last executing test programs: 3m15.679950962s ago: executing program 3 (id=1784): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000240)={@local, @link_local, @val={@void, {0x4305, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0xfffc, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x6}}}}}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)={0x130, 0x3e, 0x1, 0x7fffc, 0x4, {0x1}, [@typed={0x4}, @nested={0x10c, 0x1, 0x0, 0x1, [@nested={0x108, 0x10, 0x0, 0x1, [@nested={0x104, 0x8, 0x0, 0x1, [@generic="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"]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x130}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 3m15.612135486s ago: executing program 3 (id=1786): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x317, 0x65}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "a3481a19de8b5623f4315958bb"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x90}, 0x4800) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000180)='wlan0\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)={[{0x2d, 'cpuset'}, {0x2b, 'io'}, {0x2d, 'net_cls'}, {0x6, 'perf_event'}, {0x2d, 'perf_event'}]}, 0x2d) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000280)=0x5, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e24, @rand_addr=0x64010101}, @in6={0xa, 0x4e23, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffff}], 0x2c) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}], 0x2c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000340)='ip6gretap0\x00', 0x10) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f00000003c0)=0x7ff) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000400)={0x0, 0x1000, "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"}, &(0x7f0000001440)=0x1008) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000001480)={r3, 0x5}, 0x8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000001540)={r3, 0x64, &(0x7f00000014c0)=[@in6={0xa, 0x4e21, 0x2, @rand_addr=' \x01\x00', 0x2f566fc0}, @in6={0xa, 0x4e24, 0xfffffff7, @mcast1, 0xbb8b}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0x8001, @empty, 0x4}]}, &(0x7f0000001580)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f00000015c0)={r5, 0x5}, &(0x7f0000001600)=0x8) bind$inet6(r2, &(0x7f0000001640)={0xa, 0x4e22, 0x30b, @local, 0x2}, 0x1c) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x8978352581ed128e, &(0x7f0000001680)=0x1ff, 0x4) getpeername$packet(r0, &(0x7f00000016c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001700)=0x14) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000001740)={@mcast1, r6}, 0x14) ioctl(r0, 0x5, &(0x7f0000001780)="e72b99628851017f149a1fc3ab27aab540af0a248f0e3be6b8") sendmmsg(r4, &(0x7f0000001900)=[{{&(0x7f00000017c0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000001840)="64f367b407fe80f8879b76b89da63a7aeb2304e5a1d0240cc7a2a93e110862d3e940738527259c2acb222844581c415a45cdd184eae8dbcca0c3ef465b1c54cacc7d45858b4b22a7f84237e2a5a9142f2f3ff09c9335885c836a2a93acbcb45f57", 0x61}], 0x1}}], 0x1, 0x10) sendto$inet6(r0, &(0x7f0000001940)="044467654a663b61443a44edac80e6bba8d40b0fca27ac0e1fc871e97ef3a6c5b2f5442d211cd40f312ca02ce8600cf073682face7facaf819b9f991a24cf0abd23e2a6da6e26c099931cf4a37620185918941fe78c5a82aa56737f16db8a9da29f7d22f30747b8ab67181babd8469b29e207b074514567b2281788bef3eae7f40b99118ee1dffead540d2a686", 0x8d, 0x4800, &(0x7f0000001a00)={0xa, 0x4e23, 0x436b0999, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xf}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000001a40)=@fragment={0x88, 0x0, 0x2, 0x0, 0x0, 0x8, 0x66}, 0x8) r7 = socket$inet6(0xa, 0x3, 0xff) bind$inet6(r7, &(0x7f0000001a80)={0xa, 0x4e24, 0xb, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x91fe}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) write$tun(r2, &(0x7f0000001ac0)={@val={0x0, 0x884c}, @void, @eth={@random="1a208ff2449f", @local, @val={@val={0x88a8, 0x7}, {0x8100, 0x7, 0x1, 0x4}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x8, @empty, @remote, @remote, @dev={0xfe, 0x80, '\x00', 0x33}}}}}}, 0x4e) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001b80)=@o_path={&(0x7f0000001b40)='./file0\x00', r4, 0x4000, r4}, 0x18) 3m15.456010743s ago: executing program 3 (id=1789): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0xe, &(0x7f0000000140)="c6dc9dc3b6499324986267189cd6564202a5f0309d798b45d96a0d0641da0ca53195bf910b201521e9cbe6fb4e4c0b102d9972a9d1aa29762a62a880908143433acc7ae97b095ee8053943bef469d2aa2891646c0f287b28f710243b136c34a98e6daaa521dcbaa87f2c98ad04959afe45cb95f86ff4234f12d9c3bc995386b8f3d84c08875da3a09a3a207994c1c6991145246211cdcb58f5588cc66deb7bd122db4e", 0xa3) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x6}) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) listen(r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x4, 0x24}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3m15.383526543s ago: executing program 3 (id=1790): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="8f", 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x6, 0x4, 0xff, 0x1828, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="12000000430001"], 0x1c}}, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x8, &(0x7f00000001c0), &(0x7f0000006680)=0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002d80)={0x6, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000003e0e0000000000000100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b5030000000000008500000083000000bf0900000000000055090100000000fcffffff95000000000000005599ffff0400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fd7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300008dd9000085000000060000002d12000001000000bf91000000000000b7020000020000008500000001000000b7000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0xfffffffc, 0x7, 0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000, @void, @value}, 0x94) r5 = socket(0x2d, 0x2, 0x0) recvmmsg(r5, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x41, 0x0) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000180)={0x0, @default, @rose={'rose', 0x0}, 0x6, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}) 3m14.609271745s ago: executing program 3 (id=1797): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r3, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000140)=0xc) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x20, 0x1f, 0x1, 0x70bd28, 0x10000000, {0xa}, [@typed={0x8, 0x3f, 0x0, 0x0, @u32=0x8}, @typed={0x4, 0xaf}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000}, 0x4890) 3m14.605470604s ago: executing program 3 (id=1799): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r0}, 0x18) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @ldst={0x3, 0x0, 0x6}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x17, 0x10, 0x0, 0x0, 0x61e5cc96, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x22) setsockopt$inet_tcp_int(r1, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(r1, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)=ANY=[@ANYBLOB="10010000220001000000000000000000020100800c000100000000000000000014000b"], 0x110}], 0x1}, 0x80) recvmmsg(r1, &(0x7f0000000900)=[{{&(0x7f0000000500)=@x25, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/31, 0xdacca170ed1d3557}, {&(0x7f0000000740)=""/184}, {&(0x7f0000000580)=""/128}, {&(0x7f0000000800)=""/123}], 0x0, &(0x7f0000000880)=""/108}}], 0x542, 0x0, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xfff2}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}, {{0x1c, 0x1, {0xa, 0x0, 0xd}}, {0x4}}]}]}, 0x68}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x1010, r4, 0xd9248000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00001700000000001c0037"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r7}, 0x18) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2m59.469118516s ago: executing program 32 (id=1799): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r0}, 0x18) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @ldst={0x3, 0x0, 0x6}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x17, 0x10, 0x0, 0x0, 0x61e5cc96, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x22) setsockopt$inet_tcp_int(r1, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(r1, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)=ANY=[@ANYBLOB="10010000220001000000000000000000020100800c000100000000000000000014000b"], 0x110}], 0x1}, 0x80) recvmmsg(r1, &(0x7f0000000900)=[{{&(0x7f0000000500)=@x25, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/31, 0xdacca170ed1d3557}, {&(0x7f0000000740)=""/184}, {&(0x7f0000000580)=""/128}, {&(0x7f0000000800)=""/123}], 0x0, &(0x7f0000000880)=""/108}}], 0x542, 0x0, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xfff2}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}, {{0x1c, 0x1, {0xa, 0x0, 0xd}}, {0x4}}]}]}, 0x68}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x1010, r4, 0xd9248000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00001700000000001c0037"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r7}, 0x18) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2m33.393472601s ago: executing program 4 (id=2169): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd8, r1, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe7}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x81}, 0x20004880) r3 = socket$isdn(0x22, 0x3, 0x3) ioctl$sock_netdev_private(r3, 0x89fb, &(0x7f0000000240)="009c1ea10ea267630803606a9aae78fa4bcd2c0b6b418cd6d489") getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000280)={0x0, 0x9}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000003c0)={r4, 0x8c, &(0x7f0000000300)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e21, @private=0xa010100}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e24, 0x3, @empty, 0x1}]}, &(0x7f0000000400)=0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r5, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x68}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040042}, 0x1000) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f00000005c0)='cgroup.procs\x00', 0x2, 0x0) (async) r8 = openat$cgroup_type(r6, &(0x7f0000000600), 0x2, 0x0) write$cgroup_type(r8, &(0x7f0000000640), 0x9) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000680)=0xf, 0x4) (async) ioctl$sock_netdev_private(r0, 0x89f5, &(0x7f00000006c0)="3b77c6930b9c17ee9850432f77a7c12aa4a46ada48131e6884efdaa62824215d8b7f9d4183f6cb48717062543232d19388") (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b80)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}, @NFT_MSG_DELTABLE={0x164, 0x2, 0xa, 0x104, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_USERDATA={0xc3, 0x6, "1f69d2be3d8a266b47dbf95764c6b28dafb11658e80b492ffa919766778a816fa4ba2d4c0e745e584a202574be95d93c03697d03112892ebef6c37b244a9c4ba7fc5d7dbdd6d3e13d86f26082d77dedcbfd86ada7b7fbd5b9ba8c35c0f66dc9e0a659f1c235fc4f3680972980251e0582331eb43009a6a4eefb4227aca752706172f81858fc729838fe4ce0af8cc41c35d1b0f86a48e20a8bef6206b19d12793cec14aaccd64aaad5377bbdc7a4710c2c6c0e3059d634d25fff9e8a761797e"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x5d, 0x6, "c72e633747d55d303681b5deb45f1ee5cd6ac5743af2b1785cd9a43837a9fa825760d05312518fc8f56ce9643eb247fa2dac5c3017320a7b1bf88e49c4407da7917493e08b30c5ece908d5443a5857ddb289b112a9d8f63202"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x1f8, 0xe, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1d4, 0x3, 0x0, 0x1, [{0x108, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xec, 0x6, 0x1, 0x0, "d52540ff4b1be26613ab1f72275f03ffcace20482e019576852d1f11b6901eb05985839c9c00430073574c614dcb9dadbba0f81208ff2d9b78ee355dc2656417a51bad096291e71eb89e057f40de4a627ead81e5c8c2fdf7fc5acc306fea3dee9138ea91f1258f4ffc8a2c900fa0397352787b9bfc18cf1fc53940fad0fc0661d75fb9d8df9cb28f75a804ca402cf584de58404bc428b63ae5a5f5aadd3bf9254f7fc5a5d6ce0f187bd26023e587e1046d1f96baa69d8361d5337505c138fb153812079a039f42c123d5243072956025145b90f001e9f6c935576d16987ee7c0d88794b4e268936a"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0xb8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xa0, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x34, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x8000000000000000}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x5}]}}}, {0x30, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8000000000000000}]}}}, {0x1c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2e}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x201, 0x0, 0x0, {0x6ab482bfd7d07271, 0x0, 0x6}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x24, 0x3, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x420}, 0x1, 0x0, 0x0, 0x11}, 0x40004) (async, rerun: 64) ioctl$FITHAW(r7, 0xc0045878) (async, rerun: 64) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', r2, 0xffffffffffffffff, 0x3, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000c80), &(0x7f0000000cc0)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e80)={0x6, 0xa, &(0x7f0000000d40)=@raw=[@map_fd={0x18, 0x8, 0x1, 0x0, r6}, @map_fd={0x18, 0x7, 0x1, 0x0, r9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}], &(0x7f0000000dc0)='syzkaller\x00', 0xd2, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, 0x25, r6, 0x8, &(0x7f0000000e00)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000e40)=[{0x1, 0x3, 0x2, 0x3}, {0x2, 0x2, 0xd, 0x7}, {0x3, 0x4, 0x3, 0x1}, {0x4, 0x3, 0x7, 0x6}], 0x10, 0x5b, @void, @value}, 0x94) (async, rerun: 32) r11 = accept(r3, &(0x7f0000000f40)=@nl=@unspec, &(0x7f0000000fc0)=0x80) (rerun: 32) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r11, 0x84, 0x1, &(0x7f0000001000)={r4, 0x4, 0x7, 0x8, 0x731de922}, 0x14) pipe(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), r12) sendmsg$NL80211_CMD_SET_WDS_PEER(r11, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x4680310}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x44, r14, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x4c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @random="8e0717c1116b"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20000081) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r11, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x4c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6e9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000000}]}, 0x4c}}, 0xe4) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0x14, &(0x7f0000001340), &(0x7f0000001380)=0x4) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f00000013c0), &(0x7f0000001400)=0xc) 2m33.243120738s ago: executing program 4 (id=2172): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x36, 0x5, [0x2c, 0x10, 0x7, 0xfffc, 0x2]}, &(0x7f0000000040)=0x12) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000140)={r2, 0x1000}, 0x8) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d75a3d0dd86110100000000000000000000000000000000ff0200000000000000000000b6bc000000014e20"], 0x42) recvfrom(r0, &(0x7f0000000200)=""/206, 0xce, 0x2002, &(0x7f0000000300)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x4, "f9773b728ac6a23e0b48fadb7beaa5f2385091404dcec30473495c30298fb79765829b618165828bbf55a1ef227daf94ff06dcd6214c20e92a701362b6292b", 0xf}, 0x80) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x60}}, 0x40014) 2m32.876330505s ago: executing program 4 (id=2178): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=@getsa={0xcc, 0x12, 0x200, 0x70bd28, 0x25dfdbfd, {@in=@multicast1, 0x4d5, 0xa, 0x2b}, [@address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1, 0xa, 0xbd, 0x7}}, @encap={0x1c, 0x4, {0x2, 0x4e22, 0x4e20, @in6=@private1}}, @user_kmaddress={0x2c, 0x13, {@in=@private=0xa010100, @in=@private=0xa010102, 0x0, 0xa}}, @replay_esn_val={0x34, 0x17, {0x6, 0x70bd2c, 0x70bd27, 0x70bd29, 0x70bd2c, 0x94, [0x9, 0xffffffff, 0x5, 0x7235, 0x3, 0x1]}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001800090400150000000000002d"], 0x1c}}, 0x0) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r3], 0x448}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmmsg$inet(r3, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000), 0x4) r4 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x1c, 0x800) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e24, 0x4565e4f8, @mcast1}, 0x1c) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r5, 0x29, 0xb, 0x0, 0x0) connect$x25(r3, &(0x7f0000000240), 0x12) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x1, @empty, 0xc9}, 0x1c) 2m32.636001336s ago: executing program 4 (id=2181): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x14, 0x17, 0xa, 0x401}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002e80), r1) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002ec0)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000840) 2m32.53629814s ago: executing program 4 (id=2183): r0 = socket$inet_smc(0x2b, 0x1, 0x0) close(r0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x4018, 0x3, 0x218, 0xd0, 0x720d, 0x148, 0x0, 0x148, 0x180, 0x240, 0x240, 0x180, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @local, 0xffffffff, 0xff000000, 'wlan0\x00', 'veth1_macvtap\x00', {}, {}, 0x88, 0x3, 0x8}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xfffb, [0x6, 0xb2cc575b459b5b33, 0x4, 0x2], 0x0, 0x4}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x0, 0x0, 0xb507, 0x0, 0x0, 0x4]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) 2m32.311229986s ago: executing program 4 (id=2187): syz_emit_ethernet(0x32e, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86de6c6565c402f81100fc010000000000000000000000000001ff010000000000000000000000000001330a010900000000fc00000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000aafe8000000000000000000000000000bb000000000000000000000000000000018704000000000000010700000000000000c910fe8000000000000000000000000000bb01030000000301090000000000731b000000000000c91020010000000000000000000000000002075c3b476f94c3fd07822d1cfe5248de563f71a30d8ba84779162d7c0f847b20747369ae40088cc7c79ce2f740ed6b1397a3c5edbff31437f24cf9df046172f49db1a3889b8859dde33486cbd387633180be978d5e783eda7c49582e42d30740df84eb0b0e9d0900090000000000000003000000000000000d00000000000000e503000000000000008000000000000007000000000000000000806c00000000c910fc000000000000000000000000000000000100c910fe8000000000000000000000000000bb000000000000000115000000000000c2040000ffff000100010400000000c204000037c90693d0259326cee240af0721434094a2f9c249dbc09a6e924c7b73caf848e460d7c3755c8e3d50e934c2dcc0fc9a8023207bac645e1bfecc336855e530bb4d8ff2fda56eca6036f628930211bcf34cc70213ec7404ac8fd88718b21c64b8424349970aede8532b99c9ef7fe5bc11ceb2d63559e85dfccbe1b5005ee280c5027027b5353b49befedaf34482a18c98446cb98ef74a0e040106000000870b000000000000000100075000000002120200000300000000000000ffffffffffffffff52000000000000000100010000000000010000000000000000000000000000008000000000000000060000000000000007000000000000000401403a0500000000000005020005071800000000040a0300060000000000000007000000000000000401000502000804010700000000000000003a0000000000000001020000040107002901000000000000040100c2047fffffff000000000000004e244e2200109078c24b000100000000"], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r3, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80001, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d75a3d0dd86110100000000000000000000000000000000ff0200000000000000000000b6bc000000014e20"], 0x42) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt(r6, 0x1, 0x3, &(0x7f0000000340)=""/66, &(0x7f0000000080)=0x42) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000020c0)}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r8, 0x84, 0xc, 0x0, &(0x7f0000000080)) r9 = syz_genetlink_get_family_id$team(&(0x7f0000001340), r2) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001440)={0x20, r9, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r7}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048001}, 0x40050) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)=ANY=[@ANYBLOB="14000000250001002c040000ffdbdf2507"], 0x14}}, 0x24000100) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES8=r10], 0x8c}}, 0x0) 2m17.255253674s ago: executing program 33 (id=2187): syz_emit_ethernet(0x32e, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86de6c6565c402f81100fc010000000000000000000000000001ff010000000000000000000000000001330a010900000000fc00000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000aafe8000000000000000000000000000bb000000000000000000000000000000018704000000000000010700000000000000c910fe8000000000000000000000000000bb01030000000301090000000000731b000000000000c91020010000000000000000000000000002075c3b476f94c3fd07822d1cfe5248de563f71a30d8ba84779162d7c0f847b20747369ae40088cc7c79ce2f740ed6b1397a3c5edbff31437f24cf9df046172f49db1a3889b8859dde33486cbd387633180be978d5e783eda7c49582e42d30740df84eb0b0e9d0900090000000000000003000000000000000d00000000000000e503000000000000008000000000000007000000000000000000806c00000000c910fc000000000000000000000000000000000100c910fe8000000000000000000000000000bb000000000000000115000000000000c2040000ffff000100010400000000c204000037c90693d0259326cee240af0721434094a2f9c249dbc09a6e924c7b73caf848e460d7c3755c8e3d50e934c2dcc0fc9a8023207bac645e1bfecc336855e530bb4d8ff2fda56eca6036f628930211bcf34cc70213ec7404ac8fd88718b21c64b8424349970aede8532b99c9ef7fe5bc11ceb2d63559e85dfccbe1b5005ee280c5027027b5353b49befedaf34482a18c98446cb98ef74a0e040106000000870b000000000000000100075000000002120200000300000000000000ffffffffffffffff52000000000000000100010000000000010000000000000000000000000000008000000000000000060000000000000007000000000000000401403a0500000000000005020005071800000000040a0300060000000000000007000000000000000401000502000804010700000000000000003a0000000000000001020000040107002901000000000000040100c2047fffffff000000000000004e244e2200109078c24b000100000000"], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r3, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80001, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d75a3d0dd86110100000000000000000000000000000000ff0200000000000000000000b6bc000000014e20"], 0x42) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt(r6, 0x1, 0x3, &(0x7f0000000340)=""/66, &(0x7f0000000080)=0x42) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000020c0)}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r8, 0x84, 0xc, 0x0, &(0x7f0000000080)) r9 = syz_genetlink_get_family_id$team(&(0x7f0000001340), r2) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001440)={0x20, r9, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r7}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048001}, 0x40050) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)=ANY=[@ANYBLOB="14000000250001002c040000ffdbdf2507"], 0x14}}, 0x24000100) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES8=r10], 0x8c}}, 0x0) 1m26.649451976s ago: executing program 6 (id=2732): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async, rerun: 64) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (rerun: 64) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e0, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x148, 0x358, 0x358, 0x148, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @empty, 0xff000000, 0x0, 'xfrm0\x00', 'team_slave_1\x00', {}, {}, 0x33}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x1, 0xd, 0x3, 'syz0\x00', {0x17}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x240) write$tun(r1, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, 0x0, 0x0) (async) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0000200, @private}, 0x10) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000000)=0x9, 0x4) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (async) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000200000000000004b64ffeca50000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='i2c_write\x00', r6}, 0x10) close(r7) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='host1x_wait_cdma\x00', r0, 0x0, 0x7}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, r8, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000040)=ANY=[@ANYBLOB='-4'], 0xc) (async, rerun: 64) r11 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (rerun: 64) sendmmsg$inet(r11, &(0x7f0000004d00), 0x300, 0xf1c) 1m23.155600992s ago: executing program 2 (id=1184): r0 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@null, @rose, @bcast, @remote, @remote, @rose, @bcast, @bcast]}, &(0x7f0000000080)=0x48) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f00000000c0)=0x5, &(0x7f0000000100)=0x4) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000140)={'syz_tun\x00', 0x200}) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000180)=0xfffff78e, 0x4) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x6) ioctl$SIOCAX25DELFWD(r1, 0x89eb, &(0x7f00000001c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) ioctl$SIOCAX25GETINFOOLD(r1, 0x89e9, &(0x7f0000000200)) (async) bind$ax25(r1, &(0x7f0000000240)={{0x3, @default, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @bcast, @null]}, 0x48) (async) ioctl$SIOCNRDECOBS(r0, 0x89e2) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000002c0)={0x0, 0x9, 0x3bf, 0xa, 0x5, 0x8000}, &(0x7f0000000300)=0x14) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000340)={r3, 0x0, 0x10, 0x9, 0x6}, &(0x7f0000000380)=0x18) (async) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f00000003c0)={0x1, 'xfrm0\x00', {}, 0x6}) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x18, 0x1410, 0x400, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000040}, 0x4004000) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000500)={r3, 0x8001, 0x6}, &(0x7f0000000540)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000580)=@assoc_value={r5, 0x4}, 0x8) (async) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f00000005c0)={r4}, &(0x7f0000000600)=0x8) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000640)={'wg1\x00'}) (async) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)="7944b188ec", 0x5}, {&(0x7f00000006c0)="ffc06776c6f2e7821eb8dfafa19e56ffd53a2794d61575bf216b64074b4594fa6882c51f295c8e", 0x27}, {&(0x7f0000000700)="8808d417d5de6b29ce41b2c450d4f3903c7e2e0ebfb66fa94b9046d93f1232e4670ee59144f96a1ec6b30a3cd11ad1a9d75d23af88a950438091a9abbf52837f669beb13d2094820904b580f65bdaf3da303e04e1ed5fefe234163b9b76e801597f9ee9198099f1821af2ddb573701bda9fef4c1ce1b602c6b63be7c09ae7cd72525c55aa1027faeaca60ecc409ef3a65b3a46aa1ac744d88f1ff872", 0x9c}, {&(0x7f00000007c0)="92391b6d945c8722288fb375c208f7b371a3d47571901271c8ae42de11c4ea1f11a6ed55d831840c874cb6eec6967b732bca19b4327c428f2a9f133c374ffb62a7b88abc6a120cc3", 0x48}], 0x4) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r7, 0x11, 0x6f, &(0x7f0000000880), &(0x7f00000008c0)=0x4) (async) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000900)={'wg1\x00', {0x2, 0x0, @empty}}) ioctl$SIOCAX25GETINFO(r1, 0x89ed, &(0x7f0000000940)) setsockopt$inet_mreq(r7, 0x0, 0x24, &(0x7f00000009c0)={@local, @private=0xa010102}, 0x8) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a00), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, r8, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) (async) r9 = socket$unix(0x1, 0x1, 0x0) accept4$unix(r9, &(0x7f0000000b40)=@abs, &(0x7f0000000bc0)=0x6e, 0x80800) (async) accept$ax25(r1, 0x0, &(0x7f0000000c00)) 1m14.303327028s ago: executing program 0 (id=2824): r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x1, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x80) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x2001, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "dbdd9ede7e2313a7a23925f03dbbcf5cde982cab6b38bf7b463ae5f42c35dd1d", "6a7710ebcf55344ae76b375fa62e3502b74659d7dbde072d61b6238412ad5f1a0a4f358515e45cea781c9e9b26806f68", "dd72b3bd460f4ebd662f8cd823dfd0d963970deffa6dd57d8176d2b5", {"4e3bc06c34c945e45e27e747494b407f", "256d9ddc3e6e1f7c5f7b4c5e69c1dd72"}}}}}}}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x154, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xb4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5ab5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd41}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9d}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x765}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc340}]}, @TIPC_NLA_NET={0x68, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffff3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5bd6}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}]}, 0x154}}, 0x40004044) 1m14.158630261s ago: executing program 0 (id=2825): socket$alg(0x26, 0x5, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000100)={0x8, 0x0}, 0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_emit_ethernet(0x3a, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) unshare(0x6a040000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) recvmmsg(r1, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000011c0)=""/70, 0x46}, {&(0x7f00000000c0)=""/43, 0x21}, {&(0x7f0000003c80)=""/4106, 0x104d}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x4}, 0x1801}], 0x1, 0x10020, 0x0) r2 = socket(0x8, 0x3, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) accept$inet6(r2, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140)=r0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f00000000c0)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x40002}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m13.353565298s ago: executing program 6 (id=2732): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071105400000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007313000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a83469620c6e74e1f46132559c4f8700a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62c49d15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async, rerun: 64) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (rerun: 64) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e0, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x148, 0x358, 0x358, 0x148, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @empty, 0xff000000, 0x0, 'xfrm0\x00', 'team_slave_1\x00', {}, {}, 0x33}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x1, 0xd, 0x3, 'syz0\x00', {0x17}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x240) write$tun(r1, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, 0x0, 0x0) (async) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0000200, @private}, 0x10) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000000)=0x9, 0x4) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (async) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000200000000000004b64ffeca50000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='i2c_write\x00', r6}, 0x10) close(r7) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='host1x_wait_cdma\x00', r0, 0x0, 0x7}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, r8, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000040)=ANY=[@ANYBLOB='-4'], 0xc) (async, rerun: 64) r11 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (rerun: 64) sendmmsg$inet(r11, &(0x7f0000004d00), 0x300, 0xf1c) 1m9.807803838s ago: executing program 0 (id=2847): socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80805, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) close(r1) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000001c0)={0x8, &(0x7f0000000000)=[{0x8, 0xff, 0x5, 0xa}, {0x7, 0x7, 0xbb, 0x6}, {0x58, 0x9, 0x7, 0x1ff}, {0x9, 0xfd, 0x3, 0x2}, {0x3, 0x1, 0x3, 0xfffffff9}, {0x4, 0xf7, 0x1, 0x4}, {0x7566, 0xd, 0x40, 0x101}, {0x4, 0x7, 0x7, 0x101}]}) r2 = socket(0x3edad66f076035ea, 0x5, 0x2e9) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) getsockopt$llc_int(r4, 0x10c, 0x9, &(0x7f00000003c0), &(0x7f00000000c0)=0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r3, @ANYRES16, @ANYBLOB="ae3e9a1d86c4181df36a4c7183294d23dbc8edce022c32b34dc6be80c68d56ec2c9e6b8314f547a5"], 0x54}}, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3e, &(0x7f00000000c0)=0x4000007, 0x4) bind$llc(r5, &(0x7f0000000440)={0x1a, 0x0, 0x0, 0x10, 0x0, 0x7}, 0x10) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x3f, &(0x7f0000000300)=0xf3, 0x4) connect$unix(r2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r6, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000c40)=ANY=[@ANYBLOB="1401000027000100000000000000000001"], 0x114}], 0x1}, 0x0) syz_emit_ethernet(0x31, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaa00000089bc19b8ec50c1bbb900faffffffffffffff00000b87245f6c0830e1d921728ac38063406f0700"], 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000080)=0x10) 1m9.567642961s ago: executing program 0 (id=2849): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendto$rxrpc(r1, &(0x7f00000003c0)="e3710700217c24965647c6255a1c8fa69473fa99bc3dc853c71da76dfd47de6d", 0x20, 0x200000d0, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000100)=""/40, 0x28}], 0x1}, 0x2041) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 1m9.021290811s ago: executing program 0 (id=2853): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r1, &(0x7f0000003480)=[{{&(0x7f0000000640)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=[@flowinfo={{0x14, 0x29, 0xb, 0x1}}, @flowinfo={{0x14, 0x29, 0xb, 0x20000000}}], 0x30}}], 0x1, 0x0) sendmsg$unix(r0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000009c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r3, @ANYBLOB="08000b000000000008000200ac1414"], 0x54}}, 0x0) 1m8.912346245s ago: executing program 0 (id=2855): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r0}, 0x18) socketpair(0x2b, 0x800, 0x80, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000100)=0x1, 0x4) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r3}, 0x18) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1m8.202373177s ago: executing program 2 (id=1184): r0 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@null, @rose, @bcast, @remote, @remote, @rose, @bcast, @bcast]}, &(0x7f0000000080)=0x48) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f00000000c0)=0x5, &(0x7f0000000100)=0x4) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000140)={'syz_tun\x00', 0x200}) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000180)=0xfffff78e, 0x4) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x6) ioctl$SIOCAX25DELFWD(r1, 0x89eb, &(0x7f00000001c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) ioctl$SIOCAX25GETINFOOLD(r1, 0x89e9, &(0x7f0000000200)) (async) bind$ax25(r1, &(0x7f0000000240)={{0x3, @default, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @bcast, @null]}, 0x48) (async) ioctl$SIOCNRDECOBS(r0, 0x89e2) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000002c0)={0x0, 0x9, 0x3bf, 0xa, 0x5, 0x8000}, &(0x7f0000000300)=0x14) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000340)={r3, 0x0, 0x10, 0x9, 0x6}, &(0x7f0000000380)=0x18) (async) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f00000003c0)={0x1, 'xfrm0\x00', {}, 0x6}) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x18, 0x1410, 0x400, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000040}, 0x4004000) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000500)={r3, 0x8001, 0x6}, &(0x7f0000000540)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000580)=@assoc_value={r5, 0x4}, 0x8) (async) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f00000005c0)={r4}, &(0x7f0000000600)=0x8) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000640)={'wg1\x00'}) (async) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)="7944b188ec", 0x5}, {&(0x7f00000006c0)="ffc06776c6f2e7821eb8dfafa19e56ffd53a2794d61575bf216b64074b4594fa6882c51f295c8e", 0x27}, {&(0x7f0000000700)="8808d417d5de6b29ce41b2c450d4f3903c7e2e0ebfb66fa94b9046d93f1232e4670ee59144f96a1ec6b30a3cd11ad1a9d75d23af88a950438091a9abbf52837f669beb13d2094820904b580f65bdaf3da303e04e1ed5fefe234163b9b76e801597f9ee9198099f1821af2ddb573701bda9fef4c1ce1b602c6b63be7c09ae7cd72525c55aa1027faeaca60ecc409ef3a65b3a46aa1ac744d88f1ff872", 0x9c}, {&(0x7f00000007c0)="92391b6d945c8722288fb375c208f7b371a3d47571901271c8ae42de11c4ea1f11a6ed55d831840c874cb6eec6967b732bca19b4327c428f2a9f133c374ffb62a7b88abc6a120cc3", 0x48}], 0x4) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r7, 0x11, 0x6f, &(0x7f0000000880), &(0x7f00000008c0)=0x4) (async) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000900)={'wg1\x00', {0x2, 0x0, @empty}}) ioctl$SIOCAX25GETINFO(r1, 0x89ed, &(0x7f0000000940)) setsockopt$inet_mreq(r7, 0x0, 0x24, &(0x7f00000009c0)={@local, @private=0xa010102}, 0x8) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a00), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, r8, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) (async) r9 = socket$unix(0x1, 0x1, 0x0) accept4$unix(r9, &(0x7f0000000b40)=@abs, &(0x7f0000000bc0)=0x6e, 0x80800) (async) accept$ax25(r1, 0x0, &(0x7f0000000c00)) 59.153431179s ago: executing program 6 (id=2732): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async, rerun: 64) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (rerun: 64) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e0, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x148, 0x358, 0x358, 0x148, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @empty, 0xff000000, 0x0, 'xfrm0\x00', 'team_slave_1\x00', {}, {}, 0x33}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x1, 0xd, 0x3, 'syz0\x00', {0x17}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x240) write$tun(r1, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, 0x0, 0x0) (async) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0000200, @private}, 0x10) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000000)=0x9, 0x4) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (async) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000200000000000004b64ffeca50000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='i2c_write\x00', r6}, 0x10) close(r7) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='host1x_wait_cdma\x00', r0, 0x0, 0x7}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, r8, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000040)=ANY=[@ANYBLOB='-4'], 0xc) (async, rerun: 64) r11 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (rerun: 64) sendmmsg$inet(r11, &(0x7f0000004d00), 0x300, 0xf1c) 58.776707457s ago: executing program 5 (id=2900): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmmsg$inet(r1, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f0000003180)="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", 0x1000}, {&(0x7f0000000440)="8fa3c1461384cc858dc7a07fce5b67a2c536af36638bfed278bb4b92fecac25a7e2c49448fded5a11f27ff49a768b7cb6edb1c3736dc44520cb72d0a63961a9f5eaecd00178a328aaaffdcb4a6065610ea94200f2c0202983f7c875d4e1cd17c7d1890db2e976f5f79b71692870e81bc2ca33765a7073641e5fa821be5fdb3fb92365bd2597f27a12d5a059aa96ff5dc5626e5", 0x93}, {&(0x7f0000004240)="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", 0xbb5}], 0x3}}], 0x1, 0x40) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000010c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="cf0400000000fcffffff1200dcd008000300", @ANYRES32=r3, @ANYBLOB="0a00060008021100000100000c004300f8fffffff5ffffff0600b500f9000000"], 0x3c}}, 0x0) 58.477868009s ago: executing program 5 (id=2902): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000000)="c503f27718183a5801c10e9db3aea2cfa95c6c95a3305fce1039a94d8d75463261abfa7c1286d651cc0e17658b1fa3a9a0988e695c1f938b1d09672fa62eef1da955", &(0x7f00000000c0)=""/248, 0x4}, 0x20) 58.108419689s ago: executing program 5 (id=2903): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) recvfrom$ax25(r0, 0x0, 0x0, 0x10132, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0900000023000000030000000100000000000000", @ANYRES32, @ANYBLOB="19023700000062097b34e6d3a54eb3add7565adc2c21b75cb837cfaf520dad76d6f185d3683391657c149c86ae022a1462daf5a37cf6a14fd63b9e022ffafd4cc23acf68402024830972a3aa17ca22c35e760f84658b7e77308b62922391b3645b7e1474d66e9fdf12e8abfa0aa50d097281a7f580e127986efce86bc26c9da2c55a2eda5f6da8465587fcac3db7be50951021c2b4c4e65ce38782ca1034db28e088230792af568cd70d7d0b133a5e0a0718b9ac620a70e28eb34d7ca5d7b3346dcc145b330d8f69f8c4dd6768ffec02ae39ae575ad492bb6283a1015a9549", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000100)={0x18, 0x0, {0x1203, @broadcast, 'geneve0\x00'}}, 0x1e) r5 = socket$kcm(0x10, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x102, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x0) poll(&(0x7f0000001dc0), 0x0, 0x6) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x0, 0x3}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)="46ee268e9809b13ceff1218681b5b936c6a8376e8e8bc57e9ab968a189f5429d51fe44e6579331f7e62184e4025bbd4189f31648a13b147af19a420ccd36312d3506b1499d255b2540aba038dd153eb6d80be929e60e042377a301e9e591e334207660ba8719d21d", 0x68}, {0x0}], 0x2}, 0x40080c4) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0xfffffffd) ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000200)=0x2) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) connect$pppoe(r4, &(0x7f00000016c0)={0x18, 0x0, {0x3, @random="3c38448f3736", 'veth1_vlan\x00'}}, 0x1e) close(r6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r8) sendmsg$IEEE802154_LLSEC_LIST_DEV(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4000051}, 0x40000a0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000240)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000640)="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", 0x0}, 0x20) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000580)={'ip6gre0\x00', 0x0, 0x2f, 0x83, 0x5, 0x2, 0x22, @loopback, @local, 0x80, 0x8000, 0x6, 0x40}}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 57.186855236s ago: executing program 5 (id=2906): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) r1 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x6a, 0x4, 0x1fffefff, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@deltclass={0x3c, 0x29, 0x100, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x4, 0x6}, {0x4, 0xf}, {0xa, 0x5}}, [@tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_taprio={0xb}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES64=r2], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x15) sendmmsg(r2, &(0x7f0000000140), 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'veth1\x00', {0x4}, 0x1d4}) getsockopt$sock_int(r1, 0x1, 0x26, &(0x7f0000000040), &(0x7f00000001c0)=0x4) 57.087784733s ago: executing program 5 (id=2908): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r2) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001a00010000000000000000008180806a"], 0x30}}, 0x0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000340)="08000000010000", 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0xb}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@ipv4_getroute={0x1c, 0x1a, 0x2, 0x70bd2b, 0x25dfdbfd, {0x2, 0x20, 0x80, 0x7, 0xfc, 0x1, 0x0, 0xa, 0x1600}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004815}, 0x4000) 56.904568336s ago: executing program 5 (id=2909): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "c4"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x4, {0x2}}, @TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PTYPE={0x6, 0xa}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x60}}}}]}]}, 0x70}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_stats_latency\x00', r2, 0x0, 0xf}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 56.504061309s ago: executing program 1 (id=2912): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)=0x1) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000300)=0x3) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="02"], 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r3, 0x2, 0x0, 0x0, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)="00214717a7070000273e030600710a5e31163ceb9d04", 0x16}], 0x1, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x33}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r6, @ANYBLOB="01002dbd7000fbdbdf250100000014000200776731000000000000000000000000007400088070"], 0x9c}, 0x1, 0x0, 0x0, 0x4004}, 0x20000010) 56.224611288s ago: executing program 1 (id=2913): syz_emit_ethernet(0x2a, &(0x7f0000001700)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @empty, @random="c79094b15e35", @local}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071120e000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 56.015707057s ago: executing program 1 (id=2914): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40010}, 0x14000012) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000009c0)=@deltclass={0x30, 0x29, 0x200, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0xa}, {0x6, 0x6}, {0xe, 0xd}}, [@c_cbq={{0x8}, {0x4}}]}, 0x30}}, 0x0) recvmmsg(r1, &(0x7f0000007480)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)=""/5, 0x5}, {&(0x7f00000001c0)=""/43, 0x2b}], 0x2}, 0x8}], 0x1, 0x2, 0x0) r2 = socket(0x2a, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000ac0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x28, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x81, 0x30}}}}}, 0x28}}, 0x8015) sendmsg$sock(r5, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x84) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x7, &(0x7f0000000000), 0xa0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x24000800) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a05000000000000000000020000000900020073797a31000000000900010073797a3000000000140003800800024000000400080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c000000170a010100"], 0x2c}}, 0x0) 55.087748988s ago: executing program 2 (id=1184): r0 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@null, @rose, @bcast, @remote, @remote, @rose, @bcast, @bcast]}, &(0x7f0000000080)=0x48) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f00000000c0)=0x5, &(0x7f0000000100)=0x4) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000140)={'syz_tun\x00', 0x200}) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000180)=0xfffff78e, 0x4) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x6) ioctl$SIOCAX25DELFWD(r1, 0x89eb, &(0x7f00000001c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) ioctl$SIOCAX25GETINFOOLD(r1, 0x89e9, &(0x7f0000000200)) (async) bind$ax25(r1, &(0x7f0000000240)={{0x3, @default, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @bcast, @null]}, 0x48) (async) ioctl$SIOCNRDECOBS(r0, 0x89e2) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000002c0)={0x0, 0x9, 0x3bf, 0xa, 0x5, 0x8000}, &(0x7f0000000300)=0x14) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000340)={r3, 0x0, 0x10, 0x9, 0x6}, &(0x7f0000000380)=0x18) (async) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f00000003c0)={0x1, 'xfrm0\x00', {}, 0x6}) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x18, 0x1410, 0x400, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000040}, 0x4004000) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000500)={r3, 0x8001, 0x6}, &(0x7f0000000540)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000580)=@assoc_value={r5, 0x4}, 0x8) (async) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f00000005c0)={r4}, &(0x7f0000000600)=0x8) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000640)={'wg1\x00'}) (async) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)="7944b188ec", 0x5}, {&(0x7f00000006c0)="ffc06776c6f2e7821eb8dfafa19e56ffd53a2794d61575bf216b64074b4594fa6882c51f295c8e", 0x27}, {&(0x7f0000000700)="8808d417d5de6b29ce41b2c450d4f3903c7e2e0ebfb66fa94b9046d93f1232e4670ee59144f96a1ec6b30a3cd11ad1a9d75d23af88a950438091a9abbf52837f669beb13d2094820904b580f65bdaf3da303e04e1ed5fefe234163b9b76e801597f9ee9198099f1821af2ddb573701bda9fef4c1ce1b602c6b63be7c09ae7cd72525c55aa1027faeaca60ecc409ef3a65b3a46aa1ac744d88f1ff872", 0x9c}, {&(0x7f00000007c0)="92391b6d945c8722288fb375c208f7b371a3d47571901271c8ae42de11c4ea1f11a6ed55d831840c874cb6eec6967b732bca19b4327c428f2a9f133c374ffb62a7b88abc6a120cc3", 0x48}], 0x4) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r7, 0x11, 0x6f, &(0x7f0000000880), &(0x7f00000008c0)=0x4) (async) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000900)={'wg1\x00', {0x2, 0x0, @empty}}) ioctl$SIOCAX25GETINFO(r1, 0x89ed, &(0x7f0000000940)) setsockopt$inet_mreq(r7, 0x0, 0x24, &(0x7f00000009c0)={@local, @private=0xa010102}, 0x8) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a00), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, r8, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) (async) r9 = socket$unix(0x1, 0x1, 0x0) accept4$unix(r9, &(0x7f0000000b40)=@abs, &(0x7f0000000bc0)=0x6e, 0x80800) (async) accept$ax25(r1, 0x0, &(0x7f0000000c00)) 52.155220717s ago: executing program 34 (id=2855): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r0}, 0x18) socketpair(0x2b, 0x800, 0x80, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000100)=0x1, 0x4) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r3}, 0x18) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 42.820660404s ago: executing program 6 (id=2732): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async, rerun: 64) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (rerun: 64) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e0, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x148, 0x358, 0x358, 0x148, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @empty, 0xff000000, 0x0, 'xfrm0\x00', 'team_slave_1\x00', {}, {}, 0x33}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x1, 0xd, 0x3, 'syz0\x00', {0x17}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x240) write$tun(r1, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, 0x0, 0x0) (async) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0000200, @private}, 0x10) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000000)=0x9, 0x4) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (async) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000200000000000004b64ffeca50000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='i2c_write\x00', r6}, 0x10) close(r7) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='host1x_wait_cdma\x00', r0, 0x0, 0x7}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, r8, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000040)=ANY=[@ANYBLOB='-4'], 0xc) (async, rerun: 64) r11 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (rerun: 64) sendmmsg$inet(r11, &(0x7f0000004d00), 0x300, 0xf1c) 41.570182472s ago: executing program 35 (id=2909): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "c4"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x4, {0x2}}, @TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PTYPE={0x6, 0xa}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x60}}}}]}]}, 0x70}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_stats_latency\x00', r2, 0x0, 0xf}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 41.544585104s ago: executing program 1 (id=2914): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40010}, 0x14000012) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000009c0)=@deltclass={0x30, 0x29, 0x200, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0xa}, {0x6, 0x6}, {0xe, 0xd}}, [@c_cbq={{0x8}, {0x4}}]}, 0x30}}, 0x0) recvmmsg(r1, &(0x7f0000007480)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)=""/5, 0x5}, {&(0x7f00000001c0)=""/43, 0x2b}], 0x2}, 0x8}], 0x1, 0x2, 0x0) r2 = socket(0x2a, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000ac0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x28, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x81, 0x30}}}}}, 0x28}}, 0x8015) sendmsg$sock(r5, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x84) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x7, &(0x7f0000000000), 0xa0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x24000800) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a05000000000000000000020000000900020073797a31000000000900010073797a3000000000140003800800024000000400080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c000000170a010100"], 0x2c}}, 0x0) 39.549685025s ago: executing program 2 (id=1184): r0 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@null, @rose, @bcast, @remote, @remote, @rose, @bcast, @bcast]}, &(0x7f0000000080)=0x48) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f00000000c0)=0x5, &(0x7f0000000100)=0x4) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000140)={'syz_tun\x00', 0x200}) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000180)=0xfffff78e, 0x4) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x6) ioctl$SIOCAX25DELFWD(r1, 0x89eb, &(0x7f00000001c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) ioctl$SIOCAX25GETINFOOLD(r1, 0x89e9, &(0x7f0000000200)) (async) bind$ax25(r1, &(0x7f0000000240)={{0x3, @default, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @bcast, @null]}, 0x48) (async) ioctl$SIOCNRDECOBS(r0, 0x89e2) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000002c0)={0x0, 0x9, 0x3bf, 0xa, 0x5, 0x8000}, &(0x7f0000000300)=0x14) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000340)={r3, 0x0, 0x10, 0x9, 0x6}, &(0x7f0000000380)=0x18) (async) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f00000003c0)={0x1, 'xfrm0\x00', {}, 0x6}) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x18, 0x1410, 0x400, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000040}, 0x4004000) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000500)={r3, 0x8001, 0x6}, &(0x7f0000000540)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000580)=@assoc_value={r5, 0x4}, 0x8) (async) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f00000005c0)={r4}, &(0x7f0000000600)=0x8) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000640)={'wg1\x00'}) (async) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)="7944b188ec", 0x5}, {&(0x7f00000006c0)="ffc06776c6f2e7821eb8dfafa19e56ffd53a2794d61575bf216b64074b4594fa6882c51f295c8e", 0x27}, {&(0x7f0000000700)="8808d417d5de6b29ce41b2c450d4f3903c7e2e0ebfb66fa94b9046d93f1232e4670ee59144f96a1ec6b30a3cd11ad1a9d75d23af88a950438091a9abbf52837f669beb13d2094820904b580f65bdaf3da303e04e1ed5fefe234163b9b76e801597f9ee9198099f1821af2ddb573701bda9fef4c1ce1b602c6b63be7c09ae7cd72525c55aa1027faeaca60ecc409ef3a65b3a46aa1ac744d88f1ff872", 0x9c}, {&(0x7f00000007c0)="92391b6d945c8722288fb375c208f7b371a3d47571901271c8ae42de11c4ea1f11a6ed55d831840c874cb6eec6967b732bca19b4327c428f2a9f133c374ffb62a7b88abc6a120cc3", 0x48}], 0x4) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r7, 0x11, 0x6f, &(0x7f0000000880), &(0x7f00000008c0)=0x4) (async) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000900)={'wg1\x00', {0x2, 0x0, @empty}}) ioctl$SIOCAX25GETINFO(r1, 0x89ed, &(0x7f0000000940)) setsockopt$inet_mreq(r7, 0x0, 0x24, &(0x7f00000009c0)={@local, @private=0xa010102}, 0x8) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a00), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, r8, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) (async) r9 = socket$unix(0x1, 0x1, 0x0) accept4$unix(r9, &(0x7f0000000b40)=@abs, &(0x7f0000000bc0)=0x6e, 0x80800) (async) accept$ax25(r1, 0x0, &(0x7f0000000c00)) 23.741062006s ago: executing program 1 (id=2914): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40010}, 0x14000012) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000009c0)=@deltclass={0x30, 0x29, 0x200, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0xa}, {0x6, 0x6}, {0xe, 0xd}}, [@c_cbq={{0x8}, {0x4}}]}, 0x30}}, 0x0) recvmmsg(r1, &(0x7f0000007480)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)=""/5, 0x5}, {&(0x7f00000001c0)=""/43, 0x2b}], 0x2}, 0x8}], 0x1, 0x2, 0x0) r2 = socket(0x2a, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000ac0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x28, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x81, 0x30}}}}}, 0x28}}, 0x8015) sendmsg$sock(r5, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x84) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x7, &(0x7f0000000000), 0xa0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x24000800) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a05000000000000000000020000000900020073797a31000000000900010073797a3000000000140003800800024000000400080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c000000170a010100"], 0x2c}}, 0x0) 23.283768036s ago: executing program 6 (id=2732): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async, rerun: 64) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (rerun: 64) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e0, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x148, 0x358, 0x358, 0x148, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @empty, 0xff000000, 0x0, 'xfrm0\x00', 'team_slave_1\x00', {}, {}, 0x33}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x1, 0xd, 0x3, 'syz0\x00', {0x17}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x240) write$tun(r1, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, 0x0, 0x0) (async) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0000200, @private}, 0x10) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000000)=0x9, 0x4) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (async) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000200000000000004b64ffeca50000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='i2c_write\x00', r6}, 0x10) close(r7) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='host1x_wait_cdma\x00', r0, 0x0, 0x7}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, r8, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000040)=ANY=[@ANYBLOB='-4'], 0xc) (async, rerun: 64) r11 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (rerun: 64) sendmmsg$inet(r11, &(0x7f0000004d00), 0x300, 0xf1c) 22.048847518s ago: executing program 2 (id=1184): r0 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@null, @rose, @bcast, @remote, @remote, @rose, @bcast, @bcast]}, &(0x7f0000000080)=0x48) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f00000000c0)=0x5, &(0x7f0000000100)=0x4) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000140)={'syz_tun\x00', 0x200}) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000180)=0xfffff78e, 0x4) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x6) ioctl$SIOCAX25DELFWD(r1, 0x89eb, &(0x7f00000001c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) ioctl$SIOCAX25GETINFOOLD(r1, 0x89e9, &(0x7f0000000200)) (async) bind$ax25(r1, &(0x7f0000000240)={{0x3, @default, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @bcast, @null]}, 0x48) (async) ioctl$SIOCNRDECOBS(r0, 0x89e2) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000002c0)={0x0, 0x9, 0x3bf, 0xa, 0x5, 0x8000}, &(0x7f0000000300)=0x14) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000340)={r3, 0x0, 0x10, 0x9, 0x6}, &(0x7f0000000380)=0x18) (async) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f00000003c0)={0x1, 'xfrm0\x00', {}, 0x6}) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x18, 0x1410, 0x400, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000040}, 0x4004000) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000500)={r3, 0x8001, 0x6}, &(0x7f0000000540)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000580)=@assoc_value={r5, 0x4}, 0x8) (async) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f00000005c0)={r4}, &(0x7f0000000600)=0x8) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000640)={'wg1\x00'}) (async) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)="7944b188ec", 0x5}, {&(0x7f00000006c0)="ffc06776c6f2e7821eb8dfafa19e56ffd53a2794d61575bf216b64074b4594fa6882c51f295c8e", 0x27}, {&(0x7f0000000700)="8808d417d5de6b29ce41b2c450d4f3903c7e2e0ebfb66fa94b9046d93f1232e4670ee59144f96a1ec6b30a3cd11ad1a9d75d23af88a950438091a9abbf52837f669beb13d2094820904b580f65bdaf3da303e04e1ed5fefe234163b9b76e801597f9ee9198099f1821af2ddb573701bda9fef4c1ce1b602c6b63be7c09ae7cd72525c55aa1027faeaca60ecc409ef3a65b3a46aa1ac744d88f1ff872", 0x9c}, {&(0x7f00000007c0)="92391b6d945c8722288fb375c208f7b371a3d47571901271c8ae42de11c4ea1f11a6ed55d831840c874cb6eec6967b732bca19b4327c428f2a9f133c374ffb62a7b88abc6a120cc3", 0x48}], 0x4) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r7, 0x11, 0x6f, &(0x7f0000000880), &(0x7f00000008c0)=0x4) (async) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000900)={'wg1\x00', {0x2, 0x0, @empty}}) ioctl$SIOCAX25GETINFO(r1, 0x89ed, &(0x7f0000000940)) setsockopt$inet_mreq(r7, 0x0, 0x24, &(0x7f00000009c0)={@local, @private=0xa010102}, 0x8) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a00), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, r8, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) (async) r9 = socket$unix(0x1, 0x1, 0x0) accept4$unix(r9, &(0x7f0000000b40)=@abs, &(0x7f0000000bc0)=0x6e, 0x80800) (async) accept$ax25(r1, 0x0, &(0x7f0000000c00)) 11.650724276s ago: executing program 8 (id=2992): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000003c0)=ANY=[@ANYBLOB="050000000000000071117200000000008510000002000000850000000000000095000000000000009500a5058240c34f786574f25447e6392f58000082a7"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) 11.48952475s ago: executing program 8 (id=2993): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000004000000b704000000000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r5 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), r1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000fc0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000001280)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000fddbdf250100000008000100", @ANYRES32=r6, @ANYBLOB="3c00028038"], 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x4c}}, 0x0) 8.125379648s ago: executing program 8 (id=2998): syz_emit_ethernet(0x4e, &(0x7f0000000880)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x18, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0xff, '\x00', @empty}}}}}}, 0x0) socketpair(0x28, 0x4, 0x9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$rxrpc(r0, &(0x7f0000000040)=""/143, 0x8f, 0x0, 0x0, 0x0) 8.009463664s ago: executing program 8 (id=2999): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010102, 0x4e23, 0x3, 'wrr\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x800003, 'wrr\x00', 0x4, 0x81, 0x5}, {@multicast1, 0x4e23, 0x0, 0x1c9, 0x12d5c, 0x12d5c}}, 0x44) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000200)=""/196, 0xc4}, {&(0x7f0000000300)=""/208, 0xd0}, {&(0x7f0000000080)=""/178, 0xb2}, {&(0x7f0000000400)=""/139, 0x8b}, {&(0x7f00000004c0)=""/205, 0xcd}, {&(0x7f00000005c0)=""/193, 0xc1}], 0x6, &(0x7f0000000740)=""/172, 0xac}, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x2c, r4, 0x1, 0x0, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000009480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xb, 0x7}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000880)={'vxcan1\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000900)=0x14) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000a80)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f0000000ac0)={0xf4, r4, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_PAUSE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @ETHTOOL_A_PAUSE_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x40}, 0x40001) 7.663847263s ago: executing program 8 (id=3002): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x8000, 0x301a, 0x52350}) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xac, 0x2, 0x9, 0x801, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0xac}, 0x1, 0x0, 0x0, 0x44841}, 0x4000) (async) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) (async) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, 0x0, &(0x7f0000000080)) (async, rerun: 64) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async, rerun: 64) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) preadv(r2, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000600)=""/231, 0xe7}], 0x2, 0x10, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) (rerun: 32) 4.20573998s ago: executing program 7 (id=3005): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x1ff, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x1}, 0xe) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={r2, 0x9}, 0xc) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="b60a000000000000611164080000000018000000020000000000000000000000950000000000000063f08b47e3add5319ceb65d1dc55b9728f977699714e4d7c2716e2057b7f8a086ce5210caca9cd74649d0a0700000000000000abfc2b12ae15d444d039ec6d9d8e5cfbd4178e9c7e227c27ce59cc15d3ec5db31af57b96edc6"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc42, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x58) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000340)={r3, r0, 0x8, 0x0, 0x0, 0x82, 0x8, 0x15c2, 0x5886, 0x801, 0x1, 0xa8, 'syz1\x00'}) 4.034505618s ago: executing program 7 (id=3006): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000500)={@val={0x0, 0x86dd}, @val={0x0, 0x4, 0x11, 0x4}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x6000, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x1, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x0, 0x5}, 0x1, {0x8100}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) (async) write$tun(r1, &(0x7f0000000500)={@val={0x0, 0x86dd}, @val={0x0, 0x4, 0x11, 0x4}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x6000, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x1, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x0, 0x5}, 0x1, {0x8100}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x48, 0x0, 0x38, 0xa8e}, {0x6, 0xfc}]}) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x7e, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000481100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e2200489078030000000200000088c73b21f267636d01dbe5712c1c941e1cdaf3bb43f09c28e13808ca72381f41e5fff9620915b6f78670dfaf9a2038083179cf6b7931c9b49dbb6b97c70a4862d7f11c6b33cd73a0d5b873a55b3315a663dfe19a0fd7a94ca675d463a80150940f91827d626d542d66be679657cb74a87e8842a4303f098e9eb47952e553fda36558a052a7a175d4ab17071f881b258daf66fb113b633b432c3b84e257a4fd2a47"], 0x0) sendmsg$NL80211_CMD_SET_STATION(r3, 0x0, 0x0) (async) sendmsg$NL80211_CMD_SET_STATION(r3, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r5, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, 0x84) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, 0x0, 0x90) write$ppp(r0, &(0x7f0000000180)="1e08", 0x2) (async) write$ppp(r0, &(0x7f0000000180)="1e08", 0x2) socket$inet_udp(0x2, 0x2, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_netdev_private(r7, 0x89e1, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r8, 0x29, 0x19, 0x0, &(0x7f0000000280)) syz_emit_ethernet(0x2e, &(0x7f0000001600)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x8, 0x20, 0x65, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1}, {0x4e20, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x2, 0x3, 0x100, @void}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000730107000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.499926724s ago: executing program 7 (id=3007): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmmsg$inet(r1, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}], 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x5, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @empty, 0x10, 0x8, 0x1, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000340)={'ip6gre0\x00', 0x0, 0x29, 0xc, 0x5, 0x6, 0x2, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x7800, 0x9, 0x5}}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r4) sendmsg$IEEE802154_LIST_PHY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r5, 0x1203}, 0x14}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000580)=@mpls_newroute={0x150, 0x18, 0x400, 0x70bd28, 0x25dfdbfb, {0x1c, 0x0, 0x20, 0x4, 0xfd, 0x2, 0xfe, 0x1, 0xe00}, [@RTA_NEWDST={0x84, 0x13, [{0x8, 0x0, 0x1}, {0x15b}, {0x6, 0x0, 0x1}, {0x1000}, {0xf}, {0x0, 0x0, 0x1}, {0x20e9, 0x0, 0x1}, {0xffff7, 0x0, 0x1}, {0x1000}, {0x8000}, {0x6, 0x0, 0x1}, {0x1}, {0x7, 0x0, 0x1}, {0xa57, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x401}, {0x7, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x3ff, 0x0, 0x1}, {0x200}, {0x3}, {0x8, 0x0, 0x1}, {0x4a}, {0x8, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x4}, {0xe73, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x81, 0x0, 0x1}]}, @RTA_NEWDST={0x84, 0x13, [{0x6}, {0x5}, {0x2, 0x0, 0x1}, {0x7f, 0x0, 0x1}, {0x1ff, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x400}, {0x2, 0x0, 0x1}, {0xe507, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x9}, {0x3}, {0x5, 0x0, 0x1}, {0xbaa}, {}, {0xd}, {0x7}, {0x6, 0x0, 0x1}, {0xffff, 0x0, 0x1}, {0x9250, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x98c}, {0x8, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3}, {0xfff}, {0x1, 0x0, 0x1}, {0x4}, {0x7}, {0x2, 0x0, 0x1}, {0x3}]}, @RTA_VIA={0x14, 0x12, {0x15, "193f9c9c08542a1061213f91864a"}}, @RTA_OIF={0x8}, @RTA_OIF={0x8, 0x4, r2}, @RTA_DST={0x8, 0x1, {0x6}}]}, 0x150}, 0x1, 0x0, 0x0, 0x810}, 0x0) 3.333018409s ago: executing program 7 (id=3008): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xc) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x40000000}) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/103, 0x23}], 0x1, 0x2, 0x0) 3.269511903s ago: executing program 1 (id=2914): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40010}, 0x14000012) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000009c0)=@deltclass={0x30, 0x29, 0x200, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0xa}, {0x6, 0x6}, {0xe, 0xd}}, [@c_cbq={{0x8}, {0x4}}]}, 0x30}}, 0x0) recvmmsg(r1, &(0x7f0000007480)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)=""/5, 0x5}, {&(0x7f00000001c0)=""/43, 0x2b}], 0x2}, 0x8}], 0x1, 0x2, 0x0) r2 = socket(0x2a, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000ac0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x28, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x81, 0x30}}}}}, 0x28}}, 0x8015) sendmsg$sock(r5, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x84) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x7, &(0x7f0000000000), 0xa0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x24000800) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a05000000000000000000020000000900020073797a31000000000900010073797a3000000000140003800800024000000400080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c000000170a010100"], 0x2c}}, 0x0) 3.199431146s ago: executing program 7 (id=3009): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0x4, &(0x7f0000000200)=ANY=[@ANYRES32=r0], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) r1 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) write$cgroup_type(r1, &(0x7f00000001c0), 0x9) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r2, &(0x7f0000000040), 0x2, 0x0) mkdirat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x1ff) 2.347987164s ago: executing program 7 (id=3010): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)={0x0, 0x94, "bdfe02a23ce05be4a1ccc9e9bfac19d98eb7714913510d64d592ba868571d25038ef5c8ee2712ef57dde3a184e56c9e9d44a602b607f249de91c16856de03c50d0592e175837c8a0c18cd9bb3c1722b0d2704da54eb69b15d4908fcd6c3b16f0aa9d796f73a7866a53e1e1b26a2f95542b018298822c76b0308304c33fb49faf2bde6f00295726ac1bd85640cc3342a227b16f11"}, &(0x7f0000000040)=0x9c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000240)={r1, 0x7}, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x70, 0x2, 0x6, 0x1, 0x6000006, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}, @IPSET_ATTR_IP={0x6e, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xa00}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x70}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000069108e0000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)={0x0, 0x94, "bdfe02a23ce05be4a1ccc9e9bfac19d98eb7714913510d64d592ba868571d25038ef5c8ee2712ef57dde3a184e56c9e9d44a602b607f249de91c16856de03c50d0592e175837c8a0c18cd9bb3c1722b0d2704da54eb69b15d4908fcd6c3b16f0aa9d796f73a7866a53e1e1b26a2f95542b018298822c76b0308304c33fb49faf2bde6f00295726ac1bd85640cc3342a227b16f11"}, &(0x7f0000000040)=0x9c) (async) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000240)={r1, 0x7}, 0x8) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x70, 0x2, 0x6, 0x1, 0x6000006, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}, @IPSET_ATTR_IP={0x6e, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xa00}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x70}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000069108e0000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) 2.347255126s ago: executing program 2 (id=1184): r0 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@null, @rose, @bcast, @remote, @remote, @rose, @bcast, @bcast]}, &(0x7f0000000080)=0x48) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f00000000c0)=0x5, &(0x7f0000000100)=0x4) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000140)={'syz_tun\x00', 0x200}) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000180)=0xfffff78e, 0x4) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x6) ioctl$SIOCAX25DELFWD(r1, 0x89eb, &(0x7f00000001c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) ioctl$SIOCAX25GETINFOOLD(r1, 0x89e9, &(0x7f0000000200)) (async) bind$ax25(r1, &(0x7f0000000240)={{0x3, @default, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @bcast, @null]}, 0x48) (async) ioctl$SIOCNRDECOBS(r0, 0x89e2) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000002c0)={0x0, 0x9, 0x3bf, 0xa, 0x5, 0x8000}, &(0x7f0000000300)=0x14) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000340)={r3, 0x0, 0x10, 0x9, 0x6}, &(0x7f0000000380)=0x18) (async) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f00000003c0)={0x1, 'xfrm0\x00', {}, 0x6}) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x18, 0x1410, 0x400, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000040}, 0x4004000) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000500)={r3, 0x8001, 0x6}, &(0x7f0000000540)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000580)=@assoc_value={r5, 0x4}, 0x8) (async) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f00000005c0)={r4}, &(0x7f0000000600)=0x8) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000640)={'wg1\x00'}) (async) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)="7944b188ec", 0x5}, {&(0x7f00000006c0)="ffc06776c6f2e7821eb8dfafa19e56ffd53a2794d61575bf216b64074b4594fa6882c51f295c8e", 0x27}, {&(0x7f0000000700)="8808d417d5de6b29ce41b2c450d4f3903c7e2e0ebfb66fa94b9046d93f1232e4670ee59144f96a1ec6b30a3cd11ad1a9d75d23af88a950438091a9abbf52837f669beb13d2094820904b580f65bdaf3da303e04e1ed5fefe234163b9b76e801597f9ee9198099f1821af2ddb573701bda9fef4c1ce1b602c6b63be7c09ae7cd72525c55aa1027faeaca60ecc409ef3a65b3a46aa1ac744d88f1ff872", 0x9c}, {&(0x7f00000007c0)="92391b6d945c8722288fb375c208f7b371a3d47571901271c8ae42de11c4ea1f11a6ed55d831840c874cb6eec6967b732bca19b4327c428f2a9f133c374ffb62a7b88abc6a120cc3", 0x48}], 0x4) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r7, 0x11, 0x6f, &(0x7f0000000880), &(0x7f00000008c0)=0x4) (async) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000900)={'wg1\x00', {0x2, 0x0, @empty}}) ioctl$SIOCAX25GETINFO(r1, 0x89ed, &(0x7f0000000940)) setsockopt$inet_mreq(r7, 0x0, 0x24, &(0x7f00000009c0)={@local, @private=0xa010102}, 0x8) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a00), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, r8, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) (async) r9 = socket$unix(0x1, 0x1, 0x0) accept4$unix(r9, &(0x7f0000000b40)=@abs, &(0x7f0000000bc0)=0x6e, 0x80800) (async) accept$ax25(r1, 0x0, &(0x7f0000000c00)) 1.177782ms ago: executing program 8 (id=3011): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x13, 0xfffffffe, 0x7, 0x7}}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 0s ago: executing program 6 (id=2732): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async, rerun: 64) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (rerun: 64) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e0, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x148, 0x358, 0x358, 0x148, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @empty, 0xff000000, 0x0, 'xfrm0\x00', 'team_slave_1\x00', {}, {}, 0x33}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x1, 0xd, 0x3, 'syz0\x00', {0x17}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x240) write$tun(r1, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, 0x0, 0x0) (async) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0000200, @private}, 0x10) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000000)=0x9, 0x4) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (async) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000200000000000004b64ffeca50000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='i2c_write\x00', r6}, 0x10) close(r7) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='host1x_wait_cdma\x00', r0, 0x0, 0x7}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, r8, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000040)=ANY=[@ANYBLOB='-4'], 0xc) (async, rerun: 64) r11 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (rerun: 64) sendmmsg$inet(r11, &(0x7f0000004d00), 0x300, 0xf1c) kernel console output (not intermixed with test programs): 'syz.5.2654': attribute type 50 has an invalid length. [ 374.891757][T15502] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2654'. [ 375.053282][T15515] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2658'. [ 375.143660][T14761] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.375307][T14761] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.666694][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 375.676406][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 375.684204][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 375.693217][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 375.701549][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 375.735698][T14761] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.836362][T14761] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.998877][T14761] bridge_slave_1: left allmulticast mode [ 376.004891][T14761] bridge_slave_1: left promiscuous mode [ 376.010686][T14761] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.020866][T14761] bridge_slave_0: left allmulticast mode [ 376.027460][T14761] bridge_slave_0: left promiscuous mode [ 376.033319][T14761] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.443776][T14761] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 376.455580][T14761] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 376.465769][T14761] bond0 (unregistering): Released all slaves [ 376.699082][T15519] chnl_net:caif_netlink_parms(): no params data found [ 377.025533][T15519] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.053599][T15519] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.055787][T15535] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2661'. [ 377.077443][T15519] bridge_slave_0: entered allmulticast mode [ 377.131889][T15519] bridge_slave_0: entered promiscuous mode [ 377.160849][T15529] veth0: entered promiscuous mode [ 377.192368][T15529] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2661'. [ 377.225780][T15536] vlan2: entered allmulticast mode [ 377.404901][T14761] hsr_slave_0: left promiscuous mode [ 377.421783][T14761] hsr_slave_1: left promiscuous mode [ 377.443867][ T5844] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 377.446311][T14761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.466324][ T5844] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 377.474859][ T5844] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 377.483252][ T5844] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 377.488175][T14761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.498909][ T5844] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 377.548572][T14761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.562075][T14761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.597460][T14761] veth1_macvtap: left promiscuous mode [ 377.603135][T14761] veth0_macvtap: left promiscuous mode [ 377.609303][T14761] veth1_vlan: left promiscuous mode [ 377.614875][T14761] veth0_vlan: left promiscuous mode [ 377.777357][ T5844] Bluetooth: hci2: command tx timeout [ 378.101824][T14761] team0 (unregistering): Port device team_slave_1 removed [ 378.144121][T14761] team0 (unregistering): Port device team_slave_0 removed [ 378.563055][T15537] veth0: left promiscuous mode [ 378.569394][T15519] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.594806][T15519] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.602117][T15519] bridge_slave_1: entered allmulticast mode [ 378.611497][T15519] bridge_slave_1: entered promiscuous mode [ 378.711972][T15529] bond1: (slave vlan2): Releasing active interface [ 378.718847][T15529] veth0_to_bond: entered promiscuous mode [ 378.923506][T15519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.959089][T15519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.123395][T15519] team0: Port device team_slave_0 added [ 379.186044][T15519] team0: Port device team_slave_1 added [ 379.417983][T15519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.447940][T15519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.534837][ T5844] Bluetooth: hci6: command tx timeout [ 379.548397][T15519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.569553][T15519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.584648][T15519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.654643][T15519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.854831][ T5844] Bluetooth: hci2: command tx timeout [ 379.904925][T15519] hsr_slave_0: entered promiscuous mode [ 379.915714][T15519] hsr_slave_1: entered promiscuous mode [ 379.932261][T15519] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 379.949174][T15519] Cannot create hsr debugfs directory [ 380.423019][T15607] netlink: 'syz.1.2679': attribute type 83 has an invalid length. [ 380.626753][T15519] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.636901][T15519] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 380.666909][T15614] tipc: Started in network mode [ 380.673588][T15614] tipc: Node identity 0e36e7aa4ac8, cluster identity 4711 [ 380.681348][T15614] tipc: Enabled bearer , priority 0 [ 380.693793][T15619] netlink: 'syz.1.2683': attribute type 1 has an invalid length. [ 380.706673][T15619] netlink: 'syz.1.2683': attribute type 1 has an invalid length. [ 380.719063][T15519] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.729333][T15519] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 380.750074][T15614] syzkaller0: entered promiscuous mode [ 380.761712][T15614] syzkaller0: entered allmulticast mode [ 380.821734][T15614] tipc: Resetting bearer [ 380.842159][T15519] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.861547][T15519] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 380.925344][T15625] sch_fq: defrate 0 ignored. [ 380.949134][T15519] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.959411][T15519] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 380.997683][T15625] netlink: 'syz.1.2685': attribute type 1 has an invalid length. [ 381.011516][T15623] tipc: Resetting bearer [ 381.061052][T15623] tipc: Disabling bearer [ 381.250884][T15543] chnl_net:caif_netlink_parms(): no params data found [ 381.331793][T15641] tipc: Started in network mode [ 381.337822][T15641] tipc: Node identity 62dc9edd711a, cluster identity 4711 [ 381.348661][T15641] tipc: Enabled bearer , priority 0 [ 381.429718][T15641] veth1_vlan: mtu less than device minimum [ 381.438429][T15639] syzkaller0: entered promiscuous mode [ 381.444046][T15639] syzkaller0: entered allmulticast mode [ 381.490095][T15640] tipc: Disabling bearer [ 381.609699][T15519] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 381.616716][ T5844] Bluetooth: hci6: command tx timeout [ 381.683373][T15519] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 381.758879][T15519] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 381.816998][T15519] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 381.830201][T15543] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.842427][T15543] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.850331][T15543] bridge_slave_0: entered allmulticast mode [ 381.866212][T15543] bridge_slave_0: entered promiscuous mode [ 381.915369][T15543] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.922877][T15543] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.931324][T15543] bridge_slave_1: entered allmulticast mode [ 381.940732][T15543] bridge_slave_1: entered promiscuous mode [ 381.945445][ T5844] Bluetooth: hci2: command tx timeout [ 382.150643][T15543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.177589][T15543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.313830][T15543] team0: Port device team_slave_0 added [ 382.331975][T15543] team0: Port device team_slave_1 added [ 382.452531][T15543] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.468607][T15543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.506784][T15543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.527868][T15543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.541178][T15543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.577909][T15543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.733723][T15705] syzkaller1: entered promiscuous mode [ 382.745734][T15705] syzkaller1: entered allmulticast mode [ 382.777241][T15543] hsr_slave_0: entered promiscuous mode [ 382.784025][T15543] hsr_slave_1: entered promiscuous mode [ 382.793451][T15543] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 382.801469][T15543] Cannot create hsr debugfs directory [ 382.929292][T15519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.009361][T15721] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2711'. [ 383.083109][T15519] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.169449][T15730] openvswitch: netlink: Port 10289156 exceeds max allowable 65535 [ 383.197178][T14713] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.204415][T14713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.217924][T15732] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2715'. [ 383.252365][T14713] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.259574][T14713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.281234][T15732] bridge0: port 3(dummy0) entered disabled state [ 383.287813][T15732] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.296052][T15732] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.435453][T15735] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2716'. [ 383.586149][T15744] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input7 [ 383.636880][T15743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2718'. [ 383.694740][ T5844] Bluetooth: hci6: command tx timeout [ 383.834831][T15751] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2719'. [ 383.870458][T15751] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2719'. [ 383.934071][T15519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.017230][ T5844] Bluetooth: hci2: command tx timeout [ 384.059307][T15757] tipc: Enabled bearer , priority 0 [ 384.181649][T15519] veth0_vlan: entered promiscuous mode [ 384.191952][T15763] netlink: 'syz.1.2723': attribute type 4 has an invalid length. [ 384.216398][T15543] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 384.262348][T15519] veth1_vlan: entered promiscuous mode [ 384.271125][T15543] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 384.291471][T15543] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 384.321924][T15543] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 384.419995][T15775] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 384.427325][T15775] IPv6: NLM_F_CREATE should be set when creating new route [ 384.561561][T15519] veth0_macvtap: entered promiscuous mode [ 384.605600][T15519] veth1_macvtap: entered promiscuous mode [ 384.729218][T15519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.748501][T15784] openvswitch: netlink: IPv4 tunnel dst address is zero [ 384.776319][T15519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.827628][T15785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2730'. [ 384.843325][T15519] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.860476][T15519] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.871547][T15519] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.885017][T15519] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.979449][T15543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.049821][T15543] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.092859][T14773] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.100048][T14773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.149745][T14771] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.165685][T14771] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.176737][T14773] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.183945][T14773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.488983][T14770] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.504797][T15794] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2736'. [ 385.531215][T15543] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 385.531266][T14770] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.746201][T15802] netlink: 'syz.5.2737': attribute type 29 has an invalid length. [ 385.777553][ T5844] Bluetooth: hci6: command tx timeout [ 385.822816][T15802] netlink: 'syz.5.2737': attribute type 29 has an invalid length. [ 386.021831][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 386.031972][T15819] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2741'. [ 386.043864][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 386.058645][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 386.075751][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 386.089020][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 386.108631][T15823] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2741'. [ 386.142585][T15819] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 386.190780][T15823] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 386.364271][T15543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.493997][T15543] veth0_vlan: entered promiscuous mode [ 386.497163][T15825] xt_HMARK: proto mask must be zero with L3 mode [ 386.559093][T15543] veth1_vlan: entered promiscuous mode [ 386.807851][T15543] veth0_macvtap: entered promiscuous mode [ 386.824996][T15543] veth1_macvtap: entered promiscuous mode [ 386.871440][T15837] bond0: entered promiscuous mode [ 386.912617][T15837] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 386.935973][T15837] hsr1: entered allmulticast mode [ 386.941170][T15837] bond0: entered allmulticast mode [ 387.077101][T15543] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.123531][T15543] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.275705][T15854] netlink: 'syz.0.2751': attribute type 1 has an invalid length. [ 387.303886][T15543] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.313221][T15543] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.327045][T15543] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.335997][T15543] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.696736][T14773] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.704807][T14773] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.846644][T14713] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.858087][T14713] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.953271][T15814] chnl_net:caif_netlink_parms(): no params data found [ 388.078493][T15881] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2758'. [ 388.175513][ T5851] Bluetooth: hci1: command tx timeout [ 388.354417][T14771] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.521789][T14771] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.555358][T15814] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.562623][T15814] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.570024][T15814] bridge_slave_0: entered allmulticast mode [ 388.579063][T15814] bridge_slave_0: entered promiscuous mode [ 388.589457][T15814] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.596845][T15814] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.604108][T15814] bridge_slave_1: entered allmulticast mode [ 388.612167][T15814] bridge_slave_1: entered promiscuous mode [ 388.679148][T14771] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.709604][T15814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.723931][T15814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.782520][T15814] team0: Port device team_slave_0 added [ 388.803291][T14771] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.822261][T15814] team0: Port device team_slave_1 added [ 388.862368][T15814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.870228][T15814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.900468][T15814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.918620][T15814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.926052][T15814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.952235][T15814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.017160][T15814] hsr_slave_0: entered promiscuous mode [ 389.023785][T15814] hsr_slave_1: entered promiscuous mode [ 389.030403][T15814] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 389.038190][T15814] Cannot create hsr debugfs directory [ 389.198093][T14771] bridge_slave_1: left allmulticast mode [ 389.203791][T14771] bridge_slave_1: left promiscuous mode [ 389.210080][T14771] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.222293][T14771] bridge_slave_0: left allmulticast mode [ 389.229718][T14771] bridge_slave_0: left promiscuous mode [ 389.236346][T14771] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.576890][T14771] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.588961][T14771] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.600698][T14771] bond0 (unregistering): Released all slaves [ 389.670448][T15814] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.759606][T15814] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.834440][T15814] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.934250][T15814] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.196402][T14765] veth0_to_bond: left promiscuous mode [ 390.255725][ T5851] Bluetooth: hci1: command tx timeout [ 390.402522][T15911] x_tables: duplicate entry at hook 3 [ 390.529598][T15916] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2767'. [ 390.545139][T14771] hsr_slave_0: left promiscuous mode [ 390.564531][T14771] hsr_slave_1: left promiscuous mode [ 390.585061][T14771] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.592545][T14771] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.637717][T14771] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.654561][T14771] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.754291][T14771] veth1_macvtap: left promiscuous mode [ 390.767318][T14771] veth0_macvtap: left promiscuous mode [ 390.773277][T14771] veth1_vlan: left promiscuous mode [ 390.788522][T14771] veth0_vlan: left promiscuous mode [ 390.938487][ T5844] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 390.947930][ T5844] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 390.957291][ T5844] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 390.966296][ T5844] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 390.975711][ T5844] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 391.563556][T14771] team0 (unregistering): Port device team_slave_1 removed [ 391.612323][T14771] team0 (unregistering): Port device team_slave_0 removed [ 392.041113][T15918] netlink: 'syz.0.2768': attribute type 12 has an invalid length. [ 392.054047][T15918] netlink: 'syz.0.2768': attribute type 29 has an invalid length. [ 392.063557][T15918] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2768'. [ 392.079703][T15918] netlink: 59 bytes leftover after parsing attributes in process `syz.0.2768'. [ 392.091285][T15919] netlink: 'syz.0.2768': attribute type 12 has an invalid length. [ 392.099918][T15919] netlink: 'syz.0.2768': attribute type 29 has an invalid length. [ 392.108438][T15919] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2768'. [ 392.117793][T15919] netlink: 59 bytes leftover after parsing attributes in process `syz.0.2768'. [ 392.226544][T15814] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 392.252407][T15814] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 392.323364][T15814] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 392.334873][ T5851] Bluetooth: hci1: command tx timeout [ 392.443626][T15814] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 392.653206][T15962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2779'. [ 392.663103][T15960] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.2778'. [ 392.745177][T15967] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 392.960580][T15814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.008782][T15814] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.039605][T15972] netlink: 'syz.0.2781': attribute type 12 has an invalid length. [ 393.054846][ T5851] Bluetooth: hci6: command tx timeout [ 393.107827][T14771] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.115064][T14771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.265956][T14768] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.273177][T14768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.683081][T15985] team0 (unregistering): Port device team_slave_0 removed [ 393.702414][T15985] team0 (unregistering): Port device team_slave_1 removed [ 393.713384][T15985] team0 (unregistering): Port device geneve0 removed [ 394.069998][T16008] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2793'. [ 394.085436][T16008] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2793'. [ 394.152243][T15931] chnl_net:caif_netlink_parms(): no params data found [ 394.415573][ T5851] Bluetooth: hci1: command tx timeout [ 394.587220][T15931] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.594408][T15931] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.606640][T16032] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2797'. [ 394.615753][T15931] bridge_slave_0: entered allmulticast mode [ 394.636858][T15931] bridge_slave_0: entered promiscuous mode [ 394.666019][T15814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.680276][T15931] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.693239][T16035] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2798'. [ 394.705451][T15931] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.712858][T15931] bridge_slave_1: entered allmulticast mode [ 394.737079][T15931] bridge_slave_1: entered promiscuous mode [ 394.843026][T16046] xt_hashlimit: invalid rate [ 395.135195][ T5851] Bluetooth: hci6: command tx timeout [ 395.187001][T15931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.236866][T15931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.255965][T16055] syzkaller1: entered promiscuous mode [ 395.261490][T16055] syzkaller1: entered allmulticast mode [ 395.282252][T16055] netlink: 'syz.5.2802': attribute type 39 has an invalid length. [ 395.426558][T16057] bond1: entered promiscuous mode [ 395.431796][T16057] bond1: entered allmulticast mode [ 395.437857][T16057] 8021q: adding VLAN 0 to HW filter on device bond1 [ 395.460396][T15931] team0: Port device team_slave_0 added [ 395.496818][T15931] team0: Port device team_slave_1 added [ 395.622599][T15931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.632684][T15931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.662674][T15931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.689700][T15931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.712727][T15931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.751366][T15931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.838350][T15814] veth0_vlan: entered promiscuous mode [ 395.864235][T16078] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.872958][T16078] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.976546][T15814] veth1_vlan: entered promiscuous mode [ 395.999585][T15931] hsr_slave_0: entered promiscuous mode [ 396.030039][T15931] hsr_slave_1: entered promiscuous mode [ 396.050438][T15931] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 396.069146][T15931] Cannot create hsr debugfs directory [ 396.109592][T16088] openvswitch: netlink: Message has 199 unknown bytes. [ 396.117080][T16088] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.284242][T15814] veth0_macvtap: entered promiscuous mode [ 396.365333][T15814] veth1_macvtap: entered promiscuous mode [ 396.388946][T16099] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2815'. [ 396.422565][T16099] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2815'. [ 396.463458][T16099] geneve3: entered promiscuous mode [ 396.472905][T16099] geneve3: entered allmulticast mode [ 396.492025][T15814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.593197][T16107] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2819'. [ 396.605107][T16105] netlink: 'syz.1.2817': attribute type 29 has an invalid length. [ 396.605819][T16107] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2819'. [ 396.624988][T16108] netlink: 'syz.1.2817': attribute type 29 has an invalid length. [ 396.636398][T15814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 396.645643][T16107] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2819'. [ 396.679445][T16111] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2818'. [ 396.708577][T15814] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.733212][T15814] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.753578][T15814] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.763234][T15814] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.919465][T16119] netlink: 'syz.1.2822': attribute type 1 has an invalid length. [ 396.943794][T16121] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 397.216668][ T5851] Bluetooth: hci6: command tx timeout [ 397.226352][T14768] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.234354][T14768] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.349634][T16132] openvswitch: netlink: IP tunnel dst address not specified [ 397.402886][T16127] netlink: zone id is out of range [ 397.404165][T15931] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 397.414953][T16127] netlink: zone id is out of range [ 397.420158][T16127] netlink: zone id is out of range [ 397.429146][T16127] netlink: zone id is out of range [ 397.434370][T16127] netlink: zone id is out of range [ 397.463091][T14771] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.472220][T15931] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 397.480260][T14771] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.493394][T15931] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 397.518978][T15931] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 397.661953][T16147] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20001 [ 398.100584][T14768] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.247315][T14768] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.384758][T15931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.478356][T14768] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.574392][T15931] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.696973][T16172] xt_l2tp: v2 doesn't support IP mode [ 398.749037][T14768] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.777816][T14770] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.785095][T14770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.803316][T14770] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.810531][T14770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.120923][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 399.133955][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 399.165011][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 399.192418][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 399.202971][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 399.216450][T16184] __nla_validate_parse: 1 callbacks suppressed [ 399.216477][T16184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2837'. [ 399.244809][T16180] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2836'. [ 399.281342][T15931] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 399.295664][ T5851] Bluetooth: hci6: command tx timeout [ 399.378285][T14768] bridge_slave_1: left allmulticast mode [ 399.391581][T14768] bridge_slave_1: left promiscuous mode [ 399.400054][T14768] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.471784][T14768] bridge_slave_0: left allmulticast mode [ 399.491881][T14768] bridge_slave_0: left promiscuous mode [ 399.505191][T14768] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.997916][T14768] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 400.010233][T14768] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 400.022218][T14768] bond0 (unregistering): Released all slaves [ 400.240575][T16198] netlink: 'syz.1.2841': attribute type 7 has an invalid length. [ 400.462622][T16198] : entered promiscuous mode [ 400.552189][T16202] syzkaller1: entered promiscuous mode [ 400.573386][T16202] syzkaller1: entered allmulticast mode [ 400.709869][T16209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2842'. [ 400.884168][T15931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.114286][T15931] veth0_vlan: entered promiscuous mode [ 401.150850][T15931] veth1_vlan: entered promiscuous mode [ 401.295754][ T5851] Bluetooth: hci1: command tx timeout [ 401.448139][T15931] veth0_macvtap: entered promiscuous mode [ 401.487936][T15931] veth1_macvtap: entered promiscuous mode [ 401.552145][T15931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.564278][T16225] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2847'. [ 401.593919][T16225] unsupported nlmsg_type 40 [ 401.600078][T15931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.660336][T15931] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.697160][T15931] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.722512][T15931] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.783349][T15931] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.972275][T16239] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 402.127636][T16247] netlink: 'syz.0.2853': attribute type 11 has an invalid length. [ 402.146385][T16247] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2853'. [ 402.224682][T14761] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.232814][T14761] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.509334][T14765] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.533242][T14765] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.781720][T16262] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2857'. [ 402.968792][T14768] hsr_slave_0: left promiscuous mode [ 402.994812][T14768] hsr_slave_1: left promiscuous mode [ 403.003376][T14768] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.031419][T14768] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.052754][T14768] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.063421][T14768] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.120988][T14768] veth1_macvtap: left promiscuous mode [ 403.131007][T14768] veth0_macvtap: left promiscuous mode [ 403.137137][T14768] veth1_vlan: left promiscuous mode [ 403.142757][T14768] veth0_vlan: left promiscuous mode [ 403.378578][ T5851] Bluetooth: hci1: command tx timeout [ 403.703882][T14768] team0 (unregistering): Port device team_slave_1 removed [ 403.746270][T14768] team0 (unregistering): Port device team_slave_0 removed [ 404.181996][T16181] chnl_net:caif_netlink_parms(): no params data found [ 404.354750][T16181] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.362201][T16181] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.370618][T16181] bridge_slave_0: entered allmulticast mode [ 404.379894][T16181] bridge_slave_0: entered promiscuous mode [ 404.389912][T16181] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.397465][T16181] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.405544][T16181] bridge_slave_1: entered allmulticast mode [ 404.413302][T16181] bridge_slave_1: entered promiscuous mode [ 404.454445][T16181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.468198][T16181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.511324][T16181] team0: Port device team_slave_0 added [ 404.521034][T16181] team0: Port device team_slave_1 added [ 404.561851][T16181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.569046][T16181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.596010][T16181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.609444][T16181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.616719][T16181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.643304][T16181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.689528][T14768] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.743362][T16181] hsr_slave_0: entered promiscuous mode [ 404.751160][T16181] hsr_slave_1: entered promiscuous mode [ 404.758024][T16181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 404.765899][T16181] Cannot create hsr debugfs directory [ 404.864217][T14768] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.954984][T14768] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.037181][T14768] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.120055][T16276] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 405.218618][T16278] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2860'. [ 405.278080][T16278] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2860'. [ 405.346030][T16281] netlink: 'syz.1.2861': attribute type 83 has an invalid length. [ 405.455172][ T5851] Bluetooth: hci1: command tx timeout [ 405.470474][T14768] bridge_slave_1: left allmulticast mode [ 405.480035][T14768] bridge_slave_1: left promiscuous mode [ 405.508046][T14768] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.535241][ C0] net_ratelimit: 1 callbacks suppressed [ 405.535259][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.554292][T14768] bridge_slave_0: left allmulticast mode [ 405.562314][T14768] bridge_slave_0: left promiscuous mode [ 405.573799][T14768] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.593505][ T5844] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 405.603539][ T5844] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 405.611558][ T5844] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 405.620435][ T5844] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 405.628457][ T5844] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 406.101142][T14768] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 406.113802][T14768] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 406.129935][T14768] bond0 (unregistering): Released all slaves [ 406.322475][T16181] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 406.354744][T16181] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 406.456689][T16181] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 406.509153][T16181] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 406.530261][T16311] netlink: 'syz.5.2867': attribute type 9 has an invalid length. [ 406.681932][T16320] netlink: 'syz.1.2868': attribute type 1 has an invalid length. [ 406.690137][T16320] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 406.721811][T16321] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2869'. [ 406.869821][T16181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.920144][T16181] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.960656][T14771] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.967921][T14771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.037839][T14771] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.045120][T14771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.110112][T16181] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 407.130883][T16181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 407.540872][ T5844] Bluetooth: hci1: command tx timeout [ 407.646194][T16346] netlink: 'syz.5.2875': attribute type 7 has an invalid length. [ 407.654077][T16346] netlink: 'syz.5.2875': attribute type 8 has an invalid length. [ 407.696026][ T5844] Bluetooth: hci6: command tx timeout [ 407.910000][T16350] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 407.932277][T14768] hsr_slave_0: left promiscuous mode [ 407.946602][T14768] hsr_slave_1: left promiscuous mode [ 407.956015][T14768] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.963595][T14768] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.979653][T14768] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.988899][T14768] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.024400][T14768] veth1_macvtap: left promiscuous mode [ 408.032344][T14768] veth0_macvtap: left promiscuous mode [ 408.038397][T14768] veth1_vlan: left promiscuous mode [ 408.054848][T14768] veth0_vlan: left promiscuous mode [ 408.075379][T16353] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2877'. [ 408.084444][T16353] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2877'. [ 408.601604][T14768] team0 (unregistering): Port device team_slave_1 removed [ 408.647067][T14768] team0 (unregistering): Port device team_slave_0 removed [ 409.086760][T16291] chnl_net:caif_netlink_parms(): no params data found [ 409.127761][T16181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.580843][T16291] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.595883][T16291] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.623765][T16291] bridge_slave_0: entered allmulticast mode [ 409.668685][T16291] bridge_slave_0: entered promiscuous mode [ 409.700301][T16291] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.735881][T16291] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.743196][T16291] bridge_slave_1: entered allmulticast mode [ 409.761154][T16291] bridge_slave_1: entered promiscuous mode [ 409.775006][ T5851] Bluetooth: hci6: command tx timeout [ 409.937259][T14771] wlan0: Trigger new scan to find an IBSS to join [ 409.948115][T16291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.999435][T16291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.023047][T16181] veth0_vlan: entered promiscuous mode [ 410.121564][T16291] team0: Port device team_slave_0 added [ 410.142301][T16291] team0: Port device team_slave_1 added [ 410.215741][T16181] veth1_vlan: entered promiscuous mode [ 410.233283][T16291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.243918][T16291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.288097][T16291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.303963][T16291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.311176][T16291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.338858][T16291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.515028][T16291] hsr_slave_0: entered promiscuous mode [ 410.531712][T16291] hsr_slave_1: entered promiscuous mode [ 410.552346][T16291] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 410.572694][T16291] Cannot create hsr debugfs directory [ 410.870146][T16181] veth0_macvtap: entered promiscuous mode [ 410.890392][T16181] veth1_macvtap: entered promiscuous mode [ 410.972818][T16399] nftables ruleset with unbound chain [ 411.173853][T16181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.210621][T16181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 411.246532][T16181] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.263984][T16181] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.275228][T16181] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.283970][T16181] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.455212][ T5851] Bluetooth: hci4: command 0x0405 tx timeout [ 411.532011][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.552139][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.619091][T14770] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.634928][T14770] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.678334][T16420] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2894'. [ 411.779723][T16291] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 411.826834][T16291] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 411.836519][T16428] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input8 [ 411.855550][ T5844] Bluetooth: hci6: command tx timeout [ 411.882466][T16291] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 412.011804][T16291] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 412.248615][T14765] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.376995][T14765] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.421377][T16291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.480700][T14765] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.540106][T16291] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.571604][T14770] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.578876][T14770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.664676][T14765] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.694099][T14770] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.701407][T14770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.896789][ T49] wlan0: Trigger new scan to find an IBSS to join [ 413.088463][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 413.097279][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 413.105511][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 413.113613][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 413.122488][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 413.192769][T14765] bridge_slave_1: left allmulticast mode [ 413.220348][T14765] bridge_slave_1: left promiscuous mode [ 413.231070][T14765] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.242174][T14765] bridge_slave_0: left allmulticast mode [ 413.248239][T14765] bridge_slave_0: left promiscuous mode [ 413.254530][T14765] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.682020][T14765] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 413.699935][T14765] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.710457][T14765] bond0 (unregistering): Released all slaves [ 413.754336][T16468] bond0: entered promiscuous mode [ 413.761382][T16468] bond_slave_0: entered promiscuous mode [ 413.770258][T16468] bond_slave_1: entered promiscuous mode [ 413.816871][T16474] bridge0: port 1(batadv1) entered blocking state [ 413.831258][T16474] bridge0: port 1(batadv1) entered disabled state [ 413.849981][T16474] batadv1: entered allmulticast mode [ 413.868298][T16474] batadv1: entered promiscuous mode [ 413.935316][ T5844] Bluetooth: hci6: command tx timeout [ 414.188156][T16291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.296852][T14771] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 414.306935][T14771] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 414.307694][T16291] veth0_vlan: entered promiscuous mode [ 414.363209][T16487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2907'. [ 414.374056][T16487] x_tables: ip6_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 414.391758][T16291] veth1_vlan: entered promiscuous mode [ 414.461927][T16491] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2910'. [ 414.491809][T16492] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2910'. [ 414.520468][T16491] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2910'. [ 414.528982][T16291] veth0_macvtap: entered promiscuous mode [ 414.559535][T16291] veth1_macvtap: entered promiscuous mode [ 414.609186][T16291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.671395][T16291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.705629][T16291] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.714398][T16291] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.733653][T16291] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.764554][T16291] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.918304][T14771] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.940350][T14771] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.006971][T14766] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.034569][T14766] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.215340][ T5851] Bluetooth: hci1: command tx timeout [ 415.486550][T14765] hsr_slave_0: left promiscuous mode [ 415.492652][T14765] hsr_slave_1: left promiscuous mode [ 415.505439][T14765] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.513560][T14765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 415.531985][T14765] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.541316][T14765] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.601293][T14765] veth1_macvtap: left promiscuous mode [ 415.611676][T14765] veth0_macvtap: left promiscuous mode [ 415.624735][T14765] veth1_vlan: left promiscuous mode [ 415.630307][T14765] veth0_vlan: left promiscuous mode [ 415.945325][ T49] wlan0: Trigger new scan to find an IBSS to join [ 415.970719][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 415.986855][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 416.016791][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 416.025681][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 416.033457][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 416.403530][T14765] team0 (unregistering): Port device team_slave_1 removed [ 416.462680][T14765] team0 (unregistering): Port device team_slave_0 removed [ 416.574789][ T5851] Bluetooth: hci5: command 0x0406 tx timeout [ 416.896205][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.259193][T16463] chnl_net:caif_netlink_parms(): no params data found [ 417.299581][ T5844] Bluetooth: hci1: command tx timeout [ 417.434270][T14771] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.532774][T16463] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.545071][T16463] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.554245][T16463] bridge_slave_0: entered allmulticast mode [ 417.563924][T16463] bridge_slave_0: entered promiscuous mode [ 417.602773][T14771] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.618764][T16463] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.626379][T16463] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.633572][T16463] bridge_slave_1: entered allmulticast mode [ 417.640945][T16463] bridge_slave_1: entered promiscuous mode [ 417.693773][T16463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.726563][T14771] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.743628][T16463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.819859][T14771] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.841346][T16463] team0: Port device team_slave_0 added [ 417.851010][T16463] team0: Port device team_slave_1 added [ 417.906336][T16463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.913333][T16463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.940439][T16463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.955130][T16463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.964043][T16463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.992329][T16463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.095132][ T5844] Bluetooth: hci0: command tx timeout [ 418.186529][T16463] hsr_slave_0: entered promiscuous mode [ 418.193259][T16463] hsr_slave_1: entered promiscuous mode [ 418.207608][T16463] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 418.221075][T16463] Cannot create hsr debugfs directory [ 418.431575][T16498] chnl_net:caif_netlink_parms(): no params data found [ 418.489576][ T5851] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 418.507063][ T5851] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 418.515551][ T5851] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 418.524084][ T5851] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 418.532167][ T5851] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 418.690105][T16498] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.697879][T16498] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.707651][T16498] bridge_slave_0: entered allmulticast mode [ 418.715661][T16498] bridge_slave_0: entered promiscuous mode [ 418.739878][T16498] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.747186][T16498] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.754585][T16498] bridge_slave_1: entered allmulticast mode [ 418.762585][T16498] bridge_slave_1: entered promiscuous mode [ 418.827265][T16498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.866348][T16498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.004239][T16498] team0: Port device team_slave_0 added [ 419.018599][T16498] team0: Port device team_slave_1 added [ 419.185435][T16498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.224903][T16498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.274985][T16498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.323106][T16498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.343265][T16498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.382121][T16498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.384913][ T5844] Bluetooth: hci1: command tx timeout [ 419.475655][T14771] bridge_slave_1: left allmulticast mode [ 419.481360][T14771] bridge_slave_1: left promiscuous mode [ 419.504940][T14771] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.538454][T14771] bridge_slave_0: left allmulticast mode [ 419.544182][T14771] bridge_slave_0: left promiscuous mode [ 419.558539][T14771] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.597058][ T5851] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 419.607897][T14771] batadv1: left allmulticast mode [ 419.613168][T14771] batadv1: left promiscuous mode [ 419.622654][T14771] bridge0: port 1(batadv1) entered disabled state [ 419.625455][ T5851] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 419.641514][ T5851] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 419.650060][ T5851] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 419.658234][ T5851] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 420.027827][T14771] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.042243][T14771] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.053299][T14771] bond0 (unregistering): Released all slaves [ 420.174892][ T5844] Bluetooth: hci0: command tx timeout [ 420.328409][T14771] bond4 (unregistering): (slave gretap3): Releasing active interface [ 420.574878][ T5844] Bluetooth: hci6: command tx timeout [ 420.811202][T14771] bond1 (unregistering): Released all slaves [ 420.826172][T14771] bond2 (unregistering): Released all slaves [ 420.841416][T14771] bond3 (unregistering): Released all slaves [ 420.855975][T14771] bond4 (unregistering): Released all slaves [ 420.964125][T14771] bond0 (unregistering): left promiscuous mode [ 420.989216][T14771] bond0 (unregistering): Released all slaves [ 421.101683][T14771] bond5 (unregistering): Released all slaves [ 421.275282][T16498] hsr_slave_0: entered promiscuous mode [ 421.281759][T16498] hsr_slave_1: entered promiscuous mode [ 421.288434][T16498] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 421.297634][T16498] Cannot create hsr debugfs directory [ 421.310187][T14771] : left promiscuous mode [ 421.327720][T16463] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 421.338848][T16463] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 421.361052][T16463] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 421.453093][T16463] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 421.460591][ T5844] Bluetooth: hci1: command tx timeout [ 421.478999][T14771] tipc: Disabling bearer [ 421.491425][T14771] tipc: Left network mode [ 421.695299][ T5844] Bluetooth: hci7: command tx timeout [ 422.253188][T16510] chnl_net:caif_netlink_parms(): no params data found [ 422.260689][ T5844] Bluetooth: hci0: command tx timeout [ 422.661578][T16463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.668792][ T5844] Bluetooth: hci6: command tx timeout [ 423.046702][T16510] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.053900][T16510] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.070483][T16510] bridge_slave_0: entered allmulticast mode [ 423.098427][T16510] bridge_slave_0: entered promiscuous mode [ 423.138365][T16463] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.195436][T16510] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.202671][T16510] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.210412][T16510] bridge_slave_1: entered allmulticast mode [ 423.219137][T16510] bridge_slave_1: entered promiscuous mode [ 423.246991][T14771] hsr_slave_0: left promiscuous mode [ 423.252971][T14771] hsr_slave_1: left promiscuous mode [ 423.259959][T14771] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.267667][T14771] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.276103][T14771] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.283523][T14771] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.297790][T14771] hsr_slave_0: left promiscuous mode [ 423.303845][T14771] hsr_slave_1: left promiscuous mode [ 423.310071][T14771] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.319228][T14771] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.350286][T14771] veth1_macvtap: left promiscuous mode [ 423.356160][T14771] veth0_macvtap: left promiscuous mode [ 423.361763][T14771] veth1_vlan: left promiscuous mode [ 423.368243][T14771] veth0_vlan: left promiscuous mode [ 423.784658][ T5844] Bluetooth: hci7: command tx timeout [ 423.825911][T14771] team0 (unregistering): Port device team_slave_1 removed [ 423.865370][T14771] team0 (unregistering): Port device team_slave_0 removed [ 424.334887][ T5844] Bluetooth: hci0: command tx timeout [ 424.751881][ T5844] Bluetooth: hci6: command tx timeout [ 425.051025][T16510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.070987][T14770] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.078168][T14770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.117755][T16510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.153816][T14770] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.161008][T14770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.169592][T16516] chnl_net:caif_netlink_parms(): no params data found [ 425.213012][T16510] team0: Port device team_slave_0 added [ 425.230934][T16510] team0: Port device team_slave_1 added [ 425.286846][T16510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.293835][T16510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.332222][T16510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.349722][T16498] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 425.363819][T16498] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 425.413272][T16510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.427120][T16510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.456311][T16510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.468259][T16498] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 425.488554][T16498] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 425.672459][T16516] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.681073][T16516] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.688372][T16516] bridge_slave_0: entered allmulticast mode [ 425.697346][T16516] bridge_slave_0: entered promiscuous mode [ 425.706076][T16516] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.713306][T16516] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.720759][T16516] bridge_slave_1: entered allmulticast mode [ 425.729260][T16516] bridge_slave_1: entered promiscuous mode [ 425.758805][T16510] hsr_slave_0: entered promiscuous mode [ 425.766942][T16510] hsr_slave_1: entered promiscuous mode [ 425.865229][ T5844] Bluetooth: hci7: command tx timeout [ 425.873490][T16516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.887978][T16516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.926189][T14771] IPVS: stop unused estimator thread 0... [ 426.031541][T16516] team0: Port device team_slave_0 added [ 426.044209][T16516] team0: Port device team_slave_1 added [ 426.164020][T16516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.171931][T16516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.200496][T16516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.241150][T16516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.248980][T16516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.277941][T16516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.388815][T16498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.406024][T16516] hsr_slave_0: entered promiscuous mode [ 426.412478][T16516] hsr_slave_1: entered promiscuous mode [ 426.420420][T16516] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 426.429589][T16516] Cannot create hsr debugfs directory [ 426.450146][T16463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.575577][T16498] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.651526][T14768] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.658755][T14768] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.702663][T14768] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.709918][T14768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.824677][ T5844] Bluetooth: hci6: command tx timeout [ 426.934965][T16510] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 426.959484][T16510] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 426.998063][T16510] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 427.062048][T16510] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 427.137895][T16516] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 427.157233][T16516] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 427.175949][T16516] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 427.215687][T16516] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 427.277276][T16463] veth0_vlan: entered promiscuous mode [ 427.317806][T16463] veth1_vlan: entered promiscuous mode [ 427.335640][T16498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.451934][T16463] veth0_macvtap: entered promiscuous mode [ 427.463903][T16463] veth1_macvtap: entered promiscuous mode [ 427.499366][T16498] veth0_vlan: entered promiscuous mode [ 427.519079][T16463] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 427.549033][T16510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.568770][T16463] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 427.590900][T16463] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.600727][T16463] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.611270][T16463] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.623826][T16463] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.665867][T16510] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.673267][T16498] veth1_vlan: entered promiscuous mode [ 427.693543][T16516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.729611][T14761] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.736847][T14761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.761239][T14761] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.768431][T14761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.870946][T14766] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.889367][T16498] veth0_macvtap: entered promiscuous mode [ 427.905463][T14766] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.906438][T16516] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.936429][ T5844] Bluetooth: hci7: command tx timeout [ 427.963864][T16498] veth1_macvtap: entered promiscuous mode [ 427.994092][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.001284][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.013382][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.020536][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.066434][T14771] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.087239][T14771] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.143302][T16498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.203326][T16498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.233094][T16498] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.244904][T16498] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.253881][T16498] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.265822][T16498] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.361760][T16516] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 428.541115][T14765] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.679316][T14765] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.738304][T16510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.796736][T14765] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.846247][T14770] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.854114][T14770] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.924027][T14765] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.991421][T14768] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.007698][T14768] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.029826][T16516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.082469][T16510] veth0_vlan: entered promiscuous mode [ 429.110202][T16510] veth1_vlan: entered promiscuous mode [ 429.309966][T16510] veth0_macvtap: entered promiscuous mode [ 429.368306][T16510] veth1_macvtap: entered promiscuous mode [ 429.421199][T16510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.443023][T16510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.454434][T14765] bridge_slave_1: left allmulticast mode [ 429.460779][T14765] bridge_slave_1: left promiscuous mode [ 429.476391][T14765] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.491058][T14765] bridge_slave_0: left allmulticast mode [ 429.500708][T14765] bridge_slave_0: left promiscuous mode [ 429.507324][T14765] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.887568][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 429.897410][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 429.905685][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 429.928465][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 429.937912][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 430.164125][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 430.180449][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 430.188393][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 430.198553][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 430.219840][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 430.472387][T14765] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.485891][T14765] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.507233][T14765] bond0 (unregistering): Released all slaves [ 430.542552][T16510] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.552390][ T5851] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 430.563001][ T5851] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 430.571419][ T5851] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 430.579222][T16510] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.588437][T16510] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.594826][ T5851] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 430.598192][T16510] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.618027][ T5851] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 431.053614][T16516] veth0_vlan: entered promiscuous mode [ 431.064128][T14770] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.075856][T14770] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.213545][T14771] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.240017][T14771] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.248010][T16516] veth1_vlan: entered promiscuous mode [ 431.313778][T16516] veth0_macvtap: entered promiscuous mode [ 431.324444][T16516] veth1_macvtap: entered promiscuous mode [ 431.386667][T16516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.416862][T16516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.443312][T16516] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.464647][T16516] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.473468][T16516] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.496414][T16516] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.808014][T14768] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.834894][T14768] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.015479][ T5844] Bluetooth: hci0: command tx timeout [ 432.042988][T14771] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.065175][T14771] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.255695][ T5844] Bluetooth: hci1: command tx timeout [ 432.401567][T16582] chnl_net:caif_netlink_parms(): no params data found [ 432.681128][T16582] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.694690][T16582] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.702008][T16582] bridge_slave_0: entered allmulticast mode [ 432.711667][T16582] bridge_slave_0: entered promiscuous mode [ 432.721867][T16582] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.729061][T16582] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.736520][ T5844] Bluetooth: hci8: command tx timeout [ 432.742904][T16582] bridge_slave_1: entered allmulticast mode [ 432.751398][T16582] bridge_slave_1: entered promiscuous mode [ 432.848492][T16582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.888481][T16582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.973376][T16582] team0: Port device team_slave_0 added [ 433.033911][T16582] team0: Port device team_slave_1 added [ 433.249533][T16582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.259073][T16582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.286153][T16582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.303050][T16582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.310110][T16582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.338658][T16582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.404019][T14765] hsr_slave_0: left promiscuous mode [ 433.410341][T14765] hsr_slave_1: left promiscuous mode [ 433.416741][T14765] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 433.428432][T14765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 433.438811][T14765] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 433.448002][T14765] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 433.472569][T14765] veth1_macvtap: left promiscuous mode [ 433.478271][T14765] veth0_macvtap: left promiscuous mode [ 433.485511][T14765] veth1_vlan: left promiscuous mode [ 433.490824][T14765] veth0_vlan: left promiscuous mode [ 433.995975][T14765] team0 (unregistering): Port device team_slave_1 removed [ 434.055978][T16602] netlink: 9 bytes leftover after parsing attributes in process `syz.7.2915'. [ 434.097479][T14765] team0 (unregistering): Port device team_slave_0 removed [ 434.104827][ T5844] Bluetooth: hci0: command tx timeout [ 434.113527][T16603] netlink: 5 bytes leftover after parsing attributes in process `syz.7.2915'. [ 434.304396][ T5851] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 434.314067][ T5851] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 434.330462][ T5851] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 434.338441][ T5841] Bluetooth: hci1: command tx timeout [ 434.348855][ T5851] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 434.359826][ T5851] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 434.690048][T16602] gretap0: entered promiscuous mode [ 434.713997][T16603] 0ªX¹¦D: renamed from gretap0 [ 434.721217][T16603] 0ªX¹¦D: left promiscuous mode [ 434.734097][T16603] 0ªX¹¦D: entered allmulticast mode [ 434.744428][T16603] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 434.823960][ T5851] Bluetooth: hci8: command tx timeout [ 434.848687][T16584] chnl_net:caif_netlink_parms(): no params data found [ 434.899493][T16582] hsr_slave_0: entered promiscuous mode [ 434.906466][T16582] hsr_slave_1: entered promiscuous mode [ 434.913020][T16582] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 434.920874][T16582] Cannot create hsr debugfs directory [ 435.329460][T16584] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.344715][T16584] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.351960][T16584] bridge_slave_0: entered allmulticast mode [ 435.365839][T16584] bridge_slave_0: entered promiscuous mode [ 435.387074][T16584] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.394379][T16584] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.410910][T16584] bridge_slave_1: entered allmulticast mode [ 435.420935][T16584] bridge_slave_1: entered promiscuous mode [ 435.435983][T16587] chnl_net:caif_netlink_parms(): no params data found [ 435.661563][T16584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.748907][T14765] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.776443][T16584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.886495][T14765] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.935466][T16584] team0: Port device team_slave_0 added [ 435.966379][T16587] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.973986][T16587] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.997225][T16587] bridge_slave_0: entered allmulticast mode [ 436.006022][T16587] bridge_slave_0: entered promiscuous mode [ 436.015436][T16587] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.022674][T16587] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.030004][T16587] bridge_slave_1: entered allmulticast mode [ 436.037849][T16587] bridge_slave_1: entered promiscuous mode [ 436.068433][T14765] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.097146][T16584] team0: Port device team_slave_1 added [ 436.170095][T16622] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 436.177788][ T5851] Bluetooth: hci0: command tx timeout [ 436.208883][T16584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.217191][T16584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.243715][T16584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.270248][T14765] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.304053][T16587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.326506][T16584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.333604][T16584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.360337][T16584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.385585][T16587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.416860][ T5851] Bluetooth: hci6: command tx timeout [ 436.422481][ T5844] Bluetooth: hci1: command tx timeout [ 436.472130][T16587] team0: Port device team_slave_0 added [ 436.526183][T16587] team0: Port device team_slave_1 added [ 436.591814][T16584] hsr_slave_0: entered promiscuous mode [ 436.602659][T16584] hsr_slave_1: entered promiscuous mode [ 436.609432][T16584] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 436.617483][T16584] Cannot create hsr debugfs directory [ 436.715259][T16587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.722238][T16587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.748648][T16587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.761627][T16587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.769358][T16587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.795575][T16587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.895156][ T5851] Bluetooth: hci8: command tx timeout [ 437.011418][T16627] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 437.075801][T16587] hsr_slave_0: entered promiscuous mode [ 437.082861][T16587] hsr_slave_1: entered promiscuous mode [ 437.090034][T16587] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 437.100009][T16587] Cannot create hsr debugfs directory [ 437.159051][T14765] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.190216][T16605] chnl_net:caif_netlink_parms(): no params data found [ 437.261287][T16631] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2920'. [ 437.421510][T14765] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.459359][T16582] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 437.485779][T16582] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 437.671907][T14765] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.706122][T16582] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 437.742919][T16605] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.762397][T16605] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.772256][T16605] bridge_slave_0: entered allmulticast mode [ 437.786172][T16605] bridge_slave_0: entered promiscuous mode [ 437.807327][T16605] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.823092][T16605] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.832661][T16605] bridge_slave_1: entered allmulticast mode [ 437.840612][T16605] bridge_slave_1: entered promiscuous mode [ 437.861190][T16582] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 437.905469][T14765] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.989157][T16648] mac80211_hwsim hwsim76 wlan0: entered promiscuous mode [ 437.999552][T16648] macsec1: entered allmulticast mode [ 438.006754][T16648] mac80211_hwsim hwsim76 wlan0: entered allmulticast mode [ 438.018521][T16648] mac80211_hwsim hwsim76 wlan0: left allmulticast mode [ 438.025775][T16648] mac80211_hwsim hwsim76 wlan0: left promiscuous mode [ 438.063710][T16605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.077605][T16605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.205489][T16605] team0: Port device team_slave_0 added [ 438.229132][T16605] team0: Port device team_slave_1 added [ 438.254632][ T5851] Bluetooth: hci0: command tx timeout [ 438.318662][T16584] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 438.329999][T16584] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 438.343524][T16605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.359472][T16605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.388649][T16605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.401624][T16605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.410827][T16605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.437576][T16605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.462682][T16584] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 438.476643][T16584] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 438.504335][ T5844] Bluetooth: hci1: command tx timeout [ 438.509976][ T5851] Bluetooth: hci6: command tx timeout [ 438.531893][T14765] bridge_slave_1: left allmulticast mode [ 438.537978][T14765] bridge_slave_1: left promiscuous mode [ 438.545691][T14765] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.556892][T14765] bridge_slave_0: left allmulticast mode [ 438.562573][T14765] bridge_slave_0: left promiscuous mode [ 438.568456][T14765] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.582156][T14765] bridge_slave_1: left allmulticast mode [ 438.588084][T14765] bridge_slave_1: left promiscuous mode [ 438.593834][T14765] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.605427][T14765] bridge_slave_0: left allmulticast mode [ 438.611140][T14765] bridge_slave_0: left promiscuous mode [ 438.617326][T14765] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.882782][T16661] netlink: 'syz.7.2925': attribute type 13 has an invalid length. [ 438.891130][T16661] netlink: 'syz.7.2925': attribute type 17 has an invalid length. [ 438.975025][ T5851] Bluetooth: hci8: command tx timeout [ 439.125042][T14765] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 439.137288][T14765] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 439.148200][T14765] bond0 (unregistering): Released all slaves [ 439.483056][T14765] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 439.495046][T14765] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 439.505737][T14765] bond0 (unregistering): Released all slaves [ 439.542740][T16661] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 439.705686][T16605] hsr_slave_0: entered promiscuous mode [ 439.712909][T16605] hsr_slave_1: entered promiscuous mode [ 439.719791][T16605] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 439.727772][T16605] Cannot create hsr debugfs directory [ 440.207411][T16582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.560154][T16584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.574755][T16677] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2928'. [ 440.575056][ T5851] Bluetooth: hci6: command tx timeout [ 440.608939][T16582] 8021q: adding VLAN 0 to HW filter on device team0 [ 440.757388][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.764660][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.821190][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.828421][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.907124][T16584] 8021q: adding VLAN 0 to HW filter on device team0 [ 440.918082][T16587] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 440.951836][T16587] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 440.995772][T16587] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 441.010660][T16682] xt_l2tp: wrong L2TP version: 0 [ 441.049948][T16587] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 441.273359][T16687] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2931'. [ 441.296513][T14771] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.303706][T14771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.393390][T14761] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.400660][T14761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.438166][T16695] nla_validate_range_unsigned: 55 callbacks suppressed [ 441.438186][T16695] netlink: 'syz.7.2932': attribute type 11 has an invalid length. [ 441.458676][T16695] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2932'. [ 441.475793][T16696] netlink: 'syz.7.2932': attribute type 11 has an invalid length. [ 441.483667][T16696] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2932'. [ 441.562049][T14765] hsr_slave_0: left promiscuous mode [ 441.570203][T14765] hsr_slave_1: left promiscuous mode [ 441.576644][T14765] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 441.584195][T14765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 441.593521][T14765] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 441.602928][T14765] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 441.617278][T14765] hsr_slave_0: left promiscuous mode [ 441.630996][T14765] hsr_slave_1: left promiscuous mode [ 441.638405][T14765] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 441.646497][T14765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 441.655650][T14765] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 441.663096][T14765] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 441.711724][T14765] veth1_macvtap: left promiscuous mode [ 441.717858][T14765] veth0_macvtap: left promiscuous mode [ 441.723501][T14765] veth1_vlan: left promiscuous mode [ 441.729474][T14765] veth0_vlan: left promiscuous mode [ 441.736282][T14765] veth1_macvtap: left promiscuous mode [ 441.741855][T14765] veth0_macvtap: left promiscuous mode [ 441.748669][T14765] veth1_vlan: left promiscuous mode [ 441.753977][T14765] veth0_vlan: left promiscuous mode [ 442.374897][T14765] team0 (unregistering): Port device team_slave_1 removed [ 442.424092][T14765] team0 (unregistering): Port device team_slave_0 removed [ 442.657155][ T5851] Bluetooth: hci6: command tx timeout [ 443.285595][T14765] team0 (unregistering): Port device team_slave_1 removed [ 443.337872][T14765] team0 (unregistering): Port device team_slave_0 removed [ 443.790891][T16695] pim6reg: entered allmulticast mode [ 443.987051][T16703] unknown channel width for channel at 909000KHz? [ 444.084018][T16705] unknown channel width for channel at 909000KHz? [ 444.241194][T16587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.251836][T16710] netlink: 'syz.7.2934': attribute type 33 has an invalid length. [ 444.262593][T16710] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.2934'. [ 444.332358][T16587] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.341864][T16605] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 444.358270][T16710] netlink: 'syz.7.2934': attribute type 15 has an invalid length. [ 444.379641][T16605] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 444.422270][T14761] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.429486][T14761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.462341][T16605] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 444.534712][T16715] netlink: 'syz.7.2935': attribute type 11 has an invalid length. [ 444.542592][T16715] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2935'. [ 444.543122][T16605] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 444.572461][T14771] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.579674][T14771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.663536][T16582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.702703][T16584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.101434][T16605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.189437][T16605] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.241370][T14765] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.248581][T14765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.302073][T14765] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.309322][T14765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.593891][T16587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.743998][T16584] veth0_vlan: entered promiscuous mode [ 445.773391][T16584] veth1_vlan: entered promiscuous mode [ 445.951667][T16587] veth0_vlan: entered promiscuous mode [ 445.979104][T16582] veth0_vlan: entered promiscuous mode [ 446.002604][T16587] veth1_vlan: entered promiscuous mode [ 446.048474][T16605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.084080][T16584] veth0_macvtap: entered promiscuous mode [ 446.100085][T16587] veth0_macvtap: entered promiscuous mode [ 446.119620][T16582] veth1_vlan: entered promiscuous mode [ 446.129012][T16584] veth1_macvtap: entered promiscuous mode [ 446.141117][T16587] veth1_macvtap: entered promiscuous mode [ 446.165851][T16762] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2942'. [ 446.235718][T16605] veth0_vlan: entered promiscuous mode [ 446.243236][T16582] veth0_macvtap: entered promiscuous mode [ 446.259618][T16584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 446.282730][T16587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 446.301697][T16587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 446.338352][T16587] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.348090][T16587] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.361252][T16587] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.371246][T16587] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.382992][T16582] veth1_macvtap: entered promiscuous mode [ 446.396543][T16605] veth1_vlan: entered promiscuous mode [ 446.410042][T16584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 446.457874][T16584] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.470089][T16584] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.479252][T16584] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.488169][T16584] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.565523][T16582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 446.612140][T16582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 446.688183][T14765] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.697263][T14765] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.706258][T16582] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.719810][T16582] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.728875][T16582] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.741972][T16582] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.753588][T16605] veth0_macvtap: entered promiscuous mode [ 446.802227][T16605] veth1_macvtap: entered promiscuous mode [ 446.822625][T14771] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.840249][T14771] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.920576][T16605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 446.928077][T14770] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.942177][T14771] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.947854][T14770] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.951951][T14771] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.075963][T16605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.140886][T14770] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.160143][T14770] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.189745][T16605] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.212980][T16605] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.234574][T16605] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.243322][T16605] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.297830][T14770] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.307381][T14770] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.370536][T16767] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2916'. [ 447.576837][T16773] netlink: 'syz.7.2946': attribute type 1 has an invalid length. [ 447.593227][T16773] netlink: 'syz.7.2946': attribute type 1 has an invalid length. [ 447.606727][T16773] netlink: 'syz.7.2946': attribute type 1 has an invalid length. [ 447.640928][T16773] netlink: 'syz.7.2946': attribute type 2 has an invalid length. [ 447.663361][T16773] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2946'. [ 447.685830][T14765] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.809855][T14770] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.818842][T14770] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.852365][T14765] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.086799][T16782] netlink: 'syz.8.2949': attribute type 11 has an invalid length. [ 448.118310][T16782] netlink: 224 bytes leftover after parsing attributes in process `syz.8.2949'. [ 448.158067][T14765] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.203568][T14713] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.214345][T16782] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 448.230856][T14713] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.338927][T14765] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.702514][T14765] bridge_slave_1: left allmulticast mode [ 448.709002][T14765] bridge_slave_1: left promiscuous mode [ 448.714978][T14765] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.725768][T14765] bridge_slave_0: left allmulticast mode [ 448.731456][T14765] bridge_slave_0: left promiscuous mode [ 448.740165][T14765] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.771771][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 448.782040][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 448.796132][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 448.806691][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 448.819168][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 449.065190][T14766] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 449.471003][T14765] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 449.495358][T14765] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 449.518657][T14765] bond0 (unregistering): Released all slaves [ 449.608236][T16790] macvtap1: entered allmulticast mode [ 449.614553][T16790] veth0_macvtap: entered allmulticast mode [ 449.817405][ T5851] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 449.834281][ T5851] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 449.844692][ T5851] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 449.856997][ T5851] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 449.865567][ T5851] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 450.894832][ T5851] Bluetooth: hci0: command tx timeout [ 451.044019][T16797] chnl_net:caif_netlink_parms(): no params data found [ 451.176377][T14765] hsr_slave_0: left promiscuous mode [ 451.182385][T14765] hsr_slave_1: left promiscuous mode [ 451.188514][T14765] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.196119][T14765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 451.204230][T14765] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 451.211752][T14765] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 451.252287][T14765] veth1_macvtap: left promiscuous mode [ 451.258300][T14765] veth0_macvtap: left promiscuous mode [ 451.263893][T14765] veth1_vlan: left promiscuous mode [ 451.269330][T14765] veth0_vlan: left promiscuous mode [ 451.917657][T14765] team0 (unregistering): Port device team_slave_1 removed [ 451.935545][ T5851] Bluetooth: hci6: command tx timeout [ 452.050765][T14765] team0 (unregistering): Port device team_slave_0 removed [ 452.129508][T16813] xt_socket: unknown flags 0x2 [ 452.237703][ T5844] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 452.268513][ T5841] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 452.277463][ T5841] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 452.300909][ T5841] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 452.310838][ T5841] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 452.977266][ T5841] Bluetooth: hci0: command tx timeout [ 453.024321][T16832] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2959'. [ 453.155876][T16797] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.163085][T16797] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.170689][T16797] bridge_slave_0: entered allmulticast mode [ 453.180096][T16797] bridge_slave_0: entered promiscuous mode [ 453.193199][T16797] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.233079][T16797] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.244829][T16834] netlink: 'syz.7.2959': attribute type 21 has an invalid length. [ 453.253068][T16797] bridge_slave_1: entered allmulticast mode [ 453.259318][T16834] netlink: 6 bytes leftover after parsing attributes in process `syz.7.2959'. [ 453.270795][T16797] bridge_slave_1: entered promiscuous mode [ 453.569155][T16797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.623632][T16797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.659172][T16786] chnl_net:caif_netlink_parms(): no params data found [ 453.813542][T16849] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci8/hci8:200/input9 [ 453.910426][T16797] team0: Port device team_slave_0 added [ 453.926856][T16797] team0: Port device team_slave_1 added [ 454.014977][ T5841] Bluetooth: hci6: command tx timeout [ 454.237900][T16859] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2964'. [ 454.415859][ T5841] Bluetooth: hci8: command tx timeout [ 454.436985][T16797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.443967][T16797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.473156][T16797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.530709][T16797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.548068][T16797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.575094][T16797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.621440][T16786] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.632103][T16786] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.639522][T16786] bridge_slave_0: entered allmulticast mode [ 454.648301][T16786] bridge_slave_0: entered promiscuous mode [ 454.714896][T14765] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.749450][T16786] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.757065][T16786] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.764281][T16786] bridge_slave_1: entered allmulticast mode [ 454.773472][T16786] bridge_slave_1: entered promiscuous mode [ 454.794691][T16863] netlink: 'syz.7.2966': attribute type 32 has an invalid length. [ 454.902954][T14765] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.007926][T16797] hsr_slave_0: entered promiscuous mode [ 455.016934][T16797] hsr_slave_1: entered promiscuous mode [ 455.051846][T14765] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.062963][ T5841] Bluetooth: hci0: command tx timeout [ 455.079140][T16786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.156193][T16786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.223577][T14765] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.348553][T16786] team0: Port device team_slave_0 added [ 455.378096][T16786] team0: Port device team_slave_1 added [ 455.586822][T16786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.593816][T16786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.622568][T16786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.677900][T16881] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2971'. [ 455.688306][T16881] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2971'. [ 455.715899][T16881] netlink: 'syz.8.2971': attribute type 13 has an invalid length. [ 455.737728][T16786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.745448][T16786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.773463][T16786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.859736][T16797] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.914867][T16814] chnl_net:caif_netlink_parms(): no params data found [ 455.940320][T14768] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.956496][T14768] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.972905][T16886] Bluetooth: MGMT ver 1.23 [ 455.982714][T16797] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.096472][ T5841] Bluetooth: hci6: command tx timeout [ 456.144349][T16891] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2974'. [ 456.155685][T16797] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.173048][T16888] tipc: Started in network mode [ 456.179493][T16888] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 456.186949][T16888] tipc: Enabled bearer , priority 10 [ 456.207219][T16786] hsr_slave_0: entered promiscuous mode [ 456.213771][T16786] hsr_slave_1: entered promiscuous mode [ 456.223341][T16786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 456.232163][T16786] Cannot create hsr debugfs directory [ 456.272826][T16797] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.494876][ T5841] Bluetooth: hci8: command tx timeout [ 456.502434][T16899] batadv_slave_1: entered promiscuous mode [ 456.508817][T14765] bridge_slave_1: left allmulticast mode [ 456.514717][T14765] bridge_slave_1: left promiscuous mode [ 456.520520][T14765] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.537982][T14765] bridge_slave_0: left allmulticast mode [ 456.543744][T14765] bridge_slave_0: left promiscuous mode [ 456.549807][T14765] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.564412][T14765] bridge_slave_1: left allmulticast mode [ 456.571346][T14765] bridge_slave_1: left promiscuous mode [ 456.577756][T14765] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.597973][T14765] bridge_slave_0: left allmulticast mode [ 456.603672][T14765] bridge_slave_0: left promiscuous mode [ 456.609772][T14765] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.057359][T14765] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 457.069654][T14765] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.089936][T14765] bond0 (unregistering): Released all slaves [ 457.134775][ T5841] Bluetooth: hci0: command tx timeout [ 457.305004][ T24] tipc: Node number set to 10136234 [ 457.449178][T14765] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 457.461043][T14765] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.472094][T14765] bond0 (unregistering): Released all slaves [ 457.493059][T16814] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.500894][T16814] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.512259][T16814] bridge_slave_0: entered allmulticast mode [ 457.520382][T16814] bridge_slave_0: entered promiscuous mode [ 457.557919][T16904] batadv_slave_1: left promiscuous mode [ 457.578871][T16814] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.607045][T16814] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.623963][T16814] bridge_slave_1: entered allmulticast mode [ 457.637772][T16814] bridge_slave_1: entered promiscuous mode [ 457.887154][T16814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.957858][T16915] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 457.971454][T16814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.147519][T16924] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2983'. [ 458.174743][ T5841] Bluetooth: hci6: command tx timeout [ 458.231237][T16924] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2983'. [ 458.256686][T16814] team0: Port device team_slave_0 added [ 458.263027][T16797] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 458.293632][T16797] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 458.343772][T16814] team0: Port device team_slave_1 added [ 458.360615][T16929] openvswitch: netlink: VXLAN extension 173 out of range max 1 [ 458.378584][T16927] netlink: 88 bytes leftover after parsing attributes in process `syz.8.2984'. [ 458.423745][T16797] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 458.488357][T16797] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 458.574833][ T5841] Bluetooth: hci8: command tx timeout [ 458.581918][T16814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.593209][T16814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.619670][T16814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.632769][T16814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.639948][T16814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.667827][T16814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.100913][T16950] vlan0: entered promiscuous mode [ 459.176687][T16950] team0: Port device vlan0 added [ 459.351194][T16814] hsr_slave_0: entered promiscuous mode [ 459.371566][T16814] hsr_slave_1: entered promiscuous mode [ 459.389105][T16814] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 459.409390][T16814] Cannot create hsr debugfs directory [ 459.443109][T16960] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2991'. [ 459.503882][T16954] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2990'. [ 459.983899][T14765] hsr_slave_0: left promiscuous mode [ 460.152786][T14765] hsr_slave_1: left promiscuous mode [ 460.160622][T14765] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.169357][T14765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 460.191116][T14765] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 460.207924][T14765] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 460.514851][T14765] hsr_slave_0: left promiscuous mode [ 460.562243][T14765] hsr_slave_1: left promiscuous mode [ 460.568619][T14765] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.578124][T14765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 460.654808][ T5841] Bluetooth: hci8: command tx timeout [ 460.716303][T14765] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 460.734417][T14765] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 460.840477][T14765] veth1_macvtap: left promiscuous mode [ 460.854655][T14765] veth0_macvtap: left promiscuous mode [ 460.860372][T14765] veth1_vlan: left promiscuous mode [ 460.874660][T14765] veth0_vlan: left promiscuous mode [ 460.887448][T14765] veth1_macvtap: left promiscuous mode [ 460.893188][T14765] veth0_macvtap: left promiscuous mode [ 460.908925][T14765] veth1_vlan: left promiscuous mode [ 460.919881][T14765] veth0_vlan: left promiscuous mode [ 461.596232][T14765] team0 (unregistering): Port device team_slave_1 removed [ 461.648921][T14765] team0 (unregistering): Port device team_slave_0 removed [ 462.513505][T14765] team0 (unregistering): Port device team_slave_1 removed [ 462.557799][T14765] team0 (unregistering): Port device team_slave_0 removed [ 463.180065][T16786] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 463.239304][T16786] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 463.334806][ T1213] IPVS: starting estimator thread 0... [ 463.343312][T16786] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 463.359357][T16786] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 463.425995][T16990] IPVS: using max 27 ests per chain, 64800 per kthread [ 463.502769][T17003] x_tables: duplicate entry at hook 1 [ 463.700637][T16797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.804034][T16797] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.880568][T14770] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.887813][T14770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.978476][T14770] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.985741][T14770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.080477][T16814] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 464.137638][T16814] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 464.150805][T16814] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 464.173512][T16786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.221385][T16814] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 464.266868][T16797] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 464.294650][T16797] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 464.418724][T16786] 8021q: adding VLAN 0 to HW filter on device team0 [ 464.497518][T14769] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.504725][T14769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.574308][T14765] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.581529][T14765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.892986][T16814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.010549][T16814] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.062350][T16797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.116966][T14765] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.124176][T14765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.186725][T14769] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.193889][T14769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.359473][T16814] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 465.656300][T16786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.909195][T16786] veth0_vlan: entered promiscuous mode [ 465.989894][T16786] veth1_vlan: entered promiscuous mode [ 466.131127][T16786] veth0_macvtap: entered promiscuous mode [ 466.194974][T16786] veth1_macvtap: entered promiscuous mode [ 466.234310][T16797] veth0_vlan: entered promiscuous mode [ 466.287541][T16814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 466.341482][T16797] veth1_vlan: entered promiscuous mode [ 466.376215][T16786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 466.413652][T16786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 466.456586][T16786] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.475940][T16786] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.492048][T16786] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.509301][T16786] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.661497][T16797] veth0_macvtap: entered promiscuous mode [ 466.689513][T16797] veth1_macvtap: entered promiscuous mode [ 466.725146][T16814] veth0_vlan: entered promiscuous mode [ 466.752829][T16814] veth1_vlan: entered promiscuous mode [ 466.801883][T16797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 466.839904][T16797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 466.997882][T16797] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.016371][T16797] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.044638][T16797] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.053391][T16797] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.138501][T14768] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.155321][T14768] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.183276][T16814] veth0_macvtap: entered promiscuous mode [ 467.285952][T16814] veth1_macvtap: entered promiscuous mode [ 467.393685][T14713] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.434512][T14713] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.500972][T16814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 467.594565][T14766] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.602534][T14766] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.609255][T16814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 467.781533][T16814] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.811891][T16814] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.830586][T16814] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.843214][T16814] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.911586][T14761] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.964857][T14761] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.180201][T14766] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.274020][T14770] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.309205][T14770] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.429254][T14766] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.462201][T14770] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.474386][T14770] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.576686][T14766] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.737181][T14766] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.960460][T17057] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3010'. [ 469.055637][T14766] bridge_slave_1: left allmulticast mode [ 469.063260][T14766] bridge_slave_1: left promiscuous mode [ 469.088809][T14766] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.100840][T14766] bridge_slave_0: left allmulticast mode [ 469.114605][T14766] bridge_slave_0: left promiscuous mode [ 469.120430][T14766] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.439961][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 469.452710][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 469.471293][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 469.483317][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 469.497258][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 469.671208][T14766] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 469.684654][T14766] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 469.696530][T14766] bond0 (unregistering): Released all slaves [ 470.631120][T14766] hsr_slave_0: left promiscuous mode [ 470.638246][T14766] hsr_slave_1: left promiscuous mode [ 470.644128][T14766] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 470.651903][T14766] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.662139][T14766] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.669748][T14766] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.701732][T14766] veth1_macvtap: left promiscuous mode [ 470.708214][T14766] veth0_macvtap: left promiscuous mode [ 470.713842][T14766] veth1_vlan: left promiscuous mode [ 470.719730][T14766] veth0_vlan: left promiscuous mode [ 471.225685][T14766] team0 (unregistering): Port device team_slave_1 removed [ 471.278364][T14766] team0 (unregistering): Port device team_slave_0 removed [ 471.336529][T17067] netlink: 'syz.8.3011': attribute type 1 has an invalid length. [ 471.455376][ T31] INFO: task syz.4.2187:13615 blocked for more than 143 seconds. [ 471.463318][ T31] Not tainted 6.15.0-syzkaller-12425-g82cbd06f327f #0 [ 471.475431][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 471.484490][ T31] task:syz.4.2187 state:D stack:26824 pid:13615 tgid:13602 ppid:5842 task_flags:0x400140 flags:0x00004004 [ 471.503819][ T31] Call Trace: [ 471.507293][ T31] [ 471.510266][ T31] __schedule+0x16f5/0x4d00 [ 471.524630][ T31] ? __lock_acquire+0xab9/0xd20 [ 471.529561][ T31] ? schedule+0x165/0x360 [ 471.533936][ T31] ? __pfx___schedule+0x10/0x10 [ 471.544678][ T5841] Bluetooth: hci0: command tx timeout [ 471.554036][ T31] ? schedule+0x91/0x360 [ 471.572457][ T31] schedule+0x165/0x360 [ 471.578716][ T31] schedule_preempt_disabled+0x13/0x30 [ 471.584216][ T31] __mutex_lock+0x724/0xe80 [ 471.589215][ T31] ? __mutex_lock+0x51b/0xe80 [ 471.593947][ T31] ? nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 471.599993][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 471.605173][ T31] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 471.611894][ T31] ? __nlmsg_put+0xef/0x1b0 [ 471.616635][ T31] ? genlmsg_put+0x137/0x2e0 [ 471.622531][ T31] nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 471.628383][ T31] ? kernel_text_address+0xa5/0xe0 [ 471.633614][ T31] ? genl_family_rcv_msg_attrs_parse+0x13b/0x2a0 [ 471.640053][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 471.645792][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 471.651932][ T31] genl_rcv_msg+0x60e/0x790 [ 471.656797][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 471.661873][ T31] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 471.668229][ T31] netlink_rcv_skb+0x205/0x470 [ 471.673030][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 471.678196][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 471.683611][ T31] ? down_read+0x1ad/0x2e0 [ 471.688234][ T31] genl_rcv+0x28/0x40 [ 471.692259][ T31] netlink_unicast+0x758/0x8d0 [ 471.698053][ T31] netlink_sendmsg+0x805/0xb30 [ 471.703086][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 471.708633][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 471.713633][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 471.719108][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 471.725889][ T31] __sock_sendmsg+0x21c/0x270 [ 471.730702][ T31] ____sys_sendmsg+0x505/0x830 [ 471.740805][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 471.748766][ T31] ? import_iovec+0x74/0xa0 [ 471.753394][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 471.762959][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 471.769573][ T31] ? __fget_files+0x2a/0x420 [ 471.774214][ T31] ? __fget_files+0x3a0/0x420 [ 471.779393][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 471.787837][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 471.788623][ T5851] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 471.793430][ T31] ? rcu_is_watching+0x15/0xb0 [ 471.805641][ T31] ? do_syscall_64+0xbe/0x3b0 [ 471.806473][ T5851] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 471.810356][ T31] do_syscall_64+0xfa/0x3b0 [ 471.822136][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 471.822347][ T5851] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 471.830399][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.842710][ T31] ? clear_bhb_loop+0x60/0xb0 [ 471.847614][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 471.853590][ T31] RIP: 0033:0x7fde4d18e929 [ 471.858829][ T31] RSP: 002b:00007fde4df49038 EFLAGS: 00000246 [ 471.859087][ T5851] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 471.872365][ T31] ORIG_RAX: 000000000000002e [ 471.877543][ T31] RAX: ffffffffffffffda RBX: 00007fde4d3b6160 RCX: 00007fde4d18e929 [ 471.887196][ T5851] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 471.894276][ T31] RDX: 0000000024000100 RSI: 0000200000001740 RDI: 000000000000000e [ 471.902349][ T31] RBP: 00007fde4d210b39 R08: 0000000000000000 R09: 0000000000000000 [ 471.910610][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 471.919846][ T31] R13: 0000000000000000 R14: 00007fde4d3b6160 R15: 00007ffc1f83b848 [ 471.931126][ T31] [ 471.934894][ T31] [ 471.934894][ T31] Showing all locks held in the system: [ 471.950716][ T31] 1 lock held by khungtaskd/31: [ 471.959904][ T31] #0: ffffffff8e13f060 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 471.972331][ T31] 2 locks held by getty/5602: [ 471.982611][ T31] #0: ffff88814c34b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 472.002303][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 472.064636][ T31] 1 lock held by sshd-session/5822: [ 472.074417][ T31] 2 locks held by syz.3.1799/12198: [ 472.092064][ T31] #0: ffffffff8f5757b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 472.144671][ T31] #1: ffffffff8e41d3a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 472.170296][ T31] 2 locks held by syz.4.2187/13615: [ 472.181264][ T31] #0: ffffffff8f5757b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 472.190126][ T31] #1: ffffffff8e41d3a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 472.200359][ T31] 3 locks held by kworker/u8:53/14765: [ 472.205872][ T31] #0: ffff88802fe60948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 472.217549][ T31] #1: ffffc900035a7bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 472.231330][ T31] #2: ffffffff8f50f648 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 472.243144][ T31] 5 locks held by kworker/u8:54/14766: [ 472.248757][ T31] #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 472.261416][ T31] #1: ffffc90003407bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 472.272215][ T31] #2: ffffffff8f502a50 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 472.281836][ T31] #3: ffffffff8f50f648 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xdc/0x890 [ 472.292013][ T31] #4: ffffffff8e144b78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 472.303176][ T31] 3 locks held by kworker/u8:56/14769: [ 472.308782][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 472.320566][ T31] #1: ffffc9000213fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 472.331579][ T31] #2: ffffffff8f50f648 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 472.343674][ T31] 3 locks held by kworker/u8:57/14770: [ 472.349258][ T31] 2 locks held by syz.0.2855/16255: [ 472.354548][ T31] #0: ffffffff8f5757b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 472.362823][ T31] #1: ffffffff8e41d3a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 472.373120][ T31] 2 locks held by syz.5.2909/16489: [ 472.378368][ T31] #0: ffffffff8f5757b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 472.386647][ T31] #1: ffffffff8e41d3a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 472.396997][ T31] 2 locks held by syz-executor/17061: [ 472.402388][ T31] #0: ffffffff8fa14108 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 472.412159][ T31] #1: ffffffff8f50f648 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 472.421753][ T31] 2 locks held by syz.8.3011/17067: [ 472.427027][ T31] #0: ffffffff8fa138c8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 472.436692][ T31] #1: ffffffff8f50f648 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 472.448553][ T31] 1 lock held by syz.8.3011/17068: [ 472.453703][ T31] #0: ffffffff8f50f648 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x1d0/0x1990 [ 472.462749][ T31] 2 locks held by syz.8.3011/17069: [ 472.468040][ T31] #0: ffffffff8ecb2180 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 472.477668][ T31] #1: ffffffff8f50f648 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 472.486857][ T31] 2 locks held by syz.8.3011/17070: [ 472.492069][ T31] #0: ffffffff8eca50e0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 472.502406][ T31] #1: ffffffff8f50f648 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 472.511645][ T31] 2 locks held by syz.8.3011/17071: [ 472.517111][ T31] #0: ffffffff8fa30170 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 472.526717][ T31] #1: ffffffff8f50f648 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 472.535890][ T31] 1 lock held by syz-executor/17072: [ 472.543836][ T31] #0: ffffffff8f50f648 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 472.553397][ T31] 2 locks held by syz.7.3012/17075: [ 472.558654][ T31] #0: ffff88807bcf3808 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 472.568921][ T31] #1: ffffffff8e144b78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 472.580260][ T31] [ 472.582733][ T31] ============================================= [ 472.582733][ T31] [ 472.634627][ T31] NMI backtrace for cpu 0 [ 472.634652][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-12425-g82cbd06f327f #0 PREEMPT(full) [ 472.634675][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 472.634686][ T31] Call Trace: [ 472.634693][ T31] [ 472.634701][ T31] dump_stack_lvl+0x189/0x250 [ 472.634732][ T31] ? __wake_up_klogd+0xd9/0x110 [ 472.634756][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 472.634785][ T31] ? __pfx__printk+0x10/0x10 [ 472.634818][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 472.634843][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 472.634860][ T31] ? _printk+0xcf/0x120 [ 472.634884][ T31] ? __pfx__printk+0x10/0x10 [ 472.634906][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 472.634935][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 472.634958][ T31] watchdog+0xfee/0x1030 [ 472.634985][ T31] ? watchdog+0x1de/0x1030 [ 472.635018][ T31] kthread+0x70e/0x8a0 [ 472.635043][ T31] ? __pfx_watchdog+0x10/0x10 [ 472.635067][ T31] ? __pfx_kthread+0x10/0x10 [ 472.635090][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 472.635112][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.635133][ T31] ? __pfx_kthread+0x10/0x10 [ 472.635155][ T31] ret_from_fork+0x3f9/0x770 [ 472.635184][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 472.635214][ T31] ? __switch_to_asm+0x39/0x70 [ 472.635231][ T31] ? __switch_to_asm+0x33/0x70 [ 472.635249][ T31] ? __pfx_kthread+0x10/0x10 [ 472.635271][ T31] ret_from_fork_asm+0x1a/0x30 [ 472.635304][ T31] [ 472.635311][ T31] Sending NMI from CPU 0 to CPUs 1: [ 472.803584][ C1] NMI backtrace for cpu 1 [ 472.803601][ C1] CPU: 1 UID: 0 PID: 14770 Comm: kworker/u8:57 Not tainted 6.15.0-syzkaller-12425-g82cbd06f327f #0 PREEMPT(full) [ 472.803622][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 472.803633][ C1] Workqueue: bat_events batadv_mcast_mla_update [ 472.803670][ C1] RIP: 0010:check_preemption_disabled+0x17/0x120 [ 472.803697][ C1] Code: 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 53 48 83 ec 10 65 48 8b 05 fe dd 36 07 48 89 44 24 08 <65> 8b 05 06 de 36 07 65 8b 0d fb dd 36 07 f7 c1 ff ff ff 7f 74 23 [ 472.803711][ C1] RSP: 0018:ffffc90003447478 EFLAGS: 00000086 [ 472.803724][ C1] RAX: 98fe9cf87e5d0d00 RBX: ffffffff902f3201 RCX: 98fe9cf87e5d0d00 [ 472.803737][ C1] RDX: ffffc90003447601 RSI: ffffffff8be28320 RDI: ffffffff8be282e0 [ 472.803750][ C1] RBP: dffffc0000000000 R08: ffffc900034476f0 R09: 0000000000000000 [ 472.803761][ C1] R10: ffffc900034476b8 R11: fffff52000688ed9 R12: ffffc90003447700 [ 472.803773][ C1] R13: ffffffff81729de5 R14: ffffffff8e13f060 R15: ffffffff81729de5 [ 472.803786][ C1] FS: 0000000000000000(0000) GS:ffff888125d55000(0000) knlGS:0000000000000000 [ 472.803799][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 472.803810][ C1] CR2: 00007fe4cddb6038 CR3: 000000000df38000 CR4: 00000000003526f0 [ 472.803825][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 472.803835][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 472.803845][ C1] Call Trace: [ 472.803851][ C1] [ 472.803860][ C1] ? unwind_next_frame+0xa5/0x2390 [ 472.803886][ C1] rcu_is_watching+0x15/0xb0 [ 472.803901][ C1] ? unwind_next_frame+0xa5/0x2390 [ 472.803925][ C1] lock_release+0x4b/0x3e0 [ 472.803947][ C1] ? deref_stack_reg+0x19f/0x230 [ 472.803974][ C1] ? unwind_next_frame+0xa5/0x2390 [ 472.803997][ C1] unwind_next_frame+0x19a9/0x2390 [ 472.804025][ C1] ? unwind_next_frame+0xa5/0x2390 [ 472.804050][ C1] ? arch_stack_walk+0xe4/0x150 [ 472.804070][ C1] __unwind_start+0x5b9/0x760 [ 472.804086][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 472.804106][ C1] arch_stack_walk+0xe4/0x150 [ 472.804124][ C1] ? stack_trace_save+0x9c/0xe0 [ 472.804144][ C1] stack_trace_save+0x9c/0xe0 [ 472.804160][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 472.804185][ C1] metadata_update_state+0x142/0x350 [ 472.804205][ C1] kfence_guarded_free+0x1a2/0x4c0 [ 472.804222][ C1] ? batadv_mcast_mla_update+0x32e9/0x3670 [ 472.804248][ C1] kfree+0x23e/0x440 [ 472.804262][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 472.804283][ C1] batadv_mcast_mla_update+0x32e9/0x3670 [ 472.804316][ C1] ? __pfx_batadv_mcast_mla_update+0x10/0x10 [ 472.804342][ C1] ? __lock_acquire+0xab9/0xd20 [ 472.804375][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 472.804394][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 472.804420][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 472.804453][ C1] process_scheduled_works+0xae1/0x17b0 [ 472.804499][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 472.804539][ C1] worker_thread+0x8a0/0xda0 [ 472.804571][ C1] kthread+0x70e/0x8a0 [ 472.804591][ C1] ? __pfx_worker_thread+0x10/0x10 [ 472.804606][ C1] ? __pfx_kthread+0x10/0x10 [ 472.804625][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 472.804644][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.804671][ C1] ? __pfx_kthread+0x10/0x10 [ 472.804690][ C1] ret_from_fork+0x3f9/0x770 [ 472.804715][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 472.804741][ C1] ? __switch_to_asm+0x39/0x70 [ 472.804757][ C1] ? __switch_to_asm+0x33/0x70 [ 472.804773][ C1] ? __pfx_kthread+0x10/0x10 [ 472.804792][ C1] ret_from_fork_asm+0x1a/0x30 [ 472.804818][ C1] [ 472.904630][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 472.904657][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-12425-g82cbd06f327f #0 PREEMPT(full) [ 472.904687][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 472.904703][ T31] Call Trace: [ 472.904714][ T31] [ 472.904724][ T31] dump_stack_lvl+0x99/0x250 [ 472.904774][ T31] ? __asan_memcpy+0x40/0x70 [ 472.904812][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 472.904849][ T31] ? __pfx__printk+0x10/0x10 [ 472.904890][ T31] panic+0x2db/0x790 [ 472.904933][ T31] ? __pfx_panic+0x10/0x10 [ 472.904967][ T31] ? __pfx_delay_tsc+0x10/0x10 [ 472.904988][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 472.905031][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 472.905065][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 472.905101][ T31] watchdog+0x102d/0x1030 [ 472.905138][ T31] ? watchdog+0x1de/0x1030 [ 472.905181][ T31] kthread+0x70e/0x8a0 [ 472.905213][ T31] ? __pfx_watchdog+0x10/0x10 [ 472.905244][ T31] ? __pfx_kthread+0x10/0x10 [ 472.905274][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 472.905302][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.905330][ T31] ? __pfx_kthread+0x10/0x10 [ 472.905359][ T31] ret_from_fork+0x3f9/0x770 [ 472.905398][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 472.905438][ T31] ? __switch_to_asm+0x39/0x70 [ 472.905462][ T31] ? __switch_to_asm+0x33/0x70 [ 472.905484][ T31] ? __pfx_kthread+0x10/0x10 [ 472.905512][ T31] ret_from_fork_asm+0x1a/0x30 [ 472.905556][ T31] [ 473.316880][ T31] Kernel Offset: disabled [ 473.321214][ T31] Rebooting in 86400 seconds..