last executing test programs: 3m30.840149674s ago: executing program 2 (id=1097): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000300)={0x0, 0x5b56, 0x1}, &(0x7f0000000340)=0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000002c0)={@val={0x0, 0x200}, @void, @eth={@multicast, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x9, 0x14, 0xe4, 0x0, 0x1, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @rand_addr=0x64010100}}}}}}, 0x26) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000440)={r1, @in6={{0xa, 0x4e21, 0xfffffffc, @dev={0xfe, 0x80, '\x00', 0x44}, 0x1000}}, 0x400, 0x1, 0x10001, 0x7, 0x2, 0x4, 0x1}, 0xb4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@rand_addr=' \x01\x00', 0x4, r4}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000200001002cbd7000000000000a801400000000070100000014000200fc0200000000000000000000000000001400cac429ea00000000000000000000000000013a1965ed0f1ab82ee6048d7a18e0ee16e672bc1a793a21bea4a53b7ad8eef5b77593a17efaae4b99a6d407bd450e33f04926ae7e2ae4b1ce3594cc51306812f44b71e891ecdf8e8e5898061ff0e393c0a91cd9e87825f93d2411e875ece45b5869c038e8551874d5b542cffa6308d175c6be5ab8b28e875117"], 0x44}}, 0x40000) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300090004000600eab556a705251e618294ff0051f60a84c9663b7fd493f8f4d4938037e7d6ebfe592bb38738cf86a6d0001000000e", 0x62}, {&(0x7f00000000c0)="f0451d3ba10b58af841b429121", 0xd}, {&(0x7f0000000540)="40d88b0614c2a4f976b99dbf48a6b39de6a2bb7d783acbcf17f7eae579ff03a1d516b960d1c35cac8756cfffc44476fdc83cdd76c0241654caf2cfb0ed17cdcb8c3a2b0fb00170398abc4dfcb91c0d574422448dc9a8d55cf3919e9dd24d573eb3bf75cc488f92f52a2ad255bceac89ebdef0a8362ca44bae3a1ebd3a8a5cdaf8c1a872b2e33248b7e07f035adf8fac822007ee8d1defc588503b47d842f774851a6087394873ca4c7be9930ef6c08d092b93d334d0a189fbdb6213b179b84aa6a5b5281b54bc7878bc753b3c04469897318369718c3", 0xd6}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x4000810) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8085}, 0x24004000) recvmmsg(r7, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x6f92}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000340)=""/250, 0xfa}, {&(0x7f0000000dc0)=""/48, 0x30}, {&(0x7f00000039c0)=""/4107, 0x100b}, {&(0x7f0000000e40)=""/228, 0xe4}, {&(0x7f00000001c0)=""/63, 0x3f}, {&(0x7f0000000b00)=""/213, 0xd5}, {&(0x7f0000000c00)=""/193, 0xc1}], 0x7}, 0x80000000}], 0x4, 0x40, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$sock_int(r8, 0x1, 0xc, 0x0, &(0x7f0000000400)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r9, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)={0x14, 0x5, 0x1, 0x5, 0x0, 0x0, {0x5, 0x0, 0x2}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2000c000}, 0x8021) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x64, r11, 0x1, 0x0, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x80000000}}}]}, 0x64}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@getrule={0x14, 0x22, 0x2, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) 3m30.459531077s ago: executing program 2 (id=1103): r0 = socket(0x200000000000011, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, 0xffffffffffffffff, 0x26, 0x0, 0x0, @void, @value}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000300)=0x448a, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x11, 0xf7, r3, 0x1, 0x20, 0x6, @local}, 0x14) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000080)=0x9, 0x4) recvfrom$packet(r2, 0x0, 0x0, 0x2000, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r5, &(0x7f0000000500)="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", &(0x7f0000000200)=""/239, 0x4}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000feffff3f00000000000000008510000006000000851000000400000066080000b5612b29f524bd782dde9b9d09000000001800000000100000000000000000000095000000000000009500000000000000850000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x88dd895beaa99965, 0x12, r4, 0xe352a000) 3m30.246697697s ago: executing program 2 (id=1107): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f00000006c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$inet6(0xa, 0x2, 0xf35) setsockopt$inet6_int(r1, 0x29, 0x24, &(0x7f0000000000)=0x7, 0x4) 3m30.104086404s ago: executing program 2 (id=1109): ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f00000002c0)={{}, 0x0, 0x0, @inherit={0x78, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000006000000000000000100008000000000000001000000001f200000000000000003000000000000000900000000000000ffffffffffffff7f0000000000000000ff0f0000000000000000000000000000080000000000000006000000000000000200000000000000d403000000000000"]}, @devid}) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'xfrm0\x00', @broadcast}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2c, 0x2, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x41}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x943b}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x49}]}}]}, 0x5c}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2c, 0x2, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x41}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x943b}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x49}]}}]}, 0x5c}}, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) (async) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) ppoll(0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)={[0xffffffffffffffff]}, 0x8) socket$tipc(0x1e, 0x5, 0x0) (async) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) (async) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r5, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r4, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r7 = socket(0x2d, 0x2, 0x0) accept$nfc_llcp(r7, 0x0, 0x0) (async) accept$nfc_llcp(r7, 0x0, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x22005}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x70, r6, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0xd}}}}, [@NL80211_ATTR_FRAME={0x1e, 0x33, @mgmt_frame=@deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {}, @device_b, @device_b, @random="41c62dfc1c9e", {0x7, 0xc}}, 0x6, @void}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x70}}, 0x4) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000001300), r7) sendmsg$TIPC_CMD_SET_NETID(r7, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x24, r8, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x9}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) (async) sendmsg$nl_route(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) 3m29.390261723s ago: executing program 2 (id=1111): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = epoll_create(0x7) r3 = epoll_create1(0x0) r4 = epoll_create(0x7) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f00000019c0)=ANY=[@ANYBLOB="94e2f55162a1e61b35000000", @ANYRES16=r0, @ANYRESHEX, @ANYRES32, @ANYBLOB="7800028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400040000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES64=r3, @ANYBLOB], 0x94}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) r5 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x6, &(0x7f0000000840)={0x4c96, {{0x29, 0x4f21, 0xf, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfe}}}, 0x88) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f00000005c0)={0x1000001b}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000180)={0x10}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) close(r4) listen(r1, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="89000000120081ae08061cdc030ec08000000000e9ffffff0004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947e05b59e33538afa8af92347514f0a56a20ff27fff0000000000000000006b5d9ecdc3216e4956e04a9cd4f8ee56778878587e6f8ad42aab4d39f714fb906308", 0xa2}], 0x1}, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000580)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000800)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000002d0000032bbd7000fddbdf25070000001cb34ef5e738772b2a828cbc8d6c1753c489af2f33ebb6bb45e1383a639ef85eeeef64dddce21ec526855d8a4369cf0f2b458f52828744572f7698186ebc2b213ae006202e817d7e3696bc2c"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='rss_stat\x00', r11, 0x0, 0xffffffffffffffff}, 0x18) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f00000003c0)={r1, 0x40, 0x1, 0x39d599e8}) r13 = socket$pptp(0x18, 0x1, 0x2) ioctl$BTRFS_IOC_QGROUP_CREATE(r13, 0x4010942a, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r9) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000300000100000000000000", @ANYRES32=r8, @ANYBLOB="0200"/20, @ANYRES32=r10, @ANYBLOB="f9ae25ff8aa4bfa3d9925c9d16cf525c2b245551e30d4dfd4f845dbe8663914081f44d", @ANYBLOB="040000000500"/28], 0x50) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) 3m29.064917866s ago: executing program 2 (id=1117): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000240)='pmap_register\x00', r1, 0x0, 0xf69}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_PROTOINFO={0x8, 0x5, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x4}}]}, 0x6c}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="09000000ffffffff0700000040"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) close(0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r8, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x24, r6, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x51}, @val={0x8, 0x3, r9}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x240040c0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000003880)={0x1c, r10, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000640)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r0, @ANYRESHEX=r2, @ANYRES8=r0, @ANYRES32=r5], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000240)='pmap_register\x00', r11, 0x0, 0xf69}, 0x18) socket$kcm(0x29, 0x2, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 3m13.9479963s ago: executing program 32 (id=1117): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000240)='pmap_register\x00', r1, 0x0, 0xf69}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_PROTOINFO={0x8, 0x5, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x4}}]}, 0x6c}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="09000000ffffffff0700000040"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) close(0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r8, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x24, r6, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x51}, @val={0x8, 0x3, r9}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x240040c0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000003880)={0x1c, r10, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000640)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r0, @ANYRESHEX=r2, @ANYRES8=r0, @ANYRES32=r5], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000240)='pmap_register\x00', r11, 0x0, 0xf69}, 0x18) socket$kcm(0x29, 0x2, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2m28.475670963s ago: executing program 5 (id=1644): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x13, 0x0, 0x0, 0x0, 0x100c, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10) syz_emit_ethernet(0x113, &(0x7f0000000580)={@local, @multicast, @val={@val={0x88a8, 0x1, 0x1, 0x2}, {0x8100, 0x3, 0x0, 0x2}}, {@generic={0xd, "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"}}}, &(0x7f0000000040)={0x1, 0x4, [0x9e8, 0x665, 0xafd, 0x137]}) (async) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x15, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r3, 0x11, 0x0, 0x0, @void, @value=r2}, 0x20) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000400)={r2}, 0x42) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)={@ifindex, r3, 0x11, 0x0, 0x0, @void, @value=r4}, 0x20) 2m28.371470947s ago: executing program 5 (id=1646): r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x20000090) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r3], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) (async) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x378b5ec3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x4}}}]}]}], {0x14}}, 0xc8}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x378b5ec3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x4}}}]}]}], {0x14}}, 0xc8}}, 0x0) socket(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x33c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x288, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0x11, 0x8, 0x4}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x4000000, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "554b956aa3fcfbc4a187baf0437163b5d33108db016465f92a93480d2c246d90f03741da6ee916f7c9917dbd81da67d6150151679559af8402b932745d19fbfbd679c133c4714565f91cd05790d990818bac85598b6a844cb2c2d277aaca9a88ee0e6a834ba02b4e549f11fb13e9fe33730c55997f2d3b7e6469210db81587fc522295f49a78f4e08ddfb01172b12a19b303a0c47fa3500cdc3e6725a79dcd3731c37083c3bbe73c43e7e2ea82c72986a1499c677c565ea1cfc874e7e978e4ebe8d338f0b37807d40333ee570133982998623ec809826f1009856a9d9d8e839c65d3ead78c6b3cb8f7beee8e59f19de93d06628a2cdfa4333d96882b96c36cc3"}]}}, @TCA_STAB={0x74, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0x26, 0xffff, 0x8, 0x2, 0x2, 0x8, 0x2}}, {0x57, 0x2, [0x6, 0x6]}}, {{0x1c, 0x1, {0x4, 0xc, 0x7f, 0x8, 0x0, 0x10, 0x3, 0x1}}, {0x6, 0x2, [0x5fd]}}, {{0x1c, 0x1, {0x7, 0x80, 0x0, 0x1000, 0x2, 0x7fffffff, 0x10088, 0x4}}, {0xc, 0x2, [0x4, 0xffff, 0xff52, 0x9]}}]}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}, @TCA_RATE={0x6, 0x5, {0x10, 0x2}}]}, 0x33c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="08004e01"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r11, @ANYBLOB="01000000"], 0x3c}}, 0x0) 2m28.00513104s ago: executing program 5 (id=1649): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendto$inet6(r0, &(0x7f0000000240)="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", 0xff, 0x20000, &(0x7f0000000040)={0xa, 0x4e23, 0x800, @mcast1, 0xd828}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x5}]}}}]}]}], {0x14}}, 0xd4}}, 0x0) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000013c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000000)={0x40, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x24004090}, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'bridge0\x00', &(0x7f0000000140)=@ethtool_drvinfo={0x3, "c653eb788ca744ab49b0bc8b7c38c5386a9f8fc329b0c08aa1974b55df51358e", "becc2b963fc758b093f0c3162721cc2c6db0e11fe93cb921e31b7afc9848f9f8", "9d5e255e876cef6a5e8b322ceb9f9f59f92f7b7e5f4cb64b0dba0d27e79083f6", "f1c9a32e2ff71a89cd1b6471db6af48500491adb8c4b1c0a8fdf46f4f3168fee", "6a5ac82f1f76e71cf5cc5d665c6006929a314c0c4e1c2a4c43afe8074197b481", "11f18e6d4f5d4f4e717b780f", 0x200, 0xc, 0x8, 0x9, 0xd1ba}}) socket$inet6_udplite(0xa, 0x2, 0x88) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendto$inet6(r0, &(0x7f0000000240)="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", 0xff, 0x20000, &(0x7f0000000040)={0xa, 0x4e23, 0x800, @mcast1, 0xd828}, 0x1c) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x5}]}}}]}]}], {0x14}}, 0xd4}}, 0x0) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000013c0), r1) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000000)={0x40, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x24004090}, 0x1) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'bridge0\x00', &(0x7f0000000140)=@ethtool_drvinfo={0x3, "c653eb788ca744ab49b0bc8b7c38c5386a9f8fc329b0c08aa1974b55df51358e", "becc2b963fc758b093f0c3162721cc2c6db0e11fe93cb921e31b7afc9848f9f8", "9d5e255e876cef6a5e8b322ceb9f9f59f92f7b7e5f4cb64b0dba0d27e79083f6", "f1c9a32e2ff71a89cd1b6471db6af48500491adb8c4b1c0a8fdf46f4f3168fee", "6a5ac82f1f76e71cf5cc5d665c6006929a314c0c4e1c2a4c43afe8074197b481", "11f18e6d4f5d4f4e717b780f", 0x200, 0xc, 0x8, 0x9, 0xd1ba}}) (async) 2m27.73809367s ago: executing program 5 (id=1650): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x30, r1, 0x5, 0x70bd28, 0x400, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x80c4}, 0x0) 2m27.382814254s ago: executing program 5 (id=1653): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3b, 0x0, &(0x7f00000000c0)=0xe00) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="a4010000100001000000000000000000fc0000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES64=r0, @ANYRESDEC=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fe800000dbd80000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d00000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c001400636d61632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000e3630dde215f3da533f861c33b10bf7dcb03d1e0dc304addd2f5580dc977"], 0x1a4}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r3) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000228bd7000fbdbdf254400000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900090000002300000064ea85939e50c8bd222549d89c16098e1ef3556299d5d453ed7f3049dee61a7d0dfaf70d25ea52c203b1e578bd5ed173b78dbb4875b8d5cca703e20d656d70e5265a0feefc39e1d10473dff66c49dde35eca3afd7163a485bcc1df56394a4e83f542055b7ca48ceb185b54fb797a74bdd77aa89600da28bd257525557da405f775d2195a754aa5a8f4dff45deda8d0d08709298f8ba27a0f680000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000140)={0x1d, r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xcc}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x1, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {}, {0x8, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x42051}, 0x80) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r3) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xb8, r9, 0x200, 0x70bd28, 0x0, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9e91}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) openat$cgroup_devices(r8, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) 2m26.967666589s ago: executing program 5 (id=1656): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x15, 0x301, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) read(r0, &(0x7f0000000080)=""/186, 0xba) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0x401) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)=ANY=[@ANYBLOB="14000000250001002c040000ffdbdf2507"], 0x14}}, 0x24000100) write$tun(r3, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffff7c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 2m15.867740832s ago: executing program 3 (id=1746): r0 = socket$inet6(0xa, 0x80000, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r1, 0x29, 0x18, &(0x7f0000000000)=0x2, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x1b}, @in6=@dev, 0x4e20, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x1e) write(r7, &(0x7f0000000080)="0b000300010001", 0x7) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r8 = accept4(r6, 0x0, 0x0, 0x0) recvmsg$can_raw(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/71, 0x47}, {&(0x7f00000002c0)=""/165, 0xa5}], 0x2}, 0x20) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[], 0x100}, 0x1, 0x0, 0x0, 0x24044001}, 0x4000880) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x8460}], 0x1, &(0x7f0000000480), &(0x7f0000000500)={[0xffffffff]}, 0x8) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000100)={r9, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, 0x10) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000600)="9ba231b007", 0x5}], 0x2) sendmmsg(r0, &(0x7f0000002b00)=[{{&(0x7f0000000180)=@nl=@unspec, 0x80, 0x0}, 0x5b4}], 0x1, 0x0) 2m15.231439883s ago: executing program 3 (id=1753): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) connect$l2tp6(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x1e, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0xe, 0x5, 0x0, 0xc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffb}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_fd={0x18, 0x6, 0x1, 0x0, 0x1}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x8}, @generic={0xfb, 0xa, 0x1, 0x8, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000005c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000640)={0x4, 0x3, 0x70, 0x40}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000680)=[0x1, 0x1, 0xffffffffffffffff], &(0x7f00000006c0)=[{0x1, 0x1, 0x10}, {0x5, 0x2, 0x7, 0xd}, {0x3, 0x1, 0x4, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x1, 0x4, 0x3, 0x5}, {0x1, 0x3, 0xa, 0x9}], 0x10, 0x32e6a912, @void, @value}, 0x94) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'sit0\x00', 0x0, 0xf0610d94f96970a2, 0x10, 0x0, 0xf, {{0x1f, 0x4, 0x0, 0x1b, 0x7c, 0x64, 0x0, 0x6, 0x0, 0x0, @multicast2, @local, {[@noop, @timestamp_prespec={0x44, 0x3c, 0x32, 0x3, 0x4, [{@broadcast, 0x4}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0xffff47e4}, {@loopback}, {@private=0xa010901, 0x80000001}, {@broadcast, 0x2}, {@multicast2, 0x7fffffff}, {@rand_addr=0x64010101, 0x8}]}, @rr={0x7, 0x27, 0xf4, [@private=0xa010100, @multicast1, @empty, @dev={0xac, 0x14, 0x14, 0x12}, @multicast1, @local, @remote, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x4, 0xb3, 0x1, 0x1}]}}}}}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000001c0)={@private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, 0x4, 0xb556, 0x0, 0x400, 0x5, 0x800008, r3}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='f2fs_map_blocks\x00', r4}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x4, 0x4, &(0x7f0000000080)=ANY=[@ANYRESOCT=r1, @ANYRES64=r4, @ANYBLOB="100000000000002505000000000000009500ecff00000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000a00)=""/149, 0x0, 0x480, '\x00', r3, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYBLOB="0900010022"], 0x9) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000001980)={0x0, 0x38, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0xffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7fff}, @in6={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x72e}]}, &(0x7f00000019c0)=0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000ac0)={0x3, &(0x7f0000000a80)=[{0x48, 0x40}, {0x20, 0x1, 0x0, 0xfffff010}, {0x16, 0x7, 0x2, 0x6}]}, 0x10) sendmmsg(r8, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001040)="e7337703a4", 0x5}], 0x1}}], 0x1, 0x4c818) r10 = getpid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000300)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) r13 = getgid() socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000008c0), &(0x7f0000000ac0)=0xc) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="dff21151b47ecbd1ba4839e5e1b842f11a9c1053e39ac5f0b737c8457c47a26d191b0a62673654783513e0b9f485be12debc0e400e1c9b7a8c87b1f23d6d9b705652539fcafb81a95640e6c834e263a0f2b75ddf148ddc43d2bf1714a2140424504ab20a8e53acb38561f787b5b49b7af62e92c1e27ba06c989652ec4e326d6383e47082b454ac3a3267dccea9bd52d10a89c3cc03e474e893328236c2551d517e900f9723b0653ff648", 0xaa}], 0x1, &(0x7f00000003c0)=[@rights={{0x1c, 0x1, 0x1, [r5, r2, r6]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r11, r13}}}, @rights={{0x18, 0x1, 0x1, [r2, r6]}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}], 0x78, 0xa0}, 0x4000) 2m15.13009999s ago: executing program 3 (id=1756): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1) sendmsg$alg(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000940)="dc2a", 0x2}], 0x1, 0x0, 0x0, 0x8044}, 0x40) 2m14.921144527s ago: executing program 3 (id=1759): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x13, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000090000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000073000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x5, &(0x7f00000002c0)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x34}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x238, 0x108, 0x11, 0x148, 0x0, 0x10, 0x1a0, 0x2a8, 0x2a8, 0x1a0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x588, 0x548, 0x7}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x5, 0x3, 'syz0\x00', {0x4d}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0xffffffff, 'batadv_slave_1\x00', 'veth1_to_batadv\x00', {}, {}, 0x73, 0x2}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xdb, 0x4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) 2m14.715482432s ago: executing program 3 (id=1760): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000100)={0x5e2b, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e22, @broadcast}}}, 0x108) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, 0x3a) sendto$inet6(r1, &(0x7f00000004c0)="2e6c0a70e0567b453888ee8130495131ce74b5d79f078ee14d65328935233068b17d02f3f10facb3b679bb4d62281f09c6f92810e5ee5b683913424914b983e7bf90ab439b1488eb77b2fa18bb0c2300483665922083fdf944a25d04c5196fad187e39a6a864490009f387b7b2295b50dc7120010d751b9aed1c6717b0e998bd2b32a941fd113598e564", 0x8a, 0x5, 0x0, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x8000004}}, 0x2e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r4, 0x89ec, &(0x7f0000000340)) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r6 = socket(0x2a, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40080}, 0xa, &(0x7f0000000400)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"/316], 0x13c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r9}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0xff}]}}}]}, 0x3c}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x303}, "38a23ca4c687976c", "d7a761d22b1c799c48f70534159ed171", "af4dfc94", "6ea48ecb7266dab5"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r3, 0x5421, &(0x7f0000000140)=0x1) setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)=0x1000000000, 0x12) writev(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x2f, 0x84, 0x8f, 0x8, 0x2c, @private1={0xfc, 0x1, '\x00', 0x2}, @remote, 0x8000, 0x8000, 0x80000000, 0x4}}) 2m14.27130377s ago: executing program 3 (id=1764): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_request\x00', r0, 0x0, 0x5}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_request\x00', r0, 0x0, 0x5}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000002000010300000000000000000200000000000000000000000c001400", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="74c56b194567f7a1a3e3156b8f725af0726faaf93d87e0e175a554bce2a1686f854053a2288e485951d3430ecb606e9d28e30c798d2c1e0daf3a5eb37b5e8f34728efad196a865f7c59ceb239568327d2c1c9abfa2348d80b294287038bcfa0a90e8917010c797459e5f7e40312f2dd9ce"], 0x28}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000002000010300000000000000000200000000000000000000000c001400", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="74c56b194567f7a1a3e3156b8f725af0726faaf93d87e0e175a554bce2a1686f854053a2288e485951d3430ecb606e9d28e30c798d2c1e0daf3a5eb37b5e8f34728efad196a865f7c59ceb239568327d2c1c9abfa2348d80b294287038bcfa0a90e8917010c797459e5f7e40312f2dd9ce"], 0x28}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x82, &(0x7f0000000000)={@link_local, @random="1704b45adbde", @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private, 0x1000000}, {@private}, {@broadcast}, {@dev}, {@private}, {@empty}, {@private}]}]}}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f00000001c0), 0x4) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004500081400000000006c9078ac1414bbac1414aa"], 0x0) (async) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004500081400000000006c9078ac1414bbac1414aa"], 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0xff) (async) r5 = socket(0x10, 0x803, 0xff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) (async) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) socket(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r8, &(0x7f0000000200)=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}}}, 0x10) bind$tipc(r8, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0x4}}, 0x10) sendmsg$tipc(r8, &(0x7f00000006c0)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20044094}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000380)={'bond0\x00', {0x2, 0x4e23, @local}}) sendmsg$nl_route_sched(r7, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228641, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228641, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0xc}, {0x3}, {0xfff1, 0x3d}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004c885}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x0, @private=0xa010102}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xe40c}, &(0x7f00000000c0)=0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2m11.910346437s ago: executing program 33 (id=1656): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x15, 0x301, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) read(r0, &(0x7f0000000080)=""/186, 0xba) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0x401) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)=ANY=[@ANYBLOB="14000000250001002c040000ffdbdf2507"], 0x14}}, 0x24000100) write$tun(r3, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffff7c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 1m59.260947821s ago: executing program 34 (id=1764): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_request\x00', r0, 0x0, 0x5}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_request\x00', r0, 0x0, 0x5}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000002000010300000000000000000200000000000000000000000c001400", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="74c56b194567f7a1a3e3156b8f725af0726faaf93d87e0e175a554bce2a1686f854053a2288e485951d3430ecb606e9d28e30c798d2c1e0daf3a5eb37b5e8f34728efad196a865f7c59ceb239568327d2c1c9abfa2348d80b294287038bcfa0a90e8917010c797459e5f7e40312f2dd9ce"], 0x28}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000002000010300000000000000000200000000000000000000000c001400", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="74c56b194567f7a1a3e3156b8f725af0726faaf93d87e0e175a554bce2a1686f854053a2288e485951d3430ecb606e9d28e30c798d2c1e0daf3a5eb37b5e8f34728efad196a865f7c59ceb239568327d2c1c9abfa2348d80b294287038bcfa0a90e8917010c797459e5f7e40312f2dd9ce"], 0x28}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x82, &(0x7f0000000000)={@link_local, @random="1704b45adbde", @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private, 0x1000000}, {@private}, {@broadcast}, {@dev}, {@private}, {@empty}, {@private}]}]}}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f00000001c0), 0x4) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004500081400000000006c9078ac1414bbac1414aa"], 0x0) (async) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004500081400000000006c9078ac1414bbac1414aa"], 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0xff) (async) r5 = socket(0x10, 0x803, 0xff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) (async) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) socket(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r8, &(0x7f0000000200)=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}}}, 0x10) bind$tipc(r8, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0x4}}, 0x10) sendmsg$tipc(r8, &(0x7f00000006c0)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20044094}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000380)={'bond0\x00', {0x2, 0x4e23, @local}}) sendmsg$nl_route_sched(r7, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228641, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228641, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0xc}, {0x3}, {0xfff1, 0x3d}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004c885}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x0, @private=0xa010102}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xe40c}, &(0x7f00000000c0)=0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1m56.72518698s ago: executing program 1 (id=1251): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) 1m39.857475285s ago: executing program 1 (id=1251): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) 1m36.299756166s ago: executing program 0 (id=1804): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x48) shutdown(r0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0x0, 0x20004084) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, &(0x7f0000000540)="0c00971d92916d11c068e9b28037534267b998998dd56e96a5fb7e5b49fa651dc4a515c59eda78a45d7a24fb7b99e58cc5740fb0d0baaaa6c1a3d4d753c3c1da2bcc0090bcc013f6c027255ee7e8949b2b46bed7aba5f395139bd76ba658045d7ca5a288bf6cca640962bf7fa1eb5a9f255e30179066e0cf423a27b8fd73a7ca680466af48a36ee886515a3dac7f2aa5432abd0484e533327c4d3cf71f737ed4443a206c72844526791d318fec7509b178762b612c1262256149d1e15875d2d486101d61cbe059375ed413228562ffcd7ffebccb1f253e40c6f2eec3279c23108f6e34287ac04102d374f6d9d3", 0xed, 0x2000c000, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 1m33.991436205s ago: executing program 6 (id=1971): setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000002c0)="ad56b6c5910f50b06bd0009eee8967aebd00fbe6ed19fe4ba13f15c70e212f23d176c7", 0x23) r2 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_CREATE(0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b", 0x5a}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4e23, 0x19b9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8cf7}, 0x1c) listen(r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r5, 0xc0189436, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\\ \x00'}) syz_emit_ethernet(0x4e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa040000000000000000180600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60020000907800001e020000"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x1, &(0x7f0000000180)="e2", 0xb, 0x1, 0x4f3, 0xfff9, 0x3, 0x0, 0x8, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f00000001c0)={r0, r0, 0x8, 0x0, 0x0, 0x1, 0xb, 0x7, 0x7, 0x0, 0x1, 0x0, 'syz0\x00'}) 1m32.979322309s ago: executing program 6 (id=1974): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r1 = socket(0x2c, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r1, 0x2}, 0x20) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="75bb80e002a1cbad718364245c11d81bd595cc7d5f5ef4a44cec97c6949099d9122475858af1a3353d5c673678f2dc2798c333a5746ddf152324af7edc7a73d192067a0040fe96dd4416f26ff42e711d48c9017a86b6ab2b44131a8b7e014fe36177faa914711e6946b68fcd3ecbd5c0a2a316f4e4830928447d349d40eed191007906dbb53ee98f191d7a6ca470fa9dd2574977bd2338267eface14246d044a543b7ed8da3e", 0xa6}], 0x1}, 0x0) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x100) 1m17.320249325s ago: executing program 1 (id=1251): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) 1m14.955728033s ago: executing program 0 (id=1804): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x48) shutdown(r0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0x0, 0x20004084) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, &(0x7f0000000540)="0c00971d92916d11c068e9b28037534267b998998dd56e96a5fb7e5b49fa651dc4a515c59eda78a45d7a24fb7b99e58cc5740fb0d0baaaa6c1a3d4d753c3c1da2bcc0090bcc013f6c027255ee7e8949b2b46bed7aba5f395139bd76ba658045d7ca5a288bf6cca640962bf7fa1eb5a9f255e30179066e0cf423a27b8fd73a7ca680466af48a36ee886515a3dac7f2aa5432abd0484e533327c4d3cf71f737ed4443a206c72844526791d318fec7509b178762b612c1262256149d1e15875d2d486101d61cbe059375ed413228562ffcd7ffebccb1f253e40c6f2eec3279c23108f6e34287ac04102d374f6d9d3", 0xed, 0x2000c000, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 1m11.879937152s ago: executing program 6 (id=1974): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r1 = socket(0x2c, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r1, 0x2}, 0x20) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="75bb80e002a1cbad718364245c11d81bd595cc7d5f5ef4a44cec97c6949099d9122475858af1a3353d5c673678f2dc2798c333a5746ddf152324af7edc7a73d192067a0040fe96dd4416f26ff42e711d48c9017a86b6ab2b44131a8b7e014fe36177faa914711e6946b68fcd3ecbd5c0a2a316f4e4830928447d349d40eed191007906dbb53ee98f191d7a6ca470fa9dd2574977bd2338267eface14246d044a543b7ed8da3e", 0xa6}], 0x1}, 0x0) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x100) 1m8.891822591s ago: executing program 7 (id=2078): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0x80d, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x14}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) socket$kcm(0xa, 0x2, 0x3a) (async) r2 = socket$kcm(0xa, 0x2, 0x3a) recvmsg$kcm(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40010100) sendmsg$kcm(r2, &(0x7f0000000440)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000440)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) 1m8.547877123s ago: executing program 7 (id=2079): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x12}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a0677bc45ff81050000000000f071ef679f3935c15f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000208100041c090aadc279b8844c564291a21886423cdd20a9e9d41e9182a00"/116, 0x74}], 0x1) 1m7.621055934s ago: executing program 7 (id=2083): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNGETVNETBE(r3, 0x800454df, &(0x7f0000000180)=0x1) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027000000000008000100150008000500"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 1m6.398256651s ago: executing program 7 (id=2086): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x12, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000003100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401fd, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000713699ee600000000e0000009500000000000000000000000000000000000000000000339ebdda2b806b2b1dc40f9019fbc6ad962430"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) splice(0xffffffffffffffff, &(0x7f0000000000)=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x6, 0x1, 0x0, 0x20000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b40)={r0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m6.2780627s ago: executing program 7 (id=2088): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c1400003e000701feffffff00000000047c000008004280040008002814018024141d"], 0x144c}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)=ANY=[@ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="2f0000000000000000000000c6a0dff7b47f2277a8a2e50f63d81e857ae9b6cd971080c127fdc3280123061b97f5b1d74ae65cdeba0524ff63b6e2c394bf2b0795010a05d9b89a338a24daedaa99c55921715df57eae230cdd82edb5e1f423e25613de9cca80faac6a82bdebb3d979b6ceb8ffc6c34106b01e32db94", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB='/'], 0x20) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x12, r1, 0x0) sendmmsg(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000000100)="313f7ac12164f7", 0x7}], 0x1}}], 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r4, &(0x7f0000000780)}, 0x20) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c1400003e000701feffffff00000000047c000008004280040008002814018024141d"], 0x144c}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)=ANY=[@ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="2f0000000000000000000000c6a0dff7b47f2277a8a2e50f63d81e857ae9b6cd971080c127fdc3280123061b97f5b1d74ae65cdeba0524ff63b6e2c394bf2b0795010a05d9b89a338a24daedaa99c55921715df57eae230cdd82edb5e1f423e25613de9cca80faac6a82bdebb3d979b6ceb8ffc6c34106b01e32db94", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB='/'], 0x20) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x12, r1, 0x0) (async) sendmmsg(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000000100)="313f7ac12164f7", 0x7}], 0x1}}], 0x1, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r4, &(0x7f0000000780)}, 0x20) (async) 1m5.971528163s ago: executing program 7 (id=2090): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000000250001030000000000000000010000007dffb88a8f89cfb37362ca941349c488568ea45d4a144e983d7eb8f37f0726eafa0d503c5bb8698f3e2c93c6b001b80207e0395167c7cd8e0cca9395a8131f8e7320a4ff23371b6fa85f4ed5e2a7b9f8bb627a9849ad7523ebbc648ca71b04000000000000009b318ceb4f423181b06196d0c3b28bdbd0d81bf6532fb8c41c47b7f3e30e315d5c115ad685ea8e899e04babc96e8e9d5f0e771eb638483eeca0641c232da455c938eee3293d77124f9cb7778bdb0312c5f6e9917043d437b465279408701f27259bd974805138ec053c1807097c64539789a71c67e0fb9da0df0d7eab6f48b0000000000000000000000cb3698dafca1c60a08409bd7", @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRES8=r0, @ANYRES16=r0, @ANYRESDEC=r0], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000001c0)=0x1) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f00000003c0)={0x0, 0x0}) socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a001200eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_ext={0x1c, 0x9, &(0x7f00000009c0)=@raw=[@map_fd={0x18, 0xc}, @tail_call, @call={0x85, 0x0, 0x0, 0x88}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f0000000740)='syzkaller\x00', 0x1, 0x5a, &(0x7f0000000780)=""/90, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x8304, 0xffffffffffffffff, 0x7, 0x0, &(0x7f0000001040)=[{0x4, 0x1, 0xa, 0x5}, {0x0, 0x1, 0x1, 0x9}, {0x5, 0x3, 0x8, 0xa}, {0x5, 0x3, 0x8, 0x7}, {0x0, 0x1, 0xa, 0x4}, {0x2, 0x0, 0x10, 0x22b8565f942cddb2}, {0x1, 0x4, 0x3, 0xe}], 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000440)=@ethtool_eeprom={0xc, 0x7, 0x7f}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newqdisc={0x24, 0x24, 0x4, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {0xa, 0x2}, {0xf, 0xffff}, {0x7, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8050}, 0xc00c0) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r10, &(0x7f0000000640)=ANY=[@ANYBLOB="00006003ffffffffffffaaaaaaaaaa0208004500002540000000032f907800001fe1e0000001a0006558001190784109000098bce1f6c06b43b2a747fa92ed77b02e2f956713d33e20d3baa86b217b404cb427e71a1744f15907997928de"], 0x37) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f00000002c0)={'ip6_vti0\x00', @remote}) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2d0000001000010027bd7000fbdbdfa50000dd8639197bd7e2b93841b22d20a10000", @ANYRES32=r9, @ANYBLOB="104e06000162010020001280110001006272696467655f736c617665000000000800058004001800"], 0x40}, 0x1, 0x0, 0x0, 0x404c000}, 0x2) r11 = socket(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="a00000001900010000000000000000001c140000fe0000010000000084001900"], 0xa0}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000003e000701fefffffd00000000017c00000c00428005000800000000000400018004000280"], 0x28}, 0x1, 0x0, 0x0, 0x4000c000}, 0x2000c000) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYRES32=0x0], 0x1c}}, 0x0) 59.157333028s ago: executing program 1 (id=1251): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) 58.120700038s ago: executing program 0 (id=1804): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x48) shutdown(r0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0x0, 0x20004084) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, &(0x7f0000000540)="0c00971d92916d11c068e9b28037534267b998998dd56e96a5fb7e5b49fa651dc4a515c59eda78a45d7a24fb7b99e58cc5740fb0d0baaaa6c1a3d4d753c3c1da2bcc0090bcc013f6c027255ee7e8949b2b46bed7aba5f395139bd76ba658045d7ca5a288bf6cca640962bf7fa1eb5a9f255e30179066e0cf423a27b8fd73a7ca680466af48a36ee886515a3dac7f2aa5432abd0484e533327c4d3cf71f737ed4443a206c72844526791d318fec7509b178762b612c1262256149d1e15875d2d486101d61cbe059375ed413228562ffcd7ffebccb1f253e40c6f2eec3279c23108f6e34287ac04102d374f6d9d3", 0xed, 0x2000c000, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 57.148659984s ago: executing program 6 (id=1974): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r1 = socket(0x2c, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r1, 0x2}, 0x20) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="75bb80e002a1cbad718364245c11d81bd595cc7d5f5ef4a44cec97c6949099d9122475858af1a3353d5c673678f2dc2798c333a5746ddf152324af7edc7a73d192067a0040fe96dd4416f26ff42e711d48c9017a86b6ab2b44131a8b7e014fe36177faa914711e6946b68fcd3ecbd5c0a2a316f4e4830928447d349d40eed191007906dbb53ee98f191d7a6ca470fa9dd2574977bd2338267eface14246d044a543b7ed8da3e", 0xa6}], 0x1}, 0x0) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x100) 50.963955691s ago: executing program 35 (id=2090): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRES8=r0, @ANYRES16=r0, @ANYRESDEC=r0], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000001c0)=0x1) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f00000003c0)={0x0, 0x0}) socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a001200eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_ext={0x1c, 0x9, &(0x7f00000009c0)=@raw=[@map_fd={0x18, 0xc}, @tail_call, @call={0x85, 0x0, 0x0, 0x88}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f0000000740)='syzkaller\x00', 0x1, 0x5a, &(0x7f0000000780)=""/90, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x8304, 0xffffffffffffffff, 0x7, 0x0, &(0x7f0000001040)=[{0x4, 0x1, 0xa, 0x5}, {0x0, 0x1, 0x1, 0x9}, {0x5, 0x3, 0x8, 0xa}, {0x5, 0x3, 0x8, 0x7}, {0x0, 0x1, 0xa, 0x4}, {0x2, 0x0, 0x10, 0x22b8565f942cddb2}, {0x1, 0x4, 0x3, 0xe}], 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000440)=@ethtool_eeprom={0xc, 0x7, 0x7f}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newqdisc={0x24, 0x24, 0x4, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {0xa, 0x2}, {0xf, 0xffff}, {0x7, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8050}, 0xc00c0) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r10, &(0x7f0000000640)=ANY=[@ANYBLOB="00006003ffffffffffffaaaaaaaaaa0208004500002540000000032f907800001fe1e0000001a0006558001190784109000098bce1f6c06b43b2a747fa92ed77b02e2f956713d33e20d3baa86b217b404cb427e71a1744f15907997928de"], 0x37) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f00000002c0)={'ip6_vti0\x00', @remote}) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2d0000001000010027bd7000fbdbdfa50000dd8639197bd7e2b93841b22d20a10000", @ANYRES32=r9, @ANYBLOB="104e06000162010020001280110001006272696467655f736c617665000000000800058004001800"], 0x40}, 0x1, 0x0, 0x0, 0x404c000}, 0x2) r11 = socket(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="a00000001900010000000000000000001c140000fe0000010000000084001900"], 0xa0}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000003e000701fefffffd00000000017c00000c00428005000800000000000400018004000280"], 0x28}, 0x1, 0x0, 0x0, 0x4000c000}, 0x2000c000) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYRES32=0x0], 0x1c}}, 0x0) 41.083556936s ago: executing program 0 (id=1804): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x48) shutdown(r0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0x0, 0x20004084) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, &(0x7f0000000540)="0c00971d92916d11c068e9b28037534267b998998dd56e96a5fb7e5b49fa651dc4a515c59eda78a45d7a24fb7b99e58cc5740fb0d0baaaa6c1a3d4d753c3c1da2bcc0090bcc013f6c027255ee7e8949b2b46bed7aba5f395139bd76ba658045d7ca5a288bf6cca640962bf7fa1eb5a9f255e30179066e0cf423a27b8fd73a7ca680466af48a36ee886515a3dac7f2aa5432abd0484e533327c4d3cf71f737ed4443a206c72844526791d318fec7509b178762b612c1262256149d1e15875d2d486101d61cbe059375ed413228562ffcd7ffebccb1f253e40c6f2eec3279c23108f6e34287ac04102d374f6d9d3", 0xed, 0x2000c000, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 37.898050262s ago: executing program 6 (id=1974): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r1 = socket(0x2c, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r1, 0x2}, 0x20) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="75bb80e002a1cbad718364245c11d81bd595cc7d5f5ef4a44cec97c6949099d9122475858af1a3353d5c673678f2dc2798c333a5746ddf152324af7edc7a73d192067a0040fe96dd4416f26ff42e711d48c9017a86b6ab2b44131a8b7e014fe36177faa914711e6946b68fcd3ecbd5c0a2a316f4e4830928447d349d40eed191007906dbb53ee98f191d7a6ca470fa9dd2574977bd2338267eface14246d044a543b7ed8da3e", 0xa6}], 0x1}, 0x0) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x100) 21.281458638s ago: executing program 0 (id=1804): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x48) shutdown(r0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0x0, 0x20004084) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, &(0x7f0000000540)="0c00971d92916d11c068e9b28037534267b998998dd56e96a5fb7e5b49fa651dc4a515c59eda78a45d7a24fb7b99e58cc5740fb0d0baaaa6c1a3d4d753c3c1da2bcc0090bcc013f6c027255ee7e8949b2b46bed7aba5f395139bd76ba658045d7ca5a288bf6cca640962bf7fa1eb5a9f255e30179066e0cf423a27b8fd73a7ca680466af48a36ee886515a3dac7f2aa5432abd0484e533327c4d3cf71f737ed4443a206c72844526791d318fec7509b178762b612c1262256149d1e15875d2d486101d61cbe059375ed413228562ffcd7ffebccb1f253e40c6f2eec3279c23108f6e34287ac04102d374f6d9d3", 0xed, 0x2000c000, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 20.048793426s ago: executing program 1 (id=1251): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) 18.641354719s ago: executing program 6 (id=1974): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r1 = socket(0x2c, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r1, 0x2}, 0x20) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="75bb80e002a1cbad718364245c11d81bd595cc7d5f5ef4a44cec97c6949099d9122475858af1a3353d5c673678f2dc2798c333a5746ddf152324af7edc7a73d192067a0040fe96dd4416f26ff42e711d48c9017a86b6ab2b44131a8b7e014fe36177faa914711e6946b68fcd3ecbd5c0a2a316f4e4830928447d349d40eed191007906dbb53ee98f191d7a6ca470fa9dd2574977bd2338267eface14246d044a543b7ed8da3e", 0xa6}], 0x1}, 0x0) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x100) 7.345504445s ago: executing program 4 (id=2281): r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc) 7.16306629s ago: executing program 4 (id=2282): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$CAIFSO_REQ_PARAM(r2, 0x116, 0x80, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'xfrm0\x00', 0x0}) sendto(r0, &(0x7f0000000140)="ca", 0x1, 0x4000, &(0x7f0000000240)=@xdp={0x2c, 0x8, r3, 0x1000033}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)={0x40, r9, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x1e, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x8}, @broadcast, @device_a, @random="a08c54ce547a", {0x6, 0x5aa}}, 0x20, @void}}]}, 0x40}}, 0x8000) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000140)={0x2c, r11, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x168, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x1, 0x8}}}}, [@NL80211_ATTR_REKEY_DATA={0x20, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xac}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="3a36c392993bbd6d1cec37542b155e66"}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "0ea3fdfa0af5d1a3"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}]}, @NL80211_ATTR_REKEY_DATA={0x8c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "0deaa26373111396"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="4c5f9cc7bebc22e92833e91b7579119191b9cc4255d6c9ca4200f635ac51f8c4"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "68bd07919632da18"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="92ce14ba1a5b87cdb95adabdb1f74457"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="0d2ff1ea02dbac0bbf214dca0a8af3e2"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="66d7b18fd9ce89e6ee31ddb11890fd1764022d976d0305df"}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfffeffff}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9910194fe896e5a5"}]}, @NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="ffe1dcf5a3d50c20c79f0fd6ee27ac1521b38e6daf46f2ea"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x10}]}, @NL80211_ATTR_REKEY_DATA={0x3c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x80000001}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xe}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xda8f}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x100}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "168e0e130566cb1c"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "84dfe22d38c96cbd"}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113600000000008510000002000000850000007600000095000810000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 4.65754893s ago: executing program 4 (id=2283): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r0, &(0x7f0000000800)="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", 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x0, @mcast2}, 0x1c) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) (async) recvmmsg(r2, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}, 0x81}], 0x1, 0x0, 0x0) 4.444726737s ago: executing program 4 (id=2284): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c0000001b0a01030000e6ff00000000020000000900010073797a3000000000090003"], 0x7c}}, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x336) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) close(r1) 4.212027234s ago: executing program 4 (id=2286): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010800000000fcffffff00004c00", @ANYRES32=0x0, @ANYBLOB="c3d7aa0000000000000000006e00000000001f50dcc20500"], 0x30}, 0x1, 0xffffa888}, 0x8810) 3.991037881s ago: executing program 4 (id=2288): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x140, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x1}, {0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0xf0, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x18b}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe89f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3de8997a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xca90}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x36effd24}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5b11e579}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x72cd6b21}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xb373222}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5d5a2ec2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4658638f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6873}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3fdc}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd1ab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x67c68525}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbbf5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2574c82b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb58c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x47f2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa4d4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe94a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1e1be80b}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa5b1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xb0bbda0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x25ab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x315e1577}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x793a3d9b}]}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='pmap_register\x00', r3, 0x0, 0x3}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000140)={0x6, 0x20, [0x3, 0x0, 0x9, 0x3c], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0]}) write(r0, &(0x7f00000002c0)="342984a3d91a71e66a5451492b151cf551c5389d0d9c851c674c0f0e8a6bde72b36c4267be0ceb3cdcdfd5165d931fa6874cb4ce33170c6a7e22142395e88706fd4dd584d467d0ac7645d1fdd67f413376383f9a8c88fb528ea8a1189243dff4802ff2031c7c77c990c0ab137c801dda1206460a9b67df66bccf65296e4d6e43cf09a5e98bf2f7dce62093cc0e776a8000e8320d51f65b9f1030ea24f84d5dddd57569b7d893a4cdb33076d7fb6a1691fae787eb49427d3047e95b3632fb46648e74f865c5bed21c143bca382a054d729da6df9f7a44b26b994e75dd5ab60aa80b3509e187860944e4a6cd7a", 0xec) r4 = socket(0xb, 0x80000, 0x1c000000) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000240)='highspeed\x00', 0xa) 2.422463386s ago: executing program 8 (id=2294): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_all\x00', 0x275a, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000000)={0x0, 0x0}) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="30010000", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000800010001000000040004800800020001000000080108802c0007800800ffeac3bc0000080006001c0000000800060000000000080005"], 0x130}}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x4}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0) 2.175234533s ago: executing program 8 (id=2295): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x20008004) socket$key(0xf, 0x3, 0x2) 1.802110818s ago: executing program 8 (id=2296): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_int(r1, 0x1, 0x2d, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xf}, 0x3}], 0x1c) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x1c}}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d2, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.801529931s ago: executing program 8 (id=2297): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0x701, 0x1}, 0xe) 1.725339474s ago: executing program 8 (id=2298): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000040)={{0x7, 0x7}, 0x100, './file0\x00'}) (async) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000180)={r0, 0x391, 0x7, "b6c390149c7586224df260fb09b5f1bdf0d4811d954d5f80c989f5965ea2f9c38ad9865d75c54d61967195cee8dbe46a841e93c8eb1c23319636489d508275958576017832b14615748e09e860a0d715dcc93eeb5bd3f6ddd6a05a956e8b86481cb934d3c1123ebba9223bf89fe0f243407f4c1d3c851c089944f4fc904bde572a0bbc8693583c368bc6e91fd942445fd3355e049cd4e308f760707b78f3b7465116364adf21ddcaadd1fdcebdf7f110c9884f31"}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000240)={0x0, 0x80000000}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000002c0)={0x8001, 0x6, 0xbe62, 0x80000000, 0x0}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000340)={r2, 0x6, 0xce, 0xb, 0xc, 0x9, 0x8f6, 0x7f, {r3, @in={{0x2, 0x4e21, @remote}}, 0x7ff, 0xd, 0x1, 0x7f, 0x8}}, &(0x7f0000000400)=0xb0) r4 = socket$igmp(0x2, 0x3, 0x2) getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, &(0x7f0000000440)={'filter\x00', 0xab, "5b9c9ac7cfaa4ba23059dca14f00605a706db9cea6f2cc1184932613876e9f2a1e30c3b1e23d59d7a2f34c6e5ee0a5c0c51f0ad1a1febd21f8eb0e3b24881ae7552ba14dc364a07b44d9114d94b67f5244ccf61c965c9e07fc30550c14511a9423dbcb865283f4d8cb2c2f682a99ae7ca2950ab058e8565f571090b3390c16d8aacf544232577b37aded0246b1375c03c59ce3f61d0dd8eab61bd61d68163a9602733594fd6ac0f9504b20"}, &(0x7f0000000540)=0xcf) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) readv(r6, &(0x7f0000000680)=[{&(0x7f0000000580)=""/206, 0xce}], 0x1) (async) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f00000006c0)={@private=0xa010101, @private=0xa010100}, 0x8) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x85100008}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x40, 0x140e, 0x8, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x404c840}, 0x0) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000800)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000840)=0x24) (async) r7 = socket$l2tp(0x2, 0x2, 0x73) getsockname$l2tp(r7, &(0x7f0000000880), &(0x7f00000008c0)=0x10) (async) shutdown(r5, 0x1) (async) ioctl$AUTOFS_IOC_PROTOVER(r6, 0x80049363, &(0x7f0000000900)) (async) getsockopt$bt_hci(r5, 0x0, 0x0, &(0x7f0000000940)=""/104, &(0x7f00000009c0)=0x68) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000a00), &(0x7f0000000a40)}, 0x20) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001cc0)={&(0x7f0000001bc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@type_tag={0x3, 0x0, 0x0, 0x12, 0x4}]}, {0x0, [0x0, 0x30, 0x2e]}}, &(0x7f0000001c00)=""/169, 0x29, 0xa9, 0x1, 0x5, 0x10000, @value}, 0x28) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001d80)={r0, 0xffffffffffffffff}, 0x4) (async) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001dc0)='memory.current\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x14, &(0x7f0000000ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf7f2e4cd, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0x1, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xec1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0xa7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}]}, &(0x7f0000000b80)='syzkaller\x00', 0x70d2fd1f, 0x1000, &(0x7f0000000bc0)=""/4096, 0x40f00, 0x48, '\x00', 0x0, 0x25, r9, 0x8, &(0x7f0000001d00)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000001d40)={0x1, 0x7, 0x4, 0xffff}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000001e00)=[r10, r11], &(0x7f0000001e40)=[{0x2, 0x3, 0x4, 0xc}, {0x0, 0x4, 0x9, 0x6}, {0x0, 0x5, 0x5, 0x7}, {0x1, 0x5, 0x8, 0xa}], 0x10, 0x9, @void, @value}, 0x94) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000001f40)={0x0, 'macvlan1\x00', {}, 0x1}) (async) r12 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_SIOCGPGRP(r12, 0x8904, &(0x7f0000001f80)) 1.560742615s ago: executing program 8 (id=2299): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_tracing={0x1a, 0x27, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xa}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x43ac}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xe}, @tail_call, @alu={0x3, 0x0, 0x0, 0x7, 0x5, 0xffffffffffffffe0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x346c95c7}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x58, &(0x7f00000000c0)=""/88, 0x41100, 0xa, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000040)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x6, 0xc5, 0xffffffff}, 0x10, 0x19065, 0xffffffffffffffff, 0x8, &(0x7f0000000340)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000380)=[{0x5, 0x2, 0xf}, {0x0, 0x3, 0x1, 0x5}, {0x1, 0x1, 0xc, 0x9}, {0x1, 0x3, 0x3, 0x7}, {0x1, 0x2, 0x1, 0xa}, {0x0, 0x2, 0x7, 0x1}, {0x4, 0x1, 0x0, 0x5}, {0x4000005, 0x1, 0x2, 0x4}], 0x10, 0x9, @void, @value}, 0x94) r1 = socket$phonet(0x23, 0x2, 0x1) r2 = socket$netlink(0x10, 0x3, 0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002840)={0x0, 0x0}, &(0x7f0000002880)=0xc) sendmsg$netlink(r2, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000980)={0x10, 0x32, 0x4, 0x70bd25, 0x25dfdbff}, 0x10}], 0x1, &(0x7f0000002900)=[@cred={{0x1c, 0x1, 0x2, {0x0, r3}}}], 0x20, 0x50}, 0x40880) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETIFINDEX(r7, 0x400454da, 0x0) shutdown(r1, 0x1) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x7, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0x0, 0xfff1}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0x44c, 0x0, 0x4}, "fe"}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@ipv4_newroute={0x120, 0x18, 0x100, 0x70bd2b, 0x25dfdbff, {0x2, 0x80, 0x10, 0x9, 0x0, 0x4, 0x2, 0x9, 0x2000}, [@RTA_UID={0x8, 0x19, r3}, @RTA_MULTIPATH={0xc, 0x9, {0x8, 0x10, 0xc5, r6}}, @RTA_DST={0x8, 0x1, @multicast1}, @RTA_METRICS={0xe5, 0x8, 0x0, 0x1, "5c4a6d42cf61fd61b4e90d7938b4b0ea96159e66adb83972c3fda3d681887cd45380590890fdd62d9016dcc711827a829870336040dbabb250d9ab8b5b09ed91ef31e80b13bdb18ad4656da7de003529fe2b0786e48a476aa6882d0c5bb99561150e1e33203e8dca6342310d11fb6ae4542b79638ff7ba4e68cf6f496e5c43f80f24b04794e77ca6c7a1ee5232360b33be464d58c1ed423de581a9462c09ddd771f8b4581e5e516fb9bf0ed1797bfb4473a0ad122eb8133b83c4abf9871b019ee27e5e3a64d846831d3e1e7532017c2f70a213d65e9029b4edba30ab80fe190b4e"}]}, 0x120}}, 0x0) 1.321206474s ago: executing program 0 (id=1804): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x48) shutdown(r0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0x0, 0x20004084) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, &(0x7f0000000540)="0c00971d92916d11c068e9b28037534267b998998dd56e96a5fb7e5b49fa651dc4a515c59eda78a45d7a24fb7b99e58cc5740fb0d0baaaa6c1a3d4d753c3c1da2bcc0090bcc013f6c027255ee7e8949b2b46bed7aba5f395139bd76ba658045d7ca5a288bf6cca640962bf7fa1eb5a9f255e30179066e0cf423a27b8fd73a7ca680466af48a36ee886515a3dac7f2aa5432abd0484e533327c4d3cf71f737ed4443a206c72844526791d318fec7509b178762b612c1262256149d1e15875d2d486101d61cbe059375ed413228562ffcd7ffebccb1f253e40c6f2eec3279c23108f6e34287ac04102d374f6d9d3", 0xed, 0x2000c000, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 0s ago: executing program 1 (id=1251): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) kernel console output (not intermixed with test programs): bond_slave_0): interface is now down [ 292.983102][ T53] bond0: (slave bond_slave_1): interface is now down [ 293.016406][ T53] bond0: (slave syz_tun): interface is now down [ 293.073992][ T53] bond0: now running without any active interface! [ 293.162215][T12691] netlink: 'syz.4.1956': attribute type 1 has an invalid length. [ 293.270193][T12696] netlink: 'syz.4.1956': attribute type 1 has an invalid length. [ 293.294559][T12695] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1955'. [ 293.622602][ T6347] hsr_slave_0: left promiscuous mode [ 293.640622][ T6347] hsr_slave_1: left promiscuous mode [ 293.656914][ T6347] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.664450][ T6347] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.689618][ T6347] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.704100][ T6347] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.720507][T12708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.763677][ T6347] veth1_macvtap: left promiscuous mode [ 293.773164][ T6347] veth0_macvtap: left promiscuous mode [ 293.788654][ T6347] veth1_vlan: left promiscuous mode [ 293.794121][ T6347] veth0_vlan: left promiscuous mode [ 293.986600][ T5139] Bluetooth: hci6: command tx timeout [ 294.147857][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.206531][T12712] netlink: 'syz.4.1961': attribute type 5 has an invalid length. [ 294.600633][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 294.613709][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 294.622137][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 294.643665][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 294.652134][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 294.773335][ T6347] team0 (unregistering): Port device team_slave_1 removed [ 294.818909][ T6347] team0 (unregistering): Port device team_slave_0 removed [ 295.431101][T12728] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1963'. [ 295.447512][T12728] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1963'. [ 295.457716][T12728] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1963'. [ 295.467587][T12728] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1963'. [ 295.478477][T12728] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1963'. [ 295.589431][T12723] xfrm0 speed is unknown, defaulting to 1000 [ 295.639998][T12723] lo speed is unknown, defaulting to 1000 [ 295.722776][T12743] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 295.729683][T12745] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1968'. [ 295.729709][T12745] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1968'. [ 295.780390][T12723] lo speed is unknown, defaulting to 1000 [ 295.997139][T12659] chnl_net:caif_netlink_parms(): no params data found [ 296.078027][ T5830] Bluetooth: hci6: command tx timeout [ 296.708434][ T5830] Bluetooth: hci0: command tx timeout [ 296.908479][T12008] bond0: (slave syz_tun): Releasing backup interface [ 297.127100][T12764] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1975'. [ 297.297234][ T6347] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.318100][T12659] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.325323][T12659] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.338689][T12659] bridge_slave_0: entered allmulticast mode [ 297.352169][T12659] bridge_slave_0: entered promiscuous mode [ 297.386293][T12659] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.393520][T12659] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.433745][T12659] bridge_slave_1: entered allmulticast mode [ 297.448600][T12659] bridge_slave_1: entered promiscuous mode [ 297.474354][ T6347] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.651246][ T6347] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.708135][T12659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.739975][T12659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.768907][T12780] @ÿ: renamed from bond_slave_0 (while UP) [ 297.918073][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 297.928935][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 297.937692][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 297.947023][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 297.955307][T12786] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1980'. [ 297.968322][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 298.095211][ T6347] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.147189][ T5830] Bluetooth: hci6: command tx timeout [ 298.303026][T12803] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1982'. [ 298.315298][T12659] team0: Port device team_slave_0 added [ 298.328482][T12659] team0: Port device team_slave_1 added [ 298.448938][T12659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.468929][T12659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.522723][T12659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.604902][T12807] A link change request failed with some changes committed already. Interface gretap2 may have been left with an inconsistent configuration, please check. [ 298.649416][T12659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.658344][T12659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.691994][T12659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.704656][T12785] xfrm0 speed is unknown, defaulting to 1000 [ 298.722690][T12723] chnl_net:caif_netlink_parms(): no params data found [ 298.741893][T12785] lo speed is unknown, defaulting to 1000 [ 298.803127][ T5830] Bluetooth: hci0: command tx timeout [ 298.884017][T12785] lo speed is unknown, defaulting to 1000 [ 299.026429][T12819] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1986'. [ 299.211735][T12659] hsr_slave_0: entered promiscuous mode [ 299.233650][T12659] hsr_slave_1: entered promiscuous mode [ 300.066615][ T5830] Bluetooth: hci3: command tx timeout [ 300.104242][ T6347] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.226113][ T5830] Bluetooth: hci6: command tx timeout [ 300.387339][T12834] openvswitch: netlink: IPv6 tunnel dst address is zero [ 300.866618][ T5830] Bluetooth: hci0: command tx timeout [ 301.337897][T12824] xfrm0 speed is unknown, defaulting to 1000 [ 301.378996][ T6347] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.429188][T12824] lo speed is unknown, defaulting to 1000 [ 301.465600][ T6347] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.512290][T12824] lo speed is unknown, defaulting to 1000 [ 301.624317][ T6347] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.701836][T12723] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.721914][T12723] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.742460][T12723] bridge_slave_0: entered allmulticast mode [ 301.754679][T12723] bridge_slave_0: entered promiscuous mode [ 301.771407][T12723] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.778840][T12723] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.787001][T12723] bridge_slave_1: entered allmulticast mode [ 301.795210][T12723] bridge_slave_1: entered promiscuous mode [ 301.977192][T12723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.055393][T12723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.146272][ T5830] Bluetooth: hci3: command tx timeout [ 302.175206][T12723] team0: Port device team_slave_0 added [ 302.261161][T12723] team0: Port device team_slave_1 added [ 302.410385][T12723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.422306][T12723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.461090][T12723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.545448][ T6347] bridge_slave_1: left allmulticast mode [ 302.554450][ T6347] bridge_slave_1: left promiscuous mode [ 302.563008][ T6347] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.603187][ T6347] bridge_slave_0: left allmulticast mode [ 302.623086][ T6347] bridge_slave_0: left promiscuous mode [ 302.636197][ T6347] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.660510][ T6347] bridge_slave_1: left allmulticast mode [ 302.667341][ T6347] bridge_slave_1: left promiscuous mode [ 302.673174][ T6347] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.693775][ T6347] bridge_slave_0: left allmulticast mode [ 302.703356][ T6347] bridge_slave_0: left promiscuous mode [ 302.712912][ T6347] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.961071][ T5830] Bluetooth: hci0: command tx timeout [ 303.377954][ T6347] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 303.389203][ T6347] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 303.403449][ T6347] bond0 (unregistering): Released all slaves [ 303.421189][ T6347] bond1 (unregistering): Released all slaves [ 303.553654][ T6347] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 303.564877][ T6347] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 303.575561][ T6347] bond0 (unregistering): Released all slaves [ 303.597880][T12723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.604860][T12723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.646129][T12723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.772909][ T6347] tipc: Left network mode [ 303.842607][T12723] hsr_slave_0: entered promiscuous mode [ 303.849431][T12723] hsr_slave_1: entered promiscuous mode [ 303.867598][T12723] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 303.875225][T12723] Cannot create hsr debugfs directory [ 303.881749][T12785] chnl_net:caif_netlink_parms(): no params data found [ 304.226632][ T5830] Bluetooth: hci3: command tx timeout [ 304.342600][T12659] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 304.385047][T12785] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.404687][T12785] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.413518][T12785] bridge_slave_0: entered allmulticast mode [ 304.433160][T12785] bridge_slave_0: entered promiscuous mode [ 304.495803][T12659] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 304.595478][T12785] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.605529][T12785] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.613376][T12785] bridge_slave_1: entered allmulticast mode [ 304.637837][T12785] bridge_slave_1: entered promiscuous mode [ 304.699473][T12659] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 304.831395][T12659] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 304.874785][T12879] netlink: 192 bytes leftover after parsing attributes in process `syz.4.2003'. [ 304.900193][T12785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.978548][T12785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.224641][T12785] team0: Port device team_slave_0 added [ 305.344352][T12785] team0: Port device team_slave_1 added [ 305.456404][T12887] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2005'. [ 305.480421][T12886] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2005'. [ 305.679800][T12785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.681072][T12891] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2007'. [ 305.698136][T12785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.710909][T12889] netlink: 332 bytes leftover after parsing attributes in process `syz.4.2006'. [ 305.728481][T12785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.753439][T12891] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2007'. [ 305.790666][ T6347] hsr_slave_0: left promiscuous mode [ 305.799937][ T6347] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.833616][ T6347] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.843963][ T6347] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.853790][ T6347] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.881035][ T6347] hsr_slave_0: left promiscuous mode [ 305.891995][ T6347] hsr_slave_1: left promiscuous mode [ 305.902564][ T6347] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.914086][ T6347] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.931905][ T6347] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.939578][ T6347] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.984409][ T6347] team_slave_0: left promiscuous mode [ 305.990142][ T6347] team_slave_1: left promiscuous mode [ 305.999659][ T6347] veth1_macvtap: left promiscuous mode [ 306.005226][ T6347] veth0_macvtap: left promiscuous mode [ 306.011562][ T6347] veth1_vlan: left promiscuous mode [ 306.017159][ T6347] veth0_vlan: left promiscuous mode [ 306.023508][ T6347] veth1_macvtap: left promiscuous mode [ 306.030043][ T6347] veth0_macvtap: left promiscuous mode [ 306.035771][ T6347] veth1_vlan: left promiscuous mode [ 306.041330][ T6347] veth0_vlan: left promiscuous mode [ 306.306514][ T5830] Bluetooth: hci3: command tx timeout [ 306.713955][ T6347] team0 (unregistering): Port device team_slave_1 removed [ 306.761848][ T6347] team0 (unregistering): Port device team_slave_0 removed [ 307.507925][ T6347] team0 (unregistering): Port device team_slave_1 removed [ 307.553303][ T6347] team0 (unregistering): Port device team_slave_0 removed [ 308.009896][T12785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.021949][T12785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.048531][T12785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.312977][T12785] hsr_slave_0: entered promiscuous mode [ 308.331784][T12785] hsr_slave_1: entered promiscuous mode [ 308.346979][T12785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 308.395931][T12785] Cannot create hsr debugfs directory [ 308.704497][T12659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.722624][T12723] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 308.756674][T12723] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 308.800894][T12723] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 308.828737][T12723] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 308.877175][T12659] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.933926][ T6344] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.941192][ T6344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.088647][ T1124] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.096101][ T1124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.697096][T12937] batadv_slave_1: entered promiscuous mode [ 309.745490][T12936] batadv_slave_1: left promiscuous mode [ 309.883856][T12723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.000214][T12723] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.035731][ T6342] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.043046][ T6342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.107837][ T6342] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.115056][ T6342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.139609][T12785] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 310.203740][T12785] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 310.231809][T12954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2025'. [ 310.249946][T12785] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 310.262190][T12954] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2025'. [ 310.264488][T12785] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 310.309097][T12956] bond1: entered promiscuous mode [ 310.314209][T12956] bond1: entered allmulticast mode [ 310.320155][T12956] 8021q: adding VLAN 0 to HW filter on device bond1 [ 310.332828][T12954] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2025'. [ 310.479252][T12659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.742091][T12972] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2029'. [ 310.747134][T12659] veth0_vlan: entered promiscuous mode [ 310.827786][T12659] veth1_vlan: entered promiscuous mode [ 310.952988][T12785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.021544][T12659] veth0_macvtap: entered promiscuous mode [ 311.059223][T12659] veth1_macvtap: entered promiscuous mode [ 311.081979][T12785] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.154648][ T6347] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.161902][ T6347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.191918][T12659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.262569][ T6342] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.269828][ T6342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.335697][T12659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.340135][T12981] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2031'. [ 311.379331][T12723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.444145][T12659] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.456765][T12659] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.465527][T12659] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.475338][T12659] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.500212][T12981] nbd: socks must be embedded in a SOCK_ITEM attr [ 311.562493][ T6777] block nbd64: NBD_DISCONNECT [ 311.569347][T12982] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2031'. [ 311.589913][T12982] nbd: device at index 64 is going down [ 311.910256][ T5837] udevd[5837]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 311.923670][T12723] veth0_vlan: entered promiscuous mode [ 311.934832][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.959575][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.080983][T12723] veth1_vlan: entered promiscuous mode [ 312.139010][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.167861][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.273362][T12723] veth0_macvtap: entered promiscuous mode [ 312.304386][T12999] netlink: 'syz.4.2036': attribute type 11 has an invalid length. [ 312.356784][T12723] veth1_macvtap: entered promiscuous mode [ 312.397201][T13003] xt_CT: You must specify a L4 protocol and not use inversions on it [ 312.502974][T13008] netlink: 'syz.4.2038': attribute type 10 has an invalid length. [ 312.632952][T12723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.651435][T13012] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20001 [ 312.658220][T12785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.711595][T12723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.799575][ T6347] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.939240][T12723] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.984463][T12723] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.006070][T12723] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.014850][T12723] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.128305][ T6347] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.324548][ T6347] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.453885][ T6347] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.693427][ T6344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.705692][ T6344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.712592][T12785] veth0_vlan: entered promiscuous mode [ 313.795810][ T6347] bridge_slave_1: left allmulticast mode [ 313.801817][ T6347] bridge_slave_1: left promiscuous mode [ 313.808920][ T6347] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.819636][ T6347] bridge_slave_0: left allmulticast mode [ 313.825300][ T6347] bridge_slave_0: left promiscuous mode [ 313.831737][ T6347] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.216402][ T6347] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.252581][ T6347] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.281909][ T6347] bond0 (unregistering): Released all slaves [ 314.293132][T13027] netlink: 62 bytes leftover after parsing attributes in process `syz.7.2042'. [ 314.322422][T12785] veth1_vlan: entered promiscuous mode [ 314.328516][ T5903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.356110][ T5903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.381223][T13028] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2042'. [ 314.436898][T13033] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2043'. [ 314.673047][T12785] veth0_macvtap: entered promiscuous mode [ 314.719825][T12785] veth1_macvtap: entered promiscuous mode [ 314.845766][T13041] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2044'. [ 314.855362][ T5139] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 314.875402][ T5139] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 314.886740][ T5139] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 314.893793][T13038] veth1_to_team: entered promiscuous mode [ 314.903432][ T5139] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 314.911909][ T5139] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 314.975642][T13037] veth1_to_team (unregistering): left promiscuous mode [ 315.059758][T12785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.071946][T12785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.143969][T12785] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.183140][T12785] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.215704][T12785] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.232062][T12785] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.299107][T13040] xfrm0 speed is unknown, defaulting to 1000 [ 315.334474][T13040] lo speed is unknown, defaulting to 1000 [ 315.360912][T13040] lo speed is unknown, defaulting to 1000 [ 315.525715][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.534665][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.556263][ T6347] hsr_slave_0: left promiscuous mode [ 315.563687][ T6347] hsr_slave_1: left promiscuous mode [ 315.582721][ T6347] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.595052][ T6347] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.607766][ T6347] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.615286][ T6347] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.659559][ T6347] veth1_macvtap: left promiscuous mode [ 315.665177][ T6347] veth0_macvtap: left promiscuous mode [ 315.682399][ T6347] veth1_vlan: left promiscuous mode [ 315.689737][ T6347] veth0_vlan: left promiscuous mode [ 316.012592][T13048] xt_CT: You must specify a L4 protocol and not use inversions on it [ 316.100580][T13049] xt_CT: No such helper "snmp" [ 316.392614][T13056] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2050'. [ 316.572397][ T5830] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 316.581653][ T5830] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 316.598367][ T5830] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 316.611447][ T5830] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 316.622738][ T5830] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 316.848809][ T6347] team0 (unregistering): Port device team_slave_1 removed [ 316.903771][ T6347] team0 (unregistering): Port device team_slave_0 removed [ 316.946558][ T5139] Bluetooth: hci0: command tx timeout [ 317.416618][T13061] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2050'. [ 317.439666][T13061] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2050'. [ 317.452077][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.461314][T13067] netlink: 'syz.4.2052': attribute type 1 has an invalid length. [ 317.486646][T13067] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2052'. [ 317.494155][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.495840][T13067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2052'. [ 317.578427][T13062] xfrm0 speed is unknown, defaulting to 1000 [ 317.598090][T13062] lo speed is unknown, defaulting to 1000 [ 317.626117][T13062] lo speed is unknown, defaulting to 1000 [ 317.733159][T13076] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2054'. [ 317.770756][T13076] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 317.799290][T13076] netlink: 'syz.4.2054': attribute type 39 has an invalid length. [ 318.245685][T13040] chnl_net:caif_netlink_parms(): no params data found [ 318.328102][T13087] netlink: 'syz.4.2058': attribute type 1 has an invalid length. [ 318.346742][T13087] netlink: 'syz.4.2058': attribute type 1 has an invalid length. [ 318.376442][T13087] netlink: 192 bytes leftover after parsing attributes in process `syz.4.2058'. [ 318.632326][T13040] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.662318][T13040] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.690119][T13040] bridge_slave_0: entered allmulticast mode [ 318.703394][T13040] bridge_slave_0: entered promiscuous mode [ 318.716447][ T5830] Bluetooth: hci6: command tx timeout [ 318.723441][T13040] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.734274][T13040] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.753996][T13040] bridge_slave_1: entered allmulticast mode [ 318.765463][T13040] bridge_slave_1: entered promiscuous mode [ 318.842535][ T6347] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.026613][ T5830] Bluetooth: hci0: command tx timeout [ 319.068791][ T6347] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.220517][T13040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.242782][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 319.252333][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 319.263001][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 319.270186][T10563] Bluetooth: hci5: command 0x0406 tx timeout [ 319.292718][T13119] netlink: 'syz.7.2062': attribute type 1 has an invalid length. [ 319.306843][ T6347] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.311062][T13119] netlink: 17 bytes leftover after parsing attributes in process `syz.7.2062'. [ 319.333151][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 319.336322][T13040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.351653][T13062] chnl_net:caif_netlink_parms(): no params data found [ 319.360611][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 319.419590][ T6347] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.656274][T13040] team0: Port device team_slave_0 added [ 319.680681][T13040] team0: Port device team_slave_1 added [ 319.871252][T13040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.888464][T13040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.931468][T13040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.986966][T13040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.993997][T13040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.023531][T13040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.071186][T13148] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2071'. [ 320.205793][T13115] xfrm0 speed is unknown, defaulting to 1000 [ 320.281086][T13062] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.299834][T13062] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.311139][T13062] bridge_slave_0: entered allmulticast mode [ 320.320601][T13062] bridge_slave_0: entered promiscuous mode [ 320.329016][T13115] lo speed is unknown, defaulting to 1000 [ 320.436387][T13062] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.449489][T13062] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.458326][T13062] bridge_slave_1: entered allmulticast mode [ 320.474731][T13062] bridge_slave_1: entered promiscuous mode [ 320.499273][T13115] lo speed is unknown, defaulting to 1000 [ 320.599864][T13062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.636043][T13040] hsr_slave_0: entered promiscuous mode [ 320.656180][T13040] hsr_slave_1: entered promiscuous mode [ 320.671594][T13062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.686981][T13163] netlink: 'syz.7.2074': attribute type 1 has an invalid length. [ 320.699140][T13163] netlink: 15 bytes leftover after parsing attributes in process `syz.7.2074'. [ 320.787269][ T5834] Bluetooth: hci6: command tx timeout [ 320.843465][ T6347] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.902688][T13062] team0: Port device team_slave_0 added [ 320.954103][T13062] team0: Port device team_slave_1 added [ 321.052125][ T6347] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.109239][T13062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.145983][T13062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.180651][T13062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.196909][T13062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.204155][T13062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.234109][T13062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.322656][ T6347] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.430634][ T5834] Bluetooth: hci3: command tx timeout [ 321.468871][ T6347] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.612820][T13062] hsr_slave_0: entered promiscuous mode [ 321.619839][T13062] hsr_slave_1: entered promiscuous mode [ 321.626576][T13062] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 321.635704][T13062] Cannot create hsr debugfs directory [ 321.763454][T13170] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 322.114506][ T6347] bridge_slave_1: left allmulticast mode [ 322.122847][ T6347] bridge_slave_1: left promiscuous mode [ 322.143784][ T6347] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.185268][ T6347] bridge_slave_0: left allmulticast mode [ 322.196678][ T6347] bridge_slave_0: left promiscuous mode [ 322.202651][ T6347] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.215223][ T6347] bridge_slave_1: left allmulticast mode [ 322.221339][ T6347] bridge_slave_1: left promiscuous mode [ 322.227895][ T6347] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.239556][ T6347] bridge_slave_0: left allmulticast mode [ 322.246466][ T6347] bridge_slave_0: left promiscuous mode [ 322.253403][ T6347] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.552972][T13197] __nla_validate_parse: 1 callbacks suppressed [ 322.552991][T13197] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2083'. [ 322.869762][ T5834] Bluetooth: hci6: command tx timeout [ 322.965211][ T6347] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.979246][ T6347] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.992862][ T6347] bond0 (unregistering): Released all slaves [ 323.152357][ T6347] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.170923][ T6347] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.187377][ T6347] bond0 (unregistering): Released all slaves [ 323.234324][T13197] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.242767][T13197] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.361555][T13200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2084'. [ 323.441418][T13115] chnl_net:caif_netlink_parms(): no params data found [ 323.443768][T13200] can: request_module (can-proto-0) failed. [ 323.506524][ T5834] Bluetooth: hci3: command tx timeout [ 323.773160][T13213] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2087'. [ 323.801703][T13213] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 323.820115][T13215] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2088'. [ 324.160225][T13226] netlink: 'syz.7.2090': attribute type 4 has an invalid length. [ 324.180226][T13115] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.187771][T13115] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.196292][T13115] bridge_slave_0: entered allmulticast mode [ 324.204339][T13115] bridge_slave_0: entered promiscuous mode [ 324.248773][T13115] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.258229][T13115] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.268151][T13115] bridge_slave_1: entered allmulticast mode [ 324.281828][T13115] bridge_slave_1: entered promiscuous mode [ 324.335121][T13226] netlink: 13 bytes leftover after parsing attributes in process `syz.7.2090'. [ 324.341562][T13233] netlink: 'syz.4.2094': attribute type 1 has an invalid length. [ 324.436758][T13040] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 324.448320][T13040] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 324.472980][T13234] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 324.548687][T13115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.629467][T13115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.750456][T13040] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 324.933224][T13040] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 324.956057][ T5834] Bluetooth: hci6: command tx timeout [ 325.066632][T13115] team0: Port device team_slave_0 added [ 325.081426][T13240] syzkaller1: entered promiscuous mode [ 325.093650][T13240] syzkaller1: entered allmulticast mode [ 325.120599][ T6347] hsr_slave_0: left promiscuous mode [ 325.128866][ T6347] hsr_slave_1: left promiscuous mode [ 325.134892][ T6347] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.142918][ T6347] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.153406][ T6347] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.162715][ T6347] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.174953][ T6347] hsr_slave_0: left promiscuous mode [ 325.181743][ T6347] hsr_slave_1: left promiscuous mode [ 325.188274][ T6347] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.195816][ T6347] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.207955][ T6347] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.215446][ T6347] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.253770][ T6347] veth1_macvtap: left promiscuous mode [ 325.259645][ T6347] veth0_macvtap: left promiscuous mode [ 325.265371][ T6347] veth1_vlan: left promiscuous mode [ 325.271363][ T6347] veth0_vlan: left promiscuous mode [ 325.278191][ T6347] veth1_macvtap: left promiscuous mode [ 325.283761][ T6347] veth0_macvtap: left promiscuous mode [ 325.289710][ T6347] veth1_vlan: left promiscuous mode [ 325.295046][ T6347] veth0_vlan: left promiscuous mode [ 325.586593][ T5834] Bluetooth: hci3: command tx timeout [ 325.912157][ T6347] team0 (unregistering): Port device team_slave_1 removed [ 325.961645][ T6347] team0 (unregistering): Port device team_slave_0 removed [ 326.780401][ T6347] team0 (unregistering): Port device team_slave_1 removed [ 326.826077][ T6347] team0 (unregistering): Port device team_slave_0 removed [ 327.271169][T13115] team0: Port device team_slave_1 added [ 327.401918][T13115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.432455][T13115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.461078][T13115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.498014][T13115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.505098][T13115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.545721][T13115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.666493][ T5834] Bluetooth: hci3: command tx timeout [ 327.715832][T13115] hsr_slave_0: entered promiscuous mode [ 327.730137][T13115] hsr_slave_1: entered promiscuous mode [ 327.743159][T13115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 327.766677][T13115] Cannot create hsr debugfs directory [ 327.940629][T13255] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2100'. [ 328.011633][T13062] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 328.041267][T13062] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 328.105380][T13062] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 328.120823][T13062] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 328.250593][T13040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.332805][T13040] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.380367][ T6342] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.387590][ T6342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.416931][ T6342] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.424160][ T6342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.643983][T13062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.701041][T13062] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.744237][ T6342] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.751450][ T6342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.800897][ T1124] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.808158][ T1124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.919950][T13115] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 328.933655][T13115] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 328.944473][T13115] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 328.966606][T13115] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 328.992694][T13040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.248346][T13040] veth0_vlan: entered promiscuous mode [ 329.273872][T13272] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2103'. [ 329.305454][T13040] veth1_vlan: entered promiscuous mode [ 329.325016][T13274] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2103'. [ 329.341098][T13115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.414481][T13115] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.440544][T13062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.475495][T13040] veth0_macvtap: entered promiscuous mode [ 329.498460][T13040] veth1_macvtap: entered promiscuous mode [ 329.510275][ T6355] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.517511][ T6355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.548940][ T1124] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.556159][ T1124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.573369][T13278] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2104'. [ 329.598503][T13040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.642987][T13062] veth0_vlan: entered promiscuous mode [ 329.677883][T13040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.733358][T13040] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.743544][T13040] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.753364][T13040] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.763986][T13040] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.789018][T13062] veth1_vlan: entered promiscuous mode [ 330.014722][T13062] veth0_macvtap: entered promiscuous mode [ 330.035081][ T6355] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.052116][ T6355] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.073277][T13062] veth1_macvtap: entered promiscuous mode [ 330.162583][T13062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.210650][T13062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.253144][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.270968][T13062] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.282039][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.282863][T13062] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.299458][T13062] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.310015][T13062] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.441265][T13115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.565491][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.581486][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.639406][ T6347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.650718][ T6347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.919516][ T6347] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.055225][ T6347] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.093909][T13115] veth0_vlan: entered promiscuous mode [ 331.110498][T13115] veth1_vlan: entered promiscuous mode [ 331.165103][T13115] veth0_macvtap: entered promiscuous mode [ 331.179168][T13115] veth1_macvtap: entered promiscuous mode [ 331.223785][T13115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.249219][T13115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.298340][ T6347] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.316199][T13115] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.324954][T13115] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.334147][T13115] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.343790][T13115] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.505217][ T5903] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.518700][ T5903] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.564252][ T6347] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.652335][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.671399][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.815981][ T6347] bridge_slave_1: left allmulticast mode [ 331.821714][ T6347] bridge_slave_1: left promiscuous mode [ 331.828379][ T6347] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.863460][ T6347] bridge_slave_0: left allmulticast mode [ 331.880437][ T6347] bridge_slave_0: left promiscuous mode [ 331.896183][ T6347] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.264918][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 332.274916][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 332.300979][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 332.326573][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 332.340750][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 332.472901][T13308] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2108'. [ 332.485023][ T6347] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 332.509400][ T6347] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 332.529426][ T6347] bond0 (unregistering): Released all slaves [ 332.967937][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 332.978270][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 332.991230][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 333.009116][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 333.023368][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 333.166598][T13304] xfrm0 speed is unknown, defaulting to 1000 [ 333.202049][T13304] lo speed is unknown, defaulting to 1000 [ 333.243072][T13304] lo speed is unknown, defaulting to 1000 [ 333.757346][T13312] xfrm0 speed is unknown, defaulting to 1000 [ 333.780741][T13312] lo speed is unknown, defaulting to 1000 [ 333.836281][T13312] lo speed is unknown, defaulting to 1000 [ 334.026337][ T5830] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 334.040214][ T5830] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 334.058649][ T5830] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 334.067837][ T5830] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 334.077746][ T5830] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 334.139655][T13331] netlink: 165 bytes leftover after parsing attributes in process `syz.4.2112'. [ 334.285083][T13325] xfrm0 speed is unknown, defaulting to 1000 [ 334.329662][ T6347] hsr_slave_0: left promiscuous mode [ 334.342559][ T6347] hsr_slave_1: left promiscuous mode [ 334.349223][ T6347] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.357966][ T6347] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.368484][ T6347] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.387112][ T6347] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.421860][ T6347] veth1_macvtap: left promiscuous mode [ 334.428588][ T6347] veth0_macvtap: left promiscuous mode [ 334.434767][ T6347] veth1_vlan: left promiscuous mode [ 334.441772][ T6347] veth0_vlan: left promiscuous mode [ 334.466496][ T5834] Bluetooth: hci0: command tx timeout [ 334.992411][ T6347] team0 (unregistering): Port device team_slave_1 removed [ 335.035646][ T6347] team0 (unregistering): Port device team_slave_0 removed [ 335.117646][ T5834] Bluetooth: hci3: command tx timeout [ 335.504214][T13325] lo speed is unknown, defaulting to 1000 [ 335.555943][T13325] lo speed is unknown, defaulting to 1000 [ 335.725797][T13304] chnl_net:caif_netlink_parms(): no params data found [ 336.052288][T13312] chnl_net:caif_netlink_parms(): no params data found [ 336.152147][ T5834] Bluetooth: hci6: command tx timeout [ 336.243544][T13304] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.251035][T13304] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.258564][T13304] bridge_slave_0: entered allmulticast mode [ 336.266025][T13304] bridge_slave_0: entered promiscuous mode [ 336.329024][T13304] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.337401][T13304] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.344654][T13304] bridge_slave_1: entered allmulticast mode [ 336.353110][T13304] bridge_slave_1: entered promiscuous mode [ 336.422362][ T6347] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.465743][T13304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.548657][ T5834] Bluetooth: hci0: command tx timeout [ 336.564309][ T6347] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.588112][T13304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.664655][ T6347] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.719907][T13312] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.732109][T13312] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.742941][T13312] bridge_slave_0: entered allmulticast mode [ 336.754406][T13312] bridge_slave_0: entered promiscuous mode [ 336.835382][ T6347] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.858299][T13312] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.866638][T13312] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.874010][T13312] bridge_slave_1: entered allmulticast mode [ 336.881853][T13312] bridge_slave_1: entered promiscuous mode [ 336.912296][T13304] team0: Port device team_slave_0 added [ 336.928392][T13304] team0: Port device team_slave_1 added [ 337.017460][T13312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.029248][T13304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.037654][T13304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.065124][T13304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.077768][T13371] .: renamed from bond0 [ 337.101442][T13312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.157515][T13304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.164541][T13304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.192207][ T5834] Bluetooth: hci3: command tx timeout [ 337.207959][T13304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.267769][T13312] team0: Port device team_slave_0 added [ 337.280883][T13312] team0: Port device team_slave_1 added [ 337.396575][T13312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.404110][T13312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.434553][T13312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.448400][T13312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.455384][T13312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.482366][T13312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.541299][T13304] hsr_slave_0: entered promiscuous mode [ 337.549815][T13304] hsr_slave_1: entered promiscuous mode [ 337.795272][ T6347] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.824408][T13312] hsr_slave_0: entered promiscuous mode [ 337.832028][T13312] hsr_slave_1: entered promiscuous mode [ 337.838602][T13312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 337.846784][T13312] Cannot create hsr debugfs directory [ 337.852526][T13325] chnl_net:caif_netlink_parms(): no params data found [ 337.897860][ T6347] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.025041][ T6347] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.152141][ T6347] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.194333][T13385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2124'. [ 338.231254][ T5834] Bluetooth: hci6: command tx timeout [ 338.245199][T13385] netlink: 'syz.4.2124': attribute type 1 has an invalid length. [ 338.262961][T13385] Bluetooth: MGMT ver 1.23 [ 338.302988][T13325] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.317119][T13325] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.336139][T13325] bridge_slave_0: entered allmulticast mode [ 338.344101][T13325] bridge_slave_0: entered promiscuous mode [ 338.389120][T13388] netlink: 'syz.4.2125': attribute type 4 has an invalid length. [ 338.406525][T13325] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.413674][T13325] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.422461][T13325] bridge_slave_1: entered allmulticast mode [ 338.442550][T13325] bridge_slave_1: entered promiscuous mode [ 338.562533][T13325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.626570][ T5834] Bluetooth: hci0: command tx timeout [ 338.655370][T13325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.778636][T13396] openvswitch: netlink: IP tunnel dst address not specified [ 338.790864][T13396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2127'. [ 338.800530][T13396] netlink: 'syz.4.2127': attribute type 5 has an invalid length. [ 338.809235][T13396] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2127'. [ 338.828042][T13325] team0: Port device team_slave_0 added [ 338.862344][T13396] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 338.873252][T13396] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 338.883786][T13396] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 338.892881][T13396] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 338.902076][T13396] geneve4: entered promiscuous mode [ 338.908454][T13396] geneve4: entered allmulticast mode [ 338.922919][T13325] team0: Port device team_slave_1 added [ 339.106688][ T6347] bridge_slave_1: left allmulticast mode [ 339.112499][ T6347] bridge_slave_1: left promiscuous mode [ 339.138317][ T6347] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.165700][ T6347] bridge_slave_0: left allmulticast mode [ 339.177802][T13402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2130'. [ 339.186585][ T6347] bridge_slave_0: left promiscuous mode [ 339.192526][ T6347] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.218342][ T6347] bridge_slave_1: left allmulticast mode [ 339.224053][ T6347] bridge_slave_1: left promiscuous mode [ 339.239257][ T6347] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.262025][ T6347] bridge_slave_0: left allmulticast mode [ 339.268699][ T5834] Bluetooth: hci3: command tx timeout [ 339.279788][ T6347] bridge_slave_0: left promiscuous mode [ 339.285600][ T6347] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.301081][T13404] netlink: 41 bytes leftover after parsing attributes in process `syz.4.2130'. [ 339.467434][ T5830] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 339.477378][ T5830] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 339.485672][ T5830] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 339.495213][ T5830] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 339.503303][ T5830] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 340.080504][ T6347] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.093223][ T6347] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 340.103899][ T6347] bond0 (unregistering): Released all slaves [ 340.220389][ T6347] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.240796][ T6347] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 340.253260][ T6347] bond0 (unregistering): Released all slaves [ 340.272082][T13325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.279840][T13325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.308680][ T5834] Bluetooth: hci6: command tx timeout [ 340.314257][T13325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.353208][T13402] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 340.369617][T13402] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 340.384330][T13402] gretap0: entered promiscuous mode [ 340.389842][T13402] gretap0: entered allmulticast mode [ 340.477656][T13325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.484683][T13325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.512402][T13325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.605590][T13405] xfrm0 speed is unknown, defaulting to 1000 [ 340.655769][T13405] lo speed is unknown, defaulting to 1000 [ 340.689308][T13325] hsr_slave_0: entered promiscuous mode [ 340.698574][T13325] hsr_slave_1: entered promiscuous mode [ 340.705168][T13325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 340.713579][ T5834] Bluetooth: hci0: command tx timeout [ 340.719159][T13325] Cannot create hsr debugfs directory [ 340.773896][T13405] lo speed is unknown, defaulting to 1000 [ 341.191175][T13418] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2134'. [ 341.204010][T13418] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2134'. [ 341.346264][ T5834] Bluetooth: hci3: command tx timeout [ 341.493269][T13312] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 341.586121][ T5834] Bluetooth: hci8: command tx timeout [ 341.678436][T13312] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 341.803208][T13432] netlink: 'syz.4.2137': attribute type 1 has an invalid length. [ 341.804434][T13312] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 341.812560][T13432] netlink: 'syz.4.2137': attribute type 3 has an invalid length. [ 341.828598][T13432] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2137'. [ 341.884897][T13312] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 341.934613][T13435] netlink: 'syz.4.2138': attribute type 1 has an invalid length. [ 342.224600][T13442] netlink: 'syz.4.2140': attribute type 58 has an invalid length. [ 342.231923][T13304] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 342.244528][T13442] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2140'. [ 342.266286][ T6347] hsr_slave_0: left promiscuous mode [ 342.272484][ T6347] hsr_slave_1: left promiscuous mode [ 342.283690][ T6347] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.291469][ T6347] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.300208][ T6347] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.312580][ T6347] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.325449][ T6347] hsr_slave_0: left promiscuous mode [ 342.331616][ T6347] hsr_slave_1: left promiscuous mode [ 342.338188][ T6347] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.345638][ T6347] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.354047][ T6347] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.361822][ T6347] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.386238][ T5834] Bluetooth: hci6: command tx timeout [ 342.406633][ T6347] veth1_macvtap: left promiscuous mode [ 342.412336][ T6347] veth0_macvtap: left promiscuous mode [ 342.419035][ T6347] veth1_vlan: left promiscuous mode [ 342.424613][ T6347] veth0_vlan: left promiscuous mode [ 342.431699][ T6347] veth1_macvtap: left promiscuous mode [ 342.437470][ T6347] veth0_macvtap: left promiscuous mode [ 342.443232][ T6347] veth1_vlan: left promiscuous mode [ 342.449021][ T6347] veth0_vlan: left promiscuous mode [ 343.071920][ T6347] team0 (unregistering): Port device team_slave_1 removed [ 343.120433][ T6347] team0 (unregistering): Port device team_slave_0 removed [ 343.676613][ T5830] Bluetooth: hci8: command tx timeout [ 343.969573][ T6347] team0 (unregistering): Port device team_slave_1 removed [ 344.016408][ T6347] team0 (unregistering): Port device team_slave_0 removed [ 344.563355][T13304] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 344.634761][T13304] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 344.664907][T13304] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 344.690313][T13405] chnl_net:caif_netlink_parms(): no params data found [ 344.866627][ T5830] Bluetooth: hci4: command 0x0405 tx timeout [ 345.063842][T13405] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.071910][T13405] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.080512][T13405] bridge_slave_0: entered allmulticast mode [ 345.089279][T13405] bridge_slave_0: entered promiscuous mode [ 345.098907][T13405] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.107112][T13405] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.114345][T13405] bridge_slave_1: entered allmulticast mode [ 345.122767][T13405] bridge_slave_1: entered promiscuous mode [ 345.267452][T13405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.312744][T13405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.335793][T13325] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 345.376745][T13325] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 345.436601][T13325] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 345.449520][T13325] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 345.469323][T13312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.488263][T13405] team0: Port device team_slave_0 added [ 345.518943][T13405] team0: Port device team_slave_1 added [ 345.626641][T13312] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.683735][ T6355] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.690971][ T6355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.713180][T13405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.720910][T13405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.747577][ T5834] Bluetooth: hci8: command tx timeout [ 345.754021][T13405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.768639][T13405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.777523][T13405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.804672][T13405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.822830][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.830063][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.839285][T13466] Bluetooth: MGMT ver 1.23 [ 345.851107][T13304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.961579][T13405] hsr_slave_0: entered promiscuous mode [ 345.969623][T13405] hsr_slave_1: entered promiscuous mode [ 345.982277][T13405] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 345.992842][T13405] Cannot create hsr debugfs directory [ 346.024728][T13304] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.124099][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.131357][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.190528][ T6347] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.197751][ T6347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.438712][T13325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.497730][T13405] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 346.522465][T13405] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 346.564191][T13405] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 346.593361][T13405] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 346.669910][T13473] openvswitch: netlink: IP tunnel dst address not specified [ 346.672210][T13325] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.724350][T13312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.793697][ T1124] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.800899][ T1124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.882725][ T6342] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.889902][ T6342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.977667][T13483] netlink: 'syz.4.2148': attribute type 13 has an invalid length. [ 346.985547][T13483] netlink: 'syz.4.2148': attribute type 17 has an invalid length. [ 347.142288][T13312] veth0_vlan: entered promiscuous mode [ 347.231151][T13312] veth1_vlan: entered promiscuous mode [ 347.245388][T13304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.349118][T13312] veth0_macvtap: entered promiscuous mode [ 347.373873][T13405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.384761][T13312] veth1_macvtap: entered promiscuous mode [ 347.461187][T13304] veth0_vlan: entered promiscuous mode [ 347.475320][T13405] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.514830][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.522094][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.549894][T13312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.579283][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.586516][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.630691][T13312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.642414][T13304] veth1_vlan: entered promiscuous mode [ 347.681121][T13312] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.695571][T13312] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.705122][T13312] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.720018][T13312] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.819373][T13325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.826824][ T5834] Bluetooth: hci8: command tx timeout [ 347.907488][ C0] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 347.936468][T13304] veth0_macvtap: entered promiscuous mode [ 348.010213][T13304] veth1_macvtap: entered promiscuous mode [ 348.110182][T13304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.178068][T13304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.201250][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.237185][T13304] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.248301][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.264334][T13304] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.274529][T13304] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.291000][T13304] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.479850][ T6355] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.512890][ T6355] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.640395][T13509] netlink: 'syz.4.2152': attribute type 21 has an invalid length. [ 348.653130][ T6347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.671267][ T6347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.829548][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.841411][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.939855][T13405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.997931][T13325] veth0_vlan: entered promiscuous mode [ 349.109103][ T6355] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.292262][ T6355] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.352932][T13325] veth1_vlan: entered promiscuous mode [ 349.465159][ T6355] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.600833][ T6355] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.654066][T13325] veth0_macvtap: entered promiscuous mode [ 349.709353][T13325] veth1_macvtap: entered promiscuous mode [ 349.758766][T13405] veth0_vlan: entered promiscuous mode [ 349.846333][T13325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.910004][T13405] veth1_vlan: entered promiscuous mode [ 349.931896][T13325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.000015][T13325] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.016743][T13325] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.025490][T13325] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.055926][T13325] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.118784][ T6355] bridge_slave_1: left allmulticast mode [ 350.124500][ T6355] bridge_slave_1: left promiscuous mode [ 350.137956][ T6355] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.160259][ T6355] bridge_slave_0: left allmulticast mode [ 350.171786][ T6355] bridge_slave_0: left promiscuous mode [ 350.179296][ T6355] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.263961][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 350.279943][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 350.297797][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 350.328306][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 350.337813][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 350.645096][ T6355] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.658912][ T6355] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.671712][ T6355] bond0 (unregistering): Released all slaves [ 350.729310][T13405] veth0_macvtap: entered promiscuous mode [ 350.843249][T13522] xfrm0 speed is unknown, defaulting to 1000 [ 350.846654][T13405] veth1_macvtap: entered promiscuous mode [ 350.909900][T13522] lo speed is unknown, defaulting to 1000 [ 350.925130][T13522] lo speed is unknown, defaulting to 1000 [ 351.133280][T13532] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2154'. [ 351.146374][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.160300][T13405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.175037][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.278148][T13405] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.414075][T13405] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.439005][T13405] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.456288][T13405] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.465056][T13405] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.505532][ T6347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.531653][ T6347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.563316][T13535] xt_CT: No such helper "pptp" [ 351.699050][T13540] netlink: 'syz.4.2156': attribute type 1 has an invalid length. [ 351.763934][T13539] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2156'. [ 351.768535][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 351.799195][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 351.808717][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 351.820414][T13540] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 351.828665][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 351.882326][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 352.045449][T13547] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2157'. [ 352.115068][ T6355] hsr_slave_0: left promiscuous mode [ 352.131212][ T6355] hsr_slave_1: left promiscuous mode [ 352.140276][ T6355] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.156181][ T6355] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.169148][ T6355] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.181568][ T6355] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.212939][ T6355] veth1_macvtap: left promiscuous mode [ 352.222143][ T6355] veth0_macvtap: left promiscuous mode [ 352.229256][ T6355] veth1_vlan: left promiscuous mode [ 352.234712][ T6355] veth0_vlan: left promiscuous mode [ 352.386827][ T5830] Bluetooth: hci0: command tx timeout [ 352.853433][ T6355] team0 (unregistering): Port device team_slave_1 removed [ 352.910730][ T6355] team0 (unregistering): Port device team_slave_0 removed [ 353.318868][ T5834] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 353.328791][ T5834] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 353.343084][ T5834] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 353.363449][ T5834] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 353.371412][ T5834] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 353.631916][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.640003][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.771128][T13542] xfrm0 speed is unknown, defaulting to 1000 [ 353.794044][T13542] lo speed is unknown, defaulting to 1000 [ 353.796828][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.808468][T13552] xfrm0 speed is unknown, defaulting to 1000 [ 353.808528][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.846421][T13542] lo speed is unknown, defaulting to 1000 [ 353.863061][T13552] lo speed is unknown, defaulting to 1000 [ 353.882918][T13555] netlink: 'syz.4.2158': attribute type 25 has an invalid length. [ 353.907127][ T5830] Bluetooth: hci3: command tx timeout [ 353.954930][T13557] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 354.392618][T13522] chnl_net:caif_netlink_parms(): no params data found [ 354.413317][T13552] lo speed is unknown, defaulting to 1000 [ 354.428579][T13571] netlink: 'syz.8.2161': attribute type 1 has an invalid length. [ 354.439181][T13571] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2161'. [ 354.466133][ T5830] Bluetooth: hci0: command tx timeout [ 354.521153][ T6355] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.679284][ T6355] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.921407][ T6355] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.980286][T13585] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2165'. [ 355.003908][T13585] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2165'. [ 355.018062][T13585] FAULT_INJECTION: forcing a failure. [ 355.018062][T13585] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 355.037098][T13585] CPU: 0 UID: 0 PID: 13585 Comm: syz.4.2165 Not tainted 6.15.0-rc7-syzkaller-00088-gd8d85ef0a631 #0 PREEMPT(full) [ 355.037162][T13585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 355.037180][T13585] Call Trace: [ 355.037193][T13585] [ 355.037203][T13585] dump_stack_lvl+0x189/0x250 [ 355.037254][T13585] ? __pfx_dump_stack_lvl+0x10/0x10 [ 355.037283][T13585] ? __pfx__printk+0x10/0x10 [ 355.037318][T13585] should_fail_ex+0x414/0x560 [ 355.037347][T13585] _copy_to_user+0x31/0xb0 [ 355.037380][T13585] simple_read_from_buffer+0xe1/0x170 [ 355.037412][T13585] proc_fail_nth_read+0x1df/0x250 [ 355.037446][T13585] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 355.037479][T13585] ? rw_verify_area+0x258/0x650 [ 355.037500][T13585] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 355.037530][T13585] vfs_read+0x1fd/0x980 [ 355.037635][T13585] ? __pfx___mutex_lock+0x10/0x10 [ 355.037664][T13585] ? __pfx_vfs_read+0x10/0x10 [ 355.037689][T13585] ? __fget_files+0x2a/0x420 [ 355.037721][T13585] ? __fget_files+0x3a0/0x420 [ 355.037747][T13585] ? __fget_files+0x2a/0x420 [ 355.037785][T13585] ksys_read+0x145/0x250 [ 355.037873][T13585] ? rcu_is_watching+0x15/0xb0 [ 355.037904][T13585] ? __pfx_ksys_read+0x10/0x10 [ 355.037938][T13585] ? do_syscall_64+0xba/0x210 [ 355.037972][T13585] do_syscall_64+0xf6/0x210 [ 355.038001][T13585] ? clear_bhb_loop+0x60/0xb0 [ 355.038028][T13585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.038049][T13585] RIP: 0033:0x7fdbab18d37c [ 355.038076][T13585] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 355.038094][T13585] RSP: 002b:00007fdbac006030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 355.038123][T13585] RAX: ffffffffffffffda RBX: 00007fdbab3b5fa0 RCX: 00007fdbab18d37c [ 355.038139][T13585] RDX: 000000000000000f RSI: 00007fdbac0060a0 RDI: 0000000000000004 [ 355.038152][T13585] RBP: 00007fdbac006090 R08: 0000000000000000 R09: 0000000000000000 [ 355.038165][T13585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.038177][T13585] R13: 0000000000000000 R14: 00007fdbab3b5fa0 R15: 00007ffc5d159048 [ 355.038207][T13585] [ 355.313400][ T6355] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.427484][ T5830] Bluetooth: hci6: command tx timeout [ 355.446805][T13522] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.458232][T13522] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.465703][T13522] bridge_slave_0: entered allmulticast mode [ 355.483418][T13522] bridge_slave_0: entered promiscuous mode [ 355.542102][T13522] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.555722][T13522] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.570127][T13522] bridge_slave_1: entered allmulticast mode [ 355.580370][T13522] bridge_slave_1: entered promiscuous mode [ 355.684347][T13522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.833089][T13522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.919427][T13607] Bluetooth: MGMT ver 1.23 [ 355.930878][T13602] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2168'. [ 355.987435][ T5830] Bluetooth: hci3: command tx timeout [ 356.049885][T13522] team0: Port device team_slave_0 added [ 356.104302][T13542] chnl_net:caif_netlink_parms(): no params data found [ 356.164962][T13614] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2172'. [ 356.242000][T13522] team0: Port device team_slave_1 added [ 356.315616][T13618] ipt_REJECT: ECHOREPLY no longer supported. [ 356.360818][T13622] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2173'. [ 356.489142][ T6355] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.546180][ T5830] Bluetooth: hci0: command tx timeout [ 356.549974][T13522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.560551][T13522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.635546][T13522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.763915][T13634] netlink: 'syz.4.2177': attribute type 1 has an invalid length. [ 356.774761][T13634] netlink: 'syz.4.2177': attribute type 2 has an invalid length. [ 356.802459][ T6355] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.818844][T13522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.837712][T13522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.879490][T13522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.915617][T13552] chnl_net:caif_netlink_parms(): no params data found [ 357.140352][ T6355] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.263725][T13542] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.283148][T13542] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.296806][T13542] bridge_slave_0: entered allmulticast mode [ 357.304805][T13542] bridge_slave_0: entered promiscuous mode [ 357.314508][T13653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2181'. [ 357.391506][T13542] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.400037][T13542] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.407969][T13542] bridge_slave_1: entered allmulticast mode [ 357.415358][T13542] bridge_slave_1: entered promiscuous mode [ 357.431182][T13651] netlink: 96 bytes leftover after parsing attributes in process `syz.8.2180'. [ 357.485225][ T6355] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.506372][ T5830] Bluetooth: hci6: command tx timeout [ 357.543484][T13522] hsr_slave_0: entered promiscuous mode [ 357.557484][T13522] hsr_slave_1: entered promiscuous mode [ 357.564009][T13522] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 357.588427][T13522] Cannot create hsr debugfs directory [ 357.632029][T13651] 8021q: VLANs not supported on ip6gre0 [ 357.742443][T13542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.854575][T13542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.872111][T13666] macvlan2: entered promiscuous mode [ 357.968056][T13672] netlink: 'syz.8.2187': attribute type 2 has an invalid length. [ 357.989175][T13552] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.004224][T13552] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.012800][T13552] bridge_slave_0: entered allmulticast mode [ 358.022154][T13552] bridge_slave_0: entered promiscuous mode [ 358.066635][ T5830] Bluetooth: hci3: command tx timeout [ 358.073258][T13552] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.080954][T13552] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.090457][T13552] bridge_slave_1: entered allmulticast mode [ 358.098602][T13552] bridge_slave_1: entered promiscuous mode [ 358.255080][T13542] team0: Port device team_slave_0 added [ 358.324707][T13552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.341063][T13552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.362744][T13542] team0: Port device team_slave_1 added [ 358.494353][T13681] netlink: 9 bytes leftover after parsing attributes in process `syz.8.2189'. [ 358.512155][ T6355] bridge_slave_1: left allmulticast mode [ 358.522125][ T6355] bridge_slave_1: left promiscuous mode [ 358.529442][ T6355] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.540211][ T6355] bridge_slave_0: left allmulticast mode [ 358.546796][ T6355] bridge_slave_0: left promiscuous mode [ 358.552641][ T6355] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.565178][ T6355] bridge_slave_1: left allmulticast mode [ 358.572025][ T6355] bridge_slave_1: left promiscuous mode [ 358.578059][ T6355] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.592297][ T6355] bridge_slave_0: left allmulticast mode [ 358.599209][ T6355] bridge_slave_0: left promiscuous mode [ 358.605654][ T6355] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.626833][ T5830] Bluetooth: hci0: command tx timeout [ 359.343928][ T6355] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 359.356479][ T6355] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 359.371913][ T6355] bond0 (unregistering): Released all slaves [ 359.515437][ T6355] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 359.529216][ T6355] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 359.542958][ T6355] bond0 (unregistering): Released all slaves [ 359.573127][T13552] team0: Port device team_slave_0 added [ 359.581846][T13542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.589358][ T5830] Bluetooth: hci6: command tx timeout [ 359.595207][T13542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.622496][T13542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.639385][T13542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.646901][T13542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.674811][T13542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.703815][T13681] gretap0: entered promiscuous mode [ 359.852527][T13552] team0: Port device team_slave_1 added [ 360.005041][T13552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.035973][T13552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.077775][T13552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.141027][T13697] xt_ecn: cannot match TCP bits for non-tcp packets [ 360.147747][ T5830] Bluetooth: hci3: command tx timeout [ 360.218452][T13698] xt_ecn: cannot match TCP bits for non-tcp packets [ 360.279931][T13552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.296031][T13552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.333099][T13552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.365052][T13542] hsr_slave_0: entered promiscuous mode [ 360.389650][T13542] hsr_slave_1: entered promiscuous mode [ 360.397830][T13542] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 360.407353][T13542] Cannot create hsr debugfs directory [ 360.751320][T13716] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2200'. [ 360.978160][T13552] hsr_slave_0: entered promiscuous mode [ 361.004365][T13552] hsr_slave_1: entered promiscuous mode [ 361.030386][T13552] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 361.040243][T13552] Cannot create hsr debugfs directory [ 361.667972][ T5830] Bluetooth: hci6: command tx timeout [ 361.853905][ T6355] hsr_slave_0: left promiscuous mode [ 361.885273][ T6355] hsr_slave_1: left promiscuous mode [ 361.903973][ T6355] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 361.925225][ T6355] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 361.944632][ T6355] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 361.953748][ T6355] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.975043][ T6355] hsr_slave_0: left promiscuous mode [ 361.982317][ T6355] hsr_slave_1: left promiscuous mode [ 361.994425][ T6355] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.003267][ T6355] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.011915][ T6355] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.019824][ T6355] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.064740][ T6355] veth1_macvtap: left promiscuous mode [ 362.071107][ T6355] veth0_macvtap: left promiscuous mode [ 362.078568][ T6355] veth1_vlan: left promiscuous mode [ 362.084663][ T6355] veth0_vlan: left promiscuous mode [ 362.093204][ T6355] veth1_macvtap: left promiscuous mode [ 362.098928][ T6355] veth0_macvtap: left promiscuous mode [ 362.104566][ T6355] veth1_vlan: left promiscuous mode [ 362.110513][ T6355] veth0_vlan: left promiscuous mode [ 362.754635][ T6355] team0 (unregistering): Port device team_slave_1 removed [ 362.795594][ T6355] team0 (unregistering): Port device team_slave_0 removed [ 363.684607][ T6355] team0 (unregistering): Port device team_slave_1 removed [ 363.732370][ T6355] team0 (unregistering): Port device team_slave_0 removed [ 364.482529][T13522] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 364.548220][T13522] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 364.570357][T13751] netlink: 'syz.8.2210': attribute type 11 has an invalid length. [ 364.610086][T13751] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2210'. [ 364.650635][T13522] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 364.681440][T13522] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 364.891138][T13757] xfrm0 speed is unknown, defaulting to 1000 [ 364.908226][T13757] lo speed is unknown, defaulting to 1000 [ 364.924098][T13757] lo speed is unknown, defaulting to 1000 [ 365.095209][T13522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.212604][T13522] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.267154][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.274413][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.285015][T13542] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 365.343329][T13542] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 365.376431][T13542] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 365.397911][ T1124] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.405097][ T1124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.444051][T13542] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 365.956968][T13768] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2216'. [ 365.975539][T13768] openvswitch: netlink: Flow key attr not present in new flow. [ 366.024309][T13542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.220785][T13542] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.355491][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.362746][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.432752][ T6355] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.439957][ T6355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.478950][T13522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.504537][T13552] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 366.536239][T13552] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 366.561232][T13552] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 366.592320][T13552] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 366.726070][T13782] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2219'. [ 366.770975][T13542] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 366.865260][T13522] veth0_vlan: entered promiscuous mode [ 366.983929][T13522] veth1_vlan: entered promiscuous mode [ 367.070968][T13791] netlink: 'syz.8.2221': attribute type 8 has an invalid length. [ 367.217297][T13552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.247034][T13522] veth0_macvtap: entered promiscuous mode [ 367.291309][T13522] veth1_macvtap: entered promiscuous mode [ 367.404114][T13522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.470177][T13552] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.527913][T13522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.573721][T13542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.590476][T13522] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.600427][T13522] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.611940][T13522] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.620893][T13522] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.635698][ T6342] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.642947][ T6342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.661704][ T6342] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.668899][ T6342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.959080][T13542] veth0_vlan: entered promiscuous mode [ 367.991493][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.024225][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.041505][T13822] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2229'. [ 368.078995][T13542] veth1_vlan: entered promiscuous mode [ 368.112369][T13822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2229'. [ 368.190061][ T6342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.211188][ T6342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.254023][T13542] veth0_macvtap: entered promiscuous mode [ 368.301968][T13542] veth1_macvtap: entered promiscuous mode [ 368.382343][T13542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.415266][T13542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.449104][T13542] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.492220][T13542] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.504266][T13542] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.529063][T13542] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.640656][T13552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.851273][ T5903] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.999257][ T5903] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.056526][ T6342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.064485][ T6342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.208709][ T5903] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.254569][ T6344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.267254][ T6344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.321779][ T5903] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.392547][T13552] veth0_vlan: entered promiscuous mode [ 369.450350][T13552] veth1_vlan: entered promiscuous mode [ 369.489760][T13552] veth0_macvtap: entered promiscuous mode [ 369.500823][T13552] veth1_macvtap: entered promiscuous mode [ 369.521901][T13552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.541337][T13552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.565669][T13552] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.575649][T13552] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.585379][T13552] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.604333][T13552] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.793558][ T5903] bridge_slave_1: left allmulticast mode [ 369.802271][ T5903] bridge_slave_1: left promiscuous mode [ 369.808665][ T5903] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.842707][ T5903] bridge_slave_0: left allmulticast mode [ 369.848759][ T5903] bridge_slave_0: left promiscuous mode [ 369.854575][ T5903] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.357504][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 370.371429][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 370.385386][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 370.401574][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 370.413497][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 370.549685][ T5903] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 370.564644][ T5903] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 370.577782][ T5903] bond0 (unregistering): Released all slaves [ 370.614905][ T6344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.633498][ T6344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.745658][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.755500][T13847] xfrm0 speed is unknown, defaulting to 1000 [ 370.774301][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.783445][T13847] lo speed is unknown, defaulting to 1000 [ 370.804940][T13847] lo speed is unknown, defaulting to 1000 [ 371.477732][T13854] sctp: [Deprecated]: syz.4.2236 (pid 13854) Use of int in max_burst socket option. [ 371.477732][T13854] Use struct sctp_assoc_value instead [ 371.548285][T13855] af_packet: tpacket_rcv: packet too big, clamped from 56 to 4294967272. macoff=96 [ 371.580454][T13856] netlink: 788 bytes leftover after parsing attributes in process `syz.4.2236'. [ 371.598584][ T5903] hsr_slave_0: left promiscuous mode [ 371.632060][ T5903] hsr_slave_1: left promiscuous mode [ 371.646619][ T5903] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.654213][ T5903] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.666103][ T5903] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 371.674749][ T5903] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.714210][ T5903] veth1_macvtap: left promiscuous mode [ 371.732138][ T5903] veth0_macvtap: left promiscuous mode [ 371.755516][ T5903] veth1_vlan: left promiscuous mode [ 371.762151][ T5903] veth0_vlan: left promiscuous mode [ 371.948821][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 371.957621][T13865] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2236'. [ 371.970310][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 371.983188][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 371.993736][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 372.002884][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 372.483793][ T5834] Bluetooth: hci0: command tx timeout [ 372.567969][ T5830] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 372.578475][ T5830] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 372.587272][ T5830] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 372.614013][ T5830] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 372.622952][ T5830] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 372.676411][ T5903] team0 (unregistering): Port device team_slave_1 removed [ 372.725448][ T5903] team0 (unregistering): Port device team_slave_0 removed [ 373.378260][T13847] chnl_net:caif_netlink_parms(): no params data found [ 373.454555][T13872] xt_CT: You must specify a L4 protocol and not use inversions on it [ 373.469880][T13873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2238'. [ 373.488202][T13873] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2238'. [ 373.560585][T13863] xfrm0 speed is unknown, defaulting to 1000 [ 373.581894][T13863] lo speed is unknown, defaulting to 1000 [ 373.610180][T13867] xfrm0 speed is unknown, defaulting to 1000 [ 373.674404][T13863] lo speed is unknown, defaulting to 1000 [ 373.681474][T13867] lo speed is unknown, defaulting to 1000 [ 373.843660][T13883] trusted_key: syz.4.2241 sent an empty control message without MSG_MORE. [ 373.866994][T13847] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.872347][T13883] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2241'. [ 373.876046][T13847] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.895933][T13884] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2241'. [ 373.916931][T13847] bridge_slave_0: entered allmulticast mode [ 373.924894][T13847] bridge_slave_0: entered promiscuous mode [ 373.955219][T13847] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.977210][T13847] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.977536][T13883] Bluetooth: MGMT ver 1.23 [ 373.984535][T13847] bridge_slave_1: entered allmulticast mode [ 374.018348][T13847] bridge_slave_1: entered promiscuous mode [ 374.066821][ T5830] Bluetooth: hci3: command tx timeout [ 374.114373][T13888] netlink: 'syz.8.2243': attribute type 1 has an invalid length. [ 374.132350][T13888] netlink: 'syz.8.2243': attribute type 2 has an invalid length. [ 374.140863][T13891] netlink: 'syz.8.2243': attribute type 1 has an invalid length. [ 374.152205][T13867] lo speed is unknown, defaulting to 1000 [ 374.156817][T13891] netlink: 'syz.8.2243': attribute type 2 has an invalid length. [ 374.198483][T13847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.231189][T13847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.563080][ T5830] Bluetooth: hci0: command tx timeout [ 374.569834][T13898] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2247'. [ 374.581475][T13898] netlink: 'syz.8.2247': attribute type 5 has an invalid length. [ 374.589800][T13898] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2247'. [ 374.648241][ T5903] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.716116][ T5830] Bluetooth: hci6: command tx timeout [ 374.791891][T13847] team0: Port device team_slave_0 added [ 374.803462][T13847] team0: Port device team_slave_1 added [ 374.855409][ T5903] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.035217][ T5903] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.147024][ T5830] Bluetooth: hci3: command tx timeout [ 376.636190][ T5830] Bluetooth: hci0: command tx timeout [ 376.682163][T13847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.689699][T13847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.718240][T13847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.786954][ T5830] Bluetooth: hci6: command tx timeout [ 376.817825][ T5903] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.880162][T13847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.887748][T13847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.914968][T13847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.056596][T13925] netlink: 2136 bytes leftover after parsing attributes in process `syz.8.2254'. [ 377.183245][T13847] hsr_slave_0: entered promiscuous mode [ 377.210153][T13847] hsr_slave_1: entered promiscuous mode [ 377.433800][T13863] chnl_net:caif_netlink_parms(): no params data found [ 377.818179][T13867] chnl_net:caif_netlink_parms(): no params data found [ 377.950150][ T5903] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.029897][T13863] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.038465][T13863] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.046874][T13863] bridge_slave_0: entered allmulticast mode [ 378.054378][T13863] bridge_slave_0: entered promiscuous mode [ 378.177592][ T5903] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.225440][T13863] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.233827][ T5830] Bluetooth: hci3: command tx timeout [ 378.245764][T13863] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.262194][T13863] bridge_slave_1: entered allmulticast mode [ 378.270956][T13863] bridge_slave_1: entered promiscuous mode [ 378.369466][ T5903] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.419853][T13970] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input5 [ 378.530359][T13863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.657866][ T5903] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.688377][T13976] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2264'. [ 378.713846][ T5830] Bluetooth: hci0: command tx timeout [ 378.727867][T13863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.867496][ T5830] Bluetooth: hci6: command tx timeout [ 378.885141][T13863] team0: Port device team_slave_0 added [ 378.928710][T13867] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.946729][T13867] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.954139][T13867] bridge_slave_0: entered allmulticast mode [ 378.974798][T13867] bridge_slave_0: entered promiscuous mode [ 379.068537][T13863] team0: Port device team_slave_1 added [ 379.176573][T13867] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.185723][T13867] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.194249][T13867] bridge_slave_1: entered allmulticast mode [ 379.202122][T13867] bridge_slave_1: entered promiscuous mode [ 379.230787][T13863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.238280][T13863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.265483][T13863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.282154][T13863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.290755][T13863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.319839][T13863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.427424][T13999] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2269'. [ 379.494632][T13997] netlink: 'syz.4.2268': attribute type 2 has an invalid length. [ 379.515397][T13997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2268'. [ 379.528201][T13867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.544137][T13867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.556455][T14004] netlink: 'syz.4.2268': attribute type 2 has an invalid length. [ 379.565708][T14004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2268'. [ 379.762069][T14011] xt_hashlimit: size too large, truncated to 1048576 [ 379.794734][T13863] hsr_slave_0: entered promiscuous mode [ 379.818656][T13863] hsr_slave_1: entered promiscuous mode [ 379.832888][T13863] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 379.846093][T13863] Cannot create hsr debugfs directory [ 379.871809][T13867] team0: Port device team_slave_0 added [ 379.880462][T14012] tipc: New replicast peer: 255.255.255.255 [ 379.890028][T14012] tipc: Enabled bearer , priority 10 [ 379.963429][ T5903] bridge_slave_1: left allmulticast mode [ 379.988023][ T5903] bridge_slave_1: left promiscuous mode [ 380.006251][ T5903] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.024774][ T5903] bridge_slave_0: left allmulticast mode [ 380.034182][ T5903] bridge_slave_0: left promiscuous mode [ 380.043700][ T5903] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.069902][ T5903] bridge_slave_1: left allmulticast mode [ 380.076494][ T5903] bridge_slave_1: left promiscuous mode [ 380.082450][ T5903] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.104754][ T5903] bridge_slave_0: left allmulticast mode [ 380.111018][ T5903] bridge_slave_0: left promiscuous mode [ 380.125669][ T5880] IPVS: starting estimator thread 0... [ 380.132023][ T5903] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.216638][T14020] IPVS: using max 25 ests per chain, 60000 per kthread [ 380.306531][ T5830] Bluetooth: hci3: command tx timeout [ 380.829140][ T5903] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 380.841078][ T5903] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 380.852176][ T5903] bond0 (unregistering): Released all slaves [ 380.956152][ T5830] Bluetooth: hci6: command tx timeout [ 380.985359][ T5903] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 380.997165][ T5903] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.007797][ T5903] bond0 (unregistering): Released all slaves [ 381.023667][T13867] team0: Port device team_slave_1 added [ 381.276501][T13867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.290769][T13867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.319470][T13867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.331102][T13847] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 381.447096][T13867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.454108][T13867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.482665][T13867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.502411][T13847] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 381.574903][T13847] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 381.683513][T14037] netlink: 'syz.8.2277': attribute type 1 has an invalid length. [ 381.721028][T13847] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 381.738908][T14032] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2276'. [ 381.751399][T14032] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2276'. [ 381.842345][T13867] hsr_slave_0: entered promiscuous mode [ 381.862543][T13867] hsr_slave_1: entered promiscuous mode [ 381.873097][T13867] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 381.886146][T13867] Cannot create hsr debugfs directory [ 382.047100][T14041] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.237256][T14041] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.435446][T14041] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.724062][T14041] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.956531][ T5903] hsr_slave_0: left promiscuous mode [ 382.962613][ T5903] hsr_slave_1: left promiscuous mode [ 382.969082][ T5903] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 382.986304][ T5903] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 382.994415][ T5903] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.002476][ T5903] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.015113][ T5903] hsr_slave_0: left promiscuous mode [ 383.022015][ T5903] hsr_slave_1: left promiscuous mode [ 383.028374][ T5903] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.036008][ T5903] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.044048][ T5903] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.052449][ T5903] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.098105][ T5903] veth1_macvtap: left promiscuous mode [ 383.103685][ T5903] veth0_macvtap: left promiscuous mode [ 383.112357][ T5903] veth1_vlan: left promiscuous mode [ 383.118470][ T5903] veth0_vlan: left promiscuous mode [ 383.124973][ T5903] veth1_macvtap: left promiscuous mode [ 383.131851][ T5903] veth0_macvtap: left promiscuous mode [ 383.137991][ T5903] veth1_vlan: left promiscuous mode [ 383.143322][ T5903] veth0_vlan: left promiscuous mode [ 383.835020][ T5903] team0 (unregistering): Port device team_slave_1 removed [ 383.878915][ T5903] team0 (unregistering): Port device team_slave_0 removed [ 384.782969][ T5903] team0 (unregistering): Port device team_slave_1 removed [ 384.832313][ T5903] team0 (unregistering): Port device team_slave_0 removed [ 385.465653][T14041] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.501384][T14041] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.563860][T14041] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.625630][T14041] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.805189][T13863] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 385.820069][T13863] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 385.823941][T14063] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2286'. [ 385.847546][T13847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.864490][T13863] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 385.905165][T13863] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 385.978819][T13847] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.014266][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.021512][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.045700][ T6340] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.052907][ T6340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.204121][T14073] netlink: 'syz.8.2289': attribute type 1 has an invalid length. [ 386.214213][T14073] netlink: 168864 bytes leftover after parsing attributes in process `syz.8.2289'. [ 386.481419][T13863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.600111][T13867] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 386.635300][T13867] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 386.664796][T13863] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.673268][T13867] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 386.722305][T13867] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 386.744402][ T6355] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.751655][ T6355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.791701][ T6355] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.799032][ T6355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.844654][T13847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.131613][T13847] veth0_vlan: entered promiscuous mode [ 387.184320][T13847] veth1_vlan: entered promiscuous mode [ 387.273050][T13867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.339356][T13867] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.379529][ T6342] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.386785][ T6342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.393354][T14097] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2293'. [ 387.418356][ T6342] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.425558][ T6342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.443510][T13847] veth0_macvtap: entered promiscuous mode [ 387.482450][T13847] veth1_macvtap: entered promiscuous mode [ 387.608727][T13847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.635149][T13847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.687200][T13847] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.708368][T13847] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.724723][T13847] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.744170][T13847] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.780241][T13863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.048378][T13863] veth0_vlan: entered promiscuous mode [ 388.074086][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.092892][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.144815][T13863] veth1_vlan: entered promiscuous mode [ 388.173537][ T6344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.198200][ T6344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.289896][T13863] veth0_macvtap: entered promiscuous mode [ 388.312473][T13863] veth1_macvtap: entered promiscuous mode [ 388.449592][T13863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.479247][T13867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.502329][T13863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.525615][T13863] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.556229][T13863] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.576202][T13863] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.585105][T13863] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.780128][ T6342] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.919911][ T6342] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.072949][ T6342] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.153020][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.188447][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.227737][ T6342] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.308243][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.331706][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.356767][T13867] veth0_vlan: entered promiscuous mode [ 389.380729][T13867] veth1_vlan: entered promiscuous mode [ 389.463463][T13867] veth0_macvtap: entered promiscuous mode [ 389.483067][T13867] veth1_macvtap: entered promiscuous mode [ 389.539503][T13867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.551764][T13867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.579247][T13867] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.592235][T13867] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.603409][T13867] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.612879][T13867] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.869287][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.894327][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.903752][ T6342] bridge_slave_1: left allmulticast mode [ 389.912090][ T6342] bridge_slave_1: left promiscuous mode [ 389.919456][ T6342] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.937664][ T6342] bridge_slave_0: left allmulticast mode [ 389.943370][ T6342] bridge_slave_0: left promiscuous mode [ 389.957231][ T6342] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.375711][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 390.400629][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 390.419156][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 390.430872][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 390.448614][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 390.597840][ T6342] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 390.611947][ T6342] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 390.622884][ T6342] bond0 (unregistering): Released all slaves [ 390.673746][ T6347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.694000][ T6347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.757730][T14136] xfrm0 speed is unknown, defaulting to 1000 [ 390.767788][T14136] lo speed is unknown, defaulting to 1000 [ 390.796659][ T31] INFO: task syz.5.1656:11563 blocked for more than 143 seconds. [ 390.804485][ T31] Not tainted 6.15.0-rc7-syzkaller-00088-gd8d85ef0a631 #0 [ 390.814326][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 390.823407][ T31] task:syz.5.1656 state:D stack:26200 pid:11563 tgid:11562 ppid:10050 task_flags:0x400040 flags:0x00000004 [ 390.837352][ T31] Call Trace: [ 390.840692][ T31] [ 390.843653][ T31] __schedule+0x16e2/0x4cd0 [ 390.848872][ T31] ? __lock_acquire+0xaac/0xd20 [ 390.853771][ T31] ? schedule+0x165/0x360 [ 390.859381][ T31] ? __pfx___schedule+0x10/0x10 [ 390.864296][ T31] ? schedule+0x91/0x360 [ 390.868947][ T31] schedule+0x165/0x360 [ 390.873250][ T31] schedule_preempt_disabled+0x13/0x30 [ 390.879259][ T31] __mutex_lock+0x724/0xe80 [ 390.883830][ T31] ? __mutex_lock+0x51b/0xe80 [ 390.888824][ T31] ? nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 390.894695][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 390.900366][ T31] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 390.907770][ T31] ? skb_put+0x11b/0x210 [ 390.912063][ T31] ? __nlmsg_put+0xef/0x1b0 [ 390.917080][ T31] ? genlmsg_put+0x137/0x2e0 [ 390.921731][ T31] nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 390.927790][ T31] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 390.933570][ T31] ? genl_family_rcv_msg_attrs_parse+0x13b/0x2a0 [ 390.940268][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 390.947408][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 390.953835][ T31] genl_rcv_msg+0x60e/0x790 [ 390.960253][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 390.965342][ T31] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 390.971645][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 390.977935][ T31] ? __copy_skb_header+0xa7/0x550 [ 390.983024][ T31] netlink_rcv_skb+0x219/0x490 [ 390.989181][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 390.994257][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 391.000223][ T31] ? down_read+0x1ad/0x2e0 [ 391.004693][ T31] genl_rcv+0x28/0x40 [ 391.009152][ T31] netlink_unicast+0x75b/0x8d0 [ 391.013957][ T31] netlink_sendmsg+0x805/0xb30 [ 391.019067][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.024410][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 391.030480][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 391.035886][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.041239][ T31] __sock_sendmsg+0x21c/0x270 [ 391.046606][ T31] ____sys_sendmsg+0x505/0x830 [ 391.051420][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 391.056875][ T31] ? import_iovec+0x74/0xa0 [ 391.062773][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 391.067823][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 391.073104][ T31] ? __fget_files+0x2a/0x420 [ 391.078689][ T31] ? __fget_files+0x3a0/0x420 [ 391.083423][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 391.088712][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 391.094228][ T31] ? do_syscall_64+0xba/0x210 [ 391.099858][ T31] do_syscall_64+0xf6/0x210 [ 391.104415][ T31] ? clear_bhb_loop+0x60/0xb0 [ 391.109991][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.116043][ T31] RIP: 0033:0x7f58b0d8e969 [ 391.120581][ T31] RSP: 002b:00007f58aebf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 391.129519][ T31] RAX: ffffffffffffffda RBX: 00007f58b0fb5fa0 RCX: 00007f58b0d8e969 [ 391.137787][ T31] RDX: 0000000024000100 RSI: 0000200000001740 RDI: 0000000000000007 [ 391.145804][ T31] RBP: 00007f58b0e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 391.154267][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 391.165563][ T31] R13: 0000000000000000 R14: 00007f58b0fb5fa0 R15: 00007ffcd84ad218 [ 391.173899][ T31] [ 391.180651][ T31] [ 391.180651][ T31] Showing all locks held in the system: [ 391.196659][ T31] 1 lock held by khungtaskd/31: [ 391.201591][ T31] #0: ffffffff8df3dee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 391.212351][ T31] 3 locks held by kworker/u8:3/53: [ 391.220388][ T31] #0: ffff88814cf0d148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 391.232248][ T31] #1: ffffc90000be7c60 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 391.245419][ T31] #2: ffffffff8f2fa848 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 [ 391.255974][ T31] 2 locks held by kworker/u8:5/1124: [ 391.261319][ T31] 2 locks held by getty/5592: [ 391.267441][ T31] #0: ffff88803050e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 391.277834][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 391.288298][ T31] 3 locks held by kworker/1:5/5884: [ 391.293519][ T31] #0: ffff88801a080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 391.304681][ T31] #1: ffffc9000460fc60 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 391.318321][ T31] #2: ffff8880504d6240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x26b/0x3180 [ 391.328709][ T31] 3 locks held by kworker/u8:8/5903: [ 391.334014][ T31] #0: ffff888020afd148 ((wq_completion)cfg80211){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 391.345423][ T31] #1: ffffc9000466fc60 ((work_completion)(&(&rdev->dfs_update_channels_wk)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 391.360307][ T31] #2: ffffffff8f2fa848 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_dfs_channels_update_work+0xb6/0x630 [ 391.372166][ T31] 3 locks held by kworker/0:7/5915: [ 391.377665][ T31] #0: ffff88801a080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 391.389832][ T31] #1: ffffc9000467fc60 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 391.400815][ T31] #2: ffffffff8df439b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b7/0x730 [ 391.412275][ T31] 6 locks held by kworker/u8:10/6342: [ 391.418228][ T31] #0: ffff88801aef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 391.429648][ T31] #1: ffffc90019c47c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 391.440503][ T31] #2: ffffffff8f2edd10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x145/0xbd0 [ 391.450526][ T31] #3: ffffffff8f2fa848 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 391.460571][ T31] #4: ffff888036308768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 391.472664][ T31] #5: ffffffff8df439b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b7/0x730 [ 391.484085][ T31] 2 locks held by syz.2.1117/9439: [ 391.491139][ T31] #0: ffffffff8f35ee30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 391.530473][ T31] #1: ffffffff8e216ce8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 391.570179][ T31] 2 locks held by syz.5.1656/11563: [ 391.597906][ T31] #0: ffffffff8f35ee30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 391.645896][ T31] #1: ffffffff8e216ce8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 391.676282][ T31] 2 locks held by syz.3.1764/11950: [ 391.681557][ T31] #0: ffffffff8f35ee30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 391.710699][ T31] #1: ffffffff8e216ce8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 391.732243][ T31] 2 locks held by syz.3.1764/11957: [ 391.738826][ T31] #0: ffffffff8f35ee30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 391.761928][ T31] #1: ffffffff8e216ce8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 391.774800][ T31] 3 locks held by syz.7.2090/13223: [ 391.786067][ T31] #0: ffffffff8f35ee30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 391.794359][ T31] #1: ffff8880216aa6d0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 391.807201][ T31] #2: ffffffff8e216ce8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xd9/0x1280 [ 391.819921][ T31] 2 locks held by syz-executor/13867: [ 391.825336][ T31] #0: ffff88804a02cd80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x1fe/0x500 [ 391.850469][ T31] #1: ffff88804a02c078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 391.862201][ T31] 2 locks held by syz.4.2288/14070: [ 391.874535][ T31] #0: ffffffff8f35ee30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 391.892320][ T31] #1: ffffffff8e216ce8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 391.903603][ T31] 6 locks held by syz-executor/14136: [ 391.917700][ T31] #0: ffffffff8f2edd10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x317/0x590 [ 391.933191][ T31] #1: ffffffff8f0622b0 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x19a/0x270 [ 391.945326][ T31] #2: ffffffff8f062470 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1d2/0x270 [ 391.964229][ T31] #3: ffff88804fd80f60 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xee/0x5c0 [ 391.975645][ T31] #4: ffff88804fd81258 (&rxe->usdev_lock){+.+.}-{4:4}, at: rxe_query_port+0x7e/0x3b0 [ 391.990488][ T31] #5: ffffffff8f2fa848 (rtnl_mutex){+.+.}-{4:4}, at: ib_get_eth_speed+0x151/0x7b0 [ 392.000173][ T31] 1 lock held by syz.8.2300/14140: [ 392.005332][ T31] #0: ffffffff8f2fa848 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x37a/0x1d90 [ 392.014915][ T31] 1 lock held by syz.8.2300/14141: [ 392.020355][ T31] #0: ffffffff8f2fa848 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x37a/0x1d90 [ 392.029914][ T31] [ 392.032280][ T31] ============================================= [ 392.032280][ T31] [ 392.041057][ T31] NMI backtrace for cpu 1 [ 392.041082][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc7-syzkaller-00088-gd8d85ef0a631 #0 PREEMPT(full) [ 392.041106][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 392.041118][ T31] Call Trace: [ 392.041126][ T31] [ 392.041134][ T31] dump_stack_lvl+0x189/0x250 [ 392.041166][ T31] ? __wake_up_klogd+0xd9/0x110 [ 392.041192][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 392.041221][ T31] ? __pfx__printk+0x10/0x10 [ 392.041255][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 392.041281][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 392.041300][ T31] ? irqentry_exit+0x74/0x90 [ 392.041325][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 392.041360][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 392.041384][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 392.041409][ T31] watchdog+0xfee/0x1030 [ 392.041438][ T31] ? watchdog+0x1de/0x1030 [ 392.041474][ T31] kthread+0x70e/0x8a0 [ 392.041503][ T31] ? __pfx_watchdog+0x10/0x10 [ 392.041527][ T31] ? __pfx_kthread+0x10/0x10 [ 392.041554][ T31] ? __pfx_kthread+0x10/0x10 [ 392.041577][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 392.041599][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 392.041624][ T31] ? __pfx_kthread+0x10/0x10 [ 392.041656][ T31] ret_from_fork+0x4b/0x80 [ 392.041676][ T31] ? __pfx_kthread+0x10/0x10 [ 392.041700][ T31] ret_from_fork_asm+0x1a/0x30 [ 392.041737][ T31] [ 392.041748][ T31] Sending NMI from CPU 1 to CPUs 0: [ 392.203517][ C0] NMI backtrace for cpu 0 [ 392.203533][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-rc7-syzkaller-00088-gd8d85ef0a631 #0 PREEMPT(full) [ 392.203555][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 392.203565][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 392.203591][ C0] Code: c3 d4 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 8f 11 00 f3 0f 1e fa fb f4 98 d4 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 392.203606][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 392.203621][ C0] RAX: ef02f45646f1ef00 RBX: ffffffff81977108 RCX: ef02f45646f1ef00 [ 392.203635][ C0] RDX: 0000000000000001 RSI: ffffffff8d74de43 RDI: ffffffff8bc1f3c0 [ 392.203647][ C0] RBP: ffffffff8dc07ec0 R08: ffff8880b8832b5b R09: 1ffff1101710656b [ 392.203660][ C0] R10: dffffc0000000000 R11: ffffed101710656c R12: ffffffff8f7f3270 [ 392.203673][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a48 [ 392.203684][ C0] FS: 0000000000000000(0000) GS:ffff8881260c2000(0000) knlGS:0000000000000000 [ 392.203698][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 392.203710][ C0] CR2: 000056079eace4d8 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 392.203725][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 392.203735][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 392.203745][ C0] Call Trace: [ 392.203752][ C0] [ 392.203759][ C0] default_idle+0x13/0x20 [ 392.203783][ C0] default_idle_call+0x74/0xb0 [ 392.203808][ C0] do_idle+0x1e8/0x510 [ 392.203829][ C0] ? __pfx_do_idle+0x10/0x10 [ 392.203843][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 392.203882][ C0] cpu_startup_entry+0x44/0x60 [ 392.203898][ C0] rest_init+0x2de/0x300 [ 392.203922][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 392.203943][ C0] start_kernel+0x470/0x4f0 [ 392.203968][ C0] x86_64_start_reservations+0x2a/0x30 [ 392.203985][ C0] x86_64_start_kernel+0x66/0x70 [ 392.204001][ C0] common_startup_64+0x13e/0x147 [ 392.204036][ C0] [ 392.415929][T14136] lo speed is unknown, defaulting to 1000 [ 392.425544][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 392.432453][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc7-syzkaller-00088-gd8d85ef0a631 #0 PREEMPT(full) [ 392.444276][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 392.454347][ T31] Call Trace: [ 392.457640][ T31] [ 392.460585][ T31] dump_stack_lvl+0x99/0x250 [ 392.465207][ T31] ? __asan_memcpy+0x40/0x70 [ 392.469832][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 392.475054][ T31] ? __pfx__printk+0x10/0x10 [ 392.479702][ T31] panic+0x2db/0x790 [ 392.483625][ T31] ? __pfx_panic+0x10/0x10 [ 392.488144][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 392.493973][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 392.499389][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 392.505580][ T31] watchdog+0x102d/0x1030 [ 392.509949][ T31] ? watchdog+0x1de/0x1030 [ 392.514390][ T31] kthread+0x70e/0x8a0 [ 392.518480][ T31] ? __pfx_watchdog+0x10/0x10 [ 392.523177][ T31] ? __pfx_kthread+0x10/0x10 [ 392.527788][ T31] ? __pfx_kthread+0x10/0x10 [ 392.532421][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 392.537651][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 392.542915][ T31] ? __pfx_kthread+0x10/0x10 [ 392.548093][ T31] ret_from_fork+0x4b/0x80 [ 392.552735][ T31] ? __pfx_kthread+0x10/0x10 [ 392.557351][ T31] ret_from_fork_asm+0x1a/0x30 [ 392.562142][ T31] [ 392.565463][ T31] Kernel Offset: disabled [ 392.569808][ T31] Rebooting in 86400 seconds..