last executing test programs: 22.826818757s ago: executing program 4 (id=647): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x88, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x88}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0xec0, 0x30, 0xb, 0x0, 0x0, {}, [{0xeac, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe60, 0x2, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x1}}}, @TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xec0}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x3, 0x0, 0xfffffffd}, 0x10) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0) socketpair$unix(0x1, 0xc, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x88, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x88}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0xec0, 0x30, 0xb, 0x0, 0x0, {}, [{0xeac, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe60, 0x2, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x1}}}, @TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xec0}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, 0x0, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x3, 0x0, 0xfffffffd}, 0x10) (async) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0) (async) socketpair$unix(0x1, 0xc, 0x0, &(0x7f0000000040)) (async) 22.550963926s ago: executing program 4 (id=651): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@mcast2, @in6=@private1, 0x4e24, 0x0, 0x4e24, 0x6, 0xa, 0x80, 0x130, 0x33, 0x0, 0xee01}, {0x4, 0xfffffffffffffffc, 0x100, 0xfffffffffffffffa, 0x0, 0x7fff, 0xfc, 0x6}, {0x5, 0xa, 0x5, 0xb5}, 0x3, 0x0, 0x0, 0x1, 0x2, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in=@broadcast, 0x3505, 0x4, 0x0, 0x9d, 0x2, 0x9, 0xc}}, 0xe8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket(0xa, 0x1, 0x0) close(r4) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x7a, 0x0, &(0x7f0000000180)=0x57) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x4000000, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x1d}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x180, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0xfffffffe}}, 0xb8}}, 0x0) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001e000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00T'], 0x24}}, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000000)=0x1, 0x2) 22.303939841s ago: executing program 4 (id=654): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) socket$kcm(0x2, 0x2, 0x73) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10) socket$l2tp(0x2, 0x2, 0x73) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x303}, "a95972fc5ec50719", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r5, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) sendfile(r5, r6, 0x0, 0xffffffff004) socket$can_raw(0x1d, 0x3, 0x1) close(0x3) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_POLICE={0x4}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 21.368209093s ago: executing program 4 (id=669): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x24, r1, 0x607, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x8801}, 0x4810) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r0) 20.86196943s ago: executing program 4 (id=676): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x98, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x68, 0x2, {{}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0xfcfd}]}, @TCA_NETEM_SLOT={0x2c}, @TCA_NETEM_ECN={0x8}]}}}]}, 0x98}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x98, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x68, 0x2, {{}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0xfcfd}]}, @TCA_NETEM_SLOT={0x2c}, @TCA_NETEM_ECN={0x8}]}}}]}, 0x98}}, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000240), &(0x7f0000000340)=0x30) 6.609726719s ago: executing program 4 (id=676): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x98, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x68, 0x2, {{}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0xfcfd}]}, @TCA_NETEM_SLOT={0x2c}, @TCA_NETEM_ECN={0x8}]}}}]}, 0x98}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x98, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x68, 0x2, {{}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0xfcfd}]}, @TCA_NETEM_SLOT={0x2c}, @TCA_NETEM_ECN={0x8}]}}}]}, 0x98}}, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000240), &(0x7f0000000340)=0x30) 3.664229371s ago: executing program 0 (id=826): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x401, 0x2000003, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x4002, 0x4000}, [@IFLA_MASTER={0x8, 0x3}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPOIB_UMCAST={0x6}, @IFLA_IPOIB_MODE={0x6}]}}}]}, 0x4c}, 0x1, 0xd, 0x0, 0x4008845}, 0x0) 3.518454102s ago: executing program 2 (id=828): r0 = socket$inet6(0xa, 0x80003, 0x6) recvmsg$can_raw(r0, &(0x7f0000000740)={&(0x7f00000001c0)=@ieee802154={0x24, @long}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000440)=""/37, 0x25}, {&(0x7f0000000480)=""/230, 0xe6}], 0x3}, 0x100) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) recvmmsg(0xffffffffffffffff, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}, {0x0, 0xd}, {0x0}, {0x0}, {&(0x7f0000000980)=""/113, 0x7e}, {&(0x7f00000007c0)=""/202}], 0x6}}], 0x1, 0x120, 0x0) sendmmsg$sock(r1, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) r2 = epoll_create(0x7) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) close(r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='\t\x00\x00\x00\n\x00\x00\x00B\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="00000000000000000000f0ff0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000080), 0x200, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x3, r4}, 0x38) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/110, 0x14b}, {&(0x7f0000000280)=""/85, 0x53}, {&(0x7f0000000fc0)=""/4096, 0x564}, {&(0x7f0000000400)=""/106, 0x14}, {&(0x7f0000000740)=""/73, 0x60}, {&(0x7f0000000200)=""/77, 0x630}, {&(0x7f00000007c0)=""/154, 0x4a}, {&(0x7f0000000100)=""/16, 0x158}], 0x8, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x2, &(0x7f0000003700)={0x77359400}) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 2.204033982s ago: executing program 0 (id=830): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0xfd96}]}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x642410}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012dbd7000fcdbdf253b0000001000cd000800ffff0700aa7601d70100090000000c00cd000700060000020900"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0xfcfa121d2586292f) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000000b060101000000000000000000000000100007800c00018008000140e0000002050001"], 0x38}}, 0x0) 2.202673012s ago: executing program 2 (id=831): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e000000000000000000200003800800040000000000080002002000000004000500080005"], 0x4c}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) close(r4) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000080)=0x9, 0x4) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100da5c748a1b3d92d1120000000800070001000000080006000100000018000180140002007465616d5f736c6176655f30"], 0x3c}}, 0x0) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r3, &(0x7f0000004300)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x40602}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x80000000}, @IFLA_IPTUN_REMOTE={0xfffffffffffffc48, 0x3, @multicast1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e000000000000000000200003800800040000000000080002002000000004000500080005"], 0x4c}}, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$BATADV_CMD_GET_MESH(r2, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) (async) close(r4) (async) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000080)=0x9, 0x4) (async) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100da5c748a1b3d92d1120000000800070001000000080006000100000018000180140002007465616d5f736c6176655f30"], 0x3c}}, 0x0) (async) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) recvmmsg(r3, &(0x7f0000004300)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x0, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x40602}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x80000000}, @IFLA_IPTUN_REMOTE={0xfffffffffffffc48, 0x3, @multicast1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) (async) 1.924816419s ago: executing program 2 (id=833): r0 = socket$inet(0x2, 0x3, 0x4) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000003000000000000000000000300000000030000000200000006000000010040000000000e0500000001000000006100"], 0x0, 0x43, 0x0, 0x1, 0x4, 0x0, @void, @value}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000006540000000c0a01010000000000000000010000000900020073797a32000000002800038024000080090026400000000018000b80140001800a0001006c696d697400000004fe02800900010073797a30"], 0xd8}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000001a40)={@val={0x1c, 0xf5}, @val, @mpls={[{}], @ipv6=@generic={0x5, 0x6, '\x00', 0x3e, 0x4, 0xfe, @private0, @private1, {[], "9b625c8d42d8e657153d91ee85fec45fa78c700c3e8bcde55bcc2fcfff972322cbb80c3baebd9d0c9642246494023e8654e2430349a0a950c3e50a8078c0"}}}}, 0x78) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x88dd895beaa99965, 0x12, r4, 0xe352a000) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffd72, 0x2, {{0x7391b496}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x1}}}}]}, 0x78}}, 0x0) 1.918396036s ago: executing program 0 (id=835): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) syz_emit_ethernet(0x52, &(0x7f0000000180)={@local, @random="08c82553c54d", @val={@val={0x88a8, 0x3, 0x0, 0x2}, {0x8100, 0x7, 0x1, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local}, {{0x1, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "b3e480a7613088fd71106c027deb3b11"}]}}}}}}}, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='veno\x00', 0x5) sendto$inet(r1, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) ioctl$SIOCAX25CTLCON(r0, 0x89e8, 0x0) 1.411635354s ago: executing program 2 (id=840): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="6c0000000206050000000000000000000000000005000400020000000900020073797a32000000002400078008000600000000001800028014000240fc020000000000000000000000000001050005000000000005000100060000000d0003006c6973743a73657400000000000000000aa0a1bb738ae958e0947000b8785fa73497522ec84e86197eb7dfe92c9c8edd38d706582f35556f2df95d"], 0x6c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000001200000008000300", @ANYRES32=r3, @ANYBLOB="0a00060008021100000100001e001f120000000000000000000000000000000000000000000000000000000010009d"], 0x58}}, 0x0) 1.195775321s ago: executing program 2 (id=843): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r2, {0x9, 0xfff2}, {}, {0xb, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x20000000) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="acf113bb640101020000030008000000ac1414aa0a0164010101ac1414aaac1414aaac141437e0000002000000000000"], 0x30) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="200000001a1401"], 0x20}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000004c00048024bd20800b000100736f636b6574000014007d028008000240000000030800014000000002240001800a0001007175657565000000140002800900010073797a30000000000900020073797a32000000001400000011000100"/144], 0xa0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000380)={0x2, 0x4e22, @multicast2}, 0x10) setsockopt$sock_int(r5, 0x1, 0x800000000f, &(0x7f0000000140)=0x7, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r6, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r5, 0x0) listen(r6, 0xa) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r7, 0x11, 0x67, &(0x7f0000000180)=0x800, 0x4) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e25, 0x80000000, @mcast1, 0x6}, 0x1c) write(r7, &(0x7f0000000300)="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", 0xfc4c) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\r\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="020026bd7000fbdbdf25080000000800040000100000"], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x14) recvmmsg(r7, &(0x7f0000001140)=[{{&(0x7f00000004c0)=@x25={0x9, @remote}, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000000640)=""/213, 0xd5}, 0x8000000}, {{&(0x7f0000000740)=@x25={0x9, @remote}, 0x80, &(0x7f0000000880)=[{&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000000580)=""/36, 0x24}, {&(0x7f00000007c0)=""/145, 0x91}, {&(0x7f0000000940)=""/105, 0x69}], 0x4, &(0x7f00000009c0)=""/184, 0xb8}, 0x4}, {{&(0x7f0000000a80)=@nfc_llcp, 0x80, &(0x7f0000001040)=[{&(0x7f0000000b00)=""/150, 0x96}, {&(0x7f00000023c0)=""/251, 0xfb}, {&(0x7f0000000cc0)=""/160, 0xa0}, {&(0x7f0000000280)=""/42, 0x2a}, {&(0x7f0000000dc0)=""/159, 0x9f}, {&(0x7f0000000e80)=""/201, 0xc9}, {&(0x7f0000000f80)=""/180, 0xb4}], 0x7, &(0x7f00000010c0)=""/78, 0x4e}, 0x3}], 0x3, 0x10001, &(0x7f0000001200)) syz_emit_ethernet(0x9e, &(0x7f0000000400)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x68, 0x6, 0x0, @private1, @local, {[], {{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x1a, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@remove_addr={0x1e, 0x51, 0x8, 0x0, "b86767ac2b9c5820daa5f6a63541e428974340f73ee96d6328baa2c14767a455b29df52c6461d69791bd347f61dc693fd7f1f5cc9f96a7b131a92c82139ae0d85dee7f4dc572fdf094b81eae6eb2"}]}}}}}}}}, 0x0) r9 = socket(0x2c, 0x803, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r9, 0x84, 0xf, 0x0, 0x0) sendto(r9, &(0x7f0000002300)="bb4a03c86322893e6f1d0932669a18e2a885f2e34c348c08aaee2b54622ba1d448aec04e44b3677cd5143a2c3aa5f444a77742a8ab1bf470d6cad114385c5c37a4081400f7b3cfc7abf13e8429aba0a0eb98749792a8bbffdacdc4124a6e522d0107726e5ca64052a64a9886fb92a20f58c075512be9cdcd12aec5196dd8cc91eb84becd92ba3987bdb2c7d09724a41db3f3bd0a48ec07d30275141e7928f9bc6f6061a6a74ad44019cdd71c1114", 0xae, 0x8000, 0x0, 0x0) 1.034738234s ago: executing program 3 (id=844): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x22, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc", 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="0102", 0x0}, 0x50) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x58, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_POLICY={0x10, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_TUPLE={0x4, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x2, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @dev}}}]}, @NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x58}}, 0x0) 871.962503ms ago: executing program 3 (id=845): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) (async) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x58}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0xfffffffc, 0x0, 0x0, 0x9}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x70}}, 0x20040000) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0) 861.992857ms ago: executing program 0 (id=846): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) getsockopt$sock_buf(r1, 0x1, 0x19, &(0x7f0000002f80)=""/217, &(0x7f0000003080)=0xd9) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000feffffff1c0000000a0004007770616e300000000800010000000000080003"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) 861.006256ms ago: executing program 1 (id=847): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20044081, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "3a7de480b8b91355", "74acd9ea8ab801bfb3006a72bbf08fa3", "e56f882e", "9ba1177a20f6bbbb"}, 0x28) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x5, 0x0, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001880)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2b0, 0x20a, 0x278, 0x2b0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'vlan0\x00'}, 0x7a, 0x118, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x80000001, 0x3}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@dst={{0x48}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x4d, 0x0, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x4018, r3}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x4, &(0x7f0000000900)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x204000, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000001cbbaa52d6313dc0000000000000ffffffffffffffff00000000000000000000000000000000000000000000001f000a000000000000000000000080400000000000000000080000000000000000000000000000000004000500"], 0xbc}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYRESDEC, @ANYRES8, @ANYRESOCT=0x0, @ANYRES32=r4], 0xec}}, 0x2004894) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bond0\x00'}) sendmsg$nl_xfrm(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000900)=ANY=[@ANYBLOB="f0010000100001000000000000002000fe800000000000000000000000000000ac1e000100000000000000000000000000000000000000000000000032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES8=0x0, @ANYRESDEC=r5, @ANYRES16=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES8=r1], 0x1f0}, 0x1, 0x0, 0x0, 0x20004844}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r4, 0x0, 0xb5, 0xdb, &(0x7f0000000140)="c78453adaf702968df100709061b32388d1d4c53b7a4a79e7af6c72f83c83d8087c597feed798d0a88cd953b40908e94684ab522b62b85086e2507e71312b3800bdca2cfc18a94797c19ecc17e352e5bd85d435a679fc0ee540d5c42a9f5955782613d8ddc184f364fc09842fe09d32f2136cf3656b074fd3277d71be48c131bc30cc2fd172b7fea6fe043b23c55feca40a1e65c238b2747ad6a8c07388e8ce45c1750cd474ce1b0b449d4e5e67ae535235b5e8043", &(0x7f0000000480)=""/219, 0xd, 0x0, 0x89, 0xc7, &(0x7f0000000580)="0bbf4076373ca0e972a306acc0c4f16b62a2706bafc50a4d0baf9e3d1c52a6a39b6f4719e0d4bdad6dee8186bc68f2d1170852bfd6cadb54bf48756759c8bc4438fc6fb0a40d162b2d004b212fc45db5fb9a57661d0d3e51a14002a3d6e05d4134e984eabb7456adf6a3b6ed432a6cf5ce935c40a807ba96e7e9eaa49b113440255eed74746cbc2022", &(0x7f0000000640)="003d90f866077d1a70799f726fdf6231f6343074536ddad8a3207a58471c7e9a40a0aa35d6857ae8756bfbca9db676f502ab85171f04a3bb7d9217c88d21c9fb7e4db45e2f4e5ec41dc54c2b1d050abdf116c620a02c35a720f9f3b1628e22fd5e7e251e955e34409770dd3a7255247acde681208ff92250dcaeaf3981bc0154a0d9dffffe3b0cfeeea5dc90b988f5f246537b595912a13236baf989cfe77e932bd5258dbd7657354561ee35eabb96a710d79a67ac81ec4858c095d8dc1139f61d7e040107d6b8", 0x2, 0x0, 0x200}, 0x50) r9 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000100)=0x7) r10 = socket$l2tp6(0xa, 0x2, 0x73) getpeername$l2tp6(r10, 0x0, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000007c0)=r4, 0x4) r11 = epoll_create(0xf) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r9, @ANYBLOB="9d8338076c15a82e7b04253bd200095cfef52566f6c28d11a2209c10845a76e0f4d55908769470363fe83e242c9eb4feb1b2ec839034b4646f8fb50de4b440e44c0c267f1243437f27"], 0xd8}}, 0xc0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r9, &(0x7f0000000040)) 775.432064ms ago: executing program 0 (id=848): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000380)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0xfffe, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4002, 0x0, 0x21, 0x9, @dev={0xac, 0x14, 0x14, 0x10}, @remote, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@rand_addr=0x86dd}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@multicast1, 0x4f}, {@multicast2}, {@loopback}, {@local, 0x4}, {@broadcast}]}]}}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r7, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r8, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x4000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), r7) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000000)='/proc/sys/net/ipv6\x00\x00\x00\x00\x00\x00\x00\x00\x80=\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x30) openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) r10 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f00000001c0), &(0x7f0000000280)=0x4) r11 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r10, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r11, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000fedbdf2505000000080009000200000008000c76c676fc216075a65e61e5656100aa0a0000060001000500000008000b00040000000500130062000000e13471e052e9992556ef8280243f586a06f59438c2a923bef779b4c5ba952b"], 0x3c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r6, @ANYBLOB='\x00\x00g\x00\b\x00\b\x00', @ANYRES32=r4], 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffef, {0x0, 0x0, 0x0, r3, {0x8, 0x1}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@can_delroute={0x154, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffff7}}, @CGW_CS_CRC8={0x11e, 0x6, {0x0, 0x0, 0x1, 0x0, 0x0, "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", 0x1, "2353a2ad8f792337b3610a014feea22617c1ecea"}}, @CGW_MOD_AND={0x15, 0x1, {{{}, 0x0, 0x0, 0x0, 0x0, "e292ac39b9d3382f"}, 0xb}}]}, 0x154}}, 0x50) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 708.775224ms ago: executing program 3 (id=849): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x80000) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x2, 0x20}, &(0x7f00000001c0)=0xc) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100feffffff000000009200000208000300", @ANYRES32=r1, @ANYBLOB="0a0006"], 0x30}}, 0x0) 599.55229ms ago: executing program 1 (id=850): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@ipmr_newroute={0x1c, 0x18, 0x1, 0x70bd2d, 0x25dfdbff, {0x80, 0x14, 0x20, 0x7, 0xfe, 0x1, 0xfe, 0x6, 0x100}}, 0x1c}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000015c0)={r1}) syz_genetlink_get_family_id$team(&(0x7f0000001580), r2) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25ADDUID(r3, 0x89e1, &(0x7f0000000240)={0x3, @bcast, 0xee00}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0xf, &(0x7f0000000080)=0x3, 0x4) r5 = accept4(r1, &(0x7f0000000d80)=@x25={0x9, @remote}, &(0x7f00000001c0)=0x80, 0x80000) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f0000000fc0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e80)={0xcc, r6, 0x100, 0x70bd28, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc, 0x90, 0x189}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x800}, {0xc}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0xe}, {0xc}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x8001}, 0x0) recvmmsg(r4, &(0x7f0000000cc0)=[{{&(0x7f00000000c0)=@generic, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000003740)=""/4096, 0x1000}, 0x2}, {{&(0x7f0000000440)=@hci, 0x80, &(0x7f00000001c0), 0x0, &(0x7f00000004c0)=""/133, 0x85}, 0xd}, {{&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000004800)=[{&(0x7f0000000880)=""/102, 0x66}, {&(0x7f0000000900)=""/71, 0x47}, {&(0x7f0000000580)=""/30, 0x1e}, {&(0x7f0000000980)=""/63, 0x3f}, {&(0x7f00000009c0)=""/232, 0xe8}, {&(0x7f0000000ac0)=""/84, 0x54}, {&(0x7f0000000b40)=""/29, 0x1d}, {&(0x7f0000000b80)=""/70, 0x46}, {&(0x7f0000001680)=""/5, 0x5}, {&(0x7f0000000c00)=""/18, 0x12}], 0xa, &(0x7f0000000c80)=""/2, 0x2}, 0x9}], 0x3, 0x12000, 0x0) sendmsg$key(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000002740)={0x2, 0x15, 0x8, 0x8, 0x14, 0x0, 0x70bd2a, 0x25dfdbfc, [@sadb_x_sec_ctx={0x12, 0x18, 0xe, 0xf8, 0x82, "f825fc2a9f74a1e23994fd36be58f865e6cb81ac70d04de5e8bc3885dea2d78d4546f842d86b7e606a7e5d66a0ccc8d1212bc8f1669fd3b1169eb9a541fb544e6d26a836b5330275bfd45e8b8d10fedb805c33f8a2403d1dffc56963ef3519998d5a52c6e0397577d1a97b459caa87ba9dad7464c95a5896c5ca467da6497d48a627"}]}, 0xa0}}, 0x45) sendmsg$key(r0, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) recvmmsg(r0, &(0x7f0000000740)=[{{&(0x7f00000005c0)=@tipc, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001740)=""/4081, 0xff1}, {&(0x7f0000000640)=""/251, 0xfb}, {&(0x7f0000001000)=""/52, 0x34}, {&(0x7f0000000180)=""/51, 0x33}, {&(0x7f0000000240)=""/140, 0xffffffffffffff3b}, {&(0x7f0000001040)=""/181}, {&(0x7f0000000800)=""/61}, {&(0x7f0000001140)=""/214}, {&(0x7f0000001240)=""/105}, {&(0x7f00000012c0)=""/238}], 0x5}}], 0x4000000000000b7, 0x2, 0x0) read(r0, &(0x7f0000000200)=""/7, 0x7) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001100), r5) getsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000001480)={@private2, 0x0}, &(0x7f00000014c0)=0x14) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000013c0)={0x6, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r11, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) getpeername$packet(r5, &(0x7f0000001500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001540)=0x14) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r7, &(0x7f0000001640)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001600)={&(0x7f0000000340)=ANY=[@ANYBLOB="80000000", @ANYRES16=r8, @ANYBLOB="000129bd7000fbdbdf2508000000080002000800000014000680080003007f00000108000600090000004800018008000700", @ANYRES32=r9, @ANYBLOB="fb0ce9d903c223e19556b5e8d3a825d88987fb665bcf5eea85a4640407000000000000196d6ce275c9c72f5845ef7897312f5bd007ff87", @ANYRES32=r11, @ANYBLOB="14000400fe8800000000000000000000000000010800030064010102050002000400000008000700", @ANYRES32=r12, @ANYBLOB="060005004e2400000800040009000000"], 0x80}, 0x1, 0x0, 0x0, 0x4001}, 0xc004) 471.816406ms ago: executing program 3 (id=851): setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}}}, 0x84) r0 = epoll_create(0x9) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r3, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7b}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x3ff}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xe9}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r4}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x47}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x20008004) bind$l2tp6(r4, &(0x7f0000000240)={0xa, 0x0, 0x5, @loopback, 0xd, 0x2}, 0x20) r5 = accept$ax25(0xffffffffffffffff, &(0x7f0000000280)={{0x3, @null}, [@null, @netrom, @rose, @rose, @remote, @null, @remote, @netrom]}, &(0x7f0000000300)=0x48) bind$ax25(r5, &(0x7f0000000340)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = accept4$netrom(0xffffffffffffffff, &(0x7f00000003c0)={{0x3, @default}, [@null, @rose, @netrom, @netrom, @bcast, @remote, @null, @default]}, &(0x7f0000000440)=0x48, 0x80c00) setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x19, &(0x7f0000000480)=@netrom={'nr', 0x0}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f00000004c0)={0x10}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r5, 0xf501, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000500)={0x0, 0x16, "9633a8acd2fdc7450b51c433da8a58b2a075112fd961"}, &(0x7f0000000540)=0x1e) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x19, &(0x7f0000000580)={r8, 0x5}, 0x8) ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f00000005c0)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x9a, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xa77, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r1, &(0x7f0000000640)={0xa0000014}) r9 = accept4$phonet_pipe(r2, 0x0, &(0x7f0000000680), 0x81800) r10 = accept4$phonet_pipe(r9, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x800) r11 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r11, &(0x7f0000000740)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x3, 0x0, 0x4, 0x0, {0xa, 0x4e23, 0x9, @mcast1, 0x3}}}, 0x3a) ioctl$PPPIOCSFLAGS(r11, 0x40047459, &(0x7f0000000780)=0x2080800) ioctl$PPPIOCSFLAGS(r11, 0x40047459, &(0x7f00000007c0)=0x100000) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r10, 0xc028660f, &(0x7f0000000800)={0x0, r12, 0x8, 0xc, 0xffffffff80000000, 0x730}) sendmsg$L2TP_CMD_TUNNEL_GET(r12, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x34, r3, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8000000000000001}]}, 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x8840) socket$nl_generic(0x10, 0x3, 0x10) 398.691308ms ago: executing program 1 (id=852): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000180)={0x0, 0xffffff3e, 0x80, 0x100}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={r1, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e22, 0xfffffb11, @mcast1, 0xbb5}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={r2, @in={{0x2, 0x4e21, @loopback}}}, &(0x7f0000000040)=0x84) 295.822196ms ago: executing program 3 (id=853): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f00000002c0)={&(0x7f0000000240)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x4040080}, 0x200000c0) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x2}}, @mask_cswp={0x58, 0x114, 0x9, {{0x5, 0x9}, 0x0, 0x0, 0x2, 0x4, 0x9, 0x0, 0x1, 0x4}}], 0xb0}, 0x0) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000300)="ea8360d388802b405281827a25b6f4fbc263f9155538b7d9078c35e38b25bd1b7df64e9eb7921243d90c94f3789b4322d9278b75613500d16582a3dcb9f573776e3c35472ca5ee4f9b1bbe32ea9374f7bb95c36e5f51f3f9b6e67354beee7834dd63a25ec3673baea006caf7dd09aaeb81662788f7ed0bf84cd0e9a23c10dfca59c09730f74136a12a470924bdfcb7d91c71ca96093a9e3479e2870d86ab5efc93774785c790568c59ee09e9a4ea0e1baac005862cf887b97e60e143ea7840c54b02fd7c70d4cd9a5b44c70149bcd45c98feb8106c66c6", 0xd7}, {&(0x7f00000004c0)="bba4db9879c1c3ceee3ed06dd141e19c776c27e4aad761390790e59c5f949e8b0fe9ee071ac2962a231323fe64c023a2e2f6e84cdc01fab8d06b327391fe82e9fc316096d0788dfd5181b01c1ef241123197aa655a4cc053ebc290f2a5e77d1b2f17d791116c7eafbe1335d1d8d43e6998559167434e5878e426c29bf4cf2cde825ceced9bbfd7c0113132ec5d3a9ca67648d9548957d786b0621e51673ae819465145d203f7fa450cf2189090410c83d8831a2fd415c1e2", 0xb8}, {&(0x7f0000000580)="be7629eada8daea5a53d22f1e7e49e05c6c1b6cdd5bc509d9fc64c88d11dfd4ce93d49c460cb9c97bfc865c08380216b06e01b29f877dec636f1decf4f9a08d560e83bcd569565c21e368f214bd3b451be704a7013e160ac1dce286612d9731e84d041dc50c2032e219316a3e46f63e40f668eaa494b1987533ceb59ba36bb5d2b5750a18b37a5b4c2a62afbcd9f5e08cabf6d23c82bad4324d5cd44ccf5f454b3", 0xa1}, {&(0x7f0000000400)="a51315510ad3d4768f5b77d834114cef2581d47e1cbb9ef670188443ad6d2f34d823e1ab8b3f2dd2b94c6ca7eedb4650ae59a712e0e85d23d0d66669e9c665c6d28a016d9770074e262567f5319541477c0cbeed89f5dd1f85bb6d271861f6c3b06091788ea74351f7292de3", 0x6c}, {&(0x7f0000000280)}], 0x5) sendmsg$nl_xfrm(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="280400001600e5632bbd7000fedbdf25fc010000000000000000000000000000ac1414aa0000000000000000000000004e230fff4e2300050200808021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe800000000000000000000000000035000004d432000000ac1414bb000000000000000000000000050000000000000002000000000000000004000000000000070000000000000007000000000000006cee0000000000000700000000000000ff03000000000000010000000100000005000000000000003f0000000000000009000000000000000800000001000080090000002bbd7000ff3400000a0000039400000000000000010000000e2dcf0905"], 0x428}}, 0x0) r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000140)=0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000840), 0xffffffffffffffff) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg(r5, &(0x7f0000000200)={&(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, &(0x7f0000019580)=[{0x10}, {0x10, 0x114, 0x2}], 0x20}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMKSA(r5, &(0x7f0000000800)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xa8, r6, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10}}}}, [@NL80211_ATTR_SSID={0x14, 0x34, @random="43b2c56b6e4788f6474d59c10c77553a"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xb}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x7}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x1}, @NL80211_ATTR_PMK={0x14, 0xfe, "6b6dc5bee05b54bebfa8645dd6a40d8e"}, @NL80211_ATTR_PMK={0x14, 0xfe, "68a10c4af2f9c9e3b93251530d15e91e"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x8f1}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="264c92fec73f"}]}, 0xa8}, 0x1, 0x0, 0x0, 0x10000040}, 0x4894) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept4(r7, 0x0, 0x0, 0x800) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000040007800c00030003000000000000000c0002000000000000000000234d07344717ecb8fe77e6ac1d4edebc0a33ca5a03f0d4afc9ad1d1e02db2a35e39b4e9649d1bb54b257f40fcc728d70482ba5949391a1a6b5370031111bfcff4b698653c6765e146db1bd50d917205167eb974e57b42b571f4fc8b0aafc08bd82717beda0bc1366802894b4cb4befac51a87c78330afd422012e336ee8195155c8ca6b2eebc1d6dd944c7a95bcf1a13c9cd576c9d0ab23c6e5988639c8c2c7f2b6207cae308489352e9a9ef34dc8d410301570a99aef876d7110abb01"], 0x30}}, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, r3) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000180)={{0x87, @loopback, 0x4e22, 0x4, 'lc\x00', 0x8, 0x2, 0x23}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6, 0x4, 0xffff, 0xff, 0x1}}, 0x44) 294.883092ms ago: executing program 1 (id=854): r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name, &(0x7f0000000040)=0x10, 0x800) connect$tipc(r0, &(0x7f0000000080)=@id={0x1e, 0x3, 0x2, {0x4e20, 0x3}}, 0x10) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x4e22, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfc0}, {0xa, 0x4e23, 0x4, @empty, 0x100}, 0xffffffffffffffff, {[0x3, 0x8000, 0x7fff, 0x5, 0x4, 0x9, 0x3, 0x9]}}, 0x5c) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000140)={'wg2\x00', {0x2, 0x0, @local}}) bind$tipc(r0, &(0x7f0000000180)=@id={0x1e, 0x3, 0x1, {0x4e20, 0x4}}, 0x10) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f00000001c0)=0x1) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000480)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x0, 0x1, 0x3}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000240)="f82dce14e50aeeca83ea77fc1bca5d6688e047c8e268cbac4fb3ddf3c4db7f9f6b582fdeecf4006d6f8c763594488fad3d7e218cc9d3740ea9f8c11c53eae4f66b995e546b69fa436549fd8dc0b9b5b5f5027e6ecb7cf23209d9056c7d3fbc3257c8f9c97508ed569a1a9f8bfc5df3535af9f91d8d35", 0x76}, {&(0x7f00000002c0)="46ef8db8159ff8250227d916ca148c77f27660bbb28807c21dc0225aee996f3e73ccac10d0aafcd37ef92866d0667bea70dd39e100856963327dbf4c36c4a5fcb85f0ad36a66b2139f940174688e94125f5a3d48df7f6e8e2858770f17a5d8470b40489255dbf18cfe06ab2c4d2b73599b6251802a4d1cb62b1bc1db0ecde80dcbefd7d5a2bf5de9a2abf3170d8f1dfa7dbb3bad8106c156fb12ef08222756fc23eeecc37bf7865c872c06c8d122eecd091640f7940cd89221", 0xb9}], 0x2, &(0x7f00000003c0)="301e0555889037e8f616ebe20007a2152786d248bcffb25ea3d7b448a31d6fd641b5a40dfba4d1db85a05c366ed3ff339794ff78fed8531b89544faaed2eca9332ac771855bd41a525483b1a0d1d562cebb44b07660c0ef24c3a94ec218aca150abc246e8bdac7bc9df5d7485fc54b75869787d9c31064986635db5d8769f7fca0d5938207cd2291901cb660ef2b", 0x8e, 0x40}, 0x24000800) close(r0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cgroup.freeze\x00', 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f0000000500)=0x1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(r4, &(0x7f0000000580)=@id={0x1e, 0x3, 0x1, {0x4e20, 0x2}}, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), r2) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000740)={'tunl0\x00', &(0x7f0000000680)={'syztnl0\x00', 0x0, 0x7800, 0x20, 0x5, 0x10, {{0x21, 0x4, 0x0, 0x2, 0x84, 0x67, 0x0, 0x1, 0x29, 0x0, @broadcast, @empty, {[@rr={0x7, 0x13, 0x78, [@dev={0xac, 0x14, 0x14, 0x14}, @loopback, @loopback, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x24, 0x68, 0x3, 0xa, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1ff}, {@multicast1, 0x5}, {@multicast2, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80000001}]}, @end, @noop, @noop, @ssrr={0x89, 0x17, 0xba, [@empty, @local, @loopback, @private=0xa010100, @remote]}, @lsrr={0x83, 0x1f, 0xf6, [@broadcast, @dev={0xac, 0x14, 0x14, 0x3d}, @empty, @broadcast, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000780)={'veth1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000800)={'syztnl2\x00', &(0x7f00000007c0)={'syztnl0\x00', 0x0, 0x700, 0x10, 0x2, 0x0, {{0x6, 0x4, 0x3, 0x4, 0x18, 0x67, 0x0, 0x8, 0x0, 0x0, @loopback, @local, {[@noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000840)={'wg0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000940)={'gretap0\x00', &(0x7f00000008c0)={'syztnl2\x00', 0x0, 0x80, 0x40, 0x200, 0x4c, {{0x13, 0x4, 0x2, 0x2, 0x4c, 0x66, 0x0, 0xc, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x20, 0xe5, 0x0, 0x5, [0x8, 0x100, 0x1e, 0x8, 0x8, 0x9, 0x6]}, @noop, @generic={0xa, 0x3, 'r'}, @cipso={0x86, 0xf, 0x3, [{0x6, 0x9, "ce2299f1c525bc"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000a00)={'sit0\x00', &(0x7f0000000980)={'gre0\x00', 0x0, 0x700, 0x1, 0x1, 0x6, {{0x9, 0x4, 0x2, 0x7, 0x24, 0xb, 0x0, 0x4, 0x29, 0x0, @multicast2, @loopback, {[@ssrr={0x89, 0xf, 0x9c, [@rand_addr=0x64010100, @local, @local]}, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000a40)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000b00)={'syztnl2\x00', &(0x7f0000000a80)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0xd, 0x9, 0x0, @loopback, @mcast1, 0x7800, 0x7, 0x4, 0xf5}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000b40)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000b80)={0x1e0, r5, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3f4c4d044d3357f8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x40000}, 0x812) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000e00)={0x41, 0x2, 0x2}, 0x10) r17 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000ec0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x34, r17, 0x620, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r18}, @val={0xc, 0x99, {0x1ff, 0x74}}}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000040) 212.417716ms ago: executing program 0 (id=855): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000003c0)=@generic={0x0}, 0x18) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r2) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x20, r3, 0x1, 0x7ffffc, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004055}, 0x200440c4) (async) socket(0x10, 0x803, 0x0) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x18, r4, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4004000}, 0x8000) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000300)={0x1f, 0x3, 0x3}, 0x6) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r7) sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01020000010000ecffff0600260005000400ac35000114000600626f6e643000000000000000000000001400070000000000000d00000000ffffac1e0001050005"], 0x4c}, 0x8, 0x3000000000002}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)={0x44, r8, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_macvtap\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}]}, 0x44}, 0x1, 0x0, 0x0, 0x8850}, 0x4044090) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r9 = socket(0x400000000010, 0x3, 0x0) (async) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r12 = socket$rxrpc(0x21, 0x2, 0xa) poll(&(0x7f0000000080)=[{r12}, {r12}], 0x2, 0xf45) (async) setsockopt$sock_int(r12, 0x1, 0x7, &(0x7f0000000240), 0x4) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) (async) r13 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newtfilter={0xd0, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x8}, {0x6}, {0x7, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0xa0, 0x2, [@TCA_FLOW_POLICE={0x84, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffffffffff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x412}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0x10001}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x4, 0x9, 0x1ff, {0xd8, 0x2, 0x2, 0xfff0, 0x9, 0x3}, {0x2, 0x2, 0xee5f, 0x6, 0x7, 0x7}, 0xe, 0x101, 0xfffffff8}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}]}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_RSHIFT={0x8}, @TCA_FLOW_XOR={0x8, 0x7, 0x5}]}}]}, 0xd0}}, 0x400c084) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="87002fbd7000000000001e0000000a0004007770616e33000000080001001b"], 0x28}}, 0x4024044) 210.662583ms ago: executing program 2 (id=856): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0x4, 0xb}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x803, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 175.099393ms ago: executing program 1 (id=857): sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xed, &(0x7f0000000080), &(0x7f0000000000)=0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c0007801800018014000240"], 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) 134.084663ms ago: executing program 3 (id=858): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r4}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) close(r6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x15}}]}, 0x1c}}, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b702000000000000850d000c51000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r9, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r7}, &(0x7f0000000300), &(0x7f0000000400)='%pS \x00'}, 0x20) bind$xdp(r1, &(0x7f0000000180)={0x2c, 0x3, r3, 0x20}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x401, 0x800000}, 0x20}}, 0x0) 0s ago: executing program 1 (id=859): r0 = socket(0x10, 0x80000, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000711204000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @random="bf5dba82feb3"}]}, 0x44}}, 0x0) sendmsg$key(r3, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0x18, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@multicast2, @in6=@private1}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x0, 0x0, @private0}, @in6={0x2, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}]}, 0xe0}}, 0x0) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r5, r2, 0x0, r2}, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r7) sendmsg$NFC_CMD_GET_TARGET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r8, 0x1}, 0x14}}, 0x24004044) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r7) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r7) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r9, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xffffffffffffffd9, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8}, @TCA_FQ_CODEL_FLOWS={0x8}]}}]}, 0x48}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.151' (ED25519) to the list of known hosts. [ 82.749506][ T5828] cgroup: Unknown subsys name 'net' [ 82.921055][ T5828] cgroup: Unknown subsys name 'cpuset' [ 82.930118][ T5828] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.587656][ T5828] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.137881][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.157238][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.164880][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.173636][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.181500][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.256046][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.264835][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.272677][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.281038][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.289040][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.358204][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.366085][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.373895][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.382121][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.390175][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.434381][ T5152] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.444223][ T5152] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.452212][ T5152] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.460781][ T5152] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.468871][ T5152] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.493515][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.503477][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.512496][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.522062][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.530005][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.096407][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 89.120898][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 89.178287][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 89.227763][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 89.477349][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.484535][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.492618][ T5851] bridge_slave_0: entered allmulticast mode [ 89.500449][ T5851] bridge_slave_0: entered promiscuous mode [ 89.510821][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.517996][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.525168][ T5851] bridge_slave_1: entered allmulticast mode [ 89.532674][ T5851] bridge_slave_1: entered promiscuous mode [ 89.540024][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 89.646153][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.653507][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.660957][ T5839] bridge_slave_0: entered allmulticast mode [ 89.668345][ T5839] bridge_slave_0: entered promiscuous mode [ 89.727403][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.734581][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.741857][ T5839] bridge_slave_1: entered allmulticast mode [ 89.749812][ T5839] bridge_slave_1: entered promiscuous mode [ 89.771745][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.779531][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.786739][ T5846] bridge_slave_0: entered allmulticast mode [ 89.793988][ T5846] bridge_slave_0: entered promiscuous mode [ 89.803174][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.810361][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.817984][ T5846] bridge_slave_1: entered allmulticast mode [ 89.825257][ T5846] bridge_slave_1: entered promiscuous mode [ 89.832570][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.840021][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.847285][ T5843] bridge_slave_0: entered allmulticast mode [ 89.854474][ T5843] bridge_slave_0: entered promiscuous mode [ 89.866992][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.931333][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.938942][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.946256][ T5843] bridge_slave_1: entered allmulticast mode [ 89.954153][ T5843] bridge_slave_1: entered promiscuous mode [ 89.978603][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.010831][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.024230][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.120573][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.133297][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.145465][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.158498][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.170905][ T5851] team0: Port device team_slave_0 added [ 90.180243][ T5851] team0: Port device team_slave_1 added [ 90.201510][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.209131][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.216262][ T5848] bridge_slave_0: entered allmulticast mode [ 90.224044][ T5848] bridge_slave_0: entered promiscuous mode [ 90.237923][ T5152] Bluetooth: hci0: command tx timeout [ 90.303900][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.313964][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.317230][ T5152] Bluetooth: hci1: command tx timeout [ 90.322008][ T5848] bridge_slave_1: entered allmulticast mode [ 90.334699][ T5848] bridge_slave_1: entered promiscuous mode [ 90.344216][ T5839] team0: Port device team_slave_0 added [ 90.356177][ T5846] team0: Port device team_slave_0 added [ 90.377587][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.384568][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.411178][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.439128][ T5839] team0: Port device team_slave_1 added [ 90.462329][ T5846] team0: Port device team_slave_1 added [ 90.472148][ T5843] team0: Port device team_slave_0 added [ 90.478002][ T5152] Bluetooth: hci2: command tx timeout [ 90.484659][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.492428][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.519085][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.553940][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.556793][ T5152] Bluetooth: hci4: command tx timeout [ 90.563845][ T5842] Bluetooth: hci3: command tx timeout [ 90.598829][ T5843] team0: Port device team_slave_1 added [ 90.648698][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.661079][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.668418][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.694474][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.721840][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.728888][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.755160][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.782654][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.789760][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.816174][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.842282][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.849379][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.875606][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.894217][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.901540][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.927609][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.950202][ T5851] hsr_slave_0: entered promiscuous mode [ 90.956698][ T5851] hsr_slave_1: entered promiscuous mode [ 90.964144][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.971289][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.997397][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.035655][ T5848] team0: Port device team_slave_0 added [ 91.045327][ T5848] team0: Port device team_slave_1 added [ 91.169411][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.176376][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.203423][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.255946][ T5843] hsr_slave_0: entered promiscuous mode [ 91.262630][ T5843] hsr_slave_1: entered promiscuous mode [ 91.270377][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.278536][ T5843] Cannot create hsr debugfs directory [ 91.315649][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.322854][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.350203][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.366702][ T5839] hsr_slave_0: entered promiscuous mode [ 91.373091][ T5839] hsr_slave_1: entered promiscuous mode [ 91.379465][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.387082][ T5839] Cannot create hsr debugfs directory [ 91.412071][ T5846] hsr_slave_0: entered promiscuous mode [ 91.419053][ T5846] hsr_slave_1: entered promiscuous mode [ 91.425162][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.432807][ T5846] Cannot create hsr debugfs directory [ 91.654585][ T5848] hsr_slave_0: entered promiscuous mode [ 91.661356][ T5848] hsr_slave_1: entered promiscuous mode [ 91.677734][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.685324][ T5848] Cannot create hsr debugfs directory [ 91.839173][ T10] cfg80211: failed to load regulatory.db [ 92.065597][ T5851] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.078896][ T5851] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.107588][ T5851] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.133014][ T5851] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.184865][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.196480][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.218080][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.256126][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.313584][ T5839] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.320750][ T5842] Bluetooth: hci0: command tx timeout [ 92.362604][ T5839] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.382781][ T5839] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.396844][ T5842] Bluetooth: hci1: command tx timeout [ 92.412419][ T5839] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.505295][ T5843] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.517505][ T5843] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.542477][ T5843] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.557078][ T5842] Bluetooth: hci2: command tx timeout [ 92.576303][ T5843] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.636800][ T5842] Bluetooth: hci4: command tx timeout [ 92.641907][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.646863][ T5842] Bluetooth: hci3: command tx timeout [ 92.694119][ T5848] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.704606][ T5848] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.715496][ T5848] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.742163][ T5848] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.759839][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.793076][ T2902] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.800410][ T2902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.842144][ T2902] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.849288][ T2902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.884634][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.931159][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.946528][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.953698][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.997982][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.022695][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.029892][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.066000][ T5851] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.093652][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.155405][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.162614][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.175398][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.182559][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.232656][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.321158][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.350039][ T5846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.383874][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.404115][ T2902] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.411755][ T2902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.442708][ T3025] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.449942][ T3025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.523586][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.564218][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.601567][ T3452] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.608738][ T3452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.654797][ T3452] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.662005][ T3452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.808775][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.855861][ T5851] veth0_vlan: entered promiscuous mode [ 93.872399][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.915157][ T5851] veth1_vlan: entered promiscuous mode [ 94.058547][ T5851] veth0_macvtap: entered promiscuous mode [ 94.087994][ T5846] veth0_vlan: entered promiscuous mode [ 94.110376][ T5851] veth1_macvtap: entered promiscuous mode [ 94.159777][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.174804][ T5846] veth1_vlan: entered promiscuous mode [ 94.184586][ T5839] veth0_vlan: entered promiscuous mode [ 94.224236][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.269837][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.281412][ T5851] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.291667][ T5851] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.300781][ T5851] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.310574][ T5851] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.324357][ T5839] veth1_vlan: entered promiscuous mode [ 94.394836][ T5846] veth0_macvtap: entered promiscuous mode [ 94.401503][ T5842] Bluetooth: hci0: command tx timeout [ 94.422183][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.477000][ T5842] Bluetooth: hci1: command tx timeout [ 94.491823][ T5846] veth1_macvtap: entered promiscuous mode [ 94.522510][ T5839] veth0_macvtap: entered promiscuous mode [ 94.582790][ T5839] veth1_macvtap: entered promiscuous mode [ 94.609054][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.620263][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.632184][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.645728][ T5843] veth0_vlan: entered promiscuous mode [ 94.647359][ T5842] Bluetooth: hci2: command tx timeout [ 94.674834][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.685749][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.699511][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.718474][ T5842] Bluetooth: hci3: command tx timeout [ 94.718763][ T5152] Bluetooth: hci4: command tx timeout [ 94.734902][ T5843] veth1_vlan: entered promiscuous mode [ 94.748337][ T3025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.756286][ T3025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.820928][ T2902] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.825945][ T5846] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.838484][ T2902] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.853061][ T5846] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.861867][ T5846] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.875537][ T5846] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.914526][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.933612][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.943954][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.954673][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.970785][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.003459][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.020867][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.032182][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.043457][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.054836][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.071565][ T5839] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.073016][ T5851] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.082817][ T5839] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.104679][ T5839] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.115563][ T5839] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.174193][ T5843] veth0_macvtap: entered promiscuous mode [ 95.202727][ T5843] veth1_macvtap: entered promiscuous mode [ 95.320505][ T3452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.323178][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.343138][ T3452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.349011][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.362448][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.376715][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.389802][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.400681][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.418688][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.456246][ T5848] veth0_vlan: entered promiscuous mode [ 95.500939][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.512609][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.523027][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.535742][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.545652][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.556245][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.568161][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.593734][ T5843] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.604613][ T5843] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.613496][ T5843] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.623867][ T5843] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.638654][ T3025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.646498][ T3025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.654975][ T5848] veth1_vlan: entered promiscuous mode [ 95.684818][ T3025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.706243][ T3025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.811268][ T1007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.824044][ T1007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.838688][ T5848] veth0_macvtap: entered promiscuous mode [ 95.889869][ T5848] veth1_macvtap: entered promiscuous mode [ 95.911410][ T5924] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 95.984808][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.995572][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.006261][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.017106][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.027034][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.037711][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.049053][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.060005][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.071680][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.094134][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.109220][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.119166][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.129774][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.157392][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.183458][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.205110][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.215741][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.239274][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.261133][ T1007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.272368][ T1007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.294848][ T5930] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.6'. [ 96.328748][ T5848] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.354378][ T5848] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.374213][ T5848] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.384705][ T5848] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.420169][ T5934] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1'. [ 96.593474][ T5152] Bluetooth: hci0: command tx timeout [ 96.596743][ T5842] Bluetooth: hci1: command tx timeout [ 96.606708][ T3025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.616746][ T3025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.688572][ T5938] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 96.717280][ T5842] Bluetooth: hci2: command tx timeout [ 96.799092][ T5842] Bluetooth: hci4: command tx timeout [ 96.799102][ T5152] Bluetooth: hci3: command tx timeout [ 97.137133][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.155205][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.322788][ T3025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.377093][ T3025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.215435][ T6008] netlink: 72 bytes leftover after parsing attributes in process `syz.0.25'. [ 98.297402][ T6012] netlink: 12 bytes leftover after parsing attributes in process `syz.4.26'. [ 98.582292][ T6029] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.612850][ T6029] netlink: 'syz.0.31': attribute type 10 has an invalid length. [ 98.626144][ T6023] netlink: 'syz.1.30': attribute type 21 has an invalid length. [ 98.626169][ T6028] netlink: 'syz.0.31': attribute type 10 has an invalid length. [ 98.668232][ T6023] netlink: 'syz.1.30': attribute type 1 has an invalid length. [ 98.688682][ T6029] syz_tun: entered promiscuous mode [ 98.745125][ T6029] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 99.006353][ T6044] netlink: 'syz.3.35': attribute type 30 has an invalid length. [ 99.068648][ T6047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.36'. [ 99.307074][ T6057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.318064][ T6059] netlink: 'syz.3.39': attribute type 4 has an invalid length. [ 99.371185][ T6059] netlink: 'syz.3.39': attribute type 4 has an invalid length. [ 99.504385][ T6065] netlink: 'syz.1.41': attribute type 39 has an invalid length. [ 99.522180][ T6067] netlink: 256 bytes leftover after parsing attributes in process `syz.2.42'. [ 99.571833][ T6065] veth0_macvtap: left promiscuous mode [ 100.113139][ T6092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.50'. [ 100.482674][ T6109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.973921][ T6133] netlink: 52 bytes leftover after parsing attributes in process `syz.4.62'. [ 100.990842][ T6133] netlink: 52 bytes leftover after parsing attributes in process `syz.4.62'. [ 101.027444][ T6133] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 101.088534][ T6142] x_tables: unsorted underflow at hook 1 [ 101.138769][ T6144] netlink: 28 bytes leftover after parsing attributes in process `syz.1.65'. [ 101.474746][ T6144] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.482293][ T6144] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.656353][ T6144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.672778][ T6144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.743872][ T6144] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.762558][ T6144] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.771916][ T6144] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.784716][ T6144] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.836428][ T6151] IPVS: Error connecting to the multicast addr [ 101.864820][ T6144] syz.1.65 (6144) used greatest stack depth: 19112 bytes left [ 102.039294][ T6166] __nla_validate_parse: 1 callbacks suppressed [ 102.039315][ T6166] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.70'. [ 102.066459][ T6166] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 102.075675][ T6166] openvswitch: netlink: Message has 8454 unknown bytes. [ 102.302289][ T6176] trusted_key: syz.1.73 sent an empty control message without MSG_MORE. [ 102.780959][ T6196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.79'. [ 102.978989][ T6203] Zero length message leads to an empty skb [ 103.207536][ T6219] ieee802154 phy0 wpan0: encryption failed: -22 [ 103.537930][ T6234] netlink: 9 bytes leftover after parsing attributes in process `syz.0.90'. [ 103.606436][ T6243] netlink: 5 bytes leftover after parsing attributes in process `syz.0.90'. [ 103.643438][ T6234] gretap0: entered promiscuous mode [ 103.698261][ T6243] 0ªî{X¹¦: renamed from gretap0 [ 103.738879][ T6243] 0ªî{X¹¦: left promiscuous mode [ 103.765002][ T6243] 0ªî{X¹¦: entered allmulticast mode [ 103.830166][ T6243] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 104.022658][ T6243] syz.0.90 (6243) used greatest stack depth: 18232 bytes left [ 104.520170][ T6285] netlink: 12 bytes leftover after parsing attributes in process `syz.2.102'. [ 104.594584][ T6285] xfrm1: entered promiscuous mode [ 104.694511][ T6294] netlink: 12 bytes leftover after parsing attributes in process `syz.2.102'. [ 104.728531][ T6285] xfrm1: entered allmulticast mode [ 104.825749][ T6301] netlink: 12 bytes leftover after parsing attributes in process `syz.4.107'. [ 104.977353][ T6308] netlink: 28 bytes leftover after parsing attributes in process `syz.2.109'. [ 104.998823][ T6308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.109'. [ 105.211959][ T6309] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.220812][ T6309] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.245238][ T6319] xt_addrtype: ipv6 does not support BROADCAST matching [ 105.432848][ T6309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.446045][ T6309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.532264][ T6309] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.544829][ T6309] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.553777][ T6309] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.565243][ T6309] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.608019][ T6309] xfrm1: left promiscuous mode [ 105.823588][ T6335] netlink: 80 bytes leftover after parsing attributes in process `syz.3.117'. [ 105.893902][ T6340] veth0_virt_wifi: entered promiscuous mode [ 105.919435][ T6340] veth0_virt_wifi: left promiscuous mode [ 106.295478][ T6364] x_tables: duplicate underflow at hook 2 [ 106.609127][ T6376] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 106.658105][ T6376] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.666757][ T6376] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.002164][ T6379] netlink: 'syz.3.131': attribute type 11 has an invalid length. [ 107.023770][ T6396] IPv6: sit1: Disabled Multicast RS [ 107.166104][ T6406] IPVS: Unknown mcast interface: pim6reg1 [ 107.220059][ T6410] __nla_validate_parse: 2 callbacks suppressed [ 107.220078][ T6410] netlink: 12 bytes leftover after parsing attributes in process `syz.0.136'. [ 107.376559][ T6420] netlink: 12 bytes leftover after parsing attributes in process `syz.3.139'. [ 107.431274][ T6421] netlink: 12 bytes leftover after parsing attributes in process `syz.3.139'. [ 107.670316][ T6429] netlink: 'syz.1.142': attribute type 1 has an invalid length. [ 107.717053][ T6429] netlink: 'syz.1.142': attribute type 11 has an invalid length. [ 107.724879][ T6429] netlink: 220 bytes leftover after parsing attributes in process `syz.1.142'. [ 108.363098][ T6466] bond1: entered promiscuous mode [ 108.377612][ T6466] bond1: entered allmulticast mode [ 108.394248][ T6466] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.447912][ T6475] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 108.489654][ T6472] netlink: 'syz.4.156': attribute type 12 has an invalid length. [ 108.516783][ T6472] netlink: 132 bytes leftover after parsing attributes in process `syz.4.156'. [ 108.669169][ T6482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.160'. [ 108.830851][ T6488] netlink: 762 bytes leftover after parsing attributes in process `syz.3.163'. [ 108.878189][ T6486] syz.1.161 uses obsolete (PF_INET,SOCK_PACKET) [ 109.057391][ T6491] Cannot find set identified by id 0 to match [ 109.370266][ T6517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.171'. [ 109.396379][ T6521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.171'. [ 109.597711][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88803429c400: rx timeout, send abort [ 109.607680][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88803429c400: 0x3ff01: (3) A timeout occurred and this is the connection abort to close the session. [ 109.756454][ T6531] netlink: 'syz.4.175': attribute type 14 has an invalid length. [ 109.939518][ T6544] netlink: 72 bytes leftover after parsing attributes in process `syz.0.177'. [ 111.093212][ T6589] netlink: 'syz.3.193': attribute type 1 has an invalid length. [ 111.393049][ T6613] netlink: 'syz.1.198': attribute type 15 has an invalid length. [ 111.417571][ T6609] netlink: 'syz.1.198': attribute type 15 has an invalid length. [ 111.441779][ T6609] netlink: 'syz.1.198': attribute type 15 has an invalid length. [ 111.459011][ T6611] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 111.480496][ T6609] netlink: 'syz.1.198': attribute type 15 has an invalid length. [ 111.568432][ T6609] netlink: 'syz.1.198': attribute type 15 has an invalid length. [ 111.625824][ T6617] Cannot find set identified by id 0 to match [ 111.886195][ T6629] Driver unsupported XDP return value 0 on prog (id 69) dev N/A, expect packet loss! [ 112.091166][ T6647] warning: `syz.3.210' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 112.487149][ T6667] __nla_validate_parse: 51 callbacks suppressed [ 112.487170][ T6667] netlink: 20 bytes leftover after parsing attributes in process `syz.4.216'. [ 112.517443][ T6667] netlink: 20 bytes leftover after parsing attributes in process `syz.4.216'. [ 113.195161][ T6698] x_tables: duplicate underflow at hook 2 [ 113.458455][ T6708] validate_nla: 17 callbacks suppressed [ 113.458476][ T6708] netlink: 'syz.2.230': attribute type 2 has an invalid length. [ 113.800544][ T6700] infiniband syz1: set down [ 113.805349][ T6700] infiniband syz1: added ipvlan1 [ 113.897815][ T6700] RDS/IB: syz1: added [ 113.907268][ T6700] smc: adding ib device syz1 with port count 1 [ 113.914051][ T6700] smc: ib device syz1 port 1 has pnetid [ 114.049354][ T6723] netlink: 4 bytes leftover after parsing attributes in process `syz.4.235'. [ 114.541529][ T6731] netlink: 'syz.3.238': attribute type 24 has an invalid length. [ 114.825180][ T6742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.242'. [ 114.860463][ T6742] ipvlan2: entered allmulticast mode [ 114.869431][ T6742] veth0_vlan: entered allmulticast mode [ 115.030477][ T6747] netlink: 24 bytes leftover after parsing attributes in process `syz.2.245'. [ 115.314819][ T6757] netlink: 292 bytes leftover after parsing attributes in process `syz.0.249'. [ 115.334678][ T6760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.250'. [ 115.363050][ T6761] netlink: 20 bytes leftover after parsing attributes in process `syz.3.251'. [ 115.374448][ T6760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.250'. [ 115.400620][ T6760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.250'. [ 116.121747][ T6798] bridge_slave_0: left allmulticast mode [ 116.156770][ T6798] bridge_slave_0: left promiscuous mode [ 116.162619][ T6798] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.223707][ T6801] netlink: 'syz.3.261': attribute type 1 has an invalid length. [ 116.248746][ T6798] bridge_slave_1: left allmulticast mode [ 116.254456][ T6798] bridge_slave_1: left promiscuous mode [ 116.278133][ T6798] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.295013][ T6798] bond0: (slave bond_slave_0): Releasing backup interface [ 116.327949][ T6798] bond0: (slave bond_slave_1): Releasing backup interface [ 116.374296][ T6798] team0: Failed to send options change via netlink (err -105) [ 116.407330][ T6798] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 116.437499][ T6798] team0: Port device team_slave_0 removed [ 116.461808][ T6798] team0: Failed to send options change via netlink (err -105) [ 116.507179][ T6798] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 116.521070][ T6798] team0: Port device team_slave_1 removed [ 116.528803][ T6798] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.536345][ T6798] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.562628][ T6798] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.572063][ T6798] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.497119][ T6847] tipc: Enabling of bearer rejected, failed to enable media [ 117.524788][ T6847] __nla_validate_parse: 67 callbacks suppressed [ 117.524809][ T6847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.272'. [ 117.563519][ T6847] nbd: must specify a device to reconfigure [ 117.926307][ T6860] netlink: 28 bytes leftover after parsing attributes in process `syz.2.276'. [ 118.492498][ T6871] veth1_to_bond: entered allmulticast mode [ 119.024351][ T6891] netlink: 68 bytes leftover after parsing attributes in process `syz.2.286'. [ 119.033579][ T6887] netlink: 64 bytes leftover after parsing attributes in process `syz.4.284'. [ 119.303028][ T6897] openvswitch: netlink: Missing key (keys=40, expected=100) [ 119.342630][ T6898] netlink: 148 bytes leftover after parsing attributes in process `syz.0.288'. [ 119.375928][ T6897] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 119.411134][ T6902] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 119.625276][ T6911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.292'. [ 119.673068][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.697936][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.749908][ T6914] netlink: 'syz.1.294': attribute type 4 has an invalid length. [ 119.777934][ T6914] netlink: 16 bytes leftover after parsing attributes in process `syz.1.294'. [ 119.963260][ T6927] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 120.643266][ T3452] tipc: Subscription rejected, illegal request [ 120.657468][ T6966] delete_channel: no stack [ 121.279909][ T6996] netlink: 36 bytes leftover after parsing attributes in process `syz.0.318'. [ 121.507775][ T7001] bond3: entered promiscuous mode [ 121.512872][ T7001] bond3: entered allmulticast mode [ 121.537154][ T7001] 8021q: adding VLAN 0 to HW filter on device bond3 [ 121.671144][ T7001] bond3 (unregistering): Released all slaves [ 121.850735][ T7021] netlink: 3 bytes leftover after parsing attributes in process `syz.3.327'. [ 121.860559][ T7021] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.993825][ T7025] netlink: 'syz.3.328': attribute type 58 has an invalid length. [ 122.019870][ T7025] netlink: 20 bytes leftover after parsing attributes in process `syz.3.328'. [ 122.099382][ T7029] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 122.167045][ T7031] netlink: 'syz.1.331': attribute type 2 has an invalid length. [ 122.175730][ T7031] netlink: 'syz.1.331': attribute type 1 has an invalid length. [ 122.190283][ T7031] netlink: 'syz.1.331': attribute type 1 has an invalid length. [ 122.395153][ T7040] tipc: Enabling of bearer rejected, failed to enable media [ 122.604946][ T7051] nbd: must specify a size in bytes for the device [ 122.749171][ T7055] x_tables: duplicate underflow at hook 1 [ 122.782022][ T7055] netdevsim netdevsim4 netdevsim1: Unsupported IPsec algorithm [ 123.141437][ T7076] netlink: 'syz.4.346': attribute type 4 has an invalid length. [ 123.157513][ T7079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.345'. [ 123.192656][ T7082] netlink: 'syz.4.346': attribute type 4 has an invalid length. [ 123.232427][ T7081] netlink: 40 bytes leftover after parsing attributes in process `syz.1.348'. [ 123.248555][ T7081] netlink: 40 bytes leftover after parsing attributes in process `syz.1.348'. [ 123.377750][ T7085] netlink: 12 bytes leftover after parsing attributes in process `syz.0.349'. [ 123.583920][ T7101] netlink: 'syz.1.354': attribute type 2 has an invalid length. [ 123.604961][ T7101] netlink: 'syz.1.354': attribute type 2 has an invalid length. [ 123.684552][ T7104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.797321][ T7107] netlink: 16 bytes leftover after parsing attributes in process `syz.3.356'. [ 123.866474][ T7116] netlink: 36 bytes leftover after parsing attributes in process `syz.0.358'. [ 123.906123][ T7117] netlink: 36 bytes leftover after parsing attributes in process `syz.0.358'. [ 124.220548][ T7127] bond0: (slave syz_tun): Releasing backup interface [ 124.231947][ T7132] xt_hashlimit: size too large, truncated to 1048576 [ 124.325732][ T7139] : renamed from bond0 [ 124.914875][ T30] audit: type=1800 audit(1743955723.740:2): pid=7165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.369" name="0x0000000000000000" dev="tmpfs" ino=385 res=0 errno=0 [ 125.205802][ T7179] netlink: 'syz.3.372': attribute type 1 has an invalid length. [ 125.222127][ T7183] netlink: 'syz.0.374': attribute type 1 has an invalid length. [ 125.237335][ T7177] Cannot find add_set index 1 as target [ 125.265338][ T7177] netlink: 116 bytes leftover after parsing attributes in process `syz.4.371'. [ 125.275963][ T7183] netlink: 15382 bytes leftover after parsing attributes in process `syz.0.374'. [ 125.367175][ T7182] syzkaller1: entered promiscuous mode [ 125.397490][ T7177] netlink: 108 bytes leftover after parsing attributes in process `syz.4.371'. [ 125.420638][ T7182] syzkaller1: entered allmulticast mode [ 125.551455][ T7179] veth3: entered promiscuous mode [ 125.583766][ T7179] bond3: (slave veth3): Enslaving as a backup interface with a down link [ 125.822696][ T7217] netlink: 'syz.3.378': attribute type 39 has an invalid length. [ 125.888807][ T7217] veth0_macvtap: left promiscuous mode [ 125.987820][ T7227] x_tables: duplicate entry at hook 1 [ 126.478642][ T7243] tipc: Started in network mode [ 126.494595][ T7243] tipc: Node identity , cluster identity 4711 [ 126.513404][ T7243] tipc: Failed to set node id, please configure manually [ 126.550506][ T7243] tipc: Enabling of bearer rejected, failed to enable media [ 127.151188][ T7275] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 127.430388][ T7301] netlink: 'syz.0.400': attribute type 11 has an invalid length. [ 127.908054][ T7328] netlink: 'syz.2.407': attribute type 10 has an invalid length. [ 127.946071][ T7328] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.985066][ T7328] bond0: (slave team0): Enslaving as an active interface with an up link [ 128.079136][ T5842] Bluetooth: hci0: command tx timeout [ 128.267206][ T7350] __nla_validate_parse: 2 callbacks suppressed [ 128.267226][ T7350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.412'. [ 128.349283][ T7350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.412'. [ 129.001408][ T30] audit: type=1800 audit(1743955727.850:3): pid=7387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.424" name="memory.events" dev="tmpfs" ino=454 res=0 errno=0 [ 129.092537][ T7397] vxcan1: tx address claim with dlc 0 [ 129.414367][ T7416] netlink: 'syz.2.430': attribute type 10 has an invalid length. [ 129.465704][ T7422] netlink: 28 bytes leftover after parsing attributes in process `syz.2.430'. [ 129.652736][ T7430] syz_tun: entered allmulticast mode [ 129.697188][ T7429] netlink: 'syz.4.432': attribute type 27 has an invalid length. [ 129.744764][ T7424] syz_tun: left allmulticast mode [ 129.973322][ T7445] netlink: 16 bytes leftover after parsing attributes in process `syz.1.438'. [ 129.983913][ T7445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.438'. [ 130.991723][ T7504] netlink: 4 bytes leftover after parsing attributes in process `syz.4.452'. [ 131.119342][ T7513] x_tables: duplicate underflow at hook 1 [ 131.208752][ T7512] tipc: Started in network mode [ 131.223973][ T7512] tipc: Node identity 82e4a679f313, cluster identity 4711 [ 131.246312][ T7512] tipc: Enabled bearer , priority 0 [ 131.322052][ T7521] syzkaller0: entered promiscuous mode [ 131.380564][ T7521] syzkaller0: entered allmulticast mode [ 131.436256][ T7504] tipc: Resetting bearer [ 131.448462][ T7535] netlink: 44 bytes leftover after parsing attributes in process `syz.1.462'. [ 131.458097][ T7536] netlink: 28 bytes leftover after parsing attributes in process `syz.3.463'. [ 131.491491][ T7540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.564528][ T7546] netlink: 24 bytes leftover after parsing attributes in process `syz.0.461'. [ 131.580677][ T7502] tipc: Resetting bearer [ 131.624056][ T7502] tipc: Disabling bearer [ 131.759899][ T7548] netlink: 'syz.1.465': attribute type 5 has an invalid length. [ 131.829141][ T7550] netlink: 'syz.2.467': attribute type 5 has an invalid length. [ 131.853369][ T7552] netlink: 12 bytes leftover after parsing attributes in process `syz.3.466'. [ 132.300800][ T7565] erspan0: entered promiscuous mode [ 132.724062][ T7586] bridge_slave_0: left allmulticast mode [ 132.759355][ T7586] bridge_slave_0: left promiscuous mode [ 132.776906][ T7586] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.806104][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.816955][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.829469][ T7586] bridge_slave_1: left allmulticast mode [ 132.855047][ T7586] bridge_slave_1: left promiscuous mode [ 132.868803][ T7587] Bluetooth: MGMT ver 1.23 [ 132.873506][ T7586] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.894538][ T7586] : (slave bond_slave_0): Releasing backup interface [ 132.941240][ T7586] : (slave bond_slave_1): Releasing backup interface [ 132.982358][ T7586] team0: Port device team_slave_0 removed [ 132.999651][ T7586] team0: Port device team_slave_1 removed [ 133.006053][ T7586] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.018600][ T7586] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.060734][ T7589] team0: Mode "ø?õ)balance" not found [ 133.135285][ T7591] 0ªî{X¹¦: left allmulticast mode [ 133.286375][ T7615] __nla_validate_parse: 10 callbacks suppressed [ 133.286396][ T7615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.484'. [ 133.287946][ T7591] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.295416][ T7616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.484'. [ 133.302161][ T7591] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.373445][ T7587] veth0: entered promiscuous mode [ 133.387692][ T7611] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 133.423872][ T7581] veth0: left promiscuous mode [ 133.747547][ T7638] netlink: 24 bytes leftover after parsing attributes in process `syz.4.490'. [ 133.796903][ T7638] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 133.979297][ T7608] IPVS: starting estimator thread 0... [ 134.126810][ T7655] IPVS: using max 26 ests per chain, 62400 per kthread [ 134.429029][ T7673] ip6t_srh: unknown srh invflags A757 [ 134.508216][ T7696] netlink: 13 bytes leftover after parsing attributes in process `syz.0.498'. [ 134.597167][ T7696] sctp: [Deprecated]: syz.0.498 (pid 7696) Use of struct sctp_assoc_value in delayed_ack socket option. [ 134.597167][ T7696] Use struct sctp_sack_info instead [ 135.725184][ T7769] Cannot find add_set index 0 as target [ 135.780644][ T7771] netlink: 24 bytes leftover after parsing attributes in process `syz.2.516'. [ 136.161940][ T7798] netlink: 40 bytes leftover after parsing attributes in process `syz.3.524'. [ 136.651539][ T7824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.534'. [ 136.866478][ T7833] netlink: 12 bytes leftover after parsing attributes in process `syz.2.537'. [ 136.907292][ T7833] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.947035][ T7833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.996817][ T7833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.023531][ T7833] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.051881][ T7833] geneve2: entered promiscuous mode [ 137.087115][ T7833] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.116442][ T7833] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.146144][ T7833] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.176559][ T7833] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.548597][ T7861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.544'. [ 137.580892][ T7861] netlink: 12 bytes leftover after parsing attributes in process `syz.2.544'. [ 138.143596][ T7885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.191339][ T7893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.229087][ T7893] bond0: (slave vcan1): The slave device specified does not support setting the MAC address [ 138.241888][ T7893] bond0: (slave vcan1): Error -95 calling set_mac_address [ 138.312409][ T7899] pim6reg: entered allmulticast mode [ 138.344974][ T7900] IPVS: Scheduler module ip_vs_sip not found [ 138.364433][ T7899] __nla_validate_parse: 2 callbacks suppressed [ 138.364452][ T7899] netlink: 16 bytes leftover after parsing attributes in process `syz.0.556'. [ 138.638692][ T7917] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 138.797437][ T7929] netlink: 28 bytes leftover after parsing attributes in process `syz.2.564'. [ 139.141107][ T7946] netlink: 'syz.3.572': attribute type 10 has an invalid length. [ 139.179381][ T7946] team0: Device ipvlan1 failed to register rx_handler [ 139.250778][ T7960] netlink: 60 bytes leftover after parsing attributes in process `syz.1.575'. [ 139.277876][ T7946] netlink: 12 bytes leftover after parsing attributes in process `syz.3.572'. [ 139.293776][ T7956] netlink: 60 bytes leftover after parsing attributes in process `syz.1.575'. [ 139.316523][ T7952] xt_hashlimit: max too large, truncated to 1048576 [ 139.872609][ T7989] netlink: 12 bytes leftover after parsing attributes in process `syz.4.585'. [ 139.913868][ T7996] netlink: 28 bytes leftover after parsing attributes in process `syz.3.587'. [ 140.179432][ T8008] netlink: 12 bytes leftover after parsing attributes in process `syz.4.591'. [ 140.423789][ T8016] TCP: TCP_TX_DELAY enabled [ 141.140741][ T8046] netlink: 'syz.1.603': attribute type 4 has an invalid length. [ 141.189985][ T8052] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 141.258154][ T8052] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 141.340111][ T8052] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 141.363690][ T8056] netlink: 24 bytes leftover after parsing attributes in process `syz.3.605'. [ 141.372088][ T8057] netlink: 12 bytes leftover after parsing attributes in process `syz.4.606'. [ 141.458812][ T8052] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 141.477671][ T8052] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 141.522638][ T8060] netlink: 'syz.1.607': attribute type 30 has an invalid length. [ 141.567019][ T8060] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 141.583794][ T8060] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 141.612863][ T8052] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 141.639833][ T8052] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 141.696470][ T8052] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 141.780379][ T8069] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 141.790730][ T8052] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 141.975022][ T8082] bond0: entered promiscuous mode [ 141.997298][ T8082] bond_slave_0: entered promiscuous mode [ 142.003741][ T8082] bond_slave_1: entered promiscuous mode [ 142.017178][ T8082] team0: entered promiscuous mode [ 142.022967][ T8082] team_slave_0: entered promiscuous mode [ 142.055748][ T8082] team_slave_1: entered promiscuous mode [ 142.262399][ T8106] netlink: 'syz.4.619': attribute type 29 has an invalid length. [ 142.699495][ T8126] vcan0: tx drop: invalid da for name 0x0000000000000004 [ 142.745070][ T8132] netlink: 'syz.0.628': attribute type 3 has an invalid length. [ 143.011437][ T8147] x_tables: duplicate underflow at hook 1 [ 143.258390][ T8158] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 143.277400][ T8156] netlink: 'syz.0.637': attribute type 1 has an invalid length. [ 143.290016][ T8158] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 143.515903][ T8156] 8021q: adding VLAN 0 to HW filter on device bond2 [ 143.585715][ T8172] __nla_validate_parse: 9 callbacks suppressed [ 143.585734][ T8172] netlink: 104 bytes leftover after parsing attributes in process `syz.2.642'. [ 143.598139][ T8167] geneve2: entered promiscuous mode [ 143.619976][ T8172] netlink: 12 bytes leftover after parsing attributes in process `syz.2.642'. [ 143.659010][ T8167] geneve2: entered allmulticast mode [ 143.687954][ T8167] bond2: (slave geneve2): making interface the new active one [ 143.712539][ T8167] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 143.966333][ T8183] net_ratelimit: 21 callbacks suppressed [ 143.966353][ T8183] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 144.383408][ T8206] dccp_invalid_packet: P.Data Offset(3) too small [ 144.514313][ T8213] netlink: 12 bytes leftover after parsing attributes in process `syz.0.656'. [ 144.683754][ T8222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.658'. [ 144.716059][ T8222] nbd: illegal input index 5001287 [ 144.828165][ T8227] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 144.873521][ T8230] sit1: entered promiscuous mode [ 144.883189][ T8230] sit1: entered allmulticast mode [ 145.143489][ T8234] vlan2: entered promiscuous mode [ 145.191589][ T8243] netlink: 16 bytes leftover after parsing attributes in process `syz.0.666'. [ 145.470111][ T8252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.670'. [ 145.477206][ T8253] netlink: 24 bytes leftover after parsing attributes in process `syz.1.672'. [ 145.498962][ T8252] netlink: 'syz.3.670': attribute type 8 has an invalid length. [ 145.564149][ T8257] netlink: 16 bytes leftover after parsing attributes in process `syz.0.671'. [ 145.712083][ T8264] netlink: 'syz.3.674': attribute type 1 has an invalid length. [ 145.848784][ T7695] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.877836][ T8267] sctp: [Deprecated]: syz.3.675 (pid 8267) Use of int in max_burst socket option deprecated. [ 145.877836][ T8267] Use struct sctp_assoc_value instead [ 145.925122][ T8266] netlink: zone id is out of range [ 145.945166][ T8266] netlink: zone id is out of range [ 145.961977][ T8266] netlink: zone id is out of range [ 145.963051][ T7695] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.976274][ T8266] netlink: zone id is out of range [ 146.068116][ T8267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.675'. [ 146.080501][ T7695] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.185100][ T7695] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.683463][ T8272] xt_CT: No such helper "pptp" [ 146.917355][ T5152] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 146.927490][ T5152] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 146.940746][ T5152] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 146.956018][ T5152] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 146.970095][ T5152] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 146.970851][ T8285] netlink: 12 bytes leftover after parsing attributes in process `syz.1.680'. [ 147.706130][ T7695] bond0 (unregistering): Released all slaves [ 147.787597][ T7695] bond1 (unregistering): Released all slaves [ 147.802558][ T7695] bond2 (unregistering): Released all slaves [ 147.961509][ T7695] tipc: Left network mode [ 148.117535][ T8309] netem: invalid attributes len -24 [ 148.175511][ T8309] netem: change failed [ 148.810438][ T8340] x_tables: duplicate underflow at hook 1 [ 149.036749][ T5842] Bluetooth: hci3: command tx timeout [ 149.717444][ T8375] __nla_validate_parse: 4 callbacks suppressed [ 149.717465][ T8375] netlink: 48 bytes leftover after parsing attributes in process `syz.0.702'. [ 149.872807][ T7695] hsr_slave_0: left promiscuous mode [ 149.892300][ T7695] hsr_slave_1: left promiscuous mode [ 149.937037][ T7695] veth1_macvtap: left promiscuous mode [ 149.942838][ T7695] veth0_macvtap: left promiscuous mode [ 149.959347][ T7695] veth1_vlan: left promiscuous mode [ 149.964826][ T7695] veth0_vlan: left promiscuous mode [ 150.220567][ T8400] netlink: 12 bytes leftover after parsing attributes in process `syz.0.705'. [ 151.072686][ T8280] chnl_net:caif_netlink_parms(): no params data found [ 151.116694][ T5842] Bluetooth: hci3: command tx timeout [ 151.645220][ T8280] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.664597][ T8280] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.672973][ T8280] bridge_slave_0: entered allmulticast mode [ 151.685564][ T8280] bridge_slave_0: entered promiscuous mode [ 151.715887][ T8443] netlink: 40 bytes leftover after parsing attributes in process `syz.0.714'. [ 151.744998][ T8280] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.767150][ T8280] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.774472][ T8280] bridge_slave_1: entered allmulticast mode [ 151.806277][ T8280] bridge_slave_1: entered promiscuous mode [ 151.887495][ T8449] netlink: 'syz.3.715': attribute type 1 has an invalid length. [ 151.928898][ T8449] netlink: 236 bytes leftover after parsing attributes in process `syz.3.715'. [ 152.015456][ T8280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.099450][ T8280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.391847][ T8280] team0: Port device team_slave_0 added [ 152.423176][ T8280] team0: Port device team_slave_1 added [ 152.711986][ T8490] netlink: 20 bytes leftover after parsing attributes in process `syz.1.722'. [ 152.734597][ T8280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.752159][ T8280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.815244][ T8280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.875449][ T8280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.898658][ T8280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.954230][ T8280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.195569][ T8280] hsr_slave_0: entered promiscuous mode [ 153.204046][ T5842] Bluetooth: hci3: command tx timeout [ 153.221514][ T8280] hsr_slave_1: entered promiscuous mode [ 153.234744][ T8280] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.251101][ T8280] Cannot create hsr debugfs directory [ 153.395839][ T8521] xt_bpf: check failed: parse error [ 154.006229][ T8557] netlink: 4 bytes leftover after parsing attributes in process `syz.0.737'. [ 154.102646][ T8558] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.112647][ T8558] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.121880][ T8558] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.130665][ T8558] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.174257][ T8558] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.183309][ T8558] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.192296][ T8558] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.201225][ T8558] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.302492][ T8567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.739'. [ 154.445251][ T8567] bridge_slave_0 (unregistering): left allmulticast mode [ 154.474180][ T8567] bridge_slave_0 (unregistering): left promiscuous mode [ 154.489077][ T8567] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.542693][ T8576] xt_policy: too many policy elements [ 154.667648][ T8577] netlink: 40 bytes leftover after parsing attributes in process `syz.3.741'. [ 154.696471][ T8583] netlink: 68 bytes leftover after parsing attributes in process `syz.1.742'. [ 154.747028][ T8579] netlink: 16 bytes leftover after parsing attributes in process `syz.1.742'. [ 154.956219][ T8280] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 154.980802][ T8280] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 155.008957][ T8280] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 155.050809][ T8280] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 155.243487][ T8604] tipc: Started in network mode [ 155.276921][ T5842] Bluetooth: hci3: command tx timeout [ 155.277324][ T8604] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 155.333985][ T8604] tipc: Enabling of bearer rejected, failed to enable media [ 155.365685][ T8611] netlink: 20 bytes leftover after parsing attributes in process `syz.0.749'. [ 155.536379][ T8615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.750'. [ 155.574897][ T8280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.771298][ T8627] netlink: 'syz.0.751': attribute type 3 has an invalid length. [ 155.825756][ T8627] netlink: 28 bytes leftover after parsing attributes in process `syz.0.751'. [ 155.842904][ T8280] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.892521][ T8627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.751'. [ 155.943301][ T8640] netlink: 6 bytes leftover after parsing attributes in process `syz.3.755'. [ 155.969324][ T1007] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.976500][ T1007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.997893][ T1007] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.005072][ T1007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.192379][ T8280] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 156.202796][ T8280] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 156.281362][ T30] audit: type=1800 audit(1743955755.130:4): pid=8651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.758" name="blkio.bfq.io_wait_time" dev="tmpfs" ino=823 res=0 errno=0 [ 156.356312][ T8650] netlink: 24 bytes leftover after parsing attributes in process `syz.0.757'. [ 156.688468][ T8670] x_tables: duplicate underflow at hook 2 [ 156.717322][ T8670] unknown channel width for channel at 909000KHz? [ 156.726228][ T8666] netlink: 4 bytes leftover after parsing attributes in process `syz.3.761'. [ 156.734109][ T8670] unknown channel width for channel at 909000KHz? [ 156.772570][ T8670] unknown channel width for channel at 909000KHz? [ 156.861562][ T8280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.232387][ T8704] netlink: 24 bytes leftover after parsing attributes in process `syz.3.767'. [ 157.496251][ T8713] netlink: 24 bytes leftover after parsing attributes in process `syz.1.770'. [ 157.577675][ T8280] veth0_vlan: entered promiscuous mode [ 157.639440][ T8280] veth1_vlan: entered promiscuous mode [ 157.755431][ T8280] veth0_macvtap: entered promiscuous mode [ 157.885996][ T8280] veth1_macvtap: entered promiscuous mode [ 158.014987][ T8280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.066748][ T8280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.077514][ T8743] delete_channel: no stack [ 158.091809][ T8280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.116721][ T8280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.138753][ T8280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.223439][ T8280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.270289][ T8280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.286772][ T8748] netlink: 'syz.2.778': attribute type 12 has an invalid length. [ 158.306688][ T8280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.334960][ T8280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.359391][ T8280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.400346][ T8280] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.442554][ T8280] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.466788][ T8280] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.486132][ T8280] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.521949][ T8759] netlink: 'syz.0.780': attribute type 10 has an invalid length. [ 158.552536][ T8759] team0: Port device geneve0 added [ 158.915651][ T7699] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.964701][ T7699] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.199305][ T1007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.229624][ T1007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.476018][ T8800] bond0: (slave team0): Releasing backup interface [ 159.498704][ T8800] team0: left promiscuous mode [ 159.513692][ T8800] team_slave_0: left promiscuous mode [ 159.562884][ T8800] team_slave_1: left promiscuous mode [ 159.571980][ T8800] bridge_slave_1: left allmulticast mode [ 159.595092][ T8800] bridge_slave_1: left promiscuous mode [ 159.629576][ T8800] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.689719][ T8800] bond0: (slave bond_slave_0): Releasing backup interface [ 159.703635][ T8800] bond_slave_0: left promiscuous mode [ 159.713676][ T8800] bond0: (slave bond_slave_1): Releasing backup interface [ 159.728368][ T8800] bond_slave_1: left promiscuous mode [ 159.752474][ T8800] team0: Port device team_slave_0 removed [ 159.767428][ T8800] team0: Port device team_slave_1 removed [ 159.773994][ T8800] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.787081][ T8800] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.194332][ T8830] netdevsim netdevsim0 netdevsim1: Unsupported IPsec algorithm [ 160.685137][ T8847] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 160.712167][ T8851] __nla_validate_parse: 3 callbacks suppressed [ 160.712187][ T8851] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.801'. [ 160.730172][ T8851] netlink: zone id is out of range [ 160.736300][ T8854] netlink: 28 bytes leftover after parsing attributes in process `syz.1.802'. [ 160.742951][ T8851] netlink: zone id is out of range [ 160.776007][ T8854] netlink: 'syz.1.802': attribute type 7 has an invalid length. [ 160.783499][ T8851] netlink: zone id is out of range [ 160.789133][ T8854] netlink: 'syz.1.802': attribute type 8 has an invalid length. [ 160.811647][ T8851] netlink: get zone limit has 8 unknown bytes [ 160.820528][ T8854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.802'. [ 161.109475][ T8869] netlink: 164 bytes leftover after parsing attributes in process `syz.1.805'. [ 161.300471][ T8874] netlink: 28 bytes leftover after parsing attributes in process `syz.3.806'. [ 161.541555][ T5152] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 161.557600][ T5152] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 161.571387][ T5152] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 161.598902][ T5152] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 161.613843][ T5152] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 161.697439][ T8896] netlink: 148 bytes leftover after parsing attributes in process `syz.1.811'. [ 161.798111][ T8899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.839418][ T8899] team0: Port device bond0 added [ 162.293805][ T8926] xt_hashlimit: size too large, truncated to 1048576 [ 162.368821][ T8930] : renamed from bond0 (while UP) [ 162.911052][ T8943] syzkaller0: entered promiscuous mode [ 162.926299][ T8943] syzkaller0: entered allmulticast mode [ 163.058196][ T8953] netlink: 32 bytes leftover after parsing attributes in process `syz.2.825'. [ 163.115043][ T8956] sctp: [Deprecated]: syz.3.827 (pid 8956) Use of int in max_burst socket option deprecated. [ 163.115043][ T8956] Use struct sctp_assoc_value instead [ 163.183694][ T8962] sctp: [Deprecated]: syz.3.827 (pid 8962) Use of int in max_burst socket option deprecated. [ 163.183694][ T8962] Use struct sctp_assoc_value instead [ 163.680588][ T5152] Bluetooth: hci3: command tx timeout [ 164.574179][ T8977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.830'. [ 164.644001][ T8977] netlink: 12 bytes leftover after parsing attributes in process `syz.0.830'. [ 164.644540][ T8882] chnl_net:caif_netlink_parms(): no params data found [ 164.673226][ T8978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.831'. [ 165.005408][ T9000] xt_policy: output policy not valid in PREROUTING and INPUT [ 165.307229][ T8882] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.335352][ T8882] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.353568][ T8882] bridge_slave_0: entered allmulticast mode [ 165.372634][ T8882] bridge_slave_0: entered promiscuous mode [ 165.396439][ T8882] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.421705][ T8882] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.437610][ T8882] bridge_slave_1: entered allmulticast mode [ 165.482636][ T8882] bridge_slave_1: entered promiscuous mode [ 165.584595][ T9027] bridge_slave_0: entered promiscuous mode [ 165.608141][ T9027] bridge_slave_0: entered allmulticast mode [ 165.640871][ T8882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.676383][ T8882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.764460][ T5152] Bluetooth: hci3: command tx timeout [ 165.841594][ T9040] netlink: 'syz.0.846': attribute type 4 has an invalid length. [ 165.898662][ T8882] team0: Port device team_slave_0 added [ 165.915712][ T9046] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 165.934255][ T8882] team0: Port device team_slave_1 added [ 165.957467][ T9046] __nla_validate_parse: 6 callbacks suppressed [ 165.957485][ T9046] netlink: 256 bytes leftover after parsing attributes in process `syz.1.847'. [ 166.048457][ T9050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.849'. [ 166.066078][ T8882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.081790][ T8882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.108559][ T8882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.124919][ T8882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.147486][ T8882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.180441][ T8882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.365365][ T8882] hsr_slave_0: entered promiscuous mode [ 166.385346][ T8882] hsr_slave_1: entered promiscuous mode [ 166.400025][ T8882] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.408156][ T9061] netlink: 808 bytes leftover after parsing attributes in process `syz.3.853'. [ 166.411342][ T8882] Cannot create hsr debugfs directory [ 166.614467][ T9065] [ 166.616851][ T9065] ====================================================== [ 166.623896][ T9065] WARNING: possible circular locking dependency detected [ 166.630942][ T9065] 6.14.0-syzkaller-13305-g61f96e684edd #0 Not tainted [ 166.637708][ T9065] ------------------------------------------------------ [ 166.644722][ T9065] syz.3.858/9065 is trying to acquire lock: [ 166.650610][ T9065] ffff88805e93ad30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: xsk_bind+0x2fd/0xfb0 [ 166.660050][ T9065] [ 166.660050][ T9065] but task is already holding lock: [ 166.667417][ T9065] ffff88805f00a6f0 (&xs->mutex){+.+.}-{4:4}, at: xsk_bind+0x166/0xfb0 [ 166.675621][ T9065] [ 166.675621][ T9065] which lock already depends on the new lock. [ 166.675621][ T9065] [ 166.686020][ T9065] [ 166.686020][ T9065] the existing dependency chain (in reverse order) is: [ 166.695038][ T9065] [ 166.695038][ T9065] -> #3 (&xs->mutex){+.+.}-{4:4}: [ 166.702260][ T9065] lock_acquire+0x116/0x2f0 [ 166.707293][ T9065] __mutex_lock+0x1a5/0x10c0 [ 166.712410][ T9065] xsk_notifier+0xcf/0x230 [ 166.717353][ T9065] notifier_call_chain+0x1a5/0x3f0 [ 166.722993][ T9065] unregister_netdevice_many_notify+0x1572/0x2510 [ 166.729933][ T9065] rtnl_dellink+0x53c/0x8c0 [ 166.734960][ T9065] rtnetlink_rcv_msg+0x80f/0xd70 [ 166.740423][ T9065] netlink_rcv_skb+0x208/0x480 [ 166.745725][ T9065] netlink_unicast+0x7f8/0x9a0 [ 166.751039][ T9065] netlink_sendmsg+0x8c3/0xcd0 [ 166.756362][ T9065] __sock_sendmsg+0x221/0x270 [ 166.761575][ T9065] sock_write_iter+0x2d9/0x3f0 [ 166.766863][ T9065] vfs_write+0x70f/0xd10 [ 166.771630][ T9065] ksys_write+0x19d/0x2d0 [ 166.776484][ T9065] do_syscall_64+0xf3/0x230 [ 166.781517][ T9065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.787948][ T9065] [ 166.787948][ T9065] -> #2 (&net->xdp.lock){+.+.}-{4:4}: [ 166.795538][ T9065] lock_acquire+0x116/0x2f0 [ 166.800573][ T9065] __mutex_lock+0x1a5/0x10c0 [ 166.805707][ T9065] xsk_notifier+0x8b/0x230 [ 166.810661][ T9065] notifier_call_chain+0x1a5/0x3f0 [ 166.816341][ T9065] unregister_netdevice_many_notify+0x1572/0x2510 [ 166.823282][ T9065] unregister_netdevice_queue+0x383/0x400 [ 166.829532][ T9065] _cfg80211_unregister_wdev+0x163/0x590 [ 166.835697][ T9065] ieee80211_if_remove+0x25d/0x320 [ 166.841329][ T9065] ieee80211_del_iface+0x19/0x30 [ 166.846799][ T9065] cfg80211_remove_virtual_intf+0x23f/0x410 [ 166.853222][ T9065] genl_rcv_msg+0xb38/0xf00 [ 166.858254][ T9065] netlink_rcv_skb+0x208/0x480 [ 166.863604][ T9065] genl_rcv+0x28/0x40 [ 166.868113][ T9065] netlink_unicast+0x7f8/0x9a0 [ 166.873414][ T9065] netlink_sendmsg+0x8c3/0xcd0 [ 166.878709][ T9065] __sock_sendmsg+0x221/0x270 [ 166.883912][ T9065] ____sys_sendmsg+0x523/0x860 [ 166.889199][ T9065] __sys_sendmsg+0x271/0x360 [ 166.894318][ T9065] do_syscall_64+0xf3/0x230 [ 166.899349][ T9065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.905772][ T9065] [ 166.905772][ T9065] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 166.913542][ T9065] lock_acquire+0x116/0x2f0 [ 166.918575][ T9065] __mutex_lock+0x1a5/0x10c0 [ 166.923706][ T9065] cfg80211_netdev_notifier_call+0x1b3/0x1430 [ 166.930314][ T9065] notifier_call_chain+0x1a5/0x3f0 [ 166.935959][ T9065] __dev_close_many+0x15d/0x760 [ 166.941352][ T9065] dev_close_many+0x250/0x4c0 [ 166.946577][ T9065] unregister_netdevice_many_notify+0x628/0x2510 [ 166.953447][ T9065] default_device_exit_batch+0x7ff/0x880 [ 166.959615][ T9065] cleanup_net+0x8af/0xd60 [ 166.964565][ T9065] process_scheduled_works+0xac3/0x18e0 [ 166.970639][ T9065] worker_thread+0x870/0xd50 [ 166.975760][ T9065] kthread+0x7b7/0x940 [ 166.980361][ T9065] ret_from_fork+0x4b/0x80 [ 166.985303][ T9065] ret_from_fork_asm+0x1a/0x30 [ 166.990595][ T9065] [ 166.990595][ T9065] -> #0 (&dev_instance_lock_key#3){+.+.}-{4:4}: [ 166.999040][ T9065] validate_chain+0xa69/0x24e0 [ 167.004332][ T9065] __lock_acquire+0xad5/0xd80 [ 167.009533][ T9065] lock_acquire+0x116/0x2f0 [ 167.014564][ T9065] __mutex_lock+0x1a5/0x10c0 [ 167.019678][ T9065] xsk_bind+0x2fd/0xfb0 [ 167.024352][ T9065] __sys_bind+0x1de/0x290 [ 167.029207][ T9065] __x64_sys_bind+0x7a/0x90 [ 167.034235][ T9065] do_syscall_64+0xf3/0x230 [ 167.039262][ T9065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.045766][ T9065] [ 167.045766][ T9065] other info that might help us debug this: [ 167.045766][ T9065] [ 167.055990][ T9065] Chain exists of: [ 167.055990][ T9065] &dev_instance_lock_key#3 --> &net->xdp.lock --> &xs->mutex [ 167.055990][ T9065] [ 167.069310][ T9065] Possible unsafe locking scenario: [ 167.069310][ T9065] [ 167.076759][ T9065] CPU0 CPU1 [ 167.082117][ T9065] ---- ---- [ 167.087474][ T9065] lock(&xs->mutex); [ 167.091461][ T9065] lock(&net->xdp.lock); [ 167.098313][ T9065] lock(&xs->mutex); [ 167.104818][ T9065] lock(&dev_instance_lock_key#3); [ 167.110035][ T9065] [ 167.110035][ T9065] *** DEADLOCK *** [ 167.110035][ T9065] [ 167.118178][ T9065] 2 locks held by syz.3.858/9065: [ 167.123371][ T9065] #0: ffffffff900fc9c8 (rtnl_mutex){+.+.}-{4:4}, at: xsk_bind+0x153/0xfb0 [ 167.131999][ T9065] #1: ffff88805f00a6f0 (&xs->mutex){+.+.}-{4:4}, at: xsk_bind+0x166/0xfb0 [ 167.140629][ T9065] [ 167.140629][ T9065] stack backtrace: [ 167.146556][ T9065] CPU: 0 UID: 0 PID: 9065 Comm: syz.3.858 Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) [ 167.146583][ T9065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 167.146600][ T9065] Call Trace: [ 167.146608][ T9065] [ 167.146616][ T9065] dump_stack_lvl+0x241/0x360 [ 167.146648][ T9065] ? __pfx_dump_stack_lvl+0x10/0x10 [ 167.146672][ T9065] ? __pfx__printk+0x10/0x10 [ 167.146696][ T9065] ? print_lock+0x171/0x1a0 [ 167.146718][ T9065] print_circular_bug+0x2e1/0x300 [ 167.146742][ T9065] check_noncircular+0x142/0x160 [ 167.146767][ T9065] validate_chain+0xa69/0x24e0 [ 167.146792][ T9065] ? __lock_acquire+0xad5/0xd80 [ 167.146808][ T9065] ? look_up_lock_class+0x7b/0x170 [ 167.146832][ T9065] __lock_acquire+0xad5/0xd80 [ 167.146853][ T9065] lock_acquire+0x116/0x2f0 [ 167.146869][ T9065] ? xsk_bind+0x2fd/0xfb0 [ 167.146888][ T9065] __mutex_lock+0x1a5/0x10c0 [ 167.146907][ T9065] ? xsk_bind+0x2fd/0xfb0 [ 167.146921][ T9065] ? ref_tracker_alloc+0x316/0x4c0 [ 167.146941][ T9065] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 167.146966][ T9065] ? xsk_bind+0x2fd/0xfb0 [ 167.146980][ T9065] ? __pfx___mutex_lock+0x10/0x10 [ 167.147004][ T9065] ? dev_get_by_index+0x23/0x2d0 [ 167.147025][ T9065] ? dev_get_by_index+0x23/0x2d0 [ 167.147046][ T9065] xsk_bind+0x2fd/0xfb0 [ 167.147065][ T9065] __sys_bind+0x1de/0x290 [ 167.147090][ T9065] ? __pfx___sys_bind+0x10/0x10 [ 167.147123][ T9065] __x64_sys_bind+0x7a/0x90 [ 167.147147][ T9065] do_syscall_64+0xf3/0x230 [ 167.147167][ T9065] ? clear_bhb_loop+0x45/0xa0 [ 167.147186][ T9065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.147204][ T9065] RIP: 0033:0x7fb5aaf8d169 [ 167.147223][ T9065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.147238][ T9065] RSP: 002b:00007fb5abda9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 167.147255][ T9065] RAX: ffffffffffffffda RBX: 00007fb5ab1a5fa0 RCX: 00007fb5aaf8d169 [ 167.147267][ T9065] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000004 [ 167.147278][ T9065] RBP: 00007fb5ab00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 167.147288][ T9065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 167.147298][ T9065] R13: 0000000000000000 R14: 00007fb5ab1a5fa0 R15: 00007ffeea2dfb08 [ 167.147317][ T9065]