last executing test programs: 2.14857401s ago: executing program 1 (id=240): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) (async) close(r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x5, &(0x7f0000000280)='/)+(\x00'}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x5, &(0x7f0000000280)='/)+(\x00'}, 0x30) bind$tipc(r0, 0x0, 0x0) 1.650835198s ago: executing program 3 (id=247): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001a0000000000000079bf59b2ca922dd7c1c6500af093e89f0a11c800000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000731139000000000020000000000000009500200000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa, 0x20010, r0, 0x851b4000) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000140)="845715", 0x3}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r1, &(0x7f00000000c0)="37111b10ed783dc95e2ac0c32d", 0xd, 0x3b14, 0x0, 0x0) 1.474751492s ago: executing program 3 (id=250): r0 = socket$pppoe(0x18, 0x1, 0x0) syz_emit_ethernet(0xf87, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf51, 0x0, 0x0, @private2, @mcast2, {[@routing={0x84}], "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"}}}}}, 0x0) (async) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) (async) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @broadcast, 'geneve1\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x4, @remote, 'wg1\x00'}}, 0x1e) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)='X\x00', 0x2}], 0x1) (async) write$cgroup_subtree(r6, &(0x7f0000001200)=ANY=[], 0xfe33) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@bridge_dellink={0x2c, 0x11, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r8, 0x5000}}, 0x2c}, 0x1, 0x0, 0x0, 0xc080}, 0x20000014) r9 = socket(0x840000000002, 0x3, 0x100) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x20002, 0x0) ioctl$PPPIOCATTACH(r10, 0x4004743d, &(0x7f00000006c0)) setsockopt$inet_msfilter(r9, 0x0, 0x30, 0x0, 0x2000000) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r11, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) r12 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r12, 0x400448c8, &(0x7f0000000340)={r11, r11, 0x8, 0x2, &(0x7f0000000000)="c0f9", 0x9, 0x8, 0xb57, 0x9, 0x9, 0x1, 0x7, 'syz0\x00'}) (async) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000000fc0)={0x0, 0xff, "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"}, &(0x7f0000001100)=0x107) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r9, 0x84, 0xa, &(0x7f0000001140)={0x2, 0x400, 0x200, 0x8, 0x5, 0x7, 0x2, 0x9, r13}, &(0x7f0000001180)=0x20) (async) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e40)=ANY=[@ANYBLOB="30010000", @ANYRES16=r14, @ANYBLOB="a18340000000000000000500000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000006700000008010e8004"], 0x130}}, 0x0) 1.418809307s ago: executing program 4 (id=251): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x13, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000061107e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000000)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x6470440}, 0xc, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000127bd7000f6815fb5e7bfc0b64db0b725fedbdf25010000000000000008410000004c00ffef0000000000000000000000000000000000000000000000000000000000000000f00000000000000000000010000000000000f7fffffff887922d4985471c50f3c90fc56478600000010000fc0000230ffcf5ee1d21c2ce2d180000000000"], 0x68}, 0x1, 0x0, 0x0, 0x64000000}, 0x8085) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000020c0)=@newqdisc={0x58, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x80, 0x0, 0x1000, 0x2, 0x7fffffff, 0x10088}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x8800}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100fdffffff000000000700000008000300", @ANYRES32=r9, @ANYBLOB="140004006e69637666300000000000000000000008000500090000008c498428a82118a6bfe0394c88a98966309785c8a43c2146915c6fe9a504d552bb321e4539470868ee452c34f8828d9970d96ad5745403d5a736991ef3f7ee69952af70d7c702ec3598fd648e891e2fe4770b4b7f4c827336e300468a124eab97caf6c703936ebc0399f0cafc817f4f50000000000000012df428566401eab1bbfc41bcd4cb1a4b2213c3b805e25fb7585d9b23ab3b668d7bc2a6bed9810ab575c40f162f1b5b51e9b65b3fa7c8e35101785d62e42ebcdd7cb9ca495b41ac8f16e72116e47d32f7bc03049a3c3"], 0x38}}, 0x0) syz_emit_ethernet(0xca, &(0x7f0000000640)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @dest_unreach={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x28, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @local, {[@rr={0x7, 0x3, 0xdd}, @generic={0x0, 0xd, "ee0dd9de36ed4bcc5b4e23"}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@private}]}, @ssrr={0x89, 0xf, 0x0, [@private, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x4c, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@loopback}, {}, {@local}, {@loopback}, {@private}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast}, {@broadcast}]}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0) r10 = accept$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs, &(0x7f00000002c0)=0x6e) connect$unix(r10, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000001c0)) socket(0x6, 0x1, 0x3) sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000500)=ANY=[@ANYRESHEX=r3, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="4100f60001000000000000000001"], 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r11, &(0x7f0000000680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r5, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x4, 0x32}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x2c01c050) syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r11) 1.296277724s ago: executing program 1 (id=254): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'dummy0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'dummy0\x00', 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@abs={0x1}, 0x6e) bind$unix(r3, &(0x7f0000000840)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) 1.277516634s ago: executing program 3 (id=255): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000040)={'syztnl0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x4480, 0x1, 0x1000, 0x6, {{0x16, 0x4, 0x1, 0x2, 0x58, 0x67, 0x0, 0x6, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x19}, @dev={0xac, 0x14, 0x14, 0x2f}, {[@noop, @ra={0x94, 0x4}, @noop, @timestamp_addr={0x44, 0x2c, 0x42, 0x1, 0xd, [{@remote, 0x7}, {@remote, 0x16}, {@rand_addr=0x64010102, 0x5}, {@local, 0x1}, {@multicast1, 0x73}]}, @generic={0x83, 0x10, "95c07e8f800209c86d65e79f5417"}]}}}}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f00000000000000f000f195"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xf, &(0x7f0000000300)={r5, 0x300, 0x0, 0xffffffffffffff26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2d, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac01}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002000010000000000000000000a00000000000000000000000c001400", @ANYRES16], 0x28}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @loopback}, 0x1c) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@deltfilter={0x80, 0x2d, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xffff, 0x9}, {0x4, 0xa}, {0x0, 0x1c}}, [@TCA_RATE={0x6, 0x5, {0x9, 0xfd}}, @TCA_RATE={0x6, 0x5, {0x4, 0x1d}}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_CHAIN={0x8, 0xb, 0xfffff001}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x6, 0x5, {0x9, 0x8}}, @filter_kind_options=@f_cgroup={{0xb}, {0x10, 0x2, [@TCA_CGROUP_EMATCHES={0xc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8000}}]}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0x8}}]}, 0x80}}, 0x0) 1.224327097s ago: executing program 0 (id=256): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000040000000000020000002c0004801800018000000015100001800b0001006c6f6f6b757000000900010073797a30000000000900025cd4935d3200000000140000001100010000000000000000000000000a"], 0x80}}, 0x0) 1.220617829s ago: executing program 2 (id=257): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=@newtaction={0x14, 0x30, 0xeaa3ef926154e70d}, 0x14}}, 0x0) 1.100938083s ago: executing program 4 (id=258): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x10, &(0x7f0000000740)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {0x6}, {}, {0x5}, {0x7, 0x0, 0x0, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x5b}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x4, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000002000090002000008ffdbdf250200000008000800", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2000000, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_IKEY={0x8}]]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, @IFLA_CARRIER={0x5, 0x21, 0x7}]}, 0x4c}, 0x1, 0x7500}, 0x0) 1.00828656s ago: executing program 1 (id=259): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x180, 0x0, 0x148, 0x0, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x11}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'vlan0\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7, 0x20}}}, @common=@inet=@multiport={{0x50}, {0x0, 0xe, [0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@MARK={0x0, 'MARK\x00', 0x2, {0xc3cb, 0xffff5bc1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xff75) 1.00765054s ago: executing program 2 (id=260): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=@setneightbl={0x14, 0x43, 0x1}, 0x14}}, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x19, 0x4, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r3, &(0x7f00000001c0), &(0x7f0000000080)=@buf="1d"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000003c0)={r3, &(0x7f00000001c0), &(0x7f0000000140)=@tcp, 0x1}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_GETFSUUID(r4, 0x8008662c, &(0x7f0000000480)) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000680)=@newlink={0x9c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28520}, [@IFLA_IFALIAS={0x14}, @IFLA_PORT_SELF={0x68, 0x19, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x3c0}, @IFLA_PORT_VF={0x8, 0x1, 0x8}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "6611c71025112b62b67a36d5f98e0fe4"}, @IFLA_PORT_PROFILE={0x6, 0x2, '.\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x6}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "30da0b93c59c884f9845252c9ae3b72a"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "052660ba494e7d5e7a2742f314d0364c"}]}]}, 0x9c}}, 0x50) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095", @ANYRESDEC=0x0, @ANYRESDEC=r1, @ANYRESHEX=r2, @ANYRESHEX=r2, @ANYRES16=r1, @ANYRESHEX=r5], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x5) setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, &(0x7f0000000380)={@loopback, @dev={0xac, 0x14, 0x14, 0x24}, 0xffffffffffffffff, "b24590df3541cc22fe170dcae5d1e9b2008d00fab0c24892b78274c612058a83", 0x4, 0xb2f9, 0x33, 0xa}, 0x3c) r10 = socket$netlink(0x10, 0x3, 0x8000000004) r11 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$MRT_ADD_MFC(r9, 0x0, 0xcc, &(0x7f0000000540)={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x1, "5a3fe1ec4f0f30087b038ea8ad2c6c91f0adb57202f9e845844be72aa3afd255", 0x1ff, 0x4, 0x4, 0x9}, 0x3c) connect$vsock_stream(r11, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r13, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x1}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xe3}]}, 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r10, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r13, 0x400, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x24040044) writev(r10, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7102d000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 1.006465218s ago: executing program 3 (id=261): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, &(0x7f0000000100)=0x10, 0x40800) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$tipc(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x20000001) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)) (async) accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, &(0x7f0000000100)=0x10, 0x40800) (async) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) (async) sendmsg$tipc(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x20000001) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) (async) 1.000319577s ago: executing program 0 (id=262): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x54, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYBLOB="454bf47b"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8a", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000002c0)={0x3}, 0x8) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@can_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_SRC_IF={0x8}]}, 0x1c}}, 0x0) 901.618261ms ago: executing program 2 (id=263): r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001980)={'netdevsim0\x00', &(0x7f0000001940)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x3a56}}) r1 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @private0}, {0xa, 0x0, 0x0, @dev, 0xff}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x80000000]}}, 0x5c) r2 = socket(0x10, 0x3, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f00000001c0)={0x7, 0xfffc, 0x2, 0x81, 0x2, 0x1, 0x6}, 0xc) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r1}, 0x8) pipe(&(0x7f0000000240)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xd, 0x15, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa17}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@call={0x85, 0x0, 0x0, 0x13}, @jmp={0x5, 0x1, 0x4, 0x4, 0x6, 0xc, 0x1}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000080)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x10, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000280)=0x3, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000004001b0000000c00228059fe00800400008006002100", @ANYBLOB="c8"], 0x28}, 0x1, 0x0, 0x0, 0x20000810}, 0x24000000) close(r3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$nl_sock_diag(0x10, 0x3, 0x4) r7 = socket(0x2, 0x3, 0xff) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r7, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000000240)={0x1c, 0x0, 0x4, 0x70bd2c, 0x21dfdbfe, {{}, {@void, @void}}}, 0xfcca}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r2, 0x89e8) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}, {0x2, 0x4e24, @broadcast}, 0x100, 0x0, 0x0, 0x0, 0xeb, &(0x7f0000000100)='macsec0\x00', 0xf, 0x1, 0x1}) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000004f00010000000000fcdbdf250000000032000100", @ANYRES32=0x0, @ANYBLOB="9d4098f443efb68ffaeefefca6de69f424608eb8ed525b537f35902280071e92c1"], 0x1c}}, 0x0) 847.70792ms ago: executing program 4 (id=264): r0 = socket$inet6(0xa, 0x800, 0x4c) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000000)={'caif0\x00', 0xfc}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x110, r2, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x4c}, {0xc, 0x90, 0xffffffffffffff89}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0x7fff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x7}}]}, 0x110}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r3, 0x300, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0xc845) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000400), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000700)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xc8, r5, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x123}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x102}, @NBD_ATTR_BACKEND_IDENTIFIER={0xe, 0xa, 'netdevsim\x00'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x135}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) getsockopt$sock_buf(r9, 0x1, 0x1a, &(0x7f0000000780)=""/4096, &(0x7f0000001780)=0x1000) sendto$inet6(0xffffffffffffffff, &(0x7f00000017c0)="375d2ba9087964a0c7d67f842f6833d8f34e9e80b8f4ca71e5023ddce42ec605dfdc047a583c97fde347718cc73d1615246021afd2b6c9d22999f69759f58e5616b42bb618887a68278da8cbd14ba7810cf9ccbdb94bd409dd59fd4df69e2a03891a619b4142398c17a4cfc660826e100ec07df129878ef1380116a919097933d04bd9035686686fbc399540a73d7ef1950b0606", 0x94, 0x20000004, &(0x7f0000001880)={0xa, 0x4e20, 0x7, @private1, 0x7fff}, 0x1c) r13 = bpf$ITER_CREATE(0x21, &(0x7f0000001900), 0x8) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000001a40)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001a00)={&(0x7f0000001940)={0xb4, r5, 0x300, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6f}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x101}]}, 0xb4}, 0x1, 0x0, 0x0, 0x400c000}, 0x2404c000) sendmsg$nl_crypto(r13, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)=@delrng={0x10, 0x14, 0x2, 0x70bd2b, 0x25dfdbfe, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$sock_kcm_SIOCKCMATTACH(r13, 0x89e0, &(0x7f0000001b80)={r10, r13}) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001bc0)={r13, r13, 0x4, r13}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000001d80)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001d40)={&(0x7f0000001c40)={0xe0, 0x27, 0x300, 0x70bd25, 0x25dfdbff, {0x18}, [@typed={0x14, 0x100, 0x0, 0x0, @ipv6=@empty}, @nested={0xb8, 0xc9, 0x0, 0x1, [@nested={0x4, 0x13d}, @nested={0x4, 0x43}, @typed={0x14, 0x92, 0x0, 0x0, @ipv6=@mcast2}, @nested={0x4, 0xa8}, @generic="a408c1da3b868f2453a40e5e0c9a256fbebea44798754cdec71b3ea82dff76c826fb260b3085868f0dfa91aa1a9bff0860602ff56900190b3f848f8298060cd00afd8e60832822124769a0183dd7d3a75c1957973373e671ab3a02973fac77f27347a4cf19d6f5d89734ca4e7836224186924963ca427b5c9683858ee8887b3d258c7647b5706aeb59b40733", @nested={0x4, 0x134}, @nested={0x4, 0x2}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4100}, 0x20006000) r14 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001e80)={'hsr0\x00', 0x0}) sendto(r14, &(0x7f0000001dc0)="4e62ebce8f32880096e574b2f8fbe9ba9468f5895b8163262de50fb7cfe119c25f41c57dccb478719251caa5217543145028e9b4dd1b3d87790a94febcf3295a21ce777fe441561a68bd76b33342e5a59b5792436bd16b8f14c2f3d001dcde88d05cc081a4a07ba7840653dd0442ab063ed901e7e0e6c8d1374e02644b847b09487950a2fe89d802ab00", 0x8a, 0x4000, &(0x7f0000001ec0)=@can={0x1d, r15}, 0x80) socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000003b40)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003b00)={&(0x7f0000002000)={0x1af0, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x175, 0x2a, [@preq={0x82, 0x3b, {{0x1, 0x1, 0x1}, 0xdc, 0x45, 0x4, @device_b, 0x22, @void, 0x4, 0x1, 0x3, [{{0x1}, @broadcast, 0x7fffffff}, {{}, @broadcast, 0x10001}, {{}, @broadcast, 0x1}]}}, @measure_req={0x26, 0xf3, {0xe6, 0x8, 0xa, "273e7dfe96ed82127d3a106726ffa5cf8114c5545bd65fc562bb50f8edec74d4f41bceb485216ae8053f3f20ff5aab53ade90fb77df1dd7aead309dc5e58a49b9ca6710d26007afe585312965f8df2256519f7dcd4a9ca730c4c4ea299dbef4b4bd7b162b4da411d62523b5f035280e0772df052c5321698cc12ec81d32fa5a913692cef7c9aa0179c53fecbe645914a64ba6ef97eae3febb5ecd7f491a096626d3b3798811e66e384540e0b1c5a8982b926ab94b6e66ddc7221aa0340367259aae8597917e69df0587d2031f3405572a3d8464ed18a1d25ef1f58539ab56f708a3a931ffa93479509e307ff9f2f619e"}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x0, 0x30, 0xa}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x5, 0x9, @device_a, 0x8, @value=@broadcast, 0x5, 0xa0c6, @device_b, 0x1}}, @ibss={0x6, 0x2, 0x5}, @chsw_timing={0x68, 0x4, {0x5, 0xfff4}}, @ssid={0x0, 0x6, @default_ap_ssid}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x1e, 0x80, [@mic={0x8c, 0x18, {0xe67, "2018b0ba8776", @long="55be9720b0fb4f94060f7df6c4ee4eb7"}}]}, @NL80211_ATTR_PROBE_RESP={0x780, 0x91, "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"}, @NL80211_ATTR_FTM_RESPONDER={0xb0, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x8, 0x3, "77790a87"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xa3, 0x3, "db20936afeac28eb21c4c8ff5c9d99022f3d65420d17b08cb7e33f9a3b7d818db6db83553b6f3bdcbd8c8529b2640ee6d50b83a72df8250b2bc4e72c224b630052d2bee9a0eaddae49ad6cf3b5bd3426f8119b6c5565e375f146a43ceb80f85fbfc4c0a3d6f5a1359a9f2c4ecf85cba4a55e4c27e2e385b936f334bbdc54d60935dff18b49757c79cc51e81a59cb2338b98043273c58e5b40d36076fe258ad"}]}, @NL80211_ATTR_FTM_RESPONDER={0x109c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x92, 0x3, "ab8f0fe54711e9d620fa39a7dd6f9345bf02038069032e75e19e95b3a751de0a0f9caf1a67f139bf6305a9027eab3f45ac5829af9d966644b49d765c363aa20af357149383436291f4d94167c122ac2603c49ef6de92d5b47094fb3e024e1e7b8e8b9648d194b7dca594cbb3872f5b7c29ab1dcb5d2a1e198e6ed2c76fdd571d35db46f40116b575e6bb3bf0f00f"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x1004, 0x3, "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"}]}, @NL80211_ATTR_BEACON_TAIL={0x70, 0xf, [@tim={0x5, 0x67, {0x9, 0xe6, 0xd, "73009c8fdcd61f4c473d4c2afb15f2e3def0e6b7ff5bd419851f1299792887803032cc27c7e98574e00faac53472329180a5adf5e69c28171a2517720aa1ccdfd88236785416f7f4372ff3638079a3b3115c92dcc6853ffe153127cf3bea994831425c1e"}}, @dsss={0x3, 0x1, 0x3}]}]}, 0x1af0}, 0x1, 0x0, 0x0, 0x48000}, 0x1) 768.52888ms ago: executing program 2 (id=265): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002840)=@newtaction={0x48, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0x48}}, 0x0) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x40, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x102}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x40}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000040)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) 765.352124ms ago: executing program 3 (id=266): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001000)=ANY=[@ANYBLOB="900100001900010000000000000000001d0109003201108025b57e35619bf20cb7f2934efacde0a223b473fe77f3e5ba76fb70fa1f414813a2a20005006f88d6e1db9b2b00000000000000000028002d802200be00c8ef6b8ced0c8ef9408a2c6c"], 0x190}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="850000006d0000009500000003000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x2, 0x4000010, 0xffffffffffffffff, 0x0) 754.256157ms ago: executing program 0 (id=267): r0 = socket$inet6(0xa, 0x3, 0x3) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x4, @loopback, 0x8001}, 0x1c) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000003c0)={r3, &(0x7f00000001c0)="a294238a60599e0c170c975906b66fefb05768afcb889fda2d66465d950225082ac8e85b9d51", &(0x7f0000000340)=""/86, 0x5943bb55469cc16e}, 0x20) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x4) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x58, r4, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_PEER_ADDR6={0x14, 0xb, @private2={0xfc, 0x2, '\x00', 0x1}}, @GTPA_LINK={0x8, 0x1, r5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000404}, 0x20000000) syz_emit_ethernet(0x11f, &(0x7f0000000c40)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0xe9, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', [{0x5, 0x1a, "b378b4ab7e6dec5a1bae2cabd9103dd505a4386e8716ff04a2f49e69485a91d1ff1a1fb0e3f2e0a68f507561d6a3f31d51ad78b4b8b0e81ef6ea021f561712d79e77c6b552fbaa4835d8b7ab763f33a96e5f8af87c5b64d51ea7bb6a01fb8d0f33f70755673c52b570661399f764fc770c5d88ecb6e516acacda6e3c75ec17351059b22af4887d6659c0e2daec240c6656dcd17718814a0808766225500115c2f274e13c40b5005b76dfa6583c9d0b682bf1e028287faea12c2b4c6be79c950510ccda59d6da46ff2b084d7ee085ee"}]}}}}}}, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000940)={0x2c, 0x0, 0xb, 0x3, 0x0, 0x0, {}, [@NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8}]}, 0x2c}}, 0x0) r6 = accept(r1, 0x0, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r7, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}}}, 0x10) sendmsg$tipc(r6, &(0x7f0000000900)={&(0x7f00000004c0)=@name={0x1e, 0x2, 0x3, {{0x43, 0x3}, 0x1}}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000500)="333eef885381baa3deb723c95301e206566bb5ddf624312da0c13c1b1e320e85151621e5c5ff1e07c69e43b764231c7a195ca92594d418ffba48cf491903ddf72ba6969f7ff8302a48535c96664d8b9781f2ba62f55f26832410627b0ebed4e19a160c84867f002051d2e30ba3629f48b84e1906edf112ff3cd324df27d901e02410353a99a8a50424779e9c270bd228263801c01589fe6dabc8813e", 0x9c}, {&(0x7f00000005c0)="24c32c685f19ff", 0x7}, {&(0x7f0000000600)="d9db102bc38591744f8fdb8b23ee0f3f155996b5a69867d524a83a0065dabd9c7dbdedae8cfafce99e961892080a8fafb0db66ac421722cbd474464e254816720994c0ed9cf78ea5466a77950d63ccf7778f3fce0d59d8094ef617ac34e9034eaf6753d6d13bffe0df980994e3438d4902d7b0a097954730213134c4731770e3b307f71613a2abe4ddf46fe4089726d7bf1439c7d9714a581b8761a3d49ed545e3cd8c86110cc7e89eaf1d374db669f8818df86bcd8c2bfa15a8b9323bcdc4f51942bbbfd5e24e66215c34b0146f6bac9b2b27590ff5c96d9e02edd6dfcd75b695f78a2b6ec9e4867418f073d1a7a2099764c5eef3c4", 0xf6}, {&(0x7f0000000700)="35b2207b94913b0d6573bd9c41bcdcae0572ffef1a16cddf0dcb289a73d5fd07097925619e3853a2abb75566de3f718b1ffcb5cc768245a484d5778c4888b8ad1144843733b16ad3b1e574e5a60f1112dd043ab3d2a0efcbd20fa02a44cc6459ca724ccffa0c3985b63ac014d2aea3a097bbebd692e5ccc9cf9d74d6c921c8f17c79a550945598cb7c2816198114dd13b33f4845221922fb529e5220d79bd9a152a1844f0e5f767e855a19486b", 0xad}, {&(0x7f00000007c0)="f463e819a00ffb6ef755e5a0ae4006d827039ff1f094201b4ae0f94ed3e396aff29fde64686d86313561edce5af86588072134ce1c360af053904a758a0f2617c397c1eede87bd85df118d0865f58a1c1398e8a4fbeff6662ecb137a8a45ab440f2a1246feb8a19d897331917ddbd3e9338cf1ff0f6ce8b0eab02ec8e22b23170df66b3861da0b7782", 0x89}], 0x5, &(0x7f0000000980)="0350a7c5b8a55ad09afae341ace04ab46ec0b96d27ce83a4df79ec126ed67c0a6a3c7a72f6038f32c87acbdbfdd326bcb91cf43455963adf3a21921c6be0597ba7d34bda9821", 0x46, 0x4000000}, 0x20040001) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@getaddr={0x14, 0x16, 0x400, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}}, 0x0) 687.779646ms ago: executing program 1 (id=268): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140100001f0005040000000000000000020000400c0001"], 0x114}], 0x1}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000180)) (async) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000040)=""/24, 0x18}], 0x1) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'team0\x00'}) (async) r3 = socket(0x2c, 0x80a, 0x100) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10) (async, rerun: 64) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "11a8bc", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x0, 0x1400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x1}]}}}]}, 0x3c}}, 0x0) r7 = accept(r3, &(0x7f0000000040), &(0x7f00000000c0)=0x80) (async) r8 = socket(0x22, 0x2, 0x4) bind$bt_hci(r8, 0x0, 0x0) (async) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r3) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r9, 0x10, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x91}, 0x8081) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) (async) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r11, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000006480)={0x1c, 0x27, 0x1, 0x0, 0x0, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x23, 0x0, 0x0, @pid}]}]}, 0x1c}], 0x1}, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r8, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f00000014c0)={0xa04, r10, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x4}, @NL80211_ATTR_FILS_ERP_RRK={0x47, 0xfc, "7242307c015c1a30b91825596a19e560381c92a6631ee2ca41cbe16675348a8291a9a60f9d3b240b88e40485bf861a74606158a1fe589483bf810c009d2f8935de9f5f"}, @NL80211_ATTR_FILS_ERP_REALM={0xef, 0xfa, "5f3c04a5936bf16e449fb2ed0f6b1368eaf921ca7e7844f8ef1c9e7a1bfae906511a056f6a5b6e72e450278d944c38a98de2b36047b88a27671adc72f05c4043869219d219294f10604aa65b822bce1d707fe5520b8022a3449560e4ed8dda7df8af03f227665f86615955b6a82563d41ff408771b9b84bf34654b89d4de1b48731a76e5d777a0029f0a7cb6e074a1fdca7bfc04f13725f02f042abd2c432aaae621b57b671a87aca44ee8a45006352b2e482140733c151301659d1c6839be3f52ff63e81ab23b11fa30d8936b0897a0ae56fc5529efcaf37748e1c617df8eb92e4bea637c45bc2f713fc9"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xa9a9}, @NL80211_ATTR_FILS_ERP_USERNAME={0x5, 0xf9, '['}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x5e}], @NL80211_ATTR_IE={0x272, 0x2a, [@challenge={0x10, 0x1, 0x84}, @dsss={0x3, 0x1, 0x34}, @perr={0x84, 0xf5, {0x7, 0xf, [{{}, @broadcast, 0x4760419c, @void, 0x24}, {{0x0, 0x1}, @broadcast, 0x10001, @value, 0x35}, {{}, @device_a, 0x814, @void, 0x19}, {{0x0, 0x1}, @device_b, 0x7, @value=@device_b, 0x12}, {{}, @broadcast, 0x401}, {{}, @device_a, 0x0, @void, 0x37}, {{0x0, 0x1}, @device_a, 0x200, @value=@device_b, 0x2f}, {{0x0, 0x1}, @device_b, 0x6, @value, 0x42}, {{}, @broadcast, 0x56, @void, 0x28}, {{0x0, 0x1}, @device_a, 0x0, @value=@device_b, 0x19}, {{0x0, 0x1}, @broadcast, 0x5, @value, 0x3e}, {{0x0, 0x1}, @device_a, 0x3, @value, 0x3f}, {{}, @device_a, 0x9588, @void, 0x28}, {{}, @device_b, 0xe96, @void, 0xc}, {{0x0, 0x1}, @device_a, 0x867d, @value=@broadcast, 0x8}]}}, @channel_switch={0x25, 0x3, {0x0, 0xad, 0x6}}, @dsss={0x3, 0x1, 0x4}, @tim={0x5, 0xcb, {0x30, 0x93, 0x2, "ce4e89c6c45e05f0334819079a9bfe5fa457fae6e16087cdf6d3a96e0d44cff957cbb24691707a36373c00cea0ba082c99d9d5544f78cbde1cfd07a509155160012307299328aab32816e57881a5fefac19614510784c62c32cf2c84ab21ac6053b0ba1a1314966011edecee840ef7c0332be3bedd5e13015381c0c5db77aec14c5deb689d8478ac62cb1c29b3f84c09a169c2f02a76cb235a18e25f824ef5578f52d96915918e5090443900b479538ce8100319e7fb4589f64987797e815803b92e5118477bbf7b"}}, @fast_bss_trans={0x37, 0x76, {0x3, 0x1, "67c55ec15340dbf76e2620ae3f8553be", "559974e7eff30ef3a278cc8b80fcf242b5068750f9bfceaacb08fef37e59f63b", "ec556acee5fab44972a4d7bf485255db4ca58b80e8ee389895e8c9cc8bc43c9f", [{0x1, 0x22, "2159b8e3b9ad67723c97b387bff02181cf1af4a8893c2130305a3e5aaf9471c7681d"}]}}, @cf={0x4, 0x6, {0xb8, 0x4, 0xe73d, 0x800}}, @link_id={0x65, 0x12, {@from_mac=@device_b}}, @mesh_id={0x72, 0x6}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xf2, 0xfc, "001dc9aa97e85d919119bf6ddf7eb96d989c97850e0d640bcac2c981aae14e21a13ffbcf4b89224bf5ee26993d80a39dbf5ee27bbcbea37642937da82fabe7e869ae56c77276f9d15c967b4e3ae51a2740177858cc4fd1886fe50cf1b2f0ef6b3f777be6a3e9457acd973ea924e9e8b52091773683cdc51c867442d4e485fc5b9170b52606858acb3aa7f54d4a39c8b5ef5f44c62e2b8e09f00bbf52f6ef4770c1048475bf9949b19c7b0ce0d651b0977191b07dcd89810e708aa652da523adfa4177579105eaea47b35bd5bda68ad3bde81b5b77a9c03c56f8cff0ca8385b36266e0defcb2ccbe3066f59653d2e"}, @NL80211_ATTR_FILS_ERP_RRK={0x3a, 0xfc, "418f11be5fe2e29695a14be2d241dcbf257634a4aea4e1575bf233f967cbfce6a79e8d67a7e27ac091e6a84c964350c09cf485e6b0c9"}, @NL80211_ATTR_FILS_ERP_RRK={0x59, 0xfc, "a5686c2e9f780dcd6ca14e7a4af89bb7b155bff369a8ad27843a54b0d31269c4467cb0a949323cd5490a58c7ab254db7acb9c4db24e9798581bbeeae5a74e019e20b9bd6fe8549c8c8c2efcefcfd52fe47afe2077b"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x4}, @NL80211_ATTR_FILS_ERP_RRK={0xfd, 0xfc, "ab6f8efe084c93aaae7b9b521031aeda5be1ecc32446f200261754b19bb19dfcf39be0488937f03a85b6b8a6490b5880a38cc02cf9dafb0ba3451d074167f4113447bb29b7a26eb3165115a9905ecbd620855f97b80fe131d6ccf08ab0127214986fb41a047c9b582331c9f3aaedf68916a80ca6f6dc4d91a8155b376d3c8b24956d8de8703b622ca0487c7303145b738522c9cebec1e53d295502ae106951c66384e55ef7df71aff11284d61dd4e5d553d04f9321b6ac6c3d7f9b5a615c393d355a6c9d4adc42bd71907e016ae20f274792a7c4cdee087837466593e654443ed3e888f443474b3d998fa9958259dedae65f21d03eb6ee5c2d"}], @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xa3, 0xfa, "c61e33110d13822fd6ccd00992ad9e6c2269605b9fc7e1e49396c39228aa07a7abb375330a52e3b21706bff1122d839fdce15a1521769a5e6e9e6ec7db828e047151ddb26e1dd0ef28427999b11c1a17bad186635e97bcfd501acb99efa291044c146888c3cf3327c613604cb596e8d332b966b77f887c2f74e260643c9d74579f291a168083a06cfa503adb85b10435f31b3164a5f9be0608f5b85184ca12"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x9}, @NL80211_ATTR_FILS_ERP_REALM={0x82, 0xfa, "7741928f50c9656739d6ec1f80d24e91211c16e2e20df203994201dfcb7e2ca338f863ab8e114ceebd9a1963c3776935dff5cfe5200e6bb068c8091eeeb12929a504dbc86e6fa50c05d65558c1fe3beac60c795e6def3de00468a625ea574d671c1d93487346b84c62c35642409116854257e79f5e3ea966f88e8d09e14e"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x401}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x5}, @NL80211_ATTR_FILS_ERP_REALM={0xad, 0xfa, "23d81044965cc19cb576bd8a0ac140cc738d6e48b5d7c826d070abc78aa6b9dad2f608463799a22afd48cafd72f11038af7ac4f64b7c78af11eab18983b47b429ea7b90e33e71a2b6bbcbc410018cc23f5128b26e5890291a2d096e64cf01cd3d4d2590f101cb286171d5bea984dbade9e1f7c98bed5ed614b479210b047a9544500c05c08b5132bc0441a37c42289d8ea3f9541585d1638bab8c8cd66f093ff4caf1b5de295d6c78c"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xf, 0xf9, "d051ed921e0ccdfe1b7bf0"}, @NL80211_ATTR_FILS_ERP_RRK={0x53, 0xfc, "17bbf7e9d92fded321c019ddc9f28fa5e94c41e8427f4cb386a5517700e5bd22fb09d353d444aa7426ad89e98f632c2db1de30d5f29dc7a3b48ac06eb4856780412c928fe7bc7a7980d69463a3f564"}, @NL80211_ATTR_FILS_ERP_REALM={0x3a, 0xfa, "f7d4f9dfa05c5128f551d986109e1f82a7d1b87e0e17e9f40614799ad8eddace5c3553a84f72a926664342015d760d523b69c23e6d51"}], @NL80211_ATTR_IE={0xf2, 0x2a, [@perr={0x84, 0xdb, {0x9, 0xd, [{{0x0, 0x1}, @device_a, 0x3, @value, 0x37}, {{}, @device_b, 0x9, @void, 0x28}, {{}, @device_a, 0x3, @void, 0x19}, {{0x0, 0x1}, @broadcast, 0x4, @value, 0xe}, {{}, @broadcast, 0x80000001, @void, 0x35}, {{0x0, 0x1}, @device_a, 0x6800000, @value, 0x2d}, {{}, @broadcast, 0x4, @void, 0x1b}, {{0x0, 0x1}, @device_a, 0x1, @value=@broadcast, 0x30}, {{0x0, 0x1}, @broadcast, 0x2, @value=@device_b, 0x7}, {{}, @device_b, 0x3, @void, 0x2d}, {{0x0, 0x1}, @device_a, 0x2b, @value}, {{0x0, 0x1}, @device_a, 0x8, @value=@broadcast, 0x9}, {{0x0, 0x1}, @device_a, 0x3daa, @value=@device_b, 0x20}]}}, @perr={0x84, 0xf, {0xa, 0x1, [{{}, @device_b, 0x10, @void, 0x39}]}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x5}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xd}]]}, 0xa04}}, 0x4040050) 557.180018ms ago: executing program 4 (id=269): r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0x80}], 0x1, 0x10002, 0x0) 537.187003ms ago: executing program 3 (id=270): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_REVISION={0x5}]}, 0x60}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r5, 0x84, 0x75, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0xfde) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x64010100}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x810}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x40) 448.356514ms ago: executing program 0 (id=271): sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x30000000) 396.97913ms ago: executing program 4 (id=272): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x4000040) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket(0x23, 0x6, 0x5) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r4, 0xffffffffffffc000) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x104, 0xb, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_ADT={0x54, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xb}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x9f6b}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_ADT={0x40, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x10001}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xff}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @broadcast}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR2={0x5, 0x15, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xfffffe00}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x50000000000}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x8000}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r8 = socket$rxrpc(0x21, 0x2, 0x8) bind$rxrpc(r8, &(0x7f0000000380)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0xffffffff, @mcast1, 0x500}}, 0x24) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r6, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x80) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4) sendmsg$kcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r9, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0x7, &(0x7f00000001c0)={0x4, 0xffffffff, 0xbd, 0xfff}, 0x10) 347.847635ms ago: executing program 1 (id=273): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002d00)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x44}}, 0x0) sendto(r0, &(0x7f00000004c0)="ff2ecca0d045c7211140326f2570fe2afe12210b4bab508e61adbd42ee18d42393a0713cd78bbb71d0dc75317c952885e67f9a33fe2ad4cee4753e69acb8d27b9b1178e7b9c61a0efa91ec663781a2fe55b076c53c9da448aab013235e845f601363efb8eaca4ec1e4ac782059bab168a00aa228c9d6ddfe8ba41454008c7dd9087718ac0f825072c27d31cf859707b4dcc0c8367daf2aa7fa589d903704ea44dc4b4de9efab9a004ddcbadb5875c104e6881fe00388e9127d2ce6e746fedfad2b24e9d8314d455d9188598a4131344934b0cfc19c963042c26dcea91fcd66", 0xdf, 0x1, &(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @my=0x0}, 0x80) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) setsockopt$sock_int(r3, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) listen(r5, 0x7) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x10000000}, 0x1c) listen(r3, 0x0) listen(r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004000000095"], &(0x7f00000003c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 287.554056ms ago: executing program 0 (id=274): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) (async) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000e0000009500000000000000dcaaadf051364717ee991fe30ef73606c3cd6ac4e9feb35e982574c841586e216c7d5720f76695648efb72c1e66f70a6a3fb0d77b7cffbfe472e53d4402a6ad79c4f9ee4f7b882a91bf8af97bfe5c5bc72039b23f7617c2ea91385422466fa1d17d8922eca027120ab6f4ebbf7dc398981e33d44dc634dff"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r2, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000e0000009500000000000000dcaaadf051364717ee991fe30ef73606c3cd6ac4e9feb35e982574c841586e216c7d5720f76695648efb72c1e66f70a6a3fb0d77b7cffbfe472e53d4402a6ad79c4f9ee4f7b882a91bf8af97bfe5c5bc72039b23f7617c2ea91385422466fa1d17d8922eca027120ab6f4ebbf7dc398981e33d44dc634dff"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r2, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r4 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r5) (async) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r5) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000060000f307000400e000000108000500ac1e00010f0007"], 0x34}, 0x2, 0x34005}, 0x0) socket(0x2a, 0x2, 0x0) (async) r7 = socket(0x2a, 0x2, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@gettfilter={0x24, 0x2e, 0x1, 0x5, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xd, 0xc}, {}, {0xa, 0x8}}}, 0x24}}, 0x404c080) (async) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@gettfilter={0x24, 0x2e, 0x1, 0x5, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xd, 0xc}, {}, {0xa, 0x8}}}, 0x24}}, 0x404c080) r9 = socket$netlink(0x10, 0x3, 0x8000000004) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r10, &(0x7f0000000340)={0x2, 0x0, 0x0, @dev}, 0x1c) r11 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r11, &(0x7f0000000500)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81000e224e207f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71006000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) writev(r9, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) socket$netlink(0x10, 0x3, 0x0) (async) r12 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r14 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r4) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000980)={0x2ac, r14, 0x4, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r13}, {0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r13}, {0x15c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2b1a}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x9, 0xff, 0xb, 0x3}, {0x3, 0x3, 0x0, 0xdc}, {0x9, 0x5, 0x9, 0x4}, {0x7, 0x8, 0x8, 0x5}, {0x20b, 0xff, 0x9, 0x3}, {0x8, 0x6, 0x1, 0xcc8b}, {0xf2b, 0x7f, 0xb, 0xfff}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10}}}]}}, {{0x8, 0x1, r13}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2ea}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4e}}}]}}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x40090}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x440, 0x2c, 0x837, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r13, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@TCA_RATE={0x6, 0x5, {0x7, 0xa}}, @filter_kind_options=@f_fw={{0x7}, {0x40c, 0x2, [@TCA_FW_POLICE={0x408, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0xfffffffd, 0xbea9, 0x8, 0x87, 0x9, 0xb, 0x0, 0x9, 0x0, 0x8001, 0x0, 0x80, 0x6, 0x0, 0xde, 0x7, 0xf6aa, 0x5, 0x9, 0x3ff, 0x7233, 0x8, 0xa26a, 0x6, 0xffff, 0x0, 0x4, 0x9, 0x8, 0x6, 0x8000, 0x0, 0x3, 0x0, 0x0, 0x3, 0x68f7, 0x400, 0x7fffffff, 0x9, 0x7, 0x624a, 0x5, 0xf9, 0x9, 0x5, 0x81, 0x400, 0x8, 0x800, 0x7ff, 0xffff, 0x5, 0xfffffff7, 0x8000, 0xb19, 0x6, 0xc7, 0x9, 0x0, 0x8, 0x0, 0x6, 0x0, 0x200, 0x5, 0x1, 0x3, 0x3, 0x6, 0x5, 0x8001, 0x4719, 0x2, 0x1, 0x1d79, 0x6, 0x5, 0x8000, 0x3, 0x2, 0x9, 0x45dd, 0x0, 0x7f, 0x1, 0xc, 0x1, 0x3, 0x1, 0x9, 0x81, 0xfffffffe, 0x6, 0x4647, 0xe0e5, 0x800, 0x5, 0x8, 0x2, 0x5, 0x2, 0x3, 0x1, 0xffff8001, 0x8, 0x1, 0x7fffffff, 0x83d8, 0x8000, 0x3, 0x3, 0x8000, 0x0, 0x3ff, 0x6e3, 0x52, 0x7fff, 0x4, 0x9, 0x7, 0xfffffff5, 0x40, 0x101, 0x5, 0x5, 0x80000000, 0x1, 0xffffffff, 0x1, 0x0, 0xfffffffc, 0xfffffffb, 0x2, 0x8, 0x8000000, 0x1, 0x4, 0x9, 0x7, 0x4, 0xd, 0x9, 0xfffffffa, 0x8, 0xfffffff2, 0x0, 0x2651, 0x800, 0xc319, 0x1, 0x0, 0x80000001, 0x6, 0x8, 0x6, 0x400, 0x4, 0x3ff, 0x501b5b55, 0x7fffffff, 0x2, 0x1, 0x3, 0x7ae, 0x2, 0x9, 0xb, 0xfff, 0x8, 0x101, 0x8000, 0x8, 0x6, 0x9, 0xe2c9, 0x1, 0x0, 0x1005, 0x0, 0x7, 0x2, 0x1f, 0x0, 0xf, 0xc, 0x1, 0x84f, 0x8, 0x94f7, 0x7, 0x5, 0xec38f52e, 0x7, 0x4, 0xc, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7fff, 0xff, 0x9, 0xfffffffc, 0x1ff, 0x3, 0x4, 0x7fff, 0x8, 0x100, 0x26e2, 0x800, 0x39, 0xb, 0x4, 0x3, 0x7, 0x8000, 0x800, 0x6, 0x0, 0x0, 0xc4, 0x8, 0x6, 0x3, 0x302, 0x1, 0x195, 0x543b, 0x7, 0x4, 0x1, 0x7, 0x81, 0x7, 0x9, 0x40, 0x101, 0x7f, 0x2, 0x2, 0x81, 0xfffffff9, 0x4, 0x1f6, 0xe9a, 0x3fc, 0x0, 0xdf85, 0xf, 0x4, 0x23, 0x6c, 0x2]}]}]}}]}, 0x440}, 0x1, 0x0, 0x0, 0x40004}, 0x24000000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x440, 0x2c, 0x837, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r13, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@TCA_RATE={0x6, 0x5, {0x7, 0xa}}, @filter_kind_options=@f_fw={{0x7}, {0x40c, 0x2, [@TCA_FW_POLICE={0x408, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0xfffffffd, 0xbea9, 0x8, 0x87, 0x9, 0xb, 0x0, 0x9, 0x0, 0x8001, 0x0, 0x80, 0x6, 0x0, 0xde, 0x7, 0xf6aa, 0x5, 0x9, 0x3ff, 0x7233, 0x8, 0xa26a, 0x6, 0xffff, 0x0, 0x4, 0x9, 0x8, 0x6, 0x8000, 0x0, 0x3, 0x0, 0x0, 0x3, 0x68f7, 0x400, 0x7fffffff, 0x9, 0x7, 0x624a, 0x5, 0xf9, 0x9, 0x5, 0x81, 0x400, 0x8, 0x800, 0x7ff, 0xffff, 0x5, 0xfffffff7, 0x8000, 0xb19, 0x6, 0xc7, 0x9, 0x0, 0x8, 0x0, 0x6, 0x0, 0x200, 0x5, 0x1, 0x3, 0x3, 0x6, 0x5, 0x8001, 0x4719, 0x2, 0x1, 0x1d79, 0x6, 0x5, 0x8000, 0x3, 0x2, 0x9, 0x45dd, 0x0, 0x7f, 0x1, 0xc, 0x1, 0x3, 0x1, 0x9, 0x81, 0xfffffffe, 0x6, 0x4647, 0xe0e5, 0x800, 0x5, 0x8, 0x2, 0x5, 0x2, 0x3, 0x1, 0xffff8001, 0x8, 0x1, 0x7fffffff, 0x83d8, 0x8000, 0x3, 0x3, 0x8000, 0x0, 0x3ff, 0x6e3, 0x52, 0x7fff, 0x4, 0x9, 0x7, 0xfffffff5, 0x40, 0x101, 0x5, 0x5, 0x80000000, 0x1, 0xffffffff, 0x1, 0x0, 0xfffffffc, 0xfffffffb, 0x2, 0x8, 0x8000000, 0x1, 0x4, 0x9, 0x7, 0x4, 0xd, 0x9, 0xfffffffa, 0x8, 0xfffffff2, 0x0, 0x2651, 0x800, 0xc319, 0x1, 0x0, 0x80000001, 0x6, 0x8, 0x6, 0x400, 0x4, 0x3ff, 0x501b5b55, 0x7fffffff, 0x2, 0x1, 0x3, 0x7ae, 0x2, 0x9, 0xb, 0xfff, 0x8, 0x101, 0x8000, 0x8, 0x6, 0x9, 0xe2c9, 0x1, 0x0, 0x1005, 0x0, 0x7, 0x2, 0x1f, 0x0, 0xf, 0xc, 0x1, 0x84f, 0x8, 0x94f7, 0x7, 0x5, 0xec38f52e, 0x7, 0x4, 0xc, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7fff, 0xff, 0x9, 0xfffffffc, 0x1ff, 0x3, 0x4, 0x7fff, 0x8, 0x100, 0x26e2, 0x800, 0x39, 0xb, 0x4, 0x3, 0x7, 0x8000, 0x800, 0x6, 0x0, 0x0, 0xc4, 0x8, 0x6, 0x3, 0x302, 0x1, 0x195, 0x543b, 0x7, 0x4, 0x1, 0x7, 0x81, 0x7, 0x9, 0x40, 0x101, 0x7f, 0x2, 0x2, 0x81, 0xfffffff9, 0x4, 0x1f6, 0xe9a, 0x3fc, 0x0, 0xdf85, 0xf, 0x4, 0x23, 0x6c, 0x2]}]}]}}]}, 0x440}, 0x1, 0x0, 0x0, 0x40004}, 0x24000000) r15 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r15, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r0], 0x2c}}, 0x0) 239.745244ms ago: executing program 2 (id=275): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) 196.2649ms ago: executing program 0 (id=276): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0x3}}, 0x2e) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="0e0000001000010000000000000000000100000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a30000000001400014000000000140000001100010000000000000000000000000a00"/104], 0x68}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={r0}) connect$bt_l2cap(r5, &(0x7f00000001c0)={0x1f, 0xa, @none, 0xe, 0x2}, 0xe) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="c85627783986750da80cf91d317d1acb4f7ab99cd9598fd6409aa2e38656270d0720b830d871a272cb12dd2389966ae6173fe9cb454fa2e1f81406c5bfebaa96e48349fe04e9c9e4393e17835aede463dac34450709e7105a72221849706ce97f4f65cc2ead2f6c4fc4eb53b4ec42e664979adba52adb82ca1046ccb7b3d768c70785acdc0679f991971876e01b07f066ddff7189de269b229c657fb36a8883a65029dd1c36e6c7eca7ca3c883028fb4bcacaff13fc08777197e7faa0f197d857ff94f7501dd768961c8d4625270c310679354feb54eb2e9e06220", @ANYRES16=r9, @ANYBLOB="000126bd7000fcdbdf250400000014000600ff010000000000000000000000000001"], 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000) r10 = socket(0x840000000002, 0x3, 0x100) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=ANY=[@ANYRES32=0xee00], 0x90, 0x8c1}}], 0x1, 0x110) sendto$inet6(r5, &(0x7f0000000600)="1620c9be4029830fa2b3b2604e53a1acfadf84eeecc0a18fcb2e7c51c0f8e210ff2a24d522eb18", 0x27, 0x40044, &(0x7f0000000640)={0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x101}, 0x1c) connect$inet(r10, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r10, &(0x7f0000005240), 0x4000095, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='scmi_xfer_begin\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r7, @ANYBLOB="0800260090150000080057"], 0x2c}}, 0x808) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40374aea410a01010000000000000000020000000900020073797a32000000000900010073797a30000000001400038022000240000000000800014000000000140000001100010000000000000000000000000a"], 0x68}}, 0x0) 111.998243ms ago: executing program 1 (id=277): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f0000011081f28dc8fab228d14c740c866f27c14abd344cbdb7e35ba5"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000000306010800000000000000000600000705000100070000000500010007000000050001000700000005000100070000000900020073797a3000000000050001000700000005000100070000000900020073797a30000000000900020073797a30000000000900020073797a3100000000c4006b8aebc45357e8d853ce7dd4d7201715a375f4626f9c65c96f90fc29072eabfa"], 0x74}, 0x1, 0x0, 0x0, 0x80c1}, 0x50) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r5, 0x5421, &(0x7f0000000000)=0x5) connect$bt_rfcomm(r5, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xb}, 0xa) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f0000000300)={0x0, @adiantum, 0x0, @desc4}) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x4}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newtfilter={0x68, 0x28, 0x575ac7824d421509, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r6, {0xa}, {0x6}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x3c, 0x2, [@TCA_BPF_ACT={0x38, 0x1, [@m_connmark={0x34, 0x5, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x68}}, 0x40) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) 57.038418ms ago: executing program 2 (id=278): r0 = getpid() r1 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000003c0), 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, r1, 0x0, 0x6, &(0x7f0000000400)='wlan1\x00'}, 0x30) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x2}, {{@in6=@loopback}, 0x0, @in=@remote}}, 0xa8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='sched_kthread_stop\x00', r3}, 0x18) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="041b00000000000000653900"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x1) 0s ago: executing program 4 (id=279): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={r5, 0x44e9}, &(0x7f0000000040)=0x8) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4801}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000000540)=""/203, 0xcb}], 0x3}, 0x7}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000004c40)=""/4098, 0x1002}, {0x0}, {&(0x7f0000001840)=""/105, 0x69}], 0x3}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x5}], 0x5, 0x40008062, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.133' (ED25519) to the list of known hosts. [ 82.081581][ T5819] cgroup: Unknown subsys name 'net' [ 82.270237][ T5819] cgroup: Unknown subsys name 'cpuset' [ 82.279656][ T5819] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.891019][ T5819] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.764686][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.773309][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.781295][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.786064][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.789573][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.796851][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.804612][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.812107][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.824172][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.826479][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.833074][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.847016][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.847094][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.862925][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.863515][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.878953][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.886185][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.886452][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.903256][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.903501][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.918579][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.927184][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.927275][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.946830][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.955990][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.533928][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 88.638392][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 88.711950][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 88.775196][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 88.889205][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.897368][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.904664][ T5831] bridge_slave_0: entered allmulticast mode [ 88.912330][ T5831] bridge_slave_0: entered promiscuous mode [ 88.947677][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 88.973370][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.980679][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.988094][ T5831] bridge_slave_1: entered allmulticast mode [ 88.995515][ T5831] bridge_slave_1: entered promiscuous mode [ 89.078970][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.086955][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.094191][ T5829] bridge_slave_0: entered allmulticast mode [ 89.101778][ T5829] bridge_slave_0: entered promiscuous mode [ 89.140354][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.149789][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.157500][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.164692][ T5833] bridge_slave_0: entered allmulticast mode [ 89.172246][ T5833] bridge_slave_0: entered promiscuous mode [ 89.182103][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.190222][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.197616][ T5829] bridge_slave_1: entered allmulticast mode [ 89.204890][ T5829] bridge_slave_1: entered promiscuous mode [ 89.231748][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.241132][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.249145][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.256658][ T5833] bridge_slave_1: entered allmulticast mode [ 89.263812][ T5833] bridge_slave_1: entered promiscuous mode [ 89.357326][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.401303][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.413392][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.440384][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.447680][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.454930][ T5844] bridge_slave_0: entered allmulticast mode [ 89.462315][ T5844] bridge_slave_0: entered promiscuous mode [ 89.472847][ T5831] team0: Port device team_slave_0 added [ 89.481779][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.559789][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.567818][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.574951][ T5844] bridge_slave_1: entered allmulticast mode [ 89.584838][ T5844] bridge_slave_1: entered promiscuous mode [ 89.597733][ T5831] team0: Port device team_slave_1 added [ 89.617565][ T5829] team0: Port device team_slave_0 added [ 89.623632][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.630862][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.638909][ T5830] bridge_slave_0: entered allmulticast mode [ 89.646283][ T5830] bridge_slave_0: entered promiscuous mode [ 89.683343][ T5833] team0: Port device team_slave_0 added [ 89.691044][ T5829] team0: Port device team_slave_1 added [ 89.697266][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.704432][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.711988][ T5830] bridge_slave_1: entered allmulticast mode [ 89.723490][ T5830] bridge_slave_1: entered promiscuous mode [ 89.757476][ T5833] team0: Port device team_slave_1 added [ 89.764469][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.771861][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.798838][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.851470][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.876332][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.883312][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.909851][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.929004][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.936045][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.957212][ T5847] Bluetooth: hci3: command tx timeout [ 89.962138][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.967488][ T5143] Bluetooth: hci4: command tx timeout [ 89.980359][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.983446][ T56] Bluetooth: hci2: command tx timeout [ 89.990395][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.022452][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.036451][ T56] Bluetooth: hci1: command tx timeout [ 90.042255][ T56] Bluetooth: hci0: command tx timeout [ 90.053819][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.077607][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.084580][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.110827][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.134832][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.149287][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.171463][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.178652][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.204593][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.290452][ T5831] hsr_slave_0: entered promiscuous mode [ 90.297357][ T5831] hsr_slave_1: entered promiscuous mode [ 90.331436][ T5830] team0: Port device team_slave_0 added [ 90.341952][ T5844] team0: Port device team_slave_0 added [ 90.352110][ T5844] team0: Port device team_slave_1 added [ 90.390548][ T5829] hsr_slave_0: entered promiscuous mode [ 90.399827][ T5829] hsr_slave_1: entered promiscuous mode [ 90.406462][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.414133][ T5829] Cannot create hsr debugfs directory [ 90.422314][ T5830] team0: Port device team_slave_1 added [ 90.500920][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.508060][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.534205][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.565139][ T5833] hsr_slave_0: entered promiscuous mode [ 90.571669][ T5833] hsr_slave_1: entered promiscuous mode [ 90.578275][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.585917][ T5833] Cannot create hsr debugfs directory [ 90.605369][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.612406][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.638869][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.650611][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.657790][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.683858][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.727996][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.734969][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.765044][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.937839][ T5830] hsr_slave_0: entered promiscuous mode [ 90.944242][ T5830] hsr_slave_1: entered promiscuous mode [ 90.950724][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.958589][ T5830] Cannot create hsr debugfs directory [ 91.021901][ T5844] hsr_slave_0: entered promiscuous mode [ 91.028779][ T5844] hsr_slave_1: entered promiscuous mode [ 91.034966][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.043372][ T5844] Cannot create hsr debugfs directory [ 91.387388][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.402979][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.435262][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.449277][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.581794][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.605461][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.624197][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.650039][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.703139][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.718367][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.743468][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.753975][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.798985][ T54] cfg80211: failed to load regulatory.db [ 91.897297][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.925434][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.947951][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.959598][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.001706][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.034049][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.041601][ T56] Bluetooth: hci2: command tx timeout [ 92.047220][ T5847] Bluetooth: hci3: command tx timeout [ 92.052712][ T5847] Bluetooth: hci4: command tx timeout [ 92.066229][ T774] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.073542][ T774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.108298][ T774] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.115476][ T774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.123242][ T5847] Bluetooth: hci0: command tx timeout [ 92.123661][ T56] Bluetooth: hci1: command tx timeout [ 92.172469][ T5844] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.183014][ T5844] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.198858][ T5844] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.229380][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.239452][ T5844] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.272707][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.355628][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.395482][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.420658][ T3559] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.427943][ T3559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.471056][ T774] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.478300][ T774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.498785][ T3579] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.505982][ T3579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.571593][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.591423][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.598623][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.652564][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.692014][ T774] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.699155][ T774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.724076][ T774] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.731240][ T774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.797485][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.853380][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.978441][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.020222][ T5831] veth0_vlan: entered promiscuous mode [ 93.082159][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.089753][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.133271][ T5831] veth1_vlan: entered promiscuous mode [ 93.152130][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.179728][ T774] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.186927][ T774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.378399][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.395414][ T5831] veth0_macvtap: entered promiscuous mode [ 93.404569][ T5829] veth0_vlan: entered promiscuous mode [ 93.429347][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.443897][ T5829] veth1_vlan: entered promiscuous mode [ 93.488057][ T5831] veth1_macvtap: entered promiscuous mode [ 93.565552][ T5830] veth0_vlan: entered promiscuous mode [ 93.581732][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.629948][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.654787][ T5830] veth1_vlan: entered promiscuous mode [ 93.667219][ T5833] veth0_vlan: entered promiscuous mode [ 93.674867][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.688010][ T5831] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.699402][ T5831] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.710369][ T5831] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.720789][ T5831] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.741087][ T5829] veth0_macvtap: entered promiscuous mode [ 93.761543][ T5829] veth1_macvtap: entered promiscuous mode [ 93.786842][ T5833] veth1_vlan: entered promiscuous mode [ 93.904915][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.926573][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.938247][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.948492][ T5830] veth0_macvtap: entered promiscuous mode [ 93.964231][ T5833] veth0_macvtap: entered promiscuous mode [ 93.979761][ T5833] veth1_macvtap: entered promiscuous mode [ 93.999549][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.018222][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.037973][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.053683][ T5830] veth1_macvtap: entered promiscuous mode [ 94.101716][ T5829] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.114110][ T5829] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.123380][ T5847] Bluetooth: hci2: command tx timeout [ 94.123420][ T5847] Bluetooth: hci3: command tx timeout [ 94.123540][ T56] Bluetooth: hci4: command tx timeout [ 94.141132][ T5829] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.150165][ T5829] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.162492][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.174664][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.191414][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.203813][ T5143] Bluetooth: hci1: command tx timeout [ 94.209366][ T5143] Bluetooth: hci0: command tx timeout [ 94.214127][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.225595][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.236650][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.248299][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.271364][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.282582][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.294002][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.305148][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.318324][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.360314][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.370958][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.381440][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.392814][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.402944][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.414641][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.426809][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.440591][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.451387][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.461443][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.471915][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.483105][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.493587][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.505436][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.529426][ T5833] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.538384][ T5833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.547610][ T5833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.556892][ T5833] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.573689][ T5844] veth0_vlan: entered promiscuous mode [ 94.588519][ T5830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.598918][ T5830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.608972][ T5830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.618041][ T5830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.651346][ T5844] veth1_vlan: entered promiscuous mode [ 94.663340][ T774] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.672362][ T774] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.741188][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.765194][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.820770][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.869950][ T1328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.879846][ T5844] veth0_macvtap: entered promiscuous mode [ 94.882164][ T1328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.911350][ T5844] veth1_macvtap: entered promiscuous mode [ 95.018236][ T774] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.031058][ T5918] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 95.037273][ T774] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.142451][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.176093][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.198141][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.232507][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.243696][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.254978][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.265572][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.276611][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.288016][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.303814][ T1328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.330807][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.331147][ T1328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.344057][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.365506][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.378290][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.388539][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.404252][ T5924] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2'. [ 95.419645][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.431911][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.442699][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.454161][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.484435][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.494858][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.500659][ T5920] netlink: 100 bytes leftover after parsing attributes in process `syz.3.6'. [ 95.529909][ T5844] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.541263][ T5844] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.551362][ T5844] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.561016][ T5844] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.602437][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.632933][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.853559][ T5932] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3'. [ 95.865011][ T5929] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 95.899856][ T5935] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8'. [ 95.915629][ T5935] netlink: 'syz.3.8': attribute type 1 has an invalid length. [ 95.929416][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.937516][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.940391][ T5935] netlink: 'syz.3.8': attribute type 1 has an invalid length. [ 95.953006][ T5935] netlink: 'syz.3.8': attribute type 2 has an invalid length. [ 95.980190][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.011541][ T5935] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8'. [ 96.020207][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.148755][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.205977][ T5143] Bluetooth: hci4: command tx timeout [ 96.207061][ T56] Bluetooth: hci3: command tx timeout [ 96.211738][ T5143] Bluetooth: hci2: command tx timeout [ 96.224458][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.276372][ T5143] Bluetooth: hci0: command tx timeout [ 96.278419][ T56] Bluetooth: hci1: command tx timeout [ 96.312445][ T5948] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 96.601333][ T5951] Zero length message leads to an empty skb [ 96.636961][ T5951] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.678294][ T5957] nbd0: detected capacity change from 0 to 4096 [ 96.705766][ T5962] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14'. [ 96.706575][ T5957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13'. [ 96.784403][ T56] block nbd0: Receive control failed (result -104) [ 96.793558][ T5965] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 97.095204][ T5985] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17'. [ 97.150489][ T5989] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17'. [ 97.199305][ T5986] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 97.272576][ T5985] bridge0: entered promiscuous mode [ 97.288603][ T5985] macvlan2: entered promiscuous mode [ 97.308771][ T5988] netlink: 'syz.0.20': attribute type 21 has an invalid length. [ 97.344617][ T5988] IPv6: NLM_F_CREATE should be specified when creating new route [ 97.366976][ T5988] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.374387][ T5988] IPv6: NLM_F_CREATE should be set when creating new route [ 97.381738][ T5988] IPv6: NLM_F_CREATE should be set when creating new route [ 97.389067][ T5988] IPv6: NLM_F_CREATE should be set when creating new route [ 97.467501][ T5989] macvlan3: entered promiscuous mode [ 97.711424][ T6012] xt_CT: You must specify a L4 protocol and not use inversions on it [ 98.050733][ T6030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.494076][ T6054] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 98.605262][ T6058] netlink: 'syz.0.38': attribute type 15 has an invalid length. [ 99.581353][ T6052] unknown channel width for channel at 909000KHz? [ 99.895342][ T6081] C: renamed from lo (while UP) [ 100.102829][ T6081] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 100.173154][ T6082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.43'. [ 100.604046][ T6082] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.694334][ T6082] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.943491][ T6113] netlink: 16 bytes leftover after parsing attributes in process `syz.0.50'. [ 101.003932][ T6115] dvmrp0: entered allmulticast mode [ 101.192941][ T6124] netlink: 20 bytes leftover after parsing attributes in process `syz.2.54'. [ 101.567932][ T6149] IPVS: Unknown mcast interface: dvmrp1 [ 101.739380][ T6162] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.039711][ T6174] syz.1.67: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 102.074718][ T6174] CPU: 0 UID: 0 PID: 6174 Comm: syz.1.67 Not tainted 6.15.0-rc3-syzkaller-00109-gf73f05c6f711 #0 PREEMPT(full) [ 102.074749][ T6174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 102.074766][ T6174] Call Trace: [ 102.074779][ T6174] [ 102.074790][ T6174] dump_stack_lvl+0x189/0x250 [ 102.074834][ T6174] ? lockdep_hardirqs_on+0x9c/0x150 [ 102.074870][ T6174] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.074925][ T6174] warn_alloc+0x214/0x310 [ 102.074956][ T6174] ? __pfx___schedule+0x10/0x10 [ 102.074991][ T6174] ? __pfx_warn_alloc+0x10/0x10 [ 102.075019][ T6174] ? kasan_save_track+0x4f/0x80 [ 102.075041][ T6174] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 102.075065][ T6174] ? xskq_create+0x56/0x170 [ 102.075095][ T6174] ? __x64_sys_setsockopt+0x18b/0x220 [ 102.075113][ T6174] ? do_syscall_64+0xf6/0x210 [ 102.075131][ T6174] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.075163][ T6174] __vmalloc_node_range_noprof+0x125/0x12c0 [ 102.075223][ T6174] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 102.075255][ T6174] ? __kasan_kmalloc+0x93/0xb0 [ 102.075284][ T6174] vmalloc_user_noprof+0x74/0x80 [ 102.075311][ T6174] ? xskq_create+0xbf/0x170 [ 102.075340][ T6174] xskq_create+0xbf/0x170 [ 102.075374][ T6174] xsk_init_queue+0xb0/0x110 [ 102.075407][ T6174] xsk_setsockopt+0x43f/0x710 [ 102.075440][ T6174] ? __pfx_xsk_setsockopt+0x10/0x10 [ 102.075482][ T6174] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 102.075504][ T6174] ? __pfx_xsk_setsockopt+0x10/0x10 [ 102.075535][ T6174] do_sock_setsockopt+0x257/0x3e0 [ 102.075559][ T6174] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 102.075576][ T6174] ? __fget_files+0x2a/0x420 [ 102.075607][ T6174] ? __fget_files+0x3a0/0x420 [ 102.075631][ T6174] ? __fget_files+0x2a/0x420 [ 102.075666][ T6174] __x64_sys_setsockopt+0x18b/0x220 [ 102.075693][ T6174] do_syscall_64+0xf6/0x210 [ 102.075715][ T6174] ? clear_bhb_loop+0x45/0xa0 [ 102.075744][ T6174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.075764][ T6174] RIP: 0033:0x7fb77f58e969 [ 102.075789][ T6174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.075806][ T6174] RSP: 002b:00007fb780368038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 102.075828][ T6174] RAX: ffffffffffffffda RBX: 00007fb77f7b6080 RCX: 00007fb77f58e969 [ 102.075842][ T6174] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 102.075854][ T6174] RBP: 00007fb77f610ab1 R08: 0000000000000004 R09: 0000000000000000 [ 102.075867][ T6174] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.075880][ T6174] R13: 0000000000000000 R14: 00007fb77f7b6080 R15: 00007ffed757f338 [ 102.075919][ T6174] [ 102.086239][ T6176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.69'. [ 102.131116][ T6174] Mem-Info: [ 102.377330][ T6174] active_anon:4957 inactive_anon:0 isolated_anon:0 [ 102.377330][ T6174] active_file:1052 inactive_file:38310 isolated_file:0 [ 102.377330][ T6174] unevictable:768 dirty:1390 writeback:0 [ 102.377330][ T6174] slab_reclaimable:9595 slab_unreclaimable:98636 [ 102.377330][ T6174] mapped:28427 shmem:1428 pagetables:921 [ 102.377330][ T6174] sec_pagetables:0 bounce:0 [ 102.377330][ T6174] kernel_misc_reclaimable:0 [ 102.377330][ T6174] free:1351903 free_pcp:507 free_cma:0 [ 102.422992][ T6172] netlink: 72 bytes leftover after parsing attributes in process `syz.1.67'. [ 102.445201][ T6174] Node 0 active_anon:19928kB inactive_anon:0kB active_file:4208kB inactive_file:153160kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:113708kB dirty:5560kB writeback:0kB shmem:4176kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10948kB pagetables:3584kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 102.490786][ T6174] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 102.535400][ T6174] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 102.653708][ T6174] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 102.672417][ T6174] Node 0 DMA32 free:1483628kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:19620kB inactive_anon:0kB active_file:4208kB inactive_file:153068kB unevictable:1536kB writepending:5560kB present:3129332kB managed:2564200kB mlocked:0kB bounce:0kB free_pcp:1176kB local_pcp:488kB free_cma:0kB [ 102.734833][ T6192] warning: `syz.2.74' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 102.849806][ T6174] lowmem_reserve[]: 0 0 0 0 0 [ 102.854628][ T6174] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 102.916254][ T6174] lowmem_reserve[]: 0 0 0 0 0 [ 102.921058][ T6174] Node 1 Normal free:3911432kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:96kB local_pcp:0kB free_cma:0kB [ 102.975205][ T6174] lowmem_reserve[]: 0 0 0 0 0 [ 103.000831][ T6174] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 103.020330][ T6174] Node 0 DMA32: 720*4kB (UME) 369*8kB (UME) 342*16kB (UME) 43*32kB (UME) 19*64kB (UE) 16*128kB (UME) 2*256kB (UM) 3*512kB (M) 6*1024kB (ME) 5*2048kB (M) 354*4096kB (M) = 1484360kB [ 103.145859][ T6174] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 103.194111][ T6174] Node 1 Normal: 270*4kB (U) 60*8kB (UME) 49*16kB (UME) 221*32kB (UME) 92*64kB (UME) 29*128kB (UME) 9*256kB (UM) 10*512kB (UME) 4*1024kB (UME) 3*2048kB (UE) 946*4096kB (M) = 3911496kB [ 103.214923][ T6174] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 103.237468][ T6174] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 103.251650][ T6174] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 103.261630][ T6174] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 103.311165][ T6174] 40791 total pagecache pages [ 103.343883][ T6174] 0 pages in swap cache [ 103.353773][ T6174] Free swap = 124996kB [ 103.364781][ T6174] Total swap = 124996kB [ 103.375820][ T6174] 2097051 pages RAM [ 103.379782][ T6174] 0 pages HighMem/MovableOnly [ 103.384682][ T6174] 424343 pages reserved [ 103.389998][ T6174] 0 pages cma reserved [ 103.524344][ T6233] veth0: entered promiscuous mode [ 103.552092][ T6232] veth0: left promiscuous mode [ 103.709021][ T6248] netlink: 28 bytes leftover after parsing attributes in process `syz.2.88'. [ 103.746925][ T6251] netlink: 12 bytes leftover after parsing attributes in process `syz.4.87'. [ 103.760243][ T6248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.88'. [ 103.789213][ T6248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.88'. [ 104.154091][ T6266] team_slave_0: entered promiscuous mode [ 104.160029][ T6266] team_slave_1: entered promiscuous mode [ 104.222116][ T6266] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 104.253260][ T6266] team0: Device macvtap1 is already an upper device of the team interface [ 104.286465][ T6266] team_slave_0: left promiscuous mode [ 104.292114][ T6266] team_slave_1: left promiscuous mode [ 104.435857][ T6275] pim6reg: entered allmulticast mode [ 104.588738][ T6285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.101'. [ 104.681248][ T6288] netlink: 'syz.4.103': attribute type 1 has an invalid length. [ 104.693540][ T6288] netlink: 224 bytes leftover after parsing attributes in process `syz.4.103'. [ 105.011358][ T6304] SET target dimension over the limit! [ 105.583934][ T6331] netlink: 'syz.0.117': attribute type 1 has an invalid length. [ 105.741022][ T6337] netlink: 'syz.4.119': attribute type 25 has an invalid length. [ 105.946570][ T6345] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 105.977027][ T6348] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 106.177792][ T6355] sctp: failed to load transform for md5: -2 [ 106.382834][ T6370] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 106.628760][ T6378] ip6erspan0: entered promiscuous mode [ 106.798584][ T6393] netlink: 'syz.0.135': attribute type 1 has an invalid length. [ 106.864253][ T5885] IPVS: starting estimator thread 0... [ 106.970400][ T6398] IPVS: using max 26 ests per chain, 62400 per kthread [ 107.078925][ T6410] netlink: 'syz.0.139': attribute type 58 has an invalid length. [ 107.161926][ T6410] __nla_validate_parse: 4 callbacks suppressed [ 107.161943][ T6410] netlink: 20 bytes leftover after parsing attributes in process `syz.0.139'. [ 107.241236][ T54] IPVS: starting estimator thread 0... [ 107.354060][ T6422] sctp: failed to load transform for md5: -2 [ 107.355865][ T6427] IPVS: using max 26 ests per chain, 62400 per kthread [ 107.362094][ T6414] sctp: failed to load transform for md5: -2 [ 107.731116][ T6453] netlink: 'syz.4.148': attribute type 1 has an invalid length. [ 107.784230][ T6452] xt_CT: No such helper "pptp" [ 107.861078][ T6453] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.961843][ T6466] nft_compat: unsupported protocol 0 [ 108.029343][ T6452] bond1: (slave veth3): Enslaving as an active interface with a down link [ 108.118897][ T6454] bond1: (slave veth5): Enslaving as an active interface with a down link [ 108.608218][ T6499] Cannot find del_set index 4 as target [ 108.884339][ T10] IPVS: starting estimator thread 0... [ 108.901413][ T6516] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 108.998535][ T6518] IPVS: using max 28 ests per chain, 67200 per kthread [ 109.048484][ T6516] Bluetooth: MGMT ver 1.23 [ 109.176991][ T6533] openvswitch: netlink: IP tunnel dst address not specified [ 109.383779][ T6544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.168'. [ 109.545365][ T6545] unknown channel width for channel at 909000KHz? [ 109.860222][ T6566] xt_CT: You must specify a L4 protocol and not use inversions on it [ 109.864166][ T6563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.172'. [ 109.916096][ T6555] netlink: 12 bytes leftover after parsing attributes in process `syz.1.170'. [ 110.125329][ T6579] netlink: 'syz.2.176': attribute type 23 has an invalid length. [ 110.496436][ T6595] netlink: 'syz.0.180': attribute type 21 has an invalid length. [ 110.523548][ T6595] netlink: 132 bytes leftover after parsing attributes in process `syz.0.180'. [ 110.537639][ T6596] netlink: 68 bytes leftover after parsing attributes in process `syz.2.181'. [ 110.705933][ T6602] netlink: 16 bytes leftover after parsing attributes in process `syz.4.182'. [ 111.021589][ T6615] netlink: 32 bytes leftover after parsing attributes in process `syz.2.185'. [ 111.030741][ T6615] netlink: 32 bytes leftover after parsing attributes in process `syz.2.185'. [ 111.087189][ T6615] netlink: 32 bytes leftover after parsing attributes in process `syz.2.185'. [ 111.184233][ T6631] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 111.659688][ T6656] 0·: renamed from hsr_slave_1 (while UP) [ 111.696898][ T6656] 0·: entered allmulticast mode [ 111.718257][ T6656] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 112.203738][ T6685] pimreg: entered allmulticast mode [ 112.243428][ T6685] dvmrp0: left allmulticast mode [ 112.264580][ T6685] pimreg: left allmulticast mode [ 112.781186][ T6719] netlink: 'syz.2.209': attribute type 9 has an invalid length. [ 113.043812][ T6733] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 113.078251][ T6733] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 113.264700][ T6746] netlink: 'syz.1.217': attribute type 3 has an invalid length. [ 113.487982][ T6753] wireguard: wg1: Could not create IPv4 socket [ 113.508596][ T6758] __nla_validate_parse: 35 callbacks suppressed [ 113.508613][ T6758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.221'. [ 113.542857][ T6758] macsec0: entered promiscuous mode [ 113.574748][ T6760] netlink: 'syz.4.222': attribute type 6 has an invalid length. [ 114.209654][ T6796] openvswitch: netlink: IP tunnel dst address not specified [ 114.218288][ T6796] netlink: 'syz.0.231': attribute type 1 has an invalid length. [ 114.230106][ T6796] netlink: 224 bytes leftover after parsing attributes in process `syz.0.231'. [ 114.340384][ T6799] netlink: 68 bytes leftover after parsing attributes in process `syz.1.234'. [ 114.362968][ T6801] netlink: 68 bytes leftover after parsing attributes in process `syz.1.234'. [ 114.485693][ T6805] netlink: 'syz.0.236': attribute type 1 has an invalid length. [ 114.495371][ T6805] netlink: 'syz.0.236': attribute type 2 has an invalid length. [ 114.611373][ T6811] netlink: 12 bytes leftover after parsing attributes in process `syz.2.238'. [ 115.053178][ T6836] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.243'. [ 115.063922][ T6831] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.243'. [ 115.404867][ T6852] pim6reg: entered allmulticast mode [ 115.585069][ T6869] netlink: 20 bytes leftover after parsing attributes in process `syz.0.256'. [ 115.595340][ T6867] netlink: 'syz.3.255': attribute type 11 has an invalid length. [ 115.612727][ T6867] netlink: 224 bytes leftover after parsing attributes in process `syz.3.255'. [ 115.626179][ T6869] netlink: 5 bytes leftover after parsing attributes in process `syz.0.256'. [ 116.113943][ T6897] nft_compat: unsupported protocol 0 [ 116.120673][ T6900] netlink: 'syz.1.268': attribute type 1 has an invalid length. [ 116.198026][ T6904] vlan0: entered promiscuous mode [ 116.335334][ T6909] netlink: 'syz.3.270': attribute type 1 has an invalid length. [ 116.477051][ T6909] 8021q: adding VLAN 0 to HW filter on device bond1 [ 116.528350][ T6915] netlink: 'syz.4.272': attribute type 10 has an invalid length. [ 116.637063][ T6915] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 116.674171][ T6914] bond1: (slave gretap1): making interface the new active one [ 116.724507][ T6914] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 116.759114][ T13] wlan1: Trigger new scan to find an IBSS to join [ 116.766698][ T13] ------------[ cut here ]------------ [ 116.772200][ T13] WARNING: CPU: 0 PID: 13 at net/mac80211/scan.c:1213 ieee80211_request_ibss_scan+0x82e/0x8b0 [ 116.782584][ T13] Modules linked in: [ 116.786790][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.15.0-rc3-syzkaller-00109-gf73f05c6f711 #0 PREEMPT(full) [ 116.798871][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 116.809590][ T13] Workqueue: events_unbound cfg80211_wiphy_work [ 116.816042][ T13] RIP: 0010:ieee80211_request_ibss_scan+0x82e/0x8b0 [ 116.822685][ T13] Code: e8 87 c5 f7 f6 eb 05 e8 80 c5 f7 f6 b8 ea ff ff ff e9 fb f8 ff ff e8 71 c5 f7 f6 90 0f 0b 90 e9 bb f8 ff ff e8 63 c5 f7 f6 90 <0f> 0b 90 eb dd 48 c7 c1 50 ed 7e 8f 80 e1 07 80 c1 03 38 c1 0f 8c [ 116.842517][ T13] RSP: 0018:ffffc900001278a0 EFLAGS: 00010293 [ 116.848701][ T13] RAX: ffffffff8ac7f81d RBX: 0000000000000000 RCX: ffff88801bee8000 [ 116.856740][ T13] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 116.864743][ T13] RBP: 0000000000000001 R08: 0000000000000000 R09: 1ffff92000024ec4 [ 116.873226][ T13] R10: dffffc0000000000 R11: fffff52000024ec5 R12: ffff8880288d3268 [ 116.881677][ T13] R13: ffff8880288d0e80 R14: dffffc0000000000 R15: 0000000000000c80 [ 116.890000][ T13] FS: 0000000000000000(0000) GS:ffff8881260cf000(0000) knlGS:0000000000000000 [ 116.899352][ T13] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 116.907579][ T13] CR2: 00007fdaaaee56c0 CR3: 000000000dd36000 CR4: 00000000003526f0 [ 116.915584][ T13] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 116.924817][ T13] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 116.933420][ T13] Call Trace: [ 116.937181][ T13] [ 116.940152][ T13] ieee80211_ibss_work+0xde7/0x1060 [ 116.945397][ T13] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 116.951390][ T13] ? ieee80211_iface_work+0xf39/0xfe0 [ 116.957153][ T13] ? rcu_is_watching+0x15/0xb0 [ 116.961976][ T13] cfg80211_wiphy_work+0x2dc/0x460 [ 116.967527][ T13] ? process_scheduled_works+0x9ec/0x17a0 [ 116.973292][ T13] process_scheduled_works+0xadb/0x17a0 [ 116.979233][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 116.985273][ T13] worker_thread+0x8a0/0xda0 [ 116.989966][ T13] kthread+0x70e/0x8a0 [ 116.994073][ T13] ? __pfx_worker_thread+0x10/0x10 [ 116.999364][ T13] ? __pfx_kthread+0x10/0x10 [ 117.003996][ T13] ? __pfx_kthread+0x10/0x10 [ 117.009314][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 117.014565][ T13] ? lockdep_hardirqs_on+0x9c/0x150 [ 117.019966][ T13] ? __pfx_kthread+0x10/0x10 [ 117.024601][ T13] ret_from_fork+0x4b/0x80 [ 117.029125][ T13] ? __pfx_kthread+0x10/0x10 [ 117.033778][ T13] ret_from_fork_asm+0x1a/0x30 [ 117.038977][ T13] [ 117.042034][ T13] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 117.049328][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.15.0-rc3-syzkaller-00109-gf73f05c6f711 #0 PREEMPT(full) [ 117.061320][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 117.071378][ T13] Workqueue: events_unbound cfg80211_wiphy_work [ 117.077638][ T13] Call Trace: [ 117.080914][ T13] [ 117.083844][ T13] dump_stack_lvl+0x99/0x250 [ 117.088446][ T13] ? __asan_memcpy+0x40/0x70 [ 117.093033][ T13] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.098237][ T13] ? __pfx__printk+0x10/0x10 [ 117.102841][ T13] panic+0x2db/0x790 [ 117.106755][ T13] ? __pfx_panic+0x10/0x10 [ 117.111180][ T13] ? show_trace_log_lvl+0x4fb/0x550 [ 117.116397][ T13] ? ret_from_fork_asm+0x1a/0x30 [ 117.121341][ T13] __warn+0x31b/0x4b0 [ 117.125330][ T13] ? ieee80211_request_ibss_scan+0x82e/0x8b0 [ 117.131323][ T13] ? ieee80211_request_ibss_scan+0x82e/0x8b0 [ 117.137312][ T13] report_bug+0x2be/0x4f0 [ 117.141652][ T13] ? ieee80211_request_ibss_scan+0x82e/0x8b0 [ 117.147650][ T13] ? ieee80211_request_ibss_scan+0x82e/0x8b0 [ 117.153641][ T13] ? ieee80211_request_ibss_scan+0x830/0x8b0 [ 117.159640][ T13] handle_bug+0x84/0x160 [ 117.163887][ T13] exc_invalid_op+0x1a/0x50 [ 117.168392][ T13] asm_exc_invalid_op+0x1a/0x20 [ 117.173237][ T13] RIP: 0010:ieee80211_request_ibss_scan+0x82e/0x8b0 [ 117.179855][ T13] Code: e8 87 c5 f7 f6 eb 05 e8 80 c5 f7 f6 b8 ea ff ff ff e9 fb f8 ff ff e8 71 c5 f7 f6 90 0f 0b 90 e9 bb f8 ff ff e8 63 c5 f7 f6 90 <0f> 0b 90 eb dd 48 c7 c1 50 ed 7e 8f 80 e1 07 80 c1 03 38 c1 0f 8c [ 117.199466][ T13] RSP: 0018:ffffc900001278a0 EFLAGS: 00010293 [ 117.205555][ T13] RAX: ffffffff8ac7f81d RBX: 0000000000000000 RCX: ffff88801bee8000 [ 117.213530][ T13] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 117.221505][ T13] RBP: 0000000000000001 R08: 0000000000000000 R09: 1ffff92000024ec4 [ 117.229480][ T13] R10: dffffc0000000000 R11: fffff52000024ec5 R12: ffff8880288d3268 [ 117.237455][ T13] R13: ffff8880288d0e80 R14: dffffc0000000000 R15: 0000000000000c80 [ 117.245435][ T13] ? ieee80211_request_ibss_scan+0x82d/0x8b0 [ 117.251445][ T13] ieee80211_ibss_work+0xde7/0x1060 [ 117.256683][ T13] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 117.262336][ T13] ? ieee80211_iface_work+0xf39/0xfe0 [ 117.267710][ T13] ? rcu_is_watching+0x15/0xb0 [ 117.272489][ T13] cfg80211_wiphy_work+0x2dc/0x460 [ 117.277613][ T13] ? process_scheduled_works+0x9ec/0x17a0 [ 117.283345][ T13] process_scheduled_works+0xadb/0x17a0 [ 117.288933][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 117.294937][ T13] worker_thread+0x8a0/0xda0 [ 117.299556][ T13] kthread+0x70e/0x8a0 [ 117.303636][ T13] ? __pfx_worker_thread+0x10/0x10 [ 117.308749][ T13] ? __pfx_kthread+0x10/0x10 [ 117.313433][ T13] ? __pfx_kthread+0x10/0x10 [ 117.318034][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 117.323328][ T13] ? lockdep_hardirqs_on+0x9c/0x150 [ 117.328540][ T13] ? __pfx_kthread+0x10/0x10 [ 117.333138][ T13] ret_from_fork+0x4b/0x80 [ 117.337558][ T13] ? __pfx_kthread+0x10/0x10 [ 117.342172][ T13] ret_from_fork_asm+0x1a/0x30 [ 117.346948][ T13] [ 117.350319][ T13] Kernel Offset: disabled [ 117.354647][ T13] Rebooting in 86400 seconds..