last executing test programs: 1m19.881921084s ago: executing program 4 (id=447): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256-ce\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x0) recvmmsg(r1, &(0x7f00000006c0), 0x0, 0x40, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xb635773f05ebbee1, 0x11, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x20010, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r2, 0x0, 0x4, &(0x7f0000000040)="040910", 0x3) getsockopt$inet_opts(r2, 0x0, 0x4, 0x0, &(0x7f00000006c0)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r3, &(0x7f0000000740)=[{&(0x7f0000000700)="57dd4146fbd35168c33f56b66e1d32620300c7bd57d3cb42ebb255", 0x1b}], 0x1, 0x3, 0x7fff) mmap$xdp(&(0x7f00008a2000/0x3000)=nil, 0x3000, 0x100000c, 0x4000010, r1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) unshare(0x6a040000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x620, 0x2c8, 0x1d0, 0x468, 0x468, 0x1d0, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) r5 = socket$inet(0x2, 0x4, 0x0) bind$inet(r5, &(0x7f0000001c00)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000180)=0x5a4f, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xffffffffffffffdb) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f0000000680)) 1m18.209514776s ago: executing program 0 (id=462): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_int(r0, 0x0, 0x13, 0x0, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f00000003c0)='%\x00', 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b000100620c001f0067b70000000000000c0020001000000000000000"], 0x4c}}, 0x0) 1m17.973019818s ago: executing program 0 (id=464): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x7, 0xfe00, 0x2, 0x6, 0x54, 0x6, 0xf9}, &(0x7f0000000000)=0x9c) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={r3, @in6={{0xa, 0x4e22, 0x481, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}, 0x27c0}, 0x90) r4 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000eb03010000000000010000000000000a14000000ea03010000000000000000000300000a"], 0x28}}, 0x20008040) 1m17.914941553s ago: executing program 0 (id=466): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001f40)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)='e', 0x1}], 0x1}}], 0x1, 0x4004000) write$cgroup_subtree(r3, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) r4 = openat$cgroup_int(r1, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) pwritev(r4, &(0x7f0000000440)=[{&(0x7f0000000240)="d4382ed01904a1a847c50ae100f70e5e71ae3ded3cb6bdc02a5de9d439c491616d754846c701ebfd3456793571c6128a68d93214ff7856ca680b74e1141f7115840d1ee71d7159714ad5c6a2f532eadc195d4a54ca0e6d0488f6aacdc0ac74bad4aa82eabe01746313a12b595d7ea86d8f06d4fd141c8edf83f005a1178825768f", 0x1}], 0x5f, 0x100, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x6c}, {0x6}]}, 0x10) 1m17.667380589s ago: executing program 0 (id=468): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0) write$tun(r1, &(0x7f0000000540)=ANY=[], 0x8b) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x10001) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000940)={0x434, 0x3f4, 0x8, 0x70bd27, 0x25dfdbfb, {0x2, 0x1, 0xc, [0x7, 0x2, 0x7fffffff, 0xe79, 0xdc52, 0x8, 0xf, 0xc0, 0x2, 0xfd, 0x4, 0x8, 0x42162b4a, 0x9, 0x101, 0x3, 0x3, 0x0, 0x7, 0x1, 0x3f5a, 0x358, 0x180, 0x6, 0x8, 0xe7b, 0xab28, 0x5, 0x0, 0xb, 0xffffffff, 0x0, 0x2, 0x40, 0x5, 0x9, 0xa824c0, 0xfffffffd, 0x2000, 0x5, 0x1000, 0x7, 0x7, 0x101, 0x0, 0x1, 0x7, 0x0, 0x9, 0x8163, 0x9, 0x7fffffff, 0xfffffffd, 0x1, 0x10, 0x0, 0xe542, 0x93, 0x5, 0x3ff, 0x7f, 0x2, 0x8000, 0x9], [0x0, 0x4, 0xffac, 0xa, 0x9, 0x80000000, 0x9, 0x4, 0x7ff, 0xffff, 0x7, 0x1cef, 0xa1c, 0x6, 0xffffff81, 0x3, 0x5, 0xd, 0x2, 0x9f40, 0x4, 0x5, 0x860, 0x80000000, 0x5, 0xab, 0xc9, 0x2, 0x1, 0x1, 0x14620e38, 0x14460, 0x6, 0x7, 0x7fffffff, 0xfffff98c, 0x9000, 0x400, 0xc545, 0x7, 0x3ff, 0x8, 0x8, 0x6, 0x5, 0xffffff01, 0x7fff, 0x4, 0x10001, 0x1, 0x180, 0x0, 0x8, 0x2, 0x0, 0x80, 0x7ff, 0x101, 0x5, 0x5, 0x0, 0x5, 0x9, 0x3], [0x6, 0x0, 0xa, 0xb934, 0x66, 0x3, 0xcc, 0x0, 0x7, 0xff, 0x400, 0xb0, 0x0, 0x4, 0x4ab128cd, 0x10, 0x7, 0x100, 0x1, 0xffffffff, 0xe70e, 0x80a, 0x9, 0x40, 0xca37, 0x8000, 0xff, 0x7, 0x2, 0x1, 0xd7, 0x2, 0x7ff, 0x3, 0x2, 0x14, 0x0, 0x400, 0x7, 0x10000, 0x7, 0x10001, 0x6, 0x1, 0x6, 0x5, 0x1, 0x0, 0xfffffff7, 0x8168, 0x1, 0xd221, 0x6, 0x7, 0x9, 0x7, 0x6, 0x4, 0x1, 0x4, 0x9, 0x1, 0x2, 0x1], [0x4, 0xb9, 0xc, 0x6, 0x7, 0x9, 0x7fffffff, 0x1, 0x4, 0x5, 0x5, 0x10001, 0x7, 0x5, 0x3, 0x8001, 0x0, 0x7, 0x8, 0x5, 0x3, 0xf, 0xe097, 0x8, 0x5, 0xc, 0x5, 0x5, 0xfffffff6, 0x3, 0x8, 0xdf8, 0x401, 0x1, 0x6, 0xffff5c79, 0x6, 0x5, 0x6f3f, 0x8c, 0x5, 0x2, 0x400, 0x3, 0x3, 0x8, 0xfffffffe, 0x1, 0x0, 0x8, 0x5, 0x5, 0x410, 0x40, 0x3f, 0x4, 0x9, 0xd0b, 0x10, 0x8, 0x1, 0x6, 0xb3ac, 0xfffffffa], 0x11, ['GPL\x00', '\x00', '/dev/rfkill\x00']}, ["", "", "", "", "", ""]}, 0x434}, 0x1, 0x0, 0x0, 0x200c0080}, 0x1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f0000000300)='\x00', 0x1}], 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x2, 0x18, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0xb6}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1m16.040375003s ago: executing program 3 (id=473): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0xb8}, 0x1, 0x0, 0x0, 0x20000010}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) close(0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) 1m15.904350151s ago: executing program 3 (id=475): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x314380154de2d6ac, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 1m14.576466706s ago: executing program 4 (id=479): r0 = socket(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x1, 0x1}}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) bind$tipc(r1, &(0x7f00000004c0)=@name={0x1e, 0x2, 0x2, {{0x2}, 0x3}}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r4, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000040)={0x23, 0x4, 0x2, 0x4}, 0xff96) r5 = socket(0x40000000015, 0x5, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed", 0x99}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000680)=""/195, 0xc3}], 0x1}, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) socket$inet(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8850) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) unshare(0x22020600) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000004c0)=[{{&(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000180)="0ffa83", 0x3}], 0x100001fe}}], 0x1, 0x40000c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) 1m14.417203579s ago: executing program 0 (id=480): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x40000000211}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x2c}}, 0x4010804) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="cb", 0x1}], 0x1, &(0x7f0000000500)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x9}}, @sndrcv={0x30, 0x84, 0x1, {0x50, 0x5, 0x200, 0x7, 0x0, 0x7, 0x3, 0x7}}], 0x48, 0x40}, 0x4040040) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0x5ddc, 0x4) 1m14.192182382s ago: executing program 4 (id=481): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, &(0x7f0000000040)=0x55) 1m14.076518014s ago: executing program 3 (id=482): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x7ff, [{0x9, 0x3, 0x1}]}]}}, &(0x7f0000000f40)=""/4076, 0x3e, 0xfec, 0xa, 0x32e}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fd3f000000000000090000f66b00000075000000850000002e0000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1m13.788707014s ago: executing program 4 (id=485): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x90646}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0x8c88}, @IFLA_BOND_USE_CARRIER={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0) 1m13.78100794s ago: executing program 3 (id=486): unshare(0x20000400) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00', r3}, 0x18) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) socket(0x2a, 0x2, 0x13) pipe(0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0xcf, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6, 0x0, 0x0, 0x4}]}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x14, 0x30, 0xffffffffffffffff}, 0x14}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)="30a0", 0x2}], 0x1}, 0x4040001) (async) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)="30a0", 0x2}], 0x1}, 0x4040001) recvmsg$unix(r5, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x40012141) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001800010000000000fddbdf251d01050008000a00", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRES16=r7], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x400c010) sendmsg$key(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x2, 0x15, 0x4, 0x6, 0xf, 0x0, 0x70bd21, 0x25dfdc00, [@sadb_x_nat_t_port={0x1, 0x16, 0x4e20}, @sadb_address={0x5, 0x5, 0x6c, 0x100, 0x0, @in6={0xa, 0x4e21, 0x230dcaa0, @private1, 0x4}}, @sadb_key={0x4, 0x8, 0xc0, 0x0, "800d5d4340775480ed76e91a9032b6aa08c0be912a029c86"}, @sadb_x_nat_t_type={0x1, 0x14, 0xc}, @sadb_spirange={0x2, 0x10, 0x4d6, 0x4d2}]}, 0x78}}, 0xc001) recvmsg(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000480)=""/153, 0x99}, {&(0x7f0000000180)=""/72, 0x48}, {&(0x7f0000000840)=""/4096, 0x1000}], 0x3}, 0xc5db75e409c618e8) (async) recvmsg(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000480)=""/153, 0x99}, {&(0x7f0000000180)=""/72, 0x48}, {&(0x7f0000000840)=""/4096, 0x1000}], 0x3}, 0xc5db75e409c618e8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x6a}, @exit], &(0x7f00000002c0)='syzkaller\x00', 0x6}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x6a}, @exit], &(0x7f00000002c0)='syzkaller\x00', 0x6}, 0x94) 1m13.256646879s ago: executing program 3 (id=488): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1b, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x1, 0xf00) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r0, &(0x7f0000007700), 0x4000267, 0xfc0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000440)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x80, r5}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)=ANY=[], 0x1c8}}, 0x20040000) accept4$ax25(0xffffffffffffffff, &(0x7f00000005c0)={{0x3, @default}, [@rose, @netrom, @rose, @rose, @remote, @remote, @bcast, @default]}, &(0x7f00000000c0)=0xd28d2325, 0x101c00) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000140)={@loopback, 0x80, r5}) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000006c0)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000340, 0x200000000370, 0x2000000003a0], 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000000000000000000700000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000001feffffff0000000039f30000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r7, 0x1000000) socket$unix(0x1, 0x5, 0x0) unshare(0x22020400) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) unshare(0x22020400) 1m12.974241761s ago: executing program 3 (id=489): socket(0x10, 0x80003, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001900)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x28, 0x0, 0x1, 0x8}, 0x28) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x3, 0x1, 0x7fff000, 0xfffffffa, 0xd67}, &(0x7f0000000140)=0x14) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x14) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in={{0x2, 0x4e22, @empty}}, 0x2, 0x2, 0x614, 0x1, 0x2d, 0x7, 0x4}, 0x9c) 1m12.486723157s ago: executing program 0 (id=490): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket$netlink(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x100, 0x70bdaa, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x24000010}, 0x20000890) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, 0x0, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000004c0)=@req3={0x3, 0x3, 0x1, 0x0, 0xa0000000, 0xfffffffa, 0x10}, 0x1c) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'netdevsim0\x00', 0x1000}) r4 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x19, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x65b, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) write$tun(r3, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x4000080) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000140)={0x1000, 0x6, 0x0, 0xbd, 0xfffffffffffffff9, 0xd, 0x0, 0x4}, &(0x7f0000000300)={0x3, 0xf, 0x9c, 0x71a, 0x0, 0x7, 0x400000000000007, 0x8081}, &(0x7f0000000340)={0x5, 0xa3, 0x1, 0xffffffffffff0003, 0xfffffffffffffffe, 0x3, 0x8000, 0x40000000a08}, &(0x7f0000000000)={0x0, 0x989680}, &(0x7f0000000400)={&(0x7f00000003c0)={[0x2]}, 0x6a}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)=ANY=[@ANYRESHEX=r6, @ANYBLOB="e1bb0398bf50b9048fa00f1d1b6923fab1e5f7e7bc267dddb58ad09da1bc1647189cb690affa0f3d0547a28c55d5f16140f065b4d359a3e817de422fbc2c5c3c3af800a5cd55e827fa3dc2612c2899bab5fe68bea2bac1fa1efb64e2688a5bb0140a1ae954024064fc44abe7ab762164566a81233b7a986dcbbb4eb22c7b3c688464b2e22c178c3a11381cc4368eb5a184d0b0318b1f802580", @ANYRESDEC=r1, @ANYRES64, @ANYBLOB="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", @ANYRESDEC=0x0], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000f40)={r8, &(0x7f0000000200), 0x0}, 0x20) sendmsg$NFT_MSG_GETSET(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x14}}, 0x0) 1m12.165012935s ago: executing program 32 (id=490): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket$netlink(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x100, 0x70bdaa, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x24000010}, 0x20000890) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, 0x0, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000004c0)=@req3={0x3, 0x3, 0x1, 0x0, 0xa0000000, 0xfffffffa, 0x10}, 0x1c) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'netdevsim0\x00', 0x1000}) r4 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x19, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x65b, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) write$tun(r3, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x4000080) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000140)={0x1000, 0x6, 0x0, 0xbd, 0xfffffffffffffff9, 0xd, 0x0, 0x4}, &(0x7f0000000300)={0x3, 0xf, 0x9c, 0x71a, 0x0, 0x7, 0x400000000000007, 0x8081}, &(0x7f0000000340)={0x5, 0xa3, 0x1, 0xffffffffffff0003, 0xfffffffffffffffe, 0x3, 0x8000, 0x40000000a08}, &(0x7f0000000000)={0x0, 0x989680}, &(0x7f0000000400)={&(0x7f00000003c0)={[0x2]}, 0x6a}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)=ANY=[@ANYRESHEX=r6, @ANYBLOB="e1bb0398bf50b9048fa00f1d1b6923fab1e5f7e7bc267dddb58ad09da1bc1647189cb690affa0f3d0547a28c55d5f16140f065b4d359a3e817de422fbc2c5c3c3af800a5cd55e827fa3dc2612c2899bab5fe68bea2bac1fa1efb64e2688a5bb0140a1ae954024064fc44abe7ab762164566a81233b7a986dcbbb4eb22c7b3c688464b2e22c178c3a11381cc4368eb5a184d0b0318b1f802580", @ANYRESDEC=r1, @ANYRES64, @ANYBLOB="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", @ANYRESDEC=0x0], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000f40)={r8, &(0x7f0000000200), 0x0}, 0x20) sendmsg$NFT_MSG_GETSET(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x14}}, 0x0) 1m11.205803148s ago: executing program 4 (id=493): socket$kcm(0xa, 0x2, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000440)=""/154, 0x9a}], 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44010}, 0x0) (async) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='\b', 0x1}], 0x1, 0x1) (async) close(r4) (async) socket(0x2, 0x80805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wlc\x00', 0x16, 0xa7e, 0x70}, 0x2c) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r3], 0x118}}, 0x4004) (async) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0xb, &(0x7f0000000100)=0x800000, 0x48) (async) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000ac0)=@newtaction={0x84, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x70, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x6, 0x6, 'vP'}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_tunnel_key={0x34, 0x11, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x84}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1b000000000000000023fdf134a0d34915ce0000", @ANYRES32=0x1, @ANYBLOB='\a\x00'/20, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="03000000040000000300"/28], 0x50) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000240)) (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000c40)=@ipv6_newrule={0x30, 0x20, 0x1, 0xffffffff, 0x0, {0xa, 0x0, 0x20, 0x9d, 0x0, 0x0, 0x0, 0x5, 0x12}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'lo\x00'}]}, 0x30}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0xfffffffe}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x10, 0x0, 0x3}, 0x10}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d40)=ANY=[@ANYBLOB="5000000010000104000000000000000000000000d267d01e6c2f294e0e2c99b9597c7d7d59ace7f3b4c042ee63e58f52fb2d917854d23c515339442009a9b0aa9b3d1bc478d73bfef65c224e52e5d737e961afe71cfdaa066674a39256132c77dfc51c012f9f667be909d837d6ee90bfcc8d726e9380568ee10f2da412aa4a62a893a37922a0f8b46e100c155de33b114dd445f78a23e1efa1e1b025a0311d1bd42b2ee9d2af0955456a85d6205b92e9bf2f9d0d044f6c16361b540320168de45c5138e7a0ade2", @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a8014000700fc0100000000000000000000000000001400030067656e65766530000000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x580, 0x0, 0x310, 0x0, 0x0, 0x1d8, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x2b, 0x5, 0x1, 0x18}, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xff], [0xffffff00], '\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x1], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@ipv6={@mcast1, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'hsr0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) 1m11.200692165s ago: executing program 1 (id=494): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) (async, rerun: 64) ioctl$TUNSETLINK(r0, 0x400454cd, 0x324) (async, rerun: 64) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) (async) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000080)={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, 'erspan0\x00'}}, 0x1e) connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x0, @broadcast, 'ip6gre0\x00'}}, 0x1e) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r3, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9e}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xe}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c0}, 0x2400c800) (async) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r6, 0x11c, 0x3, &(0x7f00000000c0)=""/137, &(0x7f0000000180)=0x89) (async) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000500a8000600200006400461c1d67f6f94007134cf6efb8000a007a290457f0189b31627287ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a15a8b16f14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f211ce3bb9ad809d5e1cace81ed0bff32ebb42a9ecbee5de6ccd40dd6826eef3d93452a92954b43370e9703920723f9a941c6a0501148", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x24080000) 1m10.94420879s ago: executing program 4 (id=495): ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f00000000c0)) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x118, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x106, 0xf2, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43f9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0xf, &(0x7f0000001540)=ANY=[@ANYBLOB="1803000000000020000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b5020000000000008500000086000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000000700000085000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1011, &(0x7f0000002e80)=""/4113, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 1m10.788256959s ago: executing program 2 (id=496): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="3482000002000000000008000001002295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x63}, 0x94) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x421a2}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_MTU={0x8, 0x4, 0x40e}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x44}}, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r3 = accept(r1, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000300), &(0x7f0000000680)=@buf="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", 0x2}, 0x20) close(r3) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000001c0)={0xffffffffffffffff, 0x3, 0x401, 0x9}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r5) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01002cbd700a00dbdf250700000005003700010000007ff1c1ad595d8fe76f77b0e9c1483f3b3a2c3732f018aef3c04f5921b6147dd85ae0d621dde4b222f974b370dfa72e2074d97bacfa3b61f44f394a185c58fe863d852ecb579f00901305b2c5298799cb5331eeddc9afc2bc515b6f0cd8c5a4126c33f51b126b6cfe37c1547abc418c77f3ff57271fa6941c2d8519a245a6c0819cdaea9b28b8e6e637e7"], 0x1c}}, 0x20002811) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x1, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff80fe, 0x5}, 0x50) 1m9.772731463s ago: executing program 2 (id=497): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x1, 0x0, 0x0, {[@mss={0x2, 0x4, 0xa005}, @sack_perm={0x4, 0x2}]}}}}}}}, 0x0) 1m8.700654316s ago: executing program 1 (id=498): r0 = socket(0x10, 0x3, 0x4) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r4, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r5, &(0x7f0000001b80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001b40)="1b", 0x1}], 0x1}}], 0x1, 0x24008080) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x20, 0x80, 0x4, 0x1, {{0x2a, 0x4, 0x0, 0x8, 0xa8, 0x64, 0x0, 0x7, 0x2f, 0x0, @rand_addr=0x64010100, @private=0xa010101, {[@timestamp={0x44, 0x24, 0xac, 0x0, 0x7, [0x7, 0x8001, 0x2, 0x4, 0x5d, 0x0, 0x8, 0x1]}, @end, @timestamp_prespec={0x44, 0x44, 0xf6, 0x3, 0x2, [{@broadcast, 0x69}, {@rand_addr=0x3ff, 0x79b4}, {@rand_addr=0x64010100, 0x7}, {@multicast1, 0x9}, {@remote, 0x5}, {@remote, 0x3}, {@private=0xa010100, 0x5}, {@rand_addr=0x64010100, 0xf}]}, @generic={0x88, 0x4, "06d5"}, @generic={0x44, 0x11, "a44f2e33355e844a228e458c0c9d10"}, @end, @timestamp={0x44, 0x14, 0x53, 0x0, 0x3, [0x4, 0x7, 0x4, 0x3]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000380)={'syztnl0\x00', &(0x7f00000000c0)={'gre0\x00', r6, 0x8000, 0x80, 0x2ad, 0xda4, {{0xb, 0x4, 0x3, 0x32, 0x2c, 0x65, 0x0, 0x76, 0x4, 0x0, @multicast2, @private=0xa010100, {[@timestamp={0x44, 0x18, 0x45, 0x0, 0x1, [0x4, 0x4, 0x8, 0xff, 0xa]}]}}}}}) r7 = accept4$unix(r1, 0x0, 0x0, 0x0) recvfrom$unix(r7, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) close(r5) 1m8.70026483s ago: executing program 2 (id=499): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000480)=0x17fe, 0x4) sendmsg$DEVLINK_CMD_RATE_NEW(r0, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="b60a0000000000006911b60000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 1m7.907476657s ago: executing program 2 (id=500): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x6}, 0x66) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r1, r2}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r2}, 0x38) setsockopt$inet_buf(r0, 0x0, 0x4, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000000)={@dev, 0x0}, &(0x7f0000000040)=0x14) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xc, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000240)={'syztnl1\x00', r3, 0x7800, 0x1, 0xffffffff, 0x2, {{0x1f, 0x4, 0x1, 0x11, 0x7c, 0x64, 0x0, 0x1, 0x29, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x3a}, {[@end, @timestamp_prespec={0x44, 0x24, 0x28, 0x3, 0x2, [{@multicast2, 0x2a}, {@multicast1, 0x1fd7df2c}, {@private=0xa010102, 0x2}, {@loopback, 0x1ff}]}, @timestamp_addr={0x44, 0x2c, 0x3a, 0x1, 0xe, [{@empty, 0x80000000}, {@multicast1, 0x1}, {@multicast1, 0x7fff}, {@rand_addr=0x64010100, 0x2}, {@multicast2, 0x1}]}, @timestamp_prespec={0x44, 0x14, 0x3c, 0x3, 0x8, [{@empty, 0xc}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}]}]}}}}}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/69, 0x328000, 0x1000, 0x800, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x1) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000280)={0x0, 0x200000, 0x1800, 0x7, 0x1}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x88, 0x2, [@TCA_U32_SEL={0x74, 0x5, {0x5, 0x6, 0x6, 0x5, 0x400, 0x2, 0x1, 0xc, [{0xfffffff9, 0x9df8, 0x5, 0xfffffffe}, {0x80000000, 0xabac, 0x5d9, 0x6}, {0x7365, 0x200, 0x2, 0x3}, {0xaa2, 0x80000000, 0xc06f, 0x7ffe}, {0x9, 0x8001, 0x80, 0x7ff}, {0xc00, 0x23e, 0x10000, 0x2}]}}, @TCA_U32_LINK={0x8, 0x3, 0x5}, @TCA_U32_CLASSID={0x8, 0x1, {0xb}}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x64, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @loopback={0x300}}, @IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xff00000000000000}}]}}}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) 1m7.760102763s ago: executing program 1 (id=502): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002"], 0x20}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async, rerun: 64) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async, rerun: 64) close(0x3) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 1m7.352633767s ago: executing program 1 (id=503): epoll_create1(0x80000) pipe(&(0x7f0000000080)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20) sendmsg$nl_xfrm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000480)=@migrate={0xa8, 0x21, 0x1, 0x70bd26, 0x25dfdbfb, {{@in=@rand_addr=0x64010102, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e24, 0x0, 0x4e21, 0xffff, 0x2, 0xa0, 0xa0, 0x3a}, 0x6e6bb3, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x3}, @migrate={0x50, 0x11, [{@in=@empty, @in=@local, @in=@remote, @in6=@empty, 0x32, 0x1, 0x0, 0x3502, 0xa, 0x2}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="7c67e0f622648bad00000000000000007112a500"/32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 1m7.14393336s ago: executing program 1 (id=504): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x23, &(0x7f0000000040)=""/35, &(0x7f0000000080)=0x23) socket$inet(0xa, 0x801, 0x84) socket$inet(0xa, 0x801, 0x84) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x4}, 0x18) socket(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x20}}, 0x4000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c0000005200040030bd7000ffdbdf251c00000000d1d81d7b4d7541cac9779c3fb2ca8aa215710ede1eac658dddd7ffa7138682425a7a714d5b30592f67497686a7ccee83b13831c75966627d83b52ad791597652e3d3a4d9feebdd34287c4b390fc1bb1704ed2294868f9a10a5c08ef5dd7581120bc932adf8142d"], 0x7c}, 0x1, 0x0, 0x0, 0x8800}, 0x24040084) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) accept(r0, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) socket$netlink(0x10, 0x3, 0x14) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x32, 0xffffffffffffffff, 0x739ef000) 1m7.102726356s ago: executing program 5 (id=491): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000040)={0x2, 0x6e27, @multicast1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r1, 0x0, 0x10, &(0x7f00000000c0)="170000000200020000ffbe8c5ee17688a2003300010100000077fc5ad90200fb6a880000d6c9db0000db15d088bd8b7000000000d9ce9bc7e28db3000200ff01800a0000ebfc0607bdff59100ac45761547a681f009ceeff5acba400001fb700674f00c8e365d00b5033bf79ac2dfc061f15003901dee2000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f02d8e9e90539062a80e605007f71174ab498ff0b3e5a1b47b6df7b23de8caa000000", 0x10c) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r3, 0x9}, &(0x7f0000000140)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x15, 0x3, &(0x7f0000000140)=@framed={{0x5e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x28, 0x3}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x8c, 0x10, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xffe0, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x58, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x5f, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}, {{0x1c, 0x1, {0x3, 0x2, 0x2, 0x2, 0x0, 0x7d5, 0x7fffffff, 0x7}}, {0x12, 0x2, [0x7ff, 0x5, 0x562, 0x4, 0x6, 0x9957, 0x80]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x18}]}, 0x8c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) 1m6.404445335s ago: executing program 5 (id=505): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000020a09040000000000000000020000000900010073797a30000000000900020073797a320000000020000000080a05000000000000000000020000000900010073797a30"], 0x94}, 0x1, 0x0, 0x0, 0x44002}, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (async) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) (async) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000791240000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 1m6.185500173s ago: executing program 2 (id=506): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x109001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) (async) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x200000000000001) (async) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x200000000000001) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x10040, 0x0) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000000301010e00000000000000000a0000020c0019800800010009040000300001802c00018014000300000000000000000000000000cb66ee45d4aa771a770000000014000400200100"/89], 0x50}, 0x1, 0x0, 0x0, 0x840c0}, 0x400040c0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) (async) r4 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, &(0x7f0000000080)) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042800c00018006000600800a00000c0002800400108004"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 1m5.995854368s ago: executing program 5 (id=507): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x30}, 0x1, 0x0, 0x0, 0x48895}, 0xc000) 1m5.812706174s ago: executing program 1 (id=508): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xd}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f00000000c0)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x4008000) socket$unix(0x1, 0x1, 0x0) (async) r10 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x789d2d, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x1, 0x4, 0x9, 0x4cca}, {0x6, 0x1, 0x5, 0x10, 0x7, 0x312}, 0x3, 0x10, 0xd1d}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xa89d84ea6e694e0f}, @TCA_TBF_BURST={0x8, 0x6, 0xb1a}]}}]}, 0x6c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0xffffffffffffff8c, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1ffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)={0x30, r13, 0x301, 0x0, 0x0, {{}, {@val={0x5, 0x1, 0x14}, @void, @val={0xc, 0x99, {0x2, 0x4}}}}}, 0x30}}, 0x44) 1m5.679580731s ago: executing program 5 (id=509): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x3c, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x7c, 0x30, 0x1, 0x8000000, 0x3, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x10001, 0x69, 0x6, 0x1, 0xd817}, 0x2}}, @TCA_MPLS_TTL={0x5, 0x7, 0x7}]}, {0x0, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x7c}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newae={0x70, 0x1e, 0x301, 0x70bd2a, 0x24dfdbfe, {{@in6=@private1, 0x4d4, 0x2, 0x2b}, @in=@private=0xa010101, 0x3, 0x3500}, [@mark={0xc, 0x15, {0x35075b, 0x6}}, @lifetime_val={0x24, 0x9, {0x5, 0x100000001, 0x8, 0x8000000000000000}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 1m5.254798877s ago: executing program 5 (id=510): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x1, 0x0, 0x0, {[@mss={0x2, 0x4, 0xa005}, @sack_perm={0x4, 0x2}]}}}}}}}, 0x0) 49.213472244s ago: executing program 2 (id=511): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xfffffffc}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x60}}, 0x20000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000540)={0x2c, r2, 0x21, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r3) sendmsg$DEVLINK_CMD_PORT_SET(r3, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x120, r4, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}]}, 0x120}, 0x1, 0x0, 0x0, 0x4}, 0xc004) r5 = getuid() sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002b40)={0x2560, 0x2d, 0x1, 0x7fff8, 0x4, {0x1}, [@nested={0x253c, 0x48, 0x0, 0x1, [@typed={0x8, 0x123, 0x0, 0x0, @ipv4=@remote}, @nested={0x140b, 0x10b, 0x0, 0x1, [@nested={0x2a6, 0xb8, 0x0, 0x1, [@typed={0xc, 0x4, 0x0, 0x0, @str='ethtool\x00'}, @nested={0x167, 0x5a, 0x0, 0x1, [@nested={0x4, 0x126}, @nested={0x4, 0x9d}, @nested={0x4, 0xd3}, @generic="e069317516b073cd3b5369813e8a8f1e49de476a825ee2a5247060675f8a2864225a947caa5760edd7fd32784443e28dca6e42ec1095f51041f6cafe4bbfe35c9c120518171a14a503168a6ef1ca5c7dc2e076e37e88030bd95d76cdf8ad17d746345dea28eb88d33b53e90f34105c73495d1f39b7b2162750f61d817d090aaeac63c54a6f0d742fb8a2481978b228d2ddfbc0e9b39e67966826733822142e01ab5723e572b70842e4fd5fe6dd36d48c3f45c42fdbaf85", @nested={0x4, 0x32}, @generic="814a757e6593204263f568717f8599174348dddd5efea54d50698b520c5b6026d978e8be9fd85bf0206dbd4dbb0619379953d3b362bf53ed5aa6a850c69d1ae4c2b0d328a0fe36ca064a722ea264d71c4dbbf7cb3eb4cad39b73be4be8c129a7a209b5a286b8937126096a9b0f143dbece58b8d7adec067d4f49fbf129f8482a14b944dd0a7ccdebfa73f0f19301dd97f6ddbd0d6eff4b0e17e62739"]}, @generic="bc74a4fe3a8bce3a3f2299d4040eb54fd4c874159dcbc3d6facc496f4a6b85071695e3671d106aa48c6ee29634b082f828cd7fb8d3f8745a3834d2c48a02dab29a8ab7acb85f9e9991bd9de5d42bfc047e783fdad2658b8661ca09a1279cbe303e752447834f38506e351c615b6d8513ade4817695ecab2fae4c1daca2834b8e6581d90cdade634e0f39a7638c00d9f0851a6de0e9579a2f91f71ffb0974bad3c65b85d227d3d7b78d2184e202464acf4eca6a60339a7e2c3d4bf3a39c333280208362142c0ad31b50330fce21d71c828ee1096732f451661fcc16", @generic="3eb384cd6bef49fe229a81a9e3e250097d089f5041fd6784cc64a465074374abd24a463e4cf88e6957f62e91bcd539ef5d503c23d42e269ead28cebccdf035f2e6b2824d0cb8f72b953118e7dddf645aad7cd1"]}, @nested={0xc, 0x9b, 0x0, 0x1, [@typed={0x8, 0x60, 0x0, 0x0, @uid=r5}]}, @generic="a4f0d405842cf278bc42a649efd179589c041d9e98bbde5de095ce2eb357949f7da4f9a2316512060c", @nested={0x44, 0xa6, 0x0, 0x1, [@typed={0x40, 0xb8, 0x0, 0x0, @binary="78f9c78746a9678900f0564454590d4adfa1781f8da2fc34e9823b23cf49f7b40849368e1a8bdd3c5249fd6b57906c100a3f9a78a01d8bb129ad5923"}]}, @generic="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", @generic="93dbe69b35006e06b77013974d1bde6e07615c398255f881c18704da1302a64928ea952ed2ade2febab8c455221078d6173765fd7305c0846240aafc5937e141a4ea9e1703d9514f203784bbfe7438fa31cb9c5312e6d76b19707e8f49caf3371846e50ffaa15f2b23e4418c6199776b1324cf8b74cfc425f159a180898c0254b54448198a449bbe758a6e8c9ac764932ff08c4123f7fb325fba950f9581f8f1cd8e1abdfd8ee595e384c7abb2c47be111e60e4f2432299eb47f54c438ce61d7b3d31505728e58cb37dbb17ff6bd42d802e58e22a0f942bb2a5333ee9907f970bf701d97f858"]}, @typed={0x1004, 0x25, 0x0, 0x0, @binary="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"}, @typed={0x8, 0xbc, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x2c}}, @generic="507d0d811c1e0f71c89ddd822e91b44b8cacd5160aebc6a9f9710e77d72a8bd22fe69c4079c973dd1bacf50fa70cde0da5a49eadf93c", @generic="a9bfabfdae03058fef282c6af08033baf3d2d71b9392c471efc06cd9edbb77d4338b490b54756ca056a649bf649132255133e7fea547", @generic="92676d6ae0da7a74c2396cbc3183e70b37951ea903e63f7d822c171753de8ee8c67de237baf7e3905a44bb6964590072ccb1dbd0e3172d3141deb662f8ee3ceadb232c7c99748a0569bb6762b06e293592b96fdfc59ec6e69f075ff5df0a1d4bc5a30dc96f2a369f5b464b875b3812dbd664731c31644474954a6f98e66579ff6174f3c2997be0f3f52fb7f9228444714bec38eb817e7bc4", @typed={0x8, 0xcb, 0x0, 0x0, @u32=0x8}, @nested={0xc, 0xd6, 0x0, 0x1, [@typed={0x8, 0x12c, 0x0, 0x0, @u32=0x1200000}]}]}, @typed={0x4, 0x2077}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x2560}, 0x1, 0x0, 0x0, 0x404c881}, 0x4008094) syz_emit_ethernet(0xdf, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000000000e4ffffff8100f0ff000401aa06318ca1768914e81e92c0389e9e51e6f3278a3c54a0b6a60ceac94bbf7f19864bc3c2aebb6801fa31e612cdaedede0ef62f120494ff7f5f444f3ea53d82c0fb8ac81851a0d2f1538e8d5ba183b33d73aa7226866d72524300eaac8d7fddad4829447583727a4dba2cc4ec2dbb634a1654dcc7cb783e5958b25738b3a91c3c6b7a0d88e097412e262823478e4317663ef9d0603a977361dd5a53b8cb1a8c0e222d52ccf904b9f3ffe7aaf8514d0400000000000000f6f25d73421896be491550ba54d11cb25ac8959b00000000000000000005000000000000"], 0x0) 0s ago: executing program 33 (id=510): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x1, 0x0, 0x0, {[@mss={0x2, 0x4, 0xa005}, @sack_perm={0x4, 0x2}]}}}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.200' (ED25519) to the list of known hosts. [ 66.529081][ T5810] cgroup: Unknown subsys name 'net' [ 66.661238][ T5810] cgroup: Unknown subsys name 'cpuset' [ 66.669982][ T5810] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.030170][ T5810] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.989571][ T5822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.997947][ T5822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.005682][ T5822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.013793][ T5822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.021607][ T5822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.134977][ T5822] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.143511][ T5822] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.151956][ T5822] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.159923][ T5822] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.167565][ T5822] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.212914][ T5147] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.222765][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.232145][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.240919][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.242180][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.256176][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.258455][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.264968][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.271144][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.278078][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.302621][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.313778][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.323378][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.331909][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.342042][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.698235][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 70.946376][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 71.004159][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.012625][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.022363][ T5820] bridge_slave_0: entered allmulticast mode [ 71.030200][ T5820] bridge_slave_0: entered promiscuous mode [ 71.043555][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 71.064713][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.072400][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.080477][ T5820] bridge_slave_1: entered allmulticast mode [ 71.088506][ T5820] bridge_slave_1: entered promiscuous mode [ 71.157220][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 71.186294][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 71.210187][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.250833][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.364398][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.371789][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.379511][ T5827] bridge_slave_0: entered allmulticast mode [ 71.386493][ T5827] bridge_slave_0: entered promiscuous mode [ 71.394123][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.401341][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.409590][ T5829] bridge_slave_0: entered allmulticast mode [ 71.416510][ T5829] bridge_slave_0: entered promiscuous mode [ 71.425853][ T5820] team0: Port device team_slave_0 added [ 71.436329][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.443109][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.457803][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.465160][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.472563][ T5827] bridge_slave_1: entered allmulticast mode [ 71.479627][ T5827] bridge_slave_1: entered promiscuous mode [ 71.486507][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.493741][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.501083][ T5829] bridge_slave_1: entered allmulticast mode [ 71.508142][ T5829] bridge_slave_1: entered promiscuous mode [ 71.517430][ T5820] team0: Port device team_slave_1 added [ 71.627354][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.634941][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.642617][ T5824] bridge_slave_0: entered allmulticast mode [ 71.649777][ T5824] bridge_slave_0: entered promiscuous mode [ 71.660308][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.672130][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.681925][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.689000][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.714930][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.726637][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.734071][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.741655][ T5826] bridge_slave_0: entered allmulticast mode [ 71.749006][ T5826] bridge_slave_0: entered promiscuous mode [ 71.760097][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.767188][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.774416][ T5824] bridge_slave_1: entered allmulticast mode [ 71.781438][ T5824] bridge_slave_1: entered promiscuous mode [ 71.790480][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.801374][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.811304][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.819561][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.846230][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.857482][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.864815][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.872126][ T5826] bridge_slave_1: entered allmulticast mode [ 71.879301][ T5826] bridge_slave_1: entered promiscuous mode [ 71.974955][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.985779][ T5827] team0: Port device team_slave_0 added [ 71.993591][ T5829] team0: Port device team_slave_0 added [ 72.002711][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.014240][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.025288][ T5827] team0: Port device team_slave_1 added [ 72.032753][ T5829] team0: Port device team_slave_1 added [ 72.050393][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.060012][ T5147] Bluetooth: hci0: command tx timeout [ 72.153624][ T5820] hsr_slave_0: entered promiscuous mode [ 72.160753][ T5820] hsr_slave_1: entered promiscuous mode [ 72.178543][ T5824] team0: Port device team_slave_0 added [ 72.184791][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.192378][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.218795][ T5147] Bluetooth: hci1: command tx timeout [ 72.224723][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.236721][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.243876][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.270118][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.283992][ T5826] team0: Port device team_slave_0 added [ 72.291405][ T5824] team0: Port device team_slave_1 added [ 72.297666][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.297873][ T5834] Bluetooth: hci3: command tx timeout [ 72.304677][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.310748][ T5147] Bluetooth: hci2: command tx timeout [ 72.341587][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.353941][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.361201][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.387923][ T5147] Bluetooth: hci4: command tx timeout [ 72.393707][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.406205][ T5826] team0: Port device team_slave_1 added [ 72.484888][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.491942][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.518348][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.530760][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.538116][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.564311][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.586554][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.593892][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.620078][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.632536][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.639648][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.665593][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.748859][ T5829] hsr_slave_0: entered promiscuous mode [ 72.755110][ T5829] hsr_slave_1: entered promiscuous mode [ 72.761848][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 72.767653][ T5829] Cannot create hsr debugfs directory [ 72.790563][ T5827] hsr_slave_0: entered promiscuous mode [ 72.796846][ T5827] hsr_slave_1: entered promiscuous mode [ 72.803170][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 72.809017][ T5827] Cannot create hsr debugfs directory [ 72.887047][ T5824] hsr_slave_0: entered promiscuous mode [ 72.893888][ T5824] hsr_slave_1: entered promiscuous mode [ 72.900590][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 72.906335][ T5824] Cannot create hsr debugfs directory [ 72.930340][ T5826] hsr_slave_0: entered promiscuous mode [ 72.936733][ T5826] hsr_slave_1: entered promiscuous mode [ 72.943629][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 72.949395][ T5826] Cannot create hsr debugfs directory [ 73.349490][ T5820] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.368464][ T5820] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.387641][ T5820] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.398811][ T5820] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.450127][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.466138][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.477525][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.499551][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.573001][ T5827] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.586504][ T5827] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.598380][ T5827] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.615177][ T5827] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.722889][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.734842][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.750934][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.765590][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.795618][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.817205][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.880105][ T3731] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.887286][ T3731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.926382][ T3731] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.933537][ T3731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.951528][ T5824] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.971248][ T5824] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.983748][ T5824] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.999602][ T5824] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.018679][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.085208][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.106345][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.121380][ T3731] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.128516][ T3731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.138564][ T5147] Bluetooth: hci0: command tx timeout [ 74.141921][ T5820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.203945][ T4161] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.211092][ T4161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.285927][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.298772][ T5147] Bluetooth: hci1: command tx timeout [ 74.326847][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.334075][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.354682][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.371529][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.378724][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.386279][ T5147] Bluetooth: hci3: command tx timeout [ 74.386288][ T5834] Bluetooth: hci2: command tx timeout [ 74.437018][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.459332][ T5147] Bluetooth: hci4: command tx timeout [ 74.472927][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.483093][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.490295][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.520609][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.527789][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.597154][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.674363][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.703608][ T4161] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.710904][ T4161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.722924][ T4161] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.730121][ T4161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.775050][ T5826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.848629][ T5820] veth0_vlan: entered promiscuous mode [ 74.878579][ T5820] veth1_vlan: entered promiscuous mode [ 74.926580][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.006038][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.060034][ T5820] veth0_macvtap: entered promiscuous mode [ 75.105966][ T5820] veth1_macvtap: entered promiscuous mode [ 75.163772][ T5829] veth0_vlan: entered promiscuous mode [ 75.210177][ T5829] veth1_vlan: entered promiscuous mode [ 75.223466][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.267360][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.301546][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.330226][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.351193][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.369929][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.388028][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.410689][ T5829] veth0_macvtap: entered promiscuous mode [ 75.445526][ T5829] veth1_macvtap: entered promiscuous mode [ 75.463950][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.545722][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.570219][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.583421][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.593053][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.619516][ T5826] veth0_vlan: entered promiscuous mode [ 75.640402][ T3731] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.650648][ T3731] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.672415][ T3731] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.681320][ T3731] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.704670][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.714270][ T5827] veth0_vlan: entered promiscuous mode [ 75.721659][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.736621][ T5826] veth1_vlan: entered promiscuous mode [ 75.773569][ T5827] veth1_vlan: entered promiscuous mode [ 75.794675][ T5820] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.843177][ T5824] veth0_vlan: entered promiscuous mode [ 75.916543][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.920152][ T5824] veth1_vlan: entered promiscuous mode [ 75.930932][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.982316][ T5932] xt_CT: You must specify a L4 protocol and not use inversions on it [ 76.004514][ T4161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.010536][ T5827] veth0_macvtap: entered promiscuous mode [ 76.018336][ T4161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.034098][ T5826] veth0_macvtap: entered promiscuous mode [ 76.048626][ T5826] veth1_macvtap: entered promiscuous mode [ 76.082015][ T5827] veth1_macvtap: entered promiscuous mode [ 76.151008][ T5824] veth0_macvtap: entered promiscuous mode [ 76.184516][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.201798][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.215182][ T5824] veth1_macvtap: entered promiscuous mode [ 76.227994][ T5147] Bluetooth: hci0: command tx timeout [ 76.236127][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.270737][ T4161] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.291634][ T4161] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.329782][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.354445][ T4161] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.386066][ T5147] Bluetooth: hci1: command tx timeout [ 76.409627][ T4161] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.446591][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.459819][ T5834] Bluetooth: hci2: command tx timeout [ 76.465396][ T5147] Bluetooth: hci3: command tx timeout [ 76.491410][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.520220][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.538413][ T5147] Bluetooth: hci4: command tx timeout [ 76.575586][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.610068][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.624352][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.673940][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.690336][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.718779][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.731458][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.847634][ T3430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.863192][ T3430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.941876][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.961387][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.030087][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.045525][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.172698][ T4161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.195398][ T4161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.228407][ T3430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.255633][ T3430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.433535][ T3430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.442988][ T3430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.715854][ T5959] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_1 [ 78.021758][ T5970] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9'. [ 78.072986][ T5976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 78.087894][ T5970] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9'. [ 78.199545][ T5970] team0: entered promiscuous mode [ 78.210062][ T5970] team_slave_0: entered promiscuous mode [ 78.249880][ T5980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12'. [ 78.292407][ T5970] team_slave_1: entered promiscuous mode [ 78.298383][ T5147] Bluetooth: hci0: command tx timeout [ 78.344035][ T5970] team0: left promiscuous mode [ 78.356353][ T5970] team_slave_0: left promiscuous mode [ 78.371111][ T5970] team_slave_1: left promiscuous mode [ 78.450589][ T5982] lo speed is unknown, defaulting to 1000 [ 78.460711][ T5147] Bluetooth: hci1: command tx timeout [ 78.505677][ T5985] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.528925][ T5984] Driver unsupported XDP return value 0 on prog (id 10) dev N/A, expect packet loss! [ 78.539112][ T5147] Bluetooth: hci3: command tx timeout [ 78.540324][ T5834] Bluetooth: hci2: command tx timeout [ 78.545768][ T5982] lo speed is unknown, defaulting to 1000 [ 78.618131][ T5834] Bluetooth: hci4: command tx timeout [ 78.944122][ T5988] netlink: 204 bytes leftover after parsing attributes in process `syz.4.13'. [ 78.956560][ T5982] lo speed is unknown, defaulting to 1000 [ 78.999370][ T5982] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 79.029471][ T5982] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 79.456159][ T6003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14'. [ 79.478095][ T5982] lo speed is unknown, defaulting to 1000 [ 79.539177][ T5985] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.571060][ T5982] lo speed is unknown, defaulting to 1000 [ 79.635963][ T5982] lo speed is unknown, defaulting to 1000 [ 79.660503][ T5982] lo speed is unknown, defaulting to 1000 [ 79.710522][ T5982] lo speed is unknown, defaulting to 1000 [ 79.751701][ T6007] netlink: 'syz.1.15': attribute type 1 has an invalid length. [ 79.840674][ T5985] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.864858][ T5982] lo speed is unknown, defaulting to 1000 [ 79.914082][ T6006] vlan2: entered allmulticast mode [ 79.919741][ T6006] syz_tun: entered allmulticast mode [ 80.066996][ T6014] xt_TCPMSS: Only works on TCP SYN packets [ 80.130422][ T5985] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.385729][ T6029] syz.1.18 uses obsolete (PF_INET,SOCK_PACKET) [ 80.441009][ T6030] Zero length message leads to an empty skb [ 80.474162][ T6009] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.528262][ T5953] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.580102][ T61] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.608301][ T61] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.825636][ T6037] lo speed is unknown, defaulting to 1000 [ 80.923184][ T6027] delete_channel: no stack [ 81.331263][ T6050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24'. [ 81.548974][ T6048] IPVS: rr: FWM 3 0x00000003 - no destination available [ 81.556078][ T57] IPVS: starting estimator thread 0... [ 81.659895][ T6054] IPVS: using max 27 ests per chain, 64800 per kthread [ 81.904418][ T6056] lo speed is unknown, defaulting to 1000 [ 82.178286][ T6065] netlink: 60 bytes leftover after parsing attributes in process `syz.4.28'. [ 82.239429][ T6070] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 82.535559][ T6077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.33'. [ 82.572830][ T6073] netlink: 16 bytes leftover after parsing attributes in process `syz.1.31'. [ 83.070546][ T30] audit: type=1804 audit(1767242505.556:2): pid=6097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.37" name="/newroot/8/cgroup.controllers" dev="tmpfs" ino=62 res=1 errno=0 [ 83.147072][ T30] audit: type=1800 audit(1767242505.586:3): pid=6097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.37" name="cgroup.controllers" dev="tmpfs" ino=62 res=0 errno=0 [ 83.560046][ T6111] __nla_validate_parse: 1 callbacks suppressed [ 83.560066][ T6111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.41'. [ 83.576553][ T6112] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 83.929086][ T6122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.44'. [ 84.059871][ T5959] Set syz1 is full, maxelem 65536 reached [ 84.191895][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888056a79800: rx timeout, send abort [ 84.356748][ T6132] netem: change failed [ 84.445385][ T6137] IPv6: sit1: Disabled Multicast RS [ 84.474503][ T6137] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.50'. [ 84.491694][ T6140] ªªªªª»: renamed from team_slave_1 (while UP) [ 84.497816][ T6137] ksmbd: Unknown IPC event: 1, ignore. [ 84.532761][ T6137] tipc: Started in network mode [ 84.537909][ T6137] tipc: Node identity 46e22151c68f, cluster identity 4711 [ 84.545351][ T6137] tipc: Enabled bearer , priority 0 [ 84.576937][ T6140] netlink: 16 bytes leftover after parsing attributes in process `syz.4.51'. [ 84.578034][ T6137] syzkaller0: entered promiscuous mode [ 84.602987][ T6137] syzkaller0: entered allmulticast mode [ 84.671931][ T6145] netlink: 'syz.3.52': attribute type 22 has an invalid length. [ 84.692604][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888056a7b000: rx timeout, send abort [ 84.695588][ T6147] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 84.702286][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888056a79800: abort rx timeout. Force session deactivation [ 84.956119][ T6155] tipc: Resetting bearer [ 85.009708][ T6157] bond1: option min_links: invalid value (18446744073709551612) [ 85.017587][ T6157] bond1: option min_links: allowed values 0 - 2147483647 [ 85.058439][ T6157] bond1 (unregistering): Released all slaves [ 85.120941][ T6165] x_tables: duplicate underflow at hook 1 [ 85.129619][ T6165] netlink: 12 bytes leftover after parsing attributes in process `syz.1.59'. [ 85.200971][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888056a7b000: abort rx timeout. Force session deactivation [ 85.261657][ T6163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.57'. [ 85.315824][ T6136] tipc: Resetting bearer [ 85.413446][ T6136] tipc: Disabling bearer [ 85.625228][ T6178] netlink: 'syz.3.61': attribute type 29 has an invalid length. [ 85.672159][ T6178] netlink: 'syz.3.61': attribute type 29 has an invalid length. [ 85.704617][ T6178] netlink: 500 bytes leftover after parsing attributes in process `syz.3.61'. [ 85.783099][ T6178] netlink: 36 bytes leftover after parsing attributes in process `syz.3.61'. [ 86.008164][ T10] cfg80211: failed to load regulatory.db [ 86.213206][ T6192] netlink: 32 bytes leftover after parsing attributes in process `syz.2.65'. [ 86.434481][ T6199] x_tables: duplicate underflow at hook 1 [ 86.590190][ T6206] netlink: 20 bytes leftover after parsing attributes in process `syz.0.71'. [ 86.879870][ T6206] nbd: socks must be embedded in a SOCK_ITEM attr [ 87.234432][ T5836] udevd[5836]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 87.255207][ T5836] udevd[5836]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 87.295603][ T6237] lo speed is unknown, defaulting to 1000 [ 88.104408][ T6267] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.421057][ T6283] netlink: 'syz.4.86': attribute type 1 has an invalid length. [ 88.432767][ T6284] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 88.633035][ T6290] __nla_validate_parse: 4 callbacks suppressed [ 88.633053][ T6290] netlink: 4 bytes leftover after parsing attributes in process `syz.4.88'. [ 88.646122][ T6293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.89'. [ 88.670324][ T6293] veth0_to_bond: entered allmulticast mode [ 88.690746][ T6290] ipvlan1: entered promiscuous mode [ 88.701401][ T6290] ipvlan1: entered allmulticast mode [ 88.707630][ T6293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.89'. [ 88.733640][ T6290] veth0_vlan: entered allmulticast mode [ 88.942993][ T6305] netlink: 44 bytes leftover after parsing attributes in process `syz.0.93'. [ 132.861174][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.867585][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 174.891291][ T6345] netlink: 32 bytes leftover after parsing attributes in process `syz.1.96'. [ 174.901341][ T6341] netlink: 4 bytes leftover after parsing attributes in process `syz.3.98'. [ 175.017372][ T6343] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.025700][ T6343] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.076490][ T6354] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 175.558896][ T6369] netlink: 584 bytes leftover after parsing attributes in process `syz.4.101'. [ 175.841135][ T6352] lo speed is unknown, defaulting to 1000 [ 175.861031][ T6358] veth0: entered promiscuous mode [ 176.215744][ T6381] xt_hashlimit: size too large, truncated to 1048576 [ 176.370049][ T6351] veth0: left promiscuous mode [ 176.390219][ T6384] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.549411][ T6387] netlink: 204 bytes leftover after parsing attributes in process `syz.3.106'. [ 177.091286][ T6405] netlink: 16 bytes leftover after parsing attributes in process `syz.1.112'. [ 177.127286][ T6405] netlink: 64 bytes leftover after parsing attributes in process `syz.1.112'. [ 177.141464][ T6409] lo speed is unknown, defaulting to 1000 [ 177.168063][ T6405] netlink: 16 bytes leftover after parsing attributes in process `syz.1.112'. [ 177.190149][ T6416] netlink: 'syz.0.116': attribute type 2 has an invalid length. [ 177.218721][ T6416] netlink: 'syz.0.116': attribute type 2 has an invalid length. [ 177.395461][ T6427] geneve2: entered promiscuous mode [ 177.625789][ T6433] netlink: 48 bytes leftover after parsing attributes in process `syz.0.121'. [ 177.766412][ T6435] tipc: Enabling of bearer rejected, failed to enable media [ 177.934318][ T6448] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 177.955685][ T6451] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 178.000502][ T6449] netlink: 'syz.0.124': attribute type 1 has an invalid length. [ 178.068744][ T6454] netlink: 'syz.4.126': attribute type 1 has an invalid length. [ 178.224365][ T6460] 8021q: adding VLAN 0 to HW filter on device bond2 [ 178.236115][ T6460] bond1: (slave bond2): making interface the new active one [ 178.246632][ T6460] bond1: (slave bond2): Enslaving as an active interface with an up link [ 178.271149][ T6454] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 178.291005][ T6454] netlink: 28 bytes leftover after parsing attributes in process `syz.4.126'. [ 178.334966][ T6454] 8021q: adding VLAN 0 to HW filter on device bond1 [ 178.362553][ T6470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.128'. [ 178.377133][ T6460] vlan2: entered promiscuous mode [ 178.387622][ T6460] bond1: entered promiscuous mode [ 178.393253][ T6460] bond2: entered promiscuous mode [ 178.636173][ T6486] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 179.031698][ T6507] IPv6: Can't replace route, no match found [ 179.311735][ T6502] warning: `syz.2.134' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 179.473217][ T6524] sctp: [Deprecated]: syz.4.139 (pid 6524) Use of struct sctp_assoc_value in delayed_ack socket option. [ 179.473217][ T6524] Use struct sctp_sack_info instead [ 179.505429][ T6525] sctp: [Deprecated]: syz.4.139 (pid 6525) Use of struct sctp_assoc_value in delayed_ack socket option. [ 179.505429][ T6525] Use struct sctp_sack_info instead [ 179.737604][ T6521] bridge_slave_1: left allmulticast mode [ 179.772890][ T6521] bridge_slave_1: left promiscuous mode [ 179.798078][ T6521] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.936985][ T6521] bridge_slave_0: left allmulticast mode [ 179.951715][ T6521] bridge_slave_0: left promiscuous mode [ 179.959275][ T6521] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.146055][ T6548] __nla_validate_parse: 2 callbacks suppressed [ 180.146073][ T6548] netlink: 40 bytes leftover after parsing attributes in process `syz.1.142'. [ 180.170985][ T6534] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 180.693527][ T6569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.148'. [ 180.724898][ T6568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.148'. [ 180.747777][ T6569] netlink: 'syz.1.148': attribute type 8 has an invalid length. [ 180.765566][ T6577] netlink: 12 bytes leftover after parsing attributes in process `syz.2.151'. [ 180.775718][ T6568] netlink: 'syz.1.148': attribute type 8 has an invalid length. [ 180.787788][ T6569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.148'. [ 180.814999][ T6568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.148'. [ 180.894495][ T6569] geneve2: entered promiscuous mode [ 180.941709][ T6583] Bluetooth: MGMT ver 1.23 [ 180.947529][ T6569] geneve2: entered allmulticast mode [ 181.099812][ T6590] netlink: 'syz.2.156': attribute type 21 has an invalid length. [ 181.108160][ T6590] IPv6: NLM_F_CREATE should be specified when creating new route [ 181.116460][ T6590] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 181.123772][ T6590] IPv6: NLM_F_CREATE should be set when creating new route [ 181.131063][ T6590] IPv6: NLM_F_CREATE should be set when creating new route [ 181.138453][ T6590] IPv6: NLM_F_CREATE should be set when creating new route [ 181.290865][ T6596] netlink: 'syz.1.158': attribute type 12 has an invalid length. [ 181.580045][ T6610] ip6tnl1: entered allmulticast mode [ 181.652423][ T6613] bond1 (unregistering): Released all slaves [ 181.743178][ T6620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.167'. [ 181.754495][ T6618] ipvlan0: entered promiscuous mode [ 181.820938][ T6618] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.859770][ T6626] ieee802154 phy0 wpan0: encryption failed: -22 [ 182.032706][ T6633] netlink: 164 bytes leftover after parsing attributes in process `syz.4.172'. [ 182.074687][ T6637] netlink: 16 bytes leftover after parsing attributes in process `syz.2.173'. [ 182.100650][ T6618] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.193654][ T6641] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 182.322070][ T6618] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.344953][ T6651] netlink: 4 bytes leftover after parsing attributes in process `syz.4.177'. [ 182.464091][ T6618] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.645128][ T6660] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 182.666291][ T6667] netlink: 'syz.2.180': attribute type 1 has an invalid length. [ 182.676499][ T6659] tipc: Started in network mode [ 182.687591][ T6659] tipc: Node identity 5e3090c37a54, cluster identity 4711 [ 182.718604][ T6659] tipc: Enabled bearer , priority 0 [ 182.742818][ T6666] syzkaller0: entered promiscuous mode [ 182.776840][ T6666] syzkaller0: entered allmulticast mode [ 182.819727][ T6671] veth1_macvtap: left promiscuous mode [ 182.831034][ T6653] lo speed is unknown, defaulting to 1000 [ 182.916481][ T6666] tipc: Resetting bearer [ 182.974994][ T6661] netlink: 'syz.3.175': attribute type 6 has an invalid length. [ 182.991786][ T6666] tipc: Disabling bearer [ 183.112814][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.176687][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.291757][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.320423][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.831492][ T5492] veth1_macvtap: entered promiscuous mode [ 185.574192][ T6775] __nla_validate_parse: 2 callbacks suppressed [ 185.574211][ T6775] netlink: 48 bytes leftover after parsing attributes in process `syz.4.205'. [ 185.724381][ T6783] netlink: 8 bytes leftover after parsing attributes in process `syz.3.207'. [ 185.815798][ T6787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.207'. [ 186.005952][ T6797] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 186.253723][ T6793] lo speed is unknown, defaulting to 1000 [ 187.377602][ T6862] netlink: 24 bytes leftover after parsing attributes in process `syz.3.219'. [ 187.438308][ T6854] lo speed is unknown, defaulting to 1000 [ 187.451723][ T6858] netlink: 4 bytes leftover after parsing attributes in process `syz.3.219'. [ 187.829144][ T6879] netlink: 84 bytes leftover after parsing attributes in process `syz.4.223'. [ 187.841829][ T6879] netlink: 84 bytes leftover after parsing attributes in process `syz.4.223'. [ 188.138825][ T6887] : entered promiscuous mode [ 188.266831][ T6896] lo speed is unknown, defaulting to 1000 [ 188.771426][ T6907] syzkaller0: entered promiscuous mode [ 188.838031][ T6907] syzkaller0: entered allmulticast mode [ 188.880884][ T6917] bridge1: entered promiscuous mode [ 188.886508][ T6917] bridge1: entered allmulticast mode [ 189.166398][ T6921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.237'. [ 189.209453][ T6921] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 189.216098][ T6921] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 189.621493][ T6931] netlink: 'syz.2.240': attribute type 1 has an invalid length. [ 189.664107][ T6931] netlink: 'syz.2.240': attribute type 3 has an invalid length. [ 189.705026][ T6931] netlink: 224 bytes leftover after parsing attributes in process `syz.2.240'. [ 190.055542][ T6963] lo speed is unknown, defaulting to 1000 [ 190.120047][ T6966] netlink: 'syz.2.249': attribute type 21 has an invalid length. [ 190.142438][ T6966] netlink: 'syz.2.249': attribute type 1 has an invalid length. [ 190.150573][ T6966] netlink: 144 bytes leftover after parsing attributes in process `syz.2.249'. [ 190.196344][ T6969] netlink: 'syz.1.250': attribute type 1 has an invalid length. [ 190.291646][ T6969] 8021q: adding VLAN 0 to HW filter on device bond1 [ 190.324992][ T6973] veth3: entered promiscuous mode [ 190.344259][ T6973] bond1: (slave veth3): Enslaving as an active interface with an up link [ 190.679939][ T6988] netlink: 'syz.4.252': attribute type 4 has an invalid length. [ 190.750510][ T6988] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20001 [ 191.163144][ T7002] netlink: 'syz.4.258': attribute type 2 has an invalid length. [ 191.337585][ T7009] __nla_validate_parse: 1 callbacks suppressed [ 191.337603][ T7009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.261'. [ 191.416553][ T7015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.262'. [ 191.740448][ T7025] openvswitch: netlink: EtherType 50a is less than min 600 [ 192.021567][ T7031] syzkaller1: entered promiscuous mode [ 192.042934][ T7031] syzkaller1: entered allmulticast mode [ 192.431423][ T7053] netlink: 16 bytes leftover after parsing attributes in process `syz.3.271'. [ 192.679816][ T7060] lo speed is unknown, defaulting to 1000 [ 193.684821][ T7092] netlink: 16 bytes leftover after parsing attributes in process `syz.0.278'. [ 193.811228][ T7093] Bluetooth: MGMT ver 1.23 [ 193.833615][ T7093] netlink: 96 bytes leftover after parsing attributes in process `syz.3.279'. [ 193.881623][ T7098] netlink: 40 bytes leftover after parsing attributes in process `syz.1.280'. [ 193.893448][ T7095] lo speed is unknown, defaulting to 1000 [ 194.307470][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.315458][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.402953][ T7111] geneve3: entered promiscuous mode [ 194.433592][ T7118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.285'. [ 194.530222][ T7118] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 194.803029][ T7131] xt_TPROXY: Can be used only with -p tcp or -p udp [ 194.825589][ T7130] xt_TPROXY: Can be used only with -p tcp or -p udp [ 194.952130][ T7138] team_slave_0: entered promiscuous mode [ 194.958108][ T7138] team_slave_1: entered promiscuous mode [ 195.000717][ T7138] vlan3: entered promiscuous mode [ 195.023985][ T7138] team0: entered promiscuous mode [ 195.415722][ T7146] netlink: 40 bytes leftover after parsing attributes in process `syz.2.292'. [ 195.572584][ T7150] netlink: 'syz.2.294': attribute type 1 has an invalid length. [ 196.381267][ T7120] Bluetooth: hci2: command 0x0406 tx timeout [ 196.387313][ T7120] Bluetooth: hci3: command 0x0406 tx timeout [ 196.393717][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 196.395066][ T7181] Bluetooth: hci4: command 0x0406 tx timeout [ 196.429345][ T7183] netlink: 'syz.2.301': attribute type 8 has an invalid length. [ 196.564849][ T7187] raw_sendmsg: syz.0.302 forgot to set AF_INET. Fix it! [ 196.594539][ T7189] netlink: 20 bytes leftover after parsing attributes in process `syz.4.303'. [ 196.949969][ T7200] lo speed is unknown, defaulting to 1000 [ 197.295755][ T7204] netlink: 80 bytes leftover after parsing attributes in process `syz.0.307'. [ 198.036530][ T10] IPVS: starting estimator thread 0... [ 198.167808][ T7227] IPVS: using max 28 ests per chain, 67200 per kthread [ 198.215670][ T7236] tipc: Enabling of bearer rejected, failed to enable media [ 198.584331][ T7251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.320'. [ 198.602017][ T7249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.320'. [ 198.622452][ T7251] hsr_slave_0: left promiscuous mode [ 198.642133][ T7251] hsr_slave_1: left promiscuous mode [ 198.719046][ T7256] netlink: 'syz.0.317': attribute type 11 has an invalid length. [ 198.746330][ T7256] netlink: 'syz.0.317': attribute type 11 has an invalid length. [ 198.807899][ T7256] netlink: 224 bytes leftover after parsing attributes in process `syz.0.317'. [ 199.107046][ T7238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.216257][ T7267] netlink: 'syz.2.323': attribute type 10 has an invalid length. [ 199.382177][ T7270] tipc: Started in network mode [ 199.387084][ T7270] tipc: Node identity e2263873fae7, cluster identity 4711 [ 199.408027][ T7270] tipc: Enabled bearer , priority 0 [ 199.456477][ T7270] syzkaller0: entered promiscuous mode [ 199.478276][ T7270] syzkaller0: entered allmulticast mode [ 199.625370][ T7270] tipc: Resetting bearer [ 199.681118][ T7269] tipc: Resetting bearer [ 199.747054][ T7269] tipc: Disabling bearer [ 200.197042][ T7283] lo speed is unknown, defaulting to 1000 [ 200.245024][ T7285] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 200.292308][ T7285] netlink: 16 bytes leftover after parsing attributes in process `syz.4.328'. [ 200.347787][ T7288] netlink: 'syz.0.329': attribute type 11 has an invalid length. [ 200.614249][ T7293] netlink: 12 bytes leftover after parsing attributes in process `syz.1.331'. [ 200.962148][ T7311] netlink: 'syz.0.336': attribute type 11 has an invalid length. [ 201.136634][ T7322] delete_channel: no stack [ 201.174456][ T7325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.339'. [ 201.225248][ T7325] netlink: 4 bytes leftover after parsing attributes in process `syz.0.339'. [ 201.577413][ T7336] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.606035][ T7344] xt_hashlimit: overflow, try lower: 2341871806232657920/9 [ 201.711402][ T7347] netlink: 'syz.4.348': attribute type 1 has an invalid length. [ 201.719306][ T7347] netlink: 'syz.4.348': attribute type 4 has an invalid length. [ 201.727230][ T7347] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.348'. [ 201.739901][ T7347] netlink: 'syz.4.348': attribute type 1 has an invalid length. [ 201.748015][ T7347] netlink: 'syz.4.348': attribute type 4 has an invalid length. [ 201.756050][ T7347] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.348'. [ 201.770819][ T7336] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.916964][ T7336] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.026897][ T7351] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.034158][ T7351] bridge0: port 2(bridge_slave_1) entered listening state [ 202.041661][ T7351] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.048856][ T7351] bridge0: port 1(bridge_slave_0) entered listening state [ 202.077483][ T7351] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 202.130056][ T7336] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.387630][ T4161] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.431108][ T5953] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.473598][ T5953] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.495129][ T7373] ipvlan0: entered promiscuous mode [ 202.508826][ T7378] netlink: 'syz.2.356': attribute type 1 has an invalid length. [ 202.573299][ T5953] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.755363][ T7367] infiniband syû: set active [ 202.760269][ T7367] infiniband syû: added bond_slave_0 [ 202.904397][ T7389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.363'. [ 202.924626][ T7367] RDS/IB: syû: added [ 202.940776][ T7367] smc: adding ib device syû with port count 1 [ 202.947117][ T7367] smc: ib device syû port 1 has no pnetid [ 202.955727][ T7389] veth1_macvtap: left promiscuous mode [ 202.981936][ T7392] netlink: 'syz.0.364': attribute type 4 has an invalid length. [ 203.121564][ T7397] netlink: 12 bytes leftover after parsing attributes in process `syz.0.366'. [ 203.219794][ T7402] tipc: Started in network mode [ 203.229634][ T7402] tipc: Node identity 4e40e8caf669, cluster identity 4711 [ 203.253465][ T7402] tipc: Enabled bearer , priority 0 [ 203.296292][ T7402] syzkaller0: entered promiscuous mode [ 203.302754][ T7402] syzkaller0: entered allmulticast mode [ 203.358435][ T7406] netlink: 96 bytes leftover after parsing attributes in process `syz.3.367'. [ 203.393564][ T7402] tipc: Resetting bearer [ 203.415390][ T7401] tipc: Resetting bearer [ 203.456297][ T7401] tipc: Disabling bearer [ 203.468870][ T7413] netlink: 'syz.0.370': attribute type 20 has an invalid length. [ 203.478251][ T7413] netlink: 'syz.0.370': attribute type 20 has an invalid length. [ 203.835074][ T7418] lo speed is unknown, defaulting to 1000 [ 203.963956][ T7424] tipc: Can't bind to reserved service type 0 [ 204.256973][ T7430] lo speed is unknown, defaulting to 1000 [ 204.430775][ T7442] tc_dump_action: action bad kind [ 204.503540][ T7427] lo speed is unknown, defaulting to 1000 [ 205.850830][ T7459] netlink: 146872 bytes leftover after parsing attributes in process `syz.4.380'. [ 206.106397][ T7473] netlink: 'syz.4.382': attribute type 27 has an invalid length. [ 206.122220][ T7472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.383'. [ 206.298854][ T7468] lo speed is unknown, defaulting to 1000 [ 206.522522][ T7482] trusted_key: syz.2.385 sent an empty control message without MSG_MORE. [ 206.948703][ T7484] netlink: 'syz.2.386': attribute type 2 has an invalid length. [ 206.963944][ T7485] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 1, id = 0 [ 206.975377][ T7484] netlink: 'syz.2.386': attribute type 2 has an invalid length. [ 207.436025][ T7491] bond3: Removing last arp target with arp_interval on [ 207.638551][ T7491] bond4: Removing last arp target with arp_interval on [ 207.971289][ T7506] lo speed is unknown, defaulting to 1000 [ 207.995118][ T7509] lo speed is unknown, defaulting to 1000 [ 208.122929][ T7523] netlink: 132 bytes leftover after parsing attributes in process `syz.2.394'. [ 208.321645][ T7508] netlink: 'syz.4.388': attribute type 10 has an invalid length. [ 208.343972][ T7508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.362272][ T7508] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 208.450278][ T7531] netlink: 'syz.1.396': attribute type 10 has an invalid length. [ 208.468307][ T7531] netlink: 40 bytes leftover after parsing attributes in process `syz.1.396'. [ 208.553958][ T7531] team0: Failed to send options change via netlink (err -105) [ 208.678424][ T7531] team0: Port device geneve0 added [ 208.829763][ T7535] syzkaller0: entered promiscuous mode [ 208.835272][ T7535] syzkaller0: entered allmulticast mode [ 209.029940][ T7544] netlink: 68 bytes leftover after parsing attributes in process `syz.1.400'. [ 209.120868][ T7546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.401'. [ 209.168798][ T7546] dummy0: entered promiscuous mode [ 209.184901][ T7552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.402'. [ 209.201541][ T7546] dummy0: left promiscuous mode [ 209.210402][ T7552] netlink: 56 bytes leftover after parsing attributes in process `syz.2.402'. [ 209.613624][ T7561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.406'. [ 209.770199][ T7566] netlink: 'syz.4.406': attribute type 10 has an invalid length. [ 209.858198][ T7561] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.875951][ T7561] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.913397][ T7561] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.927813][ T7561] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.959692][ T7561] bond0: (slave batadv0): Releasing backup interface [ 209.994320][ T7564] geneve4: entered promiscuous mode [ 210.013736][ T7564] geneve4: entered allmulticast mode [ 210.045839][ T7566] team0: Port device team_slave_0 removed [ 210.394912][ T7557] lo speed is unknown, defaulting to 1000 [ 210.425274][ T7579] lo speed is unknown, defaulting to 1000 [ 210.516245][ T7562] netlink: 20 bytes leftover after parsing attributes in process `syz.0.405'. [ 210.528890][ T7559] lo speed is unknown, defaulting to 1000 [ 210.658460][ T7595] tipc: Enabled bearer , priority 0 [ 210.666586][ T7595] syzkaller0: entered promiscuous mode [ 210.677883][ T7595] syzkaller0: entered allmulticast mode [ 210.742829][ T7595] tipc: Resetting bearer [ 210.773757][ T7594] tipc: Resetting bearer [ 210.796463][ T7594] tipc: Disabling bearer [ 210.975283][ T7603] netlink: 48 bytes leftover after parsing attributes in process `syz.1.415'. [ 211.003232][ T7604] netlink: 48 bytes leftover after parsing attributes in process `syz.1.415'. [ 211.220883][ T7611] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 211.778946][ T7633] lo speed is unknown, defaulting to 1000 [ 211.967911][ T7640] syz.3.422 (7640) used obsolete PPPIOCDETACH ioctl [ 213.162148][ T7656] netlink: 88 bytes leftover after parsing attributes in process `syz.4.426'. [ 213.261612][ T7663] netlink: 36 bytes leftover after parsing attributes in process `syz.4.426'. [ 213.396367][ T7656] syzkaller1: entered promiscuous mode [ 213.402267][ T7656] syzkaller1: entered allmulticast mode [ 214.181099][ T7675] wg1: entered promiscuous mode [ 214.186066][ T7675] wg1: entered allmulticast mode [ 214.290731][ T7692] lo speed is unknown, defaulting to 1000 [ 214.415371][ T7701] netlink: 1468 bytes leftover after parsing attributes in process `syz.4.436'. [ 214.801015][ T7722] netlink: 'syz.0.440': attribute type 2 has an invalid length. [ 214.834862][ T7722] !: entered promiscuous mode [ 214.851798][ T7722] netlink: 'syz.0.440': attribute type 2 has an invalid length. [ 214.892391][ T7722] !: left promiscuous mode [ 214.998514][ T7725] veth0_to_team: entered promiscuous mode [ 215.133797][ T7723] ip6gretap0: entered promiscuous mode [ 215.167480][ T7739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.442'. [ 215.194711][ T7722] netlink: 'syz.0.440': attribute type 39 has an invalid length. [ 215.282775][ T7722] hsr_slave_1 (unregistering): left promiscuous mode [ 216.088089][ T7753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.443'. [ 216.206653][ T7753] veth2: entered allmulticast mode [ 216.443216][ T7770] lo speed is unknown, defaulting to 1000 [ 216.487268][ T7778] x_tables: duplicate underflow at hook 2 [ 216.522453][ T7780] ieee802154 phy0 wpan0: encryption failed: -22 [ 216.714414][ T7785] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 216.728916][ T7785] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 216.751842][ T7788] lo speed is unknown, defaulting to 1000 [ 217.440683][ T7817] bridge0: entered allmulticast mode [ 217.704066][ T7825] syzkaller0: entered promiscuous mode [ 217.736693][ T7825] syzkaller0: entered allmulticast mode [ 217.903553][ T7834] netlink: 'syz.3.463': attribute type 33 has an invalid length. [ 217.932579][ T7834] netlink: 152 bytes leftover after parsing attributes in process `syz.3.463'. [ 218.292981][ T7841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.467'. [ 218.397874][ T7834] `: renamed from team0 (while UP) [ 218.654629][ T7850] netlink: 12 bytes leftover after parsing attributes in process `syz.3.469'. [ 220.025715][ T7871] syzkaller0: entered promiscuous mode [ 220.041635][ T7871] syzkaller0: entered allmulticast mode [ 220.084158][ T7871] macsec0: entered promiscuous mode [ 221.327304][ T7886] pim6reg: entered allmulticast mode [ 221.379553][ T7878] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 222.054235][ T7900] netlink: 48 bytes leftover after parsing attributes in process `syz.2.484'. [ 222.200263][ T7902] netlink: 'syz.4.485': attribute type 1 has an invalid length. [ 222.293354][ T7905] bond3: Unable to set up delay as MII monitoring is disabled [ 222.341914][ T7905] bond3 (unregistering): Released all slaves [ 222.410477][ T7902] 8021q: adding VLAN 0 to HW filter on device bond3 [ 222.469118][ T7912] bond3: (slave ip6gretap1): making interface the new active one [ 222.491711][ T7912] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 222.513383][ T7910] tipc: Enabled bearer , priority 0 [ 222.545555][ T7918] syzkaller0: entered promiscuous mode [ 222.595434][ T7918] syzkaller0: entered allmulticast mode [ 222.627366][ T7922] netlink: 64 bytes leftover after parsing attributes in process `syz.2.484'. [ 222.691910][ T7910] tipc: Resetting bearer [ 222.701444][ T7921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.488'. [ 222.725039][ T7898] tipc: Resetting bearer [ 222.783618][ T7898] tipc: Disabling bearer [ 222.968948][ T7926] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.528267][ T3430] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.817585][ T5147] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 223.830378][ T5147] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 223.839373][ T5147] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 223.847648][ T5147] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 223.858004][ T5147] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 223.906541][ T7929] lo speed is unknown, defaulting to 1000 [ 224.339613][ T7929] chnl_net:caif_netlink_parms(): no params data found [ 224.496264][ T7929] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.504376][ T7929] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.512733][ T7929] bridge_slave_0: entered allmulticast mode [ 224.522005][ T7929] bridge_slave_0: entered promiscuous mode [ 224.532025][ T7929] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.539738][ T7929] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.548399][ T7929] bridge_slave_1: entered allmulticast mode [ 224.556339][ T7929] bridge_slave_1: entered promiscuous mode [ 224.660192][ T7926] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.824259][ T7929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.872328][ T7944] pim6reg: entered allmulticast mode [ 224.948200][ T7929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.285186][ T7951] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 225.299548][ T7951] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 225.367632][ T7929] team0: Port device team_slave_0 added [ 225.377490][ T7929] team0: Port device team_slave_1 added [ 225.436368][ T7929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.444078][ T7929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 225.474454][ T7929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.489503][ T7929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.496692][ T7929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 225.524261][ T7929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.622931][ T7929] hsr_slave_0: entered promiscuous mode [ 225.633264][ T7929] hsr_slave_1: entered promiscuous mode [ 225.641092][ T7929] debugfs: 'hsr0' already exists in 'hsr' [ 225.647071][ T7929] Cannot create hsr debugfs directory [ 225.847646][ T3430] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.908440][ T5147] Bluetooth: hci0: command tx timeout [ 225.981763][ T7929] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 226.039866][ T7929] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 226.089563][ T7929] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 226.116949][ T7929] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 226.275605][ T7929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.346373][ T7929] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.412860][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.420050][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.446509][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.453712][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.734484][ T7929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.053950][ T7929] veth0_vlan: entered promiscuous mode [ 227.075128][ T7929] veth1_vlan: entered promiscuous mode [ 227.141433][ T7929] veth0_macvtap: entered promiscuous mode [ 227.240545][ T7975] netlink: 'syz.2.499': attribute type 10 has an invalid length. [ 227.277258][ T7975] netlink: 40 bytes leftover after parsing attributes in process `syz.2.499'. [ 227.287154][ T7929] veth1_macvtap: entered promiscuous mode [ 227.342652][ T7926] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.432661][ T7975] geneve0: entered promiscuous mode [ 227.467564][ T7975] team0: Failed to send options change via netlink (err -105) [ 227.482041][ T7975] team0: Port device geneve0 added [ 227.570828][ T7929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.632344][ T7929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.680135][ T1131] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.707117][ T1131] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.827318][ T1131] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.879190][ T1131] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.978123][ T5147] Bluetooth: hci0: command tx timeout [ 228.239111][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 228.248591][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 228.259274][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 228.267299][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 228.282825][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 228.325152][ T1131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.368897][ T1131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.495459][ T6009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.517291][ T7985] lo speed is unknown, defaulting to 1000 [ 228.533445][ T6009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.937552][ T3430] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.107309][ T8001] sctp: [Deprecated]: syz.5.491 (pid 8001) Use of struct sctp_assoc_value in delayed_ack socket option. [ 229.107309][ T8001] Use struct sctp_sack_info instead [ 229.838267][ T8012] tun0: tun_chr_ioctl cmd 1074025673 [ 229.867119][ T8012] netlink: 20 bytes leftover after parsing attributes in process `syz.2.506'. [ 229.937340][ T8013] tun0: tun_chr_ioctl cmd 21731 [ 229.975771][ T8015] tun0: tun_chr_ioctl cmd 21731 [ 230.004523][ T8012] tun0: tun_chr_ioctl cmd 1074025675 [ 230.037896][ T8012] tun0: persist disabled [ 230.050516][ T8013] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.061504][ T5831] Bluetooth: hci0: command tx timeout [ 230.295010][ T8023] netlink: 28 bytes leftover after parsing attributes in process `syz.5.509'. [ 230.321079][ T8023] netlink: 28 bytes leftover after parsing attributes in process `syz.5.509'. [ 230.379933][ T5831] Bluetooth: hci3: command tx timeout [ 230.550728][ T8019] netlink: 'syz.1.508': attribute type 1 has an invalid length. [ 230.747545][ T7926] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.066933][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 232.075073][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 232.744883][ T5147] Bluetooth: hci3: command tx timeout [ 232.764092][ T5831] Bluetooth: hci0: command tx timeout [ 232.803821][ C0] sched: DL replenish lagged too much [ 234.869806][ T5831] Bluetooth: hci3: command tx timeout [ 236.958105][ T5831] Bluetooth: hci3: command tx timeout [ 260.051939][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.073515][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.143631][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.151007][ C0] bridge0: topology change detected, propagating [ 262.157745][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.164963][ C0] bridge0: topology change detected, propagating [ 317.353136][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.373119][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 350.439705][ T5147] Bluetooth: hci0: command 0x0406 tx timeout [ 355.155281][ T5147] Bluetooth: hci3: command 0x0406 tx timeout [ 378.741216][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.757949][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 393.999537][ T31] INFO: task kworker/u8:8:1333 blocked for more than 143 seconds. [ 394.007404][ T31] Not tainted syzkaller #0 [ 402.128038][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 402.136874][ T31] task:kworker/u8:8 state:D stack:21144 pid:1333 tgid:1333 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 402.507963][ T31] Workqueue: events_unbound linkwatch_event [ 402.516077][ T31] Call Trace: [ 402.689507][ T31] [ 402.692626][ T31] __schedule+0x149b/0x4fd0 [ 402.697201][ T31] ? __pfx___schedule+0x10/0x10 [ 402.939931][ T31] ? schedule+0x91/0x360 [ 402.944240][ T31] schedule+0x165/0x360 [ 403.100062][ T31] schedule_preempt_disabled+0x13/0x30 [ 403.105668][ T31] __mutex_lock+0x7e6/0x1350 [ 403.227839][ T31] ? __mutex_lock+0x5bb/0x1350 [ 403.234681][ T31] ? linkwatch_event+0xe/0x60 [ 403.339319][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 403.344422][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 403.457835][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 403.477815][ T31] linkwatch_event+0xe/0x60 [ 403.482397][ T31] process_scheduled_works+0xad1/0x1770 [ 403.617972][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 403.624137][ T31] worker_thread+0x8a0/0xda0 [ 403.728048][ T31] kthread+0x711/0x8a0 [ 403.732197][ T31] ? __pfx_worker_thread+0x10/0x10 [ 403.737347][ T31] ? __pfx_kthread+0x10/0x10 [ 403.837797][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 403.900439][ T31] ? __pfx_kthread+0x10/0x10 [ 403.905862][ T31] ret_from_fork+0x510/0xa50 [ 403.978059][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 403.983327][ T31] ? __switch_to+0xc9e/0x1480