last executing test programs: 2.98771927s ago: executing program 4 (id=298): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x3, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0xc, 0x10, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) (async) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x3, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0xc, 0x10, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={r3, 0x8, 0x9, 0x0, 0x12, 0x1}, &(0x7f0000000100)=0x14) r4 = socket(0x400000000010, 0x3, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25GETINFO(r7, 0x8917, 0x0) (async) ioctl$SIOCAX25GETINFO(r7, 0x8917, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x2000000, {0x0, 0x0, 0x0, r6, {0xf, 0xfff1}, {}, {0xfff8, 0xffff}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x1, 0x1}, {0x7, 0x5}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1404c885}, 0x2000d8d0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x2000000, {0x0, 0x0, 0x0, r6, {0xf, 0xfff1}, {}, {0xfff8, 0xffff}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x1, 0x1}, {0x7, 0x5}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1404c885}, 0x2000d8d0) 2.132459703s ago: executing program 1 (id=313): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000080)={0x7, 0x1ff, 0xa4, 0x6}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = socket(0x2, 0x80805, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) getsockopt$bt_hci(r3, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) write$bt_hci(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="4c00010002"], 0x8) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x48, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbmod={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) clock_gettime(0x0, &(0x7f0000005840)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000005780)=[{{&(0x7f0000000180)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000200)=""/23, 0x17}], 0x1, &(0x7f0000000540)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000380)=""/175, 0xaf}, {&(0x7f0000000440)=""/143, 0x8f}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/4096, 0x1000}], 0x4}, 0x8c22}, {{&(0x7f0000003540)=@alg, 0x80, &(0x7f0000004740)=[{&(0x7f00000035c0)=""/236, 0xec}, {&(0x7f00000036c0)=""/4096, 0x1000}, {&(0x7f00000046c0)=""/74, 0x4a}], 0x3, &(0x7f0000004780)=""/4096, 0x1000}, 0x1ff}], 0x3, 0x41, &(0x7f0000005880)={r4, r5+10000000}) 2.020473804s ago: executing program 3 (id=317): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = socket(0x1, 0x803, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x8}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_OIF={0x8}}, @RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x30}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c00000008000100", @ANYRES32=r3, @ANYBLOB="cd5f02c01e0dcdc7df24897a44f0941905897908d660eb879502f12d7a3cdf090000008705003fdf72b0d6dd4ae190a6105298ed680955277fd742294ad55a771437d014ac16340c089d7719d6748049808b9bba4952f20eace4e382f17c49ecfc13deb3f92e57350948171018b9c626f1dfcfb534e28f58d3a018f14030c30419ccda505129b531f61974a15976f9b7cc294240ebc951a3d313c1efd6931722c4e981217dd6133d"], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x8000) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r7, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, r7, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c445}, 0x4040140) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000001200)={0x60000010}) epoll_pwait(r9, &(0x7f0000000280)=[{}], 0x1, 0x7, 0x0, 0x0) shutdown(r8, 0x0) 1.920635494s ago: executing program 1 (id=318): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503, 0x10403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'veth1_macvtap\x00', @random="5ba25210cf1e"}) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x50, 0x0, 0x5, 0x2}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) 1.881808275s ago: executing program 4 (id=320): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x4, 0x0, 0x1, 0x1, 0x74, 0x81, 0x8, 0x40, 0x8, 0x9, 0x0, 0x7, 0x9, 0x7}, 0xe) syz_init_net_socket$ax25(0x3, 0x5, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT, @ANYRES32, @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb4, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x50) socket$kcm(0x29, 0x7, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}}}, 0xb8}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000680)=[{{&(0x7f0000000300)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)="81ec", 0x2}], 0x1}}], 0x1, 0x4008010) 1.770073324s ago: executing program 3 (id=321): r0 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x69, 0x10, 0xae}, [@ldst={0x4, 0x0, 0x6, 0x9}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x49) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x9}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000240)={r2, 0xf7d}, &(0x7f0000000280)=0x8) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300d6feffffffffffffff537c4c3060c6a405106c720a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x88, 0x30, 0xb, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x70, 0x1, 0x0, 0x0, {{0x7}, {0x48, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private1}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0xfffd}, @TCA_CT_ACTION={0x6, 0x3, 0x25}, @TCA_CT_NAT_PORT_MAX={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a0400eb2636037f00000000", @ANYRES32, @ANYBLOB="0200000000008000800012000800010076746936740002006000"], 0xa0}}, 0x0) 1.766805108s ago: executing program 4 (id=322): r0 = socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800480000340000000000059078ac1414bb0a010103440405038903ce830300000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a25900dfffff03dcab15d451793b0000000002000000477e47ef6ab389d28ef2aa1e1d28bbd0d95b97a965b5b3434fed6e0f53d7068d32e59ae4506253558e34dbeb3927e1d0151fe5d47eb13e9dbfb8adf5e11044108f1f38bee34b47bab5fa23bbbe9937ab887085c9778d2fba472a60717140b31868e7c17bdcde82a8fc8221cd0c3c3b0b8b3a8bb42254caac77fd7d075242f0d426f9e814614dea21db0bbadada45772e111057"], 0x0) sendmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x5, 0x4) 1.554362027s ago: executing program 1 (id=323): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x3fa, 0x300, 0x70bd29, 0x25dfdbfd, {0x1, 0x1, 0x1}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x804) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x40880) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x3fa, 0x300, 0x70bd29, 0x25dfdbfd, {0x1, 0x1, 0x1}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x804) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x40880) (async) 1.552129504s ago: executing program 2 (id=324): r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, r0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x20008004) r1 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000001c0)) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f00000003c0)={'vcan0\x00'}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000400)=""/137, &(0x7f00000004c0)=0x89) socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r4, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000814}, 0x4a001) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r5, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000840) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r6, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, r5, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20000024) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000880), 0x8) sendto$netrom(r7, &(0x7f00000008c0)="1a794e3c1f0c61595283ba9a0d3a19c9931c427c6ca6e6b5aa5c54368fc40203b8ed9df08d03d242261e828a7475b22d7f74d5eda22fbcf8d0a4ea4ded04d1669b425873df56904f4847e4bc5a4f7b1bccface923c64fc159ed7ef2cf2dc787ee2090c93ad589b6bb132aded9f5b3ae2ed746dba2ba0d18bd92e4abaaa9d6c4b0e1fcd2d421b4d0a861883b7913b7f33488ed45f9b6eaff46b4fa1b582a08302adce10a6eb5cec59a284f4e038543bc02ffeafd1751b79e0414fc344c7bc9e122982a8ce47f0", 0xc6, 0x80, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r7, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x11210}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xe8, 0x3, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0xa}}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xb, 0x1, 'amanda\x00'}}, @CTA_TUPLE_ORIG={0x4c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @multicast2}}}]}, @CTA_MARK_MASK={0x8}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x50}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x1}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SYNPROXY={0x34, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x6}]}]}, 0xe8}}, 0x40000) setsockopt$MRT_PIM(r7, 0x0, 0xcf, &(0x7f0000000b80), 0x4) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4c0, 0x0, 0x1b0, 0x368, 0x0, 0xf0, 0x428, 0x428, 0x428, 0x428, 0x428, 0x6, &(0x7f0000000bc0), {[{{@ip={@multicast2, @rand_addr=0x64010100, 0xffffffff, 0xff, 'hsr0\x00', 'vcan0\x00', {0xff}, {}, 0x88, 0x0, 0x20}, 0x0, 0xc0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@icmp={{0x28}, {0x11, "09c8", 0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xd64b, 0x401, @multicast1, 0x4e23}}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'ipvlan0\x00', 'vlan1\x00', {}, {}, 0x33, 0x1}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x3}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0xa}, @loopback, 0xffffffff, 0x0, 'vlan0\x00', 'ip6tnl0\x00', {}, {}, 0x2, 0x3, 0x4}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0xd, 0x2, 0x2, 0x0, 0x5], 0x2, 0x2}, {0x0, [0x5, 0x5, 0x5, 0x5, 0x6], 0x5, 0x4}}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x520) getsockopt$netrom_NETROM_N2(r7, 0x103, 0x3, &(0x7f0000001180)=0x2, &(0x7f00000011c0)=0x4) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), r3) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000001280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r3, &(0x7f0000001380)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x44, r8, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x44}}, 0x0) r10 = socket$unix(0x1, 0x2, 0x0) getsockopt$IP_VS_SO_GET_INFO(r10, 0x0, 0x481, &(0x7f00000013c0), &(0x7f0000001400)=0xc) setsockopt$netrom_NETROM_T4(r7, 0x103, 0x6, 0xfffffffffffffffe, 0x0) close(r7) sendmsg$NL80211_CMD_SET_WDS_PEER(r7, &(0x7f0000001580)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001540)={&(0x7f0000001480)={0x88, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @random="77a408d73eec"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="54d8161fadc3"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000c001) bind$inet6(r2, &(0x7f00000015c0)={0xa, 0x4e21, 0x401, @private2, 0x2}, 0x1c) 1.508624149s ago: executing program 1 (id=325): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x1, 0x80000001, 0x8}, 0x10) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r0) 1.458705467s ago: executing program 2 (id=327): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x339e68f63b70890, 0x4}}}]}, 0x3c}}, 0x4000010) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{}, {0x94, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSMAXCID(r4, 0x40047451, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="1c00000015006b05c84e21000ab16d6e230675f802000f00440002005817d30461bc24eeb556a705251e613f0b964dc23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x800) 1.412425145s ago: executing program 3 (id=328): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000008500000019000000958e"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000080), 0x4) sendmsg$802154_dgram(r1, &(0x7f0000000040)={&(0x7f0000000500)={0x24, @long}, 0x14, &(0x7f0000001880)={0x0}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @dev, @multicast1}, &(0x7f00000000c0)=0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r4 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_int(r4, 0x0, 0x3, &(0x7f0000000080)=0x3, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r3, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r5}, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00', @ANYRES32=0x0, @ANYBLOB="a739df"], 0x1c}}, 0x4000054) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r8, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040004}, 0x24044840) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0x1, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r12, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x78, '\x00', r2, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x50) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9e, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4}, 0x50) r15 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r15, 0x82, &(0x7f0000000180)}, 0x10) r16 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0xd, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000f9ffffff00000000030000005316c0fffcffffff852000000100000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000000000000850000008600000018150000", @ANYRES32=r11, @ANYBLOB="0000000000000000183000090000000000000000000000000000001000000000"], &(0x7f0000000540)='GPL\x00', 0xff, 0x74, &(0x7f0000000740)=""/116, 0x40f00, 0x2c, '\x00', r6, 0x25, r12, 0x8, &(0x7f00000007c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000800)={0x5, 0x2, 0x1ff, 0xa73b}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000009c0)=[r13, r14, r15, r16, 0x1], &(0x7f0000000a00)=[{0x2, 0x3, 0x1, 0x3}, {0x4, 0x1, 0xc, 0x6}], 0x10, 0x8001}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000b00)=ANY=[@ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="12abc146500109000000fffc0b9c000020000000", @ANYRES32, @ANYBLOB, @ANYRES32=r5, @ANYRES64=0x0], 0x20) 1.308141686s ago: executing program 0 (id=329): setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000000)=0x5, 0x4) (async) r0 = socket$inet6(0xa, 0xa, 0x4ace) sendto$inet6(r0, &(0x7f0000000040)="0c9208", 0x3, 0x8000844, &(0x7f0000000080)={0xa, 0x4e24, 0x1000, @private1, 0xc}, 0x1c) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x1406, 0x800, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}}, 0x48040) (async) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) pwrite64(r2, &(0x7f0000000200)="3416fb4eb3d3e008acc0649363f921b78ef2723d5beeb37113056201d51ab0582a02c2b3cf98dcb63db3daa96d5e47909e96f0733a7ea1c58dd2ee98ab53bee9fc1cd411be610e67a3a4e13a117cd4b27bdf307edd4e51ea8343a0538805be08673167dfa429500fc563c860e5053ddcae313440ff390931922d3cb8d6d7bd56c62e3b462c0b2ba7de335792596bde4d4b3ac1012dba582f055daf538c46f1602f9326eddc3c752fc5126a7a58ef34e8507b5111973f68847b27208c18fbab3321b85a4115", 0xc5, 0x4) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004801}, 0x200000c3) (async) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000480)={'ipvlan1\x00', &(0x7f0000000440)=@ethtool_gstrings={0x1b, 0x4, 0x26, "8745f859c8d9c63cdf1d220a9e91d68b6239a326e50f09a8f2ba7fcf7946d79ea283ea2ea4c9"}}) ioctl$BTRFS_IOC_INO_LOOKUP(r4, 0xd0009412, &(0x7f00000004c0)) (async) r5 = socket$inet_sctp(0x2, 0x2c48a0c86aafd037, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f00000019c0)=@nat={'nat\x00', 0x19, 0x4, 0x4b0, [0x200000001500, 0x0, 0x0, 0x200000001724, 0x200000001754], 0x0, &(0x7f00000014c0), &(0x7f0000001500)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x0, 0x10, 0x18, 'nicvf0\x00', 'sit0\x00', 'pimreg\x00', 'wlan0\x00', @multicast, [0xff, 0x0, 0x0, 0xff, 0xff], @multicast, [0xff, 0x0, 0x0, 0xff, 0x0, 0xff], 0x9e, 0xd6, 0x10e, [@cpu={{'cpu\x00', 0x0, 0x8}, {{0x8, 0x1}}}], [@arpreply={'arpreply\x00', 0x10, {{@broadcast, 0xfffffffffffffffd}}}], @arpreply={'arpreply\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0xfffffffffffffffe}}}}, {0x11, 0x18, 0x88f8, 'erspan0\x00', 'veth0\x00', 'bond_slave_1\x00', 'wlan1\x00', @broadcast, [0x0, 0xff, 0xff, 0x0, 0xff], @empty, [0x0, 0x0, 0xff], 0xae, 0xae, 0xe6, [@quota={{'quota\x00', 0x0, 0x18}, {{0x0, 0x0, 0x5}}}], [], @arpreply={'arpreply\x00', 0x10, {{@link_local, 0x1}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0xc, 0x1a, 'ipvlan0\x00', 'sit0\x00', 'gre0\x00', 'ip6tnl0\x00', @local, [0xff, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, [], 0x6e, 0x6e, 0xa6, [], [], @arpreply={'arpreply\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, 0xffffffffffffffff}}}}, {0x11, 0xa, 0xf9, 'gre0\x00', 'wlan1\x00', 'hsr0\x00', 'veth1_macvtap\x00', @remote, [0x0, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0x0, 0xff, 0x0, 0xff], 0x14e, 0x14e, 0x186, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'ip6erspan0\x00', 'gre0\x00', 0x20, 0x1, 0xa, 0x1, 0x6, 0x80000000, {0x9}, {0x7f}}}}, @stp={{'stp\x00', 0x0, 0x48}, {{0x4, {0x0, 0x7, 0xf32b, @multicast, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], 0x2, 0x1800, 0x9, 0x2f, @multicast, [0xff, 0x0, 0x0, 0xff, 0xff], 0x4e21, 0x4e23, 0x7, 0x7ff, 0x179d, 0x0, 0x40, 0x4, 0x0, 0x7f}, 0x2, 0x905}}}], [], @snat={'snat\x00', 0x10, {{@random="672949174a78", 0xfffffffffffffffe}}}}]}]}, 0x528) (async) ioctl$AUTOFS_IOC_SETTIMEOUT(r3, 0x80049367, &(0x7f0000001a40)=0x4) (async) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ac0), r3) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x24, r6, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0xd94}}, ["", "", "", ""]}, 0x24}}, 0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000001bc0)={'pimreg1\x00'}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) getsockopt$sock_int(r7, 0x1, 0x4, &(0x7f0000001c00), &(0x7f0000001c40)=0x4) ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f0000001d80)={0x1, 0xba4, 0xe5, &(0x7f0000001c80)=""/229}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e00)={0x54, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2f}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x2004c004}, 0x20) (async) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000001f40), r3) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000002000)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x24, r8, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x81}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x200008c2}, 0x40000) r9 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r9, 0x0, 0x3, &(0x7f0000002040)=0x4, 0x4) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000020c0), r3) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(r3, &(0x7f0000002300)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002140)={0x158, r10, 0x0, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x6, 0x1a}}}}, [@NL80211_ATTR_TESTDATA={0x2c, 0x45, "29fd3c89eb2c6df6d1065c8cb1dc6675e749ef245c48b3ad08d74cbde82245e8da250a903725acb2"}, @NL80211_ATTR_TESTDATA={0xcd, 0x45, "65c57855bc4b27e4e52654967b912bf6979404bb97eb81c7e503dbb7e945a288052c47405fd85275664474288079e61380cdd7631d3e560817272c3b306c4bd165c549215a3a48f4fc8f2fad8dfe536950df5f588edeb877248e7cc068aae9f0f16ee4725135627344eb664d134223387c07ce77de72fde853d4251d8496cc43f719d0dde928b3fc4101595d3d4988ed0378a4f53169116dc3c1167dda5f095dbe1b7900cffd099d66d5684fbc7694b0729d0d9558a19edbad26f58cafd5b5d136dece35084438dafa"}, @NL80211_ATTR_TESTDATA={0x33, 0x45, "f59d3d1444b5e4cac95cbed0a16f601ac844fe9560b3f20692ecb8a4baf6522de8fb72d13a7eedee267e7098f796b9"}]}, 0x158}, 0x1, 0x0, 0x0, 0xc1}, 0x1) 1.30258272s ago: executing program 4 (id=330): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f00000006c0), 0x0, 0x4000100) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f00000003c0)={0x0, 0x7, 0x1}, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="58eced8e46dc3f0ab98607000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmsg$rds(r5, 0x0, 0x40800) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) setsockopt$SO_J1939_SEND_PRIO(r5, 0x6b, 0x3, &(0x7f00000002c0)=0x2, 0x4) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f80100007137b64544164adacacac83045d2ca080bbb4173437f9fb11536639c9e1febb84b09b46373d99f6d5373ee40755971dd39bbc0dd2d136e2c29ebf870959698abe2da73d7946783c8cccb2401e37f7cd68609f729f3867964a512f2b5ae17327598e56badce9b3f65ba35b83a2df213912e3e3e544d41e1932fcd50c3", @ANYRES16=r6, @ANYBLOB="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"], 0x1f8}, 0x1, 0x0, 0x0, 0x800}, 0x50) getsockopt$inet_int(r1, 0x0, 0xd, 0x0, &(0x7f0000000080)) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7, 0x81, 0x2}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, [0x0, 0x0, 0xffffffff], [], 'wg1\x00', 'caif0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x6, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r8, 0x104, 0x6ba05eb0794edd29, 0x0, &(0x7f0000002180)) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x10, 0x0, 0x4c, 0x0, {}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0xa, {0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000021400078008001140000000000500150000000000050005000a000000050001000700000005000400000000000900020073797a3100000000100003"], 0x5c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.140616028s ago: executing program 3 (id=331): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181004000000004000000000000000e000a0012e2440102800200121f", 0x2e}], 0x1}, 0x0) (async) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4001, 0x3, 0x3a8, 0x1f0, 0x0, 0x148, 0x0, 0x148, 0x310, 0x240, 0x240, 0x310, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x190, 0x1f0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x29, 0x1, 'syz0\x00', 0xc}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast, 0x6, 0xc, [0x2, 0x3e, 0xc, 0x1d, 0x27, 0x2f, 0xb, 0x40, 0x32, 0x1, 0x1e, 0x1c, 0x40, 0x3d, 0x13b, 0x17], 0x2, 0x3, 0x9}}}, {{@ip={@empty, @multicast1, 0xff000000, 0xffffff00, 'tunl0\x00', 'pimreg1\x00', {}, {0xff}, 0x84}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x7}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x1, 0x5, 0x3, 0x1, 0x5, 0x3], 0x3}, {0x1, [0x1, 0x1, 0x7, 0x0, 0x4]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, 0xfffffffffffffffd, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f0000000280)=0xffffffffffffffff, 0x4) (async) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="020300020d000000020000000000000005000600000000000a004e240000f59cff0200000000000000000000000000ba95f123405efefa06f4197bdd0901010000000000000000100000000009000000000002000a0000c0000003000000000000000200080010000000342d000000000000000000006ec31122721dcf005db61eed0cb022567b0ee938c6ce236f4e0f7de2f26c66a17c065a42fe0a138ee3f893acd6377591805a5ff7c703f39d7f965e158498bbed9068078698771ffeee1552696a9b071927f1e3c2b53b8ef654a5efa47b92e01700940962cbef5da9aaca32496135e04dd6c5d1c9b79f3ae18ef2ec6c8e6305b01da4e09328722a32c771e28019391e5982ca9edccd1a47e89a5a17c562b35b9e8b1f9874c9ae2d0ac2a42d62cf5621907418bbd12c059c92263dc43b83a01c37f834424dcaff5b82920e3e9544a2850f120e583da3dd7d0b4f1cbf282f0747e61ccacd4d66f50c12e4d984d79ba0451d1bb62e86cb4f1471162d0f2eb7ab233bc05dfd4c1deccca15726971d44495886f4d2613b133cc551135aec1b20fd1f4d2808bcff3e2706801c0fd79eda4bb4eec1152b29e46ca0d62d36f641ef81e6fc08540f4e08ca9cbe765a554b73296d7af0753cd074642fcdf803a1656046fba874752b6bfb61596f15"], 0x68}, 0x1, 0x7}, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000240)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x0, 0x19, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0xc8, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000001680)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x4, 0xff5, &(0x7f000062b000)=""/4085, 0x0, 0x0, '\x00', r7, @sock_ops=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c002b8008000800", @ANYRESOCT=r0, @ANYRES16=r9, @ANYRES32=r9, @ANYRES32=r9], 0x44}}, 0x0) 1.097934865s ago: executing program 0 (id=332): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async, rerun: 64) r1 = accept4(r0, 0x0, 0x0, 0x800) (rerun: 64) sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000c00)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000021c0)="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", 0x171}, {&(0x7f00000003c0)="bf06c9e7028a0f80ad61379f059360863a4a567cea849a05da71d8c66971c5a36591236100b88ea3c0c465", 0x2b}, {&(0x7f0000000400)="93171500dc2611", 0x7}], 0x5, 0x0, 0x0, 0x40014}], 0x49249ff, 0x40840) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000e00)={0x0, 0x0, 0x0}, &(0x7f0000000c40)=0xc) (async) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000013c0)={0x0, 0x0}, &(0x7f0000001400)=0xc) (async, rerun: 64) r5 = getgid() (rerun: 64) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000bc0)=ANY=[@ANYRES8=r2, @ANYRESHEX=r5], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r6}, 0x10) (async) r7 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r7, 0xffffffffffffffff, 0x0, 0xfffffffffffffce2, 0x0}, 0x7a) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000080)=ANY=[], 0x10448) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) (async, rerun: 64) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r7, r8, 0x0, 0x0, 0x0}, 0x30) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001440)={{{@in=@broadcast, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@private1}}, &(0x7f0000001540)=0xe8) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001580)={0x0, 0x0, 0x0}, &(0x7f00000015c0)=0xc) (async) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000001600)=0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001640)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000b40)={0x0, 0x0, 0x0}, &(0x7f0000000b80)=0xffffffffffffff83) r18 = syz_open_procfs$namespace(r15, &(0x7f0000001780)='ns/ipc\x00') (async, rerun: 64) r19 = getpid() (rerun: 64) sendmmsg$unix(r14, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r15, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r15, @ANYRES32=0x0, @ANYRES32=r17, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r19, @ANYRES32=r16, @ANYRES32=0x0, @ANYBLOB="000000ad8182c98f9048a3000000000002000000", @ANYRES32=r18, @ANYRES32], 0x58, 0x800}}], 0x2, 0x0) (async) sendmmsg$unix(r1, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x20, 0x24000800}}, {{&(0x7f0000000840)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000700)="221eaf67868aa0cf86d4ba5a6215770b4f63959453c662c87da026287d4464c901a14b2a7d67", 0x26}, {&(0x7f0000000080)="c13ec4e940f7c22bb67229", 0xb}, {&(0x7f0000000900)="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", 0xfb}, {&(0x7f0000000a00)="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", 0xfb}], 0x4, &(0x7f0000001800)=ANY=[], 0x70, 0x10}}, {{&(0x7f0000000d00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000dc0)=[{&(0x7f0000000d80)="5b9bc15617d47f1c5cc9acfb54418fc3b45db148daeee41e6831e2ff24d669f52de83e98acd2", 0x26}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000000e1ff0100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="00001800001c00000000010000002d8cf19bdfcf8c01000000", @ANYRES32=r1, @ANYRES32=r0], 0x38, 0x4000800}}, {{&(0x7f0000000f40)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001200)=[{&(0x7f0000000fc0)="6bf1d98c3415c2579b1dd0f1590364732bc9bd6904d1b316c2899d47cc73576fb901c98cd23098702e8a0e67db1aa075df8153b8231fdd4fc80b2c43be6e9d4ecd28925c4e3debcbe380fa550d242ffa383015620df07c38da20c560647be6188f09533396dd686f96a4f8aac42f09fc82cf845ecd5618d3baaedb6a8217e40a50bfa2ead486ffda523445669ffc4ae90c0d72320b3e8b432cf5bd1d3bbbe225c2675629bc9facd32e7dc00d665987fa0b3b15b06263321af8a990b710ae41e88f39e6c0285c2c1a25ff6cc133817418bbb26d5fdfa1effd4e937a06d9", 0xdd}, {&(0x7f0000002340)="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", 0x1000}, {&(0x7f00000010c0)="1a3b8c20ff2b7773244d7a4e9f2e36cf5d0676f2c67734a811ee20", 0x1b}, {&(0x7f0000000600)="0bc4abd8a77ef3e755282efa4ac7d3c0fa196984b860419e7f7a8cca62ddb5cadfbc744df4b46b2bb4a888e350994580c2c4059ebbf5bf7888a4bf690b348582ab1a63", 0x43}, {&(0x7f0000001180)="b111761a83d8f13efa43e023bcd9d24ec5c8cdba591ea32320a4c377fd998c2605f0a3d6bbb19151ebffd0f520a1a06bed9e10d496b8439da0ddefd014e8e9b5dfe178b22a5403e8003920439cf6bfe14320140d6f55ddaac9d5e1bffe7a4991a23fcca5350f4ccf", 0x68}, {&(0x7f0000001300)="b963c4b36a4cb3cd2c135b488e74751b747561c08105ab9a1269e9bc15179660760d766e729d6d738ef31eb264b0ffa380bf5f3c5469f75fe229c90f79f91488f53527807997c27d58f17fa3f69809f3f9ce04475c98523de0a724ac476db1257dfe695e7b878b1a4f9b1f96cf51f18fca321d0f66702b55c80857ebdcf18ed281ff3e09089cb4c88d60d12e3d986838a3c5ce7fdc6256abf0d0503084c38ca85b708e6e6ee47efbfca0c4", 0xab}], 0x6, &(0x7f0000001680)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {r7, r9, r10}}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r17}}}], 0x78, 0x884}}], 0x4, 0x20000800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4002, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000000000000000000039ba10dacdd19af1"], &(0x7f0000000100)='GPL\x00', 0x4, 0xd2, &(0x7f00000002c0)=""/210}, 0x90) (async) socket$netlink(0x10, 0x3, 0xf) 976.389141ms ago: executing program 2 (id=333): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) close(r5) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x3, 0x2d, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r6}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000080)={r6, &(0x7f0000000040)}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000080)={r6, &(0x7f0000000040)}, 0x20) sendmmsg(r2, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="ab83648ffae6eb6995f0f50c00c10ea3a7189b95eb224b3cbb7a3b02d78419804d882749627da1410aae6a67a39fb9cddf794b9380c49a30b9b1f10618ff90edc792bb26f3683ce4fc30d2c2aeae7aad0a279be1b476f4d6"}]}}], 0x400000000000026, 0x0) (async) sendmmsg(r2, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="ab83648ffae6eb6995f0f50c00c10ea3a7189b95eb224b3cbb7a3b02d78419804d882749627da1410aae6a67a39fb9cddf794b9380c49a30b9b1f10618ff90edc792bb26f3683ce4fc30d2c2aeae7aad0a279be1b476f4d6"}]}}], 0x400000000000026, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = socket(0x10, 0x80002, 0x0) r8 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r8, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x24) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f00000001c0)) listen(r8, 0xffffffff) (async) listen(r8, 0xffffffff) sendmmsg$alg(r7, &(0x7f0000000180), 0x0, 0x844) 903.284537ms ago: executing program 0 (id=334): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x10, 0x2, 0x4) (async, rerun: 32) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000014006b21000000d86e6c1d0002847ea6ea6567e75110623400cdd46b44dacff32c6e020075e300250002000f00000017d34460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd00", 0x58}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0xc000) (async, rerun: 32) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="44010000100001000000000000000000fe800000000000000000000000000000ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0100000000000000000000000000000000000032000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c2900"/233, @ANYRES32], 0x144}}, 0x0) socket$kcm(0x29, 0x0, 0x0) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002600), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000a8db843bfc953a816119229d34f3c9d46fcf7c394083cfe8e2111f0a39d2090458d4c007de53a8e0b6f0dc4be39e8c043066750f1e4675dab0aaf2b28200a00fa5a35b84d30e434a6877052b0e91efbb9c5429582a113387b9015231bf98d3bf57cb1d6632b931adfb2fd44a2798bfc2ec", @ANYRES16=r1, @ANYBLOB="210f28bd7000fcdbdf251c0000000c0006000100000001000000"], 0x20}, 0x1, 0x0, 0x0, 0x40085}, 0x24008840) (async) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3e04000040ee0511d25a80648c08000d0324fc60040035400c0002000200002037153ea00c040180060410004550", 0x2e}, {&(0x7f0000000a40)="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", 0x407}], 0x2}, 0x0) (async) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000080)=0x1, &(0x7f0000000100)=0x4) 713.810036ms ago: executing program 0 (id=335): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100e0442}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, 0x1, 0x1, 0x401, 0x0, 0x0, {0xd, 0x0, 0x1}, [@CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x10}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x936}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x9}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x4b}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x110}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x1}]}, @CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0xc, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x10}]}}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000850) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x14, 0x3, 0x8, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x24000084}, 0x84) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) write$tun(r3, &(0x7f0000000880)={@val={0x0, 0x18}, @val={0x3, 0x1, 0x3, 0xffdf, 0xc4, 0x10}, @mpls={[], @ipv6=@dccp_packet={0x0, 0x6, "a057a2", 0xb0, 0x21, 0x0, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[], {{0x4e21, 0x4e21, 0x4, 0x1, 0xd, 0x0, 0x0, 0x9, 0x0, "99e0a2", 0x6, "62aa26"}, "a2c19499501ce6ec38ffc380b39e7ec54e2de359b35febd551123ddf4aaf823259d065564684b1431e4d9745323b06ddc496405007bb0d00043ae2e832815bec7e2a25981882e27fc4a957b405c23c8292f23f2db0b77edd6dd1720a1b60408c8c909c55f74279472bd512ad730eeb8ac8e008f73e32c4bbf970702bf500545592a8cfff8d00caa0b29ec85f1f14ffa41357df006206cfd9fd8ca9ad47691a11"}}}}}, 0xe6) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000580)=0x0) sendmsg$NFC_CMD_SE_IO(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)={0x28, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_SE_APDU={0x4}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 632.269321ms ago: executing program 4 (id=336): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r6, @ANYBLOB="0800250000000040080002"], 0x3c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r5, 0x101, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x8f20000, 0x6}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf9f}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xc8d}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x9d3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xcd5}]}, 0x58}, 0x1, 0x0, 0x0, 0x814}, 0x4000004) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002e80), r8) sendmsg$NLBL_CIPSOV4_C_REMOVE(r8, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x1c, r9, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000840) r10 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r2}, 0x14) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@cgroup, 0x33, 0x0, 0x2, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="210000000420000000000000", @ANYRES32=r10, @ANYBLOB="946f3636365fd98d1adbc2830f99ababd6fb3c90951e1fbeafe22a5c52820fc9c8", @ANYRES64=r11], 0x20) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b040000000000000000020000002800048024000180090001006d6574610000000014000280080001400000000008000240000000180900010073797a30000000000900020073797a3200"], 0x7c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), r8) 608.68058ms ago: executing program 1 (id=337): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x5f5e0ff}, @fwd={0x3, 0x2}]}, {0x0, [0x0, 0x0, 0x2e]}}, &(0x7f0000000f40)=""/4096, 0x35, 0x1000, 0xa}, 0x20) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, r0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, r0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 578.121896ms ago: executing program 3 (id=338): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r2) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x20, 0x17, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000002a00)=ANY=[@ANYBLOB="180200000000000000000000000000008500000018000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000027c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000002700)="e0b9547ed387dbe9abc86f5b7de8", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000400)={&(0x7f0000000280), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, 0x8, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x2}, 0x4040011) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$phonet(0x23, 0x2, 0x1) r6 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000007c0)={{{@in=@multicast2, @in6=@remote, 0x80, 0x0, 0x0, 0x81, 0x2, 0x0, 0x20, 0x2f, 0x0, 0xee01}, {0x0, 0x200000000, 0x40000000007, 0xa000, 0x40000000000004, 0x2, 0x200000003, 0x400}, {0x5, 0x1, 0x800}, 0xfffffff4, 0x0, 0x1, 0x1, 0x3, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x40}, 0x4d2, 0x6c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x21}, 0x3502, 0x1, 0x2, 0x0, 0x9075}}, 0xe8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1c) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250301f2800c00180008ac0f00000000001400010000000000000000000000ffffac14141650bb2d6f67d29d6fabadf107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcac74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be0400e90000"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) close(r5) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x2e0, 0x0, 0x0, 0x148, 0x0, 0x148, 0x248, 0x240, 0x240, 0x248, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0xffffffff, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0xfffffffc, 0xed, 0x7, 0x0, 0x78}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@multicast1, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3}, 0x0, 0xc8, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x4, 0x0, 0x3, 0x1, 0x1}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x17d9d65ca8f0eaa1, 0x7ff, 0x9, 0x7a2, 'netbios-ns\x00', 'syz0\x00', {0x8001}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x340) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="84010000100013070000000000000000fc0200c7000000000000000000000000e000000000000000009700001000000000000000000000000000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC=r8], 0x184}}, 0x40000c0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @empty, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @remote}}}}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r9, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 424.393419ms ago: executing program 2 (id=339): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x2000004) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x48090) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000003a000b0026747000ffdbdf2512"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8010) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x18, r3, 0x1, 0x70bd28, 0x0, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x240280d0}, 0x2000c890) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x14c, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0xe4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x51}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10}]}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc19}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x400c0}, 0x4) 384.033053ms ago: executing program 1 (id=340): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r5, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) connect$inet(r4, &(0x7f0000000400)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) listen(r5, 0x7fffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="030300000000000000000600000008000300", @ANYRES32=r3], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xafda, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x2}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x3}]}, &(0x7f0000000140)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r0, 0xffffffffffffffff, r0, r0], 0x0, 0x10, 0x80000001}, 0x94) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0e00000004000000040000000100000200000000", @ANYRES8=r8, @ANYBLOB="f4ffffffffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000000680)={{r9}, &(0x7f0000000540), 0x0}, 0x20) r10 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r9, &(0x7f0000000000)="1938747486e863e3c292c3d3a42bc5abebd53f9a0b1828aceb8f508915aa4007c980f92e56fe5400bfd050c35d8111887013a406fb0ffbdd414bcca504a2da754ce7cdae", &(0x7f0000000080)=@udp=r10}, 0x20) 337.561085ms ago: executing program 0 (id=341): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000380)='blkio.bfq.time_recursive\x00', 0x0, 0x0) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0xffffffff) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x4c, r5, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x1, 0x13}}}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0xfffffff8}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xff1}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xfffe}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0xc7}]}, 0x4c}}, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r2, &(0x7f0000001240)=ANY=[@ANYBLOB="000086dd0000120000000000000060fc03000f982c00fe8000000000000000000000000000aaff02000000000000000000000000000188"], 0xfce) (async) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r10 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)="a17abd7c18cf849b288a9ccf2f6cd01576a60e6a75d6095b906da81195ee210632ff5cdbe4df675c43a84cd27a40c1d374c2dd354d30bcd60c2a2b860f008238d717d6cf0b4e0ac29adfbbbc393abeb74c65354f", 0x0, 0x800}, 0x38) (async) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r12 = socket$igmp6(0xa, 0x3, 0x2) (async) r13 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r12, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) (async) write$tun(r11, &(0x7f0000000100)=ANY=[@ANYRES8=r4], 0x72) sendmsg$NL80211_CMD_JOIN_OCB(r10, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004800}, 0x20000000) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYRESDEC=r9], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 116.332753ms ago: executing program 2 (id=342): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x4001, 0x3, 0x430, 0x300, 0xb, 0x148, 0x0, 0x148, 0x398, 0x230, 0x242, 0x398, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00', {}, {}, 0x73}, 0x0, 0x2d0, 0x300, 0x0, {0xff0f000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x8}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0xe, 0x0, 0x6, './file0\x00'}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x6}, 0x0, 0x1}}}, {{@uncond, 0xec010000, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x80000001}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) r2 = accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) r4 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r5 = gettid() r6 = gettid() r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r8, 0x301, 0x70bd2c, 0x5, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x20040004) r10 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x7c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x80}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xc668, 0x4b}}}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x25}, @NL80211_ATTR_PID={0x8, 0x52, r5}, @NL80211_ATTR_PID={0x8, 0x52, r6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x8000000f}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x62}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x61}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r10}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x20048050) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00084301000000000000006819ef4748a9000000000000d89513f9b1276fd469217caf9aaf0bbf224c4c8e85543de9dcafbf19786622ce407d409559930f491dfca696172e79402fae4658c401f03e0c907ee579a355ef28fa4a98d1a6bb8e35a791c11ee8249de9e81b7e8ae86f1f0e497277603a332d8fe0b3c53472833fab4c3264741e084674a31151", @ANYRES32=r0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 91.474333ms ago: executing program 3 (id=343): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000b00)=""/55, 0x37}, {0x0, 0x38}], 0x2}}], 0x2, 0x10002, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x4}, 0xe) sendmmsg$sock(r1, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000200)=0x1000000000003b) shutdown(r4, 0x2) socket$netlink(0x10, 0x3, 0x4) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001e008d2a00000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000803028"], 0x30}}, 0x0) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) 75.092262ms ago: executing program 0 (id=344): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="000008000100000000003d0000004600004000000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b4000000907800040a0300050200000000000000000002d58838068bf1bf2f76"], 0x4e) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x47c0a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x4}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000068000100000000000000000000000000000000001c0002000000000000000000020000000000b45cbe"], 0x34}}, 0x0) 74.040814ms ago: executing program 2 (id=345): r0 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x4, 0x1}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) socket$kcm(0x29, 0xf, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000000)={0x3b, @remote, 0x4e23, 0x3, 'sh\x00', 0x36, 0x3, 0x30}, 0x2c) 0s ago: executing program 4 (id=346): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3b, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000173cadf701fceffffffddbdf25cc3a75b8875e78f11ad0b09becabf5aeb123ee747cfac6041e96e6c3de8df0613d88f783581e7a56153abecc27c873b3d629d6fad3ec54eb5a56d09b16760aebc0c037954f181a178f9468b40000"], 0x14}, 0x1, 0x0, 0x0, 0x488c0}, 0xc050) socket$kcm(0x2, 0x3, 0x2) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r2, 0x200000000114, 0x2715, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d800", 0x2}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfe33) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x120}, 0xc, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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", @ANYRES16=r6, @ANYBLOB="21052cbd7000ffdbdf250300000006000a004e21000006000a004e230000"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x800) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x4e}, 0x20) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) r9 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x328, 0x190, 0xffffffff, 0xffffffff, 0x190, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @private0, [0xff, 0x0, 0xff000000], [0x0, 0x0, 0x0, 0xff000000], 'wlan0\x00', 'veth0_to_team\x00', {0xff}, {}, 0x2c, 0xc7, 0x6, 0x61}, 0x0, 0x168, 0x190, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d6], 0x8, 0xe, 0x2}}, @common=@srh1={{0x90}, {0x3a, 0x2, 0xf, 0x0, 0x9, @private1, @ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0xd}, [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], [0xff000000, 0xff, 0xffffff00, 0xff], [0xffffffff, 0xffffffff, 0x0, 0xffffff00], 0x13a8, 0x1e8}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x2, 0x4, 0x6}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x388) socketpair(0x2b, 0x2, 0x101, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_SERVICES(r10, 0x0, 0x482, &(0x7f0000000840)=""/128, &(0x7f00000008c0)=0x80) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a80)=ANY=[@ANYRES32=r10, @ANYRES32=r1, @ANYBLOB="100000000020000000008804", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newqdisc={0xa0, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x1}, {0x3, 0xffff}}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x9, 0x6, 0xa000, 0x0, 0x0, 0x3, 0x8}}, {0x14, 0x2, [0xc47c, 0x1, 0x9f, 0x5, 0x8, 0x8, 0x3, 0x7]}}, {{0x1c, 0x1, {0x9, 0x81, 0x8, 0x6, 0x2, 0x101, 0x3, 0x1}}, {0x6, 0x2, [0x6]}}, {{0x1c, 0x1, {0x3, 0xad, 0x6, 0xfff, 0x1, 0x3, 0x4, 0x2}}, {0x8, 0x2, [0xbb74, 0x3ff]}}]}]}, 0xa0}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.145' (ED25519) to the list of known hosts. [ 66.230446][ T5812] cgroup: Unknown subsys name 'net' [ 66.347612][ T5812] cgroup: Unknown subsys name 'cpuset' [ 66.356203][ T5812] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.712722][ T5812] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.364924][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.371369][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.827328][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.837061][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.845859][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.854579][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.862445][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.870785][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.879199][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.913217][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.934513][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.934697][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.942827][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.951004][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.956259][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.963026][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.971901][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.978245][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.986128][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.992078][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.005272][ T5150] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.005332][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.013641][ T5150] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.027182][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.030719][ T5150] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.044332][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.055546][ T5150] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.585564][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 72.647297][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 72.735719][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 72.881119][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 72.945902][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.953703][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.962112][ T5823] bridge_slave_0: entered allmulticast mode [ 72.970814][ T5823] bridge_slave_0: entered promiscuous mode [ 72.980901][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.988125][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.996006][ T5823] bridge_slave_1: entered allmulticast mode [ 73.002933][ T5823] bridge_slave_1: entered promiscuous mode [ 73.061808][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.069317][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.076591][ T5827] bridge_slave_0: entered allmulticast mode [ 73.083545][ T5827] bridge_slave_0: entered promiscuous mode [ 73.135032][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.145305][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.152651][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.159957][ T5827] bridge_slave_1: entered allmulticast mode [ 73.167270][ T5827] bridge_slave_1: entered promiscuous mode [ 73.202155][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 73.216525][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.241935][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.249449][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.257138][ T5836] bridge_slave_0: entered allmulticast mode [ 73.264170][ T5836] bridge_slave_0: entered promiscuous mode [ 73.290527][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.311434][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.318692][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.325984][ T5836] bridge_slave_1: entered allmulticast mode [ 73.332908][ T5836] bridge_slave_1: entered promiscuous mode [ 73.361635][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.397925][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.405531][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.412669][ T5829] bridge_slave_0: entered allmulticast mode [ 73.419959][ T5829] bridge_slave_0: entered promiscuous mode [ 73.451428][ T5823] team0: Port device team_slave_0 added [ 73.469557][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.476984][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.484242][ T5829] bridge_slave_1: entered allmulticast mode [ 73.491176][ T5829] bridge_slave_1: entered promiscuous mode [ 73.515521][ T5823] team0: Port device team_slave_1 added [ 73.523131][ T5827] team0: Port device team_slave_0 added [ 73.543000][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.562193][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.589504][ T5827] team0: Port device team_slave_1 added [ 73.615307][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.683629][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.706621][ T5836] team0: Port device team_slave_0 added [ 73.713409][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.720532][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.747050][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.759395][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.766665][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.792870][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.828141][ T5836] team0: Port device team_slave_1 added [ 73.839092][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.846455][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.873150][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.892584][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.899771][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.926318][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.935006][ T5150] Bluetooth: hci1: command tx timeout [ 73.943857][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.951309][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.959050][ T5824] bridge_slave_0: entered allmulticast mode [ 73.966222][ T5824] bridge_slave_0: entered promiscuous mode [ 74.012071][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.019183][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.045953][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.058354][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.065359][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.091355][ T5150] Bluetooth: hci2: command tx timeout [ 74.096823][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.104920][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.114692][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.121914][ T5824] bridge_slave_1: entered allmulticast mode [ 74.129036][ T5824] bridge_slave_1: entered promiscuous mode [ 74.136799][ T5829] team0: Port device team_slave_0 added [ 74.145131][ T5829] team0: Port device team_slave_1 added [ 74.154034][ T5150] Bluetooth: hci3: command tx timeout [ 74.154087][ T5835] Bluetooth: hci0: command tx timeout [ 74.159707][ T5150] Bluetooth: hci4: command tx timeout [ 74.245128][ T5823] hsr_slave_0: entered promiscuous mode [ 74.251484][ T5823] hsr_slave_1: entered promiscuous mode [ 74.269438][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.276745][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.302714][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.334188][ T5827] hsr_slave_0: entered promiscuous mode [ 74.340787][ T5827] hsr_slave_1: entered promiscuous mode [ 74.347194][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 74.352999][ T5827] Cannot create hsr debugfs directory [ 74.375283][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.385197][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.392138][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.418358][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.459471][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.537427][ T5836] hsr_slave_0: entered promiscuous mode [ 74.543619][ T5836] hsr_slave_1: entered promiscuous mode [ 74.550270][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 74.556143][ T5836] Cannot create hsr debugfs directory [ 74.586622][ T5824] team0: Port device team_slave_0 added [ 74.622926][ T5824] team0: Port device team_slave_1 added [ 74.726318][ T5829] hsr_slave_0: entered promiscuous mode [ 74.732875][ T5829] hsr_slave_1: entered promiscuous mode [ 74.739117][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 74.744890][ T5829] Cannot create hsr debugfs directory [ 74.757331][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.764408][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.790487][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.803386][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.810446][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.836490][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.952939][ T5824] hsr_slave_0: entered promiscuous mode [ 74.959618][ T5824] hsr_slave_1: entered promiscuous mode [ 74.966154][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 74.971883][ T5824] Cannot create hsr debugfs directory [ 75.249449][ T5823] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.284720][ T5823] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.317297][ T5823] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.343196][ T5823] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.412559][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.424947][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.435780][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.457358][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.541452][ T5836] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.553923][ T5836] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.581955][ T5836] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.592772][ T5836] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.690272][ T5829] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.701115][ T5829] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.712349][ T5829] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.723471][ T5829] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.772644][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.853274][ T5824] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.866160][ T5824] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.877477][ T5824] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.887441][ T5824] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.909057][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.956236][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.966206][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.973393][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.994476][ T5150] Bluetooth: hci1: command tx timeout [ 76.009858][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.017049][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.099966][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.126082][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.133219][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.154147][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.165486][ T5150] Bluetooth: hci2: command tx timeout [ 76.189761][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.196934][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.210079][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.226465][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.233602][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.241156][ T5150] Bluetooth: hci0: command tx timeout [ 76.241463][ T5835] Bluetooth: hci3: command tx timeout [ 76.250025][ T5150] Bluetooth: hci4: command tx timeout [ 76.283924][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.291080][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.410338][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.448276][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.491399][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.549427][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.556682][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.581618][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.600250][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.607443][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.687622][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.694834][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.739341][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.746519][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.811154][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.855900][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.915497][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.961725][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.109696][ T5823] veth0_vlan: entered promiscuous mode [ 77.170592][ T5823] veth1_vlan: entered promiscuous mode [ 77.186636][ T5827] veth0_vlan: entered promiscuous mode [ 77.197725][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.208550][ T5836] veth0_vlan: entered promiscuous mode [ 77.222716][ T5827] veth1_vlan: entered promiscuous mode [ 77.266948][ T5836] veth1_vlan: entered promiscuous mode [ 77.359423][ T5827] veth0_macvtap: entered promiscuous mode [ 77.379776][ T5823] veth0_macvtap: entered promiscuous mode [ 77.399888][ T5836] veth0_macvtap: entered promiscuous mode [ 77.416344][ T5823] veth1_macvtap: entered promiscuous mode [ 77.427654][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.455422][ T5827] veth1_macvtap: entered promiscuous mode [ 77.466811][ T5836] veth1_macvtap: entered promiscuous mode [ 77.520238][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.538756][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.557418][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.580504][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.591901][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.617051][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.640979][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.651386][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.688296][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.708170][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.717493][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.740399][ T5824] veth0_vlan: entered promiscuous mode [ 77.750989][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.782985][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.791888][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.816661][ T5824] veth1_vlan: entered promiscuous mode [ 77.843700][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.853485][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.863564][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.893646][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.968757][ T5829] veth0_vlan: entered promiscuous mode [ 77.982553][ T5829] veth1_vlan: entered promiscuous mode [ 77.993120][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.008048][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.008281][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.044571][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.063158][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.072189][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.081727][ T5150] Bluetooth: hci1: command tx timeout [ 78.104191][ T5824] veth0_macvtap: entered promiscuous mode [ 78.150350][ T5824] veth1_macvtap: entered promiscuous mode [ 78.160999][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.171640][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.180714][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.183494][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.234757][ T5150] Bluetooth: hci2: command tx timeout [ 78.275663][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.279558][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 78.290493][ T5829] veth0_macvtap: entered promiscuous mode [ 78.310465][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.318975][ T5150] Bluetooth: hci3: command tx timeout [ 78.319049][ T5835] Bluetooth: hci0: command tx timeout [ 78.324433][ T5150] Bluetooth: hci4: command tx timeout [ 78.339339][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.361615][ T5829] veth1_macvtap: entered promiscuous mode [ 78.393630][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.429940][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.489416][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.520008][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.575025][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.575211][ T5942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 78.595963][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.640078][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.694401][ T79] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.730535][ T79] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.755116][ T79] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.781710][ T5946] bridge0: port 3(syz_tun) entered blocking state [ 78.788636][ T5950] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.791106][ T5950] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 78.809889][ T5946] bridge0: port 3(syz_tun) entered disabled state [ 78.819951][ T5946] syz_tun: entered allmulticast mode [ 78.835253][ T5950] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 78.835515][ T5946] syz_tun: entered promiscuous mode [ 78.842126][ T5950] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 78.854065][ T5950] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 78.854922][ T5946] bridge0: port 3(syz_tun) entered blocking state [ 78.860858][ T5950] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 78.867497][ T5946] bridge0: port 3(syz_tun) entered forwarding state [ 78.874328][ T5950] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 78.887621][ T5950] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 78.894452][ T5950] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 78.901287][ T5950] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 78.908150][ T5950] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 79.364083][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.379207][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.388828][ T5957] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 79.408405][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.445020][ T5959] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 79.463570][ T5959] bond1: (slave lo): Enslaving as a backup interface with an up link [ 79.604731][ T5946] tipc: Started in network mode [ 79.609722][ T5946] tipc: Node identity aaaaaaaaaa1f, cluster identity 4711 [ 79.624811][ T5946] tipc: Enabled bearer , priority 10 [ 79.777745][ T5967] netlink: 14544 bytes leftover after parsing attributes in process `syz.2.11'. [ 79.801117][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.819383][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.846235][ T5973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10'. [ 79.898596][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.916003][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.010478][ T5981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12'. [ 80.152243][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.168546][ T5835] Bluetooth: hci1: command tx timeout [ 80.184010][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.324342][ T5835] Bluetooth: hci2: command tx timeout [ 80.394118][ T5835] Bluetooth: hci4: command tx timeout [ 80.399735][ T5835] Bluetooth: hci3: command tx timeout [ 80.405672][ T5828] Bluetooth: hci0: command tx timeout [ 80.461916][ T89] IPVS: starting estimator thread 0... [ 80.575638][ T5998] IPVS: using max 25 ests per chain, 60000 per kthread [ 80.626784][ T5900] tipc: Node number set to 11905706 [ 80.671717][ T6003] netlink: 'syz.4.18': attribute type 12 has an invalid length. [ 80.920436][ T6007] bond1 (unregistering): Released all slaves [ 81.145954][ T6027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.24'. [ 81.379071][ T6035] tipc: Started in network mode [ 81.385599][ T6035] tipc: Node identity 8edb23a80f7e, cluster identity 4711 [ 81.392927][ T6035] tipc: Enabled bearer , priority 0 [ 81.421529][ T6034] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1500) ! [ 81.438776][ T6035] tipc: Disabling bearer [ 81.902784][ T6061] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.166729][ T6078] ksmbd: Unknown IPC event: 8, ignore. [ 82.196896][ T6080] netlink: 128 bytes leftover after parsing attributes in process `syz.1.36'. [ 82.221034][ T6080] netlink: 60 bytes leftover after parsing attributes in process `syz.1.36'. [ 82.459766][ T6080] bond1: option mode: invalid value (8) [ 82.471223][ T6091] xt_CT: You must specify a L4 protocol and not use inversions on it [ 82.515828][ T6080] bond1 (unregistering): Released all slaves [ 82.623569][ T6101] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 82.998741][ T6115] netlink: 12 bytes leftover after parsing attributes in process `syz.3.44'. [ 83.055280][ T6115] bond1: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 83.070372][ T6115] bond1 (unregistering): Released all slaves [ 83.131139][ T6133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.46'. [ 83.155492][ T6133] netlink: 12 bytes leftover after parsing attributes in process `syz.2.46'. [ 83.413312][ T6150] syz.4.51 uses obsolete (PF_INET,SOCK_PACKET) [ 83.556027][ T6158] netlink: 'syz.1.53': attribute type 10 has an invalid length. [ 84.101082][ T6168] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 84.165864][ T6168] Zero length message leads to an empty skb [ 84.491868][ T6187] net_ratelimit: 3321 callbacks suppressed [ 84.491890][ T6187] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 84.520180][ T6187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.529127][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.564690][ T6193] __nla_validate_parse: 3 callbacks suppressed [ 84.564707][ T6193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.66'. [ 84.571757][ T6187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.584527][ T6193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.66'. [ 84.588111][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.598814][ T6193] netlink: 'syz.2.66': attribute type 1 has an invalid length. [ 84.614577][ T6190] netlink: 'syz.3.64': attribute type 4 has an invalid length. [ 84.622464][ T6187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.630932][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.872993][ T6205] netlink: 'syz.3.69': attribute type 1 has an invalid length. [ 85.119941][ T6216] netlink: 12 bytes leftover after parsing attributes in process `syz.3.72'. [ 85.203716][ T6216] netlink: 'syz.3.72': attribute type 2 has an invalid length. [ 85.272629][ T6216] : entered promiscuous mode [ 85.280505][ T6226] netlink: 12 bytes leftover after parsing attributes in process `syz.1.73'. [ 85.764368][ T6251] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.82'. [ 86.407242][ T6291] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.94'. [ 86.495922][ T6296] netlink: 44 bytes leftover after parsing attributes in process `syz.0.95'. [ 86.517972][ T6297] netlink: 4 bytes leftover after parsing attributes in process `syz.0.95'. [ 86.518425][ T6296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.95'. [ 86.608504][ T6303] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 86.639252][ T6306] openvswitch: netlink: Flow actions attr not present in new flow. [ 86.723573][ T9] cfg80211: failed to load regulatory.db [ 86.883694][ T6316] netlink: 'syz.1.100': attribute type 16 has an invalid length. [ 86.892007][ T6315] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.102'. [ 86.903064][ T6311] netlink: 'syz.0.101': attribute type 4 has an invalid length. [ 86.923640][ T6319] netlink: 'syz.3.103': attribute type 11 has an invalid length. [ 86.957350][ T6311] netlink: 'syz.0.101': attribute type 4 has an invalid length. [ 87.257932][ T6329] openvswitch: netlink: nsh attribute has 65276 unknown bytes. [ 87.359686][ T6337] tipc: Started in network mode [ 87.371265][ T6337] tipc: Node identity e67ea659dce8, cluster identity 4711 [ 87.379966][ T6337] tipc: Enabled bearer , priority 0 [ 87.407928][ T6337] syzkaller0: entered promiscuous mode [ 87.418054][ T6337] syzkaller0: entered allmulticast mode [ 87.512250][ T6337] tipc: Resetting bearer [ 87.591027][ T6336] tipc: Resetting bearer [ 87.641276][ T6336] tipc: Disabling bearer [ 87.689283][ T6360] syzkaller1: entered promiscuous mode [ 87.695623][ T6360] syzkaller1: entered allmulticast mode [ 87.919961][ T6370] xt_hashlimit: size too large, truncated to 1048576 [ 88.580801][ T6414] trusted_key: syz.0.127 sent an empty control message without MSG_MORE. [ 88.626407][ T6415] netlink: 'syz.1.128': attribute type 17 has an invalid length. [ 88.664197][ T6415] gretap0: entered promiscuous mode [ 88.717810][ T6415] gretap0: left promiscuous mode [ 88.882650][ T6427] gre0: entered promiscuous mode [ 89.209488][ T6442] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 89.559719][ T6466] Bluetooth: MGMT ver 1.23 [ 89.786000][ T6481] __nla_validate_parse: 13 callbacks suppressed [ 89.786019][ T6481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.147'. [ 89.793094][ T6484] netlink: 12 bytes leftover after parsing attributes in process `syz.2.148'. [ 89.826824][ T6485] xt_hashlimit: size too large, truncated to 1048576 [ 89.846777][ T6481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.147'. [ 89.868555][ T36] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.879241][ T36] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.929661][ T36] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.948626][ T36] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.109453][ T6496] warning: `syz.3.153' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 90.575112][ T6514] netlink: 36 bytes leftover after parsing attributes in process `syz.0.160'. [ 90.599210][ T6518] netlink: 'syz.2.162': attribute type 2 has an invalid length. [ 90.631637][ T6518] 9: entered promiscuous mode [ 90.718199][ T6522] netlink: 12 bytes leftover after parsing attributes in process `syz.0.163'. [ 90.759840][ T6524] netlink: 56 bytes leftover after parsing attributes in process `syz.3.165'. [ 90.809505][ T6524] bond1 (unregistering): Released all slaves [ 90.854893][ T6532] net_ratelimit: 1 callbacks suppressed [ 90.854910][ T6532] IPv6: addrconf: prefix option has invalid lifetime [ 90.876938][ T6532] netlink: 20 bytes leftover after parsing attributes in process `syz.4.167'. [ 91.067109][ T6537] netlink: 16 bytes leftover after parsing attributes in process `syz.2.169'. [ 91.073706][ T6540] tipc: Started in network mode [ 91.076864][ T6537] netlink: 20 bytes leftover after parsing attributes in process `syz.2.169'. [ 91.081144][ T6540] tipc: Node identity , cluster identity 4711 [ 91.097214][ T6540] tipc: Failed to obtain node identity [ 91.102709][ T6540] tipc: Enabling of bearer rejected, failed to enable media [ 91.250200][ T6544] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.171'. [ 91.345891][ T6549] netlink: 'syz.4.174': attribute type 39 has an invalid length. [ 91.638424][ T6559] tipc: Enabled bearer , priority 0 [ 91.649001][ T6559] syzkaller0: entered promiscuous mode [ 91.654615][ T6559] syzkaller0: entered allmulticast mode [ 91.662020][ T6564] tipc: Started in network mode [ 91.668982][ T6564] tipc: Node identity 7eb57ae0bce3, cluster identity 4711 [ 91.677261][ T6564] tipc: Enabled bearer , priority 0 [ 91.685494][ T6564] syzkaller0: entered allmulticast mode [ 91.694509][ T6564] netlink: 'syz.0.180': attribute type 21 has an invalid length. [ 91.708835][ T6558] tipc: Resetting bearer [ 91.749945][ T6558] tipc: Disabling bearer [ 91.775101][ T6564] tipc: Resetting bearer [ 91.846200][ T6564] gtp1: entered promiscuous mode [ 91.855988][ T6564] gtp1: entered allmulticast mode [ 91.886072][ T6563] tipc: Resetting bearer [ 91.921751][ T6563] tipc: Disabling bearer [ 92.664468][ T6619] tipc: Started in network mode [ 92.670958][ T6619] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 92.689640][ T6619] tipc: New replicast peer: fc00:0000:0000:0000:0000:0000:0000:0000 [ 92.733960][ T6619] tipc: Enabled bearer , priority 10 [ 92.754353][ T6622] syz_tun: entered allmulticast mode [ 92.773289][ T6617] syz_tun: left allmulticast mode [ 92.922812][ T6633] bond2: Invalid ad_actor_system MAC address. [ 92.930133][ T6633] bond2: option ad_actor_system: invalid value (1) [ 92.951826][ T6633] bond2 (unregistering): Released all slaves [ 93.053848][ T6636] netlink: 'syz.1.201': attribute type 16 has an invalid length. [ 93.259275][ T6646] vlan2: entered promiscuous mode [ 93.274651][ T6646] vlan2: entered allmulticast mode [ 93.279908][ T6646] hsr_slave_1: entered allmulticast mode [ 93.723965][ T856] tipc: Node number set to 1 [ 93.752494][ T6671] netlink: 'syz.4.211': attribute type 29 has an invalid length. [ 93.810294][ T6674] netlink: 'syz.4.211': attribute type 29 has an invalid length. [ 94.318736][ T6687] x_tables: duplicate underflow at hook 1 [ 94.490540][ T6702] openvswitch: netlink: Flow key attr not present in new flow. [ 94.501673][ T6703] tipc: Enabling of bearer rejected, failed to enable media [ 94.523772][ T6703] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 94.538779][ T6702] syzkaller0: entered promiscuous mode [ 94.547109][ T6702] syzkaller0: entered allmulticast mode [ 94.674900][ T6702] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 94.865834][ T6721] ieee802154 phy0 wpan0: encryption failed: -22 [ 95.104579][ T6734] __nla_validate_parse: 13 callbacks suppressed [ 95.104597][ T6734] netlink: 40 bytes leftover after parsing attributes in process `syz.3.231'. [ 95.131776][ T6734] netlink: 40 bytes leftover after parsing attributes in process `syz.3.231'. [ 95.275256][ T6735] netlink: 24 bytes leftover after parsing attributes in process `syz.2.232'. [ 95.285235][ T6735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.232'. [ 95.384627][ T6735] bridge0: entered promiscuous mode [ 95.385370][ T6754] netlink: 'syz.4.234': attribute type 62 has an invalid length. [ 95.390342][ T6735] macsec1: entered promiscuous mode [ 95.464652][ T6735] macsec1: entered allmulticast mode [ 95.487639][ T6735] bridge0: entered allmulticast mode [ 95.499927][ T6776] Bluetooth: MGMT ver 1.23 [ 95.506227][ T6735] bridge0: port 3(macsec1) entered blocking state [ 95.528177][ T6735] bridge0: port 3(macsec1) entered disabled state [ 95.556467][ T6735] bridge0: left allmulticast mode [ 95.562026][ T6735] bridge0: left promiscuous mode [ 95.877306][ T6782] bond2: option resend_igmp: invalid value (32767) [ 95.904468][ T6782] bond2: option resend_igmp: allowed values 0 - 255 [ 95.928412][ T6782] bond2 (unregistering): Released all slaves [ 96.322043][ T6808] syzkaller0: entered promiscuous mode [ 96.349006][ T6808] syzkaller0: entered allmulticast mode [ 96.597762][ T6824] netlink: 12 bytes leftover after parsing attributes in process `syz.4.251'. [ 96.627329][ T6824] netlink: 12 bytes leftover after parsing attributes in process `syz.4.251'. [ 97.609467][ T6832] bridge1: entered promiscuous mode [ 97.615359][ T6832] bridge1: entered allmulticast mode [ 97.623328][ T6832] team0: Port device bridge1 added [ 97.630325][ T6834] bridge0: port 4(team0) entered blocking state [ 97.648641][ T6834] bridge0: port 4(team0) entered disabled state [ 97.679710][ T6834] team0: entered allmulticast mode [ 97.694627][ T6834] team_slave_0: entered allmulticast mode [ 97.711876][ T6834] team_slave_1: entered allmulticast mode [ 97.720169][ T6834] team0: entered promiscuous mode [ 97.728019][ T6834] team_slave_0: entered promiscuous mode [ 97.735632][ T6834] team_slave_1: entered promiscuous mode [ 97.743244][ T6834] bridge0: port 4(team0) entered blocking state [ 97.749728][ T6834] bridge0: port 4(team0) entered forwarding state [ 97.799052][ T6840] netlink: 'syz.4.256': attribute type 13 has an invalid length. [ 97.822826][ T6840] netlink: 'syz.4.256': attribute type 17 has an invalid length. [ 97.929297][ T6840] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 98.147194][ T6861] netlink: 'syz.4.260': attribute type 1 has an invalid length. [ 98.163537][ T6863] ieee802154 phy0 wpan0: encryption failed: -22 [ 98.231807][ T6863] ieee802154 phy0 wpan0: encryption failed: -22 [ 98.595623][ T6886] can: request_module (can-proto-0) failed. [ 98.662169][ T6894] xt_cgroup: invalid path, errno=-2 [ 98.667929][ T6894] netlink: 56 bytes leftover after parsing attributes in process `syz.2.271'. [ 98.798708][ T6894] bond2: (slave ip_vti0): Device is not bonding slave [ 98.808264][ T6894] bond2: option active_slave: invalid value (ip_vti0) [ 98.819501][ T6894] bond2 (unregistering): Released all slaves [ 99.103199][ T6917] netlink: 'syz.4.275': attribute type 21 has an invalid length. [ 99.160049][ T6917] netlink: 132 bytes leftover after parsing attributes in process `syz.4.275'. [ 99.417531][ T6935] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 99.448059][ T6941] netlink: 19 bytes leftover after parsing attributes in process `syz.3.281'. [ 99.497082][ T6941] bridge2: entered promiscuous mode [ 99.517729][ T6941] bridge2: entered allmulticast mode [ 99.926962][ T6963] tipc: Enabled bearer , priority 0 [ 99.988902][ T6975] syzkaller0: entered promiscuous mode [ 100.014145][ T6967] netlink: 44 bytes leftover after parsing attributes in process `syz.1.288'. [ 100.041117][ T6975] syzkaller0: entered allmulticast mode [ 100.205975][ T6975] tipc: Resetting bearer [ 100.239357][ T6981] netlink: 'syz.2.291': attribute type 1 has an invalid length. [ 100.255705][ T6981] netlink: 'syz.2.291': attribute type 3 has an invalid length. [ 100.299807][ T6981] netlink: 172 bytes leftover after parsing attributes in process `syz.2.291'. [ 100.352769][ T6981] NCSI netlink: No device for ifindex 813332851 [ 100.561219][ T6953] tipc: Resetting bearer [ 100.656140][ T6953] tipc: Disabling bearer [ 100.904200][ T7012] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 100.974252][ T7022] netlink: 232 bytes leftover after parsing attributes in process `syz.0.301'. [ 101.245655][ T7036] netdevsim netdevsim1 v: renamed from netdevsim0 [ 101.762455][ T7060] Bluetooth: MGMT ver 1.23 [ 101.904180][ T7068] tipc: New replicast peer: 255.255.255.255 [ 101.922773][ T7068] tipc: Enabled bearer , priority 10 [ 102.040494][ T7071] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 102.132104][ T7079] netlink: 'syz.4.322': attribute type 10 has an invalid length. [ 102.173374][ T7082] netlink: 16 bytes leftover after parsing attributes in process `syz.3.321'. [ 102.204855][ T7079] bridge0: port 3(team0) entered blocking state [ 102.211449][ T7079] bridge0: port 3(team0) entered disabled state [ 102.220344][ T7079] team0: entered allmulticast mode [ 102.227334][ T7079] team_slave_0: entered allmulticast mode [ 102.240506][ T7079] team_slave_1: entered allmulticast mode [ 102.282548][ T7079] team0: entered promiscuous mode [ 102.304634][ T7079] team_slave_0: entered promiscuous mode [ 102.330006][ T7079] team_slave_1: entered promiscuous mode [ 102.362185][ T7079] bridge0: port 3(team0) entered blocking state [ 102.368795][ T7079] bridge0: port 3(team0) entered forwarding state [ 102.504720][ T7095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.328'. [ 102.585995][ T7104] xt_hashlimit: size too large, truncated to 1048576 [ 102.611047][ T7099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.327'. [ 102.614726][ T7095] syz.3.328 (7095) used greatest stack depth: 16936 bytes left [ 102.651006][ T7107] netlink: 'syz.4.330': attribute type 10 has an invalid length. [ 102.710250][ T7107] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 102.733648][ T7107] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 102.798716][ T7112] netlink: 'syz.3.331': attribute type 10 has an invalid length. [ 102.960863][ T7126] netlink: 12 bytes leftover after parsing attributes in process `syz.0.334'. [ 103.067833][ T7112] veth1_macvtap: left promiscuous mode [ 103.268620][ T7137] netlink: 'syz.4.336': attribute type 1 has an invalid length. [ 103.339682][ T7137] bond1: entered promiscuous mode [ 103.346286][ T7137] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.366178][ T7145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.338'. [ 103.411518][ T7137] netlink: 16 bytes leftover after parsing attributes in process `syz.4.336'. [ 103.413831][ T7147] netlink: 165 bytes leftover after parsing attributes in process `syz.2.339'. [ 103.486654][ T7142] netlink: 'syz.3.338': attribute type 1 has an invalid length. [ 103.497556][ T7137] bond1: (slave bridge3): making interface the new active one [ 103.506460][ T7142] netlink: 224 bytes leftover after parsing attributes in process `syz.3.338'. [ 103.516113][ T7137] bridge3: entered promiscuous mode [ 103.530507][ T7137] bridge3: left promiscuous mode [ 103.559027][ T7156] xt_hashlimit: max too large, truncated to 1048576 [ 103.666919][ T7149] netlink: 'syz.1.340': attribute type 83 has an invalid length. [ 103.692880][ T7162] xt_l2tp: v2 doesn't support IP mode [ 103.873854][ T7168] [ 103.876223][ T7168] ====================================================== [ 103.883244][ T7168] WARNING: possible circular locking dependency detected [ 103.890279][ T7168] syzkaller #0 Not tainted [ 103.894696][ T7168] ------------------------------------------------------ [ 103.901717][ T7168] syz.2.345/7168 is trying to acquire lock: [ 103.907611][ T7168] ffffffff8f426ab8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720 [ 103.917139][ T7168] [ 103.917139][ T7168] but task is already holding lock: [ 103.924504][ T7168] ffffffff8f426a58 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 103.934114][ T7168] [ 103.934114][ T7168] which lock already depends on the new lock. [ 103.934114][ T7168] [ 103.944515][ T7168] [ 103.944515][ T7168] the existing dependency chain (in reverse order) is: [ 103.953529][ T7168] [ 103.953529][ T7168] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 103.961467][ T7168] lock_acquire+0x120/0x360 [ 103.966502][ T7168] _raw_spin_lock_bh+0x36/0x50 [ 103.971809][ T7168] nr_rt_ioctl+0x390/0xd50 [ 103.976767][ T7168] sock_do_ioctl+0xdc/0x300 [ 103.981808][ T7168] sock_ioctl+0x576/0x790 [ 103.986674][ T7168] __se_sys_ioctl+0xfc/0x170 [ 103.991795][ T7168] do_syscall_64+0xfa/0xfa0 [ 103.996833][ T7168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.003258][ T7168] [ 104.003258][ T7168] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 104.011268][ T7168] lock_acquire+0x120/0x360 [ 104.016307][ T7168] _raw_spin_lock_bh+0x36/0x50 [ 104.021613][ T7168] nr_rt_ioctl+0x193/0xd50 [ 104.026568][ T7168] sock_do_ioctl+0xdc/0x300 [ 104.031610][ T7168] sock_ioctl+0x576/0x790 [ 104.036473][ T7168] __se_sys_ioctl+0xfc/0x170 [ 104.041598][ T7168] do_syscall_64+0xfa/0xfa0 [ 104.046624][ T7168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.053028][ T7168] [ 104.053028][ T7168] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 104.060838][ T7168] validate_chain+0xb9b/0x2140 [ 104.066112][ T7168] __lock_acquire+0xab9/0xd20 [ 104.071295][ T7168] lock_acquire+0x120/0x360 [ 104.076305][ T7168] _raw_spin_lock_bh+0x36/0x50 [ 104.081580][ T7168] nr_rt_device_down+0xa9/0x720 [ 104.086940][ T7168] nr_device_event+0x137/0x150 [ 104.092209][ T7168] notifier_call_chain+0x1b6/0x3e0 [ 104.097827][ T7168] netif_close_many+0x29c/0x410 [ 104.103189][ T7168] netif_close+0x158/0x210 [ 104.108116][ T7168] dev_close+0x10a/0x220 [ 104.112866][ T7168] bpq_device_event+0x377/0x6a0 [ 104.118221][ T7168] notifier_call_chain+0x1b6/0x3e0 [ 104.123840][ T7168] netif_close_many+0x29c/0x410 [ 104.129206][ T7168] netif_close+0x158/0x210 [ 104.134138][ T7168] dev_close+0x10a/0x220 [ 104.138886][ T7168] bond_setup_by_slave+0x5f/0x3f0 [ 104.144428][ T7168] bond_enslave+0x6ca/0x38a0 [ 104.149534][ T7168] bond_do_ioctl+0x635/0x9b0 [ 104.154641][ T7168] bond_siocdevprivate+0x17e/0x350 [ 104.160262][ T7168] dev_ifsioc+0xb57/0xf00 [ 104.165106][ T7168] dev_ioctl+0x84c/0x1150 [ 104.169950][ T7168] sock_ioctl+0x719/0x790 [ 104.174791][ T7168] __se_sys_ioctl+0xfc/0x170 [ 104.179906][ T7168] do_syscall_64+0xfa/0xfa0 [ 104.184922][ T7168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.191322][ T7168] [ 104.191322][ T7168] other info that might help us debug this: [ 104.191322][ T7168] [ 104.201620][ T7168] Chain exists of: [ 104.201620][ T7168] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 104.201620][ T7168] [ 104.215431][ T7168] Possible unsafe locking scenario: [ 104.215431][ T7168] [ 104.222868][ T7168] CPU0 CPU1 [ 104.228214][ T7168] ---- ---- [ 104.233560][ T7168] lock(nr_neigh_list_lock); [ 104.238224][ T7168] lock(&nr_node->node_lock); [ 104.245498][ T7168] lock(nr_neigh_list_lock); [ 104.252692][ T7168] lock(nr_node_list_lock); [ 104.257270][ T7168] [ 104.257270][ T7168] *** DEADLOCK *** [ 104.257270][ T7168] [ 104.265397][ T7168] 2 locks held by syz.2.345/7168: [ 104.270404][ T7168] #0: ffffffff8f2cbd88 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x83c/0x1150 [ 104.279194][ T7168] #1: ffffffff8f426a58 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 104.289193][ T7168] [ 104.289193][ T7168] stack backtrace: [ 104.295076][ T7168] CPU: 0 UID: 0 PID: 7168 Comm: syz.2.345 Not tainted syzkaller #0 PREEMPT(full) [ 104.295094][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 104.295111][ T7168] Call Trace: [ 104.295118][ T7168] [ 104.295126][ T7168] dump_stack_lvl+0x189/0x250 [ 104.295152][ T7168] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.295173][ T7168] ? __pfx__printk+0x10/0x10 [ 104.295189][ T7168] ? print_lock_name+0xde/0x100 [ 104.295206][ T7168] print_circular_bug+0x2ee/0x310 [ 104.295227][ T7168] check_noncircular+0x134/0x160 [ 104.295249][ T7168] validate_chain+0xb9b/0x2140 [ 104.295270][ T7168] ? rt6_disable_ip+0x6b3/0x720 [ 104.295297][ T7168] ? __lock_acquire+0xab9/0xd20 [ 104.295313][ T7168] __lock_acquire+0xab9/0xd20 [ 104.295330][ T7168] ? nr_rt_device_down+0xa9/0x720 [ 104.295348][ T7168] lock_acquire+0x120/0x360 [ 104.295362][ T7168] ? nr_rt_device_down+0xa9/0x720 [ 104.295385][ T7168] ? nr_rt_device_down+0xa9/0x720 [ 104.295403][ T7168] _raw_spin_lock_bh+0x36/0x50 [ 104.295424][ T7168] ? nr_rt_device_down+0xa9/0x720 [ 104.295442][ T7168] nr_rt_device_down+0xa9/0x720 [ 104.295461][ T7168] ? do_raw_spin_unlock+0x122/0x240 [ 104.295484][ T7168] nr_device_event+0x137/0x150 [ 104.295502][ T7168] notifier_call_chain+0x1b6/0x3e0 [ 104.295524][ T7168] netif_close_many+0x29c/0x410 [ 104.295555][ T7168] ? __pfx_netif_close_many+0x10/0x10 [ 104.295579][ T7168] ? bond_netdev_event+0x227/0xe80 [ 104.295601][ T7168] netif_close+0x158/0x210 [ 104.295623][ T7168] ? __pfx_netif_close+0x10/0x10 [ 104.295645][ T7168] ? __pfx___neigh_ifdown+0x10/0x10 [ 104.295666][ T7168] ? macsec_notify+0x104/0x660 [ 104.295688][ T7168] dev_close+0x10a/0x220 [ 104.295704][ T7168] bpq_device_event+0x377/0x6a0 [ 104.295722][ T7168] notifier_call_chain+0x1b6/0x3e0 [ 104.295743][ T7168] netif_close_many+0x29c/0x410 [ 104.295767][ T7168] ? __pfx_netif_close_many+0x10/0x10 [ 104.295794][ T7168] netif_close+0x158/0x210 [ 104.295816][ T7168] ? __pfx_netif_close+0x10/0x10 [ 104.295838][ T7168] ? do_raw_spin_lock+0x121/0x290 [ 104.295860][ T7168] ? __local_bh_enable_ip+0x12d/0x1c0 [ 104.295878][ T7168] ? lockdep_hardirqs_on+0x9c/0x150 [ 104.295901][ T7168] dev_close+0x10a/0x220 [ 104.295916][ T7168] bond_setup_by_slave+0x5f/0x3f0 [ 104.295942][ T7168] bond_enslave+0x6ca/0x38a0 [ 104.295966][ T7168] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 104.295988][ T7168] ? arch_stack_walk+0xfc/0x150 [ 104.296011][ T7168] ? stack_trace_save+0x9c/0xe0 [ 104.296031][ T7168] ? __pfx_stack_trace_save+0x10/0x10 [ 104.296052][ T7168] ? __pfx_bond_enslave+0x10/0x10 [ 104.296080][ T7168] ? apparmor_capable+0x137/0x1b0 [ 104.296097][ T7168] ? full_name_hash+0x92/0xe0 [ 104.296115][ T7168] ? netdev_name_node_lookup+0xdf/0x120 [ 104.296136][ T7168] bond_do_ioctl+0x635/0x9b0 [ 104.296156][ T7168] ? __pfx_bond_do_ioctl+0x10/0x10 [ 104.296181][ T7168] ? rcu_is_watching+0x15/0xb0 [ 104.296201][ T7168] bond_siocdevprivate+0x17e/0x350 [ 104.296220][ T7168] ? __pfx_bond_siocdevprivate+0x10/0x10 [ 104.296237][ T7168] ? __lock_acquire+0xab9/0xd20 [ 104.296254][ T7168] ? full_name_hash+0x92/0xe0 [ 104.296271][ T7168] ? netdev_name_node_lookup+0xdf/0x120 [ 104.296292][ T7168] dev_ifsioc+0xb57/0xf00 [ 104.296319][ T7168] dev_ioctl+0x84c/0x1150 [ 104.296344][ T7168] sock_ioctl+0x719/0x790 [ 104.296365][ T7168] ? __pfx_sock_ioctl+0x10/0x10 [ 104.296386][ T7168] ? __fget_files+0x3a0/0x420 [ 104.296400][ T7168] ? __fget_files+0x2a/0x420 [ 104.296416][ T7168] ? bpf_lsm_file_ioctl+0x9/0x20 [ 104.296434][ T7168] ? __pfx_sock_ioctl+0x10/0x10 [ 104.296452][ T7168] __se_sys_ioctl+0xfc/0x170 [ 104.296473][ T7168] do_syscall_64+0xfa/0xfa0 [ 104.296496][ T7168] ? lockdep_hardirqs_on+0x9c/0x150 [ 104.296518][ T7168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.296538][ T7168] ? clear_bhb_loop+0x60/0xb0 [ 104.296556][ T7168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.296572][ T7168] RIP: 0033:0x7fd69b78f749 [ 104.296590][ T7168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.296604][ T7168] RSP: 002b:00007fd69c56b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.296620][ T7168] RAX: ffffffffffffffda RBX: 00007fd69b9e5fa0 RCX: 00007fd69b78f749 [ 104.296632][ T7168] RDX: 0000200000000180 RSI: 00000000000089f0 RDI: 0000000000000006 [ 104.296643][ T7168] RBP: 00007fd69b813f91 R08: 0000000000000000 R09: 0000000000000000 [ 104.296653][ T7168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.296662][ T7168] R13: 00007fd69b9e6038 R14: 00007fd69b9e5fa0 R15: 00007ffce58d4c38 [ 104.296681][ T7168] [ 104.794657][ T7168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.842137][ T7168] bond0: (slave rose0): Enslaving as an active interface with an up link [ 104.861167][ T7183] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING