last executing test programs: 6.009475652s ago: executing program 0 (id=390): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x7, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x15}]}, &(0x7f0000000ac0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x14, 0x22, 0x9, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 5.773981976s ago: executing program 0 (id=395): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x2c8}}, 0x40804) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x3c, 0x68, 0x1, 0xfcfd, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_TC={0x5}}, @NHA_ID={0x8, 0x6, 0xa00}, @NHA_OIF={0x8, 0x5, r2}]}, 0x3c}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42072, 0xffffffffffffffff, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5f250a085f00fe", @ANYRES32=r4, @ANYBLOB="140006000300000004000000390a000003000000"], 0x2c}}, 0x0) 5.511574483s ago: executing program 0 (id=401): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) 1.689894514s ago: executing program 3 (id=443): socket$pppoe(0x18, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xffffff14, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r0], 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001000030400"/20, @ANYRES32=r2, @ANYBLOB="a5fdad88000000000a000100aa"], 0x2c}}, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) 1.689225103s ago: executing program 1 (id=444): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000007c0)="1483d0d82d", 0x5}, {&(0x7f00000008c0)="ac", 0x1}], 0x2}, 0x44884) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x400201}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$unix(0x1, 0x5, 0x0) (async) socket$unix(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) socket$kcm(0x2, 0xa, 0x2) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r5, 0x0, 0x10000800) (async) sendmsg$802154_dgram(r5, 0x0, 0x10000800) recvmmsg(r5, 0x0, 0x0, 0x100e0, 0x0) (async) recvmmsg(r5, 0x0, 0x0, 0x100e0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) (async) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0xce}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x4e27, 0x0, @loopback}], 0x1c) 1.558447432s ago: executing program 4 (id=446): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000340)=0x1, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x4e1f, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x5a3a, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r3, &(0x7f00000006c0), 0x0, 0x20008800, &(0x7f0000000100)={0x11, 0x88a8, r4, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, 0x14) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x4, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x67, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1a}, {[@timestamp={0x44, 0x4, 0x1c, 0x0, 0x6}]}}, {0x4e20, 0x4e22, 0x4f, 0x0, @wg=@data={0x4, 0x2, 0x8, "e8771ac366586e56f446dcd22ec94c672f1cd650516a2fbeddd0cb5cffc4ef63a1c2be9551171e48bb8559ac9077c099289048d76df434"}}}}, 0x75) sendto$inet(r1, &(0x7f0000000080)='m', 0x1, 0x0, 0x0, 0x0) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000100)=0x2, 0x4) recvmmsg(r1, &(0x7f0000001940)=[{{&(0x7f0000000180)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000300)=""/66, 0x42}], 0x2, &(0x7f0000001700)=""/169, 0xa9}, 0x200}, {{&(0x7f00000017c0)=@in6, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000200)=""/219, 0xdb}, 0x88c8}], 0x2, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000340)=0x1, 0x4) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) bind$inet(r1, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) (async) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x4e1f, @loopback}, 0x10) (async) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x5a3a, 0x4) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'xfrm0\x00'}) (async) sendto$packet(r3, &(0x7f00000006c0), 0x0, 0x20008800, &(0x7f0000000100)={0x11, 0x88a8, r4, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, 0x14) (async) socket$kcm(0x2, 0x3, 0x2) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r2, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x4, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x67, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1a}, {[@timestamp={0x44, 0x4, 0x1c, 0x0, 0x6}]}}, {0x4e20, 0x4e22, 0x4f, 0x0, @wg=@data={0x4, 0x2, 0x8, "e8771ac366586e56f446dcd22ec94c672f1cd650516a2fbeddd0cb5cffc4ef63a1c2be9551171e48bb8559ac9077c099289048d76df434"}}}}, 0x75) (async) sendto$inet(r1, &(0x7f0000000080)='m', 0x1, 0x0, 0x0, 0x0) (async) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000100)=0x2, 0x4) (async) recvmmsg(r1, &(0x7f0000001940)=[{{&(0x7f0000000180)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000300)=""/66, 0x42}], 0x2, &(0x7f0000001700)=""/169, 0xa9}, 0x200}, {{&(0x7f00000017c0)=@in6, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000200)=""/219, 0xdb}, 0x88c8}], 0x2, 0x0, 0x0) (async) 1.397674254s ago: executing program 3 (id=447): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xf, &(0x7f00000006c0)=ANY=[@ANYRESHEX=r2, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000003008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x57d1f10e3f7d2d6d) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000840)='virtio_transport_alloc_pkt\x00', r3}, 0x18) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="c9da0000", @ANYRES16=r0, @ANYBLOB="010000000000000000001b000000070021006161000008009a0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x8) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) pipe(&(0x7f0000000000)) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r8, 0x0, 0x22, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x14, r7, 0x2, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20004840}, 0x8810) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_SECURITY(r9, 0x112, 0x4, &(0x7f00000000c0)={0x4, 0x5}, 0x2) 1.347300712s ago: executing program 1 (id=448): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) pwritev(r1, &(0x7f0000000440)=[{&(0x7f0000000140)='2', 0x1}], 0x1, 0x4000000, 0x80) 1.265851373s ago: executing program 3 (id=450): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0xffffffff}, 0x10) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff8c, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0xffff0001, 0x0, 0xffffffffffffffff, 0x830, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r5, &(0x7f0000000340)="533fc76490f509d58c503b7dee49aca16bac02d8d81bb5be2c40cb1d9080ceb8a0895dd385c104018975b488e35704bdaded47a4bd6772fec26f7f5e758092f4817c178bdb5592092d543b432d1c252abbe6084f0aa5f291800f723079b02be90e20197094cb0924d7ebc663fe3d4ce5e4a3c42628df197c5d519397fd440ef3730f71a2f210c00d5d6ec94e", &(0x7f0000000400)=""/200}, 0x20) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x48, 0x10, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1020c}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_IFNAME={0x14, 0x3, 'dvmrp0\x00'}, @IFLA_NET_NS_FD={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4010800}, 0x8054) 1.257585953s ago: executing program 4 (id=451): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) (async) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0xd, 0x1, 0xe0, 0x1}, {0x7, 0xb1, 0xd, 0x35}, {0x6, 0x0, 0x2, 0x292}, {0x1, 0xf6, 0x1, 0x5}, {0x0, 0x4, 0x64}, {0x2d, 0x1, 0x7, 0x7}]}, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) (async) write(r1, &(0x7f0000000140)="4fe0acc5d716574ca81d0259b4deda41fd047a3d4217c9216f3d18281644aeacab8384dd1e5c4eceab90540c4d2787e069ca3f68a790547163d3fa04c6047404385c707a91c2949c71c0c574fa084462e5043b4604ea3e88cc70f08a0accc34d23965aa910b71747c6722c7495bd8d6c79b07149c0c22b60dcd317d44fda314d96da823c0abe48996c1b4eb7c160c0173704234cb5c6ffd5a106d9938f527eef62ed165f98d1d3dcdbb293b6610c0b11b01dc30b26f05041d4134c40f71b79", 0xbf) (async) r2 = epoll_create(0x6d27) epoll_wait(r2, &(0x7f0000000200)=[{}], 0x1, 0x2) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240), 0x4) (async) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={0xffffffffffffffff}, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000002c0)={r3, r1, 0x0, r4}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)=r4}, 0x20) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', &(0x7f0000000580)={'ip6_vti0\x00', 0x0, 0x29, 0xfd, 0x1, 0xfffffffe, 0x1, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x10, 0x5, 0x6}}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x13, &(0x7f00000003c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffd}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}], &(0x7f0000000480)='syzkaller\x00', 0x4, 0x8b, &(0x7f00000004c0)=""/139, 0x41100, 0x7a, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x0, 0x2, 0xfffffff8, 0xc}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000006c0)=[{0x4, 0x1, 0xa, 0x3}], 0x10, 0x3, @void, @value}, 0x94) ioctl$FS_IOC_GETFLAGS(r7, 0x80086601, &(0x7f00000007c0)) r8 = openat$cgroup_ro(r0, &(0x7f0000000800)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) (async) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r8, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r9, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000980)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000009c0)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a00)) (async) r10 = openat$cgroup_devices(r8, &(0x7f0000000a40)='devices.deny\x00', 0x2, 0x0) (async) clock_gettime(0x0, &(0x7f0000000ac0)={0x0, 0x0}) ppoll(&(0x7f0000000a80)=[{r10, 0x1242}], 0x1, &(0x7f0000000b00)={r11, r12+60000000}, &(0x7f0000000b40)={[0xfffffffffffffff9]}, 0x8) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000bc0)=@generic={&(0x7f0000000b80)='./file0\x00', r4}, 0x18) (async) ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f0000000c00)={0x100}) (async) ioctl$EXT4_IOC_GETFSUUID(r4, 0x8008662c, &(0x7f0000000c40)) epoll_create(0x3ff) socket$inet_smc(0x2b, 0x1, 0x0) 1.243579473s ago: executing program 1 (id=452): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendto$packet(r0, &(0x7f00000002c0)="0203100020fc80d53d103328", 0x6d, 0x4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) 1.128887656s ago: executing program 4 (id=454): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000210400000000fcdbdf2500000000d9cf96f79676d6341c1ce92c762efbed40f5c599", @ANYRES16, @ANYRES16=r0], 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x4004000) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0xf4, 0x0, 0x1, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {}, {0x5, 0xffe0}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {}, {0x1c}}}, 0x24}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001", 0x21) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000003c0)=0x14) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0xf, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x3}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0x6}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @generic={0x0, 0x5, 0x1, 0x70, 0x7fffffff}]}, &(0x7f00000004c0)='GPL\x00', 0x24, 0xa9, &(0x7f0000000500)=""/169, 0x20780, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x1, 0x40, 0xfffffffb}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000640)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000680)=[{0x4, 0x3, 0xb, 0xf}, {0x0, 0x3, 0x3, 0xa}, {0x5, 0x1, 0x10, 0x4}, {0x3, 0x3, 0xc, 0x6}, {0x5, 0x3, 0xe, 0xc}, {0x1, 0x5, 0xd, 0x5}, {0x2, 0x3, 0xc, 0x2}], 0x10, 0x7, @void, @value}, 0x94) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x37) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@map=r7, 0x4, 0x0, 0xddd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r8, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x19, 0x19, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @generic={0x8, 0x3, 0x4, 0x58, 0xb7}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x37, &(0x7f0000000200)=""/55, 0x40f00, 0x1c, '\x00', r4, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x3, 0x8, 0xfb5, 0x6}, 0x10, 0x0, r5, 0x0, &(0x7f0000000840)=[r6, 0xffffffffffffffff, r7, r8], 0x0, 0x10, 0x80000000, @void, @value}, 0x94) 1.12593929s ago: executing program 3 (id=455): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) accept4(r1, 0x0, 0x0, 0x0) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@delqdisc={0x2c, 0x25, 0x20, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x9, 0xffff}, {0x9, 0xe}, {0xffff, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x9}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000080}, 0x0) recvmsg$can_raw(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000200)=""/20, 0x14}, {&(0x7f00000020c0)=""/4063, 0xfdf}], 0x2}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000540)=""/4090, 0xf67}, {&(0x7f00000004c0)=""/77, 0x5e}, {&(0x7f00000001c0)=""/36, 0x24}], 0x3}, 0xacd2}], 0x1, 0x10000, 0x0) (async) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000540)=""/4090, 0xf67}, {&(0x7f00000004c0)=""/77, 0x5e}, {&(0x7f00000001c0)=""/36, 0x24}], 0x3}, 0xacd2}], 0x1, 0x10000, 0x0) 1.108342755s ago: executing program 1 (id=456): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1200000004000000040000000b00000000000000a4cf8c1f58c9f6fa80e92b74f3939ac5cfe6ed0fcbcaf87de6856550cafcf6b42e0bae3a2bf175300ef2d79bdacf521784765c08c14d732156abbad7af57245e74cfa125057fb9f24caca5883f3e7ead95ef62c1f7b493301828c1ed5ecb2b3c2c0ce2331cf3ff07b15385422a9692f671d21644a8ae84", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8}]}], {0x14}}, 0x90}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x3}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x40000) socket(0x25, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000ecff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095", @ANYRESOCT=r0, @ANYRES16=r0, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRES8, @ANYRES32=r1, @ANYRESHEX=0x0, @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.018272198s ago: executing program 4 (id=458): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'/16], 0x10}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000160001de7efde4be701161000a0000000400008004"], 0x1c}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f0000000080)={0x57, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f40)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180f000007000000000000000900010095"], &(0x7f0000000140)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x81, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_init_net_socket$llc(0x1a, 0x7717d20359a988a2, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000000200)=""/63, 0x3f}], 0x1, 0x6339, 0xfffffeff) ioctl$FICLONE(r3, 0x40049409, r2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071120d000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x5a, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000380)={'ip6gre0\x00', 0x0, 0x29, 0x5, 0x5, 0x4, 0x5, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x10, 0xfffffff6, 0x4}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x17, &(0x7f0000000900)=ANY=[@ANYBLOB="ccb9ecff05000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ad0e0000850000000600000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000850000007a00000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c00e9070000000000000000186a00000b000000000000000d0000008520000003000000"], &(0x7f00000009c0)='GPL\x00', 0x1, 0xc5, &(0x7f0000000a00)=""/197, 0x41000, 0x8, '\x00', r5, 0x25, r2, 0x8, &(0x7f0000000b00)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x2, 0x2, 0x3, 0x80000000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000bc0), 0x0, 0x10, 0x1, @void, @value}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000be17000200fffe4c0004802800018007000100637400001c0002800800014000000002080002400000000a0500030000000000200001800700010063740000140002800800024000000011080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r8, r8], 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x2, 0x8, 0x4, 0x40000, r8, 0x5, '\x00', r5, r2, 0x0, 0x6, 0x5, 0xa, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r9, 0x0, 0x8000000}, 0x27) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x5}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x4}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8847}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}}, 0x40) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@initdev, @in6=@empty}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000000540)=0xe8) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a130400000000000000000500000048000480440001800c0001007061796c6f616400340002800800044000000000080005400000000008000340000000000800024000000000080007400000000008000640000000010900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a338d3bba47243504a28b3ec4fd3d1797d235949278143a465dde812af352974aa2f4159a09ffae88cc91b2a983117164d36d9471cd1ae6443cc1e3f7351ce56c51b1f5d389154fa393b926216629bb9fb033617d251517e25c6c952bc9e21d4c3706066b200ea2929c1f64f047687da289ae38a21f9c5a41d79def817ce0becb6ccaac1ebb2f86f7be04436bd451800078c28d1c"], 0x9c}}, 0x0) 836.775449ms ago: executing program 1 (id=459): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x26000884}, 0x4008084) syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r1) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYRESOCT=r1], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x3, @empty}}}, 0x108) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f00000001c0)=0x6e8, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r4 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180), 0x4) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x20, 0x70bd28, 0x3}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r5, 0x89e2, &(0x7f0000000740)=@null={0x40, 0x40, 0x40, 0x2}) 787.351082ms ago: executing program 4 (id=460): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x98}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[], 0x48) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r6) sendmsg$NFC_CMD_GET_TARGET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r7, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r6) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r6) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000003000000080001"], 0x28}}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r9) sendmsg$NLBL_UNLABEL_C_STATICADD(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, r10, 0x201, 0x70bd26, 0xfffffffe, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty=0x3a26}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2c}}]}, 0x4c}, 0x8, 0x3000000000002}, 0x4) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="00042abd7000333ddf250400000014000300fe1b8478e22d069bce00000000000001"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x804) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) unshare(0x6a040000) 696.233661ms ago: executing program 2 (id=462): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) pwritev(r1, &(0x7f0000000440)=[{&(0x7f0000000140)='2', 0x1}], 0x1, 0x4000000, 0x80) 576.364684ms ago: executing program 0 (id=463): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000001f02000000000000bc26080000000000bf67000000000000160200000fff0700670200000a000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) ioctl(r0, 0x8b32, &(0x7f0000000040)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{0x6, 0x6, 0x0, 0x2}, {0x2, 0x23, 0xfd, 0x8}, {0x2, 0x94, 0x4, 0x9}, {0x4, 0xe4, 0x7, 0x3}]}, 0x10) (async) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000180)={@mcast2, @mcast2, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6, 0x0, 0x0, 0x180, 0x0, 0x820392}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c009f193d31e46e000008010100000000001000000000000058988a4354ace8927c700c000480080002400000000006000240000000000900010073797a3000000000050003"], 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x60054) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, r3, 0x0) (async) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r3, 0x0) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'ip6gretap0\x00', 0x0}) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x0) (async) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x1, r5, 0x1, 0x7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) 574.563266ms ago: executing program 2 (id=464): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x28, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x22, 0x0, 0x0, @u64}, @typed={0xffffffb1, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f"]}]}, 0x114}], 0x1}, 0x0) (async) setsockopt$inet_int(r0, 0x0, 0xa, &(0x7f0000000080)=0x80000002, 0x58) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_mreq(r2, 0x29, 0x12, 0x0, 0x0) (async) socket$key(0xf, 0x3, 0x2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b00)=ANY=[@ANYBLOB="1c0000005a000d"], 0x1c}], 0x1}, 0x0) recvmsg$unix(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0xff03, 0x0) (async, rerun: 32) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000100)=""/137, 0x21a000, 0x800}, 0x20) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) write(0xffffffffffffffff, &(0x7f00000000c0)="1b000000", 0x4) (async) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r9, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) socket$key(0xf, 0x3, 0x2) close(r5) (async) sendto$inet(r0, &(0x7f0000000040)="2f01", 0x2, 0x40, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0xfffffffc}, 0x10) 457.571784ms ago: executing program 0 (id=465): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(0xffffffffffffffff, 0x0) (async, rerun: 64) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000e40)="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", 0xe00}, {&(0x7f00000000c0)="ded284f40ce33e24d1a1b3fc0153bc26e17e9808cfb05caf3e52ccd1dbbf12a2f3eb1c41215940f73a33eab9c91d8c80f92ad2800772378049b288d8b39bb5128506d11700006d96a439a7eef9f55bfce62e95b85a0f7983624ba3bdf1", 0x5d}], 0x2) (async, rerun: 64) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x10001, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[], 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0000000000008cde1f66fe"], 0x14}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r0, 0x0, 0x4000000) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={0x74, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x101}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x401}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x8}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x74}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r6 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r6, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, 0x0}, 0x0) (async, rerun: 64) r7 = accept(r2, &(0x7f0000000400)=@llc, &(0x7f00000000c0)=0x80) (rerun: 64) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRES64=0x0, @ANYRES32=r5, @ANYRESHEX=r7], 0x3c}}, 0x881) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r9 = socket(0x1, 0x803, 0x0) (rerun: 64) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r10], 0x54}}, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) ioctl$FICLONE(r3, 0x40049409, r7) (rerun: 64) socket(0x1, 0x803, 0x0) 415.639097ms ago: executing program 2 (id=466): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendto$packet(r0, &(0x7f00000002c0)="0203100020fc80d53d103328", 0x6d, 0x4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) 318.791237ms ago: executing program 2 (id=467): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f0000000000)="a8", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000580)={0x41}, 0xe) recvmmsg(r0, &(0x7f0000003880)=[{{0x0, 0x0, &(0x7f0000000180)}, 0x7ffe}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002340)=""/1, 0x1}, 0x403}, {{0x0, 0x0, 0x0}, 0xb}], 0x3, 0x0, 0x0) 193.652527ms ago: executing program 2 (id=468): r0 = socket$inet(0x2, 0x3, 0x8) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg(r3, &(0x7f0000007f40)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f00000000c0)="f7cedd594ccc495355b6d54345bb51fc89305d4f9dbfb544160c6bb776d1ff2b983ccd76f0a1c423b9f0753d76c42f75b13d6c5a67efb30bb2b765d22529f258806a2754db46c89f20199a1eba111e0a7e839b39078eaa119df248aca48092fc843d687e1b49166f473a7c3886085c5a1e47c3237ba6690bb88a81633c38cb01", 0x80}, {&(0x7f00000010c0)="14b9d4", 0x3}], 0x2}}], 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x4c, 0x1a, 0x190, 0x73, 0x270, 0x258, 0x258, 0x270, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'netdevsim0\x00', 'macvlan1\x00'}, 0x0, 0x160, 0x190, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x2}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @dev}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000050000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x8, 0x3}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) 156.108089ms ago: executing program 3 (id=469): r0 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000680)={'vxcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000480)={0x1d, r2}, 0x10) close(0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r4, &(0x7f0000000b80)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x7ffa, @local, 0x4}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000000)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000029000000030000001601"], 0x18}}], 0x1, 0x4000084) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r6}, 0x10) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r7}, 0x8) close(r8) sendmsg$can_raw(r8, &(0x7f0000000280)={&(0x7f00000000c0), 0x10, &(0x7f0000000240)={&(0x7f00000001c0)=@canfd={{0x1, 0x0, 0x0, 0x1}, 0x36, 0x1, 0x0, 0x0, "6dee9c4cb7596fc034d9b33e9528ebd3a08201eb76ee1ccbd68f3b9325c43ea0289e43c30608e5b31e7d5e8034e3a62d568cba24d723b42e80f90869363675d8"}, 0x48}, 0x1, 0x0, 0x0, 0x40001}, 0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r5, 0x6, 0x1}, 0xc) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="539c0a58f8bd18789443965e60c919b943893d70cc86c85fd447fb0de0a16304a0234bbee0d9535134e16cd34e90e6980112627610a7dccb4f"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4004004) 99.629859ms ago: executing program 0 (id=470): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 64) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f00000006c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff8000, @void, @value}, 0x94) (rerun: 64) syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd687fefc0400c115a"], 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x7f, 0x0, &(0x7f0000000040)="00d75322f898732ad1d6dac60081f3f45fe79fada7d8afbaf491edb26aa137f25093a34ed0e7dcac2ec87fbe3e4bddc09e9b128fc859e84701800000321dbcd5e5265f9bf47407a62463eccc40ebbc0a03e8404478238c6463121ef4b3337cd93f2a9e78b4923030c79b267963545371059e3557e94972f498f9dae777e384", 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r2, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x8}, 0x1c) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, 0x0, 0x0) (async, rerun: 64) r3 = socket$kcm(0x10, 0x2, 0x0) (rerun: 64) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x40}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async) r6 = accept4(r5, 0x0, 0x0, 0x0) recvfrom(r6, &(0x7f00000003c0)=""/167, 0xa7, 0x3, 0x0, 0x0) (async) recvmmsg(r6, &(0x7f0000007680)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x12122, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x4}, &(0x7f0000000100)=0x8) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xd8, 0x1, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_NAT_SRC={0x98, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010102}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @empty}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010100}, @CTA_NAT_V6_MINIP={0x14, 0x4, @empty}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xf9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xe783}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x81}, 0x20004050) (async) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f00000001c0)={r7, 0x9, 0x2, [0x9ed, 0x7]}, &(0x7f0000000240)=0xc) r8 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) (async, rerun: 32) r9 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) connect$pppl2tp(r8, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @multicast2}, 0x2, 0x4}}, 0x2e) (async) connect$pppl2tp(r8, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) (async) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000380)={0x6, &(0x7f0000000280)=[{0x67, 0x6, 0x2}, {0xa, 0xcc, 0x3, 0x1}, {0xb1, 0xa5, 0x0, 0x6ef}, {0x8, 0x92, 0x2, 0x8000}, {0x3c73, 0x5, 0xbf, 0x1}, {0x5, 0x5, 0x5}]}) 58.352449ms ago: executing program 1 (id=471): r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r0, 0x0, 0x0) sendmsg$can_bcm(r0, 0x0, 0x8800) (async) sendmsg$can_bcm(r0, 0x0, 0x8800) r1 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000088fe508a8500000004000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000088fe508a8500000004000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x18) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x60000000000, 0x0) socket$igmp6(0xa, 0x3, 0x3a) (async) r3 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x8001, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x18000}, {0xa, 0x0, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x3}, 0x4}, 0x0, {[0x6, 0x200, 0x1, 0xfffffefc, 0x0, 0x1, 0x4000005, 0x200000]}}, 0x5c) (async) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x8001, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x18000}, {0xa, 0x0, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x3}, 0x4}, 0x0, {[0x6, 0x200, 0x1, 0xfffffefc, 0x0, 0x1, 0x4000005, 0x200000]}}, 0x5c) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000300)={0x1d, r4}, 0x10) (async) connect$can_bcm(r1, &(0x7f0000000300)={0x1d, r4}, 0x10) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x48}}, 0x88c40) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) (async) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r7}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 2.042184ms ago: executing program 2 (id=472): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0x42, 0x4, 0x318, 0xffffffff, 0x1d8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xa0, 0x2c0, 0x2c0, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x70, 0xa0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x287, 0xd8, 0x138, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'wg0\x00', {}, 'veth1_vlan\x00', {}, 0x0, 0x5}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x1]}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x11e}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) r2 = socket(0x2b, 0x80801, 0x1) setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae07459a1084ea54c3beef915d564c90c200", 0x18) r3 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r3) sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg$unix(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/48, 0x30}, {&(0x7f0000000680)=""/116, 0x74}, {&(0x7f0000000700)=""/104, 0x68}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x4}, 0x140) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x20000253) 1.227051ms ago: executing program 4 (id=473): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async) socket$igmp6(0xa, 0x3, 0x2) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x4) (rerun: 64) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab00070000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async, rerun: 64) r3 = accept4(r2, 0x0, 0x0, 0x800) (rerun: 64) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000000000000200000f8e92d17a4cdbe7623788af3ee300e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008"], 0x110) (async, rerun: 32) sendmmsg$alg(r3, &(0x7f0000000940)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000800)="5e5a45d6b445610d2473a730c3955640", 0x10}], 0x1}], 0x1, 0x4c8d0) (async, rerun: 32) recvmsg$qrtr(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000480)=""/130, 0x82}], 0x1, 0x0, 0x0, 0x10221}, 0x38, 0x40010000) (async) close(0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) (async, rerun: 64) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @empty}, 0xffffffffffffffe1) (async, rerun: 64) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x24, 0x1e, 0x505, 0x0, 0x0, "", [@typed={0x12, 0x12b, 0x0, 0x0, @binary="461dc071caf2d43500d1f6c8a6ef"}]}, 0x24}], 0x1}, 0x0) (async) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000016c0)=0x9, 0x4) (async) sendmmsg(r0, &(0x7f0000007fc0), 0x0, 0x4040000) (async) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40482, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000140)) (async, rerun: 64) pwritev(r6, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd06000040", 0x27}], 0x2, 0x0, 0x4) (async, rerun: 64) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) (async, rerun: 32) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r5, 0x8983, &(0x7f0000000080)) (async, rerun: 32) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0xd9c}], 0x1, 0x45833af92e4b39ff, 0x0) (rerun: 64) 0s ago: executing program 3 (id=474): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) pwritev(r1, &(0x7f0000000440)=[{&(0x7f0000000140)='2', 0x1}], 0x1, 0x4000000, 0x80) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.160' (ED25519) to the list of known hosts. [ 78.603787][ T5827] cgroup: Unknown subsys name 'net' [ 78.760685][ T5827] cgroup: Unknown subsys name 'cpuset' [ 78.770315][ T5827] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.466142][ T5827] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.188535][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.197647][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.203843][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.205434][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.221108][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.221113][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.228886][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.236393][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.250195][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.257932][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.258773][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.267298][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.273859][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.279713][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.286839][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.335014][ T5152] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.350491][ T5152] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.366980][ T5152] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.376424][ T5152] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.392431][ T5152] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.472188][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.480610][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.488818][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.497712][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.505831][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.140331][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 84.185728][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 84.221516][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 84.270400][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 84.301749][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 84.448241][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.455517][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.463172][ T5840] bridge_slave_0: entered allmulticast mode [ 84.471414][ T5840] bridge_slave_0: entered promiscuous mode [ 84.523847][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.531158][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.538879][ T5840] bridge_slave_1: entered allmulticast mode [ 84.546382][ T5840] bridge_slave_1: entered promiscuous mode [ 84.655050][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.662385][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.672652][ T5845] bridge_slave_0: entered allmulticast mode [ 84.680404][ T5845] bridge_slave_0: entered promiscuous mode [ 84.690725][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.698300][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.705789][ T5845] bridge_slave_1: entered allmulticast mode [ 84.713399][ T5845] bridge_slave_1: entered promiscuous mode [ 84.767767][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.848186][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.855510][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.863844][ T5837] bridge_slave_0: entered allmulticast mode [ 84.872377][ T5837] bridge_slave_0: entered promiscuous mode [ 84.883990][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.896532][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.907588][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.914745][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.922535][ T5855] bridge_slave_0: entered allmulticast mode [ 84.930457][ T5855] bridge_slave_0: entered promiscuous mode [ 84.939136][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.946675][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.953972][ T5855] bridge_slave_1: entered allmulticast mode [ 84.962373][ T5855] bridge_slave_1: entered promiscuous mode [ 84.969766][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.977301][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.984490][ T5849] bridge_slave_0: entered allmulticast mode [ 84.992177][ T5849] bridge_slave_0: entered promiscuous mode [ 85.003826][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.011035][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.018639][ T5837] bridge_slave_1: entered allmulticast mode [ 85.025945][ T5837] bridge_slave_1: entered promiscuous mode [ 85.048666][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.086165][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.093333][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.103576][ T5849] bridge_slave_1: entered allmulticast mode [ 85.111024][ T5849] bridge_slave_1: entered promiscuous mode [ 85.206686][ T5840] team0: Port device team_slave_0 added [ 85.215634][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.229591][ T5845] team0: Port device team_slave_0 added [ 85.240125][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.267238][ T5840] team0: Port device team_slave_1 added [ 85.275587][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.300347][ T5845] team0: Port device team_slave_1 added [ 85.324588][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.337020][ T5152] Bluetooth: hci0: command tx timeout [ 85.337592][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.342747][ T5152] Bluetooth: hci1: command tx timeout [ 85.360671][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.412915][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.420064][ T5152] Bluetooth: hci2: command tx timeout [ 85.425812][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.451803][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.496125][ T5152] Bluetooth: hci3: command tx timeout [ 85.509599][ T5837] team0: Port device team_slave_0 added [ 85.517269][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.524511][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.550585][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.586077][ T5152] Bluetooth: hci4: command tx timeout [ 85.595407][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.602534][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.628758][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.642344][ T5837] team0: Port device team_slave_1 added [ 85.676133][ T5855] team0: Port device team_slave_0 added [ 85.684933][ T5849] team0: Port device team_slave_0 added [ 85.693668][ T5849] team0: Port device team_slave_1 added [ 85.700630][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.707712][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.733858][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.760144][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.767230][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.793345][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.808351][ T5855] team0: Port device team_slave_1 added [ 85.851874][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.859178][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.886256][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.919955][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.927505][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.953715][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.002160][ T5845] hsr_slave_0: entered promiscuous mode [ 86.009113][ T5845] hsr_slave_1: entered promiscuous mode [ 86.031557][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.038981][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.065685][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.100189][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.107411][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.134294][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.202364][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.209785][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.236179][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.278454][ T5840] hsr_slave_0: entered promiscuous mode [ 86.284929][ T5840] hsr_slave_1: entered promiscuous mode [ 86.291358][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.299252][ T5840] Cannot create hsr debugfs directory [ 86.363124][ T5837] hsr_slave_0: entered promiscuous mode [ 86.370063][ T5837] hsr_slave_1: entered promiscuous mode [ 86.378216][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.386036][ T5837] Cannot create hsr debugfs directory [ 86.431957][ T5855] hsr_slave_0: entered promiscuous mode [ 86.439086][ T5855] hsr_slave_1: entered promiscuous mode [ 86.445304][ T5855] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.453658][ T5855] Cannot create hsr debugfs directory [ 86.481121][ T5849] hsr_slave_0: entered promiscuous mode [ 86.487514][ T5849] hsr_slave_1: entered promiscuous mode [ 86.493652][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.501692][ T5849] Cannot create hsr debugfs directory [ 87.251379][ T5840] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.278164][ T5840] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.290531][ T5840] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.311431][ T5840] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.369521][ T5845] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.389353][ T5845] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.416689][ T5152] Bluetooth: hci1: command tx timeout [ 87.416934][ T55] Bluetooth: hci0: command tx timeout [ 87.429824][ T5845] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.443968][ T5845] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.496322][ T55] Bluetooth: hci2: command tx timeout [ 87.510011][ T5855] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.533253][ T5855] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.545688][ T5855] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.562713][ T5855] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.577080][ T55] Bluetooth: hci3: command tx timeout [ 87.656849][ T55] Bluetooth: hci4: command tx timeout [ 87.693388][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.713949][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.736851][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.760284][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.772326][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.903939][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.924405][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.931779][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.946444][ T5849] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.957550][ T5849] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.969303][ T5849] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.981467][ T5849] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.002529][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.009724][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.062679][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.131399][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.164487][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.192172][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.199476][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.230770][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.238009][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.261446][ T5840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.299795][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.368289][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.407215][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.414349][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.436948][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.444193][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.473567][ T5845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.565331][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.628483][ T3037] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.635687][ T3037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.665063][ T2994] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.672304][ T2994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.703337][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.730878][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.818606][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.893243][ T3037] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.900597][ T3037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.978868][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.992135][ T2994] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.999406][ T2994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.067947][ T5840] veth0_vlan: entered promiscuous mode [ 89.104075][ T5840] veth1_vlan: entered promiscuous mode [ 89.221277][ T5845] veth0_vlan: entered promiscuous mode [ 89.234140][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.269077][ T5849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.291803][ T5845] veth1_vlan: entered promiscuous mode [ 89.312722][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.349628][ T5840] veth0_macvtap: entered promiscuous mode [ 89.404700][ T5840] veth1_macvtap: entered promiscuous mode [ 89.469573][ T5845] veth0_macvtap: entered promiscuous mode [ 89.504179][ T55] Bluetooth: hci1: command tx timeout [ 89.504197][ T5152] Bluetooth: hci0: command tx timeout [ 89.531155][ T5845] veth1_macvtap: entered promiscuous mode [ 89.565540][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.576928][ T55] Bluetooth: hci2: command tx timeout [ 89.595123][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.612564][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.650541][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.665385][ T55] Bluetooth: hci3: command tx timeout [ 89.699188][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.724472][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.736315][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.747356][ T55] Bluetooth: hci4: command tx timeout [ 89.752438][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.765203][ T5840] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.774342][ T5840] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.783950][ T5840] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.793406][ T5840] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.819070][ T5837] veth0_vlan: entered promiscuous mode [ 89.833474][ T5837] veth1_vlan: entered promiscuous mode [ 89.843496][ T5845] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.852561][ T5845] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.862067][ T5845] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.870838][ T5845] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.955531][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.993994][ T5837] veth0_macvtap: entered promiscuous mode [ 90.019839][ T5837] veth1_macvtap: entered promiscuous mode [ 90.091644][ T5855] veth0_vlan: entered promiscuous mode [ 90.113515][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.118325][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.132630][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.139954][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.151040][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.162313][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.174214][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.210261][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.223438][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.238898][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.253864][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.265066][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.277396][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.288945][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.312544][ T5855] veth1_vlan: entered promiscuous mode [ 90.359814][ T5837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.370793][ T5837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.380704][ T5837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.389541][ T5837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.405041][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.413758][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.457216][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.469754][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.480983][ T5855] veth0_macvtap: entered promiscuous mode [ 90.545042][ T5855] veth1_macvtap: entered promiscuous mode [ 90.566233][ T5849] veth0_vlan: entered promiscuous mode [ 90.572455][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.612289][ T5849] veth1_vlan: entered promiscuous mode [ 90.664176][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.682377][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.737816][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.753314][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.783679][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.800216][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.815237][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.855808][ T5929] netlink: 'syz.1.6': attribute type 1 has an invalid length. [ 90.859485][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.874399][ T5929] netlink: 'syz.1.6': attribute type 2 has an invalid length. [ 90.883828][ T5929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6'. [ 90.904535][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.930206][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.964546][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.993993][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.011589][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.030004][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.041586][ T5855] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.053065][ T5855] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.063909][ T5855] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.072802][ T5855] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.107617][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.124522][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.190568][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.206061][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.292132][ T5849] veth0_macvtap: entered promiscuous mode [ 91.350734][ T5849] veth1_macvtap: entered promiscuous mode [ 91.428013][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.454546][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.501957][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.555926][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.571932][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.586051][ T55] Bluetooth: hci0: command tx timeout [ 91.586110][ T5152] Bluetooth: hci1: command tx timeout [ 91.602678][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.613284][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.630727][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.642873][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.653907][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.664373][ T5152] Bluetooth: hci2: command tx timeout [ 91.680373][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.694802][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.710019][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.721696][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.736428][ T5152] Bluetooth: hci3: command tx timeout [ 91.744891][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.754995][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.766120][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.776541][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.787614][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.802423][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.822735][ T5152] Bluetooth: hci4: command tx timeout [ 91.872708][ T5849] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.882022][ T5849] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.892279][ T5849] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.902000][ T5849] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.910885][ T974] cfg80211: failed to load regulatory.db [ 91.932025][ T5947] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11'. [ 91.961173][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.971453][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.326953][ T5965] netlink: 'syz.1.14': attribute type 10 has an invalid length. [ 92.351759][ T5965] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14'. [ 92.355737][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.389618][ T5967] sctp: [Deprecated]: syz.3.15 (pid 5967) Use of int in maxseg socket option. [ 92.389618][ T5967] Use struct sctp_assoc_value instead [ 92.399172][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.407272][ T5969] Bluetooth: MGMT ver 1.23 [ 92.439349][ T5969] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.479018][ T5971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16'. [ 92.498819][ T5971] syz.2.16 uses obsolete (PF_INET,SOCK_PACKET) [ 92.504575][ T5965] team0: Port device geneve0 added [ 92.641197][ T5967] netlink: 'syz.3.15': attribute type 10 has an invalid length. [ 92.644154][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.721058][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.734467][ T5967] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 92.879558][ T30] audit: type=1804 audit(1744856536.907:2): pid=5985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.17" name="cgroup.controllers" dev="tmpfs" ino=54 res=1 errno=0 [ 92.970686][ T30] audit: type=1800 audit(1744856536.907:3): pid=5985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.17" name="cgroup.controllers" dev="tmpfs" ino=54 res=0 errno=0 [ 93.120174][ T5987] xt_hashlimit: size too large, truncated to 1048576 [ 93.174572][ T5992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20'. [ 93.214560][ T5991] Zero length message leads to an empty skb [ 93.322734][ T5997] netlink: 36 bytes leftover after parsing attributes in process `syz.3.18'. [ 93.339986][ T5997] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18'. [ 93.369330][ T5997] netlink: 36 bytes leftover after parsing attributes in process `syz.3.18'. [ 93.381338][ T5997] netlink: 36 bytes leftover after parsing attributes in process `syz.3.18'. [ 93.708875][ T974] IPVS: starting estimator thread 0... [ 93.806171][ T6011] IPVS: using max 24 ests per chain, 57600 per kthread [ 93.924179][ T6008] netdevsim netdevsim4 netdevsim1: Unsupported IPsec algorithm [ 94.313596][ T6030] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.29'. [ 94.433741][ T6031] geneve1: entered promiscuous mode [ 95.754586][ T6069] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20000 [ 95.796596][ T6062] team0: Device wireguard0 is of different type [ 95.800566][ T6078] netlink: 'syz.1.43': attribute type 2 has an invalid length. [ 95.817592][ T6069] netlink: 'syz.4.40': attribute type 11 has an invalid length. [ 95.943581][ T6070] xfrm0: entered promiscuous mode [ 95.983976][ T6070] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 96.002234][ T6089] netlink: 'syz.2.41': attribute type 10 has an invalid length. [ 96.035299][ T6078] netlink: 'syz.1.43': attribute type 1 has an invalid length. [ 96.092802][ T6085] warning: `syz.2.41' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 96.292058][ T6089] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 97.689724][ T6128] ieee802154 phy0 wpan0: encryption failed: -22 [ 97.714799][ T6128] ieee802154 phy0 wpan0: encryption failed: -22 [ 97.955239][ T6129] syz.3.57 (6129) used greatest stack depth: 18424 bytes left [ 98.282568][ T6157] o]U.: renamed from lo (while UP) [ 98.351937][ T6159] __nla_validate_parse: 1 callbacks suppressed [ 98.351959][ T6159] netlink: 12 bytes leftover after parsing attributes in process `syz.3.64'. [ 98.659794][ T6168] netlink: 36 bytes leftover after parsing attributes in process `syz.4.66'. [ 98.773056][ T6175] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.791270][ T6168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.66'. [ 98.815108][ T6168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.66'. [ 99.022829][ T6183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.70'. [ 99.050876][ T6168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.66'. [ 99.087162][ T6168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.66'. [ 99.111804][ T6183] netlink: 204 bytes leftover after parsing attributes in process `syz.3.70'. [ 99.149760][ T6183] netlink: 460 bytes leftover after parsing attributes in process `syz.3.70'. [ 99.160998][ T6168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.66'. [ 99.197175][ T6193] netlink: 'syz.3.70': attribute type 7 has an invalid length. [ 99.713730][ T6199] af_packet: tpacket_rcv: packet too big, clamped from 3954 to 3702. macoff=82 [ 101.075577][ T6250] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 101.114338][ T6254] Bluetooth: MGMT ver 1.23 [ 101.251739][ T6257] Driver unsupported XDP return value 0 on prog (id 26) dev N/A, expect packet loss! [ 101.298064][ T6259] netlink: 'syz.4.85': attribute type 1 has an invalid length. [ 102.197631][ T6293] pimreg: entered allmulticast mode [ 102.209228][ T6295] pimreg: left allmulticast mode [ 102.665033][ T6303] bond0: (slave bond_slave_0): Releasing backup interface [ 102.721352][ T6302] smc: net device bond0 applied user defined pnetid SYZ0 [ 103.022926][ T6332] FAULT_INJECTION: forcing a failure. [ 103.022926][ T6332] name failslab, interval 1, probability 0, space 0, times 1 [ 103.106506][ T6332] CPU: 1 UID: 0 PID: 6332 Comm: syz.4.106 Not tainted 6.15.0-rc1-syzkaller-00374-gac1df712442c #0 PREEMPT(full) [ 103.106538][ T6332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 103.106556][ T6332] Call Trace: [ 103.106564][ T6332] [ 103.106573][ T6332] dump_stack_lvl+0x241/0x360 [ 103.106632][ T6332] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.106663][ T6332] ? __pfx__printk+0x10/0x10 [ 103.106698][ T6332] ? __pfx___might_resched+0x10/0x10 [ 103.106730][ T6332] should_fail_ex+0x424/0x570 [ 103.106764][ T6332] should_failslab+0xac/0x100 [ 103.106796][ T6332] __kmalloc_noprof+0xdf/0x4d0 [ 103.106824][ T6332] ? ioctl_standard_iw_point+0x492/0xd30 [ 103.106863][ T6332] ioctl_standard_iw_point+0x492/0xd30 [ 103.106909][ T6332] ? __pfx_cfg80211_wext_giwscan+0x10/0x10 [ 103.106936][ T6332] ? __pfx_ioctl_standard_iw_point+0x10/0x10 [ 103.106967][ T6332] ? __pfx___mutex_lock+0x10/0x10 [ 103.107008][ T6332] ioctl_standard_call+0xbd/0x190 [ 103.107036][ T6332] ? __pfx_cfg80211_wext_giwscan+0x10/0x10 [ 103.107059][ T6332] ? __pfx_cfg80211_wext_giwscan+0x10/0x10 [ 103.107086][ T6332] wext_ioctl_dispatch+0xe4/0x410 [ 103.107113][ T6332] ? __pfx_ioctl_standard_call+0x10/0x10 [ 103.107146][ T6332] wext_handle_ioctl+0x15a/0x260 [ 103.107178][ T6332] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 103.107227][ T6332] sock_ioctl+0x181/0x900 [ 103.107261][ T6332] ? __pfx_sock_ioctl+0x10/0x10 [ 103.107288][ T6332] ? __fget_files+0x2a/0x420 [ 103.107318][ T6332] ? __fget_files+0x2a/0x420 [ 103.107353][ T6332] ? __fget_files+0x2a/0x420 [ 103.107390][ T6332] ? __pfx_sock_ioctl+0x10/0x10 [ 103.107421][ T6332] __se_sys_ioctl+0xf1/0x160 [ 103.107448][ T6332] do_syscall_64+0xf3/0x230 [ 103.107472][ T6332] ? clear_bhb_loop+0x45/0xa0 [ 103.107497][ T6332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.107524][ T6332] RIP: 0033:0x7f9ba418e169 [ 103.107547][ T6332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.107563][ T6332] RSP: 002b:00007f9ba1ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 103.107592][ T6332] RAX: ffffffffffffffda RBX: 00007f9ba43b5fa0 RCX: 00007f9ba418e169 [ 103.107607][ T6332] RDX: 0000200000000000 RSI: 0000000000008b19 RDI: 0000000000000003 [ 103.107620][ T6332] RBP: 00007f9ba1ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 103.107633][ T6332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.107645][ T6332] R13: 0000000000000000 R14: 00007f9ba43b5fa0 R15: 00007ffc4b231f78 [ 103.107677][ T6332] [ 103.754988][ T6353] syz_tun: entered allmulticast mode [ 104.003586][ T6353] xt_ecn: cannot match TCP bits for non-tcp packets [ 104.048687][ T6344] syz_tun: left allmulticast mode [ 104.082474][ T6362] netlink: 'syz.2.113': attribute type 1 has an invalid length. [ 104.099037][ T6362] netlink: 'syz.2.113': attribute type 10 has an invalid length. [ 104.127282][ T6362] __nla_validate_parse: 7 callbacks suppressed [ 104.127301][ T6362] netlink: 236 bytes leftover after parsing attributes in process `syz.2.113'. [ 104.229465][ T6320] netlink: 'syz.0.104': attribute type 21 has an invalid length. [ 104.251192][ T5893] IPVS: starting estimator thread 0... [ 104.256986][ T6320] netlink: 156 bytes leftover after parsing attributes in process `syz.0.104'. [ 104.356208][ T6371] IPVS: using max 25 ests per chain, 60000 per kthread [ 104.418580][ T6381] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.526750][ T6381] xt_SECMARK: invalid mode: 0 [ 104.548023][ T6384] netlink: 12 bytes leftover after parsing attributes in process `syz.2.117'. [ 104.799291][ T6393] FAULT_INJECTION: forcing a failure. [ 104.799291][ T6393] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 104.823830][ T6393] CPU: 0 UID: 0 PID: 6393 Comm: syz.4.119 Not tainted 6.15.0-rc1-syzkaller-00374-gac1df712442c #0 PREEMPT(full) [ 104.823862][ T6393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 104.823875][ T6393] Call Trace: [ 104.823883][ T6393] [ 104.823892][ T6393] dump_stack_lvl+0x241/0x360 [ 104.823932][ T6393] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.823966][ T6393] ? __pfx__printk+0x10/0x10 [ 104.824007][ T6393] should_fail_ex+0x424/0x570 [ 104.824040][ T6393] _copy_to_user+0x31/0xb0 [ 104.824065][ T6393] simple_read_from_buffer+0xc4/0x170 [ 104.824100][ T6393] proc_fail_nth_read+0x1ef/0x260 [ 104.824125][ T6393] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 104.824149][ T6393] ? rw_verify_area+0x246/0x630 [ 104.824171][ T6393] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 104.824193][ T6393] vfs_read+0x21f/0xb90 [ 104.824221][ T6393] ? __pfx___mutex_lock+0x10/0x10 [ 104.824247][ T6393] ? __pfx_vfs_read+0x10/0x10 [ 104.824274][ T6393] ? __fget_files+0x2a/0x420 [ 104.824307][ T6393] ? __fget_files+0x39d/0x420 [ 104.824336][ T6393] ? __fget_files+0x2a/0x420 [ 104.824378][ T6393] ksys_read+0x19d/0x2d0 [ 104.824403][ T6393] ? __pfx_ksys_read+0x10/0x10 [ 104.824430][ T6393] ? do_syscall_64+0xb6/0x230 [ 104.824457][ T6393] do_syscall_64+0xf3/0x230 [ 104.824480][ T6393] ? clear_bhb_loop+0x45/0xa0 [ 104.824503][ T6393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.824523][ T6393] RIP: 0033:0x7f9ba418cb7c [ 104.824542][ T6393] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 104.824558][ T6393] RSP: 002b:00007f9ba1ff6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 104.824579][ T6393] RAX: ffffffffffffffda RBX: 00007f9ba43b5fa0 RCX: 00007f9ba418cb7c [ 104.824595][ T6393] RDX: 000000000000000f RSI: 00007f9ba1ff60a0 RDI: 0000000000000005 [ 104.824608][ T6393] RBP: 00007f9ba1ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 104.824620][ T6393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.824632][ T6393] R13: 0000000000000000 R14: 00007f9ba43b5fa0 R15: 00007ffc4b231f78 [ 104.824663][ T6393] [ 105.454648][ T6419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.126'. [ 105.536557][ T6424] sock: sock_set_timeout: `syz.3.127' (pid 6424) tries to set negative timeout [ 105.917711][ T6433] sctp: [Deprecated]: syz.4.129 (pid 6433) Use of int in max_burst socket option deprecated. [ 105.917711][ T6433] Use struct sctp_assoc_value instead [ 106.065092][ T6433] sctp: [Deprecated]: syz.4.129 (pid 6433) Use of int in max_burst socket option deprecated. [ 106.065092][ T6433] Use struct sctp_assoc_value instead [ 106.168977][ T6444] netlink: 'syz.1.130': attribute type 3 has an invalid length. [ 106.257590][ T6433] sctp: [Deprecated]: syz.4.129 (pid 6433) Use of int in max_burst socket option deprecated. [ 106.257590][ T6433] Use struct sctp_assoc_value instead [ 106.330529][ T6433] sctp: [Deprecated]: syz.4.129 (pid 6433) Use of int in max_burst socket option deprecated. [ 106.330529][ T6433] Use struct sctp_assoc_value instead [ 106.396148][ T6433] sctp: [Deprecated]: syz.4.129 (pid 6433) Use of int in max_burst socket option deprecated. [ 106.396148][ T6433] Use struct sctp_assoc_value instead [ 106.446097][ T6433] sctp: [Deprecated]: syz.4.129 (pid 6433) Use of int in max_burst socket option deprecated. [ 106.446097][ T6433] Use struct sctp_assoc_value instead [ 106.536392][ T6433] sctp: [Deprecated]: syz.4.129 (pid 6433) Use of int in max_burst socket option deprecated. [ 106.536392][ T6433] Use struct sctp_assoc_value instead [ 106.586107][ T6433] sctp: [Deprecated]: syz.4.129 (pid 6433) Use of int in max_burst socket option deprecated. [ 106.586107][ T6433] Use struct sctp_assoc_value instead [ 107.547178][ T6474] netlink: 'syz.2.141': attribute type 3 has an invalid length. [ 107.572637][ T6475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.140'. [ 107.576868][ T6476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.138'. [ 107.729652][ T6475] vxlan0: entered allmulticast mode [ 107.735486][ T6476] bridge_slave_1: left allmulticast mode [ 107.751700][ T6476] bridge_slave_1: left promiscuous mode [ 107.766356][ T6476] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.812166][ T6476] bridge_slave_0: left allmulticast mode [ 107.823916][ T6476] bridge_slave_0: left promiscuous mode [ 107.832564][ T6476] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.678665][ T6494] tun0: tun_chr_ioctl cmd 35111 [ 108.685789][ T6508] netlink: 32 bytes leftover after parsing attributes in process `syz.0.147'. [ 108.847848][ T6515] netlink: 292 bytes leftover after parsing attributes in process `syz.4.148'. [ 109.075256][ T6530] netlink: 'syz.4.151': attribute type 10 has an invalid length. [ 109.105194][ T6530] veth0_vlan: left promiscuous mode [ 109.170810][ T6530] veth0_vlan: entered promiscuous mode [ 109.347716][ T6530] team0: Device veth0_vlan failed to register rx_handler [ 109.850570][ T6560] netlink: 12 bytes leftover after parsing attributes in process `syz.2.156'. [ 109.990397][ T6564] netlink: 32 bytes leftover after parsing attributes in process `syz.4.157'. [ 110.001365][ T6564] smc: net device bond0 erased user defined pnetid SYZ0 [ 110.107267][ T6539] Cannot find map_set index 0 as target [ 110.336867][ T6579] netlink: 'syz.3.158': attribute type 4 has an invalid length. [ 110.616144][ T5152] Bluetooth: hci0: command tx timeout [ 110.729258][ T6592] geneve2: entered promiscuous mode [ 110.742537][ T6592] geneve2: entered allmulticast mode [ 110.958876][ T6609] netlink: 28 bytes leftover after parsing attributes in process `syz.4.165'. [ 110.962973][ T6601] tun0: tun_chr_ioctl cmd 2147767520 [ 111.010184][ T6612] netlink: 4 bytes leftover after parsing attributes in process `syz.4.165'. [ 111.322528][ T6621] netlink: 28 bytes leftover after parsing attributes in process `syz.4.168'. [ 111.366625][ T6625] xt_hashlimit: size too large, truncated to 1048576 [ 111.372288][ T6621] netlink: 28 bytes leftover after parsing attributes in process `syz.4.168'. [ 111.383099][ T6621] netlink: 'syz.4.168': attribute type 4 has an invalid length. [ 111.384818][ T6622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.168'. [ 111.416639][ T6629] xt_hashlimit: size too large, truncated to 1048576 [ 111.451673][ T6622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.168'. [ 111.529679][ T6622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.168'. [ 111.695181][ T6639] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.734083][ T6639] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.753044][ T6643] netlink: 104 bytes leftover after parsing attributes in process `syz.0.173'. [ 112.113184][ T6654] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 114.401643][ T6729] netlink: 'syz.3.193': attribute type 1 has an invalid length. [ 116.582675][ T6780] netlink: 'syz.1.209': attribute type 3 has an invalid length. [ 116.610888][ T6780] __nla_validate_parse: 5 callbacks suppressed [ 116.610907][ T6780] netlink: 7 bytes leftover after parsing attributes in process `syz.1.209'. [ 116.801284][ T6783] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 116.832023][ T6783] Cannot find del_set index 0 as target [ 118.850884][ T6850] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 119.140337][ T6864] netlink: 'syz.4.236': attribute type 1 has an invalid length. [ 119.177838][ T6864] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 119.399483][ T6882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.238'. [ 119.501157][ T6886] netlink: 60 bytes leftover after parsing attributes in process `syz.1.238'. [ 119.588586][ T6882] bond1 (unregistering): Released all slaves [ 120.102295][ T6914] netlink: 96 bytes leftover after parsing attributes in process `syz.1.247'. [ 120.684724][ T6937] netlink: 16 bytes leftover after parsing attributes in process `syz.3.254'. [ 120.927001][ T6943] netlink: 'syz.1.257': attribute type 10 has an invalid length. [ 120.938857][ T1108] wlan0: Trigger new scan to find an IBSS to join [ 120.955957][ T6942] xt_CT: You must specify a L4 protocol and not use inversions on it [ 120.969561][ T6943] syz_tun: entered promiscuous mode [ 121.020882][ T6943] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 121.107021][ T6953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.257'. [ 121.184479][ T55] Bluetooth: hci4: command 0x0405 tx timeout [ 121.643567][ T6983] sctp: [Deprecated]: syz.4.269 (pid 6983) Use of struct sctp_assoc_value in delayed_ack socket option. [ 121.643567][ T6983] Use struct sctp_sack_info instead [ 122.253189][ T7012] netlink: 28 bytes leftover after parsing attributes in process `syz.1.279'. [ 122.424088][ T7021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.281'. [ 122.467617][ T7021] netlink: 16 bytes leftover after parsing attributes in process `syz.4.281'. [ 122.513581][ T7021] bridge0: entered promiscuous mode [ 122.560675][ T7021] bridge0: left promiscuous mode [ 122.731666][ T7037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.286'. [ 122.757537][ T7027] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 122.824420][ T7027] syzkaller0: entered promiscuous mode [ 122.832167][ T7027] syzkaller0: entered allmulticast mode [ 122.915625][ T7049] netlink: 'syz.1.290': attribute type 1 has an invalid length. [ 122.931757][ T7049] netlink: 224 bytes leftover after parsing attributes in process `syz.1.290'. [ 123.144416][ T7057] netlink: 20 bytes leftover after parsing attributes in process `syz.1.293'. [ 123.164031][ T7059] netlink: 36 bytes leftover after parsing attributes in process `syz.0.292'. [ 123.172090][ T7057] netlink: 'syz.1.293': attribute type 1 has an invalid length. [ 123.616061][ T7074] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20000 [ 123.902721][ T2994] wlan0: Trigger new scan to find an IBSS to join [ 124.099749][ T7094] netlink: 'syz.1.299': attribute type 39 has an invalid length. [ 125.059082][ T7094] bond0: (slave syz_tun): Releasing backup interface [ 125.507498][ T7121] netlink: 16 bytes leftover after parsing attributes in process `syz.0.308'. [ 125.732586][ T7129] netlink: 'syz.4.309': attribute type 32 has an invalid length. [ 125.997282][ T7141] syzkaller0: entered promiscuous mode [ 126.013093][ T7141] syzkaller0: entered allmulticast mode [ 126.869090][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.151340][ T7178] x_tables: duplicate underflow at hook 1 [ 127.161439][ T7178] x_tables: duplicate underflow at hook 1 [ 127.674931][ T7160] netlink: 132 bytes leftover after parsing attributes in process `syz.1.318'. [ 127.708344][ T7163] zQFS: renamed from lo (while UP) [ 128.342792][ T7216] netlink: 'syz.2.331': attribute type 32 has an invalid length. [ 128.350815][ T7216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.331'. [ 128.370598][ T7216] (unnamed net_device) (uninitialized): option coupled_control: invalid value (20) [ 129.199248][ T7246] netlink: 40 bytes leftover after parsing attributes in process `syz.4.339'. [ 129.540349][ T7257] bridge0: entered promiscuous mode [ 129.545835][ T7257] bridge0: entered allmulticast mode [ 129.584460][ T7257] team0: Port device bridge0 added [ 129.728740][ T7267] netlink: 'syz.4.347': attribute type 4 has an invalid length. [ 130.015095][ T7276] netlink: 48 bytes leftover after parsing attributes in process `syz.2.353'. [ 130.316349][ T7289] tipc: Started in network mode [ 130.321377][ T7289] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 130.374983][ T7289] tipc: Enabled bearer , priority 10 [ 130.392815][ T7280] netlink: 'syz.4.352': attribute type 2 has an invalid length. [ 130.417321][ T7294] netlink: 4 bytes leftover after parsing attributes in process `syz.1.356'. [ 130.470339][ T7280] : entered promiscuous mode [ 130.479777][ T7302] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 130.634656][ T7308] sctp: [Deprecated]: syz.4.360 (pid 7308) Use of int in max_burst socket option. [ 130.634656][ T7308] Use struct sctp_assoc_value instead [ 130.650449][ T7309] sctp: [Deprecated]: syz.4.360 (pid 7309) Use of int in max_burst socket option. [ 130.650449][ T7309] Use struct sctp_assoc_value instead [ 130.891554][ T7317] netlink: 'syz.1.361': attribute type 1 has an invalid length. [ 131.398017][ T7325] netlink: 32 bytes leftover after parsing attributes in process `syz.1.363'. [ 131.420102][ T7325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.363'. [ 131.433741][ T7325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.363'. [ 131.461293][ T7329] x_tables: duplicate underflow at hook 3 [ 131.486659][ T974] tipc: Node number set to 43690 [ 131.634144][ T7331] bond0: entered promiscuous mode [ 131.639404][ T7331] bond_slave_0: entered promiscuous mode [ 131.645317][ T7331] bond_slave_1: entered promiscuous mode [ 131.672169][ T7331] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 131.698604][ T7331] batadv0: entered promiscuous mode [ 131.712648][ T7331] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 131.728516][ T7331] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 131.743338][ T7331] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 131.900684][ T7352] netlink: 'syz.2.373': attribute type 13 has an invalid length. [ 131.961358][ T5152] Bluetooth: hci4: link tx timeout [ 131.970919][ T5152] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 132.392734][ T7352] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.413236][ T7352] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.572314][ T7352] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.584201][ T7352] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.594308][ T7352] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.604691][ T7352] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.959903][ T7392] xt_l2tp: missing protocol rule (udp|l2tpip) [ 133.503504][ T7417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.386'. [ 133.561213][ T7420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.388'. [ 133.746100][ T7433] netlink: 24 bytes leftover after parsing attributes in process `syz.3.393'. [ 133.775457][ T7433] netlink: 248 bytes leftover after parsing attributes in process `syz.3.393'. [ 133.823899][ T7437] ip6gre1: entered promiscuous mode [ 133.843557][ T7433] netlink: 248 bytes leftover after parsing attributes in process `syz.3.393'. [ 134.057798][ T55] Bluetooth: hci4: command 0x0405 tx timeout [ 134.061981][ T7449] netlink: 32 bytes leftover after parsing attributes in process `syz.1.398'. [ 134.105688][ T7449] netlink: 32 bytes leftover after parsing attributes in process `syz.1.398'. [ 134.339669][ T7454] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.409546][ T7474] netlink: 16 bytes leftover after parsing attributes in process `syz.2.404'. [ 134.434612][ T7468] netlink: 'syz.4.403': attribute type 1 has an invalid length. [ 134.437219][ T7474] netlink: 32 bytes leftover after parsing attributes in process `syz.2.404'. [ 134.524537][ T7454] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.632715][ T7454] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.638549][ T7488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.405'. [ 134.743243][ T7454] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.834968][ T7496] lo speed is unknown, defaulting to 1000 [ 134.871616][ T7496] lo speed is unknown, defaulting to 1000 [ 134.917106][ T7496] lo speed is unknown, defaulting to 1000 [ 135.151967][ T7454] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.249870][ T7454] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.309057][ T7454] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.372702][ T7454] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.409470][ T7520] netlink: 'syz.1.410': attribute type 1 has an invalid length. [ 135.432049][ T7520] netlink: 'syz.1.410': attribute type 2 has an invalid length. [ 135.448955][ T7461] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.542702][ T7461] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.635381][ T7461] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.659511][ T7496] infiniband syz0: set down [ 135.673290][ T7496] infiniband syz0: added lo [ 135.681973][ T7383] lo speed is unknown, defaulting to 1000 [ 135.733649][ T7461] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.788095][ T7496] RDS/IB: syz0: added [ 135.792724][ T7496] smc: adding ib device syz0 with port count 1 [ 135.807374][ T7496] smc: ib device syz0 port 1 has pnetid [ 135.817678][ T7383] lo speed is unknown, defaulting to 1000 [ 135.836720][ T7496] lo speed is unknown, defaulting to 1000 [ 136.199765][ T7496] lo speed is unknown, defaulting to 1000 [ 136.316769][ T7551] openvswitch: netlink: IPv4 tunnel dst address is zero [ 136.565124][ T7496] lo speed is unknown, defaulting to 1000 [ 137.065807][ T7496] lo speed is unknown, defaulting to 1000 [ 137.702281][ T7496] lo speed is unknown, defaulting to 1000 [ 137.984249][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.996414][ T1301] gprs0 selects TX queue 0, but real number of TX queues is 0 [ 138.043189][ T7632] gretap0: entered promiscuous mode [ 138.069747][ T7632] vlan2: entered promiscuous mode [ 138.133853][ T7634] syzkaller1: entered promiscuous mode [ 138.139559][ T7634] syzkaller1: entered allmulticast mode [ 138.523277][ T7660] __nla_validate_parse: 5 callbacks suppressed [ 138.523309][ T7660] netlink: 88 bytes leftover after parsing attributes in process `syz.4.454'. [ 138.830813][ T7461] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.872666][ T7461] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.907012][ T7461] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.912672][ T7677] netlink: 12 bytes leftover after parsing attributes in process `syz.4.460'. [ 138.934474][ T7461] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.986927][ T7677] lo speed is unknown, defaulting to 1000 [ 139.093021][ T7686] netlink: 244 bytes leftover after parsing attributes in process `syz.2.464'. [ 139.622430][ T7714] [ 139.624827][ T7714] ====================================================== [ 139.631873][ T7714] WARNING: possible circular locking dependency detected [ 139.638913][ T7714] 6.15.0-rc1-syzkaller-00374-gac1df712442c #0 Not tainted [ 139.646032][ T7714] ------------------------------------------------------ [ 139.653048][ T7714] syz.2.472/7714 is trying to acquire lock: [ 139.658948][ T7714] ffffffff900fe688 (rtnl_mutex){+.+.}-{4:4}, at: ip_mroute_setsockopt+0x161/0x11f0 [ 139.668294][ T7714] [ 139.668294][ T7714] but task is already holding lock: [ 139.675666][ T7714] ffff888040f28aa8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x1b2/0xd50 [ 139.685788][ T7714] [ 139.685788][ T7714] which lock already depends on the new lock. [ 139.685788][ T7714] [ 139.696197][ T7714] [ 139.696197][ T7714] the existing dependency chain (in reverse order) is: [ 139.705213][ T7714] [ 139.705213][ T7714] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 139.713828][ T7714] lock_acquire+0x116/0x2f0 [ 139.718861][ T7714] __mutex_lock+0x1a5/0x10c0 [ 139.723979][ T7714] smc_switch_to_fallback+0x35/0xda0 [ 139.729787][ T7714] smc_sendmsg+0x11f/0x530 [ 139.734725][ T7714] __sock_sendmsg+0x221/0x270 [ 139.740026][ T7714] __sys_sendto+0x365/0x4c0 [ 139.745056][ T7714] __x64_sys_sendto+0xde/0x100 [ 139.750351][ T7714] do_syscall_64+0xf3/0x230 [ 139.755386][ T7714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.761804][ T7714] [ 139.761804][ T7714] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 139.769463][ T7714] lock_acquire+0x116/0x2f0 [ 139.774490][ T7714] lock_sock_nested+0x48/0x100 [ 139.779797][ T7714] do_ip_setsockopt+0x17e9/0x39c0 [ 139.785355][ T7714] ip_setsockopt+0x63/0x100 [ 139.790388][ T7714] do_sock_setsockopt+0x3b1/0x710 [ 139.795939][ T7714] __x64_sys_setsockopt+0x1ee/0x280 [ 139.801667][ T7714] do_syscall_64+0xf3/0x230 [ 139.806698][ T7714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.813126][ T7714] [ 139.813126][ T7714] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 139.820353][ T7714] validate_chain+0xa69/0x24e0 [ 139.825652][ T7714] __lock_acquire+0xad5/0xd80 [ 139.830853][ T7714] lock_acquire+0x116/0x2f0 [ 139.835882][ T7714] __mutex_lock+0x1a5/0x10c0 [ 139.841000][ T7714] ip_mroute_setsockopt+0x161/0x11f0 [ 139.846807][ T7714] do_ip_setsockopt+0x1114/0x39c0 [ 139.852367][ T7714] ip_setsockopt+0x63/0x100 [ 139.857490][ T7714] smc_setsockopt+0x25c/0xd50 [ 139.862699][ T7714] do_sock_setsockopt+0x3b1/0x710 [ 139.868253][ T7714] __x64_sys_setsockopt+0x1ee/0x280 [ 139.874000][ T7714] do_syscall_64+0xf3/0x230 [ 139.879031][ T7714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.885451][ T7714] [ 139.885451][ T7714] other info that might help us debug this: [ 139.885451][ T7714] [ 139.895679][ T7714] Chain exists of: [ 139.895679][ T7714] rtnl_mutex --> sk_lock-AF_INET --> &smc->clcsock_release_lock [ 139.895679][ T7714] [ 139.909256][ T7714] Possible unsafe locking scenario: [ 139.909256][ T7714] [ 139.916707][ T7714] CPU0 CPU1 [ 139.922070][ T7714] ---- ---- [ 139.927436][ T7714] lock(&smc->clcsock_release_lock); [ 139.932844][ T7714] lock(sk_lock-AF_INET); [ 139.939789][ T7714] lock(&smc->clcsock_release_lock); [ 139.947687][ T7714] lock(rtnl_mutex); [ 139.951678][ T7714] [ 139.951678][ T7714] *** DEADLOCK *** [ 139.951678][ T7714] [ 139.959823][ T7714] 1 lock held by syz.2.472/7714: [ 139.964760][ T7714] #0: ffff888040f28aa8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x1b2/0xd50 [ 139.975311][ T7714] [ 139.975311][ T7714] stack backtrace: [ 139.981217][ T7714] CPU: 1 UID: 0 PID: 7714 Comm: syz.2.472 Not tainted 6.15.0-rc1-syzkaller-00374-gac1df712442c #0 PREEMPT(full) [ 139.981242][ T7714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 139.981255][ T7714] Call Trace: [ 139.981261][ T7714] [ 139.981270][ T7714] dump_stack_lvl+0x241/0x360 [ 139.981298][ T7714] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.981322][ T7714] ? __pfx__printk+0x10/0x10 [ 139.981346][ T7714] ? print_lock+0x171/0x1a0 [ 139.981366][ T7714] print_circular_bug+0x2e1/0x300 [ 139.981389][ T7714] check_noncircular+0x142/0x160 [ 139.981413][ T7714] validate_chain+0xa69/0x24e0 [ 139.981435][ T7714] ? sched_clock_cpu+0x77/0x4d0 [ 139.981459][ T7714] __lock_acquire+0xad5/0xd80 [ 139.981478][ T7714] lock_acquire+0x116/0x2f0 [ 139.981493][ T7714] ? ip_mroute_setsockopt+0x161/0x11f0 [ 139.981517][ T7714] ? finish_task_switch+0x1e5/0x870 [ 139.981544][ T7714] __mutex_lock+0x1a5/0x10c0 [ 139.981563][ T7714] ? ip_mroute_setsockopt+0x161/0x11f0 [ 139.981580][ T7714] ? trace_sched_exit_tp+0x3c/0x120 [ 139.981605][ T7714] ? __schedule+0x1ba6/0x5240 [ 139.981622][ T7714] ? ip_mroute_setsockopt+0x161/0x11f0 [ 139.981637][ T7714] ? arch_stack_walk+0xff/0x150 [ 139.981657][ T7714] ? __pfx___mutex_lock+0x10/0x10 [ 139.981678][ T7714] ? schedule+0x163/0x360 [ 139.981695][ T7714] ip_mroute_setsockopt+0x161/0x11f0 [ 139.981715][ T7714] ? register_lock_class+0x54/0x330 [ 139.981731][ T7714] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 139.981753][ T7714] ? __pfx___mutex_trylock_common+0x10/0x10 [ 139.981776][ T7714] do_ip_setsockopt+0x1114/0x39c0 [ 139.981803][ T7714] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 139.981828][ T7714] ? smc_setsockopt+0x1b2/0xd50 [ 139.981844][ T7714] ? __pfx___mutex_lock+0x10/0x10 [ 139.981867][ T7714] ip_setsockopt+0x63/0x100 [ 139.981889][ T7714] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 139.981907][ T7714] smc_setsockopt+0x25c/0xd50 [ 139.981925][ T7714] ? __pfx_aa_sk_perm+0x10/0x10 [ 139.981945][ T7714] ? __pfx_smc_setsockopt+0x10/0x10 [ 139.981962][ T7714] ? aa_sock_opt_perm+0x79/0x120 [ 139.981986][ T7714] ? __pfx_smc_setsockopt+0x10/0x10 [ 139.982001][ T7714] do_sock_setsockopt+0x3b1/0x710 [ 139.982023][ T7714] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 139.982044][ T7714] ? __fget_files+0x2a/0x420 [ 139.982072][ T7714] ? __fget_files+0x39d/0x420 [ 139.982096][ T7714] ? __fget_files+0x2a/0x420 [ 139.982123][ T7714] __x64_sys_setsockopt+0x1ee/0x280 [ 139.982147][ T7714] do_syscall_64+0xf3/0x230 [ 139.982166][ T7714] ? clear_bhb_loop+0x45/0xa0 [ 139.982184][ T7714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.982201][ T7714] RIP: 0033:0x7f08bd78e169 [ 139.982217][ T7714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.982231][ T7714] RSP: 002b:00007f08be532038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 139.982250][ T7714] RAX: ffffffffffffffda RBX: 00007f08bd9b5fa0 RCX: 00007f08bd78e169 [ 139.982264][ T7714] RDX: 00000000000000cb RSI: 0000000000000000 RDI: 0000000000000005 [ 139.982274][ T7714] RBP: 00007f08bd810a68 R08: 0000000000000000 R09: 0000000000000000 [ 139.982284][ T7714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.982295][ T7714] R13: 0000000000000000 R14: 00007f08bd9b5fa0 R15: 00007ffdae24a5d8 [ 139.982312][ T7714] [ 140.486938][ T7711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.471'.