000340)=""/207, 0xcf}], 0x1, 0x0, 0xffffffffffffff74}, 0x20060) getsockopt$bt_hci(r3, 0x0, 0x3, &(0x7f0000000fc0)=""/4096, &(0x7f0000001fc0)=0x1000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000037000000000a20000000000a01030000000000000000010000010900010073797a310000000034000000030a01020000000000000000010000000900010073797a310000000008000540fffffffc0400f67f08000b"], 0x7c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000000201030000000000000000000a1000040c0019800800020001000000180002"], 0x38}, 0x1, 0x0, 0x0, 0x44008000}, 0x40008d2) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="0a000000010001", 0x7) 3m9.979043986s ago: executing program 2 (id=2755): socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r2, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 3m9.031991901s ago: executing program 2 (id=2756): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) pipe(0x0) pipe(0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x7, 0x0, 0x3}}}}}}}, 0x0) syz_emit_ethernet(0x68, &(0x7f0000000180)={@local, @random="f4cc31e5135e", @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "9eebf9", 0x32, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0xc2, 0x1, 0x0, 0xffd, {[@window={0x3, 0x3, 0x7}]}}, {"2bd9c7313278ed4db04bffcd845c82c2bb9a1a774145ce899281"}}}}}}}, 0x0) 3m8.820141676s ago: executing program 2 (id=2757): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0xa, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200", 0x4}], 0x1}, 0x4005) 3m7.503917023s ago: executing program 3 (id=2759): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$key(0xf, 0x3, 0x2) ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f0000000640)={{'\x00', 0x3}, {0xc2af}, 0x100, 0x0, 0x0, &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f00000003c0)="e7a54c37d015b26ae2d22e0a0741ac89491acf585fecd6a519d6bf32b524a881036cc811e29e2dce24318bff07745a612ee683bc52d07f29833eb8aec7a4ff6c43f2bcdc960c074dbd9a6261977ac5a9e8c8e8e15043106432fee5bac733c99a8944684c0a34ec767a9a330420e3cb874f80fd15c6ecd03479de65ff29061cca05f9b3a0095156d5c3c5ef3166c544101cb3979aa3f829e65c06517d30b506440c6de5c1631e712f0d8129907f13128b7db136fd7c312e29e5699966d2d624ae1c4778ce6cbe423c8e2db79671b6c96454e7bd7b", 0xd4, 0x0, &(0x7f00000004c0)={0x2, 0x57, {0x1, 0xc, 0x32, "fd072a2074d4188a939762ad877a53724beabca94ea078376d7336bbe19d5e1601b3d0661e22e8de7a2bdb18c507c231cb1a", 0x18, "122f4f9c57d083fdd3be119f97388e714a3eec38b11b1830"}, 0xe9, "bee459a3c2d6f7d8d07dd3dfab48ac202fc23ac068067609687eb3df02e9e6b1591f876c0270a3dc58390da814349c06d4ef1cbb19ff0ed178c89967e3438bb1ba6f6d337acf9f4380f01cdf212dd4241fd27cf9da510017ab6c97397be631be3445947af5d8cb339b47bb3d036664aa20096cbff5fda8040413606942e0855eeaed7433ca7dc3b366422f5194e189bc7d93550edd2c486612e246fcac863c8a80e30f47652e4f5e0b025791790cd0c088de13b01bb7f5dba962aeb739bb4140ca132c8b46c1feec6583712b107d803310f852657072d3513469b0e2884d7d6ac364f078127baf8272"}, 0x14c}) sendmsg$key(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={0x0}}, 0x810) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c00000020000000ff0f00000000000008001c00c90000"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) 3m4.512120429s ago: executing program 2 (id=2766): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d80)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0xa, &(0x7f0000000300), 0xdb) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r4}, 0xc) 3m4.405351089s ago: executing program 3 (id=2767): r0 = socket$inet6(0xa, 0x3, 0x94) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x4e20, 0x56, 0x4e23, 0x7ff, 0x2}, {0x0, 0x8, 0x4, 0x5751a3bf, 0xfffffffffffffff6, 0x2000000, 0x1, 0xfffffffffffffffd}, {0x1ff, 0x800000000000, 0x4, 0xffffffffffffff7f}, 0x3, 0x0, 0x1, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x37}, 0x0, 0x2b}, 0x2, @in=@remote, 0x3504, 0x4, 0x0, 0x0, 0xffffffff, 0x6, 0x4}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20242, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x2, 0x8, 0x801, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000035000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x9, 0x7, 0x0, 0x3}, {0x4, 0x3, 0x5, 0x2}, {0xfffe, 0x9, 0x6, 0x7}, {0x3, 0x6, 0x95, 0x80}, {0x1, 0x6, 0xa, 0xe56}]}) syz_emit_ethernet(0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="aa061f7953aaaaaaaaaaaa2908f94400002800000000002c90780000", @ANYRES32=0x41424344, @ANYBLOB], 0x0) 3m4.314984771s ago: executing program 2 (id=2769): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x4b291000) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x3c, r1, 0x701, 0x0, 0x0, {0x2e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x300) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001140)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) socket(0x2, 0x80805, 0x0) 3m4.076314576s ago: executing program 3 (id=2771): unshare(0x6a040000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$ppp(0xffffffffffffff9c, 0x0, 0x379080, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x5, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x4, 0x100000, 0x762, 0x3, 0x80, 0x3, 0x2b12, 0x100, 0x6, 0x1c04, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x80000000, 0x5, 0x79b, 0x2, 0x1, 0x7d, 0x4, 0x2, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x8, 0x180000, 0x400a, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x5, 0x6, 0x9, 0x9, 0xb, 0x4009, 0x0, 0x4, 0xffffff01, 0x8, 0x752, 0x0, 0x1005, 0x5, 0x10001, 0x2, 0xffffffff, 0x6, 0x4, 0x9, 0x7ffffffe, 0xfdffffff, 0x2, 0x2, 0x84, 0x800100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x2, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) pipe(&(0x7f0000000040)) unshare(0x22020600) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 3m1.924438936s ago: executing program 4 (id=2779): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x8c0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x2a, 0x2, 0x0) unshare(0x2c020400) connect$inet(r3, &(0x7f0000000380)={0x2, 0x4e24, @remote}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x8d, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "9ac420002e61afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) syz_emit_ethernet(0x2a, &(0x7f0000000940)={@local, @empty, @void, {@ipv4={0x8902, @igmp={{0x5, 0x4, 0x1, 0x19, 0x1c, 0x68, 0x0, 0xf, 0x2, 0x0, @private=0xa010101, @local}, {0x13, 0x1c, 0x0, @empty}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x18, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000020000000000000000000000850000002f000000180100002020752500000000002020207b1af8ff00000000bfa101000000000007010000f8ff1cffb702000008000000b70300006813000085000000b400000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 3m1.451329956s ago: executing program 4 (id=2780): openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000000000000000000a80000", @ANYRES32=0x0, @ANYBLOB="4060000002400000140012800800010067726500080002800400120008001f00ff0000"], 0x3c}, 0x1, 0x0, 0x0, 0x40c0000}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000540)={0x0, 0xffffffffffffff79, &(0x7f0000000000)={&(0x7f00000025c0)={0x14, 0x0, 0x301, 0x70bd29, 0x25dfdbff, {0x24}}, 0x6a}, 0x1, 0x0, 0x0, 0x8000}, 0x24044848) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff2d53010000000000840400000000000005000000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf72a4de1cc0800004537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5306f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfac2e6d4421c49fb6641cbf56914e76702f673b586c767030090a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe9129"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) socket(0x1e, 0x4, 0x0) r2 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@empty, 0x4e20, 0x0, 0x4e23, 0x0, 0x2, 0x0, 0x0, 0x33}, {0x400000, 0x80000800, 0x9141, 0x0, 0x0, 0xf42, 0x5}, {0x0, 0x0, 0x0, 0xffffffffffffff81}, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1}, {{@in=@empty, 0x4, 0x33}, 0xa, @in6=@private1, 0x3507, 0x5, 0x0, 0x4, 0x0, 0x10000000, 0xfffffffd}}, 0xe8) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001500010300000000000000000b000000fffa7b208cef4d4660909bc85572ad21923632778dca32b3c73b21e2064796ac44161997e66fb9b4806a818043b98a537ed167db4c0c4599365df9faf40bcf783b391d906197a4396e4073a7d19780e6f85a"], 0x14}}, 0x40088c0) 3m0.703202219s ago: executing program 1 (id=2783): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newlink={0x50, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e24}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}]}}}]}, 0x50}}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000680)={{r0, &(0x7f0000000280)='\x00', 0x208940, &(0x7f0000000300)={@align=0x2, {0xae, 0x9, 0x5a7, 0x4}}, 0x9, &(0x7f0000000500), &(0x7f0000000540)=0x7}, {[0x5, 0xd7, 0x4, 0x6]}, 0x3, 0xbf, &(0x7f00000005c0)=""/191}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc6, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, r2}, 0x94) pipe(&(0x7f00000000c0)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x2, 0x100a, &(0x7f0000002500)=""/4106, 0x40f00, 0x5}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) 2m59.955883092s ago: executing program 4 (id=2784): socket(0x11, 0x3, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0) 2m59.719550862s ago: executing program 1 (id=2785): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0x8000}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1010000007c0004060000000000bf852c8986626691b01b5f44e4ce287128"], 0xe0}], 0x1}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40050) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x17, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x14}}, 0x4004000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @broadcast}) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) 2m54.878583394s ago: executing program 4 (id=2787): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2713, 0x0, &(0x7f0000000000)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@updsa={0x13c, 0x1a, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@empty}, {@in=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00', {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0806000108000604"], 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m52.772769544s ago: executing program 1 (id=2788): unshare(0x8040480) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fbdbdf25fc0000000000000000000000000000000000000000000000000000000000000000000004000100000a0060803b0000", @ANYRES32=0xee01], 0xb8}}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x4040095}, 0x40010) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}, 0x1, 0x0, 0x0, 0x14}, 0x0) 2m51.696843054s ago: executing program 1 (id=2790): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, 0x0, 0x20000014) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797afc3c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000010b615cd89f1b3621c000340000000022c00b3120e0a1f0200000000000000000a0000000900010073797a31000000000900020073797a310000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="28f80100", @ANYRES16, @ANYBLOB="04002abd7000fedbdf251200000014010180170001006574683a6261746164765f736c6176655f3100004c0002800800030009000000080002000c000000080002008a7b0000080002000500000008000400ff0000000800030000000000080002000104000008000300090000000800030000000100380004001400010002004e21ac1e01010000000000000000200002000a004e2100000009000000000000000000000000000000010c000000080003000400000034000280080001001e0000000800030005000000080001001c0000000800"], 0x128}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100003000010003000000fbdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 2m51.567054653s ago: executing program 4 (id=2791): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="dbdf25000000003024fa8e0a58801fbf9a000000", @ANYRES32=0x0, @ANYBLOB="9d07070006060400200012800b0001006272696467650000100002800c002e000000000013699385"], 0x40}, 0x1, 0x0, 0x0, 0x24040054}, 0x8000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r4) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r5, 0x100, 0x70bd25, 0x3, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x74841}, 0x40) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0xc}, {0xffff, 0xffff}, {0x2, 0xd}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x3f, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xffffffffffffffff}]}}]}, 0x40}}, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x9, 0x0, 0x0, 0x8, 0x5}]}, {0x0, [0x5f, 0x30, 0x30]}}, &(0x7f0000000240)=""/57, 0x29, 0x39, 0x0, 0x9, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1e, 0x4, 0x4, 0xd, 0x6a146, 0xffffffffffffffff, 0xf57, '\x00', r3, r6, 0x3, 0x1, 0x3, 0x0, @value=r7}, 0x50) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 2m51.260391575s ago: executing program 1 (id=2792): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x401, 0x70bd28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 2m50.939854882s ago: executing program 4 (id=2793): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x7dfc9a88bbf6917f, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5656d, 0x70bd29, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0x1, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x8, 0x8, 0xfbee}, 0x1, 0xfffffffd, 0x3, 0x5, 0xe, 0x4, 0xd, 0x18, 0x5, 0x4, {0x6, 0xc, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x44890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 2m50.661952104s ago: executing program 1 (id=2794): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@getstats={0x1c, 0x5e, 0x1, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20044800) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), 0x0}, 0x20) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) setsockopt(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000040), 0x0) ioctl$TUNGETVNETLE(r2, 0x40107446, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) unshare(0x2a020400) socket$inet_mptcp(0x2, 0x1, 0x106) 2m48.753605977s ago: executing program 32 (id=2769): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x4b291000) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x3c, r1, 0x701, 0x0, 0x0, {0x2e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x300) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001140)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) socket(0x2, 0x80805, 0x0) 2m48.636466825s ago: executing program 33 (id=2771): unshare(0x6a040000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$ppp(0xffffffffffffff9c, 0x0, 0x379080, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x5, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x4, 0x100000, 0x762, 0x3, 0x80, 0x3, 0x2b12, 0x100, 0x6, 0x1c04, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x80000000, 0x5, 0x79b, 0x2, 0x1, 0x7d, 0x4, 0x2, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x8, 0x180000, 0x400a, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x5, 0x6, 0x9, 0x9, 0xb, 0x4009, 0x0, 0x4, 0xffffff01, 0x8, 0x752, 0x0, 0x1005, 0x5, 0x10001, 0x2, 0xffffffff, 0x6, 0x4, 0x9, 0x7ffffffe, 0xfdffffff, 0x2, 0x2, 0x84, 0x800100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x2, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) pipe(&(0x7f0000000040)) unshare(0x22020600) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 2m35.76607863s ago: executing program 34 (id=2793): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x7dfc9a88bbf6917f, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5656d, 0x70bd29, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0x1, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x8, 0x8, 0xfbee}, 0x1, 0xfffffffd, 0x3, 0x5, 0xe, 0x4, 0xd, 0x18, 0x5, 0x4, {0x6, 0xc, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x44890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 2m35.277174397s ago: executing program 35 (id=2794): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@getstats={0x1c, 0x5e, 0x1, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20044800) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), 0x0}, 0x20) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) setsockopt(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000040), 0x0) ioctl$TUNGETVNETLE(r2, 0x40107446, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) unshare(0x2a020400) socket$inet_mptcp(0x2, 0x1, 0x106) 24.356410745s ago: executing program 8 (id=3185): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000280)='\xc3)\',[*][\x00', 0x300000, &(0x7f0000000300)={@_ha_fsid={[0x7, 0x6]}, {0xff, 0xb, 0x0, 0x5}}, 0x5, 0x0, &(0x7f0000000540)=0xf19}) r2 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x8b, 0x10000, @mcast2, 0x5}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="671723d7c6013b", 0x7}, {&(0x7f0000000140)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2", 0x19}, {&(0x7f0000000200)="0090000000", 0x5}], 0x3}, 0x20048b88) poll(&(0x7f0000000600)=[{r1, 0x8}, {r2, 0x21da}], 0x2, 0x5) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000900)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x120, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x30}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xc2}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x483}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ce}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x249}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffffb}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xafe}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x837}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3dc}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x40}]}, 0x120}, 0x1, 0x0, 0x0, 0x4}, 0x8000) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x4008054) write$nci(r5, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r5, &(0x7f0000000dc0)=ANY=[@ANYBLOB="4001"], 0x14) 23.496802525s ago: executing program 8 (id=3188): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x2c, 0x2, {{0x0, 0x9, 0x0, 0x0, 0xffffffff}, 0xfffffc00, 0x0, 0x4, 0x8, 0x80000001, 0x11, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) unshare(0x24020400) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000650001"], 0x14}, 0x1, 0x0, 0x0, 0x4c0d0}, 0x20000040) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) unshare(0x40000000) recvmmsg(r5, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0) sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}], 0x7b, 0x24004000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="180500000000000000000000000000001800000020696c2500000000002020207b0af8ff00000000bd"], &(0x7f0000000180)='GPL\x00', 0x4, 0xde, &(0x7f0000003e40)=""/222, 0x41100, 0x73}, 0x94) 17.33110548s ago: executing program 6 (id=3196): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ipvlan0\x00'}) setsockopt$packet_int(r0, 0x107, 0x12, &(0x7f0000000180)=0x19ca, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'gre0\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r3, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r3, 0x0, 0x12, &(0x7f0000000280)=0x40, 0x4) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00', {}, {}, 0x0, 0x0, 0x0, 0x21}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x62, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x258, 0x280, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x1, 0x1000, 0x6, 0x3}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x520) 16.043616476s ago: executing program 7 (id=3200): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x114}}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000002d00)={0x0, 0x0, &(0x7f0000002cc0)={&(0x7f0000007400)=ANY=[@ANYBLOB="c4240000", @ANYRES16=r5, @ANYBLOB="010029bd7000fcdbdf252100000008000300", @ANYRES32, @ANYBLOB="d4008480440000800a0001000202020202020000140006800800030004000000080001000010000011000100b17650dcfa1ad97cb0cbc6e7f60000000a0005"], 0x24c4}}, 0xc0) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x30, r5, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x10001}, 0x4000000) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x48) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={0x0, 0x0, 0x10}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@fallback=r2, r8, 0x38, 0x18, 0x0, @void, @value=r7}, 0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'dummy0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r10, &(0x7f00000001c0)={0x0, 0xa6, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r11, 0x309, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000080) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r9], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(r12, 0x8916, &(0x7f0000000500)={@local, 0x48, r9}) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f800000000000064010100000000000000000000000000000000000000000000000000000000010000000000030000000080a000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000000000000000000002c000004d633000000fc0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffedffffffffffffff03000000000000000000000000000000000000000000000000000000000000000200000000000000fefffffffffffbff0000000000000000960700002dbd70000000000000000002be0000000000000000000000b1a00100"], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 15.230583985s ago: executing program 6 (id=3202): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="740000001200030600"/20, @ANYRES32=0x0, @ANYBLOB="2fedaa88000000003800128009000100766c616e000000002800028006000100000000000c0002000000000000000000100004800c00010000000000", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x74}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000004000000020000000000000c02000000000000000200000d000000000100000001080000000000000000000000005f"], 0x0, 0x44, 0x0, 0x0, 0xffffffff}, 0x28) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002fff500240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = gettid() sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3000a}, [@IFLA_NET_NS_PID={0x8, 0x13, r4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r5 = accept4(r2, 0x0, 0x0, 0x800) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000180)) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000001701000003000000010000000000000011000000000000001701000003"], 0x1140, 0x4004084}], 0x1, 0x40800) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x11, 0x4, 0x4, 0x9}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x1000, 0x1, r6}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r7}, &(0x7f00000002c0), &(0x7f0000000400)=r7}, 0x20) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001080)={0x14, 0x0, 0x1, 0x3, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000841}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x54, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x40}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa507}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x3, &(0x7f0000000080)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x11}}, &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94) 14.998535101s ago: executing program 7 (id=3203): socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b0000000500000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, 0x0, 0x0) write(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) write(r0, &(0x7f0000000000)='\"', 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000780)=ANY=[@ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x20000c10}, 0x4) r4 = socket$can_raw(0x1d, 0x3, 0x1) syz_emit_ethernet(0xda, 0x0, 0x0) bind$can_raw(r4, &(0x7f0000000000), 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r5, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0xffb}, {0x0}], 0x2}}], 0x1, 0x2, 0x0) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f00000000c0), 0xf00) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) 14.223835508s ago: executing program 0 (id=3205): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28) sendto$inet6(r1, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x40004}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x65, 0x0, 0x0, 0x0, 0x9}, @generic={0x66, 0x0, 0x0, 0x0, 0xf1}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x1001}, @exit, @printk={@x, {0x3, 0x3, 0x6}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0xa}, 0x94) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) close(r1) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)={0x18, r3, 0x731, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40801}, 0x4040850) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000030a0fdb00000000000000000a0060050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f757465000000080005400000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000002fc0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002f80)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWCHAIN={0x90, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_USERDATA={0x73, 0xc, "5ae6468e971bf669b5f6af6c6e7e2d6f12e7a1c06f2699764b5cd73ae9f9d8f682650e7f4a6c811a80ca1df5930d1c9e07ac31bfa022714ceb39d47fe9891232a1f9ac42a7bd0fc2432c600ff309a5d4e57de16374ec88da0e7b8c007d99291e1cfac44fd60cc39b6a00450c237f13"}]}, @NFT_MSG_DELCHAIN={0x104, 0x5, 0xa, 0x701, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6103ac94}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_bond\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_COUNTERS={0x7c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xa}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffd}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7ff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xd5}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWFLOWTABLE={0x1c, 0x16, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x401, 0x0, 0x0, {0x2}}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x5}}, @NFT_MSG_NEWFLOWTABLE={0x70, 0x16, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}]}]}]}, @NFT_MSG_NEWSETELEM={0x80, 0xc, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x18, 0x7, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xb}]}}}, @NFTA_SET_ELEM_DATA={0x4}]}, {0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x2f0}, 0x1, 0x0, 0x0, 0x41}, 0x40804) 13.005749526s ago: executing program 6 (id=3207): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000060400000000000000000000010500000008000000000000000000000300000000010000000200000004000000000000000000000b"], 0x0, 0x5a}, 0x28) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/mnt\x00') recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 12.896098555s ago: executing program 7 (id=3208): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e23, @local}, {0x2, 0x4e23, @loopback}, 0x486, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa, 0x2, 0x20e7}) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000280)={'bond0\x00', {0x2, 0x0, @local}}) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="1400000016000b63d25a80648c2566e506bce1e800294babfba15711165402766999a96cd6e87ed97285a92e15264fa882afe0c31be8eca4ea2a536b20ff15193bb574f9baef8e6e4fe50199e16ca5f9c3a094135eac97a8fb78f2eee1f9942b33e63735d3b025aa19a00ec0eb9623234589d9138f9a28346ee0a03ea4ecc0f1fe410620a18cd94edbd4b34aab417f647afb668a59cc2410b9bd37c21ad98913be9d000000", 0xa5}], 0x1}, 0x840) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x1a}, 0x0, 0x1, 0x0, 0x2, 0x6, 0x3fbc}, 0x20) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r4, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xff}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x20082000) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, r6, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x6, 0x2, 0x4246}, @TIPC_NLA_NET_NODEID={0x0, 0x3, 0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_netprio_ifpriomap(r7, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='gretap0 8', @ANYRESOCT=r8], 0x6e) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002cbd7000fcdbdf2517000000440006803d00040063636d2861657329"], 0x58}, 0x1, 0x0, 0x0, 0x806}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x17c, r6, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x134, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x71c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x33}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000001}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x801}, 0x40000) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="1709000000000000000001000000050007000000000008000900fffffffe060002001100000008000a000100000008001800ac1414aa080019"], 0x58}}, 0x0) 12.841231958s ago: executing program 0 (id=3209): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a54000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a050000000008000a40ffffff78080008401000000108000c4000000005080003400000001014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x200000010, &(0x7f0000000000)=0x7, 0x4) sendto$unix(r2, &(0x7f0000000080)="008e", 0x2, 0xd1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000108000)={{0x0, 0x8, 0x100000000, 0xfffffffffffffffc, 0x0, 0x8, 0x9, 0x400, 0x3, 0x4, 0x36a58e4a, 0xd, 0x2, 0x75, 0x1}}) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_lsm={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000080000c300e0ff020000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x8, 0xd8, &(0x7f00000004c0)=""/216, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r5, 0x0, 0x13, &(0x7f0000000140)=0x2, 0x4) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c000000f702010100000000000000000500ab930800044000005932280002800600034000010000060003400005000004000180080001000a010100080002"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) setsockopt$inet_int(r5, 0x0, 0x17, 0x0, 0x0) 12.79266175s ago: executing program 5 (id=3210): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x9) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000017c0)=r0, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff7e}, 0x94) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x120, 0x20}, {0xffffffff80000001, 0x1be, 0xff, 0x0, 0x0, 0x4000, 0x0, 0x5}, {0x800, 0x0, 0xfffffffffffffff1}, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x6c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203}}, 0xe4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x700, 0x8, 0x3, 0x3, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x11, 0x0}, @private=0xa010101}}}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ac0)=@newsa={0x144, 0x10, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000}, {0x10, 0x9, 0x2}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @offload={0xc, 0x1c, {0x0, 0x1}}]}, 0x144}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x20, r6, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040001}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000007c0)={'wpan0\x00'}) 12.713138695s ago: executing program 8 (id=3211): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$netlink(0x10, 0x3, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0004000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000003080002400000000014000000020a69eff1640000000000000000000114000000110001"], 0xa4}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x1000009, 0x11, r4, 0xd371f000) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x2000007, 0x12, r3, 0x12574000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="09000000170000000a0000004000000042000000", @ANYRES32=0x1, @ANYBLOB="0500000000000000000000000000008000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r6}, 0x38) 10.706877355s ago: executing program 0 (id=3212): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001000010400000000000000007fff0000", @ANYRES32=0x0, @ANYBLOB="400d0000001200002000128008000100687372001400028008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r0], 0x40}, 0x1, 0x0, 0x0, 0x40010}, 0x4008044) 10.658510238s ago: executing program 5 (id=3213): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x503, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff80fe}, 0x50) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) bind$alg(r2, 0x0, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005200), 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r0}, 0x38) r4 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) pwritev(r4, 0x0, 0x0, 0x7f, 0x3) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 10.626641641s ago: executing program 6 (id=3214): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="bc0000000002010400000000000000000a000005300001802c0001801400030000000000000000000000ffff0000000014000400fe8000000000000000000000000000aa3c0003800c00028005000100000000002c0001800e000300fe80000000000000000000000000001c14000400fe8800000000000000000000000000013c0002800c00028005000100000000002c00018014000300ff010000000000000000000000000001140004"], 0xbc}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x7, 0x4, 0x900, 0x2, 0x28}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x28, 0x2d, 0x107, 0x70bd2b, 0x25dfdbfe, {0x6, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x63, 0x0, 0x0, @ipv4=@loopback}]}, @nested={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x4}]}]}, 0x28}}, 0x4008030) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80)={r6}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, &(0x7f0000000040), &(0x7f0000000500)=r2}, 0x20) syz_emit_ethernet(0x26, &(0x7f0000000b80)=ANY=[], 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x48, 0x10, 0x401, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1703, 0x8000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r8}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x48}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 10.608971357s ago: executing program 7 (id=3215): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x800) r1 = socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000380)={0x0, 0x80, "0e577e79e96f6369099828c441a6ca34f8ce777143396408bda9a0d2384ccc14c94ecdaafe9cd009470a391966aa14c8901f8a0a89937993f4ae58e57e3aaaab2cc9284f0e26a7b58a68664d2f2778bc74c47bb1b08a19e0f235725455486fe21e8484d46d6cf835d898a2c4a5c86bf8a4f4eb7063b1e9451d78893f960d69c2"}, &(0x7f0000000080)=0x88) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000580)={r2, 0xec, "0f5efaacd0d12878f2659e749babba7d41e443975068a8178cd07aa09a9753f5e4a3c56672587b74e32d5b5fbf6ba2722bec7bcf22286464f872f2ee202284493c4021100739ac60f91da2345778cd1bdbe2d988b6e6ae1a67b0ff2197fda56d55b50a198331561220b7805108684e433e54bb839adce44669b37fc583eca8acf610c7cdd57666ac3c01f2a6a62dfb50e8a6785b6a57e3614fd9904e21c0c26a0027bebe458001fb746fa5b07eeff2cf7a914dab742e5b31f8e6a2c4ce7595fd420f2e53b802a1fd96ba89fc8d56e42d1266c3c0609f878c889dd7fcde33b07909908730606100f79630269a"}, &(0x7f0000000180)=0xf4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05400000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a01040000000000000000010000002400048020000180080001006f736600140002800500020000000000080001400000001408000b40000000000900010073797a300000000014000000110001"], 0xd4}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x3, 0x0, 0x0, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) r6 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x9, &(0x7f0000000140)=0xfb78, 0x4) 10.421771574s ago: executing program 0 (id=3216): bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES32], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r3, 0x29, 0x39, &(0x7f0000000180)=""/57, &(0x7f0000000280)=0x39) r4 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000500)=r0, 0x4) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008054) writev(r1, &(0x7f0000006280)=[{&(0x7f0000000680)}, {&(0x7f00000041c0)="d2cf43efec9672f8d433a1a2d1ac1ba483b3c377abd1c40900dd48e925c9f170621fba494945b9a6748709715dad1c5beb3783165516391072f540d5a656c99bee9a9af58e5041b58b21777bf6506f4fc22990d90b75b8f4acffea8a3caa7c291dc1b90291986a793eaa472736f5d52a2a3e6aecd3c3519699b1469e5ee3b434ac8cc30b3cda1a88664a50ce0e34f0a81d8454e8d79d76a832a88b86759fc04bc99f9fc2cf513ac0066a85c87dde365037ca2c4b44a7d521157f6799f942a5399fddd6ca6783ed0473c99460ed74f5a3f350dd3c87913b2d498943fb48d9db337d340530c4e6dc18be1673e171e6d0c13c5029edd475d5accc1adf1b9480a4ec4ed64dbb89d52135e3acc4ee6aae82fad39bc2b566c232a83228a841a0ddd0d0a423e000819954f174bc44112631f1d055baa2df0c2ac9a6092e7079b964ad217f7b3c0a9f294c36b341071a8ff6c9d2fcdd6bcd34c4741e3019bbd02d6184318b2955aca061fbe0f81f8428d5ef54fc54a8a0a53e09de2190fe95436ee38f56", 0x180}], 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2404c054) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000020a01010000000000000000000000013c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000043c0000001e0a050200000000870b9f1b010000000907000073797a320000005d6fd182c63830d6915e21b227b4141000100003800c00008005000180040002800900010073797a3000000000140000001000010000000000000000000000000a226181ef1af2a7508f544c989d0f105f326b76a330ea0c30cb5926563866b16103f4ae5594a4c1250e6735fb361f7d4ff3e5af565978eb3bb53713821e6f6b3f7ab8d262aa9df0ed3dad73560c6d59c53604b4be81d4b9a62975498d2af506a0f1933bb88997"], 0xb4}}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, 0x0, 0x40880) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap(&(0x7f000009f000/0x800000)=nil, 0x800000, 0x0, 0x11, r8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 8.952062824s ago: executing program 8 (id=3217): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x100}}, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000280)) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0xba, &(0x7f00000008c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60ee527a00843c0020010000000000000000000000000001ff0200000000000000000000000000012f04000000000000c910ff85f5115779415220769a74"], 0x0) socketpair(0x22, 0x4, 0x2, &(0x7f0000000040)={0xffffffffffffffff}) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r5, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000400)=r2}, 0x20) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000140)="000000e3b697f700914788000100000000000000001ab74fa0cf5786451bac671589b3fc4ddcdf0cc7", 0x29, 0x20000000, &(0x7f0000000000)={0x11, 0x0, r8, 0x1, 0x7, 0x6, @remote}, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001a00)={0x6, 0x1a, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffff9}, @ldst={0x2, 0x1, 0x6, 0x2, 0x5, 0x80, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x7, 0x1, 0x0, r4}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xde3}}]}, &(0x7f00000006c0)='syzkaller\x00', 0x8, 0x1000, &(0x7f0000000940)=""/4096, 0x41000, 0x8, '\x00', r8, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001940)={0x0, 0x0, 0x2, 0xfff80000}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001980)=[r4], &(0x7f00000019c0)=[{0x1, 0x2, 0x7, 0x3}, {0x1, 0x1, 0x2, 0x8}], 0x10, 0x100}, 0x94) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r11 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r11) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r10, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r11, r11, 0x19, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x9f1e}}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180a000000000000000000000000000085000000190000009500000000000000502d9e1de0dfdaf0"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xab, 0xfffffffffffffffc}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r4, r4, 0x19, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x9f1e}}, 0x40) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="25ab23589b3f5a4e28a10b5ff4b078a841cc38914bfa2f8039288c649e756f88571a479b60187837af903dd9610c387da5d6e34683bd4687225e8d1fcdf2cffc2010a2a83039265677647bba18c542c40681fce33bd7b9abd63dea850dfcfb38ac1b48bc"], 0x54}}, 0x4004000) 8.486103645s ago: executing program 5 (id=3218): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x20000810) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) mmap$xdp(&(0x7f0000001000/0x2000)=nil, 0x2000, 0xf, 0x11, r1, 0x100000000) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r1, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x520, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x450, 0x2e0, 0x2e0, 0x450, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {0x0, 0x10}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x5, 0x4}, {0x0, 0x6, 0x2}, {0xffffffffffffffff, 0x1, 0x4}, 0x9, 0x80}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000023c0)}, 0x20001) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r4, 0x0, 0x80) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r6, 0x0, 0x32600) ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f0000000580)={0x0, @nfc={0x27, 0x0, 0xffffffffffffffff, 0x3}, @rc={0x1f, @none}, @hci={0x1f, 0x2, 0x2}, 0x2, 0x0, 0x0, 0x0, 0x8008, 0x0, 0x10001, 0x5, 0x3}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) 8.464416674s ago: executing program 6 (id=3219): epoll_create1(0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$unix(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x81}, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r1) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000480)={0x0, 'veth0_to_hsr\x00', {0x2}, 0x51}) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r6, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) recvmmsg$unix(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000080)}}], 0x1, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) readv(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000100)=""/39, 0x27}, {&(0x7f0000000380)=""/197, 0xc5}, {&(0x7f0000000540)=""/139, 0x8b}, {&(0x7f0000000600)=""/47, 0x2f}, {&(0x7f0000000280)=""/90, 0x5a}, {&(0x7f0000000080)=""/49, 0x31}], 0x6) 8.389803314s ago: executing program 7 (id=3220): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x1, 0x6, 0x0, 0x100, 0x4, 0x500000, r1}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x9c}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2ea}], &(0x7f0000000100)='syzkaller\x00', 0x1ff, 0x2f, &(0x7f0000000180)=""/47, 0x40f00, 0x25, '\x00', r1, @sched_cls=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xaa9}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pwritev(r0, &(0x7f0000000280), 0x0, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bind$can_raw(0xffffffffffffffff, &(0x7f0000000040), 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)=ANY=[@ANYRES32=r3, @ANYBLOB, @ANYRES32=r2], 0x20) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x1f, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000002f00090027010000fbdbdf25040000000c000c00400000"], 0x20}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) bpf$MAP_CREATE(0x0, 0x0, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, @remote, 0x2, 0x6, 0x4, 0x100, 0x6, 0x44, r1}) r8 = socket$nl_route(0x10, 0x3, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x40d, 0x70bd2a, 0xfffffff8, {0x0, 0x0, 0x0, 0x0, 0x600b2, 0x40c41}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x1}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c844}, 0x0) 7.935069188s ago: executing program 8 (id=3221): socket(0x10, 0x3, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x800, 0x4) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0400f9f407000904018000000020000000000000", 0x1b) r2 = socket$kcm(0xa, 0x2, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x7) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r3, 0x0, 0x2, &(0x7f0000937fed)=""/16, &(0x7f0000000080)=0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) close(0x4) socket(0x2, 0x80805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x3, 'nq\x00', 0x5, 0x7, 0x77}, {@remote, 0x4e20, 0x2, 0xcd, 0x0, 0x40}}, 0x44) sendmsg$sock(r2, &(0x7f00000000c0)={&(0x7f0000000400)=@in6={0x2, 0x4e23, 0x0, @dev, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x40800) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) 7.230196857s ago: executing program 7 (id=3222): r0 = socket(0x2b, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0xa}, {0x7}, {0x5, 0xfff1}}}, 0x24}}, 0x40004) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x1, 0x2000003, 0x2f4, 0x5}, 0x41) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r4, 0x3c2d6000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000400)=ANY=[@ANYRES32], 0x42) getsockopt$inet_tcp_int(r4, 0x6, 0x1, &(0x7f0000000380), &(0x7f00000005c0)=0x4) 7.084775474s ago: executing program 0 (id=3223): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x20000890) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xab}}, &(0x7f0000000480)='GPL\x00'}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000003f0007012bbd700000000000017c00000400fc800c00018008010600", @ANYRES32=0x0, @ANYBLOB="0c0002"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000019200)=@ipv6_newnexthop={0x3c, 0x68, 0x1, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x2}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_HOPLIMIT={0x5, 0x4, 0x1}}, @NHA_ID={0x8, 0x6, 0xf2}, @NHA_OIF={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044c02}, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) unshare(0x20000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x15, 0x5b09, 0x7, 0x2, 0x3, 0x5, 0x7, 0x8, 0x5, 0x9, [0xce, 0x5, 0x2005, 0x40, 0x4, 0x3, 0x400e, 0xfb]}}) setsockopt$inet_tcp_int(r3, 0x6, 0x1, &(0x7f00000002c0)=0x37, 0x4) tee(r4, 0xffffffffffffffff, 0xfffffffffffffc01, 0x2) setsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup(r4, &(0x7f0000000300)='syz1\x00', 0x200002, 0x0) r6 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x3ec}, [], {0x14, 0x3f8}}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 6.49241135s ago: executing program 5 (id=3224): socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) close(0x3) socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)) pipe(&(0x7f0000000440)) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80001, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$rds(0x15, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) 6.040249557s ago: executing program 5 (id=3225): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000400)={0x0, 0x4}, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x20}]}, &(0x7f00000001c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) close(0x3) sendmsg$sock(0xffffffffffffffff, 0x0, 0x20040010) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000000340)}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="211000000140000008001b00000000000800040000150000"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r1 = socket$kcm(0x2d, 0x2, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0xf00, 0x0, 0x1}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x48d0}, 0x4054) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0xb, 0x42, 0x40, 0x42}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)="773c206b2792e161ebf22b47a0a6568413c4a451ba39cf89d4e72389f19cf05b324dc249f4bf42fd2bd0e571bdca3942c1f9e1350908ec2683fef45d66d629379439c591987e5bbc5d753f40373d76e28d63549c7deb3d0ffa58da8eba1fc7db4f63ec3596d12d52d16765e32687589ede5c9b6e6b8c1b2839a7160a3d8a10927036f63a43a34351f46afc26e6b2ba5c80441ed90dff026cc90dd5a03e1926e73f89328d6dfd7f3bbb666892596135196ec5", &(0x7f0000000880), 0x1006, r2, 0x0, 0xd88d02a0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r2, &(0x7f0000000100), 0x0}, 0x20) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) sendmsg$inet_sctp(r0, 0x0, 0x4048000) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="feff01"], 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r3, &(0x7f0000007300)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="7790ea2b2eae9aaf4d832d53008eae091c733817270b25b50d3e147955783b", 0x1f}], 0x1, &(0x7f0000001600)=[{0xe8, 0x10c, 0x6, "9780ee50899838027547e5a800438ff4247e0a18c0735fbacdcfeb0b65389903e01e50033b2b3fc3ca9fc346b77ac1497c9bdaf62f51a91790e5e94bf64ba307262b9c98a5b6c13f8ddfbd30d7f24e609a8abab990a1644a6bd74365cc59a52dc54ba5ca9f04a772dc24f8302e8945725e26c9ee91f3149c454eb6f20b27767234b64e4056f32b731d6af91efcabc9eda74a7dba11f4616b70d28ac30bbb5922682b165b7aadb3dbfbe8bf728b13d950ccbbd3e84d3759d195af15b271f2aecf376226ccab076264a315e8ee9f902f3051bc673bcfbe"}, {0x30, 0x119, 0x0, "1eb170b6e2f49db82101237fc5bd3f33a9ed56037a03f2732841c903f189"}, {0x10, 0x1, 0xc8}, {0x38, 0x29, 0x0, "96475c324dc52db042a7e99d2f7cbdd729b99f36ab4bf76749709522c095659c37"}, {0x10, 0x108, 0xfffffff9}], 0x170}}, {{&(0x7f0000002ac0)=@generic={0x8, "22943e1cc52fc390bb5c77a2a68e59182c67aa5e2f869a1d66c31450c1349ee6996a71be9a902007f79b826caf60f6e80d455514e7d850a0e8e95950a0c249709722428c23f5063505edc92c9da91802897ed88dc85df6fff93ffaa75baf006b64ba69cc11ab26d0c3fc7752dbd2392d93e441ccf13c0cdffdad7ba5dc63"}, 0x80, &(0x7f0000002d00)=[{&(0x7f0000002b40)}, {&(0x7f0000002c40)="a8dd1270b7d97efc1a735e6a82bbc0537a9caddd716a4d36a41d61236ef29be0a9b513aa638cd525f5071ab03306ab6cffab404906b36b07ba208d88696106583f5d7877f9d31ad08f3c4f3d5632dad7bcd330d844dc8e2b344897a37de4326945812bf62164d91cfdf40b54c9f765534c120654b3be7a09e78e39f9684e201cd04b2e737c9faf68bcbb8330e346072ce45d855e7cb82940bfadf4d03f970d5b5279ce3dfaa0727ff09997f95052e3f73d15b149aa72", 0xb6}], 0x2, &(0x7f0000002d40)=[{0x10, 0x114, 0x9}], 0x10}}, {{0x0, 0x0, &(0x7f0000003480), 0x0, &(0x7f0000003500)=ANY=[@ANYRES32=0x0], 0x13c8}}, {{&(0x7f0000004900)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000005c80)=[{&(0x7f0000004980)}, {0x0}, {&(0x7f0000004a80)="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", 0xdc0}, {&(0x7f0000005a80)="90c5405338d671e66a4b2f2dcd434835e32482eecbf463d1686c9ec3c198d159185665f60e1954e30bc9671de4be89e6323ef4328ee7f9eec949abeed53ab1afa2cc1e5180404c0d0b5e75932fc17713c1d8016ff05ee122be549d16fbc0fa2e4bd37ea3498636c0979c6cac04dfe0ac6dbad3dc1a", 0x75}, {&(0x7f0000005b40)="8a0d2e1d462b5c10dbca79513f34ce8d69d6917d28962787ebe3ced349391fa324cc32489bdde50b9225d97a9464fb4eda881d7a40c40b0a0ff99b1ed13b069397c0c9952c95fb13112eb3b822a069a3dae5e10e2d05e95fdc552fc7c6fb3ff704dc4448089591bc7a710d676c63d745163d5046b72d011431975d46f33ac23db740f486d6e4cc6503e91fca02d737ed70238b536ded25ff40b1760b", 0x9c}, {&(0x7f0000005c00)}], 0x6, &(0x7f0000005d00)}}], 0x4, 0x4001801) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="581800004400010029bd700004000000010000000400488040180180"], 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) 370.077909ms ago: executing program 8 (id=3226): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3200000000a0000000060a010400000000000000000100000208000b400000000078000480340001800b000100657874686472000024000280080001400000000c080003400000000208000440000000220500020007000000400001800c0001006269747769736500300002800800034000000002080001400000001408000240000000120c000780080001001f00000b08000640000000010900010073797a30"], 0x114}}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000002d00)={0x0, 0x0, &(0x7f0000002cc0)={&(0x7f0000007400)=ANY=[@ANYBLOB="c4240000", @ANYRES16=r5, @ANYBLOB="010029bd7000fcdbdf252100000008000300", @ANYRES32, @ANYBLOB="d4008480440000800a0001000202020202020000140006800800030004000000080001000010000011000100b17650dcfa1ad97cb0cbc6e7f60000000a0005"], 0x24c4}}, 0xc0) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x30, r5, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x10001}, 0x4000000) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x48) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={0x0, 0x0, 0x10}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@fallback=r2, r8, 0x38, 0x18, 0x0, @void, @value=r7}, 0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'dummy0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r10, &(0x7f00000001c0)={0x0, 0xa6, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r11, 0x309, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000080) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r9], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(r12, 0x8916, &(0x7f0000000500)={@local, 0x48, r9}) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f800000000000064010100000000000000000000000000000000000000000000000000000000010000000000030000000080a000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000000000000000000002c000004d633000000fc0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffedffffffffffffff03000000000000000000000000000000000000000000000000000000000000000200000000000000fefffffffffffbff0000000000000000960700002dbd70000000000000000002be0000000000000000000000b1a00100"], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 315.661108ms ago: executing program 6 (id=3227): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x9) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000017c0)=r0, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff7e}, 0x94) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x120, 0x20}, {0xffffffff80000001, 0x1be, 0xff, 0x0, 0x0, 0x4000, 0x0, 0x5}, {0x800, 0x0, 0xfffffffffffffff1}, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x6c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203}}, 0xe4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x700, 0x8, 0x3, 0x3, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x11, 0x0}, @private=0xa010101}}}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ac0)=@newsa={0x144, 0x10, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000}, {0x10, 0x9, 0x2}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @offload={0xc, 0x1c, {0x0, 0x1}}]}, 0x144}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x20, r6, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040001}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, 0x0) 96.459925ms ago: executing program 0 (id=3228): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000008c0)) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000009c0), r1) sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8405d22596f37403}, 0x4054) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r2, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x4c000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) syz_extract_tcp_res(&(0x7f00000005c0)={0x41424344}, 0xffffff0d, 0x3) syz_emit_ethernet(0x17a, &(0x7f0000000600)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@mpls_mc={0x8848, {[{0x80000}, {0x0, 0x0, 0x1}, {0xf8, 0x0, 0x1}], @ipv6=@tcp={0x9, 0x6, "814587", 0x138, 0x6, 0x0, @empty, @dev={0xfe, 0x80, '\x00', 0x14}, {[@hopopts={0x33, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x1}]}, @hopopts={0xff, 0x4, '\x00', [@calipso={0x7, 0x20, {0x0, 0x6, 0x7, 0x7, [0xff, 0xfffffffffffff801, 0x10000]}}]}, @routing={0x5c, 0x4, 0x6, 0xf8, 0x0, [@remote, @mcast2]}], {{0x4e23, 0x4e20, 0x41424344, r4, 0x1, 0x0, 0x14, 0x40, 0x8, 0x0, 0xb0e0, {[@mptcp=@capable={0x1e, 0xc, 0x7, 0x8, 0x6, 0x7fff}, @generic={0x2, 0x10, "659ec50a6fe8f9f97b11a0daef4c"}, @sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa, 0x5, 0x8}, @fastopen={0x22, 0x2}, @exp_smc={0xfe, 0x6}, @generic={0x0, 0x9, "d87f847b8eabb5"}, @sack_perm={0x4, 0x2}, @eol]}}, {"64772e6651e54e125b80eb4a34617c077de73da24e7643f022c14af3d56b592a3da546aa6b90ada0f6ce8ceb730aa5abed55fb0c9475408e688eac4087f203b74cb09d83305143da0bd066a481af9fc6bcf9125a3b4ce17b71de7ae8321c9a88d88d5fa80aa65c2e03e0b9394fe4d19b103eaff387c10dfd7bbe0740237806de"}}}}}}}}, &(0x7f00000007c0)={0x1, 0x1, [0x72b, 0x5ef, 0x20, 0xba3]}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r3], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000600)={r6, r6, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r7, 0x800448d2, &(0x7f00000005c0)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r8, 0x2, 0x70bd25, 0x1, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xffffffffffff0183}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x40840) 0s ago: executing program 5 (id=3229): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="bc0000000002010400000000000000000a000005300001802c0001801400030000000000000000000000ffff0000000014000400fe8000000000000000000000000000aa3c0003800c00028005000100000000002c0001800e000300fe80000000000000000000000000001c14000400fe8800000000000000000000000000013c0002800c00028005000100000000002c00018014000300ff010000000000000000000000000001140004"], 0xbc}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x7, 0x4, 0x900, 0x2, 0x28}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x28, 0x2d, 0x107, 0x70bd2b, 0x25dfdbfe, {0x6, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x63, 0x0, 0x0, @ipv4=@loopback}]}, @nested={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x4}]}]}, 0x28}}, 0x4008030) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80)={r6}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, &(0x7f0000000040), &(0x7f0000000500)=r2}, 0x20) syz_emit_ethernet(0x26, &(0x7f0000000b80)=ANY=[], 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x48, 0x10, 0x401, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1703, 0x8000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r8}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x48}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) kernel console output (not intermixed with test programs): locking state [ 465.291210][T14383] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.312697][T14383] bridge_slave_0: entered allmulticast mode [ 465.326952][T14383] bridge_slave_0: entered promiscuous mode [ 465.721919][ T4942] Bluetooth: hci8: command tx timeout [ 467.292191][ C1] net_ratelimit: 3178 callbacks suppressed [ 467.292214][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 467.303075][ C0] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 467.311857][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 467.327781][ C0] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 467.343762][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 467.355794][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 467.355801][ C0] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 467.366790][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 467.373280][ C0] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 467.390505][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 468.547949][T14383] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.558660][T14383] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.567316][T14383] bridge_slave_1: entered allmulticast mode [ 468.576922][T14383] bridge_slave_1: entered promiscuous mode [ 468.808184][ T7397] batman_adv: batadv0: Interface deactivated: gretap3 [ 469.190643][ T7397] batman_adv: batadv0: Removing interface: gretap1 [ 469.263329][ T7397] batman_adv: batadv0: Removing interface: gretap3 [ 469.347778][ T7397] bond5 (unregistering): (slave geneve2): Releasing active interface [ 469.362985][ T7397] geneve2 (unregistering): left allmulticast mode [ 469.628874][ T7397] bond0 (unregistering): Released all slaves [ 469.651577][ T7397] bond1 (unregistering): Released all slaves [ 469.683353][ T7397] bond3 (unregistering): Released all slaves [ 469.705775][ T7397] bond4 (unregistering): Released all slaves [ 469.739526][ T7397] bond2 (unregistering): Released all slaves [ 469.837031][ T7397] bond5 (unregistering): Released all slaves [ 469.888640][T14500] bond0: entered promiscuous mode [ 469.893967][T14500] bond_slave_0: entered promiscuous mode [ 469.899925][T14500] bond_slave_1: entered promiscuous mode [ 469.906526][T14500] team0: entered promiscuous mode [ 469.911650][T14500] team_slave_0: entered promiscuous mode [ 469.918088][T14500] team_slave_1: entered promiscuous mode [ 469.926123][T14500] bridge3: entered promiscuous mode [ 469.934104][T14500] batadv0: entered promiscuous mode [ 469.941356][T14500] 8021q: adding VLAN 0 to HW filter on device hsr2 [ 469.977119][T14500] bond0: left promiscuous mode [ 469.982205][T14500] bond_slave_0: left promiscuous mode [ 469.987870][T14500] bond_slave_1: left promiscuous mode [ 469.995197][T14500] team0: left promiscuous mode [ 470.000107][T14500] team_slave_0: left promiscuous mode [ 470.006346][T14500] team_slave_1: left promiscuous mode [ 470.012563][T14500] bridge3: left promiscuous mode [ 470.023775][T14500] batadv0: left promiscuous mode [ 470.127856][T14501] netlink: 'syz.0.2808': attribute type 2 has an invalid length. [ 470.199563][T14501] bond0: entered promiscuous mode [ 470.207312][T14501] bond_slave_0: entered promiscuous mode [ 470.225966][T14501] bond_slave_1: entered promiscuous mode [ 470.240800][T14501] team0: entered promiscuous mode [ 470.252691][T14501] team_slave_0: entered promiscuous mode [ 470.262319][T14501] team_slave_1: entered promiscuous mode [ 470.278129][T14501] bridge3: entered promiscuous mode [ 470.290986][T14501] batadv0: entered promiscuous mode [ 470.303845][T14501] 8021q: adding VLAN 0 to HW filter on device hsr2 [ 470.327393][T14501] bond0: left promiscuous mode [ 470.335959][T14501] bond_slave_0: left promiscuous mode [ 470.345257][T14501] bond_slave_1: left promiscuous mode [ 470.351002][T14501] team0: left promiscuous mode [ 470.356333][T14501] team_slave_0: left promiscuous mode [ 470.363497][T14501] team_slave_1: left promiscuous mode [ 470.369211][T14501] bridge3: left promiscuous mode [ 470.398081][T14501] batadv0: left promiscuous mode [ 470.550358][T14383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.646178][T14383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.774352][T14383] team0: Port device team_slave_0 added [ 470.813179][T14383] team0: Port device team_slave_1 added [ 471.095389][T14396] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.112009][T14396] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.121112][T14396] bridge_slave_0: entered allmulticast mode [ 471.143019][T14396] bridge_slave_0: entered promiscuous mode [ 471.173460][T14396] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.188615][T14396] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.217735][T14396] bridge_slave_1: entered allmulticast mode [ 471.235955][T14396] bridge_slave_1: entered promiscuous mode [ 471.633938][T14383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.641631][T14383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.668918][T14383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.693025][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 471.792985][T14396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.844418][T14383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.863448][T14383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.900730][T14383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 471.915803][T14396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.064991][T14396] team0: Port device team_slave_0 added [ 472.106618][T14396] team0: Port device team_slave_1 added [ 472.305166][ C0] net_ratelimit: 1916 callbacks suppressed [ 472.305191][ C0] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 472.325623][ C0] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 472.339992][ C0] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 472.352136][ C0] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 472.370037][ C0] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 472.384577][ C0] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 472.398799][ C0] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 472.412415][ C0] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 472.430180][ C0] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 472.444703][ C0] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 472.512369][T14383] hsr_slave_0: entered promiscuous mode [ 472.522441][T14383] hsr_slave_1: entered promiscuous mode [ 472.537391][T14383] debugfs: 'hsr0' already exists in 'hsr' [ 472.551356][T14383] Cannot create hsr debugfs directory [ 472.704637][T14396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 472.728158][T14396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.830563][T14396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.907555][T14396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 472.924937][T14396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.951665][T14396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 473.104070][T14381] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.117590][T14381] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.135063][T14381] bridge_slave_0: entered allmulticast mode [ 473.155682][T14381] bridge_slave_0: entered promiscuous mode [ 473.308598][T14381] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.332253][T14381] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.355666][T14381] bridge_slave_1: entered allmulticast mode [ 473.380521][T14381] bridge_slave_1: entered promiscuous mode [ 473.484958][ T7397] tipc: Left network mode [ 473.500661][T14396] hsr_slave_0: entered promiscuous mode [ 473.521440][T14396] hsr_slave_1: entered promiscuous mode [ 473.531572][T14396] debugfs: 'hsr0' already exists in 'hsr' [ 473.538774][T14396] Cannot create hsr debugfs directory [ 473.604065][T14403] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.611464][T14403] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.619712][T14403] bridge_slave_0: entered allmulticast mode [ 473.628745][T14403] bridge_slave_0: entered promiscuous mode [ 473.692035][T14381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.743308][T14403] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.751135][T14403] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.777576][T14403] bridge_slave_1: entered allmulticast mode [ 473.786135][T14403] bridge_slave_1: entered promiscuous mode [ 473.895078][T14381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.181080][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 474.269795][T14403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.302341][T14381] team0: Port device team_slave_0 added [ 474.327198][T14403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.382595][T14381] team0: Port device team_slave_1 added [ 474.514876][T14403] team0: Port device team_slave_0 added [ 474.522541][T14381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.533748][T14381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.566977][T14381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.613050][T14403] team0: Port device team_slave_1 added [ 474.623154][T14381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.630201][T14381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.657224][T14381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.177415][T14403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.199432][T14403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.260778][T14403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.300281][T14381] hsr_slave_0: entered promiscuous mode [ 475.314685][T14381] hsr_slave_1: entered promiscuous mode [ 475.333321][T14381] debugfs: 'hsr0' already exists in 'hsr' [ 475.340651][T14381] Cannot create hsr debugfs directory [ 475.430271][T14403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.445883][T14403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.512073][T14403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.909088][T14383] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 476.000824][T14383] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 476.154570][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 [ 476.192345][T14383] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 476.231484][T14383] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 476.248054][T14403] hsr_slave_0: entered promiscuous mode [ 476.265310][T14403] hsr_slave_1: entered promiscuous mode [ 476.274008][T14573] netlink: 'syz.0.2810': attribute type 1 has an invalid length. [ 476.283383][T14403] debugfs: 'hsr0' already exists in 'hsr' [ 476.294128][T14403] Cannot create hsr debugfs directory [ 476.315444][T14383] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 476.360645][T14383] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 476.535344][T14572] veth27: entered allmulticast mode [ 476.552067][T14572] bond18: (slave veth27): Enslaving as an active interface with a down link [ 476.561622][T14383] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 476.582773][T14383] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 476.601052][T14576] bond16: (slave veth0_to_bond): Releasing active interface [ 476.627296][T14576] bond18: (slave veth0_to_bond): making interface the new active one [ 476.637356][T14576] bond18: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 476.697808][T14573] bond18: (slave veth0_to_bond): Releasing active interface [ 477.105804][T14584] syzkaller0: entered promiscuous mode [ 477.120933][T14584] syzkaller0: entered allmulticast mode [ 477.315224][ C0] net_ratelimit: 1466 callbacks suppressed [ 477.315245][ C0] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 477.335501][ C0] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 477.349834][ C0] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 477.362082][ C0] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 477.378862][ C0] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 477.393376][ C0] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 477.407605][ C0] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 477.419720][ C0] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 477.437520][ C0] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 477.452249][ C0] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 478.099503][T14396] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 478.123246][T14396] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 478.133496][T14396] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 478.147395][T14396] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 478.167513][ T5287] 8021q: adding VLAN 0 to HW filter on device eth4 [ 478.220526][T14396] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 478.287838][T14396] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 478.297441][T14396] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 478.327236][T14396] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 479.080981][T14381] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 479.138350][T14381] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 479.173950][T14381] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 479.238182][T14381] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 479.274495][T14381] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 479.340198][T14381] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 479.361328][T14381] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 479.403608][T14381] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 479.974998][T14383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.079522][T14403] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 480.119659][T14403] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 480.140544][T14403] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 480.181405][T14403] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 480.223859][T14403] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 480.244859][T14403] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 480.272250][T14383] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.288919][T14403] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 480.320759][T14403] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 480.405105][ T3291] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.412361][ T3291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.477819][T14396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.492030][ T3291] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.499298][ T3291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.719009][T14396] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.741420][T14381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.831191][ T3291] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.838460][ T3291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.874626][ T3291] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.881885][ T3291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.947375][T14381] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.010186][ T3291] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.017537][ T3291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.139916][ T3364] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.147195][ T3364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.276230][T14403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.422183][T14403] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.689522][ T3279] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.696803][ T3279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.770077][T14646] netlink: 'syz.0.2812': attribute type 13 has an invalid length. [ 481.817686][T14646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2812'. [ 481.840798][ T3279] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.848085][ T3279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.921302][T14646] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 482.322725][ C0] net_ratelimit: 1566 callbacks suppressed [ 482.322751][ C0] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 482.343176][ C0] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 482.357606][ C0] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 482.369754][ C0] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 482.387290][ C0] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 482.401816][ C0] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 482.416016][ C0] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 482.428163][ C0] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 482.445567][ C0] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 482.460005][ C0] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 482.717588][T14655] bridge0: port 4(vlan6) entered disabled state [ 482.729540][T14655] bridge0: port 3(vlan4) entered disabled state [ 482.737028][T14655] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.744717][T14655] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.829592][T14655] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.843036][T14655] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 483.110242][T14655] gretap3: left promiscuous mode [ 483.190387][ T3364] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.207620][ T3364] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.227156][ T3364] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.250677][ T3364] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.412764][ T3364] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.433013][ T3364] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.455986][ T3364] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.473545][ T3364] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.612716][T14673] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2814'. [ 483.850051][T14383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.337464][ T7397] hsr_slave_0: left promiscuous mode [ 484.359059][ T7397] hsr_slave_1: left promiscuous mode [ 484.439959][ T7397] veth0_vlan: left promiscuous mode [ 485.281580][T14396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 485.330780][T14381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 485.727640][T14383] veth0_vlan: entered promiscuous mode [ 485.782139][T14403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 485.874432][T14383] veth1_vlan: entered promiscuous mode [ 486.040050][ T7397] IPVS: stop unused estimator thread 0... [ 486.072636][T14383] veth0_macvtap: entered promiscuous mode [ 486.137655][T14383] veth1_macvtap: entered promiscuous mode [ 486.214909][T14383] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 486.268303][T14383] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 486.378540][ T91] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.417297][ T91] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.471484][ T91] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.512587][ T91] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.941421][ T3364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.959629][ T3364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.999877][T14381] veth0_vlan: entered promiscuous mode [ 487.026246][T14396] veth0_vlan: entered promiscuous mode [ 487.123710][T14381] veth1_vlan: entered promiscuous mode [ 487.157162][T14396] veth1_vlan: entered promiscuous mode [ 487.174918][ T3279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.192117][ T3279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.364631][T14403] veth0_vlan: entered promiscuous mode [ 487.411384][T14403] veth1_vlan: entered promiscuous mode [ 487.439135][T14381] veth0_macvtap: entered promiscuous mode [ 487.485512][T14381] veth1_macvtap: entered promiscuous mode [ 487.507832][T14396] veth0_macvtap: entered promiscuous mode [ 487.575394][T14396] veth1_macvtap: entered promiscuous mode [ 487.616413][T14381] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 487.647978][T14381] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 487.748998][T14403] veth0_macvtap: entered promiscuous mode [ 487.765652][ T91] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.781675][T14403] veth1_macvtap: entered promiscuous mode [ 487.797566][T14396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 487.809502][ T91] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.873623][T14784] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.881449][T14784] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.996427][T14784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 488.013121][T14784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 488.230985][ T91] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.248370][ T91] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.294832][T14396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 488.321824][ T1051] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.349440][ T1051] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.418547][ T1051] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.479083][ T1051] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.491221][T14803] net_ratelimit: 26 callbacks suppressed [ 488.491254][T14803] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 488.519865][T14403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 488.568588][ T1164] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.590712][ T1164] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.635797][ T1164] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.656351][ T1164] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.687580][T14403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 488.743650][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.767612][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.801005][ T3364] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.873044][ T3364] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.907005][ T3364] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.937123][ T3364] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.990968][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.016012][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.175735][ T3364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.215640][ T3364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.317633][ T3364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.351275][ T3364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.475880][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.509229][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.713249][ T3364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.748799][ T3364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.972813][T14833] xt_CT: No such helper "syz0" [ 490.227240][T14841] syzkaller0: entered promiscuous mode [ 490.261850][T14841] syzkaller0: entered allmulticast mode [ 490.800671][T14846] syzkaller0: entered promiscuous mode [ 490.823390][T14846] syzkaller0: entered allmulticast mode [ 490.851115][T14855] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 490.977456][T14851] No such timeout policy "syz1" [ 491.014814][T14855] team0: Device xfrm0 is of different type [ 491.047945][T14860] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2826'. [ 491.284053][ T4942] block nbd0: Receive control failed (result -1) [ 491.966292][T14880] netlink: 'syz.5.2829': attribute type 1 has an invalid length. [ 492.067447][T14883] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2829'. [ 492.443281][T14885] syzkaller0: entered promiscuous mode [ 492.479431][T14885] syzkaller0: entered allmulticast mode [ 492.779824][T14907] xt_CT: You must specify a L4 protocol and not use inversions on it [ 492.828357][T14901] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2833'. [ 493.164433][T14916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 498.552457][T14924] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.560296][T14924] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.276539][T14924] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 499.394053][T14924] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 500.264318][T14948] tipc: Enabling of bearer rejected, failed to enable media [ 500.345830][T15039] netlink: 'syz.6.2843': attribute type 10 has an invalid length. [ 500.449093][ T3364] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.458688][T15041] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 500.473185][ T8385] IPVS: starting estimator thread 0... [ 500.503623][ T3364] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.534529][T15039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 500.544364][T15039] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 500.571846][T15047] IPVS: using max 30 ests per chain, 72000 per kthread [ 500.655936][T15044] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 500.713891][T15044] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 500.771645][T15044] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 500.805407][T15044] bond0 (unregistering): Released all slaves [ 500.837527][ T3364] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.063105][T15053] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.070940][T15053] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.518502][T15053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 501.579977][T15053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 501.728136][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.042124][ T3364] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.063252][ T3364] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.103347][T15091] tipc: Started in network mode [ 502.113367][T15091] tipc: Node identity 5e9fe3f939f3, cluster identity 4711 [ 502.133075][T15091] tipc: Enabled bearer , priority 0 [ 502.140943][T15093] syzkaller0: entered promiscuous mode [ 502.147460][T15093] syzkaller0: entered allmulticast mode [ 502.157817][T15096] syzkaller0: entered promiscuous mode [ 502.164831][T15096] syzkaller0: entered allmulticast mode [ 502.213770][T15099] tipc: Resetting bearer [ 502.240097][ T3364] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.250019][ T3364] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.259508][ T3364] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.273651][T15082] tipc: Resetting bearer [ 502.304532][T15082] tipc: Disabling bearer [ 502.326508][T15118] team0: Device vxcan1 is of different type [ 502.514042][T15060] dummy0 speed is unknown, defaulting to 1000 [ 502.710520][T15131] syzkaller0: entered promiscuous mode [ 502.729734][T15131] syzkaller0: entered allmulticast mode [ 502.960697][T15137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.980684][T15137] 8021q: adding VLAN 0 to HW filter on device team0 [ 503.027079][T15137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.075067][T15137] bridge_slave_0: left allmulticast mode [ 503.081075][T15137] bridge_slave_0: left promiscuous mode [ 503.097632][T15137] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.116594][T15137] bridge_slave_1: left allmulticast mode [ 503.122667][T15137] bridge_slave_1: left promiscuous mode [ 503.128762][T15137] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.149095][T15137] bond0: (slave bond_slave_0): Releasing backup interface [ 503.187930][T15137] bond0: (slave bond_slave_1): Releasing backup interface [ 503.223490][T15137] team0: Port device team_slave_0 removed [ 503.253471][T15137] team0: Port device team_slave_1 removed [ 503.269664][T15137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.292527][T15137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 503.317118][T15137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 503.337194][T15137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.345494][T15137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 503.356752][T15137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 503.371323][T15137] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 503.394000][T15149] syzkaller0: entered promiscuous mode [ 503.405687][T15149] syzkaller0: entered allmulticast mode [ 507.440620][T15165] syzkaller0: entered promiscuous mode [ 507.449569][T15165] syzkaller0: entered allmulticast mode [ 507.459539][T15173] syzkaller0: entered promiscuous mode [ 507.468390][T15173] syzkaller0: entered allmulticast mode [ 510.700312][T15222] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2867'. [ 511.055825][T15241] syzkaller0: entered promiscuous mode [ 511.090771][T15241] syzkaller0: entered allmulticast mode [ 511.569838][ T30] audit: type=1804 audit(1784209527.261:2): pid=15258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.2874" name="/newroot/6/cgroup.controllers" dev="tmpfs" ino=50 res=1 errno=0 [ 511.660588][ T30] audit: type=1800 audit(1784209527.271:3): pid=15258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2874" name="cgroup.controllers" dev="tmpfs" ino=50 res=0 errno=0 [ 511.766992][T15266] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2876'. [ 511.897700][T15266] 8021q: adding VLAN 0 to HW filter on device bond1 [ 512.349551][T15285] syzkaller0: entered promiscuous mode [ 512.355380][T15285] syzkaller0: entered allmulticast mode [ 512.645834][T15288] netlink: 'syz.0.2881': attribute type 17 has an invalid length. [ 512.822754][T15293] syzkaller0: entered promiscuous mode [ 512.828564][T15293] syzkaller0: entered allmulticast mode [ 513.668187][T15230] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 514.024217][T15304] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2888'. [ 514.037183][T15307] netlink: 'syz.8.2889': attribute type 1 has an invalid length. [ 514.089613][T15307] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2889'. [ 514.170516][ T4942] block nbd1: Wrong magic (0x3e000000) [ 514.497415][T15323] netlink: 'syz.6.2893': attribute type 4 has an invalid length. [ 514.748508][T15327] tipc: Started in network mode [ 514.756050][T15327] tipc: Node identity e2c0eb05e46b, cluster identity 4711 [ 514.767164][T15327] tipc: Enabled bearer , priority 0 [ 514.778343][T15331] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004 [ 514.790108][T15327] syzkaller0: entered promiscuous mode [ 514.797698][T15327] syzkaller0: entered allmulticast mode [ 514.854430][T15331] bond1: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 514.869479][T15331] bond1 (unregistering): Released all slaves [ 514.876512][T15333] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2896'. [ 514.990956][T15334] tipc: Resetting bearer [ 515.020341][T15328] netlink: 164 bytes leftover after parsing attributes in process `syz.7.2894'. [ 515.049318][T15328] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2894'. [ 515.969215][T15326] tipc: Resetting bearer [ 516.031317][T15326] tipc: Disabling bearer [ 516.074296][ T8382] tipc: Node number set to 111930117 [ 516.200226][T15340] syzkaller0: entered promiscuous mode [ 516.220862][T15340] syzkaller0: entered allmulticast mode [ 516.237465][T15343] netlink: 'syz.8.2899': attribute type 4 has an invalid length. [ 516.448845][T15343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.458400][T15343] 8021q: adding VLAN 0 to HW filter on device team0 [ 516.475249][T15351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 516.488996][T15343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 516.545703][T15343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 516.556939][T15343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 516.573102][T15353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 516.586093][T15343] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 516.597237][T15343] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 516.619956][T15343] veth1_vlan: left promiscuous mode [ 516.627056][T15351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 516.641481][T15343] veth0_vlan: left promiscuous mode [ 516.649407][T15343] veth0_vlan: entered promiscuous mode [ 516.658414][T15343] veth1_vlan: entered promiscuous mode [ 516.673305][T15343] veth1_macvtap: left promiscuous mode [ 516.680219][T15343] veth0_macvtap: left promiscuous mode [ 516.687861][T15343] veth0_macvtap: entered promiscuous mode [ 516.695276][T15343] veth1_macvtap: entered promiscuous mode [ 516.709021][T15343] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 516.719395][T15343] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 516.730246][T15343] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 516.739236][T15343] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 516.767650][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.774933][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.785884][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.793144][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.849571][ T91] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.886918][ T91] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.925307][ T91] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.946508][ T91] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.282355][T15355] 8021q: adding VLAN 0 to HW filter on device team0 [ 517.385456][T15355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 517.607745][T15355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 517.649358][T15355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 517.692335][T15355] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 517.724927][ T8363] IPVS: starting estimator thread 0... [ 517.745978][T15355] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 517.767602][T15378] netlink: 164 bytes leftover after parsing attributes in process `syz.7.2907'. [ 517.810701][T15378] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2907'. [ 517.853025][T15382] IPVS: using max 24 ests per chain, 57600 per kthread [ 517.880240][T15355] veth1_vlan: left promiscuous mode [ 517.926039][T15355] veth0_vlan: left promiscuous mode [ 517.964972][T15355] veth0_vlan: entered promiscuous mode [ 518.010586][T15355] veth1_vlan: entered promiscuous mode [ 518.122540][T15355] veth1_macvtap: left promiscuous mode [ 518.199508][T15355] veth0_macvtap: left promiscuous mode [ 518.233649][T15355] veth0_macvtap: entered promiscuous mode [ 518.249505][T15355] veth1_macvtap: entered promiscuous mode [ 518.311860][T15355] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 518.346468][T15355] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 518.376246][T15355] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 518.423815][T15355] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 518.486482][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.493743][ T3323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 518.564354][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.571728][ T3323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 518.783151][ T1172] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.795566][ T1172] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.811303][ T1172] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.830777][T15398] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 518.887181][ T1172] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.135290][T15410] syzkaller0: entered promiscuous mode [ 519.140851][T15410] syzkaller0: entered allmulticast mode [ 520.081455][T15444] netlink: 5000 bytes leftover after parsing attributes in process `syz.0.2915'. [ 523.075216][T15424] syzkaller0: entered promiscuous mode [ 523.080761][T15424] syzkaller0: entered allmulticast mode [ 523.285329][ T30] audit: type=1804 audit(1784209538.981:4): pid=15448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.2917" name="/newroot/23/cgroup.controllers" dev="tmpfs" ino=135 res=1 errno=0 [ 523.330435][ T30] audit: type=1800 audit(1784209538.981:5): pid=15448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2917" name="cgroup.controllers" dev="tmpfs" ino=135 res=0 errno=0 [ 526.923882][T15482] syzkaller0: entered promiscuous mode [ 526.932088][T15482] syzkaller0: entered allmulticast mode [ 527.436907][T15506] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2928'. [ 527.514949][T15507] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2928'. [ 528.032281][T15511] nbd: nbd0 already in use [ 528.042965][T15511] block nbd0: NBD_DISCONNECT [ 528.070531][T15511] block nbd0: Send disconnect failed -104 [ 528.101585][T15511] block nbd0: shutting down sockets [ 528.179334][T15516] netlink: 'syz.6.2932': attribute type 2 has an invalid length. [ 528.270832][T15517] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2931'. [ 528.715000][T15526] syzkaller0: entered promiscuous mode [ 528.725543][T15526] syzkaller0: entered allmulticast mode [ 528.760027][T15526] tc action pedit offset must be on 32 bit boundaries [ 528.768581][T15526] tc action pedit offset must be on 32 bit boundaries [ 528.775496][T15526] tc action pedit offset must be on 32 bit boundaries [ 528.782386][T15526] tc action pedit offset must be on 32 bit boundaries [ 528.789270][T15526] tc action pedit offset must be on 32 bit boundaries [ 528.796140][T15526] tc action pedit offset must be on 32 bit boundaries [ 528.802994][T15526] tc action pedit offset must be on 32 bit boundaries [ 528.807511][T15528] syzkaller0: entered promiscuous mode [ 528.809910][T15526] tc action pedit offset must be on 32 bit boundaries [ 528.822211][T15526] tc action pedit offset must be on 32 bit boundaries [ 528.829064][T15526] tc action pedit offset must be on 32 bit boundaries [ 528.835977][T15526] 0: reclassify loop, rule prio 0, protocol 800 [ 528.848657][T15528] syzkaller0: entered allmulticast mode [ 529.100205][T15523] bridge_slave_0: left allmulticast mode [ 529.110864][T15523] bridge_slave_0: left promiscuous mode [ 529.125339][T15523] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.149263][T15523] bridge_slave_1: left allmulticast mode [ 529.159225][T15523] bridge_slave_1: left promiscuous mode [ 529.200579][T15523] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.263554][T15523] bond0: (slave bond_slave_0): Releasing backup interface [ 529.339240][T15523] bond0: (slave bond_slave_1): Releasing backup interface [ 529.397032][T15523] team0: Port device team_slave_0 removed [ 529.479892][T15541] netlink: 164 bytes leftover after parsing attributes in process `syz.6.2938'. [ 529.496087][T15523] team0: Port device team_slave_1 removed [ 529.505033][T15541] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2938'. [ 529.528679][T15523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 529.537722][T15523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 529.550096][T15523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 529.559315][T15523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 529.573907][T15523] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 530.218563][T15556] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.2942'. [ 530.255632][T15556] openvswitch: netlink: Message has 512 unknown bytes. [ 530.679272][T15573] netlink: 9 bytes leftover after parsing attributes in process `syz.8.2947'. [ 530.710194][T15573] 0·: renamed from hsr0 (while UP) [ 530.763187][T15573] 0·: entered allmulticast mode [ 530.779778][T15573] hsr_slave_0: entered allmulticast mode [ 530.806185][T15573] hsr_slave_1: entered allmulticast mode [ 530.824485][T15578] netlink: 'syz.0.2948': attribute type 40 has an invalid length. [ 530.828358][T15573] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 531.511066][T15600] syzkaller0: entered promiscuous mode [ 531.531922][T15600] syzkaller0: entered allmulticast mode [ 531.661324][T15589] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2950'. [ 531.694887][T15589] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2950'. [ 532.002703][T15611] netlink: 'syz.7.2954': attribute type 1 has an invalid length. [ 532.022494][T15612] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2955'. [ 532.275964][T15616] veth3: entered allmulticast mode [ 532.310502][T15616] bond2: (slave veth3): Enslaving as an active interface with a down link [ 532.383266][T15619] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 532.501173][T15616] macvlan2: entered promiscuous mode [ 532.507451][T15616] macvlan2: entered allmulticast mode [ 532.517790][T15616] bond2: entered promiscuous mode [ 532.526341][T15616] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 532.541841][T15616] bond2: left promiscuous mode [ 532.888228][T15636] can: request_module (can-proto-0) failed. [ 532.904003][T15640] batman_adv: batadv0: Adding interface: dummy0 [ 532.931929][T15640] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 532.975506][T15640] batman_adv: batadv0: Interface activated: dummy0 [ 533.133206][T15636] batadv0: mtu less than device minimum [ 533.170529][T15636] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 533.184480][T15636] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 533.196437][T15636] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 533.208356][T15636] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 533.220301][T15636] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 533.618129][T15663] syzkaller0: entered promiscuous mode [ 533.624283][T15663] syzkaller0: entered allmulticast mode [ 534.056531][T15670] __nla_validate_parse: 4 callbacks suppressed [ 534.056568][T15670] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2972'. [ 534.590944][T15679] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2975'. [ 534.622285][T15679] netlink: 'syz.6.2975': attribute type 2 has an invalid length. [ 534.650675][T15679] netlink: 103 bytes leftover after parsing attributes in process `syz.6.2975'. [ 535.492176][T15697] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.499900][T15697] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.733020][T15697] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 535.790492][T15697] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 535.947852][T15709] net_ratelimit: 14 callbacks suppressed [ 535.947873][T15709] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 536.208062][ T1164] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.238352][ T1164] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.272267][ T1164] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.301848][ T1164] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.361058][T15719] syzkaller0: entered promiscuous mode [ 536.390207][T15719] syzkaller0: entered allmulticast mode [ 536.429858][T15706] syzkaller0: entered promiscuous mode [ 536.443428][T15723] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2983'. [ 536.456126][T15706] syzkaller0: entered allmulticast mode [ 537.083945][T15746] IPv6: addrconf: prefix option has invalid lifetime [ 537.306261][T15754] netlink: 'syz.7.2993': attribute type 13 has an invalid length. [ 537.500143][T15757] syzkaller0: entered promiscuous mode [ 537.515590][T15757] syzkaller0: entered allmulticast mode [ 537.524667][T15754] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 537.546605][T15754] syzkaller0: entered promiscuous mode [ 537.552406][T15754] syzkaller0: entered allmulticast mode [ 537.560782][T15757] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 537.608091][T15750] syzkaller1: entered promiscuous mode [ 537.614095][T15750] syzkaller1: entered allmulticast mode [ 537.887843][T15769] netlink: 'syz.5.2997': attribute type 13 has an invalid length. [ 537.897984][T15769] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 538.198259][T15771] bridge0: entered promiscuous mode [ 538.237480][T15771] No such timeout policy "syz1" [ 538.256929][T15771] netlink: zone id is out of range [ 538.262615][T15771] netlink: zone id is out of range [ 538.267995][T15771] netlink: zone id is out of range [ 538.274291][T15771] netlink: zone id is out of range [ 538.279588][T15771] netlink: zone id is out of range [ 538.289495][T15771] netlink: zone id is out of range [ 538.295183][T15771] netlink: zone id is out of range [ 538.300632][T15771] netlink: zone id is out of range [ 538.863161][T15780] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3000'. [ 538.980054][T15783] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3001'. [ 538.993660][T15783] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3001'. [ 539.005218][T15783] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3001'. [ 539.022212][T15783] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3001'. [ 539.034914][T15783] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3001'. [ 539.106211][T15783] __nla_validate_parse: 6 callbacks suppressed [ 539.106229][T15783] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3001'. [ 539.128481][T15783] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3001'. [ 539.153826][T15783] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3001'. [ 539.163233][T15783] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3001'. [ 539.183839][T15783] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3001'. [ 539.213891][T15783] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3001'. [ 539.260941][T15783] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3001'. [ 539.282281][T15783] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3001'. [ 539.302228][T15783] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3001'. [ 539.317733][T15783] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3001'. [ 539.496771][T15725] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 540.014713][ T8368] hid-generic 0005:07C0:8000.0001: item fetching failed at offset 0/1 [ 540.035811][ T8368] hid-generic 0005:07C0:8000.0001: probe with driver hid-generic failed with error -22 [ 540.061447][T15806] syz_tun: entered allmulticast mode [ 540.091841][T15805] netlink: 'syz.5.3010': attribute type 1 has an invalid length. [ 540.182644][T15807] batman_adv: batadv0: Interface deactivated: dummy0 [ 540.275359][T15807] veth27: left allmulticast mode [ 541.368811][T15849] syzkaller0: entered promiscuous mode [ 541.375090][T15854] xt_hashlimit: size too large, truncated to 1048576 [ 541.398762][T15849] syzkaller0: entered allmulticast mode [ 541.503352][T15615] udevd[15615]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 541.535803][T15843] udevd[15843]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 542.341797][T15870] x_tables: duplicate underflow at hook 2 [ 542.425823][T15870] xt_NFQUEUE: number of total queues is 0 [ 542.482520][T15874] syzkaller1: entered promiscuous mode [ 542.500790][T15874] syzkaller1: entered allmulticast mode [ 542.521199][T15874] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 542.604219][T15874] xt_CONNSECMARK: invalid mode: 254 [ 542.829674][T15889] dummy0 speed is unknown, defaulting to 1000 [ 542.949933][T15898] netlink: 'syz.7.3036': attribute type 13 has an invalid length. [ 543.014161][T15899] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 543.336184][T15901] tipc: Started in network mode [ 543.345739][T15901] tipc: Node identity d29f4ad4714d, cluster identity 4711 [ 543.361476][T15901] tipc: Enabled bearer , priority 0 [ 543.379035][T15901] syzkaller0: entered promiscuous mode [ 543.393475][T15901] syzkaller0: entered allmulticast mode [ 543.418909][T15901] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 543.533755][T15901] tipc: Resetting bearer [ 543.589240][T15900] tipc: Resetting bearer [ 543.685270][T15900] tipc: Disabling bearer [ 543.827344][T15904] bridge0: entered allmulticast mode [ 543.916772][T15912] netlink: 'syz.0.3040': attribute type 1 has an invalid length. [ 543.959954][T15914] netlink: 'syz.7.3041': attribute type 13 has an invalid length. [ 543.980483][T15914] netlink: 'syz.7.3041': attribute type 17 has an invalid length. [ 544.005767][T15915] netlink: 'syz.0.3040': attribute type 5 has an invalid length. [ 544.324119][T15912] bond19: entered promiscuous mode [ 544.344758][T15912] 8021q: adding VLAN 0 to HW filter on device bond19 [ 544.412292][T15930] netlink: 'syz.5.3043': attribute type 1 has an invalid length. [ 544.432286][T15930] netlink: 'syz.5.3043': attribute type 2 has an invalid length. [ 544.704805][T15914] 8021q: adding VLAN 0 to HW filter on device bond2 [ 544.725941][T15914] veth3: left allmulticast mode [ 544.766736][T15915] macvtap1: entered allmulticast mode [ 544.809306][T15922] macvtap2: entered allmulticast mode [ 544.874588][T15925] bond19: (slave bridge5): making interface the new active one [ 544.884362][T15925] bridge5: entered promiscuous mode [ 544.897037][T15925] bond19: (slave bridge5): Enslaving as an active interface with an up link [ 545.144108][T15938] fb: renamed from bridge0 (while UP) [ 545.276041][ T3291] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 545.340426][ T91] bond2: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 545.381354][ T91] bond2: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 545.394768][T15942] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 545.421373][ T91] bond2: (slave veth3): making interface the new active one [ 545.437673][T15955] __nla_validate_parse: 128 callbacks suppressed [ 545.437695][T15955] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3050'. [ 545.461851][ T91] bond2: active interface up! [ 545.470082][T15955] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3050'. [ 546.192661][T15975] eql: remember to turn off Van-Jacobson compression on your slave devices [ 546.223227][T15975] net_ratelimit: 16 callbacks suppressed [ 546.223257][T15975] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 546.857695][T15991] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3057'. [ 549.729020][T15991] vlan2: entered promiscuous mode [ 549.734247][T15991] veth0: entered promiscuous mode [ 550.077399][T16003] tipc: Enabled bearer , priority 0 [ 550.100507][T16003] syzkaller0: entered promiscuous mode [ 550.136506][T16003] syzkaller0: entered allmulticast mode [ 550.185525][T16003] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 550.293083][T16003] tipc: Resetting bearer [ 550.326940][T16001] tipc: Resetting bearer [ 550.396686][T16001] tipc: Disabling bearer [ 550.576816][T16024] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3064'. [ 550.635452][T16026] netdevsim netdevsim0 €Â: renamed from netdevsim0 [ 550.673336][T16030] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3071'. [ 550.702130][T16030] vlan2: entered promiscuous mode [ 550.709889][T16030] batadv0: entered promiscuous mode [ 551.043741][T16034] syzkaller0: entered promiscuous mode [ 551.064589][T16037] netlink: 'syz.7.3074': attribute type 1 has an invalid length. [ 551.075296][T16034] syzkaller0: entered allmulticast mode [ 551.092022][T16037] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 551.450581][T16052] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3077'. [ 551.465590][T16050] syzkaller0: entered promiscuous mode [ 551.474723][T16049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 551.491833][T16050] syzkaller0: entered allmulticast mode [ 551.526651][T16050] tipc: Enabled bearer , priority 0 [ 551.585281][T16050] tipc: Resetting bearer [ 551.677924][T16053] macsec1: entered promiscuous mode [ 551.799352][T16048] tipc: Resetting bearer [ 551.872672][T16048] tipc: Disabling bearer [ 551.994371][T16057] syzkaller0: entered promiscuous mode [ 552.000156][T16057] syzkaller0: entered allmulticast mode [ 552.088602][T16069] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3082'. [ 552.644037][T16075] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3083'. [ 552.743651][T16076] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3083'. [ 556.157282][T16082] bond19: left promiscuous mode [ 556.162865][T16082] bridge5: left promiscuous mode [ 556.180848][T16082] macvtap1: left allmulticast mode [ 556.197144][T16082] macvtap2: left allmulticast mode [ 556.337078][T16099] tipc: Failed to remove unknown binding: 66,0,0/0:2454185858/2454185860 [ 556.348477][T16099] tipc: Failed to remove unknown binding: 66,0,0/0:2454185858/2454185859 [ 556.360163][T16099] tipc: Failed to remove unknown binding: 66,0,0/0:2454185858/2454185860 [ 556.379246][T16099] tipc: Failed to remove unknown binding: 66,0,0/0:2454185858/2454185859 [ 556.552645][T16106] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3092'. [ 556.607911][T16106] siw: device registration error -23 [ 556.725104][T16116] syzkaller0: entered promiscuous mode [ 556.745953][T16116] syzkaller0: entered allmulticast mode [ 556.768569][T16106] smbdirect: ib_dev[syz2] removed [ 556.822947][T16116] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3094'. [ 557.138943][T16125] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3097'. [ 557.289292][T16132] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3099'. [ 557.410733][T16134] bond0: Removing last arp target with arp_interval on [ 559.588679][T16108] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 559.852390][T16146] macvlan2: entered allmulticast mode [ 559.871170][T16146] batadv0: entered allmulticast mode [ 559.890565][T16146] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 559.931475][T16146] team0: Port device macvlan2 added [ 560.052972][T16150] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3103'. [ 560.430541][T16175] netlink: 204 bytes leftover after parsing attributes in process `syz.8.3108'. [ 560.448696][T16176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3106'. [ 560.620595][T16178] netlink: 7 bytes leftover after parsing attributes in process `syz.8.3109'. [ 560.671207][T16178] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3109'. [ 560.716526][T16178] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 560.755642][T16178] netdevsim netdevsim8 netdevsim0: left promiscuous mode [ 561.520548][T16194] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3114'. [ 561.547906][T16194] lo speed is unknown, defaulting to 1000 [ 561.574452][T16194] lo speed is unknown, defaulting to 1000 [ 561.582582][T16197] syzkaller0: entered promiscuous mode [ 561.594699][T16197] syzkaller0: entered allmulticast mode [ 561.611322][T16194] lo speed is unknown, defaulting to 1000 [ 561.652880][T16194] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 561.712616][T16194] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 561.775401][T16194] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 561.830108][T16194] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 561.910642][T16194] lo speed is unknown, defaulting to 1000 [ 561.957860][T16206] syzkaller0: entered promiscuous mode [ 561.964402][T16206] syzkaller0: entered allmulticast mode [ 561.982728][T16194] lo speed is unknown, defaulting to 1000 [ 562.041358][T16208] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3117'. [ 562.078206][T16194] lo speed is unknown, defaulting to 1000 [ 562.105588][T16194] lo speed is unknown, defaulting to 1000 [ 562.119990][T16208] pim6reg1: entered promiscuous mode [ 562.142126][T16208] pim6reg1: entered allmulticast mode [ 562.156400][T16194] lo speed is unknown, defaulting to 1000 [ 562.225891][T16210] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3117'. [ 562.250612][T16194] lo speed is unknown, defaulting to 1000 [ 562.259811][T16194] lo speed is unknown, defaulting to 1000 [ 562.270852][T16194] lo speed is unknown, defaulting to 1000 [ 562.330455][T16214] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3120'. [ 562.901111][T16226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 562.924392][T16226] 8021q: adding VLAN 0 to HW filter on device team0 [ 562.948461][T16226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 563.085873][T16226] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 563.098103][T16226] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 563.124848][ T8385] IPVS: starting estimator thread 0... [ 563.135138][T16226] veth1_vlan: left promiscuous mode [ 563.150504][T16226] veth0_vlan: left promiscuous mode [ 563.159163][T16226] veth0_vlan: entered promiscuous mode [ 563.196385][T16226] veth1_vlan: entered promiscuous mode [ 563.223286][T16234] IPVS: using max 25 ests per chain, 60000 per kthread [ 563.307311][T16226] veth1_macvtap: left promiscuous mode [ 563.341319][T16226] veth0_macvtap: left promiscuous mode [ 563.364995][T16226] veth0_macvtap: entered promiscuous mode [ 563.396610][T16226] veth1_macvtap: entered promiscuous mode [ 563.471435][T16226] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 563.510027][T16226] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 563.531986][T16226] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 563.556254][T16226] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 564.229291][T16239] macvlan0: mtu less than device minimum [ 564.265270][ T91] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.281141][ T91] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.389851][T16247] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3129'. [ 564.506551][T16248] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3129'. [ 564.605006][ T3279] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 564.617933][ T3279] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 58149 - 0 [ 564.628396][ T3279] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 564.643788][ T3279] netdevsim netdevsim4 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 564.780483][T16264] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3132'. [ 564.806828][T16264] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3132'. [ 564.907084][ T91] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.963392][T16256] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3132'. [ 565.254213][T16268] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3131'. [ 565.297340][ T91] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.488341][T16287] x_tables: ip6_tables: eui64 match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 568.978219][ T3279] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 568.988114][ T3279] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 58149 - 0 [ 568.998614][ T3279] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 569.009891][ T3279] netdevsim netdevsim4 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 569.059144][T16282] syzkaller0: entered promiscuous mode [ 569.064899][T16282] syzkaller0: entered allmulticast mode [ 569.128952][T16291] tipc: Enabled bearer , priority 0 [ 569.149701][T16290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 569.168656][T16290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 569.251073][T16280] tipc: Resetting bearer [ 569.357860][T16280] tipc: Disabling bearer [ 569.466551][T16300] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 569.544258][T16301] team0: Port device bridge_slave_0 added [ 569.583662][T16311] tc_dump_action: action bad kind [ 569.793123][ T3279] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 569.847535][ T3279] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 58149 - 0 [ 569.871861][ T3279] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 569.888656][T16329] netlink: 14 bytes leftover after parsing attributes in process `syz.7.3143'. [ 569.898841][ T3279] netdevsim netdevsim4 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 569.977449][T16319] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 570.362272][ T50] Bluetooth: hci6: command 0x0406 tx timeout [ 570.379551][ T50] Bluetooth: hci5: command 0x0406 tx timeout [ 570.436230][ T3279] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 570.446607][ T3279] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 58149 - 0 [ 570.459484][ T3279] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 570.471398][ T3279] netdevsim netdevsim4 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 570.520597][T16341] netlink: 'syz.6.3147': attribute type 1 has an invalid length. [ 570.693627][T16348] netlink: 'syz.7.3148': attribute type 1 has an invalid length. [ 570.792231][T16341] 8021q: adding VLAN 0 to HW filter on device bond1 [ 570.804882][T16352] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3150'. [ 570.866898][T16338] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 570.987517][T16354] batadv0: entered promiscuous mode [ 570.993522][T16354] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 571.023160][T16353] bond3: (slave gretap1): making interface the new active one [ 571.033298][T16353] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 571.117565][T16343] macvlan2: entered promiscuous mode [ 571.130053][T16343] macvlan2: entered allmulticast mode [ 571.141633][T16343] bond3: entered promiscuous mode [ 571.151994][T16343] gretap1: entered promiscuous mode [ 571.169100][T16343] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 571.180911][T16343] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 571.204110][T16343] bond3: left promiscuous mode [ 571.209099][T16343] gretap1: left promiscuous mode [ 571.490960][T16363] bond20 (unregistering): Released all slaves [ 572.411125][T16382] syzkaller0: entered promiscuous mode [ 572.421302][T16382] syzkaller0: entered allmulticast mode [ 573.209498][T16389] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3156'. [ 576.481452][T16401] batadv0: left promiscuous mode [ 576.525812][T16401] batadv0: left allmulticast mode [ 576.531199][T16401] macvlan2: left allmulticast mode [ 576.599579][T16414] bond0: entered promiscuous mode [ 576.646526][T16414] bond0: left promiscuous mode [ 576.723281][T16417] bond0: entered promiscuous mode [ 576.744903][T16417] bond0: left promiscuous mode [ 577.649586][T16419] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 577.685957][T16419] syzkaller0: entered promiscuous mode [ 577.691743][T16419] syzkaller0: entered allmulticast mode [ 577.768397][ T5287] 8021q: adding VLAN 0 to HW filter on device eth5 [ 577.820807][ T3279] bridge_slave_1: left allmulticast mode [ 577.842502][ T3279] bridge_slave_1: left promiscuous mode [ 577.860555][ T3279] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.926720][ T3279] bridge_slave_0: left allmulticast mode [ 577.946999][ T3279] bridge_slave_0: left promiscuous mode [ 577.980173][ T3279] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.049392][T16459] netlink: 'syz.6.3164': attribute type 13 has an invalid length. [ 578.086999][T16459] netlink: 'syz.6.3164': attribute type 17 has an invalid length. [ 578.118779][T16462] netlink: 'syz.8.3166': attribute type 13 has an invalid length. [ 578.144728][T16462] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3166'. [ 578.827255][T16481] netlink: 'syz.5.3167': attribute type 1 has an invalid length. [ 579.026510][ T3279] ip6gretap0 (unregistering): left promiscuous mode [ 579.040008][ T3279] bond3 (unregistering): (slave ip6gre1): Releasing backup interface [ 579.135865][ T3279] bond4 (unregistering): (slave ip6erspan0): Releasing active interface [ 579.327632][ T3279] erspan0 (unregistering): left promiscuous mode [ 579.406748][ T3279] bond5 (unregistering): (slave gretap1): Releasing active interface [ 579.442516][ T3279] bond11 (unregistering): (slave gretap2): Releasing backup interface [ 579.618144][ T3279] bond2 (unregistering): (slave geneve2): Releasing active interface [ 579.771154][ T3279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 579.782183][ T3279] bond0 (unregistering): Released all slaves [ 579.795577][ T3279] bond1 (unregistering): (slave veth3): Removing an active aggregator [ 579.814128][ T3279] bond1 (unregistering): (slave veth3): Releasing backup interface [ 579.824744][ T3279] bond1 (unregistering): Released all slaves [ 579.840800][ T3279] bond2 (unregistering): Released all slaves [ 579.858289][ T3279] bond3 (unregistering): Released all slaves [ 579.877148][ T3279] bond4 (unregistering): Released all slaves [ 579.894802][ T3279] bond5 (unregistering): Released all slaves [ 579.911371][ T3279] bond7 (unregistering): Released all slaves [ 579.935948][ T3279] bond6 (unregistering): Released all slaves [ 579.956569][ T3279] bond8 (unregistering): (slave ): Releasing active interface [ 579.976035][ T3279] bond8 (unregistering): Released all slaves [ 579.992454][ T3279] bond9 (unregistering): Released all slaves [ 580.009799][ T3279] bond10 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 580.020834][ T3279] bond10 (unregistering): Released all slaves [ 580.050413][ T3279] bond11 (unregistering): (slave bond12): Releasing backup interface [ 580.059562][ T3279] bond11 (unregistering): Released all slaves [ 580.077295][ T3279] bond12 (unregistering): Released all slaves [ 580.094893][ T3279] bond13 (unregistering): (slave veth25): Releasing active interface [ 580.106004][ T3279] batadv1: entered promiscuous mode [ 580.118473][ T3279] bond13 (unregistering): (slave batadv1): Releasing active interface [ 580.128714][ T3279] bond13 (unregistering): Released all slaves [ 580.145662][ T3279] bond14 (unregistering): Released all slaves [ 580.347504][T16459] 8021q: adding VLAN 0 to HW filter on device team0 [ 580.588948][T16459] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 580.600622][T16459] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 580.614663][ T4942] Bluetooth: hci7: command 0x0406 tx timeout [ 580.654188][T16459] veth1_vlan: left promiscuous mode [ 580.665235][T16459] veth0_vlan: left promiscuous mode [ 580.679619][T16459] veth0_vlan: entered promiscuous mode [ 580.699831][T16459] veth1_vlan: entered promiscuous mode [ 580.731352][T16459] veth1_macvtap: left promiscuous mode [ 580.739909][T16459] veth0_macvtap: left promiscuous mode [ 580.748371][T16459] veth0_macvtap: entered promiscuous mode [ 580.766339][T16459] veth1_macvtap: entered promiscuous mode [ 580.780956][T16459] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 580.796337][T16459] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 580.811102][T16459] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 580.827099][T16459] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 580.848187][T16459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 580.889307][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.896632][ T3323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 580.942707][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.950030][ T3323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 581.161360][T16481] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 581.482723][T16483] team0: Port device bridge_slave_0 removed [ 581.542447][T16511] netlink: 'syz.6.3171': attribute type 3 has an invalid length. [ 581.593682][T16483] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 581.654880][ T91] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.695247][ T91] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.697083][ T3279] tipc: Left network mode [ 581.827266][T16515] netlink: 19 bytes leftover after parsing attributes in process `syz.5.3173'. [ 581.926447][T16515] netlink: 19 bytes leftover after parsing attributes in process `syz.5.3173'. [ 581.966662][ T3323] bond1: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 582.077492][ T3323] bond1: (slave veth0_to_bond): making interface the new active one [ 582.140378][ T3323] bond1: active interface up! [ 582.197965][T16522] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3174'. [ 582.311120][T16529] netlink: 'syz.6.3175': attribute type 1 has an invalid length. [ 582.663272][ T91] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.932226][T16522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 585.940077][T16522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 585.948489][T16522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 585.958598][T16522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 586.009251][T16529] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 586.087856][T16536] vlan2: entered allmulticast mode [ 586.105238][T16536] veth0_to_bond: entered allmulticast mode [ 586.127763][T16540] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 586.148700][ T91] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.223446][T16571] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3177'. [ 586.290666][ T5287] 8021q: adding VLAN 0 to HW filter on device eth6 [ 586.366845][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 586.628858][T16578] tipc: Enabled bearer , priority 0 [ 586.732001][T16586] syzkaller0: entered promiscuous mode [ 586.774026][T16586] syzkaller0: entered allmulticast mode [ 586.921057][T16602] tipc: Resetting bearer [ 586.942776][T16602] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.041520][T16576] tipc: Resetting bearer [ 587.220375][T16576] tipc: Disabling bearer [ 587.958753][T16635] tipc: Enabled bearer , priority 0 [ 588.261583][T16638] syzkaller0: entered promiscuous mode [ 588.281465][T16638] syzkaller0: entered allmulticast mode [ 588.317851][T16638] tipc: Resetting bearer [ 589.064771][ T3279] hsr_slave_0: left promiscuous mode [ 589.091247][ T3279] hsr_slave_1: left promiscuous mode [ 589.091268][ T7397] wlan1: Trigger new scan to find an IBSS to join [ 589.178713][ T3279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 589.198113][ T3279] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 589.232649][ T3279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 589.251104][ T3279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 589.285550][ T3279] veth1_vlan: left promiscuous mode [ 589.297488][ T3279] veth0_vlan: left promiscuous mode [ 590.042311][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 590.152913][ T3279] team0 (unregistering): Port device team_slave_1 removed [ 590.184063][ T3279] team0 (unregistering): Port device team_slave_0 removed [ 590.448591][T16646] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3188'. [ 590.477211][T16662] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 590.522466][ T5287] 8021q: adding VLAN 0 to HW filter on device eth7 [ 590.563227][T16628] tipc: Resetting bearer [ 592.122922][ T1164] wlan1: Trigger new scan to find an IBSS to join [ 594.021394][T16628] tipc: Disabling bearer [ 594.553205][T16711] xt_hashlimit: size too large, truncated to 1048576 [ 594.575560][T16706] bridge8: entered promiscuous mode [ 594.623145][T16706] bridge8: entered allmulticast mode [ 594.693478][T16719] netlink: zone id is out of range [ 594.711598][T16719] netlink: zone id is out of range [ 594.747534][T16719] netlink: zone id is out of range [ 594.762272][T16719] netlink: zone id is out of range [ 594.811027][T16719] netlink: zone id is out of range [ 594.845210][T16715] xt_hashlimit: size too large, truncated to 1048576 [ 594.858160][ T3279] IPVS: stop unused estimator thread 0... [ 594.889798][T16715] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 594.985609][T16719] netlink: zone id is out of range [ 595.019974][T16719] netlink: zone id is out of range [ 595.040921][T16719] netlink: zone id is out of range [ 595.068990][T16719] netlink: zone id is out of range [ 595.082968][ T34] wlan1: Trigger new scan to find an IBSS to join [ 595.100037][T16719] netlink: zone id is out of range [ 595.227746][T16659] lo speed is unknown, defaulting to 1000 [ 595.252315][T16725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 595.366387][T16725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 595.641204][T16736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 595.901358][T16744] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3200'. [ 596.025469][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.381123][ T5287] 8021q: adding VLAN 0 to HW filter on device eth8 [ 596.556246][T16749] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3202'. [ 597.478542][T16753] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.486030][T16753] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.836780][T16781] RDS: rds_bind could not find a transport for ::fcff:ffff:8000:0:20:0, load rds_tcp or rds_rdma? [ 598.508744][ T12] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.520875][ T12] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.541851][ T12] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.569059][ T12] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.207938][T16799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 599.294137][T16799] 8021q: adding VLAN 0 to HW filter on device team0 [ 599.347047][T16799] batman_adv: batadv0: Interface activated: dummy0 [ 599.510303][T16799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 599.729158][T16791] net_ratelimit: 1190 callbacks suppressed [ 599.729182][T16791] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 599.744086][T16791] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 599.750955][T16791] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 599.757916][T16791] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 599.764832][T16791] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 599.771754][T16791] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 599.778622][T16791] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 599.785535][T16791] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 599.792449][T16791] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 599.799301][T16791] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 600.084474][T16799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 600.159267][T16799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 600.207094][T16799] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 600.218030][T16799] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 600.232645][T16799] veth1_vlan: left promiscuous mode [ 600.238948][T16799] veth0_vlan: left promiscuous mode [ 600.246144][T16799] veth0_vlan: entered promiscuous mode [ 600.259503][T16799] veth1_vlan: entered promiscuous mode [ 600.269347][T16799] veth1_macvtap: left promiscuous mode [ 600.276260][T16799] veth0_macvtap: left promiscuous mode [ 600.283212][T16799] veth0_macvtap: entered promiscuous mode [ 600.289936][T16799] veth1_macvtap: entered promiscuous mode [ 600.302972][T16799] 8021q: adding VLAN 0 to HW filter on device €Â [ 600.310835][T16799] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 600.319256][T16799] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 600.328919][T16799] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 600.343288][T16799] 8021q: adding VLAN 0 to HW filter on device bond1 [ 600.380471][T16799] 8021q: adding VLAN 0 to HW filter on device bond2 [ 600.389147][T16799] 8021q: adding VLAN 0 to HW filter on device bond3 [ 600.398081][T16799] 8021q: adding VLAN 0 to HW filter on device bond5 [ 600.428944][T16799] 8021q: adding VLAN 0 to HW filter on device bond4 [ 600.441066][T16799] 8021q: adding VLAN 0 to HW filter on device bond6 [ 600.451373][T16799] hsr1: Slave A (€Â) is not up; please bring it up to get a fully working HSR network [ 600.482826][T16799] 8021q: adding VLAN 0 to HW filter on device bond7 [ 600.495977][T16799] 8021q: adding VLAN 0 to HW filter on device bond8 [ 600.506644][T16799] 8021q: adding VLAN 0 to HW filter on device bond9 [ 600.515201][T16799] 8021q: adding VLAN 0 to HW filter on device bond10 [ 600.530438][T16799] 8021q: adding VLAN 0 to HW filter on device bond11 [ 600.540643][T16799] 8021q: adding VLAN 0 to HW filter on device bond12 [ 600.549707][T16799] 8021q: adding VLAN 0 to HW filter on device bond13 [ 600.564002][T16799] 8021q: adding VLAN 0 to HW filter on device bond14 [ 600.573811][T16799] 8021q: adding VLAN 0 to HW filter on device bond15 [ 600.585590][T16799] 8021q: adding VLAN 0 to HW filter on device bond16 [ 600.596127][T16799] 8021q: adding VLAN 0 to HW filter on device bond17 [ 600.605997][T16799] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 600.617019][T16799] 8021q: adding VLAN 0 to HW filter on device bond18 [ 600.629352][T16799] 8021q: adding VLAN 0 to HW filter on device bond19 [ 600.638435][T16799] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 600.648084][T16799] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 600.658613][T16799] batadv0: entered promiscuous mode [ 600.667132][T16799] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 600.692588][T16758] lo speed is unknown, defaulting to 1000 [ 600.703094][ T8365] gretap3: entered promiscuous mode [ 600.713323][T16758] syz2: Port: 1 Link ACTIVE [ 600.718118][ T8365] bridge5: entered promiscuous mode [ 600.724695][T16786] netlink: 'syz.7.3208': attribute type 2 has an invalid length. [ 600.734531][T16800] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3208'. [ 600.752468][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.759730][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 600.806513][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.813784][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 600.995563][ T12] bridge0: port 3(vlan4) entered blocking state [ 601.002023][ T12] bridge0: port 3(vlan4) entered forwarding state [ 601.035621][ T12] bridge0: port 4(vlan6) entered blocking state [ 601.036720][T16826] netlink: 'syz.6.3214': attribute type 1 has an invalid length. [ 601.042289][ T12] bridge0: port 4(vlan6) entered forwarding state [ 601.270929][ T1051] nci: nci_rx_work: unknown MT 0x6 [ 602.048850][T16793] mac80211_hwsim hwsim0 wlan0: entered promiscuous mode [ 602.066713][T16793] netlink: 'syz.8.3211': attribute type 1 has an invalid length. [ 602.083038][T16793] netlink: 1 bytes leftover after parsing attributes in process `syz.8.3211'. [ 602.129060][ T3323] bond18: (slave veth27): link status definitely up, 10000 Mbps full duplex [ 602.177025][ T3323] bond18: (slave veth27): making interface the new active one [ 602.256035][ T3323] bond18: active interface up! [ 602.282899][ T1164] netdevsim netdevsim0 €Â: set [0, 0] type 1 family 0 port 8472 - 0 [ 602.306487][ T1164] netdevsim netdevsim0 €Â: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.940661][ T1051] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 602.985593][ T1051] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.074618][ T1051] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 603.165612][ T1051] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.457839][ T1051] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 603.505672][ T1051] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.815821][T16868] netlink: 'syz.8.3221': attribute type 13 has an invalid length. [ 604.121544][T16835] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 604.149403][T16857] netlink: 'syz.7.3220': attribute type 12 has an invalid length. [ 604.316473][T16865] 8021q: adding VLAN 0 to HW filter on device team0 [ 604.606364][T16874] netlink: 'syz.0.3223': attribute type 2 has an invalid length. [ 604.732649][ C1] net_ratelimit: 3559 callbacks suppressed [ 604.732677][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 604.750628][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 604.764548][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 604.776678][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 604.781836][T16761] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: d2:3a:22:84:54:fa [ 604.793743][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 604.814593][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 604.828348][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 604.840468][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 604.854073][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 604.880010][T16878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 605.355855][T16865] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 605.428030][T16865] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 605.690074][T16865] veth1_vlan: left promiscuous mode [ 605.716329][T16865] veth0_vlan: left promiscuous mode [ 605.748055][T16865] veth0_vlan: entered promiscuous mode [ 605.779086][T16865] veth1_vlan: entered promiscuous mode [ 605.956310][T16865] veth1_macvtap: left promiscuous mode [ 605.993563][T16865] veth0_macvtap: left promiscuous mode [ 606.018093][T16865] veth0_macvtap: entered promiscuous mode [ 606.123340][T16865] veth1_macvtap: entered promiscuous mode [ 606.139286][T16865] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 606.170454][T16865] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 606.215427][T16865] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 606.240131][T16865] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 606.415388][T16865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 606.436199][T16865] 8021q: adding VLAN 0 to HW filter on device bond1 [ 608.913417][ T3279] bond1 (unregistering): (slave bridge0): Releasing active interface [ 609.741897][ C1] net_ratelimit: 5760 callbacks suppressed [ 609.741921][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 609.759882][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 609.772013][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 609.785566][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 609.797489][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 609.809318][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 609.821250][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 609.835014][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 609.847015][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 609.858823][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 609.939860][ T3279] bond1 (unregistering): Released all slaves [ 609.972933][ T3279] bond3 (unregistering): Released all slaves [ 609.998377][ T3279] bond2 (unregistering): Released all slaves [ 610.019842][ T3279] bond4 (unregistering): Released all slaves [ 610.045405][ T3279] bond5 (unregistering): Released all slaves [ 610.113840][ T3279] bond6 (unregistering): (slave veth9): Releasing active interface [ 610.297279][ T3279] bond6 (unregistering): (slave veth0_to_bond): Releasing active interface [ 610.336162][ T3279] bond6 (unregistering): Released all slaves [ 610.924328][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.931576][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 610.945159][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.952421][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 611.009945][T16871] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 611.045895][T16871] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 611.078232][T16874] : entered promiscuous mode [ 611.107681][T16871] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 611.144264][ T1051] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.223459][ T1051] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.380664][ T1051] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.466522][ T1051] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.722265][T16892] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3226'. [ 611.903526][T16906] netlink: 'syz.5.3229': attribute type 1 has an invalid length. [ 614.754826][ C1] net_ratelimit: 3827 callbacks suppressed [ 614.754858][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 614.772838][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 614.785048][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 614.797096][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 614.813011][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 614.825046][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 614.837048][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 614.849193][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 614.865512][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 614.877529][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 619.763958][ C1] net_ratelimit: 3134 callbacks suppressed [ 619.763982][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 619.781860][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 619.793889][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 619.805890][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 619.821329][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 619.833262][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 619.845176][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 619.857093][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 619.872607][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 619.884555][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 624.772716][ C1] net_ratelimit: 3207 callbacks suppressed [ 624.772740][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 624.790554][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 624.802532][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 624.814488][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 624.828047][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 624.839941][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 624.855217][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 624.867203][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 624.879145][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 624.891113][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 629.782133][ C1] net_ratelimit: 3821 callbacks suppressed [ 629.782157][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 629.801845][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 629.813702][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 629.829332][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 629.841382][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 629.853308][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 629.865270][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 629.878792][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 629.890645][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 629.905015][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 634.792234][ C1] net_ratelimit: 3834 callbacks suppressed [ 634.792284][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 634.810110][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 634.822089][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 634.834052][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 634.847467][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 634.859366][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 634.875274][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 634.887210][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 634.899190][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 634.911121][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 639.802116][ C1] net_ratelimit: 3809 callbacks suppressed [ 639.802142][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 639.821489][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 639.833346][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 639.847511][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 639.859443][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 639.871434][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 639.883368][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 639.896759][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 639.908674][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 639.923914][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 644.811686][ C1] net_ratelimit: 3803 callbacks suppressed [ 644.811709][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 644.829506][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 644.841553][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 644.853534][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 644.866913][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 644.878781][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 644.893591][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 644.905610][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 644.917585][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 644.929671][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 649.823774][ C1] net_ratelimit: 3812 callbacks suppressed [ 649.823798][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 649.841675][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 649.853636][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 649.865568][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 649.879108][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 649.890979][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 649.905240][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 649.917241][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 649.929171][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 649.941120][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 654.832394][ C1] net_ratelimit: 3828 callbacks suppressed [ 654.832416][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 654.850325][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 654.864809][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 654.876841][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 654.888778][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 654.900705][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 654.914084][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 654.925891][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 654.940364][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 654.952361][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 658.442956][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 659.842266][ C1] net_ratelimit: 3835 callbacks suppressed [ 659.842291][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 659.861553][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 659.873422][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 659.888182][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 659.900253][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 659.912528][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 659.924563][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 659.938052][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 659.949891][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 659.963757][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 664.852221][ C1] net_ratelimit: 3792 callbacks suppressed [ 664.852243][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 664.870022][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 664.882030][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 664.893966][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 664.907333][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 664.919209][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 664.933530][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 664.945509][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 664.957577][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 664.969513][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 669.863099][ C1] net_ratelimit: 3722 callbacks suppressed [ 669.863126][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 669.880913][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 669.892842][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 669.904786][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 669.918309][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 669.930155][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 669.944593][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 669.956597][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 669.968524][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 669.980478][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 674.872188][ C1] net_ratelimit: 4514 callbacks suppressed [ 674.872212][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 674.890015][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 674.890105][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 674.907641][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 674.912992][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 674.925137][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 674.935186][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 674.956562][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 674.963386][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 674.968413][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 679.881757][ C1] net_ratelimit: 9898 callbacks suppressed [ 679.881781][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 679.899382][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::a8aa:aaff:feaa:aa0c on bridge0! [ 679.905499][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 679.910238][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 679.921546][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 679.933476][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::a8aa:aaff:feaa:aa0c on bridge0! [ 679.943677][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 679.953370][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 679.964895][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 679.977006][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::a8aa:aaff:feaa:aa0c on bridge0! [ 684.892125][ C1] net_ratelimit: 14976 callbacks suppressed [ 684.892148][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::a8aa:aaff:feaa:aa0c on bridge0! [ 684.908505][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 684.910627][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 684.921254][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::a8aa:aaff:feaa:aa0c on bridge0! [ 684.931694][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 684.941307][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 684.952669][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 684.964448][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::a8aa:aaff:feaa:aa0c on bridge0! [ 684.974690][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 684.984322][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 689.901776][ C1] net_ratelimit: 15473 callbacks suppressed [ 689.901800][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::a8aa:aaff:feaa:aa0c on bridge0! [ 689.901821][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 689.908185][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 689.918977][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 689.930595][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::a8aa:aaff:feaa:aa0c on bridge0! [ 689.941069][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 689.951498][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 689.962268][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 689.973755][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::a8aa:aaff:feaa:aa0c on bridge0! [ 689.984164][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 693.523984][ T5631] Bluetooth: hci8: command 0x0406 tx timeout [ 694.912356][ C1] net_ratelimit: 15291 callbacks suppressed [ 694.912380][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 694.930185][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::a8aa:aaff:feaa:aa0c on bridge0! [ 694.940594][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 694.942026][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 694.953671][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::a8aa:aaff:feaa:aa0c on bridge0! [ 694.963727][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 694.973369][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 694.984923][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 694.996910][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::a8aa:aaff:feaa:aa0c on bridge0! [ 695.006993][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 699.922132][ C1] net_ratelimit: 15031 callbacks suppressed [ 699.922157][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::a8aa:aaff:feaa:aa0c on bridge0! [ 699.934259][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 699.938831][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 699.950126][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 699.962182][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::a8aa:aaff:feaa:aa0c on bridge0! [ 699.972249][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 699.981977][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 699.993460][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 700.005486][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::a8aa:aaff:feaa:aa0c on bridge0! [ 700.015309][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 704.931753][ C0] net_ratelimit: 14931 callbacks suppressed [ 704.931785][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 704.943451][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 704.949707][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 704.961897][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::a8aa:aaff:feaa:aa0c on bridge0! [ 704.972070][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 704.981648][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 704.992504][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::a8aa:aaff:feaa:aa1c on veth1_to_bridge! [ 705.004983][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::a8aa:aaff:feaa:aa0c on bridge0! [ 705.014801][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::a8aa:aaff:feaa:aa1c on veth1_to_bridge! [ 705.024513][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 709.941688][ C1] net_ratelimit: 15034 callbacks suppressed [ 709.941712][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 709.944088][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 709.949349][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::a8aa:aaff:feaa:aa0c on bridge0! [ 709.959674][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 709.970138][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 709.980919][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 709.992636][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::a8aa:aaff:feaa:aa0c on bridge0! [ 710.002949][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 710.013515][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 710.024205][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 714.951728][ C1] net_ratelimit: 15322 callbacks suppressed [ 714.951752][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 714.951861][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 714.959364][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::a8aa:aaff:feaa:aa0c on bridge0! [ 714.969758][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 714.980303][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 714.990730][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::a8aa:aaff:feaa:aa1c on veth1_to_bridge! [ 715.002646][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::a8aa:aaff:feaa:aa0c on bridge0! [ 715.013038][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::a8aa:aaff:feaa:aa1c on veth1_to_bridge! [ 715.023426][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 715.034410][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 719.961704][ C0] net_ratelimit: 15374 callbacks suppressed [ 719.961727][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 719.971290][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 719.979513][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 719.991360][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::a8aa:aaff:feaa:aa0c on bridge0! [ 720.001552][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 720.011361][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 720.022692][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 720.034638][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::a8aa:aaff:feaa:aa0c on bridge0! [ 720.044657][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 720.054377][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 724.971723][ C1] net_ratelimit: 15646 callbacks suppressed [ 724.971746][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::a8aa:aaff:feaa:aa0c on bridge0! [ 724.988064][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 724.999767][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::a8aa:aaff:feaa:aa0c on bridge0! [ 725.010133][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 725.017926][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 725.022933][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::a8aa:aaff:feaa:aa0c on bridge0! [ 725.033026][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 725.042722][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 725.053912][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::a8aa:aaff:feaa:aa1c on veth1_to_bridge! [ 725.066038][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::a8aa:aaff:feaa:aa0c on bridge0! [ 729.981685][ C0] net_ratelimit: 15758 callbacks suppressed [ 729.981711][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 729.984186][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 729.988467][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 730.000388][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::a8aa:aaff:feaa:aa0c on bridge0! [ 730.010573][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 730.021025][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 730.053478][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::a8aa:aaff:feaa:aa0c on bridge0! [ 730.063839][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 730.072162][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::a8aa:aaff:feaa:aa1c on veth1_to_bridge! [ 730.076660][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::a8aa:aaff:feaa:aa0c on bridge0! [ 732.431609][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 732.438623][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P16904/1:b..l [ 732.447310][ C0] rcu: (detected by 0, t=10503 jiffies, g=116265, q=57776 ncpus=2) [ 732.455348][ C0] task:syz.0.3228 state:R running task stack:24552 pid:16904 tgid:16901 ppid:5624 task_flags:0x400140 flags:0x00080002 [ 732.470322][ C0] Call Trace: [ 732.473735][ C0] [ 732.476783][ C0] __schedule+0x17d9/0x56c0 [ 732.481519][ C0] ? ktime_get+0x1f5/0x220 [ 732.486082][ C0] ? __pfx___schedule+0x10/0x10 [ 732.490961][ C0] preempt_schedule_irq+0x4d/0xa0 [ 732.496014][ C0] irqentry_exit+0x14f/0x8f0 [ 732.500643][ C0] ? trace_irq_disable+0x3b/0x140 [ 732.505705][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 732.511721][ C0] RIP: 0010:unwind_next_frame+0x19bd/0x2550 [ 732.517683][ C0] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 c5 0a 00 00 48 0f bf 03 49 01 c0 49 8d 56 40 4c 89 f7 4c 89 c6 e8 33 0e 00 00 <84> c0 0f 84 4e 01 00 00 48 bb 00 00 00 00 00 fc ff df 48 8b 44 24 [ 732.537321][ C0] RSP: 0018:ffffc90005e7ed20 EFLAGS: 00000286 [ 732.543531][ C0] RAX: 1ffff92000bcfd01 RBX: ffffffff90f656fa RCX: 0000000000000001 [ 732.551513][ C0] RDX: ffffc90005e7ee08 RSI: dffffc0000000000 RDI: ffffc90005e7fee0 [ 732.559535][ C0] RBP: 1ffffffff21ecadf R08: ffffc90005e7fee0 R09: 0000000000000000 [ 732.567536][ C0] R10: ffffc90005e7ee18 R11: fffff52000bcfdc5 R12: dffffc0000000000 [ 732.575522][ C0] R13: ffffffff90f656fb R14: ffffc90005e7edc8 R15: ffffc90005e7ee10 [ 732.583532][ C0] ? __x64_sys_bpf+0xba/0xd0 [ 732.588196][ C0] ? unwind_next_frame+0x8f/0x2550 [ 732.593330][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 732.599512][ C0] arch_stack_walk+0x11b/0x150 [ 732.604360][ C0] ? do_syscall_64+0x174/0x580 [ 732.609203][ C0] stack_trace_save+0xa9/0x100 [ 732.613999][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 732.619387][ C0] ? try_charge_memcg+0x667/0x1590 [ 732.624563][ C0] kasan_save_track+0x3e/0x80 [ 732.629291][ C0] ? kasan_save_track+0x3e/0x80 [ 732.634169][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 732.638953][ C0] ? __kmalloc_node_track_caller_noprof+0x4c3/0x730 [ 732.645671][ C0] ? krealloc_node_align_noprof+0x19a/0x390 [ 732.651583][ C0] ? copy_array+0x71/0x100 [ 732.656009][ C0] ? bpf_copy_verifier_state+0x990/0x1150 [ 732.661760][ C0] ? push_stack+0x19d/0x3b0 [ 732.666285][ C0] ? do_check_insn+0xd31b/0x197a0 [ 732.671339][ C0] ? do_check_common+0x39dd/0x5750 [ 732.676475][ C0] ? do_check_main+0x63/0x1f0 [ 732.681433][ C0] ? bpf_check+0x4a4f/0x5480 [ 732.686209][ C0] ? bpf_prog_load+0x1577/0x1c00 [ 732.691158][ C0] ? __sys_bpf+0xd0d/0xd90 [ 732.695651][ C0] ? __x64_sys_bpf+0xba/0xd0 [ 732.700305][ C0] __kasan_kmalloc+0x93/0xb0 [ 732.704951][ C0] __kmalloc_node_track_caller_noprof+0x4c3/0x730 [ 732.711418][ C0] ? __kmalloc_node_track_caller_noprof+0x2fd/0x730 [ 732.718021][ C0] ? copy_array+0x71/0x100 [ 732.722454][ C0] ? copy_array+0x71/0x100 [ 732.726906][ C0] ? copy_array+0x71/0x100 [ 732.731352][ C0] krealloc_node_align_noprof+0x19a/0x390 [ 732.737089][ C0] ? __kmalloc_cache_noprof+0x150/0x660 [ 732.742646][ C0] ? bpf_copy_verifier_state+0xaf7/0x1150 [ 732.748398][ C0] copy_array+0x71/0x100 [ 732.752652][ C0] bpf_copy_verifier_state+0x990/0x1150 [ 732.758219][ C0] push_stack+0x19d/0x3b0 [ 732.762562][ C0] do_check_insn+0xd31b/0x197a0 [ 732.767451][ C0] ? __pfx_do_check_insn+0x10/0x10 [ 732.772578][ C0] ? bpf_is_state_visited+0x3765/0x47f0 [ 732.778203][ C0] do_check_common+0x39dd/0x5750 [ 732.783182][ C0] ? __pfx_do_check_common+0x10/0x10 [ 732.788493][ C0] do_check_main+0x63/0x1f0 [ 732.793014][ C0] bpf_check+0x4a4f/0x5480 [ 732.797470][ C0] ? pcpu_memcg_post_alloc_hook+0x2a4/0x630 [ 732.803439][ C0] ? ktime_get_with_offset+0x93/0x2d0 [ 732.808856][ C0] ? ktime_get_with_offset+0x93/0x2d0 [ 732.814241][ C0] ? __pfx_bpf_check+0x10/0x10 [ 732.819017][ C0] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 732.824245][ C0] ? security_bpf_prog_load+0x125/0x3c0 [ 732.829941][ C0] bpf_prog_load+0x1577/0x1c00 [ 732.834738][ C0] ? __pfx_bpf_prog_load+0x10/0x10 [ 732.839879][ C0] ? trace_cgroup_notify_frozen+0x170/0x200 [ 732.845806][ C0] __sys_bpf+0xd0d/0xd90 [ 732.850066][ C0] ? trace_cgroup_notify_frozen+0x170/0x200 [ 732.855977][ C0] ? __pfx___sys_bpf+0x10/0x10 [ 732.860781][ C0] ? hook_file_ioctl+0x1f0/0x5f0 [ 732.865801][ C0] ? trace_cgroup_notify_frozen+0x170/0x200 [ 732.871717][ C0] ? kfree+0x4d/0x640 [ 732.875705][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 732.881585][ C0] ? __pfx_kcov_ioctl+0x10/0x10 [ 732.886497][ C0] __x64_sys_bpf+0xba/0xd0 [ 732.890967][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.897050][ C0] do_syscall_64+0x174/0x580 [ 732.901660][ C0] ? trace_irq_disable+0x3b/0x140 [ 732.906781][ C0] ? clear_bhb_loop+0x40/0x90 [ 732.911496][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.917405][ C0] RIP: 0033:0x7fa42179de59 [ 732.921830][ C0] RSP: 002b:00007fa422647028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 732.930255][ C0] RAX: ffffffffffffffda RBX: 00007fa421a25fa0 RCX: 00007fa42179de59 [ 732.938246][ C0] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 732.946240][ C0] RBP: 00007fa421833e6f R08: 0000000000000000 R09: 0000000000000000 [ 732.954237][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 732.962220][ C0] R13: 00007fa421a26038 R14: 00007fa421a25fa0 R15: 00007ffebf905d28 [ 732.970222][ C0] [ 732.973377][ C0] rcu: rcu_preempt kthread starved for 202 jiffies! g116265 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 732.984528][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 732.994543][ C0] rcu: RCU grace-period kthread stack dump: [ 733.000477][ C0] task:rcu_preempt state:R running task stack:27752 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 733.014035][ C0] Call Trace: [ 733.017362][ C0] [ 733.020350][ C0] __schedule+0x17d9/0x56c0 [ 733.024918][ C0] ? __lock_acquire+0x683/0x2cf0 [ 733.029980][ C0] ? __pfx___schedule+0x10/0x10 [ 733.034903][ C0] ? schedule+0x90/0x2b0 [ 733.039209][ C0] schedule+0x164/0x2b0 [ 733.043451][ C0] schedule_timeout+0x152/0x2c0 [ 733.048374][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 733.053810][ C0] ? __pfx_process_timeout+0x10/0x10 [ 733.059160][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 733.065032][ C0] ? prepare_to_swait_event+0x322/0x350 [ 733.070673][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 733.075661][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 733.081883][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 733.087232][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 733.092498][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 733.098417][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 733.103081][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 733.108339][ C0] ? __kthread_parkme+0x71/0x1f0 [ 733.113366][ C0] ? __kthread_parkme+0x196/0x1f0 [ 733.118460][ C0] kthread+0x388/0x470 [ 733.122588][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 733.127841][ C0] ? __pfx_kthread+0x10/0x10 [ 733.132492][ C0] ret_from_fork+0x514/0xb70 [ 733.137174][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 733.142347][ C0] ? __switch_to+0xc89/0x1420 [ 733.147085][ C0] ? __pfx_kthread+0x10/0x10 [ 733.151727][ C0] ret_from_fork_asm+0x1a/0x30 [ 733.156585][ C0] [ 733.159649][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 733.166017][ C0] Sending NMI from CPU 0 to CPUs 1: [ 733.171288][ C1] NMI backtrace for cpu 1 [ 733.171313][ C1] CPU: 1 UID: 0 PID: 16885 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) [ 733.171335][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 733.171347][ C1] Workqueue: wg-crypt-wg1 wg_packet_decrypt_worker [ 733.171490][ C1] RIP: 0010:__netif_receive_skb_core+0x252/0x30b0 [ 733.171593][ C1] Code: 66 44 89 33 4c 8b bc 24 c0 01 00 00 49 8d 9f ba 00 00 00 48 89 d8 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 5e 2a 00 00 0f b7 1b ff ff 00 00 89 de e8 12 6e 22 f8 81 fb ff ff 00 00 74 28 e8 65 [ 733.171610][ C1] RSP: 0018:ffffc90000a087a0 EFLAGS: 00000246 [ 733.171625][ C1] RAX: 0000000000000000 RBX: 000000000000003e RCX: ffff888031013e00 [ 733.171638][ C1] RDX: 0000000000000100 RSI: 000000000000004c RDI: 0000000000010000 [ 733.171650][ C1] RBP: ffffc90000a089d0 R08: ffffffff905775f7 R09: 1ffffffff20aeebe [ 733.171664][ C1] R10: dffffc0000000000 R11: fffffbfff20aeebf R12: 0000000000000000 [ 733.171677][ C1] R13: dffffc0000000000 R14: 000000000000004c R15: ffff88808ad21b40 [ 733.171691][ C1] FS: 0000000000000000(0000) GS:ffff88812505e000(0000) knlGS:0000000000000000 [ 733.171706][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 733.171719][ C1] CR2: 0000001b3451cff8 CR3: 000000000e946000 CR4: 00000000003526f0 [ 733.171735][ C1] Call Trace: [ 733.171742][ C1] [ 733.171763][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 733.171788][ C1] ? ip6_input_finish+0x191/0x370 [ 733.171900][ C1] ? ipv6_gro_receive+0x1204/0x2450 [ 733.171984][ C1] __netif_receive_skb_list_core+0x24d/0x830 [ 733.172016][ C1] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 733.172039][ C1] ? lock_acquire+0x106/0x350 [ 733.172071][ C1] netif_receive_skb_list_internal+0x995/0xcf0 [ 733.172118][ C1] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 733.172141][ C1] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 733.172175][ C1] gro_receive_skb+0x5fb/0xc30 [ 733.172257][ C1] gro_cell_poll+0x3ad/0x5d0 [ 733.172328][ C1] ? gro_cell_poll+0x175/0x5d0 [ 733.172354][ C1] __napi_poll+0xaa/0x330 [ 733.172379][ C1] net_rx_action+0x61d/0xf50 [ 733.172411][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 733.172453][ C1] handle_softirqs+0x225/0x840 [ 733.172482][ C1] ? do_softirq+0x76/0xd0 [ 733.172505][ C1] ? wg_packet_decrypt_worker+0xd24/0xda0 [ 733.172534][ C1] do_softirq+0x76/0xd0 [ 733.172552][ C1] [ 733.172559][ C1] [ 733.172565][ C1] __local_bh_enable_ip+0xf8/0x130 [ 733.172586][ C1] wg_packet_decrypt_worker+0xd24/0xda0 [ 733.172625][ C1] ? __pfx_wg_packet_decrypt_worker+0x10/0x10 [ 733.172704][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 733.172725][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 733.172749][ C1] ? rcu_is_watching+0x15/0xb0 [ 733.172778][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 733.172798][ C1] process_scheduled_works+0xa8e/0x14e0 [ 733.172835][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 733.172859][ C1] ? assign_work+0x3cf/0x5d0 [ 733.172887][ C1] worker_thread+0xa47/0xfb0 [ 733.172925][ C1] kthread+0x388/0x470 [ 733.172949][ C1] ? __pfx_worker_thread+0x10/0x10 [ 733.172969][ C1] ? __pfx_kthread+0x10/0x10 [ 733.172995][ C1] ret_from_fork+0x514/0xb70 [ 733.173022][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 733.173048][ C1] ? __switch_to+0xc89/0x1420 [ 733.173071][ C1] ? __pfx_kthread+0x10/0x10 [ 733.173096][ C1] ret_from_fork_asm+0x1a/0x30 [ 733.173124][ C1] [ 734.991869][ C0] net_ratelimit: 12721 callbacks suppressed [ 734.991892][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 734.992098][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::a8aa:aaff:feaa:aa0c on bridge0! [ 734.998678][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 735.009273][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 735.019988][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 735.032251][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::a8aa:aaff:feaa:aa0c on bridge0! [ 735.042222][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 735.052551][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 735.063171][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 735.075083][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::a8aa:aaff:feaa:aa0c on bridge0! [ 740.001657][ C1] net_ratelimit: 16025 callbacks suppressed [ 740.001681][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 740.019382][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::a8aa:aaff:feaa:aa0c on bridge0! [ 740.029795][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 740.035910][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 740.042629][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::a8aa:aaff:feaa:aa0c on bridge0! [ 740.052464][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::a8aa:aaff:feaa:aa1c on veth1_to_bridge! [ 740.062423][ C1] bridge0: received packet on vlan6 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 740.073862][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::a8aa:aaff:feaa:aa1c on veth1_to_bridge! [ 740.085966][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:0c advertised our address fe80::a8aa:aaff:feaa:aa0c on bridge0! [ 740.095967][ C0] ICMPv6: NA: aa:aa:aa:aa:aa:1c advertised our address fe80::a8aa:aaff:feaa:aa1c on veth1_to_bridge!